深澜软件鸡肋漏洞可被getshell

简要描述： 深澜软件鸡肋漏洞造成getshell 详细说明： 有好几个鸡肋漏洞，就造成了getshell。 本例以中枪的陕西科技大学为例。 1.爆路径问题http://xxxx.xx:8080/global.php，所有均存在路径泄露 不过实际路径是/srun3/srun/services/ （1）80端口路径/srun3/web/ （2）8800端口路径/srun3/srun/services/ （3）8080/8081端口路径/srun3/srun/web/ 2.管理后台（8080/8081端口），默认口令 support...

Cogent DataHub Vulnerabilities

OVERVIEW Independent researcher Alain Homewood has identified four vulnerabilities in the Cogent Real-Time Systems DataHub application. Cogent Real-Time Systems has produced a new version that mitigates three of the four identified vulnerabilities; they have recommended a mitigation for the...

D-Link DSL-2750B ADSL Router跨站请求伪造漏洞

No description provided by source. Exploit Title : D-Link DSL-2750B ADSL Router CSRF Vulnerability Date : 10-02-2014 Author : [email protected] Vendor site : http://www.d-link.com Version : DSL-2750B Tested on : Firmware Version: EU2.02; Hardware Version: B1 The D-Link DSL-2750B's web interface...

D-Link DSL-2750B ADSL Router - CSRF Vulnerability

Exploit for hardware platform in category web applications Exploit Title : D-Link DSL-2750B ADSL Router CSRF Vulnerability Date : 10-02-2014 Author : email protected Vendor site : http://www.d-link.com Version : DSL-2750B Tested on : Firmware Version: EU2.02; Hardware Version: B1 The D-Link...

Open-Xchange Security Advisory 2014-01-17

Product: Open-Xchange AppSuite Vendor: Open-Xchange GmbH Internal reference: 30357 Bug ID Vulnerability type: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page Vulnerable version: 7.4.1 and earlier Vulnerable component: backend Fixed version: 7.2.2-rev29, 7.4.0-rev24,...

Open-Xchange Security Advisory 2014-01-06

Open-Xchange Security Advisory 2014-01-06 Product: Open-Xchange AppSuite Vendor: Open-Xchange GmbH Internal reference: 30203 Bug ID Vulnerability type: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page Vulnerable version: 7.4.0 and earlier Vulnerable component: backend Fixe...

CVE-2013-6400

Xen 4.2.x and 4.3.x, when using Intel VT-d and a PCI device has been assigned, does not clear the flag that suppresses IOMMU TLB flushes when unspecified errors occur, which causes the TLB entries to not be flushed and allows local guest administrators to cause a denial of service host crash or...

TP-Link TD-8840t - CSRF Vulnerability

TP-Link TD-8840t is a ADSL2+ Ethernet/USB Modem Router which works with a 24-Mbps downstream connection. Usage Info TP-Link TD-8840t is a ADSL2+ Ethernet/USB Modem Router which works with a 24-Mbps downstream connection. You can easily change the default user's admin password by the default route...

TP-Link TD-8840t - Cross-Site Request Forgery

TP-Link TD-8840t - Cross-Site Request Forgery Exploit Title: TP-Link TD-8840t CSRF Vulnerability Author: MOHAMMED AL-SAGGAFLEGNED-SEIYUN E-mail: [email protected]/mohammed.alsaggaf2010 Category: Hardware Google Dork: N/A Vendor: http://www.tp-link.com Firmware Version:...

Open-Xchange Security Advisory 2013-11-06

Product: Open-Xchange AppSuite Vendor: Open-Xchange GmbH Internal reference: 29147 Bug ID Vulnerability type: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page Vulnerable version: prior to 7.4.0 Vulnerable component: backend Fixed version: 7.2.2-rev25, 7.4.0-rev14 Report...

ONO Hitron CDE-30364 Router Denial Of Service

!/usr/bin/python ----------------------------------------------------------------------------------------- Description: ----------------------------------------------------------------------------------------- Hitron Technologies CDE-30364 is a famous ONO Router. The Hitron Technologies CDE-30364...

5 XSS vulnerabilities in setup, chart display, process list, and logo link.

PMASA-2013-9 Announcement-ID: PMASA-2013-9 Date: 2013-07-28 Updated: 2013-07-30 Summary 5 XSS vulnerabilities in setup, chart display, process list, and logo link. Description In the setup/index.php, using a crafted hash with a Javascript event, untrusted JS code could be executed. In the Display...

Static HTTP Server 1.0 - Local Overflow (SEH)

Static HTTP Server 1.0 - Local Overflow SEH !/usr/bin/env python import os TitleStatic HTTP Server SEH Overflow - HTTP Config - httptiplist Discovered and ReportedJune 2013 Discovered/Exploited ByJacob Holcomb/Gimppy, Security Analyst @ Independent Security Evaluators...

detect_transparent_proxy

This plugin tries to detect transparent proxies. The procedure for detecting transparent proxies is simple, I try to connect to a series of IP addresses, to the port 80, if all of them return an opened socket, then its the proxy server responding. Plugin type Infrastructure Options This plugin...

Microsoft Windows 'HTTP.sys'远程拒绝服务漏洞(CVE-2013-1305)(MS13-039)

BUGTRAQ ID: 59784 CVECAN ID: CVE-2013-1305 Microsoft Windows是微软公司推出的一系列操作系统。 当 HTTP 协议堆栈 HTTP.sys 不正确地处理恶意 HTTP 标头时，Windows Server 2012 和 Windows 8 中存在一个拒绝服务漏洞。成功利用此漏洞的攻击者可能通过向受影响的 Windows 服务器或客户端发送特制 HTTP 标头在 HTTP 协议堆栈中触发一个无限循环。 0 Microsoft Windows Windows Server 2012 Microsoft Windows RT...

TP-Link TD-8817 CSRF Vulnerability

CSRF Vulnerability on TP-Link TD-8817 ADSL Router http://www.tp-link.com/lk/products/details/?model=TD-8817 ====================================================================== | | | | | | \ \ / / | | | | | |/' | \ V / | | | | ' | /| \ \ /\ / / ' \ / \ | || | | | \ |/ /\ V V /| | | | / /^\ ...

DDIVRT-2013-50 EverFocus EPARA264-16X1 Directory Traversal

Title ----- DDIVRT-2013-50 EverFocus EPARA264-16X1 Directory Traversal Severity -------- High Date Discovered --------------- January 22, 2013 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: r@b13$ Vulnerability Description ------------------------- The...

EverFocus Multiple Devices Directory Traversal (Mar 2013) - Active Check

Multiple EverFocus devices are prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2013-0655

The client in Schneider Electric Software Update SESU Utility 1.0.x and 1.1.x does not ensure that updates have a valid origin, which allows man-in-the-middle attackers to spoof updates, and consequently execute arbitrary code, by modifying the data stream on TCP port 80...

CVE-2013-0655

The client in Schneider Electric Software Update SESU Utility 1.0.x and 1.1.x does not ensure that updates have a valid origin, which allows man-in-the-middle attackers to spoof updates, and consequently execute arbitrary code, by modifying the data stream on TCP port 80...