NoticeBoardPro 1.0 - Multiple Vulnerabilities

No description provided by source. ------------------------------------------------------------------------ Software................NoticeBoardPro 1.0 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.NoticeBoardPro.com/ Discovery...

jQuery PHP Arbitrary Upload

Arbitrary Upload on jQuery/PHP + Date: 23/06/2014 + Risk: High + CWE Number : CWE-264 + Author: Felipe Andrian Peixoto + Vendor Homepage: http://rafaelcouto.com.br/upload-dinamico-com-php-jquery/sthash.uVv21WU9.dpuf + Contact: [email protected] + Tested on: Windows 7 and Linux + Dork:...

PhotoWIFI Lite 1.0 Command Injection / LFI / File Upload

Document Title: =============== PhotoWIFI Lite v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1239 Release Date: ============= 2014-03-27 Vulnerability Laboratory ID VL-ID: ==================================== 123...

BigDump 0.35b Shell Upload

Arbitrary Upload on BigDump v0.35b + Date: 23/03/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.ozerov.de/bigdump/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: bigdump.php + Version: v0.35b + Exploit :...

BigDump 0.35b - Arbitrary File Upload

BigDump 0.35b - Arbitrary File Upload + Arbitrary Upload on BigDump v0.35b + Date: 23/03/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.ozerov.de/bigdump/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: bigdump.php +...

Bluetooth Photo Share Pro v2.0 iOS - Multiple Vulnerabilities

Document Title: =============== Bluetooth Photo Share Pro v2.0 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1218 Release Date: ============= 2014-02-26 Vulnerability Laboratory ID VL-ID:...

Wordpress Frontend Upload插件任意文件上传漏洞

No description provided by source. Exploit Title: Frontend Upload Wordpress Plugin - File Arbitrary Upload Date: 10/02/2014 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Frontend Upload...

Photo Video Album Transfer 1.0 iOS - Multiple Vulnerabilities

Document Title: =============== Photo Video Album Transfer 1.0 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1166 Release Date: ============= 2013-12-10 Vulnerability Laboratory ID VL-ID:...

Print n Share 5.5 iOS - Multiple Web Vulnerabilities

Document Title: =============== Print n Share v5.5 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1154 Release Date: ============= 2013-12-06 Vulnerability Laboratory ID VL-ID: ==================================== 1154...

Tomcat/JBossWeb: Arbitrary file upload via deserialization

It was possible for an attacker, using complex and limited conditions, to upload a malicious JSP to a Tomcat server and then trigger the execution of that JSP...

Copy to WebDAV v1.1 iOS - Multiple Web Vulnerabilities

Document Title: =============== Copy to WebDAV v1.1 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1044 Release Date: ============= 2013-08-07 Vulnerability Laboratory ID VL-ID: ==================================== 104...

Innovation CMS uploadImageFile_do. jsp page file upload vulnerability-vulnerability warning-the black bar safety net

Brief description: Innovation CMS any upload JSP executable script file vulnerability, affecting a large number of office, municipal government website. Detailed description: Before the vulnerability is reported in a cnvd, it should be cnvd requirements to the vulnerability reported to the tick. ...

Multiple WordPress WPScientist Themes - Arbitrary File Upload

source: https://www.securityfocus.com/bid/57152/info Multiple themes from WPScientist for WordPress are prone to an arbitrary file-upload vulnerability because it fails to adequately validate files before uploading them. An attacker may leverage this issue to upload arbitrary files to the affecte...

BigDump 0.32b XSS / Shell Upload / SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Tiwtte: @Ur0b0r0x Email: [email protected] Line: GreyHat Home: cyberpunk-ur0x.blogspot.com Exploit Title: BigDump ver.0.32b - Arbitrary Upload /...

anwsion最新版本任意上传漏洞(通杀所有。。。)

简要描述： 怎么说呢,虽然程序热门,黑市价钱很高！但是得为wooyun贡献点东西吧！！！！白帽子精神！！！！ 希望厂家给个礼物, ^^ 详细说明： 上传附件地方没有好好处理文件后缀问题: 判断的是文件头没有判断后缀问题。。。。。。。。 漏洞证明： http://wenda.anwsion.com/uploads/questions/20121126/e826a3e05a4beb6c24373ba014fe39f8.php pass 合并图片一句话木马成功！！！！！ http://wenda.anwsion.com/robots.txt...

SHOPEX 4.8.5后台任意上传获取webshell

简要描述： SHOPEX 4.8.5后台任意上传获取webshell，藏了很久了 发了吧 详细说明： SHOPEX 4.8.5后台任意上传获取webshell，本地构造GIF89欺骗头文件一句话木马，上传并替换plugins下的PHP文件原文件自动备份，导致获取WEBSHELL 漏洞证明：...

InduSoft Web Studio Arbitrary Upload Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'InduSoft Web Studio Arbitrary Upload...

InduSoft Web Studio Arbitrary Upload Remote Code Execution Vulnerability

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

WebPageTest Arbitrary PHP File Upload

Exploit for php platform in category web applications This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Mobile USB Drive HD - Multiple Local File Inclusion Arbitrary File Upload Vulnerabilities

Mobile USB Drive HD - Multiple Local File Inclusion Arbitrary File Upload Vulnerabilities source: https://www.securityfocus.com/bid/60847/info Mobile USB Drive HD is prone to multiple local file-include and arbitrary file-upload vulnerabilities because it fails to adequately validate files before...