phpFileManager 0.9.8 - CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: CSRF Remote Backdoor Shell Google Dork: intitle: CSRF Remote Backdoor Shell Date: 2015-07-29 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: phpfm.sourceforge.net Software Link:...

phpFileManager 0.9.8 - Cross-Site Request Forgery

phpFileManager 0.9.8 - Cross-Site Request Forgery Exploit Title: CSRF Remote Backdoor Shell Google Dork: intitle: CSRF Remote Backdoor Shell Date: 2015-07-29 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: phpfm.sourceforge.net Software Link:...

PHP File Manager Backdoor Vulnerability

PHP File Manager consists of a default backdoor user. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

phpFileManager 0.9.8 - Cross-Site Request Forgery

Exploit Title: CSRF Remote Backdoor Shell Google Dork: intitle: CSRF Remote Backdoor Shell Date: 2015-07-29 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: phpfm.sourceforge.net Software Link: phpfm.sourceforge.net Version: 0.9.8 Tested on: windows 7 SP1...

PHP File Manager Riddled With Vulnerabilities, Including Backdoor

Multiple critical vulnerabilities have existed, some for nearly five years, in PHP File Manager, a web-based file manager used by several high profile corporations. According to Sijmen Ruwhof, a security consultant and penetration tester based in the Netherlands, some of the issues have been...

Free Tool Looks for HackingTeam Malware

UPDATE–Researchers at Rook Security have released a new tool that looks for HackingTeam malware on target systems, and also have published a set of indicators of compromise to help organizations look for signs of an infection from the intrusion software. The HackingTeam Remote Control System is t...

Backdoor credentials found in 4 TOTOLINK router models

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: Backdoor credentials found in 4 TOTOLINK router models Advisory URL: https://pierrekim.github.io/advisories/2015-totolink-0x03.txt Blog URL:...

TOTOLINK routers multiple security vulnerabilities

Code execution, backdoor account, CSRF, XSS...

Backdoor and RCE found in 8 TOTOLINK router models

Hello, Please find a text-only version below sent to security mailing-lists. The complete version on analysing the backdoor in TOTOLINK products is posted here: https://pierrekim.github.io/blog/2015-07-16-backdoor-and-RCE-found-in-8-TOTOLINK-products.html === text-version of the advisory without...

Occupy South Korea 8 0%market TOTOLINK router was traced to the presence of the back door, affecting 5 million router-vulnerability warning-the black bar safety net

TOTOLINK router in the Korean market share of 8 2. 3 per cent. By Shenzhen Zhong Tang tech company responsible for the product development and manufacturing. Vulnerability description By analyzing the most recent firmware as well as in a real router on the test after researchers found that 8...

8 TOTOLINK Router Models - Backdoor and RCE Vulnerabilities

8 TOTOLINK router models have backdoor hardcoded credentials and suffer from remote command execution vulnerabilities. Advisory Information Title: Backdoor and RCE found in 8 TOTOLINK router models Advisory URL: https://pierrekim.github.io/advisories/2015-totolink-0x02.txt Blog URL:...

4 TOTOLINK Router Models - Backdoor Credentials Vulnerability

4 TOTOLINK router models are backdoored with hardcoded credentials. Advisory Information Title: Backdoor credentials found in 4 TOTOLINK router models Advisory URL: https://pierrekim.github.io/advisories/2015-totolink-0x03.txt Blog URL:...

NSA Releases Open Source Network Security Tool for Linux

The United States National Security Agency NSA has released a network security tool for Government and the private sectors to help secure their networks against cyber attacks. Dubbed Systems Integrity Management Platform SIMP, the tool is now publicly available on the popular source code sharing...

TotoLink Routers Plagued By Serious RCE, XSS, CSRF Vulnerabilities

A slew of routers manufactured in China are fraught with vulnerabilities, some which have existed in products for as long as six years. Nearly 20 different routers made by the electronics company TotoLink contain multiple remote code execution bugs, suffer from XSS and CSRF vulnerabilities, and...

4 TOTOLINK Router Models - Backdoor Credentials

Advisory Information Title: Backdoor credentials found in 4 TOTOLINK router models Advisory URL: https://pierrekim.github.io/advisories/2015-totolink-0x03.txt Blog URL: https://pierrekim.github.io/blog/2015-07-16-backdoor-credentials-found-in-4-TOTOLINK-products.html Date published: 2015-07-16...

4 TOTOLINK Routers Backdoored

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: Backdoor credentials found in 4 TOTOLINK router models Advisory URL: https://pierrekim.github.io/advisories/2015-totolink-0x03.txt Blog URL:...

8 TOTOLINK Router Models - Backdoor Access Remote Code Execution

8 TOTOLINK Router Models - Backdoor Access Remote Code Execution Advisory Information Title: Backdoor and RCE found in 8 TOTOLINK router models Advisory URL: https://pierrekim.github.io/advisories/2015-totolink-0x02.txt Blog URL:...

8 TOTOLINK Routers Backdoored / Command Execution

Hello, Please find a text-only version below sent to security mailing-lists. The complete version on analysing the backdoor in TOTOLINK products is posted here: https://pierrekim.github.io/blog/2015-07-16-backdoor-and-RCE-found-in-8-TOTOLINK-products.html === text-version of the advisory without...

4 TOTOLINK Router Models - Backdoor Credentials

4 TOTOLINK Router Models - Backdoor Credentials Advisory Information Title: Backdoor credentials found in 4 TOTOLINK router models Advisory URL: https://pierrekim.github.io/advisories/2015-totolink-0x03.txt Blog URL:...

8 TOTOLINK Router Models - Backdoor Access / Remote Code Execution

Advisory Information Title: Backdoor and RCE found in 8 TOTOLINK router models Advisory URL: https://pierrekim.github.io/advisories/2015-totolink-0x02.txt Blog URL: https://pierrekim.github.io/blog/2015-07-16-backdoor-and-RCE-found-in-8-TOTOLINK-products.html Date published: 2015-07-16 Vendors...