TorrentFlux跨站请求伪造及远程PHP脚本执行漏洞

BUGTRAQ ID: 28846 TorrentFlux是使用PHP编写的BitTorrent下载客户端。如果架设在Web服务器上，便可以通过Web界面对BitTorrent下载进行管理。 TorrentFlux在处理下载文件的浏览时存在漏洞，远程攻击者可能利用此漏洞在用户系统上执行恶意代码。 如果用户受骗使用TorrentFlux下载了包含有backdoor.php文件的torrent的话，则在http://localhost/torrentflux2.3/html/downloads/USERNAME/ 查看该文件时就会导致执行该文件。无需口令便可以访问这个文件夹，但需要知道用户名...

Aztech ADSL routers backdoor

It's possible to obtain administrative access with undocumented account isp/isp...

Unfixed XSS vulnerability at www.isvicre-sigorta.com.tr

Security researcher BackDoor, has submitted on 17/04/2008 a cross-site-scripting XSS vulnerability affecting www.isvicre-sigorta.com.tr, which at the time of submission ranked 1157726 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/04/2008. ...

Unfixed XSS vulnerability at dorylaion.anatolianrock.com

Security researcher BackDoor, has submitted on 04/11/2008 a cross-site-scripting XSS vulnerability affecting dorylaion.anatolianrock.com, which at the time of submission ranked 49082 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/09/2009. I...

Explain in detail the hacker used a remote control Trojan horse-vulnerability warning-the black bar safety net

Like browsing online the news people will often see someone privacy is hack theft, or in order to blackmail the victim thing. Here we might ask, How do they do it? In fact, the answer is very simple, but is the use of a remote Trojan to achieve control, the following the author will for the hacki...

Common left the back door approach-vulnerability warning-the black bar safety net

For us such a dish hand, finally got the servers is not easy, if it is found it miserable. In fact, the open back door methods there are many, below I to talk, I've learned of several ways. 1. Setuid cp /bin/sh /tmp/. root chmod u-s /tmp/. root Add suid bit to the shell on, although very simple,...

Unfixed XSS vulnerability at www.e-sehir.com

Security researcher BackDoor, has submitted on 20/03/2008 a cross-site-scripting XSS vulnerability affecting www.e-sehir.com, which at the time of submission ranked 75806 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/04/2008. It is current...

The admin back-end to hide the ASP Backdoor-vulnerability warning-the black bar safety net

Today that is in the administrator backend login screen hidden our back door, which is relatively safe, because the administrator of the inlet is not Often change, as long as his login screen on our back door just in! 1. From our SHELL found on the administrator portal page 2. Edit it in the fina...

Unfixed XSS vulnerability at www.tm.uka.de

Security researcher BackDoor, has submitted on 14/02/2008 a cross-site-scripting XSS vulnerability affecting www.tm.uka.de, which at the time of submission ranked 151035 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is currentl...

Unfixed XSS vulnerability at www.aramaturka.com

Security researcher BackDoor, has submitted on 02/06/2008 a cross-site-scripting XSS vulnerability affecting www.aramaturka.com, which at the time of submission ranked 781255 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is...

Discuz! 6 the background to get the Shell methods-vulnerability warning-the black bar safety net

Note: article first wolves（www.wolvez.org that post by the original author, please submit to the evil octal, reproduced please indicate the original author and source. If the background can online edit the template while following the method you can get the SHELL. 1. Background edit...

Update Protections against Recent Malware Threats (04-Feb-08)

Malware is a software designed to infiltrate or damage a computer system without the owner's informed consent. It is a general name for a variety of forms of hostile, intrusive, or annoying programs like Viruses, worms, Adware, Trojans, and spyware that exploit unprotected clients, using network...

Unfixed XSS vulnerability at www.juranek.pl

Security researcher BackDoor, has submitted on 02/03/2008 a cross-site-scripting XSS vulnerability affecting www.juranek.pl, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2008. It is currently...

Unfixed XSS vulnerability at www.loveburned.net

Security researcher BackDoor, has submitted on 02/03/2008 a cross-site-scripting XSS vulnerability affecting www.loveburned.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/03/2008. It is currentl...

Unfixed XSS vulnerability at sivu.byterapers.com

Security researcher BackDoor, has submitted on 02/03/2008 a cross-site-scripting XSS vulnerability affecting sivu.byterapers.com, which at the time of submission ranked 3047428 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2008. It is...

Unfixed XSS vulnerability at smitsmat.com

Security researcher BackDoor, has submitted on 02/03/2008 a cross-site-scripting XSS vulnerability affecting smitsmat.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2008. It is currently...

Unfixed XSS vulnerability at www.tb-rauxel.de

Security researcher BackDoor, has submitted on 02/03/2008 a cross-site-scripting XSS vulnerability affecting www.tb-rauxel.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is currently...

Unfixed XSS vulnerability at www.ridgemarchingband.org

Security researcher BackDoor, has submitted on 02/03/2008 a cross-site-scripting XSS vulnerability affecting www.ridgemarchingband.org, which at the time of submission ranked 11415435 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/03/2008. ...

Unfixed XSS vulnerability at havoc.hu

Security researcher BackDoor, has submitted on 02/03/2008 a cross-site-scripting XSS vulnerability affecting havoc.hu, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2008. It is currently unfixed...

Unfixed XSS vulnerability at www.warehouse.net

Security researcher BackDoor, has submitted on 02/03/2008 a cross-site-scripting XSS vulnerability affecting www.warehouse.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2008. It is currently...