9524 matches found
程氏舞曲cms存储型XSS
简要描述： 程氏舞曲cms官方演示站存储型XSS 详细说明： 程氏舞曲最新版如下图的所有上图片传点均存在存储型xss PS:对程氏cms不太了解只看到了照片上传和主页相关的上传背景处.. 因为照片需要背管理员审核 所以应该可以打到管理员的cookies 漏洞证明： 打开 抓取返回包看到 修改 在 .png 后面加 " onerror = alert1; 看到输出将 " 转意为 " 于是借用sql注入思路宽字符绕过 构造exp .png %bf"%bf" onerror =alert1; 如下图 触发xss...
Mac OS X Multiple Vulnerabilities (Security Update 2014-001) (BEAST)
The remote host is running a version of Mac OS X 10.7 or 10.8 that does not have Security Update 2014-001 applied. This update contains several security-related fixes for the following components : - Apache - App Sandbox - ATS - Certificate Trust Policy - CFNetwork Cookies - CoreAnimation - Date...
Low: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.1 security update
Updated Red Hat JBoss Enterprise Application Platform 6.2.1 packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score,...
Dexter (CasinoLoader) Panel - SQL Injection Exploit
Exploit for multiple platform in category web applications import pycurl import urllib import cStringIO import base64 import argparse import sys import string import pygeoip version = "0.1-httpbots-PoC" def PrintHelp: global version print "usage: dexter.PoC.py -h action gateway url" print "" prin...
[SECURITY] Fedora 19 Update: curl-7.29.0-13.fc19
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
CTERA 3.2.29.0/3.2.42.0 - Persistent Cross-Site Scripting
Exploit Title: CTERA Project Folders - Stored XSS Date: 11-Mar-2013 Exploit Author: Luigi Vezzoso Vendor Homepage: http://www.ctera.com Version: 3.2.29.0 and 3.2.42.0 Tested on: ctera os CVE : CVE-2013-2639 OVERVIEW Standard Ctera User can define a particular “description” for a ProjectFolder tha...
CVE-2014-0815
The intent: URL implementation in Opera before 18 on Android allows attackers to read local files by leveraging an interaction error, as demonstrated by reading stored cookies...
Code injection
The intent: URL implementation in Opera before 18 on Android allows attackers to read local files by leveraging an interaction error, as demonstrated by reading stored cookies...
CVE-2014-0815
The CVE-2014-0815 issue concerns Opera for Android versions before 18, where the browser’s URL/intent-scheme handling contains an interaction error that can disclose local data such as stored cookies. The affected component is Opera’s URL implementation, and exploitation would involve processing ...
CVE-2014-0815
The intent: URL implementation in Opera before 18 on Android allows attackers to read local files by leveraging an interaction error, as demonstrated by reading stored cookies...
Easy POS System - 'login.php' SQL Injection
Exploit: Easy POS System - SQL Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + Vendor Homepage: http://sourceforge.net/projects/easypossystem/ 1 Sql Injection POST Time Based Blind Note: Time based Injection on POST requests using burp, as output indicated. You...
Google Chrome to encrypt Stored Cookies by default to enhance browser security
When you visit a website, it stores some information on your system through a web browser for later use i.e. Login information, so you do not have to re-login to your website every time you visit the same website on the same browser. Cookies are usually stored as plain text or in the database by...
[Pinpoint] Enumerates WebPage Components to help identify the Infected Files
Pinpoint works like wget/curl in that it just fetches a webpage without rendering any script. Pinpoint will then try to determine which links are used to make up the webpage such as Javascript, CSS, frames, and iframes and downloads those files too some Javascript content will produce incorrect...
[FoxAnalysis] Firefox Internet History Analysis Software
FoxAnalysis Plus is a software tool for extracting, viewing and analysing internet history from the Mozilla Firefox web browser. The main features are described below: Extract History :: Extract history regarding bookmarks, cookies, downloads, favicons, form entries, logins, saved sessions and...
CVE-2013-7222
config/initializers/secrettoken.rb in Fat Free CRM before 0.12.1 has a fixed FatFreeCRM::Application.config.secrettoken value, which makes it easier for remote attackers to spoof signed cookies by referring to the key in the source code...
Code injection
config/initializers/secrettoken.rb in Fat Free CRM before 0.12.1 has a fixed FatFreeCRM::Application.config.secrettoken value, which makes it easier for remote attackers to spoof signed cookies by referring to the key in the source code...
MyBB多个SQL注入和跨站脚本漏洞
BUGTRAQ ID: 64570 MyBB是一个功能完整并且非常实用的论坛软件。 MyBB 1.6.12之前版本在实现上存在多个SQL注入及跨站脚本漏洞，成功利用后可使攻击者窃取cookie身份验证凭证、执行未授权数据库操作。这些漏洞源于没有正确过滤某些输入，这些输入相关ACP内编辑表情符号、用Akismet删除帖子、视频MyCode、表情符号提示符等。 0 MyBB MyBB 1.x 厂商补丁： MyBB ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mybb.com/...
CVE-2012-0264
op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to have an unspecified impact via unspecified vectors...