PHP arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

Vulnerability details: This vulnerability exists in php in a very commonly used function: the moveuploadedfiles, the developer always use this function to move the uploaded file,this function will check is upload whether the file is a legitimate filewhether it is through the HTTP post mechanism t...

Exploit for Code Injection in Microsoft

A checker site for MS15-034https...

WTK Network Shopping CMS 1.6.5 SQL Injection

Exploit Title: WTK Network Sql injection Vulnerability Google Dork: allinurl: "product.php?catid=" Date: april, 11, 2015 Exploit Author: ali ahmady From Iran Vendor Homepage: http://wtksoftware.com/ Software Link: http://wtksoftware.com/clients/cart.php Version: 1.6.5 Tested on: Linux demo :...

UBUNTU-CVE-2015-2830

arch/x86/kernel/entry64.S in the Linux kernel before 3.19.2 does not prevent the TSCOMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the 1 fork or 2 close system call, as demonstrated b...

'TweetDeck Teams' Allows Managing Multiple Twitter Accounts Without Sharing Passwords

Many times organizations, companies and groups of people come across the problem when their social media teams have to work within a single Twitter account or maintain multiple twitter accounts. In this case, either they need to use some third party API-based services or they use TweetDeck...

Mail.ru: Same Origin Policy bypass

Hi, After small investigation I've probably found something that can be exploited to bypass Same Origin Policy on mail.ru services specially your main domain and e.mail.ru. First of all - let's take a look about your crossdomain.xml both for mail.ru and e.mail.ru: After time spent on searching...

Microsoft Internet Explorer Universal Cross-Site Scripting Flaw

A serious vulnerability has been discovered in all the latest versions of Microsoft's Internet Explorer that allows malicious hackers to inject malicious code into users' websites and steal cookies, session and login credentials. UNIVERSAL XSS BUG WITH SAME ORIGIN POLICY BYPASS The vulnerability ...

yodo建站系统设计不当可刷钱（本地演示）

简要描述： 你可以看不惯我装逼，但不可以阻止我装逼 by:helen 详细说明： DOYO通用建站系统采用PHP与MYSQL开发,是免费开源的CMS建站、企业建站系统,可广泛用于个人、企业、政府、机构等众多网站建设 官网地址：wdoyo.com 官方提供demo但数据不可以入库：http://demo.wdoyo.com/ 所以只能本地演示了 本地搭建以后注册个会员，点击在线充值查看一下当前的余额（我这里之前刷的成了29.8） 接下来开始刷钱先来到首页随便选一个商品 选好最后点击立刻购买 然后burp抓包，把数量改成-1（-10，-100甚至-1000都可以） 之后查看价格已经变成了-5...

某政府信息公开系统存在SQL注入

简要描述： RT 详细说明： 吉大正元信息技术股份有限公司:http://www.jit.com.cn/ 众多政府网站都在使用该系统 我就用5个案例来测试。 注入链接是： /zwdtSjgl/infoDetail.jsp?id= 案例： http://www.ilj.gov.cn/zwdtSjgl/infoDetail.jsp?id=461 http://218.62.81.171/zwdtSjgl/infoDetail.jsp?id=461 http://218.62.100.33:8000/zwdtSjgl/infoDetail.jsp?id=146...

Schneider Electric OFS Buffer Overflow Vulnerability

OVERVIEW Schneider Electric has reported to NCCIC/ICS-CERT a Stack Buffer Overflow vulnerability supplied with the Schneider Electric OPC Factory Server OSF. Independent researcher known as 0x7A240E67 submitted the vulnerability to ZDI, who provided coordination with the vendor and ICS-CERT...

Incredible PBX 2.0.6.5.0 - Remote Command Execution Exploit

Exploit for php platform in category web applications !/usr/bin/perl Title: Incredible PBX remote command execution exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 1 September 2014 Coded: 21 October 2014 Published: 21 October 2014 MorXploit Research http://www.MorXploit.c...

UBUNTU-CVE-2012-5619

The Sleuth Kit TSK 4.0.1 does not properly handle "." dotfile file system entries in FAT file systems and other file systems for which . is not a reserved name, which allows local users to hide activities it more difficult to conduct forensics activities, as demonstrated by Flame...

Avira Service - Unvalidated CSRF Token Account Hijacking

Document Title: =============== Avira Service - Unvalidated CSRF Token Account Hijacking References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1301 View: https://www.youtube.com/watch?v=lJR8Hv5JnOI Release Date: ============= 2014-08-28 Vulnerability Laboratory ID VL-ID:...

Mobile Carrier Controls Exploitable on a Massive Scale

LAS VEGAS – Device manufacturers and service providers quietly maintain a pervasive level of remote control over the devices they sell to consumers so they can push over-the-air OTA updates for a variety of reasons, but problematically one popular product that enables this type of control is poor...

Paypal Two-Factor Authentication Bypass

Today, the 5th of August, I release my Paypal 2FA bypass exploit. It's been exactly 2 months since I've reported this bug, and due to the simplicity of it, I believe I've given Paypal long enough to fix it. It's still not fixed. Full blog can be found here: http://blog.internot.info/ My website:...

KesionICMS(.net)可无视任何条件前台getshell

简要描述： KesionICMS除了自带的文章、图片、下载系统外还可以在文章、图片、下载三个系统模型的基础上自定义出功能模型比如房产系统，酒店系统，图片系统，软件下载等；自定义表单助您轻松打造在线报名，举报投诉等功能。10年开发经验的优秀团队，在掌握了丰富的WEB开发经验和CMS产品开发经验的同时，勇于创新追求完美的设计理念，力争为全球更多网站提供助力，并被更多的政府机构、教育机构、事业单位、商业企业、个人站长所认可。 详细说明： KesionICMS某个频道上传功能的地方有缺陷，导致漏洞形成。 本漏洞测试的时候无需登录，即可进行操作。...

Researchers Demonstrate Zero-Day Vulnerabilities in Tails Operating System

The critical zero-day security flaws, discovered in the privacy and security dedicated Linux-based Tails operating system by the researcher at Exodus Intelligence that could help attackers or law enforcements to de-anonymize anyone’s identity, actually lie in the I2P software that’s bundled with...

INFINICART browse_group.asp groupid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit ...

ZEEJOBSITE 2.0 - Remote File Upload Vulnerability

No description provided by source. ZEEJOBSITE v2.0 remote file Upload author: ZoRLu msn: [email protected] home: www.z0rlu.blogspot.com dork: [email protected] date: 08/11/2008 aha simdi gönderiyorum saat 10:40 : first register to site you add this code your shell to head GIF89a;...

INFINICART login.asp Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit ...