266 matches found
Super cannon Great Cannon）defect inquiry of JS bloomer-vulnerability warning-the black bar safety net
Following the last post in the black bar to secure the article on the super cannon Great Cannon）defect inquiry of TTL article, we reference from abroad, a research organization for the event post-mortem analysis, as well as by being an attack site log and capture the code on a bloomer, locking Th...
某通用型建站系统SQL注射之十
简要描述： 之十 详细说明： 某通用型建站系统SQL注射之十。 源码：XYCMS律师事务所网站系统v1.3 地址：http://code.it168.com/d-25428.shtml 注入点：showcase.asp?id= 可谷歌搜索：事务 inurl:showcase.asp?id= 实例： http://www.lnsmlv.com/showcase.asp?id=68 http://www.keyels.com/showcase.asp?id=59 http://www.hu-ls.com/showcase.asp?id=166...
XYCMS管理咨询公司建站系统存在默认数据库下载和存储型XSS
简要描述： XYCMS管理咨询公司建站系统存在默认数据库下载和存储型XSS 详细说明： XYCMS管理咨询公司建站系统存在默认数据库下载和存储型XSS。 源码地址：http://down.chinaz.com/soft/29472.htm 一是存在存储型XSS，发生在在线应聘处，可插入XSS代码，漏洞文件：Careersyp.asp 可谷歌搜索：inurl:Careersyp.asp 实例如下：http://www.gaonengkedi.com/Careersyp.asp?id=4 http://njqygl.com/Careersyp.asp?id=1...
MvMmallv5. 5SQL injection of php exp exploit-vulnerability warning-the black bar safety net
Vulnerability type: MvMmall v5. 5. 1 SQL injection vulnerability Default background:admincp. php? module=index Google search:”Powered by MvMmall v5. 5. 1" One, use: php exp use 1 Install the php environment Use phpnow very simple to install. 2 Use exp attack Link: Extract password: aahj The exp...
PhEmail - Automate Sending Phishing Emails
PhEmail is a python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test. The main purpose of PhEmail is to send a bunch of phishing emails and prove who clicked on them without attempting to exploit the web browser or email...
某图书馆书目检索系统存在通用型SQL注入
简要描述： 某图书馆书目检索系统存在通用型SQL注入 详细说明： 汇文图书馆数目检索系统存在SQL注入 注入点doctype 谷歌搜索关键字：inurl:/opac/search.php，影响范围很大 1、访问http://120.195.143.181:9090/opac/search.php 发现搜索有多处参数，于是提交时抓包 GET...
JEECMS任意命令执行漏洞（涉及大量案例，Administrator权限）
简要描述： JEECMS任意命令执行漏洞（涉及大量案例，Administrator权限） 详细说明： 谷歌搜索：inurl:jeecms/ArtiSearch.do 涉及大量案例 http://www.wwxzfw.gov.cn/jeecms/ArtiSearch.do?count=10&searchKey=a%27+and+1%3D1&chnlId= http://www.cnfamily.com/family/jeecms/ArtiSearch.do?count=10&searchKey=%C1%BD%BB%E1...
用友软件协作办公平台通用DBA权限SQL注入漏洞之二
简要描述： RT 详细说明： 谷歌关键字： intitle:"fe协作" 注入点： common\selectUDR.jsp?id= 漏洞证明： 1.http://119.145.194.122:9090/common/selectUDRTree.jsp?id=1 2.http://220.168.210.109:9090/common/selectUDR.jsp?id=1 img src="https://images.seebu...
Wbb3 - Blind SQL Injection Vulnerability
No description provided by source. !/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; print q ----------------------------------------------- Wbb3 Blind Sql Injection Injection in Announce Plugin Kleinanzeigen Markt Coded By Molli use: ano.pl url user id Announce Catid Google:...
AnnonceV News Script <= 1.1 (page) Remote File Include Vulnerability
No description provided by source. Kurdish Security Advisory Original Adv : http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-26-annoncev-news.html Script : AnnonceV Site : http://www.comscripts.com/scripts/php.annoncesv.1895.html Version : 1.1 Risk : High Class : Remote Contact :...
TClanPortal <= 1.1.3 (id) Remote SQL Injection Exploit
No description provided by source. TClanPortal Version 3 .. Search By Google :- by TriggerTG.de 2003 - Version 3 Gr33tz :- Abducter .. SQL Injection's FOunder - | [email protected] |- Devil-00 .. SQL Injection's Exploting - | [email protected] | - Security4Arab .. A'Where Home .. WE LOVE...
phpECard <= 2.1.4 (functions.php) Remote File Include Vulnerability
No description provided by source. ============================================================================================== phpECard functions.php Remote File Inclusion Exploit =============================================================================================== Critical Level :...
CVE-2014-0362
Cross-site scripting XSS vulnerability on Google Search Appliance GSA devices before 7.0.14.G.216 and 7.2 before 7.2.0.G.114, when dynamic navigation is configured, allows remote attackers to inject arbitrary web script or HTML via input included in a SCRIPT element...
Cross site scripting
Cross-site scripting XSS vulnerability on Google Search Appliance GSA devices before 7.0.14.G.216 and 7.2 before 7.2.0.G.114, when dynamic navigation is configured, allows remote attackers to inject arbitrary web script or HTML via input included in a SCRIPT element...
CVE-2014-0362
Cross-site scripting XSS vulnerability on Google Search Appliance GSA devices before 7.0.14.G.216 and 7.2 before 7.2.0.G.114, when dynamic navigation is configured, allows remote attackers to inject arbitrary web script or HTML via input included in a SCRIPT element...
CVE-2014-0362
CVE-2014-0362 describes an XSS flaw in Google Search Appliance (GSA) where input reflected into a [removed] block becomes executable when dynamic navigation is enabled. Affected products are GSA versions earlier than 7.0.14.G.216 and 7.2 earlier than 7.2.0.G.114. The impact is remote script execu...
Fedora 20 : ikiwiki-3.20140125-1.fc20 (2014-1747)
Update to the latest stable version. Changes in ikiwiki 3.20140125 : - inline: Allow overriding the title of the feed. Closes: http://bugs.debian.org/735123 Thanks, Christophe Rhodes - osm: Escape name parameter. Closes: http://bugs.debian.org/731797 Changes in ikiwiki 3.20140102 : - aggregate:...
Microsoft and Google Collaborate on Effort to Clean Web of Cild Abuse Images
Microsoft and Google are cooperating in an effort to make it much more difficult for child predators to find illegal images online by blocking search results for about 100,000 search terms. The companies also are collaborating on methods to better identify illegal abuse images and remove them mor...
finger_google
This plugin finds mail addresses in google. Two configurable parameters exist: resultlimit fastsearch If fastsearch is set to False, this plugin searches google for : "@domain.com", requests all search results and parses them in order to find new mail addresses. If the fastsearch configuration...