ShopBuilder 5.6.1 /module/news/admin/newslist.php chk SQL注入漏洞

No description provided by source. !/usr/bin/env python coding=utf-8 import re import urllib2 from comm import cmdline from comm import generic pocinfo = 'VulId': '1569', 'Name': 'ShopBuilder 5.6.1 /module/news/admin/newslist.php chk SQL注入漏洞 POC', 'AppName': 'ShopBuilder', 'AppPowerLink':...

ShopBuilder 5.6.1 /module/news/admin/newslist.php did SQL注入漏洞

No description provided by source. !/usr/bin/env python coding=utf-8 import re import urllib2 from comm import cmdline from comm import generic pocinfo = 'VulId': '1565', 'Name': 'ShopBuilder 5.6.1 /module/news/admin/newslist.php did SQL注入漏洞 POC', 'AppName': 'ShopBuilder', 'AppPowerLink':...

ShopBuilder 5.6.1 /module/activity/admin_activity_product_list.php SQL注入漏洞

No description provided by source. !/usr/bin/env python coding=utf-8 import re import urllib2 from comm import cmdline from comm import generic pocinfo = 'VulId': '1563', 'Name': 'ShopBuilder 5.6.1 /module/activity/adminactivityproductlist.php SQL注入漏洞 POC', 'AppName': 'ShopBuilder', 'AppPowerLink...

ShopBuilder 5.6.1 /module/activity/admin/activity.php SQL注入漏洞

No description provided by source. !/usr/bin/env python coding=utf-8 import re import urllib2 from comm import cmdline from comm import generic pocinfo = 'VulId': '1564', 'Name': 'ShopBuilder 5.6.1 /module/activity/admin/activity.php SQL注入漏洞 POC', 'AppName': 'ShopBuilder', 'AppPowerLink':...

Supermicro Onboard IPMI Port 49152 敏感文件泄露漏洞

关于 IPMI：智能平台管理接口 IPMI 是一种开放标准的硬件管理接口规格，定义了嵌入式管理子系统进行通信的特定方法。IPMI 信息通过基板管理控制器 BMC（位于 IPMI 规格的硬件组件上）进行交流。IPMI是智能型平台管理接口（Intelligent Platform Management Interface）的缩写，是管理基于...

HP LaserJet Directory Traversal in PJL Interface

漏洞分析 密码爆破 惠普官方已经在2010年11月的安全通告上发布了漏洞解决办法，用户可以通过禁用 PJL 的文件系统访问权限或重新设置 PJL 密码来解决此问题。但 PJL 的安全密码是范围1-65535的数字，密码认证次数和频率并没有限制，远程攻击者可以通过爆破可以将 PJL 的密码安全保护禁用，进而可绕过密码验证通过 PJL 对打印机内置的文件系统进行读写。文件系统包含后台处理打印作业、收到的传真、日志文件和配置文件。 使用以下 Python3 程序对系统进行漏洞检测： 如果打印出“PoC OK!”，说明系统存在漏洞。PoC...

Wordpress-3-3-1 vulnerability documentation-bug warning-the black bar safety net

Most popular Wordpress recent new release of the 3. 3. 1 vulnerabilities, and now published about vulnerability details...... Quicl’sBlog've been looking at Wordpress vulnerability, and through the network to collect the first time for the majority of the Wordpress user with Wordpress...

IE7 0day vulnerability analysis-vulnerability warning-the black bar safety net

Yesterday accidentally see knownsec security team, sent the article, so you want to see in the end is how caused. This two days this IE7 the 0day quite hot, I also along for the ride, to be honest, don't be javascript, so the analysis is also quite strenuous, But generally know what is going on t...