CVE-2012-4716

N-Tron 702-W Industrial Wireless Access Point devices use the same 1 SSH and 2 HTTPS private keys across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key...

CVE-2012-4716

CVE-2012-4716 affects N-Tron 702-W Industrial Wireless Access Point devices. The root cause is hard-coded SSH and HTTPS private keys that are identical across different installations, enabling an attacker to decrypt traffic and compromise confidentiality/integrity of communications. The vulnerabi...

CVE-2012-4716

N-Tron 702-W Industrial Wireless Access Point devices use the same 1 SSH and 2 HTTPS private keys across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key...

WordPress N-Media File Uploader Plugin <= 3.7 - Arbitrary File Upload

This plugin is prone to an arbitrary file upload vulnerability. Solution Update the plugin...

WordPress N-Media File Uploader Plugin <= 1.9 - Arbitrary File Upload

This plugin is prone to an arbitrary file upload vulnerability. Solution Update the plugin...

N-Tron 702W Hard-Coded SSH and HTTPS Encryption Keys (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-15-160-01 N-Tron 702W Hard-Coded SSH and HTTPS Encryption Keys that was published June 9, 2015, on the NCCIC/ICS-CERT web site. Independent researcher Neil Smith has identified hard-coded SSH and HTTPS encryption...

WordPress N-Media Member Conversation Plugin - Arbitrary File Upload

WordPress N-Media Member Conversation plugin's "doubpload.php" is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Other attacks are also possible. Solution Update the plugin...

Private Shell SSH Client 3.3 - Crash PoC

Exploit for windows platform in category dos / poc ''' Exploit title: privateshell SSH Client v.3.3 denial of service vulnerability Date: 27-5-2015 Vendor homepage: www.privateshell.com Software Link: http://www.privateshell.com/files/pshell.exe Version: 3.3 Author: 3unnym00n Details: -------- wh...

Newsletter 4.3 SQL Injection

------------------------ Exploit Title : Newsletter 4.3 SQL Injection Vulnerability Exploit Author : Ashiyane Digital Security Team Vendor Homepage: www.conpresso.de - www.conpresso4.de Google Dork ONE: intext:Module Newsletter 4.3 Google Dork TWO: Module Newsletter 4.3 by www.conpresso4.de Date ...

WordPress Plugin N-Media Website Contact Form with File Upload 1.3.4 - Arbitrary File Upload (2)

WordPress Plugin N-Media Website Contact Form with File Upload 1.3.4 - Arbitrary File Upload 2 !/bin/bash Exploit Title : Wordpress N-Media Website Contact Form with File Upload 1.3.4 Google Dork : inurl:"/uploads/contactfiles/" Exploit Author : Claudio Viviani Vulnerability discovered by : Claud...

WordPress N-Media Website Contact Form with File Upload 1.5 - Local File Inclusion

This vulnerability can be exploited to include arbitrary files. In this plugin the affected file is /wp-content/plugins/website-contact-form-with-file-upload/lib/wide-image/image-processor.php. It include the file...

WordPress Plugin N-Media Website Contact Form with File Upload 1.5 - Local File Inclusion

Exploit Title: website contact form with file upload 1.5 Exploit Local File Inclusion Google Dork: inurl:"/plugins//website-contact-form-with-file-upload/" Date: 07.05.2015 Exploit Author: T3N38R15 Software Link: https://wordpress.org/plugins/website-contact-form-with-file-upload/ Version: 1.5...

WordPress Plugin N-Media Website Contact Form with File Upload 1.5 - Local File Inclusion

WordPress Plugin N-Media Website Contact Form with File Upload 1.5 - Local File Inclusion Exploit Title: website contact form with file upload 1.5 Exploit Local File Inclusion Google Dork: inurl:"/plugins//website-contact-form-with-file-upload/" Date: 07.05.2015 Exploit Author: T3N38R15 Software...

Wordpress N-Media Website Contact Form 1.3.4 /classes/plugin.class.php 文件上传漏洞

No description provided by source...

WordPress N-Media Website Contact Form File Upload Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A file upload vulnerability exists in WordPress N-Media Website Contact Form. The vulnerability allows attackers to perform...

WordPress N-Media Website Contact Form Plugin File Upload Vulnerability

WordPress N-Media Website Contact Form Plugin is prone to arbitrary file upload vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

WordPress Plugin N-Media Website Contact Form - Arbitrary File Upload (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress N-Media Website Contact Form Upload Vulnerability', 'Description' = %q This module exploits an arbitrary PHP code upload i...

WordPress N-Media Website Contact Form Plugin - Upload Vulnerability

This vulnerability allows an attacker to upload arbitrary PHP code and execute it. Solution Update the plugin...

WordPress N-Media Website Contact Form Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress N-Media Website Contact Form Upload Vulnerability', 'Description' = %q This module exploits an arbitrary PHP code upload i...

WordPress N-Media Website Contact Form 1.3.4 Shell Upload

Exploit Title : Wordpress N-Media Website Contact Form with File Upload 1.3.4 Shell Upload Vulnerability Exploit Author : Claudio Viviani Software Link : https://downloads.wordpress.org/plugin/website-contact-form-with-file-upload.1.3.4.zip Date : 2015-04-1 Dork Google: index of...