DS3 Authentication Server - Multiple Vulnerabilities

No description provided by source. Original: http://www.digitalsec.net/stuff/explt+advs/DS3.AuthServer.txt =============================== - Advisory - =============================== Tittle: DS3 Authentication Server - Command Execution Post Authentication & other minor issues Risk: High Date:...

Brightstation Muscat 1.0 Root Path Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2374/info Making an invalid request to a machine running Brightstation Muscat, will disclose the physical path to the root directory. http://target/cgi-bin/empower?DB=UkRteamHole http://target/cgi-bin/empower?DB=UkRteamHo...

John Roy Pi3Web 1.0.1 - Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2381/info A buffer overflow vulnerability has been reported in John Roy Pi3Web web server. The ISAPI application within the server fails to properly handle user supplied input. Requesting a specially crafted URL will caus...

U-mail 最新版漏洞大阅兵(信息泄露，多个getshell，多处SQL注入漏洞，远程代码执行)

简要描述： 疯狗、 xsser finger求打雷 详细说明： 注：一个getshell重复 http://wooyun.org/bugs/wooyun-2014-059954 疯狗、 xsser finger求打雷 1、 信息泄露 phpinfo信息泄露 http://www.xxx.com/webmail/client/mail/index.php?module=test&action=info phpinfo信息泄露 其中源码如下：WorldClient\html\client\mail\module\info.php if !defined "PRELOADOK" exit...

U-Mail injection of arbitrary code written in exp-vulnerability warning-the black bar safety net

u-mail in a file since the parameter filter is not rigorous and resulted inSQL injection by this vulnerability can be your shell to write to a web directory, you can batch getshell it. Baidu & Google Keywords: --------------------- Power by U-Mail Accurate anti-spam, effectively filtering more th...

DS3 Authentication Server Command Execution Vulnerability

DS3 Authentication Server suffers from path disclosure and remote command execution vulnerabilities. Tittle: DS3 Authentication Server - Command Execution Post Authentication & other minor issues Risk: High Date: 27.May.2013 Author: Pedro Andujar .: INTRO :. The DS3 Authentication Server applianc...

Imperva SecureSphere Operations Manager Command Execution Vulnerability

Imperva SecureSphere Operations Manager version 9.0.0.5 Enterprise Edition suffers from path disclosure, command execution, and arbitrary file upload vulnerabilities. Tittle: Imperva SecureSphere Operations Manager - Command Execution Post Authentication & Minor issues Risk: High Date: 27.May.201...

Imperva SecureSphere Operations Manager 9.0.0.5 - Multiple Vulnerabilities

Original: http://www.digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt =============================== - Advisory - =============================== Tittle: Imperva SecureSphere Operations Manager - Command Execution Post Authentication & Minor issues Risk: High Date: 27.May.2013...

Imperva SecureSphere Operations Manager Command Execution

Original: http://www.digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt =============================== - Advisory - =============================== Tittle: Imperva SecureSphere Operations Manager - Command Execution Post Authentication & Minor issues Risk: High Date: 27.May.2013...

Imperva SecureSphere Operations Manager version 9.0.0.5 - Multiple issues

Original: http://www.digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt =============================== - Advisory - =============================== Tittle: Imperva SecureSphere Operations Manager - Command Execution Post Authentication & Minor issues Risk: High Date: 27.May.2013...

DS3 Authentication Server - Multiple Issues

Original: http://www.digitalsec.net/stuff/explt+advs/DS3.AuthServer.txt =============================== - Advisory - =============================== Tittle: DS3 Authentication Server - Command Execution Post Authentication & other minor issues Risk: High Date: 27.May.2013 Author: Pedro Andujar .:...

discuz X2. 5 latest vulnerability,a neglected physical path of the leak-vulnerability warning-the black bar safety net

Before everyone's attention that both the physical path of the leak: Before the two physical path of the leak address: http://www.myhack58.com/ucserver/control/admin/db.php http://www.myhack58.com/source/plugin/myrepeats/table/tablemyrepeats.php Actually install here also hide one, some people...

shopex v4. x proof of the physical path-vulnerability warning-the black bar safety net

Brief description: The buffer data file the content is too messy, syntax errors result in the explosion path Detailed description: /home/cache/cachedata.php the buffer data file broke the physical path Vulnerability proof: ! Repair solutions: Direct exit orweb serverforbidden error is returned...

Shop treasure self-help built Station system command execution-vulnerability warning-the black bar safety net

Brief description: struct command execution, root permissions, the database can be connected, the number of users large Detailed description: http://login.ctoshop.com/shopsystemF/checkLogin.action Vulnerability proof: The website physical path: /home/webserver/shopsystemF java. home:...

Tech-ex 6. x - 7.06 SQL injection vulnerability-vulnerability warning-the black bar safety net

Author:my5t3ry Reprinted please specify: t00ls. The vulnerability is located in the registration page\User\Reg\RegAjax. asp 2 4 - 4 6-row and 2 5 4 -270 lines of code as follows: Code omitted.... and The above code in the Province=UnEscapeKS. S"Province" call a custom function KS. S were filtered...

Ucenter 物理路径泄漏

简要描述： UC的一个物理路径泄漏，看到 @rootsecurity 的评论就顺便去看看，貌似漏洞还没修复，所以就再发下。 详细说明： UCenter的control/admin/db.php文件未加INUC判断。 漏洞证明： 官网地址： http://uc.discuz.net/control/admin/db.php...

ECShop v2. 7. 2 wap page storm path 0day-vulnerability warning-the black bar safety net

Google: inurl:mobile/goods. php? act=viewimg&id=1 2 3 Search to After in page plus&id=5 That is, http://www. badguest. cn/mobile/goods. php? act=viewimg&id=1 2 3&id=5 For example, for many forums, submitted a non-existent file request, or submit a There is no output file of the request, the serve...

Discuz x2 source/function/function_connect.php leakage of the server's physical path-vulnerability warning-the black bar safety net

Affected version: Discuz x2 vulnerability description: source/function/functionconnect.php The file header is not added: if! defined‘INDISCUZ’ exit‘Access Denied’; And at the head of the pack The letter the other file: requireonce libfile‘function/cloud’; reference...

Discuz x2 source/function/function_connect.php 泄漏服务器物理路径

source/function/functionconnect.php 文件头部没有加： if!defined‘INDISCUZ’ exit‘Access Denied’; 并且在头部包函了其他文件： requireonce libfile‘function/cloud’; Discuz x2 厂商补丁： Discuz! ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.discuz.net/ !/usr/bin/env python -- coding: utf-8 -- from pocsuite.n...

AspCms_v1. 5_2011. 0 3. 0 3 0day vulnerabilities-vulnerability warning-the black bar safety net

AspCmsv1. 52011. 0 3. 0 3 0day vulnerabilities akastN. S. T Adescription ASPCMS is composed of Wuhan on the valley network Technology Co., Ltd. based on ASP+Accesssql2000developed and fully open-source set of built Station system, mainly for enterprises to quickly build simple, efficient, easy to...