Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3 allows remote attackers to hijack the...

CVE-2016-6801

Cross-site request forgery CSRF vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3 allows remote attackers to hijack the...

Finecms 2.0.1 background GETSHELL 0DAY-vulnerability warning-the black bar safety net

FineCMS have a cache function, and when the Wordpress like, there is a cache function and cache file name is not random and the suffix is php, it leads to a can use background cache function getshell it. Below is the Payload PHP | 1 2 3 4 5 6 7 8 9 1 0 1 1 1 2 1 3 1 4 1 5 1 6 1 7 1 8 | POST /inde...

CVE-2016-5422

The web console in Red Hat JBoss Operations Network JON before 3.3.7 does not properly authorize requests to add users with the super user role, which allows remote authenticated users to gain admin privileges via a crafted POST request...

CVE-2016-5422

The web console in Red Hat JBoss Operations Network JON before 3.3.7 does not properly authorize requests to add users with the super user role, which allows remote authenticated users to gain admin privileges via a crafted POST request...

Design/Logic Flaw

The web console in Red Hat JBoss Operations Network JON before 3.3.7 does not properly authorize requests to add users with the super user role, which allows remote authenticated users to gain admin privileges via a crafted POST request...

CVE-2016-5422

The web console in Red Hat JBoss Operations Network JON before 3.3.7 does not properly authorize requests to add users with the super user role, which allows remote authenticated users to gain admin privileges via a crafted POST request...

Arbitrary File Deletion Vulnerability in Zoomla!

Zoomla! Wave CMS is a CMS website core and management system R & D vendors, integrated content management, shopping malls, OA, SNS, project management, collection, e-mail subscription to hundreds of features , based on the . net platform and support cross-platform and mobile. Zoomla! CMS has an...

Arbitrary Password Changing Vulnerability in Hi-Read Media's Digital Newspaper System

Joy Reading Kiosk Digital Newspaper System is a digital newspaper WEB management system. The product /www/index.php?mod=admin&con=adminuser&act=editpost there is an arbitrary password change vulnerability, an attacker can exploit the vulnerability by submitting a POST request to change the...

File Download Vulnerability in New Windward Technology's Online Learning Test System

New Windward Technology Online Learning Exam System is built based on enterprise-level database platform, the system architecture using a three-tier structure, B/S mode development can be used for online training and examination system. The product exists arbitrary file download vulnerability,...

Mail.ru: [cfire.mail.ru] CSRF Bypassed - Changing anyone's 'User Info'

Hi, I noticed that when we change userinfo of https://cfire.mail.ru from here: https://cfire.mail.ru/account/userinfo, there are two Anti-CSRF tokens or you can say that; they just do the work of Anti-CSRF token: - signature - submit2 Actually, I was able to bypass both Anti-CSRF tokens, and afte...

Cisco Prime Infrastructure Remote Code Execution Vulnerability (cisco-sa-20160406-remcode) - Active Check

A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Silurus Classifieds 2.0 Cross Site Scripting

Title: Silurus Classifieds XSS Vulnerability Software : Silurus Classifieds Software Version : v2.0 Vendor: http://snowhall.com/slides/silurus Vulnerability Published : 2016-07-25 Author：zhiweijiang Email:[email protected] Impact : MediumCVSS2 Base : 4.3, AV:N/AC:M/Au:N/C:N/I:P/A:N Bug...

Uber: Blind OOB XXE At "http://ubermovement.com/"

Test Summary : - POST data was set to &dtgmlf6ent; An HTTP request was initiated for the domain http://122.180.248.81/ which indicates that this script is vulnerable to XXE injection. NOTE : As it was Blind XXE Test I was Successful in Ping Test for XXE. But unable to retrieve any sensitive...

HP UCMDB Server Java Deserialization RCE

The HP Universal Configuration Management Database UCMDB Server running on the remote host is affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections ACC library. An unauthenticated, remote attacker can...

Harvest: Project Disclosure of all Harvest Instances

Hello, The POST request to create new Retainer in admin panel can use and disclose all the projects in @harvest not just available in admin's @harvest instance. Steps to Reproduce: 1. Login to application using admin credentials and traverse to Invoices Retainers + New Retainers 2. Select valid...

Wowza Streaming Engine 4.5.0 Remote Privilege Escalation

i? Wowza Streaming Engine 4.5.0 Remote Privilege Escalation Exploit Vendor: Wowza Media Systems, LLC. Product web page: https://www.wowza.com Affected version: 4.5.0 build 18676 Platform: JSP Summary: Wowza Streaming Engine is robust, customizable, and scalable server software that powers reliabl...

Wowza Streaming Engine 4.5.0 Remote Privilege Escalation Exploit

Summary Wowza Streaming Engine is robust, customizable, and scalable server software that powers reliable video and audio streaming to any device. Learn the benefits of using Wowza Streaming Engine to deliver high-quality live and on-demand video content to any device. Description The application...

Uber: Get organization info base on uuid

Hi Uber, I found issue on https://business.uber.com/server/employees Step to reproduce: 1. Send post request to https://business.uber.com/server/employees: 2. Change userUuid of other user and then see organization info if they has valid organization and their persinol info Best ragards, Severus...

CVE-2016-4985

The ironic-api service in OpenStack Ironic before 4.2.5 Liberty and 5.x before 5.1.2 Mitaka allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the...