261 matches found
通达T9系统sql注射10处打包(demo站点root权限)
简要描述： T9智能管理平台是基于B/S架构，灵活、稳定、安全、高性能的办公系统。采用自主研发的引擎技术，提供强大的工作流和公文流程管理功能，可完全根据客户需求定制办公门户平台。 详细说明： 测试地址 http://t9.go2oa.com/t9/core/frame/webos/index.jsp 测试帐号及密码 oa/无 注入1: http://t9.go2oa.com/t9/t9/core/funcs/email/act/T9EmailBoxAct/isBoxNameExist.act? post: boxName=test' and select 1 from select...
Check_MK Arbitrary File Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 === LSE Leading Security Experts GmbH - Security Advisory LSE-2014-05-21 === CheckMK - Arbitrary File Disclosure Vulnerability - -------------------------------------------------- Affected Versions ================= Linux versions of CheckMK equal or...
LSE Leading Security Experts GmbH - LSE-2014-05-21 - Check_MK - Arbitrary File Disclosure Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 === LSE Leading Security Experts GmbH - Security Advisory LSE-2014-05-21 === CheckMK - Arbitrary File Disclosure Vulnerability - -------------------------------------------------- Affected Versions ================= Linux versions of CheckMK equal or...
STRUTS2 exploit ROOT permissions to add a user-vulnerability warning-the black bar safety net
Recent in use struts2 vulnerability check the site, hit the root permissions, but to add account time to forget a lot of instruction. Are not added. One is to use parameters to add, the other one is to modify the passwd and shadow re-upload added. The first is directly using the command line to a...
[CORE-2013-0809] Sophos Web Protection Appliance Multiple Vulnerabilities
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Sophos Web Protection Appliance Multiple Vulnerabilities 1. Advisory Information Title: Sophos Web Protection Appliance Multiple Vulnerabilities Advisory ID: CORE-2013-0809 Advisory URL:...
Mac OS X Sudo Password Bypass Vulnerability
This Metasploit module gains a session with root permissions on versions of OS X with sudo binary vulnerable to CVE-2013-1775. Tested working on Mac OS 10.7-10.8.4, and possibly lower versions. If your session belongs to a user with Administrative Privileges the user is in the sudoers file and is...
CUPS < 1.6.2 Multiple Vulnerabilities
According to its banner, the version of CUPS installed on the remote host is earlier than 1.6.2. It is, therefore, potentially affected by the following vulnerabilities : - Permissions on the file '/var/run/cups/certs/0' could allow access to CUPS administration interface authentication key...
The GNU/Linux kernel new features initiator to mention the right vulnerability-vulnerability warning-the black bar safety net
SUSE security research members of the Sebastian Krahmer has published the GNU/Linux kernel to mention the right vulnerability, recent GNU/Linux kernel3.8+have introduced a In order to facilitate the container to achieve the new features: user-namespacesuser-ns, CLONENEWUSER flag, this feature...
Mac OS X Sudo Password Bypass
This module gains a session with root permissions on versions of OS X with sudo binary vulnerable to CVE-2013-1775. Tested working on Mac OS 10.7-10.8.4, and possibly lower versions. If your session belongs to a user with Administrative Privileges the user is in the sudoers file and is in the...
Shop treasure self-help built Station system command execution-vulnerability warning-the black bar safety net
Brief description: struct command execution, root permissions, the database can be connected, the number of users large Detailed description: http://login.ctoshop.com/shopsystemF/checkLogin.action Vulnerability proof: The website physical path: /home/webserver/shopsystemF java. home:...
[SECURITY] Fedora 17 Update: gitolite3-3.04-4.fc17
Gitolite allows a server to host many git repositories and provide access to many developers, without having to give them real userids on the server. The essential magic in doing this is ssh's pubkey access and the authorized keys file, and the inspiration was an older program called gitosis...
qemu: local DoS with SCSI CD-ROM
Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial of service guest crash via a crafted SAI READ CAPACITY SCSI command. NOTE: this is only a vulnerability when root has...
PT-2014-2145 · Qemu +1 · Qemu +1
Name of the Vulnerable Software and Affected Versions: QEMU versions prior to 0.15.2 Description: A buffer overflow issue exists in the SCSI subsystem of QEMU, which could allow local guest users with permission to access the CD-ROM to cause a denial of service guest crash via a crafted SAI READ...
N-point virtual host management system-fatal vulnerability. Pass to kill all versions-bug warning-the black bar safety net
This is N fatal vulnerability directly get Server Permissions. Because directly related to MYSQL, MSSQL SA and ROOT but encrypted in a way I also see in his encryption code. A bit confused that... I looked online also with no N-point virtual host management system of one aspect of the ODAY or the...
VideoCache 1.9.2 vccleaner root vulnerability
==== SYNOPSIS ===================================================== VideoCache is a Squid URL rewriter plugin written in Python for bandwidth optimization while browsing video sharing websites. Version 1.9.2 allows a user with the privileges of the Squid proxy server to append semi-arbitrary data...
VideoCache 1.9.2 vccleaner root vulnerability
No description provided by source. ==== SYNOPSIS ===================================================== VideoCache is a Squid URL rewriter plugin written in Python for bandwidth optimization while browsing video sharing websites. Version 1.9.2 allows a user with the privileges of the Squid proxy...
Rookie Club of the simple broiler production big run-vulnerability warning-the black bar safety net
A. Preface.. Back door making for success after the invasion to maintain Rights has a very important significance,this article describes a simple and practical the back door of the production technology,as well as how to make a broiler. Ha ha hado not turn into bad kids! II. Ready.. First, we nee...
Ordinary users by udev vulnerability to elevate to root permissions demo-vulnerability warning-the black bar safety net
Recently exposed by the udev permissions hint of vulnerability, as long as with normal user permissions, you can elevate to root privileges, the experiment a handful, really easy to upgrade. Put the following code saved as test. sh file !/ bin/sh Linux 2.6 bug found by Sebastian Krahmer lame splo...
Debian Security Advisory DSA 676-1 (xpcd)
The remote host is missing an update to xpcd announced via advisory DSA 676-1. OpenVAS Vulnerability Test $Id: deb6761.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 676-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...