i.FTP 2.21 - Time Field (SEH)

!/usr/bin/python Exploit Title : i.FTP 2.21 Time Field SEH Exploit Exploit Author : Revin Hadi S Vulnerability PoC : Avinash Kumar Thapa "-Acid" PoC Link : https://www.exploit-db.com/exploits/36847/ Date : 05/08/2015 Vendor : http://www.memecode.com/iftp.php Software Link :...

i.FTP 2.21 - Time Field (SEH)

i.FTP 2.21 - Time Field SEH !/usr/bin/python Exploit Title : i.FTP 2.21 Time Field SEH Exploit Exploit Author : Revin Hadi S Vulnerability PoC : Avinash Kumar Thapa "-Acid" PoC Link : https://www.exploit-db.com/exploits/36847/ Date : 05/08/2015 Vendor : http://www.memecode.com/iftp.php Software...

i.FTP 2.21 - Time Field SEH Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title : i.FTP 2.21 Time Field SEH Exploit Exploit Author : Revin Hadi S Vulnerability PoC : Avinash Kumar Thapa "-Acid" Date : 05/08/2015 Vendor : http://www.memecode.com/iftp.php Software Link :...

Novell ZENworks 'ScheduleQuery' Method SQL Injection Vulnerability

Novell ZENworks is a suite of software that supports automated IT management and business process management across resources within an organization. A SQL injection vulnerability in the 'ScheduleQuery' method of the schedule class in Novell ZENworks allows remote attackers to submit specially...

i.FTP 2.21 SEH Overflow Crash PoC

Exploit for windows platform in category dos / poc iFTP 2.21 SEH overwritten Crash PoC Author: Avinash Kumar Thapa "-Acid" Date of Testing : 28th April'2015 Vendor's home page: http://www.memecode.com/iftp.php Software's Url: http://www.memecode.com/data/iftp-win32-v2.21.exe Crash Point: Go to...

phpSFP - Schedule Facebook Posts 1.5.6 SQL Injection Vulnerability

phpSFP Schedule Facebook Posts version 1.5.6 suffers from a remote SQL injection vulnerability. | | / | \ | |/ |/ | / | | | | | | | | | | | | | / \ | | | || || | |\ | || | | / | | |/|| ||// \| phpSFP - Schedule Facebook Posts 1.5.6 SQL Injection 0-day Website :...

Nishishi Factory Fumy Teacher's Schedule Board Cross-Site Scripting Vulnerability

Nishishi Factory Fumy Teacher's Schedule Board is a forum program. A cross-site scripting vulnerability in Nishishi Factory Fumy Teacher's Schedule Board schedule.cgi allows remote attackers to inject malicious script or HTML code that, when viewed with malicious data, can obtain sensitive...

CVE-2015-0900

Cross-site scripting XSS vulnerability in schedule.cgi in Nishishi Factory Fumy Teacher's Schedule Board 1.10 through 2.21 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in schedule.cgi in Nishishi Factory Fumy Teacher's Schedule Board 1.10 through 2.21 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-0900

CVE-2015-0900 corresponds to a cross-site scripting vulnerability in Nishishi Factory Fumy Teacher's Schedule Board. The affected component is the schedule.cgi CGI program (versions 1.10 through 2.21). The root cause is a browser-executable script injection via a crafted URL, enabling arbitrary s...

CVE-2015-0900

Cross-site scripting XSS vulnerability in schedule.cgi in Nishishi Factory Fumy Teacher's Schedule Board 1.10 through 2.21 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

某通用型校园系统多处系统越权

简要描述： 见详情 详细说明： 漏洞证明： 看乌云别人提交，看了下： 关键字：SM2005/ 多处越权： 第一处：无需登陆可查看任意教师，任意学期的班级课表 漏洞位置：SM2005/student/StuKB/TeaKB.asp?sYanzheng=suyaxingweb 案例如下： http://www.sdwhys.com/SM2005/student/StuKB/TeaKB.asp?sYanzheng=suyaxingweb http://www.zjnksyzx.com:8801/SM2005/student/StuKB/TeaKB.asp?sYanzheng=suyaxingw...

Fortinet FortiGate XSS Vulnerability (FG-IR-14-003)

FortiOS as used in FortiGate is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Job's Next Run Date Doesn't Match Schedule

Challenge The 'Next Run' date shown for a job does not match the settings selected in the Schedule tab of the job. For example, a job configured to run Monthly on the last Saturday displays a 'Next Run' date of the upcoming Saturday, which is not the last Saturday of the month. Cause This occurs...

i-FTP 2.20 Schedule Buffer Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 'i-FTP Schedule Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow...

UBUNTU-CVE-2014-3197

The NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in Blink, as used in Google Chrome before 38.0.2125.101, does not properly provide substitute data for pages blocked by the XSS auditor, which allows remote attackers to obtain sensitive information via a...

RunFromProcess - Run a Windows program with a user of another process

RunFromProcess is a command-line utility that allows you to run a program from another process that you choose. The program that you run will be executed as a child of the specified process and it'll run with the same user and security context of the specified parent process. Using RunFromProcess...

CVE-2014-4687

Multiple cross-site scripting XSS vulnerabilities in pfSense before 2.1.4 allow remote attackers to inject arbitrary web script or HTML via 1 the starttime0 parameter to firewallschedule.php, 2 the rssfeed parameter to rss.widget.php, 3 the servicestatusfilter parameter to...

Web Group Communication Center (WGCC) <= 1.0.3 - SQL Injection Vuln

No description provided by source. Title : Web Group Communication Center XSS/SQL Multiple Remote Vulnerabilies Author : myvx Date : 13.05.2008 Application : Web Group Communication Center Version : = 1.0.3 PreRelease 1 Vendor : http://wgcc.de/ Download :...

多个学校教职工密码是弱口令

简要描述： 最近闲来无事，又要考试了，逛了下学校官网，搜了下我们英语老师的课表，居然出了老师的工号，于是尝试登录，果然进了。 详细说明： 学校官网：www.scatc.net GOOGLE:inurl:/jwweb/ 发现用这个系统的有很多学校 打开教师课表，搜索老师的课表，就可以知道老师的工号，用初始密码即可登录成功， 漏洞证明： https://images.seebug.org/upload/201405/19133942899f8d9355f3c2f50ef99ef0b4...