181 matches found
Critical Flaws Found in NETGEAR Network Management System
Netgear, one of the most popular router manufacturers, has been vulnerable to two different flaws that could allow hackers to compromise your corporate network and connected devices. Reported critical vulnerabilities reside in the Netgear's ProSafe NMS300 Model Network Management System – a...
CVE-2015-6660
The CVE-2015-6660 issue affects Drupal 6.x up to 6.37 and Drupal 7.x up to 7.39, where the Form API does not properly validate the form token. This enables CSRF attacks that can upload files to another user’s account via vectors related to file upload value callbacks. Root cause: insufficient for...
CVE-2014-7954 MTP path traversal vulnerability in Android
MTP path traversal vulnerability in Android 4.4 ----------------------------------------------- doSendObjectInfo method of the MtpServer class implemented in frameworks/av/media/mtp/MtpServer.cpp does not validate the name parameter of the incoming MTP packet at all. It is possible to upload file...
LebiShop商城系统无需登录getshell
简要描述： www.lebi.cn 十余年累计被 上万 个中小网站采用LebiShop = =官方demo 演示。 详细说明： 漏洞文件 http://demo.lebi.cn/ajax/imageuploadone.aspx 无需验证 参数path可控，这里修改为path=../config.asp 默认path 为upload。 官方限制目录执行了。但可绕过该上传目录。 利用iis 解析漏洞成功getshell。 漏洞证明： 如图。...
ArticleFR CMS 3.0.5 - Arbitrary File Upload
Exploit Title: Arbitrary File Upload in articleFR CMS 3.0.5 Google Dork: N/A Date: 01/21/2015 Exploit Author: Tran Dinh Tien [email protected] & ITAS Team www.itas.vn Vendor Homepage: http://freereprintables.com Software Link: https://github.com/articlefr/articleFR Version: version 3.0.5 Tested...
Lexmark MarkVision Enterprise - Arbitrary File Upload (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Lexmark MarkVision Enterprise Arbitrary File Upload', 'Description' = %q This module exploits a code execution flaw in Lexmark...
YiDacms最新版漏洞大礼包
简要描述： YiDacms最新版漏洞大礼包 详细说明： 易达CMS 企业建站系统 当前最新版本是：YidaCms X3.2（20140718）版 这里我们主要看看后台比较严重的漏洞 关于xss和sql注入我们就不多讲了，后台的SQL注入很多都没有用全局过滤，导致sql注入 首先来看看第一处目录遍历，任意文件读取，拿shell： 文件/Yidacms/admin/adminfso.asp： ElseIf action = "Edit" then '读取文件 Dim FileAll FilePath = TrimRequest.Form"ThisDir" FileName =...
Webiz 2004 - Local Shell Upload Vulnerability
No description provided by source. Exploit Title: Webiz local SHELL Upload Vulnerability Date: 23-05-2010 Author: kannibal615 Software Link: N/A Version: 2004 Tested on: PHP CVE : N/A Code : @@ @@ @@@@@@ @@ @@ @@@@ @@@@@@@ @@ @@ @@@@@@@ @@@@@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@@...
AuraCMS 2.1 - Remote File Attachment / LFI Vulnerabilities
No description provided by source. AuraCMS 2.1 - Remote File Attachment - Local File Inclusion Vendor : http://www.auracms.org/ Download : http://www.auracms.org/dljump.php?id=42 Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net...
Asset Manager 1.0 Shell Upload Vulnerability
No description provided by source. Title: Asset Manager Shell Upload Vulnerability Version: 1.0 Author: Shichemt Alen & NeTOwn3r Meher Assel Software Link: http://www.sourcecodeonline.com/details/assetmanagercmsandfileeditor.html Price : $35.00 Founded By NetOwn3r & Shichemt Alen Hi All Muslims...
Duhok Forum <= 1.1 - Remote File Upload Vulnerability
No description provided by source. ============================================== Duhok Forum Remot upload Vulnerability ============================================== Exploit Title: Duhok Forum Remot upload Shell Vulnerability Date: 30-11-2010 Author: BrOx-Dz email : [email protected] Software Lin...
Joomla 1.5.12 connect back exploit
No description provided by source. !/usr/bin/php ?php / Copyright c ITIX LTD This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or at your option a...
PHP Volunteer Management System 1.0.2 - Arbitrary File Upload
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
flatnux 2009-03-27 (upload/id) Multiple Vulnerabilities
No description provided by source. Author: girex Homepage: girex.altervista.org Date: 17/04/2009 CMS: flatnux-2009-03-27 site: flatnux.altervista.org Bugs: Multiple remote vulnerabilities Flatnux suffers of multiple local file inclusions: output of my scanner Line: 10 File:...
Free Monthly Websites 2.0 - Multiple Vulnerabilities
No description provided by source. Title: ====== Free Monthly Websites v2.0 - Multiple Web Vulnerabilities Date: ===== 2013-02-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=851 VL-ID: ===== 851 Common Vulnerability Scoring System: ==================================...
jQuery PHP Arbitrary Upload
Arbitrary Upload on jQuery/PHP + Date: 23/06/2014 + Risk: High + CWE Number : CWE-264 + Author: Felipe Andrian Peixoto + Vendor Homepage: http://rafaelcouto.com.br/upload-dinamico-com-php-jquery/sthash.uVv21WU9.dpuf + Contact: [email protected] + Tested on: Windows 7 and Linux + Dork:...
Cool source cms 1.0 underground 0day(any upload)-vulnerability warning-the black bar safety net
Common/UpLoadFile. aspx vulnerability file arbitrary upload Not like clouds or something, here is also the starter. Take the China broadcasting the auspices of the network to do the test. http://www.byzc.com/Common/UpLoadFile.aspx Set the parameter to. （..Are you going to upload path, no..he will...
HP ProCurve Manager SNAC UpdateCertificatesServlet File Upload
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 /Apache-Coyote/ include...
Joomla Unauthorized File Upload Remote Code Execution
A remote code execution vulnerability has been reported in Joomla. The vulnerability is due to improper validation of an uploaded file's extension. A remote attacker may exploit this issue by uploading a specially crafted php file. Successful exploitation would allow an attacker to execute...
File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities
====== File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities Date: ===== 2013-05-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=939 VL-ID: ===== 939 Common Vulnerability Scoring System: ==================================== 5.9 Introduction: ============= You ha...