方维名品折扣系统越权清除用户收货地址 (Demo)

简要描述： RT 详细说明： demo地址：http://mp.fanwe.net 老规矩注册两账号 账号A收货地址 账号B 收货地址 点击账号B的提交，抓包修改地址id为账号A的地址id 查看账号A地址，发现被清除 漏洞证明： 如上...

I-net Multi User Email Script SQLi Vulnerability

No description provided by source. Name : I-net Multi User Email Script SQLi Vulnerability Date : june, 27 2010 Critical Level : HIGH Vendor Url : http://www.i-netsolution.com/ Google Dork: inurl:/jobsearchengine/ Author : Sid3^effects aKa HaRi shellc99atyahoo.com special thanks to : r0073r...

Tencent a certain activity a leak a large number of user address information-bug warning-the black bar safety net

Friends through QQ sent me to one of the activities:“there is no free lunch, but for Breakfast you can have! I was participating in yinlu good porridge road free good Breakfast apply for activities, the same address apply for the number up to 2 0 people, Homo habilis hand is a free good Breakfast...

Hitechvalley iNet CMS advanced SQL Injection vulnerability

Hitechvalley iNet is a CMS for nepalian webistes, which is used mainly by organizations, the govnerment and the Nepal Army. Exploit Title: Hitechvalley iNet CMS SQL Injection vulnerability Date: 24/02/2013 Author: Zyklon B - https://twitter.com/BZyklon Vendor or Software Link:...

B2C open source online shop system Yuncart newest vulnerabilities 0day-vulnerability warning-the black bar safety net

Vulnerability type: xss Application for return of Brief code: $problem = striptags$POST"problem"; $way = trim$POST"way"; $receivername = trim$POST"name"; $receiverprovince = trim$POST"province"; $receivercity = trim$POST"city"; $receiverdistrict = trim$POST"district"; $receiveraddress =...

kernel: RDS sockets local privilege escalation

The rdspagecopyuser function in net/rds/page.c in the Reliable Datagram Sockets RDS protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg syste...