2145 matches found
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote attackers to hijack the authentication of users with the "edit gd infinite scroll settings" permission for requests that delete settings via unspecified vectors...
CVE-2015-0588
Cross-site request forgery CSRF vulnerability in Cisco Unified Communications Domain Manager UCDM 10 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuo77055...
用友某订单系统POST Oracle注入(疑似通用)
简要描述： 涉及订单就不深入了，但是危害自己知道，如果黑客进去了，就不好办了，故rank为高 详细说明： 有两个问题站点：http://ufbg-ss02.yonyou.com/Login/login.aspx?ReturnUrl=%2flogin.aspx http://desktop.yonyou.com/Login/login.aspx?ReturnUrl=%2flogin.aspx 按照页面上的英文来说，应该是订单系统，涉及订单就不深入了，但是危害自己知道，如果黑客进去了，就不好办了 列出了Oracle用户密码 db： CTXSYS HR MDSYS ODM ODMMTR OE...
PHPYun v3.2 /ask/model/index.class.php SQL注入漏洞
/ask/model/index.class.php$iids=$isset'ids'.','.$POST'id'; $nid=$this-obj-updateonce"attention",array"ids"=$iids,array"id"=$isset'id'; if$nid $data'uid'=$this-uid; $data'content'=$content; $data'ctime'=time; $this-obj-insertinto"friendstate",$data; echo '1'; else echo '0'; $iids拼接用戶POST的id。...
Top 5 OAuth 2 Implementation Vulnerabilities
Heya, back to my favourite topics namely OAuth . I have previously discussed about common OAuth 2 Implementation Vulnerabilities but now it is time maybe to list those and order them based on their criticality. 5 The Postman Always Rings Twice I have introduced this 'attack' in last year post...
[SECURITY] Fedora 20 Update: mingw-curl-7.39.0-1.fc20
cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...
[SECURITY] Fedora 21 Update: mingw-curl-7.39.0-1.fc21
cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...
Cart66 Lite <= 1.5.3 - SQL Injection
The QSA named ‘q’ for the ‘promotionProductSearch’ AJAX call is not being sanitized, which allows for MySQL injection utilizing a UNION. The user must be logged in for this to be applicable. The output is JSON encoded, however is a pure representation of the data returned from a MySQL query...
CVE-2014-6253
CVE-2014-6253 affects Zenoss Core (through Zenoss Core 5 Beta 3). The vulnerability is a cross-site request forgery (CSRF) that could allow a remote attacker to hijack the authentication of arbitrary users. Root cause: CSRF in the Zenoss Core web interface. Impact, as stated in the connected reco...
Humhub 0.10.0-rc.1 - SQL Injection
Humhub 0.10.0-rc.1 - SQL Injection Exploit Title: Humhub condition is injected with the otherwise unsanitized $lastEntryId, which can be any SQL injection. Proof of Concept: Performing the following request index.php?r=notification/list/index&from=999 AND CASE WHEN 0x30SELECT substringpassword,1,...
KPPW最新版SQL注入漏洞二
简要描述： KPPW最新版SQL注入漏洞二 详细说明： KPPW最新版SQL注入漏洞二 文件/control/user/accountauth.php $arrAllowAuth = array'realname','enterprise','bank','mobile','email'; if $code&&inarray$code,$arrAllowAuth $code or $code = $keys '0'; $code or kekezu::showmsg $lang 'paramerror', "index.php?do=auth", 3, '', 'warning' ;...
Humhub 0.10.0-rc.1 Cross Site Scripting / SQL Injection
Humhub 1 SQL injection vulnerability + Discovered by: Jos Wetzels, Emiel Florijn + Affects: Humhub condition is injected with the otherwise unsanitized $lastEntryId, which can be any SQL injection. Proof of Concept: Performing the following request index.php?r=notification/list/index&from=999 AND...
ARRIS VAP2500 Management Portal Authentication Bypass Vulnerability
ARRIS VAP2500 - WIRELESS VIDEO ACCESS POINT This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ARRIS VAP2500. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of user authentication. The iss...
ARRIS VAP2500 Management Portal Authentication Bypass Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ARRIS VAP2500. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of user authentication. The issue lies in the failure to compare the passwo...
CVE-2014-5395
Multiple cross-site request forgery CSRF vulnerabilities in Huawei HiLink E3276 and E3236 TCPU before V200R002B470D13SP00C00 and WebUI before V100R007B100D03SP01C03, E5180s-22 before 21.270.21.00.00, and E586Bs-2 before 21.322.10.00.889 allow remote attackers to hijack the authentication of users...
.NET Remoting Services - Remote Command Execution
Source: https://github.com/tyranid/ExploitRemotingService Exploit Database Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/35280.zip ExploitRemotingService c 2014 James Forshaw ============================================= A tool to exploit .NET Remoting...
Enalean Tuleap 7.2 - XML External Entity File Disclosure
Vulnerability title: Tuleap = 7.2 External XML Entity Injection in Enalean Tuleap CVE: CVE-2014-7177 Vendor: Enalean Product: Tuleap Affected version: 7.2 and earlier Fixed version: 7.4.99.5 Reported by: Jerzy Kramarz Details: A multiple XML External Entity Injection has been found and confirmed...
Incredible PBX 11 2.0.6.5.0 Remote Command Execution Vulnerability
Incredible PBX 11 version 2.0.6.5.0 suffers from a remote command execution vulnerability. !/usr/bin/perl Title: Incredible PBX remote command execution exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 1 September 2014 Coded: 21 October 2014 Published: 21 October 2014...
Moab Authentication Bypass (insecure message signing) [CVE-2014-5376]
Moab Authentication Bypass insecure message signing : CVE-2014-5376 Software: Moab Affected Versions: Dependent on configuration, can affect all versions of Moab including Moab 8 CVE Reference: CVE-2014-5376 Author: John Fitzpatrick, Luke Jennings MWR Labs http://labs.mwrinfosecurity.com/ Severit...
OpenSSH < 6.6 SFTP (x64) - Command Execution
define GNUSOURCE // THIS PROGRAM IS NOT DESIGNED TO BE SAFE AGAINST VICTIM MACHINES THAT // TRY TO ATTACK BACK, THE CODE IS SLOPPY! // In other words, please don't use this against other people's machines. include include include include include include include include include define mina,b ab?a:...