Vulnerability alert: well-known Forum system vBulletin commonly used SEO plugin VBSEO there is a serious security vulnerability-vulnerability warning-the black bar safety net

vBulletin team recently to all their customers warning of its plug-in VBSEO there was a serious security vulnerability. VBSEO for vBulletin and very popular third party seo modules, worst of VBSEO official already in the last year to stop updating this plug-in, that no one can exploit to provide...

青果教务系统存在SQL注入漏洞（简单绕过WAF保护）

简要描述： 青果教务系统存在SQL注入漏洞（简单绕过WAF保护） 详细说明： 案例：http://www.kingosoft.com/cgal/mxyh.aspx 存在漏洞的文件：/xsweb/pub/temp.aspx?type=ajax&fellowXh=wooyun 同样，该系统有waf的防御，只需要使用--tamper参数即可绕过，继续注入 sqlmap.py -u "http://stu.gxufe.cn/xsweb/pub/temp.aspx?type=menu&nj=wooyun" --tamper "equaltolike.py" --dbms mssql sqlmap....

Discuz! Micro-channel public platform plug-ins patch to bypass the override to delete the database-vulnerability warning-the black bar safety net

Discuz! Micro-channel public platform plug-ins patch to bypass the override to delete the database, and can completely bypass the Baidu cloud waf A vulnerability published is getshell, the results of the plug-in in response to the rapid Ah, today hit the patch, have to say dz is awesome Then real...

php云两处SQL二次注入

简要描述： php云两处二次注入 详细说明： 最新版。两个注入点。顺带一个绕过waf的小技巧。 第一处:/member/model/index.class.php 39行 function indexaction $this-publicaction; $this-membersatic; $this-comcache; $resume = $this-obj-DBselectonce"resume","uid='".$this-uid."'"; $expect=$this-obj-DBselectonce"resumeexpect","id='".$resume'defjob'."'"...

ThinkSNS第一弹 － SQL注入

简要描述： ThinkSNS漏洞系列第一弹，某处处理不当导致SQL注入 详细说明： 漏洞点出现在Comment Widget里： \addons\widget\CommentWidget\CommentWidget.class.php:138 / 添加评论的操作 @return array 评论添加状态和提示信息 / public function addcomment // 返回结果集默认值 $return = array 'status' = 0, 'data' = L 'PUBLICCONCENTISERROR' ; // 获取接收数据 $data = $POST; // 安全过滤...

cmseasy 最新版补丁绕过sql注入（绕过360waf）

简要描述： 继续绕啊绕啊 详细说明： 首先还是老地方：archiveact.php611行） function respondaction includeonce ROOT . '/lib/plugins/pay/' . front::$get'code' . '.php'; $payclassname = front::$get'code'; $payobj = new $payclassname; $uri = $SERVER"REQUESTURI"; $uriget = strstr$uri, '?'; $uriget = strreplace'?', '', $uriget;...

cmseasy 最新版SQLl注入（第八次绕WAF）

简要描述： 继续绕啊绕啊 详细说明： cmseasy 终于更新了 看了下对比文件，那修复无法吐槽 function LiveMessage$a global $db; $sessionid = $SESSION'sessionid'; $name = addslasheshtmlspecialchars$a'name'; $email = addslasheshtmlspecialchars$a'email'; $country = htmlspecialchars$a'country'; $phone = htmlspecialchars$a'phone'; $departmentid...

Discuz! 微信公众平台插件补丁绕过 越权删除数据库

简要描述： Discuz! 微信公众平台插件补丁绕过 越权删除数据库，完全可以绕过百度云waf 详细说明： 上一个漏洞发表的是getshell，结果插件响应迅速啊，今天就打了补丁，不得不说dz很给力 那么真的修复干净了吗： 再看代码: if !strpos$GET'mod','/' && !strpos$GET'mod','\' && !strpos$GET'ac','/' && !strpos$GET'ac','\' include DISCUZROOT.'./source/plugin/huxwx/mod/'.$GET'mod'.'/'.$GET'ac'.'.php';...

Yahoo Confirms Infected Servers Unrelated to Shellshock

Yahoo CISO Alex Stamos refuted claims made by a Louisiana security company that a number of Yahoo servers had been compromised by Romanian hackers using Shellshock exploits against the vulnerability in Bash. Stamos said three Yahoo Sports API servers were infected with malware by hackers looking...

CMS AutoWeb 3.0 SQL Injection Vulnerability

CMS AutoWeb version 3.0 suffers from a remote SQL injection vulnerability. Note that this finding houses site-specific data. + Sql Injection on CMS AutoWeb v3.0 + Date: 24/09/2014 + CWE Number : CWE-89 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.multdivision.com.br...

CMS AutoWeb 3.0 SQL Injection

Sql Injection on CMS AutoWeb v3.0 + Date: 24/09/2014 + CWE Number : CWE-89 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.multdivision.com.br + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: mostrar.php + Dork :...

Cross site scripting

Cross-site scripting XSS vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall WAF 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field...

CVE-2011-4887

Cross-site scripting XSS vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall WAF 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field...

CVE-2011-4887

The CVE-2011-4887 entry covers an XSS vulnerability in the MX Management Server’s management GUI (Violations Table) of Imperva SecureSphere Web Application Firewall 9.0. The issue stems from input handling in the username field, allowing remote attackers to inject arbitrary web script or HTML. Do...

CVE-2014-2595 - Authentication Bypass in Barracuda Web Application Firewall

Vulnerability title: Authentication Bypass in Barracuda Web Application Firewall CVE: CVE-2014-2595 Vendor: Barracuda Product: Web Application Firewall Affected version: Firmware v7.8.1.013 Fixed version: N/A Reported by: Nick Hayes Details: It is possible to re-use a link which includes a...

Barracuda WAF Authentication Bypass

Vulnerability title: Authentication Bypass in Barracuda Web Application Firewall CVE: CVE-2014-2595 Vendor: Barracuda Product: Web Application Firewall Affected version: Firmware v7.8.1.013 Fixed version: N/A Reported by: Nick Hayes Details: It is possible to re-use a link which includes a...

Oxwall 1.7.0 Remote Code Execution

!/usr/bin/env python Oxwall 1.7.0 Remote Code Execution Exploit Vendor: Oxwall Software Foundation Product web page: http://www.oxwall.org Affected version: 1.7.0 build 7907 and 7906 Summary: Oxwall is unbelievably flexible and easy to use PHP/MySQL social networking software platform. Desc: Oxwa...

Oxwall 1.7.0 - Remote Code Execution

Oxwall 1.7.0 - Remote Code Execution !/usr/bin/env python Oxwall 1.7.0 Remote Code Execution Exploit Vendor: Oxwall Software Foundation Product web page: http://www.oxwall.org Affected version: 1.7.0 build 7907 and 7906 Summary: Oxwall is unbelievably flexible and easy to use PHP/MySQL social...

Barracuda WAF - Filter Bypass & Persistent Vulnerability

Document Title: =============== Barracuda WAF - Filter Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1208 Video: http://www.youtube.com/watch?v=-yQVyik3Ggo Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1065 Release Date...

Barracuda WAF - Filter Bypass & Persistent Vulnerability

Document Title: =============== Barracuda WAF - Filter Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1208 Video: http://www.youtube.com/watch?v=-yQVyik3Ggo Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1065 Release Date...