File Containment Vulnerability in Hangzhou Ancai Network Reimbursement System (CNVD-2017-02374)

Hangzhou Ancai Network Reimbursement System is an online reimbursement system that supports online bill of lading and online approval for employees, bidding farewell to paper transmission and improving the timeliness, safety and standardization of information transmission. A file inclusion...

HttpCombiner ASP.NET - Remote File Disclosure Vulnerability

Exploit for asp platform in category web applications Exploit Title: HttpCombiner ASP.NET Remote File Disclosure Vulnerability Google Dork: filetype:txt intext:HttpCombiner.ashx Date: 2014-10-10 Exploit Author: Hoang Anh Thai Vendor Homepage:...

HttpCombiner ASP.NET - Remote File Disclosure

HttpCombiner ASP.NET - Remote File Disclosure Exploit Title: HttpCombiner ASP.NET Remote File Disclosure Vulnerability Google Dork: filetype:txt intext:HttpCombiner.ashx Date: 2014-10-10 Exploit Author: Hoang Anh Thai Vendor Homepage:...

某教育类通用cms任意文件下载漏洞

简要描述： 某教育类通用cms任意文件下载漏洞 详细说明： 不知道算不算通用 可下载web.config文件，数据库信息文件泄露 http://sbc.xzit.edu.cn/hxjc/DownLoad.aspx?Accessory=../web.config http://hedds.njutcm.edu.cn/DownLoad.aspx?Accessory=../web.config http://www.emcjs.org/DownLoad.aspx?Accessory=../web.config...

Namad (IMenAfzar) 2.0.0.0 - Remote File Disclosure Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: Namad Version: 2.0.0.0 Website: http://imenafzar.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote File Download...

DNN (DotNetNuke®) EasyDnnGallery Module Arbitrary File Download Vulnerability

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : DNN DotNetNuke® EasyDnnGallery Module Arbitrary File Download Vulnerability Author : alieye vendor : http://www.easydnnsolutions.com/ , http://store.dnnsoftware.com/ Contact : [email protected] Risk : High Class: Remote Google Dork...

DotNetNuke dnnUI_NewsArticlesSlider Arbitrary File Download

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : DNN DotNetNuke® dnnUINewsArticlesSlider Module Arbitrary File Download Vulnerability Author : alieye vendor : http://www.dnnui.com/ , http://store.dnnsoftware.com/ Contact : [email protected] Risk : High Class: Remote Google Dork:...

.NET Form Authentication Insecure Redirect

Seeker Research Center Security Advisory By Irene Abezgauz =========== I. Overview =========== An Insecure Redirect vulnerability has been identified in the .NET Form Authentication - in the Redirect From Login mechanism. This vulnerability allows an attacker to craft links that contain redirects...

PT-2011-3518 · Microsoft · .Net Framework 4 +2

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework 4 Chart Control for Microsoft .NET Framework 3.5 SP1 Description: An information disclosure issue exists due to the improper handling of special characters within a specially crafted URI by Microsoft Chart controls...

CVE-2011-1424

The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not properly set the localOnly attribute of the trace element, which allows remote authenticated users to obtain sensitive information via ASP.NET...

Design/Logic Flaw

The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving 1 Admin/Defaults/frmDefaultSiteSettings.aspx, 2...

CVE-2011-2159

The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving 1 Admin/Defaults/frmDefaultSiteSettings.aspx, 2...

CVE-2011-2159: Undefined Security Weakness

The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving 1 Admin/Defaults/frmDefaultSiteSettings.aspx, 2...

Douran 3.9.7.8 File Download/Source Code Disclosure Vulnerability

Exploit for asp platform in category web applications Title: Douran Portal File Download/Source Code Disclosure Vulnerability Date of Publishing: 16 March 2010 Application Name: Douran Portal Version: 3.9.7.8 Impact: Medium Vendor: www.douran.com Link: http://douran.com/HomePage.aspx?TabID=4862...

wcanalyzer.com A free security service that audits your web.config settings !

wcanalyzer.com A free security service that audits your web.config settings ! 30+ Security Checks High quality and compherensive security checks. You 'll be suprised when you see our report. Click for our vulnerability database. Detailed Report Generates a detailed HTML report with vulnerability...

ASP.NET Padding Oracle Vulnerability (MS10-070)

No description provided by source. Source: http://blog.mindedsecurity.com/2010/10/breaking-net-encryption-with-or-without.html !/usr/bin/perl Webconfig Bruter - exploit tool for downloading Web.config FOr use this script you need Pudbuster. Padbuster is a great tool and Brian Holyfield deserve al...

ASP.NET Padding Oracle Vulnerability (MS10-070)

Exploit for windows platform in category remote exploits =============================================== ASP.NET Padding Oracle Vulnerability MS10-070 =============================================== Source: http://blog.mindedsecurity.com/2010/10/breaking-net-encryption-with-or-without.html...

Microsoft ASP.NET - Padding Oracle (MS10-070)

Microsoft ASP.NET - Padding Oracle MS10-070 Source: http://blog.mindedsecurity.com/2010/10/breaking-net-encryption-with-or-without.html !/usr/bin/perl Webconfig Bruter - exploit tool for downloading Web.config FOr use this script you need Pudbuster. Padbuster is a great tool and Brian Holyfield...

Microsoft ASP.NET - Padding Oracle (MS10-070)

Source: http://blog.mindedsecurity.com/2010/10/breaking-net-encryption-with-or-without.html !/usr/bin/perl Webconfig Bruter - exploit tool for downloading Web.config FOr use this script you need Pudbuster. Padbuster is a great tool and Brian Holyfield deserve all the credits. Note from Exploit-db...

Acteaveidia Portals Read web.config Vulnerability

Exploit for php platform in category web applications ================================================= Acteaveidia Portals Read web.config Vulnerability ================================================= Exploit Title : Acteaveidia Portals Read web.config Vulnerability Author : ashiyane digital...