dedecms最新版本后台getshell

官方下载最新安装包http://updatenew.dedecms.com/base-v57/package/DedeCMS-V5.7-UTF8-SP2.tar.gz 环境：Linux+phpstudy 上传图片抓包 POST /dedecms/include/dialog/selectimagespost.php?CKEditor=body&CKEditorFuncNum=2&langCode=zh-cn HTTP/1.1 Host: Content-Length: 42080 Cache-Control: max-age=0 Origin: http://...

Aerohive Networks HiveManager Remote Shell Upload Exploit

Exploit for hardware platform in category web applications I. BACKGROUND Aerohive Networks HiveManager Classic Online NMS is a cloud-enabled enterprise-class management system for Aerohive networking products. HiveManager Classic Online offers simple policy creation, firmware upgrades, and...

Exploit for Buffer Underflow in Microsoft

github 军火库 web，安全，渗透，军火库 漏洞及渗透练习平台： WebGoat漏洞练习环境 https://github.com/WebGoat/WebGoat https://github.com/WebGoat/WebGoat-Legacy Damn Vulnerable Web Application漏洞练习平台 https://github.com/RandomStorm/DVWA 数据库注入练习平台 https://github.com/Audi-1/sqli-labs 用node编写的漏洞练习平台，like OWASP Node Goat...

Reinstallation Bypass Vulnerability in ZZCMS Version 8.1

ZZCMS is an enterprise website builder. A reinstallation bypass vulnerability exists in ZZCMS version 8.1. The vulnerability is caused by determining whether the lock file is installed at step1, which can be directly submitted by POST to the later steps of the reinstallation, allowing an attacker...

Arbitrary File Upload Vulnerability in OTCMS v2.56

Net Titanium Article Management System OTCMS is a simple and good asp article management system. OTCMS v2.56 has an arbitrary file upload vulnerability. The vulnerability is due to the background upload file did not strictly check the file content and file suffix caused by the attacker is allowed...

XYHCMS \App\Runtime\Data\config\site.php page has an arbitrary file write vulnerability

Xing Yunhai CMS XYHcms is a completely open source CMS content management system. XYHCMS \App\Runtime\Data\config\site.php page has an arbitrary file write vulnerability. Attackers use this vulnerability to obtain server privileges by writing Webshell...

File Upload Vulnerability in Infinite Streaming Media System (AMS) of Beijing Zhongshi Media Technology Co.

Infinite Streaming Media System AMS is a complete set of IP network-based audio/video application platform, integrating CTVTV's live video broadcasting system, video-on-demand VOD system, video broadcasting system and video production sub-systems, aiming to provide users with a complete set of...

Command Execution Vulnerability in Synergy Certification Billing System

Lingfeng authentication billing system is a new generation of RADIUS authentication billing management software developed by Shenzhen Shuangmeng Technology Co., Ltd, which supports standard RADIUS protocol and extended RADIUS protocol. Symphony Authentication Billing System has a command executio...

Two Arbitrary File Upload Vulnerabilities Exist in the Backend of Bunker Buster Machine

Bunker Fortress is the industry's first software form of the Fortress, providing a centralized authentication, centralized access authorization, centralized access management, centralized operation audit and a single point of simplified operation and management required for remote operations and...

ThinkPHP Cache Functions Have Design Flaw Vulnerability

ThinkPHP is developed and maintained by the Shanghai Top Thinking company MVC structure of the open-source PHP framework. There is a design flaw vulnerability in the ThinkPHP cache function. The vulnerability is due to ThinkPHP in the use of cache data serialization, stored in the php file caused...

SQL Injection and Arbitrary Traversal Download Vulnerabilities in Zhejiang Dahua Intelligent Operation and Maintenance Management System

Zhejiang Dahua Intelligent Operation and Maintenance Platform, based on the field of video surveillance in the security industry, adopts the technologies of intelligent analysis, fault detection and workflow engine, integrates the functions of video quality diagnosis, video recording checking and...

Multiple Vulnerabilities in JeeCMS v8.1 Template Management Function

JEECMS is a JEECMSv8.1 version is a collection of PC Internet, mobile Internet and WeChat website in one of the website group management system. JeeCMS v8.1 template management function exists file write, arbitrary file naming, arbitrary file creation vulnerability. An attacker can exploit the...

SQL Injection Vulnerability in PHPSHE B2C Mall System v1.5

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation and feedback and other functions, and provides easy operation, practical features, quickly allow users to establish a personalized online store,...

Code execution vulnerability in ThinkerCMS InputController.class.php

ThinkerPHP is based on thinkphp3.2 development of a rapid development system, which has excellent user experience, efficient development efficiency, simple and easy to get started, etc. ThinkerCMS is ThinkerPHP's content management system dedicated to small websites. A code execution vulnerabilit...

ourphp ourphp_filebox.php write any file vulnerability in frontend

OURPHP is a PHP+MySQL based development of W3C standard building system. ourphp v1.7.3 ourphpfilebox.php exists a write arbitrary file vulnerability in the frontend, due to the program fails to effectively examine the data submitted by visitors. Attackers use the vulnerability by writing Trojan...

File upload vulnerability in the latest version of metinfo

metinfo cms is an enterprise website management system with PHP Mysql architecture. A file upload vulnerability exists in metinfo cms due to the system not effectively filtering the depth variable. An attacker can use this vulnerability to bypass the include file and upload a webshell to gain...

St2-045 Remote Command Execution Vulnerability in Dieppe UMC Unified Management Center

As a unified management platform of DIPPER Technology, UMC carries out componentized management for the whole series of DIPPER products. Each type of product can be added to the platform in the form of components, and each component can be deeply and intelligently related to each other, so as to...

File Upload Vulnerability in FeiWa B2B2C Mall System

FeiWa B2B2C mall system is an enterprise-level B2B2C e-commerce platform system. A file upload vulnerability exists in FeiWa B2B2C Mall System. An attacker can exploit the vulnerability to parse a webshell in image format...

Arbitrary File Write Vulnerability in Wolf CMS 0.8.3.1 Backend

Wolf CMS is a lightweight CMS program written in PHP. The latest version of Wolf CMS, version 0.8.3.1, has an arbitrary file write vulnerability in the backend, which can be exploited to create files with arbitrary suffixes and write arbitrary content. An attacker can use this vulnerability to...

NIUSHOP open source mall system front '/Components.php' page there are arbitrary file upload vulnerabilities

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NIUSHOP open source mall system front '/Components.php' page there are arbitrary file upload vulnerability...