Discuz!后台秒getshell（第三方安全问题）

简要描述： Discuz!后台再严，经不住第三方放水,不禁在想discuz插件那么多，漏洞补得完吗 详细说明： 最近github各种Discuz后台弱口令，于是自己下载了一个discuzx3.2应该是最新版了，后台各种找啊，没找到bug，就在要放弃的时候，一个插件，起死回生。 漏洞证明： 1.后台找到应用，插件 2.有一个好贷站长联盟 3.安装之后有一个导入接口信息 4.然后导入接口信息 5.接口信息会放到这里 6.然后就shell了 img src="https:/...

Oracle Data Quality Trillium Based SetEntities Type Confusion (CVE-2015-0444)

A remote code execution vulnerability exists in Oracle Data Quality TSS12.LoaderWizard.lwctrl ActiveX control. The vulnerability is due to a type confusion when handling data passed to SetEntities. A remote attacker can exploit this vulnerability by enticing a user to access a maliciously crafted...

How to Hack Millions of Android Phones Using Stagefright Bug, Without Sending MMS

Earlier this week, security researchers at Zimperium revealed a high-severity vulnerability in Android platforms that allowed a single multimedia text message to hack 950 Million Android smartphones and tablets. As explained in our previous article, the critical flaw resides in a core Android...

The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the JScript 9 component in the Internet Explorer browser is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure through a specially crafted web page...

Unspecified vulnerability in Oracle MySQL Server:Security:Privileges component (CNVD-2015-04714)

Oracle MySQL Server is a relational and popular database. A security vulnerability exists in the Server:Security:Firewall subcomponent of Oracle MySQL Server, which can be exploited by remote attackers to construct a malicious WEB page and trick users into parsing it, which can impact system...

Unspecified Vulnerability in Oracle Java SE Install Component

Oracle Java SE is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments. A security vulnerability exists in the Install subcomponent of Oracle Java SE, which can be exploited by a remote attacker to construct a malicious web page and...

Unspecified Arbitrary Code Execution Vulnerability in Oracle Java SE CORBA Component

Oracle Java SE is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments. A security vulnerability exists in the CORBA subcomponent of Oracle Java SE, which can be exploited by a remote attacker to construct a malicious WEB page that ca...

Unspecified Vulnerability in Oracle Java SE 2D Component

Oracle Java SE is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments. A security vulnerability exists in the 2D subcomponent of Oracle Java SE, which can be exploited by a remote attacker to construct a malicious WEB page and trick...

Unspecified Vulnerability in Oracle Java SE Deployment Component

Oracle Java SE is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments. A security vulnerability exists in the Deployment subcomponent of Oracle Java SE, which can be exploited by a remote attacker to construct a malicious web page an...

Unspecified Vulnerability in Oracle Java SE Hotspot Component

Oracle Java SE is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments. A security vulnerability exists in the Hotspot subcomponent of Oracle Java SE, which can be exploited by a remote attacker to construct a malicious WEB page and...

Microsoft Internet Explorer CVE-2015-2411 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Adobe Flash Player and AIR Memory Error Referencing Code Execution Vulnerability (CNVD-2015-04513)

Adobe Flash Player is a player that parses SWF content. Adobe AIR is a technology developed for the integration of web and desktop applications, which allows you to control cloud-based programs on the web without having to go through a browser. Adobe Flash Player and AIR are implemented with a...

Adobe Flash Player and AIR Memory Error Referencing Code Execution Vulnerability (CNVD-2015-04514)

Adobe Flash Player is a player that parses SWF content. Adobe AIR is a technology developed for the integration of web and desktop applications, which allows you to control cloud-based programs on the web without having to go through a browser. Adobe Flash Player and AIR are implemented with a...

1 Click Audio Converter ActiveX Control 'SkinCrafter.dll' ActiveX Buffer Overflow Vulnerability

DVDVideoTool 1 Click Audio Converter is a set of audio file format conversion software from DVDVideoTool.com. A buffer overflow vulnerability in the DVDVideoTool.com 1 Click Audio Converter ActiveX control allows remote attackers to construct a malicious web page and trick users into parsing it,...

Koha 3.20.1 - Multiple XSS and XSRF Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Koha Open Source ILS - Multiple XSS and XSRF Vulnerabilities Google Dork: Date: 25/06/2015 Exploit Author: Raschin Tavakoli, Bernhard Garn, Peter Aufner and Dimitris Simos - Combinatorial Security Testing Group of SBA Research...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2015-03743)

Microsoft Internet Explorer is a popular WEB browser. An unspecified memory corruption vulnerability exists in Microsoft Internet Explorer that could allow a remote attacker to construct a malicious web page and trick the user into parsing it, which could crash the application or execute arbitrar...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2015-03700)

Microsoft Internet Explorer is a popular WEB browser. An unspecified memory corruption vulnerability exists in Microsoft Internet Explorer that could allow a remote attacker to construct a malicious web page and trick the user into parsing it, which could crash the application or execute arbitrar...

Microsoft Internet Explorer CVE-2015-1735 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer CVE-2015-1732 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer CVE-2015-1744 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...