ZeroShell Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "ZeroShell Remote...

ZeroShell Remote Code Execution

This module exploits a vulnerability found in ZeroShell 2.0 RC2 and lower. It will leverage an unauthenticated local file inclusion vulnerability in the "/cgi-bin/kerbynet" url. The file retrieved is "/var/register/system/ldap/rootpw". This file contains the admin password in cleartext. The...

Discuz! --X2/X2.5管理权限用户修改创始人用户密码漏洞

简要描述： 0.0 详细说明： Discuz! --X2/X2.5低权限用户修改搞权限用户密码漏洞 涉及 Discuz! X2/X2.5 X3未做测试。 （涉及网站 http://bbs.xiangyang.net 副站长:风的方向 密码：zhoujx626 ） （网站管理员：admin 密码不知道 修改后密码：zlf123456 站长QQ：71629730） 留下以上信息 方面查证。 今天工作关系 友情检测一个网站 拿到一个用户 用户名：风的方向 用户组：管理组 用户职务：副站长 如图： 想拿shell 但是没有UC设置权限 怎么办？ 刚开始是准备找地方写XSS盗取 admin 用户名...

TP-Link TD-W8951ND - Multiple Vulnerabilities

----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- Tested on TP-Link TD-W8951ND Firmware 4.0.0 Build 120607 Rel.30923 ------------------------- Affected vendors: ------------------------- TP-Link http://www.tp-link.com/ ----------...

Hikvision IP Cameras Overflow / Bypass / Privilege Escalation

Core Security Technologies Advisory - Hikvision IP Cameras suffer from buffer overflow, authentication bypass, hard-coded credential, and privilege escalation vulnerabilities Hikvision IP Cameras Multiple Vulnerabilities 1. Advisory Information Title: Hikvision IP Cameras Multiple Vulnerabilities...

Hikvision IP Cameras Multiple Vulnerabilities

Advisory ID Internal CORE-2013-0708 1. Advisory Information Title: Hikvision IP Cameras Multiple Vulnerabilities Advisory ID: CORE-2013-0708 Advisory URL:www.coresecurity.com/core-labs/advisories/hikvision-ip-cameras-multiple-vulnerabilities Date published: 2013-08-06 Date of last update:...

HP LaserJet Credential Disclosure / Missing Authentication

Some of the networked HP LaserJet printers have hidden URLs hardcoded in the firmware. The URLs are not authenticated and can be used to extract admin password in plaintext – among other information like WiFi settings including WPS PIN. Models affected: HP LaserJet Pro P1102w, HP LaserJet Pro...

ECSHOP latest cookie validation is not strict vulnerability-vulnerability warning-the black bar safety net

This vulnerability is what we in the non-authorization safety assessment when found. Is one ecshop station, by the conventional 0day broke the admin password, but can't open it. So you think, there is no possibility of the ciphertext md5 stored in the cookie to log in. Of course, the above...

ShopEx API injection vulnerability-vulnerability warning-the black bar safety net

Detailed description The defect file: \core\api\payment\2.0\apib2b20paymentcfg.php core\api\payment\1.0\apib2b20paymentcfg.php Section 4 row 4 $data'columns' do not filter lead injection REF: http://www.cnseay.com/3237/ Vulnerability hazard The administrator password can be used by hackers to get...

ShopEx4.85最新版本SQL注入【1】

简要描述： ShopEx4.85最新版本SQL注入，无需登录，过GPC，可直接查询管理员密码并回显 详细说明： 啥都不说了，直接上利用代码，将下面的html另存为一个html文件，修改localhost部分为站点的真实地址： None 漏洞证明：...

Microsoft Windows information leakage

It's possible to recover administrator's password used during system installation...

Design/Logic Flaw

EMC RSA Authentication Manager 8.0 before P2 and 7.1 before SP4 P26, as used in Appliance 3.0, does not omit the cleartext administrative password from trace logging in custom SDK applications, which allows local users to obtain sensitive information by reading the trace log file...

Cherry enterprise cms V3. 1 SQL injection and arbitrary administrator account password change. Delete-bug warning-the black bar safety net

Cherry enterprise website management system V3. 1 SQL injectionand any administrator account password to modify. Delete vulnerability Program download address: http://down.chinaz.com/soft/31227.htm Vulnerability file: newscategory. asp Set rs = server. CreateObject"adodb. recordset" sql ="select...

PHP Ticket System Beta 1 - Cross-Site Request Forgery

Exploit Title : php ticket system csrf 4. + Author : Pablo '7days' Riberio 5. + Team: So Good Security 6. + Other 0days : http://pastebin.com/u/7days 7. + Version : = BETA 1 8. + Tested on : windows/internet explorer 9. + Details: Reset admin password via CSRF 10. + Vendor:...

PHP Ticket System Beta 1 - Cross-Site Request Forgery

PHP Ticket System Beta 1 - Cross-Site Request Forgery 1. 2. 3. + Exploit Title : php ticket system csrf 4. + Author : Pablo '7days' Riberio 5. + Team: So Good Security 6. + Other 0days : http://pastebin.com/u/7days 7. + Version : = BETA 1 8. + Tested on : windows/internet explorer 9. + Details:...

D-Link DIR-645 getcfg.php Admin Password Disclosure

The remote D-Link DIR-645 router is affected by an information disclosure vulnerability. By sending a specially crafted request to the 'getcfg.php' script, a remote unauthenticated attacker could retrieve the admin password information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Free Monthly Websites 2.0 - Admin Password Change

========================================================================================== Title : Free Monthly Websites 2.0 Administrator Remote Password Change Date : 10/04/2013 Name : Free Monthly Websites Affected Version : 2.0 Vendor : http://www.freemonthlywebsites2.com/ Category : Web...

DaloRadius - Multiple Vulnerabilities

------------------------------------------------------------------------- Software : DaloRadius SQLi / CSRF / XSS Author : Saadat Ullah , [email protected] Author home : http://security-geeks.blogspot.com Date : 15/3/13 Vendors : http://www.daloradius.com/ Download Link :...

DaloRadius - Multiple Vulnerabilities

DaloRadius - Multiple Vulnerabilities ------------------------------------------------------------------------- Software : DaloRadius SQLi / CSRF / XSS Author : Saadat Ullah , [email protected] Author home : http://security-geeks.blogspot.com Date : 15/3/13 Vendors :...

DaloRadius CSRF / XSS / SQL Injection Vulnerabilities

DaloRadius suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities. ------------------------------------------------------------------------- Software : DaloRadius SQLi / CSRF / XSS Author : Saadat Ullah , email protected Author home :...