dotnet: XML source markup processing remote code execution

It was discovered that .NET Core did not properly check the source markup of XML files. A remote, unauthenticated attacker could possibly exploit this flaw to execute arbitrary code by sending specially crafted requests to an application parsing certain kinds of XML files or an ASP.NET Core...

SQL injection vulnerability in pr***.asp page of Changzhou OceanX Network Technology Co.

Changzhou Oceanus Network Technology Co., Ltd. is a company in Changzhou to provide website construction, web design, web production, network promotion, electronic sample production, enterprise post office and other Internet services company, for enterprises to provide, including web hosting,...

SQL injection vulnerability in sh***.asp page of website building system of Liaocheng City Sky Network Technology Co.

Ltd. provides one-stop online marketing planning, training, website construction, website production, website optimization, Baidu optimization, site optimization, keyword ranking, promotion, operation, SEO optimization and other e-commerce solutions, is committed to serving the vast number of sma...

dotnet: XML source markup processing remote code execution

It was discovered that .NET Core did not properly check the source markup of XML files. A remote, unauthenticated attacker could possibly exploit this flaw to execute arbitrary code by sending specially crafted requests to an application parsing certain kinds of XML files or an ASP.NET Core...

dotnet: XML source markup processing remote code execution

It was discovered that .NET Core did not properly check the source markup of XML files. A remote, unauthenticated attacker could possibly exploit this flaw to execute arbitrary code by sending specially crafted requests to an application parsing certain kinds of XML files or an ASP.NET Core...

HelloWeb 2.0 - Arbitrary File Download Vulnerability

Exploit for asp platform in category web applications Exploit Title: HelloWeb 2.0 - Arbitrary File Download Vendor Homepage: https://helloweb.co.kr/ Version: 2.0 Latest and previous versions Exploit Author: bRpsd Contact Author: cyatlive.no Google Dork: inurl:exec/file/download.asp Type: WebApps ...

HelloWeb 2.0 Arbitrary File Download

Exploit Title: HelloWeb 2.0 - Arbitrary File Download Date: 2020-07-09 Vendor Homepage: https://helloweb.co.kr/ Version: 2.0 Latest and previous versions Exploit Author: bRpsd Contact Author: cyatlive.no Google Dork: inurl:exec/file/download.asp Type: WebApps / ASP...

HelloWeb 2.0 - Arbitrary File Download

Exploit Title: HelloWeb 2.0 - Arbitrary File Download Date: 2020-07-09 Vendor Homepage: https://helloweb.co.kr/ Version: 2.0 Latest and previous versions Exploit Author: bRpsd Contact Author: cyatlive.no Google Dork: inurl:exec/file/download.asp Type: WebApps / ASP...

SQL injection vulnerability in the ne***.asp page of website building system of Yixing Ding.com Network Service Co.

Yixing Ding.com Network Service Co., Ltd. is a network technology company engaged in enterprise Internet access, web hosting, system cabling and other services. There is a SQL injection vulnerability in the ne.asp page of the website building system of Yixing Ding.com Network Service Co. Ltd. whi...

Microsoft SharePoint Server 2019 < 16.0.10359.20000 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application...

Microsoft SharePoint Server 2013 < 15.0.5249.1001 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication...

Microsoft SharePoint Server 2013 < 15.0.5241.1000 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application...

SQL injection vulnerability in ab***.asp page of Shijiazhuang Baicheng Network Technology Co.

Shijiazhuang Baicheng Network Technology Co. Shijiazhuang Baicheng Network Technology Co., Ltd. building system ab.asp page there is a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...

SQL injection vulnerability in ne***.asp page of Shijiazhuang Baicheng Network Technology Co.

Shijiazhuang Baicheng Network Technology Co. Shijiazhuang Baicheng Network Technology Co., Ltd. building system ne.asp page there is a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in li***.asp page of website building system of Nanjing Xubu Network Technology Co.

Nanjing Xubu Network Technology Co., Ltd. is an Internet solution provider. The system li.asp page of Nanjing Xubu Network Technology Co., Ltd. has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2020-13166

The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded the same for all customers' installations in web.config, and can be used to send serialized ASP code...

Hardcoded credentials

The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded the same for all customers' installations in web.config, and can be used to send serialized ASP code...

CVE-2020-13166

The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded the same for all customers’ installations in web.config, and can be used to send serialized ASP code. Recent assessments: wvu-r7 at May 21, 2020 5:50am UTC reported: Metasplo...

The vulnerability of the Telerik UI software for ASP.NET AJAX, related to the encryption flaws in RadAsyncUpload, allows attackers to perform arbitrary file uploads or execute arbitrary code.

The vulnerability of the Telerik UI software for ASP.NET AJAX is related to the shortcomings of the RadAsyncUpload encryption mechanism. Exploiting this vulnerability allows a malicious actor to perform arbitrary file uploads or execute arbitrary code...

SQL injection vulnerability in ne***.asp page di*** parameter and pr***.php page di*** parameter of website building system of Shenzhen Dr. Tong Technology Co.

Ltd. is an Internet infrastructure operator engaged in website construction, website optimization and Internet marketing. There is a SQL injection vulnerability in the ne.asp page di parameter and pr.php page di parameter of the website building system of Shenzhen Dr. Tong Technology Co. Ltd. whi...