4074 matches found
Sky classroom file upload vulnerability-vulnerability warning-the black bar safety net
Brief description: Allow the upload of dangerous file type,this system is still a lot of Open the network course website, as shown in Figure, landing it, and now SkyDrive. Upload a PHP file, the web site didn't filter PHP file. ! 1 8-300x166. png ! 1 8-300x166. png ! 1 8-300x166. png After enteri...
Wordpress plugin wp-homepage-slideshow Arbitrary File Upload Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
Wordpress plugin wp-image-news-slider Arbitrary File Upload Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
CoolPlayerPlusPortable 2.19.4 (M3U File) Stack Buffer Overflow
Exploit for windows platform in category remote exploits -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= /' \ /'\ /\ \ /'\ /, \ /\/\ \ \ \ \ ,/\ /\ \ //\ \ /' \ /\ //\ Exploit database separated by exploit // type local, remote, DoS, etc. + Site : 1337day.com +...
Spring blast remote code execution vulnerability with EXP-a vulnerability warning-the black bar safety net
Last week that is in the 1 On 1 of 6 days, the security firm Aspect Security revealed in the Spring Framework Development Code, and found a significant security vulnerability. The vulnerability is named“remote code with Expression Language injection”in. They found that by sending a specific Sprin...
South Korea HOMPYNET CMS multiple vulnerabilities-vulnerability warning-the black bar safety net
Upload vulnerability URL: /admin/imageadmin3. php? boardid=&iname=&iform= /admin/imageadmin2. php? boardid=&iname=&iform= Uploaded posterior diameter: /biswebpage/images/t. php. en Editor: /admin/editor/SWE.php /program/editor/SWE.php Data configuration file path: /mconfig/DATA/gsetting.php This...
New Java exploit sells for $5000 on Black market
We continues to recommend users disable the Java program in their Web browsers, because it remains vulnerable to attacks that could result in identity theft and other cyber crimes and less than 24 hours after Oracle Sunday released a security update that addresses two critical zero-day...
New Java exploit sells for $5000 on Black market
We continues to recommend users disable the Java program in their Web browsers, because it remains vulnerable to attacks that could result in identity theft and other cyber crimes and less than 24 hours after Oracle Sunday released a security update that addresses two critical zero-day...
phpshop 2.0 SQL injection and fix-vulnerability warning-the black bar safety net
Title : phpshop 2.0 SQL Injection Vulnerability Author : By onestree Download address : http://code.google.com/p/phpshop/downloads/list Test address: windows 7 / ubuntu SQLi p0c: ================== http://www.xxx.com /phpshop 2.0/? page=admin/functionlist&moduleid=1 1' union select...
Precision Bouncer List Phishing Kits Keep Targets Inside the Ropes
Just when you thought phishers had exhausted all avenues of innovation, a new tactic has emerged in attacks against financial institutions bringing the level of targeting and geo-filtering to precise new levels. Dubbed bouncer list phishing by RSA Security, these attack kits are built off stolen...
Wordpress striking theme Full Path Disclosure vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
The movable section(dkcms)vulnerability-vulnerability warning-the black bar safety net
The main is almost 3 versions of main, v2. 0 v3. 1 v4. 2 Google keyword: powered by dkcms The website turned out to find the source code download, Baidu, download this 3 source code, as is the asp source code, mostly to look at the default database, what are the three default database V2. 0...
Lecteur multimedia VLC 2.0.3 Twoflower (.ape) Crash Poc
Exploit for windows platform in category dos / poc -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= /' \ /'\ /\ \ /'\ /, \ /\/\ \ \ \ \ ,/\ /\ \ //\ \ /' \ /\ //\ Exploit database separated by exploit // type local, remote, DoS, etc. + Site : 1337day.com + Support...
ecshop all version injection analysis-vulnerability warning-the black bar safety net
Some time ago, probably 2 0 1 2 Christmas around the t00ls saw ecshop all version injection, then also downloaded the latest program analysis,recent exam is busy, just today I put my analysis of the recorded. Vulnerability key file: /includes/liborder.php Key functions: | 0 1 | function...
CoolPlayerPlusPortable 2.19.4 (m3u) crash poc
Exploit for windows platform in category dos / poc -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= /' \ /'\ /\ \ /'\ /, \ /\/\ \ \ \ \ ,/\ /\ \ //\ \ /' \ /\ //\ Exploit database separated by exploit // type local, remote, DoS, etc. + Site : 1337day.com + Support...
Wordpress ultimate-security-check plugin Full Path Disclosure vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
anwsion the latest version of any upload-vulnerability warning-the black bar safety net
Upload attachments where not properly handle the file suffix problem: ! Judgment is the file header does not determine the suffix problem。。。。。。。。 Vulnerability to prove: http://wenda.anwsion.com/uploads/questions/20121126/e826a3e05a4beb6c24373ba014fe39f8.phppass Merge pictures word Trojan...
phpcms post_click injection 0day exploit code-exploit warning-the black bar safety net
Someone released a phpcmsv9 of 0day,feel free to write one using the code,wherein the injected code has two forms: 问题 函数 \phpcms\modules\poster\index.php public function posterclick $id = isset$GET'id' ? intval$GET'id' : 0; $r = $this-db-getonearray'id'=$id; if ! isarray$r && empty$r return false...
BestPlayRadio v1.0 (.mp3) Crash PoC
Exploit for windows platform in category dos / poc -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= /' \ /'\ /\ \ /'\ /, \ /\/\ \ \ \ \ ,/\ /\ \ //\ \ /' \ /\ //\ Exploit database separated by exploit // type local, remote, DoS, etc. + Site : 1337day.com + Support...
About Tencent customer service open platform of the 2 vulnerability+subsidiary vulnerabilities 1-vulnerability warning-the black bar safety net
Vulnerability name: Tencent customer service open platform backend bypass A, detailed description: The login section by noPermissjs http://347.kf.ieodopen.qq.com/admin/js/index.js?v=20121007 Because. kf. ieodopen. qq. com domain name the opening number represents the application number so I think...