HDWiki Xss+CSRF GetShell 0day

简要描述： 啊,这个不知道有没有奖金. Xss + CSRF = Getshell 详细说明： 主要两处问题： 一、前台创建词条时插入内容只是editor的js对敏感code做了客户端过滤，传入服务器后服务器端过滤不够严格，构成Xss。 二、后台对文件编辑时没有限制相对路径的使用，文件可以直接使用相对路径编辑在列表里可以看到默认是绝对路径的，并且在编辑文件位置没有进行验证，构成CSRF。 漏洞证明： 具体利用Getshell： 普通用户前台创建词条： 发布，截包修改： 这里插入的是一个写好的JS，编辑install/index.php内容为一句话木马。 内容如下： function aj...

Mozilla WebMaker - Filter Bypass & Cross Site Vulnerability

Document Title: =============== Mozilla WebMaker - Filter Bypass & Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=981 Mozilla Bug ID: 835445 Release Date: ============= 2013-07-09 Vulnerability Laboratory ID VL-ID:...

Mozilla WebMaker - Filter Bypass & Cross Site Vulnerability

Document Title: =============== Mozilla WebMaker - Filter Bypass & Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=981 Mozilla Bug ID: 835445 Release Date: ============= 2013-07-09 Vulnerability Laboratory ID VL-ID:...

Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities

Title: ====== Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities Date: ===== 2013-06-25 References: =========== http://vulnerability-lab.com/getcontent.php?id=778 BARRACUDA NETWORK SECURITY ID: BNSEC-811 VL-ID: ===== 778 Common Vulnerability Scoring System:...

Barracuda CudaTel Communication Server 2.6.002.040 XSS

Title: ====== Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities Date: ===== 2013-06-25 References: =========== http://vulnerability-lab.com/getcontent.php?id=778 BARRACUDA NETWORK SECURITY ID: BNSEC-811 VL-ID: ===== 778 Common Vulnerability Scoring System:...

Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=778 BARRACUDA NETWORK SECURITY ID: BNSEC-811 Release Date: ============= 2013-06-24 Vulnerability Laboratory ID VL-ID:...

Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=778 BARRACUDA NETWORK SECURITY ID: BNSEC-811 Release Date: ============= 2013-06-24 Vulnerability Laboratory ID VL-ID:...

Barracuda Backup - Multiple Web Vulnerabilities

Document Title: =============== Barracuda Backup - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=783 BARRACUDA NETWORK SECURITY ID: BNSEC-881 Release Date: ============= 2013-06-14 Vulnerability Laboratory ID VL-ID:...

spider_man

This plugin is a local proxy that can be used to give the framework knowledge about the web application when it has a lot of client side code like Flash or Java applets. Whenever a w3af needs to test an application with flash or javascript, the user should enable this plugin and use a web browser...

Barracuda Backup - Cross Site Scripting Vulnerability

Document Title: =============== Barracuda Backup - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=799 BARRACUDA NETWORK SECURITY ID: BNSEC-1949 Release Date: ============= 2013-06-10 Vulnerability Laboratory ID VL-ID:...

Redtube Blog Cross Site Scripting

Title : Cross Site Scripting in RedTube Official Blog. Author : Ryuzaki Lawlet Blog : justryuz.blogspot.com / www.justryuz.com E-mail : [email protected] / [email protected] / [email protected] Date: June 6/2013 4.44 pm Vendor: http://wordpress.org/plugins/nextgen-gallery/ Type : Web...

CVE-2013-3662 - Sketchup MAC Pict Material Palette Stack Corruption

If you are still using an old version of SketchUp8M2 you should upgrade it. Title: Sketchup MAC Pict Material Palette Stack Corruption Product: Google SketchUp Advisory ID: BINA-20111201 CVE ID: CVE-2013-3662 Class: Boundary Error Condition Buffer Overflow Vulnerability class: Client side/ file...

CVE-2013-3663 - SketchUp BMP RLE8 Heap Overflow

If you are still using a not so old version of SketchUp8M3 you should upgrade it... Title: SketchUp BMP RLE8 Heap Overflow Product: Google SketchUp Advisory ID: BINA-20120523 CVE ID: CVE-2013-3663 Class: Boundary Error Condition Buffer Overflow Vulnerability class: Client side/ file format...

CVE-2013-1245

Cisco WebEx Social’s user-management page is vulnerable to a client-side validation bypass that, due to insufficient server-side validation, lets an authenticated remote attacker inject arbitrary values into Screen Name, Email Address, First/Middle/Last Name, and Job Title fields. Impact: bypass ...

CVE-2013-1245

The user-management page in Cisco WebEx Social relies on client-side validation of values in the Screen Name, First Name, Middle Name, Last Name, Email Address, and Job Title fields, which allows remote authenticated users to bypass intended access restrictions via crafted requests, aka Bug ID...

Immunity Canvas: JAVA_DYNAMICBINDING

Name| javaDynamicBinding ---|--- CVE| CVE-2013-2423 Exploit Pack| CANVAS Description| javaDynamicBinding Notes| CVE Name: CVE-2013-2423 VENDOR: Sun Notes: A vulnerability in MethodHandle allows to overwrite public final fields. This can be abused in order to disable Java Sandbox. The current...

Avira License - Cross Site Scripting Web Vulnerability

Document Title: =============== Avira License - Cross Site Scripting Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=916 Avira Case-ID 99287655 Release Date: ============= 2013-04-12 Vulnerability Laboratory ID VL-ID:...

GnuTLS libgnutls Double-free Certificate List Parsing Remote DoS

Exploit for linux platform in category dos / poc CVE-2013-16631 is a possible remote DOS attack issue. This issue has been fixed2 in =GNUTLS-3.0.14. I hacked on it for hours and figure out a few prerequisites could make it vulnerable: ============================= REQUIRED: - prior to GNUTLS 3.0....

ViewGit 0.0.6 - Multiple XSS Vulnerabilities

ViewGit "is a git web repository viewer that aims to be easy to set up and upgrade, light on dependencies, and comfortable to use." http://viewgit.fealdia.org/. ViewGit contains multiple persistent arbitrary script injection XSS vulnerabilities in its "Shortlog" and "Heads" tables. These...

ViewGit 0.0.6 - Multiple Cross-Site Scripting Vulnerabilities

ViewGit 0.0.6 - Multiple Cross-Site Scripting Vulnerabilities Vulnerability Report Author: Matthew R. Bucci Date: 18 March, 2013 CVE-2013-2294 Description of Vulnerability: ----------------------------- ViewGit "is a git web repository viewer that aims to be easy to set up and upgrade, light on...