joomla-cve-2015-8562-exploit-and-linux-forensic-analysis

استغلال ثغرة CVE-2015-8562 في Joomla وتحليل جنائي لنظام لينكس...

Joomla_CVE-2015-8562

JoomlaCVE-2015-8562 إثبات مفهوم لثغرة Joomla CVE-2015-8562 حقن كائنات وتنفيذ أوامر عن بعد مقدمة/سجل التغييرات هذا الإثبات هو الإصدار الثاني من التنفيذ المستضاف على exploit-db. root@kitploit: -إصلاح إعادة إنشاء الجلسة -إضافة خيار التبديل من طريقة X-Forwarded-For إلى User-Agent -إضافة خيار التبديل ...

RootPipeTester

جدول المحتويات 1. ما هو RootPipe Tester؟ 2. لماذا يجب أن أستخدم RootPipe Tester؟ 3. كيف أستخدم RootPipe Tester؟ 4. PANIC!!! نظامي قابل للاختراق؟ هل سنموت جميعاً؟ 1. OS X 10.10 Yosemite 2. OS X 10.9 Mavericks 3. OS X 10.8 Mountain Lion 4. OS X 10.7 Lion, Mac OS X 10.6 Snow Leopard, Mac OS X 10.5...

CVE-2015-5119_walkthrough

CVE-2015-5119دليل...

ShareDoc_cve-2015-5477

ShareDoc le document que j'ai partagé avec d'autres ajouter cve-2015-5477 debug...

CVE-2015-3636

لا يحتوي هذا المستودع على ملف README...

cve-2015-6612poc-forM

cve-2015-6612 POC pour M signalé par moi et @WenXu de Keen mettez ceci sous ANDROIDSRCROOT/frameworks/av/media/decrytpoc/ et cd into it && calling mm...

scaredycat

SCAREDYCAT! الإصدار 0.1 بيتا نص برمجي بلغة بايثون لإنشاء ملف MP4 خبيث وتشغيل خادم ويب يستضيف صفحة تحتوي على ملف 'الفيديو' المضمّن على المنفذ 8080. يستغل هذا ثغرة أخرى من ثغرات Stagefright، وهي ثغرة تجاوز السعة الصحيح CVE-2015-3864، التي نشرتها Exodus Intelligence. المؤلف: vvn eudemonics مبني على...

CVE-2015-2546-Exploit

CVE-2015-2546-Exploit مقالتي حول CVE-2015-2546: http://bobao.360.cn/learning/detail/3184.html مدونتي: http://whereisk0shl.top...

cve-2015-0313

CVE-2015-0313 كود ثغرة Adobe Flash cve-2015-0313 من Angler Exploit Kit المراجع: http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-new-adobe-flash-zero-day-exploit-used-in-malvertisements/...

Magento Server Mass Importer - Cross-Site Scripting

Magento Server Mass Importer plugin contains multiple cross-site scripting vulnerabilities which allow remote attackers to inject arbitrary web script or HTML via the 1 profile parameter to web/magmi.php or 2 QUERYSTRING to web/magmiimportrun.php. id: CVE-2015-2068 info: name: Magento Server Mass...

Geddy <13.0.8 - Local File Inclusion

Geddy prior to version 13.0.8 contains a directory traversal vulnerability in lib/app/index.js that allows remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the PATHINFO to the default URI. id: CVE-2015-5688 info: name: Geddy 13.0.8 - Local File Inclusion author:...

ADB/Pirelli ADSL2/2+ Wireless Router P.DGA4001N - Information Disclosure

ADB formerly Pirelli Broadband Solutions P.DGA4001N router with firmware PDGTEFSP4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service device restart as demonstrated by a direct request to 1...

Umbraco <7.4.0- Server-Side Request Forgery

Umbraco before version 7.4.0 contains a server-side request forgery vulnerability in feedproxy.aspx that allows attackers to send arbitrary HTTP GET requests via http://local/Umbraco/feedproxy.aspx?url=http://127.0.0.1:80/index. id: CVE-2015-8813 info: name: Umbraco 7.4.0- Server-Side Request...

ResourceSpace - Local File inclusion

ResourceSpace is prone to a local file-inclusion vulnerability because it fails to sufficiently sanitize user-supplied input. id: CVE-2015-3648 info: name: ResourceSpace - Local File inclusion author: pikpikcu severity: high description: ResourceSpace is prone to a local file-inclusion...

Atlassian Confluence <5.8.17 - Information Disclosure

Atlassian Confluence before 5.8.17 contains an information disclsoure vulnerability. A remote authenticated user can read configuration files via the decoratorName parameter to 1 spaces/viewdefaultdecorator.action or 2 admin/viewdefaultdecorator.action. id: CVE-2015-8399 info: name: Atlassian...

WordPress sourceAFRICA <=0.1.3 - Cross-Site Scripting

WordPress sourceAFRICA plugin version 0.1.3 contains a cross-site scripting vulnerability. id: CVE-2015-6920 info: name: WordPress sourceAFRICA =0.1.3 - Cross-Site Scripting author: daffainfo severity: medium description: WordPress sourceAFRICA plugin version 0.1.3 contains a cross-site scripting...

WordPress MyPixs <=0.3 - Local File Inclusion

WordPress MyPixs 0.3 and prior contains a local file inclusion vulnerability. id: CVE-2015-1000012 info: name: WordPress MyPixs =0.4 or apply the vendor-provided patch to fix the LFI vulnerability. reference: - https://wpscan.com/vulnerability/24b83ce5-e3b8-4262-b087-a2dfec014985 -...

Combodo iTop <2.2.0-2459 - Cross-Site Scripting

Combodo iTop before 2.2.0-2459 contains a cross-site scripting vulnerability in application/dashboard.class.inc.php which allows remote attackers to inject arbitrary web script or HTML via a dashboard title. id: CVE-2015-6544 info: name: Combodo iTop 2.2.0-2459 - Cross-Site Scripting author:...

WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta - Arbitrary File Upload

Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin 3.0 beta for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...