578 matches found
Electric Sheep Fencing Pfsense WebGUI Cross-Site Scripting Vulnerability
Electric Sheep Fencing pfsense is a free and open source FreeBSD-based firewall and router software from Electric Sheep Fencing. A cross-site scripting vulnerability exists in the WebGUI of Electric Sheep Fencing pfSense versions prior to 2.2.3, which stems from the servicescaptiveportalzones.php...
KPPW最新版SQL注入漏洞四(同一问题引发多处注入及越权含分析）
简要描述： KPPW最新版SQL注入漏洞四同一问题引发多处注入及越权） 详细说明： KPPW最新版SQL注入漏洞四同一问题引发多处注入及越权） 文件/control/user/accountreport.php $objReportT = keketableclass::getinstance'witkeyreport'; if isset $action switch $action case 'mulitDel' : if $ckb $objTaskT-del 'taskid', $ckb ; kekezu::showmsg '删除成功', $strUrl, NULL, NULL,...
CVE-2014-7742
The Noticias del Vaticano aka com.wNoticiasdelVaticano application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7742
The Noticias del Vaticano aka com.wNoticiasdelVaticano application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7742
The CVE-2014-7742 entry describes a vulnerability in the Noticias del Vaticano (com.wNoticiasdelVaticano) Android app version 0.1 where SSL certificate validation is not performed. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate....
CVE-2014-6901
The RADIOS DEL ECUADOR aka com.nobexinc.wls87612622.rc application 3.2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6901
The CVE-2014-6901 entry concerns the Android app RADIOS DEL ECUADOR (package com.nobexinc.wls_87612622.rc), version 3.2.4. The root cause is that the application does not verify X.509 certificates from SSL servers, which can permit man-in-the-middle attackers to spoof servers and access sensitive...
CVE-2014-6901
The RADIOS DEL ECUADOR aka com.nobexinc.wls87612622.rc application 3.2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
LivePerson Cross Site Scripting
Exploit Title: LivePerson Cross Site Scripting Date: 15.03.2012 Author: Sony Software Link: http://liveperson.com/ Google Dorks: inurl:/window/top.asp?site= or inurl:/window/main.asp?site= Web Browser : Mozilla Firefox Site : http://insecurity.ro PoC:...
How to hack Internet cafe charging system in the cafe on the Overlord network-vulnerability warning-the black bar safety net
One with Alt+Ctrl+Del key combination（Vientiane） After the boot, when appears the blue background, immediately press the key combination, pop-up“close Program”dialog box, if inside a“client”after the immediately closed, when the discovery of the“unknown”program is also closed because of Vientiane...
Telephone Directory 2008 Arbitrary Delete Contact Exploit
Exploit for unknown platform in category web applications ========================================================= Telephone Directory 2008 Arbitrary Delete Contact Exploit ========================================================= !/usr/bin/perl -w Telephone Directory 2008 see down Greetz :...
drupal Zend Hash Del Key Or Index php injection
оф сайт http://drupal.org/ уязвимы версии drupal 5 =5.2 и возможно другие. благодоря возможности подменить некоторые переменные можно вызвать произвольную функцию определенную в скриптах посредством calluserfunc, в результате чего можно выполнить произвольный код PHP через встроеную функцию движк...
CVE-2007-2350
admin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the del parameter...
CVE-2007-2350
admin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the del parameter...
GuppY v4.0 remote del files/index
GuppY v4.0 remote del files/index By : sn0oPy Risk : high site : http://www.freeguppy.org/ Dork : inurl:"/guppy/index.php" exploit : just add install/install.php to the script folder http://www.target.ma/guppy/install/install.php choose "Installation propre" next choose "Suppression des fichiers...
CVE-2007-1219
PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...
Remedy Action Request System 5.01.02 - User Enumeration
======================================================= Remedy Action Request System User Enumeration ======================================================= Davide Del Vecchio Adv11 Discovered in: 08/01/2007 Version affected: Remedy Action Request System 5.01.02 Patch 1267. The same vulnerable...