8795 matches found
[Zarp v0.1.2] The Python Network Attack Tool
Zarp is a network attack tool centered around the exploitation of local networks. This does not include system exploitation, but rather abusing networking protocols and stacks to take over, infiltrate, and knock out. Sessions can be managed to quickly poison and sniff multiple systems at once,...
C.P.Sub 4.5 - Authentication Bypass
C.P.Sub 4.5 - Authentication Bypass !/usr/bin/python Exploit Title: C.P.Sub = v4.5 Misconfiguration and Improper Authentication Date: 2013/6/27 Exploit Author: Chako Vendor Homepage: http://www.cooltey.org/ping/php.php Software Download Link: http://cooltey.myweb.hinet.net/cpsubv4.5.zip Version: ...
C.P.Sub 4.5 - Authentication Bypass
!/usr/bin/python Exploit Title: C.P.Sub = v4.5 Misconfiguration and Improper Authentication Date: 2013/6/27 Exploit Author: Chako Vendor Homepage: http://www.cooltey.org/ping/php.php Software Download Link: http://cooltey.myweb.hinet.net/cpsubv4.5.zip Version: = v4.5 Tested on: Windows 7 Improper...
C.P.Sub 4.5 Privilege Escalation
!/usr/bin/python Exploit Title: C.P.Sub = v4.5 Misconfiguration and Improper Authentication Date: 2013/6/27 Exploit Author: Chako Vendor Homepage: http://www.cooltey.org/ping/php.php Software Download Link: http://cooltey.myweb.hinet.net/cpsubv4.5.zip Version: = v4.5 Tested on: Windows 7 Improper...
shopex最新版前台一处想不到的SQL注入
简要描述： shopex代码核心的地方都做了加密处理，找漏洞就需要一点想象空间了，比如这个SQL注入... 详细说明： 存在于用户注册想不到的位置吧？ 1. /core/shop/controller/ctl.passport.php 267行 if !$info = $account-create$POST,$message ... 2.看到1，想到有没有可能$account-create是foreach $POST构造sql语句的呐？ 3.看数据表结构： 果断提交时$POST里加入memberid测试其实测试时我还试了mobile等，嘿，只捡有用的字段说，然后就有了下图： 漏洞证明：...
Tipask 2.0 前台任意文件删除漏洞
简要描述： tipask可以调整头像保存并删除原始头像 在删除原始头像时使用了post提交的参数 造成任意文件删除漏洞 详细说明： function onsaveimg $x1 = $this- post'x1' ; $y1 = $this- post'y1' ; $x2 = $this- post'x2' ; $y2 = $this- post'y2' ; $w = $this- post'w' ; $h = $this- post'h' ; $ext = $this- post'ext' ; $uploadtmpfile = TIPASKROOT . "/data/tmp/"...
Threat Outbreak Alert: Fake Portuguese Bank Deposit Delivery Notification Email Messages on June 21, 2013
Low Alert ID: 29745 First Published: 2013 June 21 14:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a bank deposit delivery notification for the recipient. The text in the email message attempts t...
Buffer overflow
Buffer overflow in the back-end component in Huawei UTPS 1.0 allows local users to gain privileges via a long IDSPLUGINNAME string in a plug-in configuration file...
ecshop最新版本前台二次注入系列(1)
简要描述： 二次注入第一枚，通读ecshop代码的结果，我是今天早上从ecshop新下的程序包，你懂的～ 详细说明： 先上结果图： 注入利用过程： 1.添加商品到购物车时，写入注入代码到商品属性id http://localhost/test/ecshop/flow.php?step=addtocart POST: goods="quick":1,"spec":"163","158'","goodsid":32,"number":"1","parent":0 注意，需要spec有两个或以上id 2.在查看购物车页面，点击更新购物车，执行注入代码二次注入嘛，单引号可用了 代码分析：...
CVE-2013-2968
An unspecified buffer-read method in IBM Sterling Control Center SCC 5.2 before 5.2.0.9, 5.3 before 5.3.0.4, and 5.4 through 5.4.0.1 allows remote authenticated users to cause a denial of service via a large file that lacks end-of-line characters...
Apple releases new details on National Security Requests
Apple revealed on monday that it received between 4,000 and 5,000 data requests in six months from U.S. law enforcement for user information and affected accounts. Apple said the most common forms of requests involved investigating robberies and other crimes. Period between December 1, 2012 and M...
Apple Fields Data Requests for 10,000 Users Accounts
Since December, U.S. law enforcement agencies have made between 4,000 and 5,000 requests for customer data from Apple on as many 10,000 user accounts, the company said in a statement released last night. Apple said in the wake of allegations that it participates in feeding the U.S. government...
fingerprint_waf
Try to fingerprint the Web Application Firewall that is running on the remote end. Please note that the detection of the WAF is performed by the infrastructure.afd plugin afd stands for Active Filter Detection. Plugin type Infrastructure Options This plugin doesnt have any user configured options...
kernel: kvm: pv_eoi guest updates with interrupts disabled
A certain Red Hat patch to the KVM subsystem in the kernel package before 2.6.32-358.11.1.el6 on Red Hat Enterprise Linux RHEL 6 does not properly implement the PV EOI feature, which allows guest OS users to cause a denial of service host OS crash by leveraging a time window during which interrup...
Symantec Messaging Gateway Management Console Stored XSS
SUMMARY Symantec's Messaging Gateway 9.5.x management console is susceptible to stored cross-site scripting XSS issues found in some of the administrative interface pages. Successful exploitation could result in potential unauthorized privileged access to the management console. AFFECTED PRODUCTS...
CentOS Update for kernel CESA-2013:0747 centos5
Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2013:0747 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
Security Advisory-The AR Abnormally Resets When Receiving Special DHCP Packets
Access Router AR is a low-end router of Huawei. It provides both mobile and fixed network access modes, applies to enterprises. In application processing on the live network, when special ip phone use DHCP to requests for address information from the AR, a special field is carried in the request...
NConf delete_attr.php id Parameter SQL Injection
The version of the NConf installed on the remote host is affected by a SQL injection vulnerability because it fails to properly sanitize user-supplied input to the 'id' parameter of the 'deleteattr.php' script. An attacker may be able to leverage this to manipulate data in the back-end database o...
WordPress Level Four Storefront Plugin SQL Injection Vulnerability
WordPress Level Four Storefront Plugin is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...