FineCMS v1.8任意文件下载

简要描述： 代码审计是个技术活，需要很好的耐心.. o︶︿︶o 详细说明： 出现问题的版本是FineCMS V1.8.0 最新版。 1.顺藤摸瓜 漏洞文件：controllers/ApiController.php downAction方法 public function downAction $data = fnauthcodebase64decode$this-get'file', 'DECODE'; $file = isset$data'finecms' && $data'finecms' ? $data'finecms' : ''; if empty$file...

Ransomware Scam Plagued by Weak Crypto

A new piece of ransomware that emerged earlier this month is encrypting its victim’s files with an easily breakable cryptographic algorithm. BitCrypt, as it is known, purports to lock down files with 1024-bit RSA encryption but actually only deploys a much weaker 426-bit key. According to...

Security Risks of FTP and Benefits of Managed File Transfer

None...

[AxCrypt] Open Source Windows File Encryption Software

AxCrypt is the leading open source Windows file encryption software. It integrates seamlessly with Windows to compress, encrypt, decrypt, store, send and work with individual files. Personal Privacy and Security with AES-128 File Encryption and Compression for Windows 2000/2003/XP/Vista/2008/7...

Multiple vulnerabilities on D-Link Dir-505 devices

Multiple vulnerabilities on D-Link Dir-505 devices ================================================== ADVISORY INFORMATION Title: Multiple vulnerabilities on D-Link Dir-505 devices Discovery date: 05/04/2013 Release date: 09/09/2013 Credits: Alessandro Di Pinto alessandro.dipinto artificialstudio...

shopex ctl. tools. php file SQL injection vulnerability-vulnerability warning-the black bar safety net

Issql injection Test version: shopex-singel-4.8.5.78660 文件 \core\shop\controller\ctl.tools.php function products $objGoods = &$this-system-loadModel'goods/products'; $filter = array; foreachexplode',',$POST'goods' as $gid $filter'goodsid' = $gid; $this-pagedata'products' =...

Rgpg 0.2.2 Ruby Gem Remote Command Injection

Title: Rgpg 0.2.2 Ruby Gem Remote Command Injection Date: 7/31/2013 Advisory Author: Larry W. Cashdollar, @larry0 CVE: CVE-2013-4203 Download: https://rubygems.org/gems/rgpg Description: "A simple Ruby wrapper around gpg command for file encryption. rgpg is a simple API for interacting with the g...

Ruby Gem Rgpg 0.2.2 Command Injection Vulnerability

Ruby Gem Rgpg version 0.2.2 suffers from a remote command injection vulnerability. Title: Rgpg 0.2.2 Ruby Gem Remote Command Injection Date: 7/31/2013 Advisory Author: Larry W. Cashdollar, @larry0 CVE: CVE-2013-4203 Download: https://rubygems.org/gems/rgpg Description: "A simple Ruby wrapper arou...

Ruby Gem Rgpg 0.2.2 Command Injection

Title: Rgpg 0.2.2 Ruby Gem Remote Command Injection Date: 7/31/2013 Advisory Author: Larry W. Cashdollar, @larry0 CVE: CVE-2013-4203 Download: https://rubygems.org/gems/rgpg Description: "A simple Ruby wrapper around gpg command for file encryption. rgpg is a simple API for interacting with the g...

Gather eCryptfs Metadata

This module will collect the contents of all users' .ecrypts directories on the targeted machine. Collected "wrapped-passphrase" files can be cracked with John the Ripper JtR to recover "mount passphrases". This module requires Metasploit: https://metasploit.com/download Current source:...

Faircom c-treeACE database weak obfuscation algorithm vulnerability

Overview Faircom c-treeACE provides a weak obfuscation algorithm CWE-327 that may be unobfuscated without knowledge of a key or password. The algorithm was formerly called Faircom Standard Encryption but is now called Data Camouflage. Description Faircom c-treeACE provides a weak obfuscation...

Слабая криптография в IP-телефонах Aastra

Configuration file encryption is vulnerable to replay attacks...

The new concept of foreign language network teaching platform file upload vulnerability-vulnerability warning-the black bar safety net

A lot of universities are using this learning platform, this vulnerability can lead directly to get questions answers, or even as a springboard to continue to penetrate into other school Server Detailed description: South of the Open University as an example: http://222.30.60.3/NPELS...

Dorifel Malware Encrypts Files, Steals Financial Data, May Be Related to Zeus or Citadel

While much of the world was focused yesterday on the Gauss malware saga, there was another interesting infection happening, mainly in the Netherlands, that researchers think may be related to the Zeus and Citadel attacks, though the motivation behind the attack is somewhat of a mystery. The new...

ZipX 1.71 - .ZIP File Buffer Overflow

ZipX 1.71 - .ZIP File Buffer Overflow !/usr/bin/perl +Exploit Title: ZipX for Windows v1.71 ZIP File Buffer Overflow Exploit +Date: 05\09\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/ZipX/3000-22504-10518937.html +Version: v1.71 +Tested On: WIN-XP SP3 Brazilian Portuguese...

Invisible Secrets 4.6.2 2 l Windows Vista Compatible !

Invisible Secrets 4.6.2 2 l Windows Vista Compatible! l 3.5 MB l RS Keep those prying eyes out of your communications and prevent unwanted people from reading your private files! Invisible Secrets 4 not only encrypts your data and files for safe keeping or for secure transfer across the net, it...

MEO DLL Hijacking

=================================================== MEO DLL Hijacking Exploit dwmapi.dll =================================================== -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //...

MEO DLL Hijacking Exploit (dwmapi.dll)

Exploit for windows platform in category local exploits ====================================== MEO DLL Hijacking Exploit dwmapi.dll ====================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...

Fedora 13 : pidgin-sipe-1.9.1-1.fc13 (2010-4859)

Contributed File transfer functionality. File encryption is supported. Jakub Adam, Tomas Hrabik NTLMv2 and NTLMv2 Session Security support pier11 Implemented SIP Authentication Extensions protocol version 4 and 3 pier11 Adoption for commercial UNIX - HP/UX, Irix, Solaris - big endian fixes and...

From learning webshell hide to Ferret out the simple analysis-vulnerability warning-the black bar safety net

webshell,do not say it!, The back door,ancient and modern breaking the network must home,great bite is stab,thousand station with the waste of the said,blowing a big,theme. First of all, we in the dark said,once into the site,it will leave the back door,but the current mainstream is asp,php free...