jDisk (stickto) v2.0.3 iOS多个漏洞

jDisk将你的iPhone/iPad/iPod变成一个闪存驱动器/盘。 jDisk存在多个漏洞，攻击者可以利用漏洞遍历目录，包含本地文件，或执行任意代码。 0 jDisk stickto v2.0.3 iOS 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： https://itunes.apple.com/de/app/jdisk-convert-your-device/id604793088 1.1 The remote code execution can be exploited by remote attackers without...

NetGear DGN2200 N300无线路由器多个漏洞

NetGear DGN2200 N300是一款无线路由器。 NetGear的UPnP接受HTTP POST请求作为一个有效的XML请求，使UPnP服务容易受到跨站点请求伪造攻击。这可以被用来绕过或改变防火墙规则。路由器的UPnP接口在TCP5000端口上监听，从设备的LAN端存取。UPNP请求不需要身份验证的密码。此漏洞由于请求在设备的局域网端用户的浏览器启动。 0 NetGear DGN2200 N300 Wireless ADSL2+ Modem Router V1.0.0.36-7.0.37 该产品已不再更新，建议限制访问包含敏感功能或数据验证的用户的网页。 1.1 The...

Office Assistant Pro v2.2.2 iOS - File Include Vulnerability

Document Title: =============== Office Assistant Pro v2.2.2 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1197 Release Date: ============= 2014-02-12 Vulnerability Laboratory ID VL-ID: ==================================...

Office Assistant Pro v2.2.2 iOS - File Include Vulnerability

Document Title: =============== Office Assistant Pro v2.2.2 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1197 Release Date: ============= 2014-02-12 Vulnerability Laboratory ID VL-ID: ==================================...

WiFi Camera Roll 1.2 iOS - Multiple Vulnerabilities

Document Title: =============== WiFi Camera Roll v1.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1192 Release Date: ============= 2014-02-08 Vulnerability Laboratory ID VL-ID: ====================================...

WiFi Camera Roll 1.2 iOS - Multiple Vulnerabilities

WiFi Camera Roll 1.2 iOS - Multiple Vulnerabilities Document Title: =============== WiFi Camera Roll v1.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1192 Release Date: ============= 2014-02-08 Vulnerability...

gpEasy v4.3.x CMS - Multiple Web Vulnerabilities

Document Title: =============== gpEasy v4.3.x CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1189 Release Date: ============= 2014-02-06 Vulnerability Laboratory ID VL-ID: ==================================== 1189 Comm...

PHP Webcam Video Conference - Multiple Vulnerabilities

PHP Webcam Video Conference - Multiple Vulnerabilities Exploit: PHP Webcam Video Conference - LFI/XSS Date: 06/02/2014 Exploit Author: vinicius777 Contact: vinicius777 AT gmail / @vinicius777 Vendor Homepage: http://www.videowhisper.com/ Software Link:...

PHP Webcam Video Conference Local File Inclusion / XSS

Exploit: PHP Webcam Video Conference - LFI/XSS Date: 06/02/2014 Exploit Author: vinicius777 Contact: vinicius777 AT gmail / @vinicius777 Vendor Homepage: http://www.videowhisper.com/ Software Link: http://sourceforge.net/projects/phpwebcamvideoconference Solution: Upgrade from to the new version ...

PHP Webcam Video Conference - Multiple Vulnerabilities

Exploit: PHP Webcam Video Conference - LFI/XSS Date: 06/02/2014 Exploit Author: vinicius777 Contact: vinicius777 AT gmail / @vinicius777 Vendor Homepage: http://www.videowhisper.com/ Software Link: http://sourceforge.net/projects/phpwebcamvideoconference Solution: Upgrade from to the new version ...

gpEasy v4.3.x CMS - Multiple Web Vulnerabilities

Document Title: =============== gpEasy v4.3.x CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1189 Release Date: ============= 2014-02-05 Vulnerability Laboratory ID VL-ID: ==================================== 1189 Comm...

WordPress Plugin WP E-Commerce - Multiple Vulnerabilities

WordPress Plugin WP E-Commerce - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/65130/info The WP e-Commerce plugin for WordPress is prone to multiple security vulnerabilities, including: 1. Multiple remote code-execution vulnerabilities. 2. A local file-include vulnerability ...

WordPress Plugin WP E-Commerce - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/65130/info The WP e-Commerce plugin for WordPress is prone to multiple security vulnerabilities, including: 1. Multiple remote code-execution vulnerabilities. 2. A local file-include vulnerability 3. An arbitrary file-upload vulnerability An attacker can...

Wordpress Plugin (wp-e-commerce v3.8.9.5) Multiple Vulnerabilities

Wordpress Plugin wp-e-commerce v3.8.9.5 - File Upload - RCE - LFI - XSS/CSRF ----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a...

bloofox CMS 0.5.0 - Multiple Vulnerabilities

bloofoxCMS version 0.5.0 suffers from cross site request forgery, local file inclusion, and remote SQL injection vulnerabilities. bloofoxCMS V0.5.0 - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact :...

BloofoxCMS 0.5.0 - Multiple Vulnerabilities

BloofoxCMS 0.5.0 - Multiple Vulnerabilities bloofoxCMS V0.5.0 - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...

bloofoxCMS 0.5.0 CSRF / LFI / SQL Injection

bloofoxCMS V0.5.0 - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.bloofox.com/download.21.html 1...

BloofoxCMS - adminindex.php Cross-Site Request Forgery (Add Admin)

BloofoxCMS - adminindex.php Cross-Site Request Forgery Add Admin source: https://www.securityfocus.com/bid/65019/info bloofoxCMS is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. Multiple cross-site request forgery vulnerabilities 3. A local...

BloofoxCMS - '/admin/index.php' Cross-Site Request Forgery (Add Admin)

source: https://www.securityfocus.com/bid/65019/info bloofoxCMS is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. Multiple cross-site request forgery vulnerabilities 3. A local file-include vulnerability Exploiting these issues could allow an attacke...

BloofoxCMS - '/bloofox/admin/index.php?Username' SQL Injection

source: https://www.securityfocus.com/bid/65019/info bloofoxCMS is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. Multiple cross-site request forgery vulnerabilities 3. A local file-include vulnerability Exploiting these issues could allow an attacke...