IIS 系列 Http.sys 处理 Range 整数溢出漏洞

一、漏洞概要 2015年04月14日，微软发布严重级别的安全公告 MS15-034，编号为 CVE-2015-1635，据称在 Http.sys 中的漏洞可能允许远程执行代码。 漏洞描述Http.sys 是一个位于 Windows 操作系统核心组件，能够让任何应用程序通过它提供的接口，以 Http 协议进行信息通讯。微软在 Windows 2003 Server 里引进了新的 HTTP API 和内核模式驱动 Http.sys，目的是使基于 Http 服务的程序更有效率。其实在 Windows XP 安装 SP2 后，Http.sys...

Joomla Component com_alfresco SQL Injection Vulnerability

No description provided by source. ------------------- header data start ------------------- Joomla Component comalfresco SQL Injection Vulnerability Author : FL0RiX Name : comalfresco Greez : PyskE,Dr.Kacak And All Friends Bug Type : SQL Injection Infection : Admin login bilgileri alinabilir. De...

Joomla Component com_j-projects Blind SQL Injection Vulnerability

No description provided by source. ------------------- header data start ------------------- Joomla Component comj-projects Blind SQL Injection Vulnerability Author : Pyske Name : comj-projects Bug Type : Blind SQL Injection Infection : Admin login bilgileri al?nabilir. Bug Fix Advice : Zararli...

Joomla Component com_tpjobs Blind SQL injection Vulnerability

Joomla Component comtpjobs Blind SQL injection Vulnerability author : FL0RiX Name : comtpjobs Bug Type : Blind SQL Injection Infection : Admin login bilgileri alnabilir. Demo Vuln. : TRUE+ » http://server/index.php?option=comtpjobs&task=resadvsearch&keyword=&idc=1 and 1=1 FALSE- »...

Real Estate PHP Script Cross Site Scripting

Cross Site Scripting Application Name : Real Estate Php Script Vulnerable Type : Post Cross Site Scripting Infection : Yönetici ve User cookie’leri çalýnabilir. Bug Fix Advice : Zararlý karakterler filtrelenmelidir. Author : Lazmania61 | Bug Researchers Example :...

sensiGal 2.0 SQL Injection

Application Name : sensiGal v2.0 Vulnerable Type : SqL Injection Infection : Kullanýcý ve Yönetici Bilgileri Çekilebilir. Bug Fix Advice : Zararlý karakterler filtrelenmelidir. Author : Lazmania61 Example : http://www.galerie.edor.org/index.php?id=album&aid=193...

Collectivemind CMS SQL injection

Application Name : Collectivemind Vulnerable Type : SqL Injection Infection : Kullanýcý ve Yönetici Bilgileri Çekilebilir. Bug Fix Advice : Zararlý karakterler filtrelenmelidir. Author : Lazmania61 Example : http://www.collectivemindcms.co.za/home/index.php?ipkContentID=70...

Joomla Resman Cross Site Scripting

Joomla comresman XSS Vulnerability Author : SOLVER Bug Researchers Date : 13.06.2011 Name : Joomla comresman Bug Type : XSS Cross Site Scripting Infection : Hedef sistem uzerinde zararli Javascript kodlari calistirilabilir. Explanation : Joomla comresman eklentisini kullanan sitelerde gorulen bir...

Joomla Juicy SQL Injection

Joomla Component Juicy Gallery SQL Injection Vulnerability Author : SOLVER Bug Researchers Date : 26.05.2011 Name : Joomla comjuicy Bug Type : SQL injection Infection : Admin Login Bilgileri Alinabilir. Example Vuln : +index.php?option=comjuicy&task=showComments&picId=EXPLOIT + Dork:"comjuicy" +...

Joomla Maplocator SQL Injection

Joomla Component maplocator SQL Injection Vulnerability Author : Fl0riX Bug Researchers Greetz : DreamPower - CWKOMANDO - Toprak - Equ - Err0r - 10line - SOLVER - All My Friends : Name : Joomla commaplocator info : http://extensions.joomla.org/extensions/maps-a-weather/geotagging/16996 Bug Type :...

Joomla Realtyna SQL Injection

Joomla Component realtyna SQL Injection Vulnerability Author : Fl0riX Bug Researchers Name : Joomla comrealtyna Bug Type : SQL injection Infection : Admin Login Bilgileri Alinabilir. Demo Vuln : +index.php?option=comrealtyna&view=propertyshow&&bedroom=-5&pid=EXPLOIT + Demo Sites:...

Joomla Flipwall SQL Injection

Joomla Component flipwall SQL Injection Vulnerability Author : Fl0riX Bug Researchers Name : Joomla comflipwall Bug Type : SQL injection Dork: "comflipwall" Infection : Admin Login Bilgileri Alinabilir. Demo Vuln : +http://0611.info/index.php?option=comflipwall&controller=flipwall&catid=EXPLOIT +...

Joomla! Component Pulse Infotech Flip Wall - SQL Injection

Joomla! Component Pulse Infotech Flip Wall - SQL Injection ========================================================= Joomla Component comflipwall SQL Injection Vulnerability ========================================================= Author : Fl0riX Bug Researchers Name : Joomla comflipwall Bug Typ...

Free Adult Script 2 SQL Injection

Free Adult Script V 2. SQL Ýnjection Vulnerability author : HeRoTuRK Name : Free Adult Script V 2. Bug Type : SQL Ýnjection Demo Vuln :http://www.mototaksi.com/?option=video&id=-56983EXPLOÝT script Download :http://freeadultscript.com/?option=download Bug Fix Advice : Zararli Karakterler...

Basari Egitim Portal SQL Injection Vulnerability

Exploit for asp platform in category web applications ================================================ Basari Egitim Portal SQL Injection Vulnerability ================================================ Date: 04.09.10 Author: BARCOD3 Software Link: download link if available Version: v.1.0 Google...

Joomla Newspaper SQL Injection

Joomla Component Newspaper SQL Injection Vulnerability Author : Fl0riX Bug Researchers Name : Joomla Comnewspaper Bug Type : SQL injection Infection : Admin Login Bilgileri Alinabilir. Demo Vuln : http://www.zampe-zampe.it/index.php?option=comnewspaper&view=article&articleid=EXPLOIT Bug Fix Advic...

Joomla KK SQL Injection

Joomla Component comkk Blind SQL Injection Vulnerability Author : Pyske | Bug Researchers Name : comkk Bug Type : Blind SQL Injection Infection : Admin login bilgileri alinabilir. Demo Vuln. : TRUE+ http://www.klh-trade.si/index.php?option=comkk&kat=1 and 1=1 FALSE-...

Joomla J-Projects Blind SQL Injection

Joomla Component comj-projects Blind SQL Injection Vulnerability Author : Pyske | Bug Researchers Name : comj-projects Bug Type : Blind SQL Injection Infection : Admin login bilgileri al?nabilir. Demo Vuln. : TRUE+...

Joomla Component com_j-projects Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Joomla Component comj-projects Blind SQL Injection Vulnerability ================================================================= Joomla Component comj-projects Blind SQL...

Joomla Alfresco SQL Injection

Joomla Component comalfresco SQL Injection Vulnerability Author : FL0RiX Name : comalfresco Greez : PyskE,Dr.Kacak And All Friends Bug Type : SQL Injection Infection : Admin login bilgileri alinabilir. Demo Vuln. : http://www.fincaterraqua.com/index.php?option=comalfresco&task=edit&idpan=SQL INJ...