2834 matches found
GE Proficy Real-Time Information Portal Information Disclosure Vulnerabilities
Overview This advisory provides mitigation details for multiple vulnerabilities that impact the GE Intelligent Platforms Proficy Real-Time Information Portal. General Electric GE has addressed two vulnerabilities in the GE Intelligent Platforms Proficy Real-Time Information Portal. Exploitation o...
Completely remove WSUS 3.0 approach-vulnerability warning-the black bar safety net
Upgrade the domain controller or demote a domain controller, wsus services usually fail, only by hand to completely remove wsus3. 0 and then re-install, the following is the result of several attempts later summed up the detailed operation of the steps of: 1, the...
phpwind 8.7 background to get shell-vulnerability warning-the black bar safety net
phpwind 8.7 background to get the shell The first point to open the background map and then attachment settings to add a ashx suffix 2 0 0 0 size 群 里面 我 以前 扔 的 那个 ashx.txt download back into the fuck. ashx Published article there's an attachment upload the ashx throw up the premise is iis Apache ...
TinyMCE Image Manager 1.1 XSS / File Upload
Hello list! These are Arbitrary File Uploading and Cross-Site Scripting vulnerabilities in TinyMCE Image Manager plugin for TinyMCE. ------------------------- Affected products: ------------------------- Vulnerable are TinyMCE Image Manager 1.1 and previous versions. -------------------------...
AFU and XSS vulnerabilities in TinyMCE Image Manager
Hello 3APA3A! These are Arbitrary File Uploading and Cross-Site Scripting vulnerabilities in TinyMCE Image Manager plugin for TinyMCE. ------------------------- Affected products: ------------------------- Vulnerable are TinyMCE Image Manager 1.1 and previous versions. -------------------------...
用友某服务器iis写权限高危漏洞可被入侵
简要描述： 用友某服务器设置不当，导致存在iis写权限利用漏洞，可直接上传shell，执行任意代码。 详细说明： http://117.79.149.40/ 用友某服务器设置不当，导致存在iis写权限利用漏洞，可直接上传shell，执行任意代码。 漏洞证明：...
IIS PUT 任意文件创建漏洞
No description provided by source...
AFU vulnerabilities in MCFileManager for TinyMCE
Hello 3APA3A! I want to warn you about vulnerabilities in Moxiecode File Manager MCFileManager. This is commercial plugin for TinyMCE. It concerns as MCFileManager, as all web applications which have MCFileManager in their bundle. These are Arbitrary File Uploading vulnerabilities, which lead to...
用友软件开发管理平台IIS写权限导致可获取服务器webshell
简要描述： 见说明 详细说明： http://ufsdp-borrow.ufsoft.com.cn/cmd.asp http://ufsdp-borrow.ufsoft.com.cn/1937cN.txt 漏洞证明：...
AFU vulnerabilities in MCImageManager for TinyMCE
Hello 3APA3A! I want to warn you about vulnerabilities in Moxiecode Image Manager MCImageManager. This is commercial plugin for TinyMCE. It concerns as MCImageManager, as all web applications which have MCImageManager in their bundle. These are Arbitrary File Uploading vulnerabilities, which lead...
用友研发实践共享平台遍历漏洞发现存在webshell（IIS解析漏洞）
简要描述： 见说明 详细说明： http://ufsdp-zjsj.ufida.com.cn/index.aspx 遍历漏洞地址http://ufsdp-zjsj.ufida.com.cn/files/ 在这个页面发现有前辈留下的痕迹，顺藤摸瓜，找到了前辈Fck上传后其中一个未解析完整的马，得到一句话密码为 利用前辈铺好的路，直接菜刀连接 http://ufsdp-zjsj.ufida.com.cn/files/s.asp;.jpg 漏洞证明：...
用友软件IIS写权限(PUT)导致可获取webshell控制服务器
简要描述： 1年后，用友再次爆动，菜鸟一枚，只会put,wooyun那些屌丝中的神级BOOS就莫喷了，绕道吧!听说可以换QB了，主要上来弄QB的.穷屌丝就这点追求了 详细说明： http://summit.ufida.com/ 2012年8月份检测过一次，存在，现在又来了，呵呵 PUT，大家懂得！ WooYun: 用友分站漏洞利用入侵 漏洞为什么依然存在？ 漏洞证明：...
aCMS 1.0 Shell Upload / Insufficient Authorization
Hello list! These are Insufficient Authorization and Arbitrary File Uploading vulnerabilities in aCMS. This is commercial CMS. There are multiple vulnerabilities in aCMS and it's the second part of them. ------------------------- Affected products: ------------------------- Vulnerable are aCMS 1....
Microsoft HTTP.SYS Remote Denial of Service Vulnerability
This vulnerability allows remote attackers to cause a denial of service condition on vulnerable installations of IIS. No user interaction is required to exploit this vulnerability. The specific flaw exists within handling of HTTP headers in the Windows kernel. By providing a duplicate of a...
Moxiecode Image Manager 3.1.5 Shell Upload
I want to warn you about vulnerabilities in Moxiecode Image Manager MCImageManager. This is commercial plugin for TinyMCE. It concerns as MCImageManager, as all web applications which have MCImageManager in their bundle. These are Arbitrary File Uploading vulnerabilities, which lead to Code...
Moxiecode File Manager 3.1.5 Shell Upload
Hello list! I want to warn you about vulnerabilities in Moxiecode File Manager MCFileManager. This is commercial plugin for TinyMCE. It concerns as MCFileManager, as all web applications which have MCFileManager in their bundle. These are Arbitrary File Uploading vulnerabilities, which lead to Co...
Microsoft Windows 'HTTP.sys'远程拒绝服务漏洞(CVE-2013-1305)(MS13-039)
BUGTRAQ ID: 59784 CVECAN ID: CVE-2013-1305 Microsoft Windows是微软公司推出的一系列操作系统。 当 HTTP 协议堆栈 HTTP.sys 不正确地处理恶意 HTTP 标头时，Windows Server 2012 和 Windows 8 中存在一个拒绝服务漏洞。成功利用此漏洞的攻击者可能通过向受影响的 Windows 服务器或客户端发送特制 HTTP 标头在 HTTP 协议堆栈中触发一个无限循环。 0 Microsoft Windows Windows Server 2012 Microsoft Windows RT...
Gallery Server Pro File Upload Filter Bypass Vulnerability
Gallery Server Pro suffers from a file upload filter bypass vulnerability. , , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / / .-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Gallery Server Pro File Upload Filter Bypass Vendor Link:...
K-Shell by kikicoco VHS version 1.2 edition (.aspx)
Данная утилита предназначенна для системных администраторов для удаленного управления своим сервером. Любое незаконное использование скрипта преследуется по закону. last update: 06.05.2013 21:20 Что может: Wso-style Server IP Client IP HostName Username OS Version IIS Version System Dir...