Moxiecode File Manager 3.1.5 Shell Upload

Hello list! I want to warn you about vulnerabilities in Moxiecode File Manager MCFileManager. This is commercial plugin for TinyMCE. It concerns as MCFileManager, as all web applications which have MCFileManager in their bundle. These are Arbitrary File Uploading vulnerabilities, which lead to Co...

Microsoft Windows 'HTTP.sys'远程拒绝服务漏洞(CVE-2013-1305)(MS13-039)

BUGTRAQ ID: 59784 CVECAN ID: CVE-2013-1305 Microsoft Windows是微软公司推出的一系列操作系统。 当 HTTP 协议堆栈 HTTP.sys 不正确地处理恶意 HTTP 标头时，Windows Server 2012 和 Windows 8 中存在一个拒绝服务漏洞。成功利用此漏洞的攻击者可能通过向受影响的 Windows 服务器或客户端发送特制 HTTP 标头在 HTTP 协议堆栈中触发一个无限循环。 0 Microsoft Windows Windows Server 2012 Microsoft Windows RT...

Gallery Server Pro File Upload Filter Bypass Vulnerability

Gallery Server Pro suffers from a file upload filter bypass vulnerability. , , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / / .-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Gallery Server Pro File Upload Filter Bypass Vendor Link:...

K-Shell by kikicoco VHS version 1.2 edition (.aspx)

Данная утилита предназначенна для системных администраторов для удаленного управления своим сервером. Любое незаконное использование скрипта преследуется по закону. last update: 06.05.2013 21:20 Что может: Wso-style Server IP Client IP HostName Username OS Version IIS Version System Dir...

IIS 7.5 解析错误 命令执行漏洞

IIS是由微软公司提供的基于运行Microsoft Windows的互联网基本服务，其7.0、7.5版本在URI中出现xxx.jpg/xxx.php这样形式的访问时与后端FastCGI处理不一致，导致攻击者可以通过在图片中嵌入PHP代码，然后以xxx.jpg/xxx.php的形式来访问图片，IIS就会执行图片中的PHP代码，导致命令执行漏洞。 IIS 7.0、7.5...

Common server to resolve the vulnerability summary-vulnerability warning-the black bar safety net

Author : laterain +IIS6. 0 Directory resolution:/xx.asp/xx.jpg xx.jpg can be replaced with any text filee.g. xx.txt, the text content for the back door code IIS6. 0 will be xx.jpg parsing of asp files. Suffix resolution:/xx. asp;. jpg IIS6. 0 would put such a suffix the file is successfully parse...

Microsoft IIS 6. 0 and 7. 5 multiple vulnerabilities and the use of method-vulnerability warning-the black bar safety net

Microsoft IIS 6.0 install PHP to bypass authentication vulnerability Microsoft IIS with PHP 6.0, which is on PHP5 in Windows Server 2 0 0 3 SP1 test detail: An attacker can send a special request is sent to the IIS 6.0 Service, successfully bypass access restrictions The attacker can access the...

Nmap NSE 6.01: http-iis-webdav-vuln

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe ColdFusion 10 on IIS Unspecified DoS (APSB12-25) (credentialed check)

The remote Windows host is running a version of ColdFusion that is affected by an unspecified denial of service. When used with Microsoft IIS, ColdFusion 10 is vulnerable to unspecified denial of service attacks. This vulnerability was introduced in ColdFusion 10 Update 1. C Tenable Network...

PT-2013-2056 · Microsoft · Management Odata Iis Extension +3

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 3.5 through 4 Management OData IIS Extension on Windows Server 2012 Description: A denial of service issue exists in the OData protocol implementation, allowing remote attackers to cause a denial of service v...

Microsoft OData CVE-2013-0005 Denial of Service Vulnerability

Description The Microsoft OData specification is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the application to become unresponsive or to crash, denying service to legitimate users. Technologies Affected Microsoft Management OData IIS Extension Microsof...

Outlook Web App (OWA) / Client Access Server (CAS) IIS HTTP Internal IP Disclosure

This module tests vulnerable IIS HTTP header file paths on Microsoft Exchange OWA 2003 and CAS 2007, 2010, and 2013 servers. Module Options msf use auxiliary/scanner/http/owa/iisinternalip msf undefinediisinternalip show actions ...actions... msf undefinediisinternalip set ACTION msf...

Adobe Patches Memory Flaws in Flash Player and Sandbox Vulnerability in ColdFusion

Adobe’s second set of security updates coinciding with Microsoft’s monthly patch releases were made available today. The two bulletins include patches for vulnerabilities in Adobe Flash Player and Adobe ColdFusion. The Flash vulnerabilities for Windows are rated most severe by Adobe and successfu...

CVE-2012-5674

Unspecified vulnerability in Adobe ColdFusion 10 before Update 5, when Internet Information Services IIS is used, allows attackers to cause a denial of service via unknown vectors...

CVE-2012-5674

Adobe ColdFusion 10 on IIS is affected by an unspecified denial-of-service vulnerability before Update 5. The issue, limited to when IIS is used, allows DoS via unknown vectors and is addressed by applying Update 5 (or later). Affected product/version: ColdFusion 10 with IIS prior to Update 5; ro...

The latest FCKeditor proof absolute path vulnerability-vulnerability warning-the black bar safety net

Code: FCKeditor/editor/filemanager/connectors/asp/connector. asp? Command=CreateFolder&Type=File&CurrentFolder=%2F&NewFolderName=aux Version not test it. Principle: create an aux folder, aux in the windows system is not supported, so will complain, broke the absolute path, this relatively...

Adobe Releases Security Update for ColdFusion

Adobe has released a security hotfix for ColdFusion 10 Update 1 and above for Windows. This hotfix resolves a vulnerability affecting ColdFusion on Windows Internet Information Services IIS, which could result in a denial of service. US-CERT encourages users and administrators to review Adobe...

Adobe Patches DoS Flaw in ColdFusion 10

Adobe has addressed a denial-of-service vulnerability in the ColdFusion platform and an update is available. ColdFusion is Adobe’s platform and application server used by developers to build Web applications. The security hotfix is for ColdFusion 10 Update 1 and above for the Windows operating...

Microsoft IIS FTP服务远程命令注入漏洞（MS12-073)

BUGTRAQ ID: 56440 CVE ID: CVE-2012-2532 Internet Information Services（IIS，互联网信息服务）是由微软公司提供的基于运行Microsoft Windows的互联网基本服务。 Microsoft IIS FTP服务在与加密通讯渠道协商时，存在信息泄露漏洞。通过某些FTP命令可泄露某些信息。 0 Microsoft IIS 7.x 临时解决方法： 如果已经启用了IIS的"Operational"日志，则在分配给应用池自定义账户之前，请禁用...

Microsoft IIS 密码信息泄露漏洞（MS12-073)

BUGTRAQ ID: 56439 CVE ID: CVE-2012-2531 Internet Information Services（IIS，互联网信息服务）是由微软公司提供的基于运行Microsoft Windows的互联网基本服务。 Microsoft IIS 7.5对操作日志使用了弱权限，没有正确限制对某些日志文件的访问，通过读取此文件，可允许本地用户获取已配置账户的用户名和密码。要利用此漏洞需要启用IIS的操作日志。 0 Microsoft IIS 7.x 临时解决方法： 如果已经启用了IIS的"Operational"日志，则在分配给应用池自定义账户之前，请禁用...