320 matches found
The hospital was built Station system arbitrary file upload vulnerability-vulnerability warning-the black bar safety net
| Vulnerability file: upfile. aspx I first posted 9 8 line to 1 3 0 lines of code out ,look a bit funny! Google for: inurl:cms/Column. aspx? that inurl:cms/Column. aspx? LMID= too much,your own to find more keywords! | 0 1 | ---|--- 0 2 | function chkform ---|--- 0 3 | ---|--- 0 4 | ---|--- 0 5 |...
Graduation thesis system upload vulnerability-vulnerability warning-the black bar safety net
In the A5 school class web site system recommended seen, bored download down to see Vulnerability in fileload directory of the FileUpload. asp file, with no fear of the formation of the upload ----------------------- var fu = new FileUpload“uploadForm”, “idFile”, Limit: 3, ExtIn: "rar",...
Avira-Guard
Avira AntiVir personal edition avguard.exe 7.00.00.52 is prone to a local heap overflow because it fails to perform adequate boundary-checks. Successfully exploiting will allow an attacker to execute arbitrary code within the context of the affected application. Failed exploit attempts will resul...
126cms background log injection vulnerability and fix-vulnerability warning-the black bar safety net
To see the code. 0 1...... A number of...... 0 2 if !$ postdb"userid" || !$ postdb"pwd" 0 3 0 4 echo "div align="center" class="style1""; 0 5 echo "your input user name or password mistake!!!"; 0 6 echo "/div"; 0 7 exit; 0 8 0 9 www.2cto.com 1 0 $postdb"pwd"=md5$postdb"pwd"; 1 1 1 2 1 3...
Dig Emperor Management Platform security vulnerabilities-vulnerability warning-the black bar safety net
Official website: 1, demo Station background turned out to have a place to upload pictures, does not prohibit the upload. 2, the upload image simple filtration, easy to break, Upload a php file, and can be executed. 3, the servervpsconfiguration severe lower, get a webshell directly after is a...
Microsoft Internet Explorer VML内存破坏CVE-2011-1266远程代码执行漏洞
Bugtraq ID: 48173 CVE ID：CVE-2011-1266 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 从DOM解析VML对象时vgx.dll存在缺陷，具体来说，在页面结构过程中处理Imagedata参数时存在故障代码。通过向imagedata对象动态分配属性，进程会访问释放内存，成功利用漏洞可以应用程序上下文执行任意代码 Microsoft Internet Explorer 7.0.5730 .11 Microsoft Internet Explorer 8.0.7600.16385 Microsoft Internet...
linux/x86 sys_rmdir("/tmp/willdeleted") shellcode 41 bytes
Exploit for linux/x86 platform in category shellcode ========================================================== linux/x86 sysrmdir"/tmp/willdeleted" shellcode 41 bytes ========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1241. Reason: This candidate is a duplicate of CVE-2010-1241. Notes: All CVE users should reference CVE-2010-1241 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
TLS Renegotiation Vulnerability: Proof of Concept Code (Python)
Information about a vulnerability in the TLS protocol was published in the beginning of November 2009. Attackers can take advantage of that vulnerability to inject arbitrary prefixes into a network connection protected by TLS. This can result in severe vulnerabilities, depending on the applicatio...
Arcadem Pro 2.8 (article) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " \n"; print " Arcadem Pro 2.8 Blind SQL Injection Exploit \n"; print " \n"; print " index.php article \n"...
CDex 1.70b2 (Windows XP SP3) - .ogg Local Buffer Overflow
CDex 1.70b2 Windows XP SP3 - .ogg Local Buffer Overflow Tools - Media file Player - Select files - Browse to a folder - - Open - Play evil.ogg / $frgmnt1 = "OggS". //for what I understood ... beginning "\x00". //streamstructureversion "\x02". //headertypeflag "\x00\x00\x00\x00\x00\x00\x00\x00"...
YourFreeWorld Classifieds Blaster (id) SQL Injection Vulnerability
No description provided by source. Classifieds Blaster id Remote SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc script : http://www.yourfreeworld.com/script/classifiedsblaster.php DorK : : Exploit :...
google-chrome-dos3.txt
?php / Google Chrome 0.2.149.27 1583 Silent Crash PoC WHK - elhacker.net / $nombre =...
Mobius 1.4.4.1 - SQL Injection
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Mobius = 1.4.4.1 Remote SQL Injection Vulnerability Script: Mobius Web Publishing Software Script site:...
Flatnuke 3 - Remote Cookie Manipulation Privilege Escalation
Flatnuke 3 - Remote Cookie Manipulation Privilege Escalation --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
GCALDaemon Remote DoS
Secure Network - Security Research Advisory Vuln name: GCALDaemon Remote DoS Systems affected: GCALDaemon 1.0-beta13 all platforms Systems not affected: - Severity: Low Local/Remote: Remote Vendor URL: http://gcaldaemon.sourceforge.net/ Authors: Luca "ikki" Carettoni -...
Dumb 0.9.3 - 'it_read_envelope' Remote Heap Overflow (PoC)
/ by Luigi Auriemma / include include include include define VER "0.1" define BOF 255 // 25 BOF 256 define INSTRSZ 371 define POCNAME "proof-of-concept" void fwi08FILE fd, int num; void fwi16FILE fd, int num; void fwi32FILE fd, int num; void fwb08FILE fd, int num; void fwb16FILE fd, int num; void...