Firmware File System Extraction: firmwalker

A simple bash script for searching the extracted or mounted firmware file system. It will search through the extracted or mounted firmware file system for things of interest such as: etc/shadow and etc/passwd list out the etc/ssl directory search for SSL related files such as .pem, .crt, etc...

emsjomar.com XSS vulnerability

Vulnerable URL: http://www.emsjomar.com/SearchResult.aspx?KeyWords="...

EMC Documentum Content Server Code Execution

Product: EMC Documentum Content Server Vendor: EMC Version: ANY CVE: N/A Risk: High Status: public/not fixed For detailed description see http://seclists.org/bugtraq/2015/Jul/51 New behavior introduced in CVE-2015-4532: API ?,c,execute domethod WITH METHOD='dmbptransition', ARGUMENTS=' repo repo...

CVE-2015-4396

Multiple cross-site request forgery CSRF vulnerabilities in the Keyword Research module 6.x-1.x before 6.x-1.2 for Drupal allow remote attackers to hijack the authentication of users with the "kwresearch admin site keywords" permission for requests that 1 create, 2 delete, or 3 set priorities to...

deaCMS logic login bug, pass to kill 0day-vulnerability warning-the black bar safety net

Baidu keywords: Powered By IdeaCMS ! A successful landing ! You can also login does not exist the user Landing wooyunsec the user to the user database does not exist, you can still continue the landing）...

CVE-2015-0938

search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attackers to bypass intended access restrictions, and list or read arbitrary documents, by providing matching keywords in conjunction with a crafted parameter...

释锐教育校校用平台通用SQL注入漏洞

简要描述： 释锐教育校校用平台通用SQL注入漏洞 详细说明： 问题出现在infolist.jsp文件 String categoryId = Util.dealNullrequest.getParameter"categoryId"; ifcategoryId.indexOf"08"==0//特殊网站，特殊处理 response.sendRedirectrequest.getContextPath+"/newszt/newslist.jsp?categoryId="+categoryId; String keywords =...

Inmatrix-Ltd.-Zoom-Player-8.5-.jpeg

Exploit Title: Inmatrix Ltd. Zoom Player Crafted JPEG File Memory Corruption and Arbitrary Code Execution Exploit. Version: Zoom Player v8.5 Date: 09-1-2013 Author: Debasish Mandal. Blog : http://www.debasish.in/ d =...

74cms (20140709) 最新版二次注入一弹

简要描述： 74cms V3.4.20140709 不好好的修改漏洞代码 而是修改过滤函数。 虽然那过滤代码我绕不过去。。 但是还是找到了处能出数据。 在修改过滤函数的基础上,还是好好的修改代码把。 详细说明： 首先来看看过滤函数 function removexss$string $string = pregreplace'/\x00-\x08\x0B\x0C\x0E-\x1F\x7F+/S', '', $string; $parm1 = Array'javascript', 'union','vbscript', 'expression', 'applet', 'xml',...

Router ONO Hitron CDE-30364 - CSRF Vulnerability

No description provided by source. Exploit Title: Router ONO Hitron CDE-30364 - CSRF Vulnerability Date: 14-9-2013 Exploit Author: Matias Mingorance Svensson - matias.msatowasp.org Vendor Homepage: http://www.ono.es/clientes/te-ayudamos/dudas/internet/equipos/hitron/hitron-cde-30364/ Tested on:...

Maian Uploader 4.0 - index.php keywords Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/29051/info Maian Uploader is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in t...

Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities

No description provided by source. Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-26 Vulnerability Laboratory ID VL-ID:...

Maian Uploader 4.0 - admin/index.php keywords Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/29051/info Maian Uploader is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in t...

ThinkSAAS最新版绕过过滤继续注入2处

简要描述： ThinkSAAS最新版绕过过滤继续注入2处 无视gpc，无需登录 详细说明： 之前这个漏洞有 ′ 雨。分析过： WooYun: Thinksaas某处绕过过滤的注射漏洞 现在官方有最新版，做了修改，加了过滤，但是过滤不严格，可以绕过继续注入。 第一处： 现在最新的代码/app/tag/action/addajax.php case "do": $objname = t$POST'objname'; $idname = tsFiltert$POST'idname'; $objid = t$POST'objid'; $tags = t$POST'tags';...

CVE-2014-1840

Cross-site scripting XSS vulnerability in Upload/search.php in MyBB 1.6.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a dosearch action, which is not properly handled in a forced SQL error message...

XDcms Sql Injection 51-54

简要描述： Sql Injection 详细说明： 注入在XDCMS企业管理系统后台的关键词管理处，\system\modules\xdcms\keywords.php文件： 当我们添加或者编辑关键词时会调用addsave和editsave函数，4个注入点就出现在这两个函数里： addsave函数： public function addsave $title=safehtml$POST'title';//注入点1，可大写绕过 $url=$POST'url';//注入点2，没过滤 ifempty$title||empty$url...

MyBB 'search.php'跨站脚本漏洞

BUGTRAQ ID: 65344 CVECAN ID: CVE-2014-1840 MyBB是一个功能完整并且非常实用的论坛软件。 MyBB 1.6.12及其他版本没有正确过滤search.php的参数值，在实现上存在跨站脚本漏洞，攻击者可利用此漏洞在受影响站点上下文中的用户浏览器内执行任意脚本代码。 0 MyBB MyBB 1.6.12 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mybb.com/ html body form name="exploit"...

Webers CMS XSS / LFI / SQL Injection

Exploit Title: Webers CMS Multiple Vulnerability Date: 2013 5 November Author: Hossein Hezami Dr.3v1l Vendor: http://www.webers.gr Version: All Version Security Risk: High Category: WebApps Google Keywords: intext:"created by Webers" site:gr Tested on: Linux Exploit : XSS / SQL Injection / LFI /...

Onpub CMS 1.4/1.5 - Multiple SQL Injections

Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-26 Vulnerability Laboratory ID VL-ID: ==================================...

Onpub CMS 1.4 / 1.5 SQL Injection

Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-26 Vulnerability Laboratory ID VL-ID: ==================================...