JVC IP-Camera VN-T216VPRU - Local File Disclosure

Advisory Information ======================================== Title : JVC IP-Camera VN-T216VPRU Local File Inclusion Vendor Homepage : http://pro.jvc.com/ Remotely Exploitable : Yes Tested on Camera types : VN-T216VPRU Product References :...

PT-2016-3110

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 7.2 Description The issue is related to errors in security settings of the OpenSSH client, specifically with the handling of failed cookie generation for untrusted X11 forwarding. This allows a remote attacker to obta...

SMF (Simple Machine Forum) 2.0.10 Remote Memory Exfiltration

!/usr/bin/python -- coding: iso-8859-15 -- Title: SMF Simple Machine Forum Filippo Roncari Truel Lab http://lab.truel.it Requirements: SMF = 2.0.10 PHP = 5.6.11 / 5.5.27 / 5.4.43 Advisories: TL-2015-PHP04 http://lab.truel.it/d/advisories/TL-2015-PHP04.txt TL-2015-PHP06...

SMF (Simple Machine Forum) 2.0.10 - Remote Memory Exfiltration

!/usr/bin/python -- coding: iso-8859-15 -- Title: SMF Simple Machine Forum Filippo Roncari Truel Lab http://lab.truel.it Requirements: SMF = 2.0.10 PHP = 5.6.11 / 5.5.27 / 5.4.43 Advisories: TL-2015-PHP04 http://lab.truel.it/d/advisories/TL-2015-PHP04.txt TL-2015-PHP06...

PageAdmin VIEWSTATE引发的血案

简要描述： 本想找个注入的，却发现Isstr 与其绕过不如（此处打码）直接来的痛快。 @wefgod 小弟弱弱的告诉你 ViewState不仅仅可以WooYun-2014-61699这样用，还可以这样滴哟 详细说明： 下载pageAdmin 反编译发现混淆过 蛋疼！ 只好翻翻页面！各种页面各种翻 咿！尼玛 这是啥 ViewState"constr" 那就抄刀上阵吧 打开 ：http://192.168.10.64:9992/e/member/index.aspx?s=1&type=memfavolst 复制然后 这是在本地搭建的 那试试官网 附上官网的...

Fedora 18 : glpi-0.83.9.1-4.fc18 (2013-16575)

Security improvement: restrict access to installation wizard from local server only. Remote access need to be explicitly allowed in configuration /etc/httpd/conf.d/glpi.conf. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisor...

Iran government websites now on local server to Protect them from Cyber Attacks

Iran government websites now on local server to Protect them from Cyber Attacks An Iranian official says the country has transferred the location of most of its government websites from foreign-based hosting agencies to new computer facilities inside the country to avert potential cyber attacks...

Windows Gather Local NBD Server

Maps remote disks and logical volumes to a local Network Block Device server. Allows for forensic tools to be executed on the remote disk directly. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework nbdserver.rb Maps...

Catch broilers simple method-vulnerability warning-the black bar safety net

Now you hands should have their own horsepcshare generate room endof the bar,if the test horse??? This test would not have said,We have to really go catch a chicken before. Want to catch the chicken,must be to let someone else computer running your own horse. The issue came out,everyone is new...

Pagetool CMS <= 1.07 (pt_upload.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Pagetool CMS = 1.07 ptupload.php Remote File Include Vulnerability ====================================================================== !usr/bin/perl use...

ncompress vulnerable to buffer overflow via long filename

Overview Some versions of ncompress contain a buffer-overflow vulnerability. Description Versions 4.2.4 and earlier of ncompress do not properly handle filenames longer than 1023 characters. --- Impact By supplying long filenames to ncompress, an attacker may be able to gain local access to the...