295 matches found
Jobberbase 2.0 Disclosure / XSS / Code Execution / Upload
Jobberbase: http://www.jobberbase.com/ Version: 2.0 By Ross Marks: http://www.rossmarks.co.uk 1 Local path disclosure - change any variable to an array and in most cases it will tell you the local path where the application is installed eg...
Jobberbase 2.0 - Multiple Vulnerabilities
Jobberbase: http://www.jobberbase.com/ Version: 2.0 By Ross Marks: http://www.rossmarks.co.uk 1 Local path disclosure - change any variable to an array and in most cases it will tell you the local path where the application is installed eg...
Apple iOS Backup System Restricted File Access Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A problem in the Apple iOS local system relative path evaluation logic allows an attacker to access restricted file contents using a backup system...
Cisco ASA Local Path Inclusion Vulnerability (cisco-sa-20141008-asa)
A vulnerability in the function that exports environment variables of Cisco ASA Software could allow an authenticated, local attacker to inject a malicious library and take complete control of the system. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a...
Server: Local Path Disclosure when using Asset Pipeline
ownCloud 7 introduced the so-called "Asset Pipeline". It is disabled by default, but can be enabled by setting asset-pipeline.enabled to true in config.php When the setting is enabled ownCloud concatenates all CSS and JS files into a single large blob file. Thus the amount of initial required...
FileBug v1.5.1 iOS - Directory Traversal Vulnerability
Document Title: =============== FileBug v1.5.1 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1342 Release Date: ============= 2014-10-14 Vulnerability Laboratory ID VL-ID: ==================================== 134...
Cisco ASA Local Path Inclusion Vulnerability
A vulnerability in the function that exports environment variables of Cisco ASA Software could allow an authenticated, local attacker to inject a malicious library and take complete control of the system. The vulnerability is due to improper setting of the LDLIBRARYPATH environment. An attacker...
Multiple Vulnerabilities in Cisco ASA Software
2015-July-08 UPDATE: Cisco PSIRT is aware of disruption to some Cisco customers with Cisco ASA devices affected by CVE-2014-3383, the Cisco ASA VPN Denial of Service Vulnerability that was disclosed in this Security Advisory. Traffic causing the disruption was isolated to a specific source IPv4...
Mail.ru: e.mail.ru: File upload "Chapito" circus
Начинаем пихать зиробайты в имя файла на загрузке и поведение сервера неадекватно. Пока ничего страшнее чем local path disclosure, но боюсь импакт больше чем кажется. В имени файла в примере "������t123123", в хексе "220000000000007431323331323322" POST...
Open Real Estate CMS 1.5.1 - Multiple Vulnerabilities
No description provided by source. Exploit Title: Open Real Estate CMS - Multiple vilnerabilities Date: 2013 9 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://monoray.net/products/6-open-real-estat...
Monkey CMS - Multiple Vulnerabilities
No description provided by source. Exploit Title: Monkey CMS - Multiple Vulnerabilities Date: 2013 17 June Exploit Author: Yashar shahinzadeh & Mormoroth Vendor Homepage: http://www.monkeycms.com/ Tested on: Linux & Windows, PHP 5.3.10 Affected Version : All versions Contacts:...
Mac's CMS 1.1.4 - Multiple Vulnerabilities
No description provided by source. Exploit Title: Mac's CMS - Multiple vilnerabilities Date: 2013 14 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://macs-framework.sourceforge.net/ Tested on: Linux...
Nconf 1.3 - Multiple SQL Injection
No description provided by source. Exploit Title: nconf handleitem.php?Modifyattr.php etc Multiple Sql injection Date: 2013/3/4 Exploit Author: Saadat [email protected] Software Link: http://sourceforge.net/projects/nconf/files/nconf/ Vendors: http://www.nconf.org/ Author HomePage:...
Mac's CMS 1.1.4 - Multiple Vulnerabilities
Exploit for php platform in category web applications Summary: ======== 1. CSRF - Adding/Editing administrator account 2. Cross site scripting 3. Local path disclosure 1. CSRF - Adding/Editing administrator account: =============================================== Following exploits can be used...
Macs CMS 1.1.4 - Multiple Vulnerabilities
Macs CMS 1.1.4 - Multiple Vulnerabilities Exploit Title: Mac's CMS - Multiple vilnerabilities Date: 2013 14 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://macs-framework.sourceforge.net/ Tested on...
Mac's CMS 1.1.4 - Multiple Vulnerabilities
Exploit Title: Mac's CMS - Multiple vilnerabilities Date: 2013 14 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://macs-framework.sourceforge.net/ Tested on: Linux & Windows, PHP 5.3.4 Affected...
Mac's CMS 1.1.4 CSRF / XSS / Path Disclosure
Exploit Title: Mac's CMS - Multiple vilnerabilities Date: 2013 14 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://macs-framework.sourceforge.net/ Tested on: Linux & Windows, PHP 5.3.4 Affected...
Open Real Estate CMS 1.5.1 - Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Open Real Estate CMS - Multiple vilnerabilities Date: 2013 9 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage:...
Open Real Estate CMS 1.5.1 - Multiple Vulnerabilities
Open Real Estate CMS 1.5.1 - Multiple Vulnerabilities Exploit Title: Open Real Estate CMS - Multiple vilnerabilities Date: 2013 9 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage:...
Open Real Estate CMS 1.5.1 - Multiple Vulnerabilities
Exploit Title: Open Real Estate CMS - Multiple vilnerabilities Date: 2013 9 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://monoray.net/products/6-open-real-estate Tested on: Linux & Windows, PHP...