Drupal 7.x 核心路径泄露漏洞

BUGTRAQ ID: 53454 Drupal是一款开放源码的内容管理平台。 Drupal 7.14之前版本在实现上存在路径泄露漏洞，通过错误信息中泄露安装路径的index.php的q参数，includes/bootstrap.inc内的requestpath函数可允许远程攻击者获取敏感信息。 0 Drupal 7.x 厂商补丁： Drupal ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.drupal.org/ http://localhost/?q=x ------------------------------------...

Feifei television systems PHP version v1. 9 injection exploit-vulnerability warning-the black bar safety net

Article author: honglousy Yesterday the whole hacking Forum next station on the program, found that people also really many. Simply write the exp. Boring as... ? php / Fly fly video management system SQL injection Feifei television systems PHP version v1. 9 injection exploit by:www.08sec.com fans...

Vertrigoserv 2.27 Privilege Escalation

===================================================== Vertrigoserv 2.27 Local Privilege Escalation Exploit ====================================================...

Estudioayllon Blind Sql Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Developing and Sharing Tools for Professional Hackers

Professional hackers or security testers tend to write a lot of code. We write exploit code, fuzzers, code to handle esoteric protocols and data structures, unpackers, disassemblers, reversers, parsers, and so much more. We write this code because often what we’re doing is so specific that is...

Debian Security Advisory DSA 2452-1 (apache2)

The remote host is missing an update to apache2 announced via advisory DSA 2452-1. OpenVAS Vulnerability Test $Id: deb24521.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2452-1 apache2 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

DEBIAN-CVE-2012-0216

The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.2.22-4, and sid before 2.2.22-4, when modphp or modrivet is used, provides example scripts under the doc/ URI, which might allow local users to conduct cross-site scripting XSS...

CVE-2012-0216

The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.2.22-4, and sid before 2.2.22-4, when modphp or modrivet is used, provides example scripts under the doc/ URI, which might allow local users to conduct cross-site scripting XSS...

PT-2012-2407 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: apache2 versions prior to 2.2.16-6+squeeze7 apache2 versions prior to 2.2.22-4 Description: The default configuration of the apache2 package, when mod php or mod rivet is used, provides example scripts under the doc/ URI. This might allow loc...

[SECURITY] [DSA 2452-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2452-1 [email protected] http://www.debian.org/security/ Stefan Fritsch April 15, 2012 http://www.debian.org/security/faq -...

DSA-2452-1 apache2 - insecure default configuration

Bulletin has no description...

lizard cart - 'search.php' SQL Injection

Exploit Title: lizard cart SQLi search.php Google Dork: inurl:search.php+intitle:"Lizard Cart"+intext:"Search Results:" Date: 05-03-2012 Author: Number 7 Software Link: http://sourceforge.net/projects/lizardcart/files/latest/download?source=directory Version: pp104 Tested on: Windows Usage:...

Impulsio CMS SQL Injection

. . . . | | | / || \ \ | / | | / \ / | / \ / \ / \ / /| |\ \ / \ / \ / / \ / | / \ \ \ | || | / // | | | \ / \ \ | | / | | \ \ / // | \ / | | / |||| /\ | / || / \ / || /|| / \ / / \ | \ || / / / / / / / / / /...

AHLANNET SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

MachForm 2.4 Remote File Inclusion

=============================== MachForm.v2.4 RFI Vulnerability =============================== Vendor: http://canopus.oron.com/i755lr7evek7np4dpndrvbqcqhs3uj4igorbmlhaqwglgek3qc2old7whll7z4mlrtcyk73t/MachForm.v2.4.PHP.NULL-DGT.zip Date: 2012-1-27 Author : indoushka Exploit By indoushka...

VR GPub 4.0 CSRF Vulnerability

Exploit for php platform in category web applications +-------------------------------------------------------------------------+ Exploit Title : VR GPub 4.0 CSRF Vulnerability version : VR GPub 4.0 Author : Cyber-Crystal Date : n/a Dork : inurl:"VR GPub" Software Link :...

Debian DSA-2363-1 : tor - buffer overflow

It was discovered that Tor, an online privacy tool, incorrectly computes buffer sizes in certain cases involving SOCKS connections. Malicious parties could use this to cause a heap-based buffer overflow, potentially allowing execution of arbitrary code. In Tor's default configuration this issue c...

w-CMS 2.01 - Multiple Vulnerabilities

w-CMS 2.01 - Multiple Vulnerabilities Exploit Title: W-Cms Multiple Vulnerability Date: 2012-01-09 Author: th3.g4m30v3r Site:http://w-cms.info/ Software Link: http://code.google.com/p/wcms/ Dork: intext:"Powered by w-CMS" Version : 2.01 Tested on: Window 7 Yogesh Kashyap, shubneet goel,...

SantriaCMS - SQL Injection

SantriaCMS - SQL Injection I Think, I can, But i'm just loser Author : Troy Date : Thursday, Dec 08, 2011 Location : /home/troy -------- CMS info ----------- Vendor : http://www.jasawebsitemurah.info/cms/ Exploit title : SantriaCMS SQL Injection Vulnerability Dork : "view.php?idArtikel=" Version ...

SantriaCMS SQL Injection Vulnerability

Exploit for php platform in category web applications Author : Troy Date : Thursday, Dec 08, 2011 Location : /home/troy -------- CMS info ----------- Vendor : http://www.jasawebsitemurah.info/cms/ Exploit title : SantriaCMS SQL Injection Vulnerability Dork : "view.php?idArtikel=" Version : Null/1...