Nessus本地权限提升漏洞

Nessus是一款流行的系统漏洞扫描与分析软件。 Nessus恶意进程检测插件存在安全漏洞，由于该插件会创建一个以SYSTEM运行的服务程序，并且低权限用户可允许修改该程序，允许攻击者利用漏洞创建恶意程序并执行，提升权限。 0 Nessus appliance engine 5.2.1 目前没有详细解决方案提供： http://www.nessus.org/...

Z-Blog PHP版之三低权限管理员POST注入

简要描述： 注册个评论者账号就能注到管理员 详细说明： 木有找到你们接受POST变量的函数在哪，所以认为问题出在/zbsystem/function/lib/dbsql.php public function ParseWhere$where global $zbp; $sqlw=null; if!empty$where $sqlw .= ' WHERE '; $comma = ''; foreach$where as $k = $w $eq=$w0; if$eq=='='|$eq==''|$eq=='LIKE'|$eq==''|$eq=='!=' $x = string$w1; $y ...

Dell PacketTrap PSA 7.1 Cross Site Scripting

Title: ====== Dell PacketTrap PSA 7.1 - Multiple Persistent Vulnerabilities Date: ===== 2013-07-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=790 VL-ID: ===== 790 Common Vulnerability Scoring System: ==================================== 5.6 Introduction:...

Dell PacketTrap PSA 7.1 - Multiple Cross-Site Scripting Vulnerabilities

Dell PacketTrap PSA 7.1 - Multiple Cross-Site Scripting Vulnerabilities Title: ====== Dell PacketTrap PSA 7.1 - Multiple Persistent Vulnerabilities Date: ===== 2013-07-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=790 VL-ID: ===== 790 Common Vulnerability Scoring...

Dell PacketTrap MSP RMM 6.6.x - Multiple Vulnerabilities

Document Title: =============== Dell PacketTrap MSP RMM 6.6.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=791 Release Date: ============= 2013-07-16 Vulnerability Laboratory ID VL-ID: ==================================== 79...

Wordpress FuneralPress Plugin 1.1.6 - Persistent XSS

Exploit for php platform in category web applications A low-privilege or guest user can inject code via the , and elements which are part of the wpfhuploadform form in http://site/obituaries/?id=ID&f=guestbook&m=add Scripts injected via the "photo-message" and "youtube-message" elements will be...

Switchvox Asterisk v5.1.2 - Multiple Web Vulnerabilities

Title: ====== Switchvox Asterisk v5.1.2 - Multiple Web Vulnerabilities Date: ===== 2012-09-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=700 VL-ID: ===== 700 Common Vulnerability Scoring System: ==================================== 4.1 Introduction: =============...

op5 Monitoring 5.4.2 XSS / CSRF / SQL Injection

Author: loneferret of Offensive Security Product: op5 Monitoring VM appliance Version: 5.4.2 Vendor Site: http://www.op5.com/ Software Download: http://www.op5.com/get-op5-monitor/get-started/ Software Description: op5 is a market leading developer of Open Source Management solutions. op5 develop...

Docebo Lms 4.0.4 - Messages Remote Code Execution

Docebo Lms 4.0.4 - Messages Remote Code Execution if$GLOBALS'modname' != '' $modulecfg =& createModule...

Oracle存在多个安全漏洞

CNCAN ID：CNCAN-2009041604 多个Oracle产品存在漏洞，可导致SQL注入，泄漏敏感信息或使攻击者破坏系统： -Oracle Process Manager和Notification opmn守护程序存在格式串错误，提交特殊构建的POST请求给port 6000/TCP可导致任意代码执行。 -传递给"DBMSAQIN"的输入在使用前缺少过滤，可导致注入任意SQL代码。 -Oracle数据库包含的Application Express组件存在错误，非特权用户可以获得"LOWS030000.WWVFLOWUSER"中的APEX密码HASH。 目前还存在多个未知漏洞。...

Modify the PHP core Backdoor implementation-vulnerability warning-the black bar safety net

Developing A PHP Core Backdoor Author: wofeiwo/I non-I wofeiwoatgmaildotcom Directory 1Foreword 2The advantages and disadvantages of 3design 4functions to achieve 5reference to documents 6some description 1Foreword PHP is a very popular web server side script language. At present, many web...

tco.txt

Synnergy Laboratories Advisory SLA-2000-14 NAME BSD/Linux telnet client overflow AFFECTED Linux Debian Redhat Mandrake Slackware possibly others BSD FreeBSD possible others SYNOPSIS Synnergy Labs has found a bug in the telnet client that causes a stack overflow by filling the DISPLAY environment...