373 matches found
Stored XSS in "gallery" application (NC-SA-2016-001)
Due to a recent migration of the Gallery app to the new sharing endpoint a parameter changed from an integer to a string value. This value wasn't sanitized before and was thus now vulnerable to a Cross-Site-Scripting attack.To exploit this vulnerability an authenticated attacker has to share a...
Yonyou NC integrated office systems /epp/html/nodes/upload/supdoc. jsp file pkcorp parameter SQL injection vulnerability
No description provided by source...
Linux/x86-64 - NetCat Bind Shell Shellcode (64 bytes)
include include // Exploit Title: NetCat Bind Shell 64bit 64byte // Date: 6/28/2016 // Exploit Author: CripSlick // Tested on: Kali 2.0 // Version: v1.10-41 // email protected // OffSec ID: OS-20614 // Victim: netstat -an | grep LISTEN | grep tcp // Attacker: nc unsigned char code = \ define PORT...
Linux x86 /bin/nc -le /bin/sh -vp13337 Shellcode 56 bytes
Linux x86 /bin/nc -le /bin/sh -vp13337 Shellcode 56 bytes. Shellcode exploit for linx86 platform / Linux x86 /bin/nc -le /bin/sh -vp13337 shellcode56bytes Author: Author: sajith Tested on: i686 GNU/Linux Shellcode Length: 56 SLAE - 750 Disassembly of section .text: 08048060 : 8048060: 31 c0 xor...
Linux/x86 - /bin/nc -le /bin/sh -vp13337 Shellcode (56 bytes)
/ Linux x86 /bin/nc -le /bin/sh -vp13337 shellcode56bytes Author: Author: sajith Tested on: i686 GNU/Linux Shellcode Length: 56 SLAE - 750 Disassembly of section .text: 08048060 : 8048060: 31 c0 xor eax,eax 8048062: 50 push eax 8048063: 68 33 33 33 37 push 0x37333333 8048068: 68 2d 76 70 31 push...
SQL Injection Vulnerability in UFIDA Software NC-IUFO System
UFIDA NC-IUFO system is a financial management software. The UFIDA NC-IUFO system suffers from a SQL injection vulnerability that can be exploited by an attacker to gain access to website database information...
Linux/x86_64 - bindshell Port 5600 - 86 bytes
Linux/x8664 - bindshell Port 5600 - 86 bytes. Shellcode exploit for linx86-64 platform / --------------------------------------------------------------------------------------------------- Linux/x8664 - bindshell PORT: 5600 - 86 bytes Ajith Kp @ajithkp560 http://www.terminalcoders.blogspot.com Om...
用友ERP-NC任意文件遍历漏洞
No description provided by source...
Linux/x86_64 - bindshell PORT: 5600 - 81 bytes
Linux/x8664 - bindshell PORT: 5600 - 81 bytes. Shellcode exploit for linx86-64 platform / --------------------------------------------------------------------------------------------------- Linux/x8664 - bindshell PORT: 5600 - 81 bytes Ajith Kp @ajithkp560 http://www.terminalcoders.blogspot.com O...
Linux/x86-64 - bindshell (Port 5600) Shellcode (81 bytes)
/ --------------------------------------------------------------------------------------------------- Linux/x8664 - bindshell PORT: 5600 - 81 bytes Ajith Kp @ajithkp560 http://www.terminalcoders.blogspot.com Om Asato Maa Sad-Gamaya | Tamaso Maa Jyotir-Gamaya | Mrtyor-Maa Amrtam Gamaya | Om Shaant...
用友NC人力资源管理（e-HR） /hrss/rm/PositionDetail.jsp SQL注入漏洞
No description provided by source...
用友NC人力资源管理（e-HR） /hrss/attach.download.d sql注入
No description provided by source...
用友NC综合办公系统 /service/~iufo/com.ufida.web.action.ActionServlet 用户信息泄露
No description provided by source...
用友NC综合办公平台 /epp/core/eppquickdesk/eppnotice/notice.jsp等2处 SQL注入漏洞
No description provided by source...
YonYou NC在/nc/servlet/nc.ui.iufo.login.LoginUI存在SQL盲注漏洞
No description provided by source...
TCP Bindshell with Password Prompt - 162 bytes
TCP Bindshell with Password Prompt - 162 bytes. Shellcode exploit for linux platform /--------------------------------------------------------------------------------------------------------------------- / Title: tcp bindshell with password prompt in 162 bytes Author: Sathish kumar Contact:...
Sam Spade 1.14 - (Scan Addresses) Buffer Overflow Exploit
Exploit for windows platform in category local exploits !/usr/bin/python -- coding: cp1252 -- EXPLOIT TITLE: Sam Spade 1.14 Scan from IP address Field Exploit AUTHOR: VIKRAMADITYA "-OPTIMUS" Date of Testing: 2nd November 2015 Download Link :...
Sam Spade 1.14 - Scan Addresses Buffer Overflow
Sam Spade 1.14 - Scan Addresses Buffer Overflow !/usr/bin/python -- coding: cp1252 -- EXPLOIT TITLE: Sam Spade 1.14 Scan from IP address Field Exploit AUTHOR: VIKRAMADITYA "-OPTIMUS" Credits: Luis Mart�nez Date of Testing: 2nd November 2015 Download Link :...
用友NC综合办公系统 /epp/html/nodes/upload/SupdocDo.jsp SQL注入漏洞
用友NC综合办公系统SQL注入漏洞，可同时影响多个办公系统HR资源管理系统、UFO报表系统等的数据库 注入链接：/epp/detail/publishinfomore.jsp?pkinfotype= 注入参数：pkinfotype 必须先访问/epp/index.jsp后产生cookie才能进行SQL注入 测试案例： http://nc.xhlbdc.com 访问首页产生cookie： http://nc.xhlbdc.com/epp/index.jsp...