371 matches found
CVE-2002-2446
GE Healthcare Millennium MG, NC, and MyoSIGHT has a password of insite.genieacq for the insite account that cannot be changed without disabling product functionality for remote InSite support, which has unspecified impact and attack vectors...
CVE-2002-2445
GE Healthcare Millennium MG, NC, and MyoSIGHT has a default password of 1 root.genie for the root user, 2 "service." for the service user, 3 admin.genie for the admin user, 4 reboot for the reboot user, and 5 shutdown for the shutdown user, which has unspecified impact and attack vectors...
CVE-2002-2445
CVE-2002-2445 affects GE Healthcare Millennium MG, NC, and MyoSIGHT. The vulnerability stems from the use of default passwords for multiple accounts (root.genie, service., admin.genie, reboot, shutdown). According to connected CNVD-2015-05133, an attacker could exploit these defaults to take cont...
CVE-2002-2446
The CVE-2002-2446 issue affects GE Healthcare Millennium MG / NC / MyoSIGHT (and related GE imaging systems) due to default or hard-coded credentials: the insite.genieacq password cannot be changed without disabling remote InSite support. This enables potential remote authentication bypass on aff...
linux/x86 - /bin/nc -le /bin/sh -vp 17771 Shellcode - 58 Bytes
/ Linux x86 /bin/nc -le /bin/sh -vp 17771 shellcode This shellcode will listen on port 17771 and give you /bin/sh Shellcode Author: Oleg Boytsev Tested on: Debian GNU/Linux 7/i686 Shellcode Length: 58 Command: gcc -m32 -z execstack x86Linuxnetcatshellcode.c -o x86Linuxnetcatshellcode global start...
用友多个系统通用漏洞导致接口信息泄露引发多数据库信息泄露（涉及多个大型厂商）
简要描述： 详细说明： 通过webservice接口泄露,涉及多个系统 一、NC系统 http://123.232.105.202/ http://erp.suning.com.cn/ http://115.238.57.245/ 以苏宁为例。 接口地址:http://erp.suning.com.cn/uapws/service 会发现很多接口,以数据库内网链接泄露为例太多接口了,不一一测试了 得到数据库内网链接为:http://erp.suning.com.cn/uapws/service/nc.itf.ses.inittool.PortalSESInitToolService?ws...
YonYou NC-MA /invoker/JMXInvokerServlet 代码执行漏洞
No description provided by source...
yonyou NC /epp/LoginServerDo.jsp SQL注入漏洞
No description provided by source...
Yonyou NC-IUFO /epp/detail/publishinfodetail.jsp SQL注入漏洞
No description provided by source...
Yonyou NC-IUFO /epp/LoginServerDo.jsp SQL注入漏洞
No description provided by source...
用友NC综合办公系统前台再次SQL注入
简要描述： RT 详细说明： 用友NC综合办公系统SQL注入漏洞，可同时影响多个办公系统HR资源管理系统、UFO报表系统等的数据库 注入链接：/epp/detail/publishinfomore.jsp?pkinfotype= 注入参数：pkinfotype 必须先访问/epp/index.jsp后产生cookie才能进行SQL注入 漏洞证明： 测试案例： http://nc.xhlbdc.com 访问首页产生cookie： http://nc.xhlbdc.com/epp/index.jsp...
Ufida NC-IUFO system generic SQL injection-vulnerability warning-the black bar safety net
http://nc.xhlbdc.com/epp/detail/publishinfodetail.jsp?pkmessage=1002F410000000019JNX http://nc.pinggugroup.com:81/epp/detail/publishinfodetail.jsp?pkmessage=1002A31000000000BS0X http://erp.suning.com.cn/epp/core/public/infodetail.jsp?pkmessage=1003271000000000YB2N...
用友NC-IUFO系统通用SQL注入
简要描述： rt 详细说明： 有人提交了，就顺手来看看 漏洞文件：core/public/singleplandetail.jsp 漏洞参数：pk=1012F41000000000WA2V 漏洞类型：SQL注入漏洞（GET型） 影响用户： 收集几个案例，方便测试 http://nc.xhlbdc.com/epp/core/public/singleplandetail.jsp?pk=1012F41000000000WA2V...
mini_httpd <= 1.18 HTTP Request Escape Sequence Terminal Command Injection
No description provided by source. source: http://www.securityfocus.com/bid/37714/info Acme 'thttpd' and 'minihttpd' are prone to a command-injection vulnerability because they fail to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary...
NC GBook 1.0 - Remote Command injection Exploit
No description provided by source. -------------------------------------------------------------- NC GBook 1.0 Remote Command injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Vendor:http://www.php-gaestebuch.com Thank You Very Much His0k4...
Multiple Vendor Telnet Client Env_opt_add Heap-Based Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12919/info Multiple vendors' Telnet client applications are reported prone to a remote buffer-overflow vulnerability. This vulnerability reportedly occurs in the 'envoptadd' function in the 'telnet.c' source file, which i...
91 bytes nc -lp 31337 -e /bin//sh polymorphic linux shellcode .
No description provided by source. / Title : nc -lp 31337 -e /bin//sh polymorphic linux shellcode . Name : 91 bytes nc -lp 31337 -e /bin//sh polymorphic linux shellcode . Date : Mon Jul 5 16:58:50 WIT 2010 Author : gunslinger yudha.gunslingeratgmail.com Web : http://devilzc0de.org blog :...
用友NC-IUFO报表系统SQL注入（无需登录通杀所有版本）
简要描述： 用友NC-集团报表为集团企业用户提供全面的报表解决方案，它主要支持各类业务报表的输出、合并报表编制、分部报告编制以及报表的权限与流程管理，客户涉及金融、政府、教育、企业等 ------------------------------------------------ 该SQL注入点简单粗暴！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！ 详细说明： 用友IUFO如图： 问题出在单位编码这，点击放大镜查找的时候一直是这页面，还以为没这功能呢，后来才发现可以直接访问URL进入搜索页面； 随便找个:...
Citrix Netscaler 10.0 Denial Of Service Vulnerability
A vulnerability was found in the nsconfigd daemon TCP port 3008/SSL and 3010. This daemon can be crashed by sending a specially crafted message. No prior authentication is necessary. A watchdog daemon pitboss automatically restarts nsconfigd after the first six crashes and then reboots the...
Linux/x86 - Reverse TCP Shellcode (67 bytes)
Linux/x86 - Reverse TCP Shellcode 67 bytes. Shellcode exploit for Linx86 platform / Tiny Shell Reverse TCP Shellcode - C Language Linux/x86 Written in 2013 by Geyslan G. Bem, Hacking bits http://hackingbits.com [email protected] This source is licensed under the Creative Commons...