AN IT CMS - SQL Injection Vulnerability

========================================================== + Title :- WAN IT CMS - SQL Injection Vulnerability + Date :- 23 - July - 2015 + Vendor Homepage :- http://www.wanitltd.com/ + Version :- All Versions + Tested on :- Nginx/1.4.5, PHP/5.2.17, Linux - Windows + Category :- webapps + Google...

3KITS CMS - SQL Injection Vulnerability

========================================================= + Title :- 3KITS CMS - SQL Injection Vulnerability + Date :- 23 - July - 2015 + Vendor Homepage :- http://www.3kits.com/ + Version :- All Versions + Tested on :- Nginx/1.4.5, PHP/5.2.17, Linux - Windows + Category :- webapps + Google Dorks...

MSCorp CMS - SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= + Title :- MSCorp CMS - SQL Injection Vulnerability + Date :- 7 - Aug - 2015 + Vendor Homepage :- http://www.mscorp.co.in/ + Version :- All Versions + Tested on :- Nginx/1.4.5,...

Python Network Recon Framework: ivre

IVRE Instrument de veille sur les réseaux extérieurs or DRUNK Dynamic Recon of UNKnown networks is a network recon framework, including two modules for passive recon one p0f -based and one Bro -based and one module for active recon mostly Nmap -based, with a bit of ZMap . External programs /...

ArticleFR 3.0.6 Cross Site Scripting

ArticleFR 3.0.6 Multiple Script Injection Vulnerabilities Vendor: Free Reprintables Product web page: http://www.freereprintables.com Affected version: 3.0.6 Summary: A lightweight fully featured content article / video management system. Comes with a pluginable and multiple module framework...

ArticleFR 3.0.6 - Multiple Vulnerabilities

Exploit for php platform in category web applications ArticleFR 3.0.6 CSRF Add Admin Exploit Vendor: Free Reprintables Product web page: http://www.freereprintables.com Affected version: 3.0.6 Summary: A lightweight fully featured content article / video management system. Comes with a pluginable...

ArticleFR 3.0.6 Multiple Script Injection Vulnerabilities

Summary A lightweight fully featured content article / video management system. Comes with a pluginable and multiple module framework system. Description ArticleFR suffers from multiple stored cross-site scripting vulnerabilities. The issues are triggered when input passed via the POST parameter...

ArticleFR 3.0.6 - Multiple Vulnerabilities

ArticleFR 3.0.6 - Multiple Vulnerabilities ArticleFR 3.0.6 CSRF Add Admin Exploit Vendor: Free Reprintables Product web page: http://www.freereprintables.com Affected version: 3.0.6 Summary: A lightweight fully featured content article / video management system. Comes with a pluginable and...

Concept Plays CMS - SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= + Title :- Concept Plays CMS - SQL Injection Vulnerability + Date :- 11 - July - 2015 + Vendor Homepage :- http://www.conceptplays.com/ + Version :- All Versions + Tested on :-...

Websplines CMS - SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= + Title :- Websplines CMS - SQL Injection Vulnerability + Date :- 11 - July - 2015 + Vendor Homepage :- http://www.websplines.com/ + Version :- All Versions + Tested on :- Nginx/1.4.5,...

Manan Shop SQL Injection

========================================================= + Title :- Manan Shop CMS - SQL Injection Vulnerability + Date :- 4 - July - 2015 + Vendor Homepage :- http://www.manan.asia/ + Version :- All Versions + Tested on :- Nginx/1.4.5, PHP/5.2.17, Linux - Windows + Category :- webapps + Google...

White Way Systems SQL Injection

========================================================= + Title :- White Way Systems CMS - SQL Injection Vulnerability + Date :- 19 - June - 2015 + Vendor Homepage: :- http://whitewaysystems.co.za/ + Version :- All Versions + Tested on :- Nginx/1.4.5, PHP/5.2.17, Linux - Windows + Category :-...

Why Web Developments SQL Injection

========================================================= + Title :- Why Web Developments CMS - SQL Injection Vulnerability + Date :- 19 - June - 2015 + Vendor Homepage: :- http://www.whyweb.co.za/ + Version :- All Versions + Tested on :- Nginx/1.4.5, PHP/5.2.17, Linux - Windows + Category :-...

ABH WORLD SQL Injection

========================================================= + Title :- ABH WORLD CMS - SQL Injection Vulnerability + Date :- 19 - June - 2015 + Vendor Homepage: :- https://abhworld.com/ + Version :- All Versions + Tested on :- Nginx/1.4.5, PHP/5.2.17, Linux - Windows + Category :- webapps + Google...

Pasworld - 'detail.php' Blind SQL Injection

========================================================= + Title :- Pasworld detail.php Blind Sql Injection Vulnerability + Date :- 5 - June - 2015 + Vendor Homepage: :- http://main.pasworld.co.th/ + Version :- All Versions + Tested on :- Nginx/1.4.5, PHP/5.2.17, Linux - Windows + Category :-...

Pasworld - detail.php Blind SQL Injection

Pasworld - detail.php Blind SQL Injection ========================================================= + Title :- Pasworld detail.php Blind Sql Injection Vulnerability + Date :- 5 - June - 2015 + Vendor Homepage: :- http://main.pasworld.co.th/ + Version :- All Versions + Tested on :- Nginx/1.4.5,...

Mandriva Linux Security Advisory : nginx (MDVSA-2015:094)

Updated nginx package fixes security vulnerabilities : A bug in the experimental SPDY implementation in nginx was found, which might allow an attacker to cause a heap memory buffer overflow in a worker process by using a specially crafted request, potentially resulting in arbitrary code execution...

Debian DLA-55-1 : nginx security update

Antoine Delignat-Lavaud discovered that it was possible to reuse SSL sessions in unrelated contexts if a shared SSL session cache or the same TLS session ticket key was used for multiple 'server' blocks. NOTE: Tenable Network Security has extracted the preceding description block directly from th...

53KF某重要站点任意文件读取

简要描述： 详细说明： 网站：tel.53kf.com controller可控 request： GET /external.php?controller=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00web&style=61565627-4006633536-103387129 HTTP/1.1 User-Agent: Mozilla/5.0 Windows; U; Windows NT 6.1; en-US Accept: /...

Moodle 2.5.9/2.6.8/2.7.5/2.8.3 - Block Title Handler Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Moodle 2.5.9/2.6.8/2.7.5/2.8.3 Block Title Handler Cross-Site Scripting Vendor: Moodle Pty Ltd Product web page: https://www.moodle.org Affected version: 2.8.3, 2.7.5, 2.6.8 and 2.5.9 Summary: Moodle is a learning platform designed to provide...