BbZL.php - Remote File Inclusion

| | | ||\ || || || | \ // | | | || \ || || || | |\ //| | | \ | | |/ / | | || \ || || || | | \ // | | | \ | | / / | | || \ || || || | | \ // | | | | | | | /'\ / / | | || \ || || || | | \ // | | | | | \ \ / / / | | || \ || |||| | | \// | | | | | | | \ \ / / | | || \|| || || / || |/...

Discuz!NT 3.6跨站漏洞

简要描述： 登陆框提交用户名或密码的时候存在跨站漏洞。 详细说明： 漏洞证明： http://nt.discuz.net/login.aspx?postusername=%22%3E%3Ciframe%20src=%22http://www.zhu.cm%22%3E...

[SECURITY] Fedora 15 Update: ejabberd-2.1.8-2.fc15

ejabberd is a Free and Open Source distributed fault-tolerant Jabber/XMPP server. It is mostly written in Erlang, and runs on many platforms tested on Linux, FreeBSD, NetBSD, Solaris, Mac OS X and Windows NT/2000/XP...

Discuz! NT 2. x - 3.5.2 SQL injection(0day)-vulnerability warning-the black bar safety net

Vulnerability type: SQL injection Vulnerability description: Discuz! NT is the Kang Sheng Chong thinkComsenzits a powerful based on ASP.NET platform community software. Vulnerability analysis: ajaxtopicinfo. ascx user control poster SQL injectionvulnerability Combined with ajax. aspx call any use...

Microsoft WinXP sp2/sp3 local system privilege escalation exploit

Exploit for windows platform in category local exploits Microsoft WinXP sp2/sp3 local system privilege escalation exploit Platform: Windows XP SP2/SP3 Type: local Exploit Author: Todor Donev [email protected] Good luck and Have fun!! Kind regards to so sweet baby Tsvetelina Emirska Thank you...

Fedora Update for rdesktop FEDORA-2011-7697

Check for the Version of rdesktop OpenVAS Vulnerability Test Fedora Update for rdesktop FEDORA-2011-7697 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for rdesktop FEDORA-2011-7694

Check for the Version of rdesktop OpenVAS Vulnerability Test Fedora Update for rdesktop FEDORA-2011-7694 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 14 Update: rdesktop-1.6.0-11.fc14

rdesktop is an open source client for Windows NT Terminal Server and Windows 2000 & 2003 Terminal Services, capable of natively speaking Remote Desktop Protocol RDP in order to present the user's NT desktop. Unlike Citrix ICA, no server extensions are required...

Discuz! NT 3.1.0 后台拿webshell

简要描述： 通过后台写入执行代码，直接拿到webshell，从而掌握服务器权限。 详细说明： 1、访问http://127.0.0.1/admin/global/globaltemplatesedit.aspx?path=../tools/&filename=rss.aspx&templateid=1&templatename=Default，写入aspx木马。 2、写入aspx木马后，访问http://127.0.0.1/tools/rss.aspx就可以了。 漏洞证明：...

Discuz! NT 3.1.0 后台拿webshell

简要描述： 通过后台写入aspx木马，直接拿到webshell，然后获取整个服务器权限。 详细说明： 1、访问http://127.0.0.1/admin/global/globaltemplatesedit.aspx?path=../tools/&filename=rss.aspx&templateid=1&templatename=Default，写入aspx木马。 2、写入aspx木马后，访问http://127.0.0.1/tools/rss.aspx就可以了。 漏洞证明：...

Discuz!NT 2.*-3.5.2 SQL注入漏洞

Discuz!NT 是康盛创想Comsenz旗下的一款功能强大的基于 ASP.NET 平台的社区软件。ajaxtopicinfo.ascx用户控件 poster SQL注入漏洞。结合ajax.aspx调用任意用户控件漏洞 admin/UserControls/ ajaxtopicinfo.ascx 函数 GetCondition WebsiteManage.cs //62 行 if posterlist != "" string poster = posterlist.Split','; condition += " AND poster in "; string tempposerli...

Discuz! NT 2.* -3.5.2 SQL injection vulnerability 0day-vulnerability warning-the black bar safety net

| Vulnerability description: Discuz! NT is the Kang Sheng Chong thinkComsenzits a powerful based on ASP.NET platform community software. ajaxtopicinfo. ascx user control poster SQL injectionvulnerabilities. Combined with ajax. aspx call any user control vulnerability Vulnerability file:...

Discuz!NT 2.x - 3.5.2 SQL注入

简要描述： Discuz!NT 是康盛创想Comsenz旗下的一款功能强大的基于 ASP.NET 平台的社区软件。 详细说明： ajaxtopicinfo.ascx用户控件 poster SQL注入漏洞 漏洞证明： 文件 admin/UserControls/ ajaxtopicinfo.ascx 中 转到函数 GetCondition WebsiteManage.cs //62 行 if posterlist != "" string poster = posterlist.Split','; condition += " AND poster in "; string...

Joe guest(joekoe) CMS 4.0 upload and SQL injection vulnerabilities-vulnerability warning-the black bar safety net

Joekoe CMS 4.0 brings you a perfect design, in the member interaction and Security aspects of a unique innovative system for the Windows NT Service environment of a Web site or a business platform of the best solutions. Its well-designed architecture with functional mechanisms, from the individua...

Allied Telesyn TFTP (AT-TFTP) Server/Daemon 1.9 - Long Filename Overflow (Metasploit)

$Id: attftplongfilename.rb 11882 2011-03-05 21:00:57Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Server Service - NetpwPathCanonicalize Overflow (MS06-040) (Metasploit)

$Id: ms06040netapi.rb 11762 2011-02-17 03:56:15Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

CA ARCserve D2D r15 Web Service Apache Axis2 World Accessible Servlet Code Execution Vulnerability Poc

Computer Associates ARCserve D2D r15 Web Service Apache Axis2 World Accessible Servlet Code Execution Vulnerability Poc product homepage: https://support.ca.com/phpdocs/0/8363/support/arcserved2dsupport.html vulnerability: The Tomcat Server, which listens for incoming connections on port 8014,...

CA ARCserve D2D r15 - Web Service Servlet Code Execution

CA ARCserve D2D r15 - Web Service Servlet Code Execution Computer Associates ARCserve D2D r15 Web Service Apache Axis2 World Accessible Servlet Code Execution Vulnerability Poc product homepage: https://support.ca.com/phpdocs/0/8363/support/arcserved2dsupport.html vulnerability: The Tomcat Server...

(libpurple): Multiple DoS (crash) flaws by processing of unsanitized Base64 decoder values

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a crafted message, related to the plugins for MSN, MySpaceIM,...

Moderate: Red Hat Security Advisory: pidgin security update

Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...