Beetel 450TC2 Router - Cross-Site Request Forgery (Admin Password)

docume...

Beetel 450TC2 Router - Cross-Site Request Forgery (Admin Password)

Beetel 450TC2 Router - Cross-Site Request Forgery Admin Password ​​ input type=...

StopTheHacker: Reflected cross site scripting in login page

It was observed that the application is vulnerable to cross-site scripting XSS. XSS is a type of attack that involves running a malicious scripts on a victim’s browser. Once exploited It is possible to steal or manipulate a legitimate user’s session credentials including session cookies. Request ...

cFos Personal Net 3.09 - Remote Heap Memory Corruption (Denial of Service)

cFos Personal Net v3.09 Remote Heap Memory Corruption Denial of Service Vendor: cFos Software GmbH Product web page: https://www.cfos.de Affected version: 3.09 Summary: cFos Personal Net PNet is a full-featured HTTP server intended for personal and professional use. For personal use, instead of...

WordPress Work-The-Flow 1.2.1 Shell Upload

Author: nopesled Date: 24/04/14 Software: https://wordpress.org/plugins/work-the-flow-file-upload/ Company: http://wtf-fu.com/ Version: 1.2.1 Tested on: Windows 7 Vulnerability: Unrestricted File Upload Submit an image file via the wtf upload panel and intercept the POST request to...

Wordpress Work-The-Flow Plugin 1.2.1 - Arbitrary File Upload

Exploit for php platform in category web applications Author: nopesled Date: 24/04/14 Software: https://wordpress.org/plugins/work-the-flow-file-upload/ Company: http://wtf-fu.com/ Version: 1.2.1 Tested on: Windows 7 Vulnerability: Unrestricted File Upload Submit an image file via the wtf upload...

WordPress Plugin Work-The-Flow 1.2.1 - Arbitrary File Upload

WordPress Plugin Work-The-Flow 1.2.1 - Arbitrary File Upload Author: nopesled Date: 24/04/14 Software: https://wordpress.org/plugins/work-the-flow-file-upload/ Company: http://wtf-fu.com/ Version: 1.2.1 Tested on: Windows 7 Vulnerability: Unrestricted File Upload Submit an image file via the wtf...

WordPress Plugin Work-The-Flow 1.2.1 - Arbitrary File Upload

Author: nopesled Date: 24/04/14 Software: https://wordpress.org/plugins/work-the-flow-file-upload/ Company: http://wtf-fu.com/ Version: 1.2.1 Tested on: Windows 7 Vulnerability: Unrestricted File Upload Submit an image file via the wtf upload panel and intercept the POST request to...

Localize: Full Path Disclosure

Not my best piece of work, but the following file results in a full path disclosure if reviewphraseobject is given the wrong parameter. http://www.localize.io/review/3C/languages/5 POST...

Easytalk垂直权限问题（逻辑漏洞可提权getshell）

简要描述： Easytalk处理用户数据的时候未足够过滤，导致可以进行权限提升 详细说明： 晚上习惯性的打开代码分析分析函数，看到了这样一处 漏洞文件: /Easytalk/Home/Lib/Action/GuideAction.class.php //保存设置,注册用户时候，向导保存设置 public function doset $user=M'Users'; $userdata=$POST"user";//获取用户提交的所有数据 // ok，此处的用户userdata数据是来自post的，而并未过滤一些敏感字段 $userdata"nickname"=...

Xangati XSR / XNR - 'gui_input_test.pl' Remote Command Execution

source: https://www.securityfocus.com/bid/66819/info Xangati XSR And XNR are prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary commands in the context of the...

Quick.CMS 5.4 - Multiple Vulnerabilities

Exploit Title: QuickCms 5.4 Multiple Vulnerabilites Date: 04/08/2014 Author: shpendk Software Link: http://opensolution.org/download,en,18.html?sFile=Quick.Cms/Quick.Cmsv5.4.zip Version: 5.4 Tested on: Xampp on Windows Reflected XSS Vulnerability in Admin Area: Trigger:...

Joomla Pbbooking 2.4 Cross Site Scripting

Hello, Cross-site scripting XSS vulnerability in the Pbbooking 2.4 component for Joomla! allows remote attackers to inject arbitrary web script or HTML via POST request to manage.php. POC: alert'XSS'" / Best regards...

Proxmox Mail Gateway 3.1 Cross Site Scripting

I. VULNERABILITY ------------------------- Multiplus XSS in Proxmox Mail Gateway 3.1 II. BACKGROUND ------------------------- Proxmox Mail Gateway helps you protect your business against all email threats like spam, viruses, phishing and trojans at the moment they emerge. The flexible architectur...

Fitnesse远程代码执行漏洞

Bugtraq ID:65921 CVE ID:CVE-2014-1216 FitNesse是一套软件开发协作工具。 Fitnesse Wiki不正确校验已编辑页面语法参数数据，允许远程攻击者利用漏洞提交特殊的请求以应用程序上下文执行任意命令。 0 Fitnesse Wiki v20131110 目前没有详细解决方案提供： http://www.fitnesse.org POST /any page HTTP/1.1 Host: host:port Proxy-Connection: keep-alive Content-Length: 374 Accept:...

CVE-2013-6731: Undefined Security Weakness

IBM Netezza Performance Portal 2.x before 2.0.0.3 allows remote authenticated users to change arbitrary passwords via an HTTP POST request...

IBM Netezza Performance Portal用户验证凭据管理绕过漏洞

CVE ID:CVE-2013-6731 IBM Netezza数据仓库应用设备将存储、处理、数据库和分析融入到一个高性能数据仓库设备中,使大数据高级分析更简单、更迅捷和更易用。 IBM Netezza Performance Portal不正确限制对验证凭据管理的访问，允许攻击者利用漏洞通过特制的HTTP POST请求来更改其他用户的密码。 0 IBM Netezza Performance Portal 2.0 IBM Netezza Performance Portal 2.0.0.1 IBM Netezza Performance Portal 2.0.0.2 厂商补丁： IBM...

Ultra Mini HTTPd 1.21 - POST Remote Stack Buffer Overflow (1)

Ultra Mini HTTPd 1.21 - POST Remote Stack Buffer Overflow 1 Exploit Title: Ultra Mini HTTPD stack buffer overflow POST request Date: 16 Feb 2014 Exploit Author: Sumit Vendor Homepage: http://www.picolix.jp/ Software Link: http://www.vector.co.jp/soft/winnt/net/se275154.html Version: 1.21 Tested o...

Ultra Mini HTTPd 1.21 - 'POST' Remote Stack Buffer Overflow (1)

Exploit Title: Ultra Mini HTTPD stack buffer overflow POST request Date: 16 Feb 2014 Exploit Author: Sumit Vendor Homepage: http://www.picolix.jp/ Software Link: http://www.vector.co.jp/soft/winnt/net/se275154.html Version: 1.21 Tested on: Windows XP Professional SP3 Description: A buffer overflo...

Discuz! X upgrade/conversion program GETSHELL vulnerability analysis-vulnerability warning-the black bar safety net

0x01 vulnerability analysis Vulnerability root cause in the code comment appears in the wrap, resulting in code execution, the process is as follows: 0x0101 first, from the index. php the 3 row 0 with into. ! enter image description here 0x0102 doconfiginc. php 3, line 7, with the into this...