QIWI: [contact-sys.com] XSS /ajax/transfer/status trn param

Уязвимый сценарий: https://contact-sys.com/ajax/transfer/status Уязвимый параметр: trn Некорректный content-type. Нормальный пейлоад блокируется WAFом. PoC html XSS" / document.getElementById"xss".submit; HTTP Request http POST /ajax/transfer/status HTTP/1.1 Host: contact-sys.com User-Agent:...

PT-2016-4591

Name of the Vulnerable Software and Affected Versions H2O versions prior to 1.6.2 H2O versions 1.7.x prior to 1.7.0-beta3 Description A CRLF injection issue exists in the on req function in lib/handler/redirect.c, allowing remote attackers to inject arbitrary HTTP headers and conduct HTTP respons...

PT-2015-3338

Name of the Vulnerable Software and Affected Versions OpenSMTPD versions prior to 5.7.2 Description The issue is related to a use-after-free condition that can be exploited by remote attackers to cause a denial of service or execute arbitrary code. This is achieved through vectors involving req c...

ZeusCart 4 信息泄漏漏洞

No description provided by source. !/usr/bin/env python coding: utf-8 from urlparse import urljoin from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '11111 ' vul ID version = '1' author = 'Disorder' vulDate =...

UBUNTU-CVE-2015-5707

Integer overflow in the sgstartreq function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iovcount value in a write request...

PT-2015-7046

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.x through 4.x before 4.1 Description The issue is related to an integer overflow in the sg start req function, which can be triggered by a large iov count value in a write request. This can cause a denial of service o...

PT-2016-6377

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue allows attackers to cause a denial of service, resulting in memory corruption, or possibly have other unspecified impacts via a write request. This can be demonstrated by a buffer overflow in the...

CVE-2015-2346

XML external entity XXE vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote authenticated users to read arbitrary files via the req parameter...

PT-2015-5723

Name of the Vulnerable Software and Affected Versions Huawei SEQ Analyst versions prior to V200R002C03LG0001CP0022 Description The issue allows remote authenticated users to read arbitrary files. This is achieved via the req parameter, which is vulnerable to XML external entity XXE attacks...

CVE-2015-2346: Undefined Security Weakness

XML external entity XXE vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote authenticated users to read arbitrary files via the req parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote attackers to inject arbitrary web script or HTML via the command XML element in the req parameter to flexdata.action in 1 common/, 2 monitor/, or 3 psnpm/ or the 4 module XML element in the r...

PT-2015-5724

Name of the Vulnerable Software and Affected Versions Huawei SEQ Analyst versions prior to V200R002C03LG0001CP0022 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the command XML element in the req parameter to...

CVE-2015-2347: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote attackers to inject arbitrary web script or HTML via the command XML element in the req parameter to flexdata.action in 1 common/, 2 monitor/, or 3 psnpm/ or the 4 module XML element in the r...

PT-2015-3673

Name of the Vulnerable Software and Affected Versions FluxBB versions prior to 1.4.13 FluxBB versions 1.5.x prior to 1.5.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the req new email parameter in the "profile.php" file. Recommendations F...

Windows-Kerberos-MS14-068

Microsoft Windows Server contains a flaw related to the checksum in the Kerberos Key Distribution Center KDC component. The issue is triggered when the component fails to properly validate signatures. This may allow an authenticated remote attacker to use a forged Kerberos ticket signature to gai...

Windows Kerberos - Elevation of Privilege (MS14-068) Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python MS14-068 Exploit Author ------ Sylvain Monne Contact : sylvain dot monne at solucom dot fr http://twitter.com/bidord import sys, os from random import getrandbits from time import time, localtime, strftime from kek.ccache...

PT-2014-2212

Name of the Vulnerable Software and Affected Versions TestLink versions 1.8.5b and earlier Description The issue allows remote authenticated users with the Requirement view permission to execute arbitrary SQL commands. This can be achieved via the req spec id parameter to API endpoints such as...

oclHashcat v1.2 - GPGPU-based Multi-hash Cracker

oclHashcat is a GPGPU-based multi-hash cracker using a brute-force attack implemented as mask attack, combinator attack, dictionary attack, hybrid attack, mask attack, and rule-based attack. This GPU cracker is a fusioned version of oclHashcat-plus and oclHashcat-lite. GPU Driver requirements: NV...

Linux Kernel随机内存指针间接引用拒绝服务漏洞

Bugtraq ID:66775 CVE ID:CVE-2014-2739 Linux Kernel是Linux操作系统的内核。 Linux kernel的cma req处理程序在解析passive端RoC3 L2地址时存在错误，成功利用后可导致IB/core崩溃，造成拒绝服务。 0 Linux kernel 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.kernel.org/...

Yokogawa CENTUM CS3000 'BKHOdeq.exe'栈缓冲区溢出漏洞

Bugtraq ID:66111 Yokogawa CENTUM CS3000是一款生产控制系统。 Yokogawa CENTUM CS3000 'BKHOdeq.exe'处理特制报文时存在一个基于栈的缓冲区溢出，允许攻击者利用漏洞提交特殊的请求可使应用程序崩溃或执行任意代码。 0 Yokogawa CENTUM CS 3000 R3.08.50 厂商补丁： Yokogawa ----- 用户可联系厂商获得相应的升级或补丁程序： http://www.yokogawa.com This module requires Metasploit:...