insightmagazine.org XSS vulnerability

Vulnerable URL: http://www.insightmagazine.org/prayer/respondform.asp?prayerid=1"...

Exploit Search: XPL-Search

XPL SEARCH is a script made in PHP, to perform quick searches for vulnerabilities or exploits in multiple databases Dependencies: The XPL SEARCH is written in PHP and therefore, can be used both on Linux or Windows. The following items are required for the proper functioning of the script: PHP...

KLA10523 Multiple vulnerabilities in IBM SAM

Lack of unicast respond restrictions was found in IBM SAM. By exploiting this vulnerability malicious users cause denial of service or obtain sensitive information. This vulnerability can be exploited remotely via a specially designed packets. Original advisories IBM advisory Exploitation Related...

LLMNR Query

This module sends LLMNR queries, which are really just normal UDP DNS queries done usually over multicast on a different port, 5355. Targets other than the default RHOSTS' 224.0.0.252 should not respond but may anyway. This module requires Metasploit: https://metasploit.com/download Current sourc...

DedeCms 5.x 本地文件包含漏洞(respond方法)

DedeCms是免费的PHP网站内容管理系统。 plus/carbuyaction.php里没有对变量进行严格的过滤 出现漏洞的两个文件为： Include/payment/alipay.php Include/payment/yeepay.php 漏洞均出现在respond方法里 Include/payment/alipay.php code...... function respond if !empty$POST foreach$POST as $key = $data $GET$key = $data; / 引入配置文件 / requireonce...

Becky! Internet Mail Read Receipt请求缓冲区溢出漏洞

BUGTRAQ ID: 33756 Becky! Internet Mail是一个常用的Email客户端软件。 Becky! Internet Mail客户端没有正确地处理read receipt请求。如果用户查看了特制的邮件并允许发送read receipt请求的话，就可以触发缓冲区溢出，导致执行任意代码。 RimArts Becky! Internet Mail 2.48.02 厂商补丁： RimArts ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.rimarts.co.jp/index.html 在General...