12021 matches found
Ntopng on Security Onion
so16@so16:$ mkdir git so16@so16:$ cd git so16@so16:/git$ ls so16@so16:/git$ wget --no-check-certificate https://github.com/branchnetconsulting/so-ntopng-installer/raw/master/installntopngonso16 --2019-02-11 02:48:02--...
InnoGames: Information disclosure via ".htaccess" at https://login.innogames.de
Hi team , i found insecure file Name: htaccess Normally, only the web server is allowed to read the .htaccess file, but in this case, it appears that there is a misconfiguration that is causing the contents of the .htaccess located at https://login.innogames.de/.htaccess to download file and read...
Code injection
inxedu through 2018-12-24 has a vulnerability that can lead to the upload of a malicious JSP file. The vulnerable code location is com.inxedu.os.common.controller.VideoUploadControllergok4 com/inxedu/os/common/controller/VideoUploadController.java. The attacker uses the /video/uploadvideo fileTyp...
Solaris pfexec Upgrade Shell
This module attempts to upgrade a shell session to UID 0 using pfexec. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Solaris pfexec Upgrade Shell', 'Description' = %q This module attempts to...
Security Bulletin: A security vulnerability has been identified in IBM Systems Director Editions
Vulnerability Details Summary Tivoli Common Reporting, IBM Systems Director and Tivoli Application Dependency Discovery Manager are shipped as components of IBM Systems Director Editions. Information about a security vulnerability affecting the above components has been published in a security...
Security Bulletin: IBM BladeCenter Advanced Management Module is affected by cURL/libcURL vulnerabilities (CVE-2014-3613, CVE-2014-3620)
Summary Security vulnerabilities have been discovered in cURL/libcURL. Vulnerability Details Summary Security vulnerabilities have been discovered in cURL/libcURL. Vulnerability Details: CVE-ID: CVE-2014-3613 Description: cURL/libcURL could allow a remote attacker to bypass security restrictions,...
PhpSpreadsheet 1.5.0 XXE vulnerability reproduction and analysis-vulnerability warning-the black bar safety net
0x01 introduction PhpSpreadsheet is a very popular pure PHP class library that allows you to easily read and write Excel, LibreOffic Calc and other spreadsheet file formats, is PHPExcel alternative. 2018 11 October 13, PhpSpreadsheet was broke presence of the XXE vulnerability, CVE-2018-19277, in...
GreenCMS 2.x - SQL Injection
GreenCMS 2.x - SQL Injection Exploit Title: Green CMS 2.x - SQL Injection Dork: N/A Date: 2019-01-25 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.greencms.net/ Software Link: https://codeload.github.com/GreenCMS/GreenCMS/zip/beta Version: 2.x Category: Webapps Tested on:...
Joomla! Component vBizz 1.0.7 - SQL Injection
Exploit Title: Joomla! Component vBizz 1.0.7 - SQL Injection Dork: N/A Date: 2019-01-23 Exploit Author: Ihsan Sencan Vendor Homepage: http://wdmtech.com/ Software Link: https://extensions.joomla.org/extensions/extension/marketing/crm/vbizz/ Version: 1.0.7 Category: Webapps Tested on:...
Joomla! Easy Shop 1.2.3 Local File Inclusion
Exploit Title: Joomla! Component Easy Shop 1.2.3 - Local File Inclusion Dork: N/A Date: 2019-01-22 Exploit Author: Ihsan Sencan Vendor Homepage: https://joomtech.net/ Software D.: https://www.joomtech.net/products/easyshop?task=file.download&key=7bafaa65995fb3b1383328105df1e10f Software Link:...
