YASUO - Scans for Vulnerable & Exploitable 3rd-party Web Applications

Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise the remote server by exploiti...

Clickheat Command Execution Vulnerability

ClickHeat is a java script library , it can help you count a page on the user clicks on the heat distribution graph , support for Chinese display . A command execution vulnerability exists in Clickheat version 1.13, which allows remote attackers to exploit the vulnerability to execute arbitrary...

用友软件旗下一网站存在一个Struts2漏洞可拿服务器

简要描述： 用友软件旗下一网站存在一个Struts2漏洞可拿服务器。主要因为漏洞不及时打上，账户权限过大。 详细说明： 今天闲来无事，在网上随意点了几下，发下了个漏洞。 存在漏洞的网址：http://pu.yonyouup.cn/login!loginIndexPage.action 漏洞证明： 首先，这是存在漏洞的网页：http://pu.yonyouup.cn/ 点进去后，会跳转到http://pu.yonyouup.cn/login!loginIndexPage.action ，于是我就猜想，是不是存在Struts2漏洞呢？就试了一下。 结果如图：...

Berta CMS - Arbitrary File Upload

Berta CMS is a web based content management system using PHP and local file storage. http://www.berta.me/ Due to use of a 3rd party Berta CMS website to redirect links within a phishing email brought to our attention we checked the file upload functionality of this software. We found that the fil...

NetCat.ru Netcat Remote File Inclusion Vulnerability

NetCat.ru Netcat is a web content management system CMS from the Russian company NetCat.ru. A remote file inclusion vulnerability exists in NetCat.ru Netcat, which results from the program failing to adequately filter user-submitted input. A remote attacker could exploit the vulnerability to obta...

Symantec Encryption Management Server Remote Command Injection

Vantage Point Security Advisory 2014-007 ======================================== Title: Symantec Encryption Management Server - Remote Command Injection ID: VP-2014-007 Vendor: Symantec Affected Product: Symantec Encryption Gateway Affected Versions: 3.2.0 MP6 Product Website:...

Clorius Controls A/S Java Web Client Information Disclosure Vulnerability

Clorius Controls A/S is an industrial control system software. An information disclosure vulnerability exists in the Clorius Controls A/S Java Web client due to the program failing to properly handle authentication credential encryption. This vulnerability could be exploited by an attacker to sni...

Foxit MobilePDF 4.4.0 Local File Inclusion / Arbitrary File Upload

Document Title: =============== Foxit MobilePDF v4.4.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1400 Release Date: ============= 2015-01-12 Vulnerability Laboratory ID VL-ID: ====================================...

CMSimple 4.4.4 RFI / Code Execution / Default Password

Exploit Title : CMSimple 4.4.4 various security vulnerability Author : Govind Singh aka NullPort Vendor : http://cmsimple.org/ Download Link : http://www.cmsimple.org/downloadcounter/dlcount/count.php?id=31 Date : 26/07/2014 Discovered at : IHT Lab 1ND14N H4X0R5 T34M Love to : Manish Tanwar,...

CMSimple 4.4.4 - color Remote Code Execution

CMSimple 4.4.4 - color Remote Code Execution source: https://www.securityfocus.com/bid/68961/info CMSimple is prone to multiple security vulnerabilities including: 1. Multiple arbitrary PHP code-execution vulnerabilities 2. A weak authentication security-bypass vulnerability 3. Multiple security...

CMSimple 4.4.4 - 'color' Remote Code Execution

source: https://www.securityfocus.com/bid/68961/info CMSimple is prone to multiple security vulnerabilities including: 1. Multiple arbitrary PHP code-execution vulnerabilities 2. A weak authentication security-bypass vulnerability 3. Multiple security vulnerabilities An attacker can exploit these...

Microsoft IIS 4.0/5.0 Executable File Parsing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1912/info When Microsoft IIS receives a valid request for an executable file, the filename is then passed onto the underlying operating system which executes the file. In the event that IIS receives a specially formed...

PhpTax 0.8 - File Manipulation(newvalue,field) Remote Code Execution

No description provided by source. ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit Title : PhpTax File...

SmarterStats 6.0 - Multiple Vulnerabilities

No description provided by source. Hoyt LLC Research | SmarterStats 6.0, OS Command Execution, Directory Traversal, DoS, Coordinated Disclosure Author: Hoyt LLC Research | http://xss.cx | http://cloudscan.me Vendor: SmarterTools Application: SmarterStats 6.0 Bugs: Directory Traversal, File Upload...

Cuppa CMS (alertConfigField.php, urlConfig param) - Remote/Local File Inclusion

No description provided by source. Exploit Title : Cuppa CMS File Inclusion Date : 4 June 2013 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://www.cuppacms.com/ Software Link : http://jaist.dl.sourceforge.net/project/cuppacms/cuppacms.zip Version : Beta Tested on :...

Qualcomm qpopper 3.0 'LIST' Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/948/info A remotely exploitable buffer-overflow vulnerability affects Qualcomm's 'qpopper' daemon. This issue allows users already in possession of a username and password for a POP account to compromise the server runnin...

CPaint 1.3 xmlhttp Request Input Validation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14577/info CPAINT is prone to an input validation vulnerability. This issue occurs because the application fails to properly sanitize malicious scripts and requests from user-supplied input. Successful exploitation of thi...

e107 <= 0.7.8 - (photograph) Arbitrary File Upload Vulnerability

No description provided by source. / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title e107 = 0.7.8 - Arbitrary File Upload Description e107 is a content management system written in PHP and using the...

ownCloud 4.0.x, 4.5.x (upload.php, filename param) - Remote Code Execution

No description provided by source. Vulnerability title: Remote Code Execution in ownCloud CVE: CVE-2014-2044 Vendor: ownCloud Product: ownCloud Affected version: 4.0.x & 4.5.x Fixed version: 5.0 Reported by: Alejo Murillo Moya Details: A remote code execution has been found and confirmed within...

jspwiki 2.4.104 / 2.5.139 Multiple Vulnerabilities

No description provided by source. JSPWiki Multiple Vulnerabilities Vendor: Janne Jalkanen JSPWiki – http://www.jspwiki.org Application Description: From JSPWiki website - “JSPWiki is a feature-rich and extensible WikiWiki engine built around a standart J2EE components Java, servlets, JSP.” Teste...