PT-2018-14726 · Go · Gitea

Name of the Vulnerable Software and Affected Versions: Gitea versions prior to 1.5.4 Description: The issue allows remote code execution due to improper validation of session IDs, specifically related to session ID handling in the go-macaron/session code for Macaron. Recommendations: For versions...

Iwebsns最新版SQL注入第一枚

简要描述： Iwebsns最新版SQL注入第一枚 详细说明： 在wooyun上看到雨牛提了5个iwebsns的漏洞了（ WooYun: Iwebsns sql 第五枚。 ），我来捡捡漏儿吧，已对比，不重复，下载Iwebsns最新的1.1.0来看看。 为了使审核的大大们容易确认是否有重复，我先把存在漏洞的文件和注入参数分别写在这里：/action/album/photouplflash.action.php sesscode 下面看看漏洞是怎么产生的/action/album/photouplflash.action.php 无关代码 //变量定义区...

Security Release: symfony 1.4.18 released

symfony 1.4.18 has just been released. Read the post carefully as this version fixes a security vulnerability. Dmitri Groutso contacted us a couple of days ago about a possible security issue in the session code: "The regenerate method as implemented by database backed session classes do not...

smf-exec.txt

URL: http://real.olympe-network.com/ Note: other versions are maybe vulnerable, not tested. SMF suffers from multiples vulnerabilities. Combining some of them, we can obtain a remote code execution on the remote host. I won't talk here about all of them, but I'll explain how we can execute code. ...

Simple Machines Forum (SMF) 1.1.6 Remote Code Execution Exploit

No description provided by source. ?php Simple Machines Forum SMF 1.1.6 Remote Code Execution Exploit Credits: Charles FOL charlesfolathotmail.fr URL: http://real.olympe-network.com/ Note: other versions are maybe vulnerable, not tested. SMF suffers from multiples vulnerabilities. Combining some ...

Simple Machines Forum (SMF) 1.1.6 Code Execution Exploit

Exploit for unknown platform in category web applications ======================================================== Simple Machines Forum SMF 1.1.6 Code Execution Exploit ======================================================== URL: http://real.olympe-network.com/ Note: other versions are maybe...

Simple Machines Forum (SMF) 1.1.6 - Code Execution

URL: http://real.olympe-network.com/ Note: other versions are maybe vulnerable, not tested. SMF suffers from multiples vulnerabilities. Combining some of them, we can obtain a remote code execution on the remote host. I won't talk here about all of them, but I'll explain how we can execute code. ...

Simple Machines Forum (SMF) 1.1.6 Code Execution Exploit

No description provided by source. ?php Simple Machines Forum SMF 1.1.6 Remote Code Execution Exploit Credits: Charles FOL charlesfolathotmail.fr URL: http://real.olympe-network.com/ Note: other versions are maybe vulnerable, not tested. SMF suffers from multiples vulnerabilities. Combining some ...

Simple Machines Forum (SMF) 1.1.6 - Code Execution

Simple Machines Forum SMF 1.1.6 - Code Execution URL: http://real.olympe-network.com/ Note: other versions are maybe vulnerable, not tested. SMF suffers from multiples vulnerabilities. Combining some of them, we can obtain a remote code execution on the remote host. I won't talk here about all of...

eXpBlog <= 0.3.5 Cross Site Scripting Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory: eXpBlog = 0.3.5 Cross Site Scripting Vulnerabilities Release Date: 10/09/2006 Last Modified: 10/09/2006 Author: Tamriel tamriel at gmx dot net Application: eXpBlog = 0.3.5 Risk: Low Vendor Status: contaced | replied Vendor Site:...