419 matches found
TinyMCE 1.42 Code Execution
Hello list! I want to warn you about Code Execution vulnerabilities in TinyBrowser - file manager for TinyMCE. ------------------------- Affected products: ------------------------- Vulnerable are TinyBrowser v1.42 and previous versions and all web applications which are using it, such as TinyMCE...
Devil shell v1.2 - Php shell with DDoS feature !
Devil shell v1.2 - Php shell with DDoS feature ! Features : 1. Design 2. Permission Change of file / Folders 3. Improved DDoS 4. Create Folder 5. Multi uploading 6. Encrypted Title so hard to find by Google. Download Link Username : ugdevil Password : 1234567 For further Query mail me at :...
syWebEditor editor latest 0day-vulnerability warning-the black bar safety net
syWebEditor editor there upload vulnerability, but also resolve the problem, with other the emergence of this vulnerability Editor. exp:http://www. tmdsb. com/syWebEditor/SelUploadFile. asp? obj=ProPhoto&fileType=gif%7Cjpg%7Cpng% 7C&filePathType=1&filePath=/PhotoFile/ProFile/ After uploading the...
freetextbox editor 0day and fix-vulnerability warning-the black bar safety net
By:kook Vulnerability Description: The All version didn't do login authentication can directly access to the upload Trojan FTBv3-3-1 can directly upload any file format Freetextbox 1.6.3 and other versions can be uploaded in the format 1. asp;. jpg file upload after the Trojan address as the...
HDWiKi V 5.0 local contains 0Day-vulnerability warning-the black bar safety net
| 漏洞 文件 :\install\install.php Key code: ? php errorreportingEERROR | EWARNING | EPARSE; define'INHDWIKI', TRUE; define'HDWIKIROOT', '../'; $langname=$COOKIE'langname';/langname without any filter,direct from the Cookies deposited in langname/ ifisset$REQUEST'lang' / Detect whether the variable is...
PHPGallery 1.1.0 Cross Site Request Forgery
------------------------------------------------------------------------- Software : phpgallery v 1.1.0 : Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link: http://www.hotscripts.com/listing/phpgallery/ : -------------------------------------------------------------------------...
Joomla Community Builder Enhanced Local File Inclusion
Hello full-disclosure! Description: Joomla CBE suffers from a local file inclusion vulnerability. As CBE also offers file uploading functionality that allows to upload files that contain php-code, this can be used to execute arbitary system-commands on the host with the webservers privileges. Ris...
Joomla Community Builder Enhenced Component LFI/RCE Vulnerability
Exploit for php platform in category web applications ======================================================================= Joomla Community Builder Enhenced CBE Component LFI/RCE Vulnerability ======================================================================= Description: Joomla CBE suffe...
Уязвимости в CMS WebManager-Pro
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Arbitrary File Uploading и Code Execution уязвимостях в CMS WebManager-Pro это украинская коммерческая CMS. Arbitrary File Uploading WASC-42: В админке в разделе "файлы" http://site/admin/files.php возможна загрузка произвольных файлов. Code...
Rayzz Photoz - Arbitrary File Upload
Rayzz Photoz - Arbitrary File Upload ========================================================== Rayzz Photoz Upload Vulnerability ========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...
File Thingie 2.5.5 - File Security Bypass
File Thingie 2.5.5 - File Security Bypass Title: File Thingie v2.5.5 File Security Bypass Author: Jeremiah Talamantes RedTeam Security Website: http://www.redteamsecure.com/labs Date: 5/15/2010 Application: File Thingie Version: 2.5.5 Link: http://www.solitude.dk/filethingie/download Description:...
File Thingie v2.5.5 File Security Bypass
Exploit for php platform in category web applications ======================================== File Thingie v2.5.5 File Security Bypass ======================================== Title: File Thingie v2.5.5 File Security Bypass Author: Jeremiah Talamantes RedTeam Security Website:...
Fa-Ads (Auth Bypass) Vulnerability
Exploit for php platform in category web applications ================================== Fa-Ads Auth Bypass Vulnerability ================================== ======================================================================================== | Title : Fa-Ads Auth Bypass Vulnerability | Author...
MOJO's IWms 7 - SQL Injection / Cross-Site Scripting
Exploit Title: MOJO's IWMS | www.DigitalWhisper.co.il Software Link: http://www.mojo.co.il Version: YourXSSHere SQL Injection A SQL injection attack consists of insertion or "injection" of a SQL query via the input data from the client to the application. A successful SQL injection exploit can re...
PHP 5.3 < 5.3.1 Multiple Vulnerabilities
According to its banner, the version of PHP 5.3 installed on the remote host is older than 5.3.1. Such versions may be affected by several security issues : - Sanity checks are missing in exif processing. - It is possible to bypass the 'safemode' configuration setting using 'tempnam'. - It is...
VMSA-2009-0011:VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0
VMSA-2009-0011 VMware Studio 2.0 addresses a security issue in the public beta version of Studio 2.0 VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0011 VMware Security Advisory Synopsis: VMware Studio 2.0 addresses a security issue in the public beta version of Studio 2...
Phorum < 5.2.10 Cross-Site Scripting/Request Forgery
=cicatriz [email protected]==advisories= / / / / // / / // / o / / .-/ =Phorum 5.2.10 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: Phorum 5.2.10 Cross-Site Scripting/Request Forgery Advisory ID: VUDO-2009-1504 Advisory URL:...
Miniweb Source Disclosure
Miniweb webserver Source Disclousure Vulnerabilities By: e.wiZz! Site: www.balcansecurity.com Found with ServMeNot world's sexiest fuzzer :P : In t3h wild... Site: http://miniweb.sourceforge.net/ Info: MiniWeb is a mini HTTP server implementation written in C language, featuring low system resour...
Phorum Cross Site Scripting / Request Forgery
=cicatriz ==advisories= / / / / // / / // / o / / .-/ =Phorum 5.2.10 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: Phorum 5.2.10 Cross-Site Scripting/Request Forgery Advisory ID: VUDO-2009-1504 Advisory URL: http://research.voodoo-labs.org/advisories/...
fckeditor exploit-vulnerability warning-the black bar safety net
fckeditor/editor/filemanager/browser/default/browser. html? Type=Image&Connector=connectors/asp/connector. asp You can customize the folder name to upload pictures of the Trojan horse, the use of 2 0 0 3 path parsing vulnerability, you can also directly upload ASP Trojan. If it is ASPX will...