SAP NetWeaver DI - Arbitrary file upload

Application: SAP NetWeaver J2EE Versions Affected: SAP NetWeaver Vendor URL: http://www.sap.com Bugs: Arbitrary file upload/Security bypass Exploits: YES Reported: 11.12.2012 Vendor response: 12.12.2012 Date of SAP Security Note Published: 12.02.2013 Date of Public Advisory: 20.02.2013 Reference:...

DSA-2562-1 cups-pk-helper - privilege escalation

Bulletin has no description...

Zoho ManageEngine Support Center Plus Multiple Vulnerabilities

This host is running Zoho ManageEngine Support Center Plus and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmanageenginesupportcenterplusmultvuln.nasl 5988 2017-04-20 09:02:29Z teissa $ Zoho ManageEngine Support Center Plus Multiple Vulnerabilities Authors: Antu Sanadi...

Joomla Component com_fabrik File Upload Vulnerability

Exploit for php platform in category web applications $ $ +================================================= ================+ | Joomla Component comFabrik Remote Shell Upload Vulnerability | +================================================= ================+ Google Dork :...

4XP Critical SQL Injection Vulnerability Exposed

zSecure team has recently discovered a critical SQL Injection Vulnerability in the web portal of 4XP, a leading online forex broker having more than 1 lakh customer base. Financial transactions are carried on the broker's paltform on daily basis including but not limited to Credit Card...

Fedora 16 : wordpress-3.3.2-2.fc16 (2012-6542)

Uploading files related security issues were addressed by the upstream upgrade. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Janetter vulnerable to cross-site request forgery

Overview Janetter contains a cross-site request forgery vulnerability. Janetter is a client software for using Twitter. Janetter contains a cross-site request forgery vulnerability. Kazuhiko Kusano of Graduate School of Information Sciences, Tohoku University reported this vulnerability to IPA...

WordPress SB Uploader Shell Upload

================================================================= Title: Wordpress SB Uploader Plugin Shell Upload Vulnerability Author: JingoBD Category: webapps Team: Bangladesh Cyber Army Greetz: Bedu33n,N!1L,Rex0Man & All Member of BCA. http://facebook.com/life.is.code Plugin URI:...

Wordpress SB Uploader Plugin Shell Upload Vulnerability

No description provided by source. ================================================================= Title: Wordpress SB Uploader Plugin Shell Upload Vulnerability Author: JingoBD Category: webapps Team: Bangladesh Cyber Army Greetz: Bedu33n,N!1L,Rex0Man & All Member of BCA...

PT-2012-1733

Name of the Vulnerable Software and Affected Versions Bugzilla versions 2.x through 4.x before 4.2rc1 Description A cross-site request forgery issue exists, allowing remote attackers to hijack user authentication for uploading attachments. Recommendations For Bugzilla versions 2.x through 4.x...

Black Ice BIImgFrm.ocx ActiveX Code Execution (CVE-2008-2683)

A remote code execution vulnerability has been reported in Black Ice BIImgFrm.ocx. The vulnerability is due to a design flaw in the application which allows uploading of specially crafted files to an affected system. An attacker could exploit this vulnerability by enticing a victim to open a...

Pakistani Matrimonial Website 'PakRishta' defaced by Cyb3r R3b3li@nZ

Pakistani Matrimonial Website 'PakRishta' defaced by Cyb3r R3b3li@nZ Pakistani Matrimonial Website 'PakRishta.com' defaced by Hacker name "Cyb3r R3b3li@nZ" . Hacker said "This site is just hacked to inform the admin to remove the file uploading vulnerabilities in the profile picture uploading. Th...

Pakistani Matrimonial Website 'PakRishta' defaced by Cyb3r R3b3li@nZ

Pakistani Matrimonial Website 'PakRishta ' defaced by Cyb3r R3b3li@nZ Pakistani Matrimonial Website 'PakRishta.com ' defaced by Hacker name "Cyb3r R3b3li@nZ " . Hacker said "This site is just hacked to inform the admin to remove the file uploading vulnerabilities in the profile picture uploading...

CKXP online bookstore injection vulnerability-vulnerability warning-the black bar safety net

Tool table:shopadmin added field:admin Background:admin/login. asp After login access:admin/editfile. asp? act= write directly to the horse. It can also be transmitted directly horse:admin/upfile1. asp? path=/ inurl:book. asp please use the domain name access to this site does not mean that we...

Sify.com hacked with SQL Injection Vulnerability

Sify.com hacked with SQL Injection Vulnerability Sify's website contain SQL injection Vulnerability and Hackers are able to Database Access, Database Dump, Possibility of shell uploading. Sify is one of India's leading integrated Information Communications Technology companies. Sify was one of th...

TinyMCE 1.42 Code Execution

Hello list! I want to warn you about Code Execution vulnerabilities in TinyBrowser - file manager for TinyMCE. ------------------------- Affected products: ------------------------- Vulnerable are TinyBrowser v1.42 and previous versions and all web applications which are using it, such as TinyMCE...

Devil shell v1.2 - Php shell with DDoS feature !

Devil shell v1.2 - Php shell with DDoS feature ! Features : 1. Design 2. Permission Change of file / Folders 3. Improved DDoS 4. Create Folder 5. Multi uploading 6. Encrypted Title so hard to find by Google. Download Link Username : ugdevil Password : 1234567 For further Query mail me at :...

syWebEditor editor latest 0day-vulnerability warning-the black bar safety net

syWebEditor editor there upload vulnerability, but also resolve the problem, with other the emergence of this vulnerability Editor. exp:http://www. tmdsb. com/syWebEditor/SelUploadFile. asp? obj=ProPhoto&fileType=gif%7Cjpg%7Cpng% 7C&filePathType=1&filePath=/PhotoFile/ProFile/ After uploading the...

freetextbox editor 0day and fix-vulnerability warning-the black bar safety net

By:kook Vulnerability Description: The All version didn't do login authentication can directly access to the upload Trojan FTBv3-3-1 can directly upload any file format Freetextbox 1.6.3 and other versions can be uploaded in the format 1. asp;. jpg file upload after the Trojan address as the...

HDWiKi V 5.0 local contains 0Day-vulnerability warning-the black bar safety net

| 漏洞 文件 :\install\install.php Key code: ? php errorreportingEERROR | EWARNING | EPARSE; define'INHDWIKI', TRUE; define'HDWIKIROOT', '../'; $langname=$COOKIE'langname';/langname without any filter,direct from the Cookies deposited in langname/ ifisset$REQUEST'lang' / Detect whether the variable is...