CVE-2019-18882

WSO2 IS as Key Manager 5.7.0 allows stored XSS in download-userinfo.jag because Content-Type is mishandled...

python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc

A security regression of CVE-2019-9636 was discovered in python, since commit d537ab0ff9767ef024f26246899728f0116b1ec3, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies,...

CVE-2019-11078

MKCMS V5.0 has a CSRF vulnerability to add a new admin user via the ucenter/userinfo.php URI...

HBGK DVR 3.0.0 Build 20161206 Authentication Bypass

Exploit Title: HBGK DVR V3.0.0 build20161206 - Authentication Bypass Date: 24-09-2017 Vendor Homepage: http://www.hbgk.net/en/ Exploit Author: RAT - ThiefKing Contact: https://www.facebook.com/cctvsuperpassword Website: http://tromcap.com Category: webapps Tested on: V2.3.1 build20160927, V3.0.0...

Parameters in userinfo.php in Shield Spirit public number promotion system v1.3 have sql injection vulnerabilities

Shield Spirit public number promotion system is mainly applied to public number promotion alliance, suitable for personal and business subscription number and service number or enterprise number. Shield Spirit public promotion system v1.3 userinfo.php parameters in the existence of sql injection...

jcms /interface/user/out_userinfo.jsp 文件 xmlinfo 参数敏感信息泄漏漏洞

No description provided by source...

CVE-2015-1126

WebKit, as used in Apple iOS before 8.3 and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, does not properly handle the userinfo field in FTP URLs, which allows remote attackers to trigger incorrect resource access via unspecified vectors...

UBUNTU-CVE-2015-1126

WebKit, as used in Apple iOS before 8.3 and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, does not properly handle the userinfo field in FTP URLs, which allows remote attackers to trigger incorrect resource access via unspecified vectors...

vBulletin vBSSO Single Sign-On 1.4.14 - SQL Injection

vBulletin vBSSO Single Sign-On 1.4.14 - SQL Injection Exploit Title: vBulletin vBSSO Single Sign-On – = 1.4.15 This plugin is vulnerable to SQL injection at the /vbsso/avatar.php file in the fetchUserinfo function. It requires a big UNION ALL SELECT query and commenting out the LIMIT function of...

BiWEB最新商城版绕过过滤注入漏洞大礼包

简要描述： BiWEB最新商城版绕过过滤注入漏洞大礼包 详细说明： 在wooyun上看到了有人提了BiWEB商城版的一个XSS漏洞： WooYun: BIWEB商城版XSS盲打cookie ，也有人提了SQL注入，我来找找其他的漏洞吧。去官网下BiWEB商城版最新的5.8.4来看看。 BiWEB对用户输入进行了全局过滤，但是这种过滤方法比较NC，这个漏洞就是来绕过全局过滤的。先来看看这个全局过滤方法吧/config/filtrate.inc.php...

turbomail文件读取漏洞

简要描述： 登录情况下有效。 详细说明： Web.xml中有个j2me的servlet 打开反编译出来的J2MEServlet.java，有以下的代码： else if ACTIONTYPE.equals"ACTIONVIEWEMAILATTACHS" / 348 / String sessionId = dataInputStream.readUTF; / 349 / if sessionId == null / 350 / return; / / / / / 353 / String mbtype = dataInputStream.readUTF; / 354 / String...

startbbs最新版本泄露任意用户邮箱

简要描述： 都不知道挖到哪里去了，你们的源码昨天看了一天了...... 详细说明： 主要是你们开发安全意识差啊... /themes/default/userinfo.php在第86行有这样一句 联系方式: " class="external mail"-- 把用户的邮箱输出了但是被注释了！-- 查看源码就可以了。 漏洞证明： 这里我测试了官网demo的，抓取了一个妹子的....（PS：已经加为好友！）...

Safari Phishing Alert Bypass

Abstract: The PhishingAlert of Safari stops functioning in Windows systems if an abnormal URL is being used. Details: There is a defense mechanism in Safari which recognizes URL deceits such as http://[email protected]. The phishing alert will be activated once the HTTP URL that we want to...

CVE-2013-0759

Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to spoof the address bar via vectors involving authentication information in...

Mozilla: URL spoofing in addressbar during page loads (MFSA 2013-04)

Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to spoof the address bar via vectors involving authentication information in...

UBUNTU-CVE-2012-2359

admin/roles/override.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to gain privileges by leveraging the teacher role and modifying their own capabilities, as demonstrated by obtaining the backup:userinfo capability...

PT-2012-3980 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle versions 2.0.x through 2.0.8 Moodle versions 2.1.x through 2.1.5 Moodle versions 2.2.x through 2.2.2 Description: The issue allows remote authenticated users to gain privileges by leveraging the teacher role and modifying their own...

aspcms任意用户密码重置

简要描述： aspcms会员中心的某些页面，对用户的验证存在缺陷，修改cookie后提交即可重置任意用户的帐号信息。 详细说明： 'member/reg.asp dim action : action=getform"action","get" if action = "reg" then addUser elseif action = "editpass" then editUser else echoContent end if '第3-10行 接受一个get请求,如果action为editpass时候执行editUser过程 Sub editUser dim...

eSmart-Vision Trading SQL Injection

eSmart-Vision Trading Multiple SQL Injection Exploit http://www.esmart-vision.com/application.htm By cr4wl3r inj3ct0r team PoC: http://www.target.com/newsdetail.php?id=-9999 UniOn aLL SeLeCt 1,ConCatEmail,0x3a,Password,3,4,5,6,7 fRoM userinfo-- http://www.target.com/proddetails.php?id=-9999 UniOn...

Free the power 3. 6 sp2 injection vulnerability-vulnerability warning-the black bar safety net

by:rain918x Relates to the program: Free the power 3. 6 sp2 following free version Part Easypower4. 0 following free version Details: Free the power 3. 6 sp2 multiple file filter is not strict presence of implantation The following file is uniform there is injection of the dangers: ArticleClass...