Tunna - Set Of Tools Which Will Wrap And Tunnel Any TCP Communication Over HTTP

Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments. SUMMARY TLDR: Tunnels TCP connections over HTTP In a fully firewalled inbound and outbound connections restricted - except the...

File Inclusion Vulnerability in Apple CMS v8

Apple CMS is a free cms website builder. Apple CMS v8 suffers from a file inclusion vulnerability, which allows an attacker to obtain a webshell by including local arbitrary files to execute a write trojan file...

File Upload Vulnerability in UCMS Version 1.2

UCMS is a simple open source content management system. There is an arbitrary file upload vulnerability in UCMS version 1.2, which can be exploited by attackers to directly upload script Trojan files and obtain webshell...

Code Execution Vulnerability in SentCMS v3.0.1707

SentCMS website management system is a simple and easy-to-use website management system created by Nanchang Tengshu Technology Co. A code execution vulnerability exists in SentCMS v3.0.1707, which is caused by the system failing to effectively filter data written to cache files. An attacker can u...

Code Execution Vulnerability in LzCMS v1.1.4

LzCMS Lao Zhang Content Management System is a simple blog system made by ThinkPHP+layui. A code execution vulnerability exists in LzCMS v1.1.4, which is due to the system failing to effectively filter data written to cache files. Attackers can use this vulnerability to upload Trojan horse files...

Arbitrary file upload vulnerability in jeecms version 9.2

JEECMS is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program, WeChat public number / service number, column model, content model cross-customization, as well as with the payment and financial settlement of the content of the e-commerce as one of the conte...

File Upload Vulnerability in SentCMS v3.0.1707

SentCMS website management system is a simple and easy-to-use website management system created by Nanchang Tengshu Technology Co. A file upload vulnerability exists in SentCMS v3.0.1707, which is due to the system failing to effectively filter uploaded files. An attacker can exploit this...

Code execution vulnerability in DuomiCms x3.0 (CNVD-2018-03672)

DuomiCms is a video-on-demand system designed for film and television station owners. A code execution vulnerability exists in the admin/adminweixin.php file in DuomiCms x3.0 due to the system failing to effectively filter input parameters. An attacker can exploit this vulnerability to obtain a...

Code Execution Vulnerability in DuomiCms x3.0

DuomiCms is a video-on-demand system designed for film and television station owners. A code execution vulnerability exists in the admin/admindatarelate.php file in DuomiCms x3.0, which can be exploited by attackers to obtain webshell...

Code Execution Vulnerability in Rice CMS v5.9.9

DAMI CMS is a free open-source, fast, simple PC station and cell phone station integration integration system, is committed to providing users with simple, fast PC station and smartphone station building solutions. A code execution vulnerability exists in Daimi CMS v5.9.9, which is caused by the...

File upload vulnerability in ShopsN v2.2.5 official front-end AppUploadController.class.php page

ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of open source online store full network system. ShopsN v2.2.5 official version of the front AppUploadController.class.php page file upload...

File upload vulnerability in the AppUploadController.class.php page in the frontend of ShopsN v2.2.5 official version (CNVD-2018-02969)

ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of the open source online store full network system. ShopsN v2.2.5 official version of the front AppUploadController.class.php page file...

Cybercriminals target early IRS 2018 refunds now

On Monday, Jan 29th, IRS officially opened its 2018 season. Some taxpayers already filed their taxes and cybercriminals know it too. So, right after two days of the official 2018 season opening, we got phishing messages with a fake refund status Websites: The link in the email leads to a hacked...

Arbitrary File Creation Vulnerability in YidaCMS Web Management System JS1.8.0 Version

YidaCMS website management system is a simple, practical and efficient website builder. YidaCMS website management system JS1.8.0 version exists arbitrary file creation vulnerability, the attacker through the creation of parsable script file, edit and save the Trojan code will be injected into th...

Renaming Vulnerability in YidaCMS Web Management System JS 1.8.0 Version

YidaCMS website management system is a simple, practical and efficient website builder. A renaming vulnerability exists in version JS1.8.0 of the YidaCMS website management system, which allows an attacker to upload an image Trojan using the kingeditor editor employed by the website and rename th...

Rename vulnerability in ourphp v1.8.0

Ourphp website building system is a php+mysql website building system. ourphp v1.8.0 version exists renaming vulnerability, the attacker will Trojan horse code injected into the edited file, rename the file as an executable script file, so as to obtain the website webshell...

Code Execution Vulnerability in YidaCMS Web Management System JS1.8.0 Version

YidaCMS website management system is a simple, practical and efficient website builder. A code execution vulnerability exists in version JS1.8.0 of the YidaCMS website management system, which allows an attacker to obtain a website webshell by editing any parsable script file within the website a...

File upload vulnerability in ourphp v1.8.0

Ourphp website building system is a php+mysql website building system. ourphp v1.8.0 version of the existence of file upload vulnerability, attackers can be edited through the background online template comes with the upload point to upload any suffix file and write a script Trojan, so as to obta...

Arbitrary File Creation Vulnerability in ourphp v1.8.0

Ourphp website building system is a php+mysql website building system. ourphp v1.8.0 version of the existence of arbitrary file creation vulnerability, the attacker can be edited through the background of the online template comes with the creation point to create any suffix file and write Trojan...

Local File Inclusion Vulnerability in phpyun v4.3.1 Beta

PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. A local file inclusion vulnerability exists in phpyun v4.3.1 Beta. An attacker can obtain a webshell by including an external php file to execute a...