7620 matches found
MongoDB repair a can be remotely exploitable DoS（denial of service）vulnerability-vulnerability warning-the black bar safety net
! The popular NoSQL database MongoDB recently repaired a serious and can be remotely exploitable denial-of-service（DoS）vulnerabilities. The vulnerability by FortiGuard Labs researchers in the 2 on 2 0 and 2 3, find the MongoDB official have to 3 on 1 7, release patch. Vulnerability can be caused ...
Without jailbreak iPhone 6 on steal Alipay and wechat payment account password-loophole warning-the black bar safety net
The vulnerability is iOS system vulnerabilities,and Alipay,wechat app has nothing to do. This article just take Alipay and micro letter as a demonstration of the vulnerability of the application,other applications can also be caught,forwarding those who do not taken out of context. This...
Vulnerability analysis: WordPress image plugin Fancybox-For-WordPress vulnerability to cause the batch hung it-vulnerability warning-the black bar safety net
! Fancybox For WordPress is a great WordPress picture plugin, it can make your WordPress images pop up a nice browsing interface, showing the rich pop-up layer effect. Last week security researchers found that some Wordpress blogs suffered a batch hung it, and these blogs have in common is to...
MvMmallv5. 5SQL injection of php exp exploit-vulnerability warning-the black bar safety net
Vulnerability type: MvMmall v5. 5. 1 SQL injection vulnerability Default background:admincp. php? module=index Google search:”Powered by MvMmall v5. 5. 1" One, use: php exp use 1 Install the php environment Use phpnow very simple to install. 2 Use exp attack Link: Extract password: aahj The exp...
OS X < 10.10. x - Gatekeeper bypass Vulnerability-vulnerability warning-the black bar safety net
Exploit Title: OS X Gatekeeper bypass Vulnerability Date: 01-27-2015 Exploit Author: Amplia Security Research Vendor Homepage: www.apple.com Version: OS X Lion, OS X Mountain Lion, OS X Mavericks, OS X Yosemite Tested on: OS X Lion, OS X Mountain Lion, OS X Mavericks, OS X Yosemite CVE : CVE-2 0 ...
VLC 2.1. 5 Using the codec library to be broke now two 0day vulnerabilities-vulnerability warning-the black bar safety net
Overview: Turkish security researcher Veysel Hatas at VLC media player 2. 1. 5 version, latest version, use the open source codec library is found in two memory disclosure vulnerability. If the two vulnerability is successfully exploited, attackers can run exploits the video player on the machine...
Technology share: how to use the Dominator found Nokia（Nokia）the official website of DOM-type XSS vulnerability-vulnerability warning-the black bar safety net
Background DOM - XSS（cross-site scripting vulnerabilities are generally more difficult to find in this article The authors use the Dominator to find and use a Nokia（Nokia）OVI official website of the DOM XSS, which reminds me of the brother of that artifact: Description Last year, the authors foun...
JEECMS arbitrary File Download lead to sensitive information disclosure-vulnerability warning-the black bar safety net
Should be JEECMS old version inurl:download. jspx? path= Arbitrary File Download download. jspx? fpath=WEB-INF/web. xml&filename=WEB-INF/web.xml Case 1 www.xxczj.gov.cn/download.jspx?fpath=WEB-INF/web.xml&filename=WEB-INF/web.xml ! tick. png Case 2...
IE remote code execution vulnerability, CVE-2 0 1 4-6 3 3 2 Using the test method-vulnerability warning-the black bar safety net
Win95+IE3 – Win10+IE11 full version execution vulnerability ! Microsoft this month's security update fixes a potential of the 1 8 years of IE remote code execution vulnerability, CVE-2 0 1 4-6 3 3 2, You can say Yes to the windows to eat a big Supplement pills. Defects appear in the VBScript code...
Oracle Java SE remote security vulnerability(CVE-2 0 1 4-6 4 5 6)-vulnerability warning-the black bar safety net
Affected system: OracleJava SE 8u20 Oracle Java SE 7u67 Description: BUGTRAQ ID: 7 0 5 2 2 CVECAN ID: CVE-2 0 1 4-6 4 5 6 Java SE is based on the JDK and the JRE of the Java Platform, Standard Edition, for developing and deploying desktop, server and embedded devices and real-time environment of ...
Drupal 7.31 version of the explosion a serious SQL injection vulnerability-vulnerability warning-the black bar safety net
This morning a foreign security researchers on Twitter exposed a Drupal 7.31 version of the latestSQL injectionvulnerabilities and gives using a test of the EXP code, small local structures Drupal7. 3 1 environment, tested, found that the use of the code can be successfully executed and the...
Cicada-known Enterprise Portal system v2. 5. 1 to bypass the patch to continue injection-vulnerability warning-the black bar safety net
/system/module/user/model.php public function update$account / If the user want to change his password. / if$this-post-password1 != false $this-checkPassword; ifdao::isError return false; $password = $this-createPassword$this-post-password1, $account; $this-post-set'password', $password; $user =...
Chkrootkit 0.49-local mention the right vulnerability-vulnerability warning-the black bar safety net
Chkrootkit =0.49 Local Root Vulnerability: less than or equal to 0. 4 9 version of chrootkit local mention the right vulnerability. The first to demonstrate it: You can view your own installation is not allow to the latest version, or download the vulnerable versions of the experiment: wget wget...
“Broken shell vulnerability”of self-diagnosis and repair-vulnerability warning-the black bar safety net
”The broken shell vulnerability”of self-diagnosis and repair now is hot of the Bash vulnerability, also known as the”broken shell vulnerability”that can lead to a remote attacker on the affected system to execute arbitrary code, it can affect multiple System Services: Web, ssh, gitlab, DHCP, and ...
launchAnyWhere: Activity Assembly permission bypass vulnerability analysis(Google Bug 7 6 9 9 0 4 8 )-vulnerability warning-the black bar safety net
Authors: Shin di Reprint please indicate the source http://blogs.360.cn/360mobile/2014/08/19/launchanywhere-google-bug-7699048/ A few days ago in the trial gitx this software happened to see Google fix a vulnerability, and recorded as a Google Bug 7 6 9 9 0 4 8 and. This is a AccountManagerServic...
Fckeditor Common Vulnerability of the excavation with the use of a finishing summary-vulnerability warning-the black bar safety net
View Editor Version FCKeditor/whatsnew.html ------------------------------------------------------------- 2. Version 2.2 version Apache+linux environments in the upload files back plus a. Breakthrough! Test passed. ------------------------------------------------------------- 3. Version =2.4.2 Fo...
Microsoft released a“denial of service vulnerability”fixes-bug warning-the black bar safety net
In patch 5 9 IE vulnerability after Microsoft finally for its security software to plug a security vulnerability. It is reported that the vulnerability may be in use“Malware Protection engine”Malware Protection Engineto scan when triggered. Then, the attacker can use it to launch denial of...
Evernote official community hacked, user passwords exist leakage risk-vulnerability warning-the black bar safety net
Evernote official community by unknown hackers to attack and invade, hackers in some cases be able to obtain the user's login information and personal information. Evernote community Manager Geoff Barry, released today regarding the data breach statement: “https://discussion.evernote.com the...
D-LinkDSP-W215 smart plug remote command execution-vulnerability warning-the black bar safety net
0x00 background D-Link DSP-W215 smart plug is a wireless control power switch outlet. It is not from Amazon and Best Buy to buy, but the firmware from D-Link website to download the true ass to. The DSP-W215 exists a stack overflow vulnerability through the vulnerability can control the entire...
HDWIKI tasteless 0day-vulnerability warning-the black bar safety net
model/user.class.php to: function addreferer if$SERVER'HTTPREFERER' $this-db-query"UPDATE". DBTABLEPRE."session SET referer='".$ SERVER'HTTPREFERER'."' WHERE sid='". base::hgetcookie'sid'."'"; //Problems then this functiongetreferer $session=$this-db-fetchfirst"SELECTreferer FROM "...
WordPress Search Everything plugin'index.php' SQL injection vulnerability-vulnerability warning-the black bar safety net
Affected system: WordPress search-everything = 7.0.2 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 6 5 7 6 5 Search Everything plugin enhances the WordPress default search function. Search Everything 7.0.2 and other versions does not...
Dahan-pass version of the jis Unified identity authentication system vulnerabilities package-vulnerability warning-the black bar safety net
For the system part of the function of the capture when found: POST: http://10.11.5.201:9080/jis/front/upduserdo.jsp CONTENT: cid=0 0 0 0 0&vcloginid=admin&vcpassword=1 2 3 4 5 6&vcpwd=1 2 3 4 5 6&vcusername=system...
whatycms the presence of a remote code execution vulnerability-vulnerability warning-the black bar safety net
whatycms the presence of a remote code execution vulnerability Application features inurl:whatycms Test cases http://www.gpjh.cn/cms/whatycms/LoginFrameInput.jspx http://ghoa.dhu.edu.cn/jdhPro/UserLogin.action http://tc.js.edu.cn/cms/whatycms/ArtiSearch.do...
Android Superuser mention the right vulnerability analysis-vulnerability warning-the black bar safety net
Recently, foreign security researchers uncover more Android platform under the authorization Application Management Software there are 3 security vulnerabilities, exploit the vulnerabilities may be the root mention the right, see the link: is. TSRC also for this 3 Android Superuser mention the...
shopex ctl. member. php file SQL injection vulnerability-vulnerability warning-the black bar safety net
Issql injectionvulnerability testing version: shopex-singel-4.8.5.78660 File:\core\shop\controller\ctl.member.php function delTrackMsg if! empty$POST'deltrack' $oMsg = &$this-system-loadModel'resources/msgbox'; $oMsg-delTrackMsg$POST'deltrack'; $this-splash'success',...
phpwind 8.7 background to get shell-vulnerability warning-the black bar safety net
phpwind 8.7 background to get the shell The first point to open the background map and then attachment settings to add a ashx suffix 2 0 0 0 size 群 里面 我 以前 扔 的 那个 ashx.txt download back into the fuck. ashx Published article there's an attachment upload the ashx throw up the premise is iis Apache ...
nginx url decoded trigger the waf vulnerability-vulnerability warning-the black bar safety net
Last year found the ngx a bug, and until recently air only wrote this post. Nginx ngxunescapeuri function in the processing of url decode when not follow the standard url decode, causing a range use this function to decode the waf There are bypass vulnerability The problem occurs in the function ...
If your phone is lost, you feel the loss? - Vulnerability warning-the black bar safety net
Brief description: If your phone is lost, you feel lost? May you feel the phone itself out of nothing, the Address Book is important In the even young ignorance of the time...... Feel lost cell phone, QQ also lost However, in the even young ignorance, found...... Lost cell phone, perhaps want to...
On some web vulnerability principle superficial awareness-vulnerability warning-the black bar safety net
Actually always wanted to write such an article but the total there is low end in each God's eyes, perhaps into the not discernment but still decided to write out own of these experience In fact, a lot of sites the existence of vulnerabilities of the reasons there are a variety of, I can only by ...
Ant information classification system mymps_1. 6gbk latest 0day-vulnerability warning-the black bar safety net
Appear in the comment, a small problem. Released to be afraid of jokes. 0 1 elseif$do == 'view' 0 2 0 3 requireoncedirnameFILE."/ global.php"; 0 4 requireonceMYMPSINC."/ member.class.php"; 0 5 requireonceMYMPSINC."/ ip.class.php"; 0 6 0 7 if! empty$part&&$action == 'write' 0 8 ififothersitepost 0...
nginx+cgi to parse php is prone to a vulnerability analysis-vulnerability warning-the black bar safety net
The title is a bit large, when we analyze carefully after, in fact, are generally configuration issues. If someone wants to attack the server, it will scan the machine where there is vulnerability can upload a malicious script file, the upload script is the first step, When a malicious php script...
Xivo 1.2 arbitrary File Download-vulnerability warning-the black bar safety net
Xivo 1.2 Arbitrary File Download under root privileges Author : Mr. Un1k0d3r Developer: https://wiki.xivo.fr Download address: https://wiki.xivo.fr/index.php/XiVO1.1-Gallifrey/InstallXiVOWithCD Effect version: 1.2 last patched version Test version: Linux xivo 2.6.32-5-4 8 6 Test using: Using the...
nginx+cgi to parse php is prone to a vulnerability-vulnerability warning-the black bar safety net
The title is a bit large, when we analyze carefully after, in fact, are generally configuration issues. If someone wants to attack the server, it will scan the machine where there is vulnerability can upload a malicious script file, the upload script is the first step, When a malicious php script...
Line of code let the Samsung galaxy do Factory Reset-vulnerability warning-the black bar safety net
SAMSUNG including the GALAXY S3 and other models of the smart phone there is a serious security vulnerability, a line of USSD code can be formatted the phone and even damage the SIM card! The current is determined there is a problem of the phone as follows: Galaxy S3, Galaxy S2, Galaxy Ace, Galax...
XdCMS takeaway, food ordering, corporate website system multiple vulnerabilities and fixes-vulnerability warning-the black bar safety net
Vulnerability file: System/modeules/member/login.php ifempty$COOKIE'memberuser'||empty$COOKIE'memberuserid' //only judge the Cookie exists 漏洞 文件 :www.xxx.com system/libs/base.class.php if empty$COOKIE'memberuser'|| empty$COOKIE'memberuserid' //only the judgment of the Cookies...
wordpress Diary/Notebook theme email spoofing vulnerability-vulnerability warning-the black bar safety net
WordPress this Diary/Notebook theme is to have site5 design of a personal Journal blog system theme. The recent burst of the email spoofing vulnerability. Attach the perl script Exp: !/ usr/bin/perl Exploit Title: Diary/Notebook Site5 WordPress Theme - Email Spoofing Date: 15.07.2012 Exploit...
An enterprise system is the presence of injection and solution-vulnerability warning-the black bar safety net
Brief description: An enterprise system infocont. asp file exists injectionvulnerabilities, the total Station does not filter special characters! Pro! Detailed description: A business website system infocont. aspfile exists injection. See the following code %@LANGUAGE="VBSCRIPT" CODEPAGE="9 3 6"%...
PHP local file inclusion(LFI)exploit-vulnerability warning-the black bar safety net
This study main references are: http://downloads.ackack.net/LocalFileInclusion.pdf Experimental code: If you are on linux, be submitted directly to: test. php? for=/etc/passwd%0 0 to display the file. ? php include$GET'for'.‘. php’;//for testing local include vulnerability ?& gt; If it is on win,...
Million enterprise Internet site program through the kill oday and repair programme-vulnerability warning-the black bar safety net
1, vulnerability analysis Vulnerability exists page: newsdisp. asp Obviously the injection vulnerability is! Some stations do anti-Note You! （cookie injection can be done. Generally the table name: admin Field name: username password Some STATION Table for wqadmin field Ibid. There is a more awso...
SiteServer 3.4.4 logical vulnerabilities lead to SQL injection-vulnerability warning-the black bar safety net
Author: blue girl The problem is in the UserCenter. Pages. DLL in the Register, the registration process is logical to have problems, as follows: 1. The program put the user name into the database query, if the user name is not repeated, into the second step; 2. Then in the remote detection of th...
Upload vulnerability filepath variable\0 0 truncation-vulnerabilities and early warning-the black bar safety net
POST /coin/upload. asp? action=upfile HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd. ms-excel, application/vnd. ms-powerpoint, application/msword, / Referer: Recently phpwind contains a vulnerability that Diamondback always...
Application to the ASP file upload vulnerability 0×0 0 truncation attack-vulnerability warning-the black bar safety net
k ingbase 2011/8/1 Chinese simple narrative This article translated from: 0×0 0 vs ASP file uploads, the original author is: Brett Moore Security-Assessment. com company, this article is written to 0 in 4 years, the original is here: http://...
South Korea Zeroboard 0day&Exp-vulnerability warning-the black bar safety net
South Korea set to use more of the CMS ? php for $ii=0;$ii=3 0 0;$ii++ $c=int$ii1 0+1; print $c." \r\n"; echo" +----------------------------------------------------------------+\r\n"; echo" \r\n"; echo" +----------------------------------------------------------------+\r\n";...
V5shop injection vulnerability-vulnerability warning-the black bar safety net
Vulnerability to harm: the high-risk A vulnerability file: cart. aspx Search keywords: inurl:scoreindex. aspx exp: the /cart. aspx? act=buy&id=1 and Select Top 1 char1 2 4%2BisNullcastName as varchar8 0 0 0,char3 2%2Bchar1 2 4%2BisNullcastPass as varchar8 0 0 0,char3 2%2Bchar1 2 4 From Select Top...
Foxmail 5 remote buffer overflow vulnerability-vulnerability warning-the black bar safety net
Note: this article is 2 0 0 4 years 2 months xfocus members of the internal technical exchanges proposed, prior to that, morning star Chen art have found this a vulnerability, but did not disclose details, xfocus members heard about the existence of this vulnerability on Foxmail for analysis, and...
WordPress 3.1.3 injection vulnerability-vulnerability warning-the black bar safety net
First: getterms（）过滤器 文件 中声 明 taxonomy.php not properly validate user input, allowing an attacker to construct arbitrary sql commands can be used to blind. The following URL can be used to perform SQL blind injection attack SQL injection sql-injection...
Honeywall admin interface arbitrary file read vulnerability-vulnerability warning-the black bar safety net
Publishing author: cnyouker Vulnerability type: arbitrary file traversal/download Vulnerability description: Honeywall admin interface arbitrary file read vulnerability Detailed description: admin/docs.pl for the POST of the file check is not strict. Can construct their own post package to read...
st-shop Mall system v1. 0 can be injection-vulnerability warning-the black bar safety net
st-shop is a simple, easy to modify, free web-shop system. Function Description: 1. Supports up to Level 3 commodity classification 2. Support picture upload 3. Members of the management 4. Shopping cart system Admin login address: adminlogin. asp The initial user name and password: admin/8 8 8 8...
PHPDug CSRF/XSS multiple vulnerability-vulnerability warning-the black bar safety net
Vulnerability description: PHPDug 2.0.0 cross-site request forgery vulnerabilityCSRFandXSScross-site vulnerability, successfully exploited this vulnerability could cause the application of a compromise, and cookie-based authentication credentials, disclosure or theft of sensitive data is modified...
Siteserver CMS is the latest batch to take Station 0DAY-vulnerability warning-the black bar safety net
SiteServer CMS Web Content Management System（copyright registration number 2008SR15710 is positioned in the high-end market of CMS, content management system, it is possible to the lowest cost, minimal human input in the shortest period of time to set up a fully functional, excellent performance,...