7620 matches found
YY client local storage password BUG-vulnerability warning-the black bar safety net
| yy cache+configuration information is you do not manually clean up always stay in the c drive that kind of rubbish.. The highest can reach A N A G file that is despised about the yy programmers C:\Users\Administrator\AppData\Roaming\duowan Login configuration information...
PhpCmsV9 a SQL injection, the official demo can be caught-vulnerability warning-the black bar safety net
Brief description: Somewhere the filter is not made, resulting in the injection. Detailed description: After registration modify birthday, intercept data packets, to modify infobirthday infobirthday=SELECT 1 FROM select count,concatfloorrand02,substringselect concatusername,0x5f, password, 0x5f,...
iis7. 5+fck parsing vulnerability take Station-vulnerability warning-the black bar safety net
IIS6. 0 parsing vulnerability, you can upload a. asp;. jps or a. asp;a. jpg or a. asp directory transmitted in any format pony, will resolve This is about IIS7. 5 parsing vulnerability http://www.site.com/fckeditor/editor/fckeditor.html Upload picture, browse, Upload a aspx of the word Trojan, th...
Android webview cache password to bring the issues-vulnerability warning-the black bar safety net
The clouds above released a vulnerability, the alleged wechat records the user Twitter account password. The address is: http://www.wooyun.org/bugs/wooyun-2013-020246 The problem reason is not complicated: wechat using webview to load the Twitter OAuth login and Authentication page, and use the...
On some web vulnerability principle superficial awareness-vulnerability warning-the black bar safety net
Actually always wanted to write such an article but the total there is low end in each God's eyes, perhaps into the not discernment but still decided to write out own of these experience In fact, a lot of sites the existence of vulnerabilities of the reasons there are a variety of, I can only by ...
Microsoft IIS 6. 0 and 7. 5 multiple vulnerabilities and the use of method-vulnerability warning-the black bar safety net
Microsoft IIS 6.0 install PHP to bypass authentication vulnerability Microsoft IIS with PHP 6.0, which is on PHP5 in Windows Server 2 0 0 3 SP1 test detail: An attacker can send a special request is sent to the IIS 6.0 Service, successfully bypass access restrictions The attacker can access the...
The copper plate while the net mass mailing statistics system v1. 2 vulnerability-vulnerability warning-the black bar safety net
'Fenlei. asp IF Request. QueryString"Action"="del" Then ID=Request. QueryString"ID" IF Countss "tui","Fenlei",ID 0 then 'Slightly IF Request. QueryString"Action"="Add" Then Tname=Request. Form"Typename" Set Rs=Server. CreateObject"adodb. Recordset" Sql="Select From Fenlei Order by id Desc" Rs. Op...
South Korea HOMPYNET CMS vulnerability-vulnerability warning-the black bar safety net
Upload vulnerability : http://www.xxx.com/admin/imageadmin3.php?boardid=&iname=&iform= http://www.xxx.com/admin/imageadmin2.php?boardid=&iname=&iform= Uploaded posterior diameter: http://www.xxx.com/biswebpage/images/shell.php.en Editor: http://www.xxx.com/admin/editor/SWE.php...
WebSite website management system V2. 0 universal password vulnerability-vulnerability warning-the black bar safety net
Background proof universal password vulnerability admin’/ The background information is added directly to upload a php to get SHELL 上传 后 目录 attachments/20130114/1358155986.php...
PHPCMS v9 Getshell（apache to parse）vulnerabilities EXP-vulnerability warning-the black bar safety net
Vulnerability file: phpcms\modules\attachment\attachments.php Suffix detected: phpcms\modules\attachment\functions\global.func.php Fileext function is the file name suffix of the extract. According to this function if we Upload a file named ddd. Php. jpg%2 0%2 0%2 0%2 0%2 0%2 0%20Php After this...
PhpcmsV9 arbitrary user password modification logic vulnerability-vulnerability warning-the black bar safety net
I actually sent the first vulnerability, see Tick: PhpcmsV9 SQL injection 2 0 1 3-year new year the first Mentioned pass code: parsestrsysauth$POST'data', 'DECODE', $this-applist$this-appid'authkey', $this-data; In phpssoserver/phpcms/modules/phpsso/classes/phpsso. class. php. I leave it up to yo...
Piwigo arbitrary file disclosure and arbitrary file deletion vulnerability-vulnerability warning-the black bar safety net
Piwigo is written in PHP photo album script. Piwigo 2.4.6, and other versions did not properly validate the install. php script 'dl'parameter value, in the realization on the presence of security vulnerabilities, an attacker can exploit these vulnerabilities to view on the affected computer of an...
Fyblogs website management system vulnerability-vulnerability warning-the black bar safety net
Background universal password 'or'='or' The backend file management presence of the bypass. Lead to browse to where the letter information. Information leaked! admin/uploadfile. asp? currentFolder=/upfiles/../ Vulnerability to prove: Google: inurl:type. asp? id=1 News Center Or: inurl:downloadok...
Espcms injection vulnerability-vulnerability warning-the black bar safety net
Disclosure status: 2013-03-13: positive contact vendors and wait for manufacturers to claim, details not open to the public 2013-03-13: vendor has been active ignored vulnerabilities, the details disclosed to the public Brief description: espcms injection vulnerability, has to give user name...
Again Espcms through the kill SQL injection vulnerability analysis-vulnerability warning-the black bar safety net
Easy to think ESPCMS enterprise website management system based on LAMP development to build enterprise website management system, it has simple operation, powerful function, good stability, scalability and strong security, secondary development and maintenance is convenient, can help you quickly...
MyPic v2. 1 through the file vulnerability-vulnerability warning-the black bar safety net
Official website: http://www.diqiye.com/mypic/ Vulnerability description: /bom.php the file didn't do any access restrictions Code: if isset$GET'dir' //config the basedir $basedir=$GET'dir';//this didn't do the filter you can enter any directory else $basedir = '.'; $auto = 1; checkdir$basedir;...
[CVE-2 0 1 3-1 7 6 3]Linux kernel 3. 3-3. 8 local mention the right vulnerability-vulnerability warning-the black bar safety net
First take a look at our test environment: ubuntu12. 1 0 32bit ! Last week unveiled a Linux local privilege escalation vulnerability Linux kernel 3. 3 to 3. 8 version, the success of the use of allow an attacker to gain root permissions Access to Linux machines. I want to use the one installed in...
Mobile app dig fiscal website, the cookie encryption algorithm is weak can be forged-vulnerability warning-the black bar safety net
Brief description: The installation of a dug Choi, because want to sync the data, so the first test of a fan, but the cookie was found on this issue. By some means can forge other people's cookies to log in, you can access financial information, login to Forum, etc., if the forgery of the...
Part of the Discuz! The forum user can be any brush points-vulnerability warning-the black bar safety net
For some Discuz! Forum on the promotion visit this place not paying attention so the user can be any brush Forum user points and levels First click on the promotion to access ! You can see this interface “If you have a friend by one of the following links to access the site, you will get reward...
Android platform and exposure feel free to turn on and turn off the phone wifi function vulnerability-vulnerability warning-the black bar safety net
Disclosure of status: 2013-03-05: positive contact vendors and wait for manufacturers to claim, details not open to the public 2013-03-05: vendor has been active ignored vulnerabilities, the details disclosed to the public Brief description: The Settings application contains com. android. setting...
Fyblogs website management system vulnerability-vulnerability warning-the black bar safety net
Vulnerability type: unauthorized access/permissions bypass Brief description: Fyblogs site management system,, the background presence of the Universal password, the back-end file management presence of the bypass. Lead to browse to where the letter information. Information leaked! Detailed...
PHPCMS v9 Getshell（apache parse-a vulnerability warning-the black bar safety net
Vulnerability type: file upload leads to arbitrary code execution Brief description: phpcms v9 getshell apache Detailed description: Vulnerability file: phpcms\modules\attachment\attachments.php 1. public function cropupload 2. isset$GLOBALS"HTTPRAWPOSTDATA" 3. $pic = $GLOBALS"HTTPRAWPOSTDATA"; 4...
Chengdu provident arbitrary account password modification vulnerability-vulnerability warning-the black bar safety net
Detailed description: Vulnerability one:modify any account password. csrf vulnerabilities+logic vulnerabilities. On the site, if you need to change the password is required to enter the original password. But not at all, Plus is the get value will cause the vulnerability to... As long as that oth...
Qi Bo CMS background get shell-vulnerability warning-the black bar safety net
Brief description: Background get the shell Detailed description: ! ! ! ! Vulnerability to prove: ! Repair solutions: You know...
Huawei network disk without register log in, no need to install plug-ins directly download the attachment-vulnerability warning-the black bar safety net
Brief description: Prevent peeping···please see the detailed description Detailed description: Is bypass download!··· For details, see vulnerability proof Vulnerability proof: Perhaps someone has already found out. But see the clouds network no one submitted I made a turn ! ! ! ! ! ! repair...
Are the top universities in the modern management system any modification results view photos vulnerability-vulnerability warning-the black bar safety net
Brief description: Or legendary 1 0 0 0 universities with a positive party College modern management system Detailed description: Generally colleges have a can be found to learn number work number of places, for example: Information Portal-the buddy system ! Some schools do not have this...
Jingdong IM web client file upload cause arbitrary JS execution-vulnerability warning-the black bar safety net
In jingdong online customer service system, customer service end of the page you can perform the client to write any JS code. Process: 1. Customer service access. 2. To upload a picture. 3. Because jingdong to the editor is a contenteditable=true div, so we can be of its contents for editing. 4. ...
N the point of the commercial version vulnerabilities pass to kill 0day and the use of the method-vulnerability warning-the black bar safety net
Have to say the N points is really a shit Even if he developed the commercial version, even if a commercial version comes with security settings also can not conceal his junk. Well complaining about it on the line next critical time to First of all Baidu search keywords: inurl: mmdatabase. asp I...
WordPress plugins wp-catpro arbitrary file upload-vulnerability warning-the black bar safety net
----------------------------------------------------------------------- Wordpress plugins - wp-catpro Arbitrary File Upload Vulnerability ----------------------------------------------------------------------- Author = Zikou-1 6 Mailbox = [email protected] Test System : Windows 7 , Backtrack 5r3...
Java Applet JMX remote code execution-vulnerability warning-the black bar safety net
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. require 'msf/core' require 'rex' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking...
PHP Common Vulnerabilities code analysis-vulnerability warning-the black bar safety net
Opening remarks: the PHP, The is a English hypertext pre-processing language Hypertext Preprocessor acronym. PHP is an HTML embedded language, is a server-side implementation of the embedded HTML document the script language, the language style is similar to the C language, and PHP unique syntax...
Network fun shopping system landing any of the account Bugs(except admin)-vulnerability warning-the black bar safety net
Run into a lot of asp shopping Station is network fun kernel change, but without a column outside of both the existence of this vulnerability, including the latest and most older network fun, relatively tasteless, can't get webshell to. But the harm is relatively large, you can login and modify a...
IOS6. 1 burst bypass the screen lock vulnerability-vulnerability warning-the black bar safety net
! 2. watermark Description: Thanks to the author I didn't instant updatemainly do not want to when the first batch of the white mouse, so foreign broke the By Pass of the vulnerability, and is unable personally to experimental feasibility, such as a reader just has to update, please leave a comme...
ESONCN CMS to modify the file vulnerability-vulnerability warning-the black bar safety net
Without login you can modify the template page directly at the change at the front Desk of any of the files ! 2 0 1 3 0 2 1 9 1 3 3 5 2 6 ! 2 0 1 3 0 2 1 9 1 3 3 5 4 1 Write directly into Word. The chopper is connected ! 2 0 1 3 0 2 1 9 1 3 3 6 4 9...
ThinkSNS an application cross-site scripting attacks, endangering the user-to vulnerability and early warning-the black bar safety net
Brief description: ThinkSNS an application cross-site scripting attacks, endangering a variety of voluntary hooked the user Detailed description: ThinkSNS published log can be cross-site scripting attacks, the willingness to see the will be caught http://t.thinksns.com 上进 行 测试 1. We first randoml...
Mastery OA contents of the log stored XSS can get the cookie-vulnerability warning-the black bar safety net
Mastery OA2013 and 2 0 1 0 version, Office Anywhere 2 0 1 3 work log edit page there is the storage typeXSS, and their superiors view the log after you can steal the cookie 1, the work log edit page source code to bypass the bypass a character can be constructedXSS! ! ! 1, the interception to giv...
The WSS project management system Post get shell-vulnerability warning-the black bar safety net
The POST data Vulnerability file to execute arbitrary suffix of the file to save 漏洞 文件 /chart/php-ofc-library/ofcuploadimage.php Use: /chart/php-ofc-library/ofcuploadimage.php?name=hfy.php hfy.php file name Post any data 保存 位置 http://localhost/chart/tmp-upload-images/hfy.php ! ! The latest versio...
IE generic JSON hijacking vulnerabilities-vulnerability warning-the black bar safety net
Brief description: Due to the certain resource container data improper handling lead to json hijacking vulnerabilities. Detailed description: Since ie supports vbscript,so the script elements may be specified to the vbscript language: script language=vbscript/script When but we specify that a js...
PhpcmsV9 SQL injection 2 0 1 3-year New Year second-vulnerability warning-the black bar safety net
Brief description: Second, such as about came, Thank you for your attention, the second sent using an unrestricted SQL injection, the final object you can modify any user's password, the recommendations confirm the safety hazard rating of high. Tomorrow then update the next vulnerability. Detaile...
Jieqi(Jackie)CMS V1. 6 PHP code execution 0day vulnerabilities EXP-vulnerability warning-the black bar safety net
Jackie website management system, referred to as the JIEQI CMS, China National copyright Bureau copyright registration number: 2006SR03382 is a modular site erected system with simple, flexible, superior performance, safe and reliable and other characteristics. We provide you with the current mos...
"ecshop modify any user password vulnerability"of the CSRF exploit-vulnerability warning-the black bar safety net
Brief description: ecshop in the design of the authentication mechanism when there is a problem, resulting in malicious users can steal other user's password, this process can be byxssand csrf to achieve Demo For:http://www. tick. org/bugs. php? action=view&id=3 9 5 Detailed description: The use ...
ECShop payment plug-ins exposed 0day vulnerabilities 3 6 0 to assist in the repair-bug warning-the black bar safety net
Recently, the 3 6 0 Web sitessecurity testingplatform exclusive discover the online store system ECShop Alipay plug-in the presence of high-risk 0day vulnerability. Hackers can use aSQL injectionto bypass the system to limit access to the web data, and then implement the“drag library”steal site...
QQ bypass the main display account add vulnerability-vulnerability warning-the black bar safety net
Brief description: Should be QQ again and yet another to bypass the main display account add friends bug,you can add some set to:only by the main display account to find the user. But the condition is the need for space is set to a non-any people inside. But now most of the users in order to...
ASPCMS old version spike get SHELL-vulnerability warning-the black bar safety net
/admin/system/AspCmsSiteSetting. asp? action=saves Direct POST: runMode=1&siteMode=1&siteHelp=%B1%BE%CD%F8%D5%BE%D2%F2%B3%CC%D0%F2%C9%FD%BC%B6%B9%D8%B1%D5%D6%D0&SwitchComments=1&SwitchCommentsStatus=1&switchFaq=0:Y=requestchr3...
Woven dream CMS vulnerability dedecms vulnerability 2013-02-10 SQL injection vulnerability-vulnerability warning-the black bar safety net
www.xxx.com/plus/search.php?keyword= In include/shopcar. class. php First take a look at this shopcar class is how to generate the cookie function saveCookie$key,$value ifisarray$value $value = $this-enCrypt$this-enCode$value; else $value = $this-enCrypt$value; setcookie$key,$value,time+3 6 0 0...
Bubble Amoy（popotao）Amoy program official back door analysis-vulnerability warning-the black bar safety net
Bubble scouring is a pretty good Amoy built Station program, the official web site: http://www.popotao.com the. I was their one of the users of Since the official months are not updated to keep up with Taobao API update speed, so I want to solve on their own, put the official 6 a ZEND encrypted P...
dzX 2.0/2. 5 pass to kill 0day stored XSS a gold-bug warning-the black bar safety net
The vulnerability occurs in the plug attachment to the place. Says to plug in the Annex you tell me what also should be thought about certainly is the file name. Because the file name is in accordance with the local Upload File name to be displayed. If youroperating systemis a linux you can...
Network job recruitment website system official version of the injection-vulnerability warning-the black bar safety net
The vulnerability appears in the Educate/BookInfo. asp Here the injection point while filtering out some of the keywords but we can still blind you can use sqlmap to run out exp: the following Query management accounts: The+aNd+0=selEct+toP+1+suSupperName+frOm+pHWebSupper Query management...
Check the shell to find the new hidden Trojan horse ideas-vulnerability warning-the black bar safety net
Help a friend search webshell small mind Today a friend said his station has an exception, asked me to look at, the Qi of the whole Station. Checked under the webshell, find a 2 bar. Where there is a possession much more wonderful, at least I haven't seen the way, ignorant of it, unfortunately...
DedeCMS member center short message SQL injection 0day vulnerabilities-vulnerability warning-the black bar safety net
Need:magicquotesgpc = Off DedeCMS member center short message SQL injection vulnerability,successfully exploited this vulnerability could obtain the administrator password, etc. Saw on Twitter someone mentioned,even also made tasteless. | | http://bt/de/member/pm.php?dopost=read&id=1%2 7%20and%2...