Lucene search
+L
SeebugMost viewed

56796 matches found

seebug.org
seebug.org
added 2007/04/28 12:00 a.m.66 views

BBSXP 论坛程序存在文件上传漏洞

文件保存类型是通过FileMIME判断FileMIME="image/pjpeg" 也就是说上传类型要是图片 然后第一段代码 if FileExt="asa" or FileExt="asp" or FileExt="cdx" or FileExt="cer" then error2"对不起,管理员设定本论坛不允许上传 "&FileExt&" 格式的文件" 的意思是:出错时候检查后缀.如果后缀是asa或者asp或者cdx或者cer的时候他就会提示错误。然后FileExt=文件后缀...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2007/04/17 12:00 a.m.66 views

Microsoft Agent URI处理远程代码执行漏洞

Microsoft Windows是一款商业性质的操作系统。 Microsoft Agentagentsvr.exe处理畸形URL存在问题,远程攻击者可以利用漏洞以浏览器进程权限执行任意指令 当agentsvr.exe处理特殊构建的URLs传递给部分方法作为参数时存在设计错误,可导致以应用程序权限执行任意代码。目前没有详细漏洞细节提供。 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Professional x64 Edition SP2 Microsoft Windows XP Professional...

7AI score
SaveExploits0
seebug.org
seebug.org
added 2007/04/04 12:00 a.m.66 views

Wordpress 2.1.2 (xmlrpc) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Wordpress 2.1.2 SQL Injection POC Credits: [email protected] Thanks to ferruh [email protected] improving my exploitation skills website:www.notsosecure.com Wordpress version 2.1.2 is vulnerable to sql injection. This POC works when...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2007/03/19 12:00 a.m.66 views

Katalog Plyt Audio (pl) <= 1.0 Remote SQL Injection Exploit

No description provided by source. ? / Author: Kacper Contact: [email protected] Homepage: http://www.rahim.webd.pl/ Irc: irc.milw0rm.com:6667 devilteam Pozdro dla wszystkich z kanalu IRC oraz forum DEVIL TEAM. Katalog Plyt Audio pl = 1.0 Remote SQL Injection Exploit script download:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2007/01/16 12:00 a.m.66 views

Texinfo File Handling Buffer Overflow Vulnerability

Texinfo is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Exploiting this issue allows attackers to cause the affected applications using Texinfo to crash, denying...

7.4AI score
SaveExploits0
seebug.org
seebug.org
added 2007/01/13 12:00 a.m.66 views

Cisco Unified Contact Center/IP Contact Center JTapi网关拒绝服务漏洞

Cisco Unified Contact Center(之前为Cisco IP Contact Center IPCC)是Cisco Unified Communications系统中的组件,可在多个通讯通道中提供智能路由和呼叫处理。 所有版本的Cisco Unified Contact Center和Cisco IP Contact...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2007/01/03 12:00 a.m.66 views

Hotmail and Windows Live Mail XSS Vulnerabilities

Hotmail's filter identifies "expression" syntax in a CSS attribute. According to Hasegawa Yosuke's posthttp://archive.openmya.devnull.jp/2006.08/msg00369.html, in some character encodingse.g. GB2312, we can substitute some special double-byte chars for the corresponding chars in "expression"...

6.8AI score
SaveExploits0
seebug.org
seebug.org
added 2006/11/29 12:00 a.m.66 views

GNU Tar GNUTYPE_NAMES远程目录遍历漏洞

GNU tar可创建和解压tar文档,并进行各种存档文件管理。 GNU tar在处理特定的记录时未能正确处理可能的符号链接,远程攻击者可能利用此漏洞在用户机器的任意位置创建文件。 tar的extract.c文件中的extractarchive函数和mangle.c文件中的extractmangle函数会处理包含有符号链接的GNUTYPENAMES记录类型。如果用户受骗打开了特制的tar文件的话,就会导致覆盖任意文件。 GNU tar 1.16 GNU tar 1.15.1 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2006/11/09 12:00 a.m.66 views

IrayoBlog 0.2.4 (inc/irayofuncs.php) Remote File Include Vulnerability

No description provided by source. WwW.Deltahacking.NeT Priv8 Site WwW.Deltahacking.Ir Public Site Portal Name :irayoblog-alpha-0.2.4 Class = Remote File Inclusion ; Download =http://ovh.dl.sourceforge.net/sourceforge/irayoblog/irayoblog-alpha-0.2.4.tar.gz Found by = Dr.Pantagon...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2006/08/17 12:00 a.m.66 views

Linux Kernel ZLib无效内存访问本地拒绝服务漏洞

BUGTRAQ ID: 14719 CVECAN ID: CAN-2005-2458 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的zlib例程的inflate.c中存在漏洞。如果用户打开了特制的压缩文件的话,就可能导致kernel崩溃。 Linux kernel 2.6.12.5 Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: Linux linux-2.6.12.5.tar.gz...

5CVSS0.3AI score0.03962EPSS
SaveExploits1
seebug.org
seebug.org
added 2006/06/02 12:00 a.m.66 views

ashNews 0.83 (pathtoashnews) Remote File Include Vulnerabilities

No description provided by source. DEVIL TEAM THE BEST POLISH TEAM ashnews v0.83pathtoashnews - Remote File Include Vulnerabilities Script site: http://dev.ashwebstudio.com/ dork: News powered by ashnews Find by Kacper Rahim. Greetings; DragonHeart, Satan, Leito, Leon, Luzak, Adam, DeathSpeed,...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2021/07/07 12:00 a.m.65 views

Visual Tools DVR VX16 未授权命令注入

...

1.6AI score
SaveExploits0
seebug.org
seebug.org
added 2021/05/14 12:00 a.m.65 views

蓝海卓越计费管理系统任意文件下载

...

0.3AI score
SaveExploits0
seebug.org
seebug.org
added 2018/06/22 12:00 a.m.65 views

Insteon Hub PubNub Firmware Upgrade Confusion Permanent Denial Of Service Vulnerability(CVE-2018-3834)

Summary An exploitable permanent denial of service vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgrade functionality, triggered via PubNub, retrieves signed firmware binaries using plain HTTP requests. The device doesn't check the kind of firmware image that is...

7.6AI score0.00512EPSS
SaveExploits2
seebug.org
seebug.org
added 2018/05/31 12:00 a.m.65 views

New multiOverflow Bug Identified in Multiple ERC20 Smart Contracts (CVE-2018-10706)

Our vulnerability-scanning system at PeckShield has so far discovered several dangerous smart contract vulnerabilities batchOverflow, proxyOverflow, transferFlaw, ownerAnyone. Some of them could be used by attackers to generate tokens out of nowhere while others can be used to steal tokens from...

5CVSS1.8AI score0.0096EPSS
SaveExploits2
seebug.org
seebug.org
added 2018/05/17 12:00 a.m.65 views

Hyland Perceptive Document Filters Microsoft Word CDATA Code Execution Vulnerability(CVE-2018-3851)

Summary An exploitable heap corruption exists in the Microsoft Word to many types conversion functionality of the Hyland Perspective Document Filters version 11.4.0.2647. A crafted Microsoft Word XML document can lead to heap corruption resulting in remote code execution. An attacker can provide ...

6.8CVSS0.5AI score0.02794EPSS
SaveExploits1
seebug.org
seebug.org
added 2018/01/02 12:00 a.m.65 views

D-Link DSL-6850U Multiple Vulnerabilities

Vulnerabilities Summary The following advisory describes two 2 vulnerabilities found in D-Link DSL-6850U versions BZ1.00.01 – BZ1.00.09. D-Link DSL-6850U is a router “manufactured by D-Link for Bezeq in Israel” The vulnerabilities found are: Default Credentials Remote Command Execution Credit An...

7.5AI score
SaveExploits0
seebug.org
seebug.org
added 2017/11/23 12:00 a.m.65 views

WebKit: out-of-bounds read in WebCore::SimpleLineLayout::RunResolver::runForPoint(CVE-2017-13784)

There is an out-of-bounds read security vulnerability in WebKit. The vulnerability was confirmed on ASan build of WebKit nightly. ASan log: ================================================================= ==30436==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x606000560c48 at pc...

6.8CVSS7AI score0.05787EPSS
SaveExploits5
seebug.org
seebug.org
added 2017/11/14 12:00 a.m.65 views

Wordpress SQLi — PoC

In order to understand the writing here, you need to read the previous explanation https://medium.com/websec/wordpress-sqli-bbb2afcc8e94. If you got it, then we can jump to the part and solve the question e.g. how to update / insert our sql payload into thumbnailid post meta. PoC start - Login to...

7.9AI score
SaveExploits0
seebug.org
seebug.org
added 2017/09/15 12:00 a.m.65 views

Foscam IP Video Camera CGIProxy.fcgi SMTP Test Command Injection Vulnerability(CVE-2017-2845)

Summary An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SMTP configuration tes...

6.5CVSS9.6AI score0.0649EPSS
SaveExploits1
seebug.org
seebug.org
added 2017/09/13 12:00 a.m.65 views

FreeRDP Rdp Client License Read Challenge Packet Denial of Service Vulnerability(CVE-2017-2839)

Summary An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use ma...

6.9AI score0.01584EPSS
SaveExploits1
seebug.org
seebug.org
added 2017/06/27 12:00 a.m.65 views

Windows Kernel stack memory disclosure in win32k!NtGdiMakeFontDir(CVE-2017-8477)

We have discovered that the win32k!NtGdiMakeFontDir system call discloses large portions of uninitialized kernel stack memory to user-mode clients. The attached proof of concept code which is specific to Windows 7 32-bit works by first filling a large portion of the kernel stack with a controlled...

1.9CVSS7.3AI score0.0511EPSS
SaveExploits3
seebug.org
seebug.org
added 2017/06/27 12:00 a.m.65 views

Windows Kernel stack memory disclosure in nt!NtQueryInformationTransaction(CVE-2017-8480)

We have discovered that the nt!NtQueryInformationTransaction system call called with the 1 information class discloses portions of uninitialized kernel stack memory to user-mode clients, on Windows 7 to Windows 10. The specific name of the 1 information class or the layout of the corresponding...

1.9CVSS5.6AI score0.03423EPSS
SaveExploits4
seebug.org
seebug.org
added 2017/06/08 12:00 a.m.65 views

xycms b_title parameter sql injection vulnerability

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2017/04/28 12:00 a.m.65 views

Zabbix Proxy Server SQL Database Write Vulnerability (CVE-2017-2825)

Official patch earlier to fix the vulnerabilities: the Zabbix code execution vulnerability DETAILS One of the Trapper requests made by the Zabbix proxy is the ìproxy configî request, which allows a proxy to request its own proxy configuration from the Zabbix Server or any other Zabbix Proxyís...

7.8AI score0.04229EPSS
SaveExploits2
seebug.org
seebug.org
added 2017/04/13 12:00 a.m.65 views

OS Command Injection Vulnerability in ASG and CAS (CVE-2016-9091)

The Advanced Secure Gateway ASG and Content Analysis System CAS management consoles provide a web UI for appliance administrators to manage and monitor the respective appliance. Each management console provides limited functionality to administrators and does not provide them with access to the...

9CVSS7.7AI score0.10126EPSS
SaveExploits8
seebug.org
seebug.org
added 2017/03/21 12:00 a.m.65 views

GitLab permission leak Vulnerability, CVE-2017-0882)

Information Disclosure in Issue and Merge Request Trackers During an internal code review a critical vulnerability in the GitLab Issue and Merge Request trackers was discovered. This vulnerability could allow a user with access to assign ownership of an issue or merge request to another user to...

4CVSS6AI score0.01057EPSS
SaveExploits2
seebug.org
seebug.org
added 2016/03/30 12:00 a.m.65 views

TaoCMS v2.5Beta4 Comment.php 存在储存型xss漏洞(可打后台)

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2016/03/22 12:00 a.m.65 views

用友GRP-U8 系统登陆处参数UserNameText 存在SQL注入

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2016/03/19 12:00 a.m.65 views

E-TILLER期刊采编系统/ch/reader/wait_published_articles.aspx等8处 POST注入漏洞

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2016/03/17 12:00 a.m.65 views

正方教务系统 jwggck.aspx 参数fbsj SQL注入漏洞

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2016/03/16 12:00 a.m.65 views

Git 版本<=2.7.1 远程代码执行漏洞

参考来源: http://seclists.org/oss-sec/2016/q1/645 Hello, original report describing the overflow is here http://pastebin.com/UX2P2jjg On 11/02/2016 16:50, Jeff King wrote this on the git security mailing list: On Thu, Feb 11, 2016 at 02:31:49PM +0100, 'Laël Cellier' via Git Security wrote: Ok the bug...

9.3AI score0.75597EPSS
SaveExploits5
seebug.org
seebug.org
added 2016/03/10 12:00 a.m.65 views

SAP HANA hdbindexserver - Memory corruption

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2016/01/26 12:00 a.m.65 views

phpwind V9.0 /windid/admin.php 验证码绕过漏洞

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2016/01/21 12:00 a.m.65 views

jcms /interface/user/out_userinfo.jsp 文件 xmlinfo 参数敏感信息泄漏漏洞

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2015/09/19 12:00 a.m.65 views

WordPress <= 4.3.0 跨站脚本漏洞

WordPress 在编辑文章内容时允许使用简码(shorcodes)来表示资源(图片,链接等)。WordPress 中开启了白名单机制去过滤 HTML 标签,只有在白名单规则里的标签,才允许被使用,并且会使用专用脚本 "KSES" 去检测和过滤这些 HTML 标签。这里需要说明的是,WordPress 对 HTML 标签的检测和过滤发生在将内容插入数据库时,而简码的解析渲染发生在将内容输出到页面时,下面简单用例子说明一下两个处理过程的差别,编辑文章插入内容为:TEST!!!caption width="1" caption='a href="'...

4.3CVSS6.1AI score0.06937EPSS
SaveExploits2
seebug.org
seebug.org
added 2015/05/25 12:00 a.m.65 views

JEECMS一处通用越权第四弹(可删除订单取消订单)

简要描述: 111 详细说明: ID1和ID2各自去买一个自己喜欢的东西,就是没有TT,真可惜啊-。- 我们修改一下ID,然后把自己吓一跳吧,。。 我们这些做测试的简直可以上星光大道了,引用刘谦那句话,接下来就是见证奇迹的时候了 白帽子都是魔术师-。- test7取消订单,然后会增加一个删除按钮,然后删除抓包改ID,发包,删除成功 漏洞证明: ID1和ID2各自去买一个自己喜欢的东西,就是没有TT,真可惜啊-。- 我们修改一下ID,然后把自己吓一跳吧,。。 我们这些做测试的简直可以上星光大道了,引用刘谦那句话,接下来就是见证奇迹的时候了 白帽子都是魔术师-。-...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2015/04/07 12:00 a.m.65 views

致远软件某网站漏洞合集

简要描述: 致远软件某网站漏洞合集,能不能给20rank 详细说明: 致远软件自助服务网站 问题如下: SQL注入 问吧管理员弱口令 任意文件上传 漏洞证明: SQL注入证明------------开始 注入点为 http://support.seeyon.com/ask/base/QuestionHandler.ashx?callback=jsonp1428044230217&mode=list&title=ceshi 注入类型 获取数据库列表 SQL注入证明------------结束 问吧管理员弱口令证明------------开始 后台地址...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2015/02/05 12:00 a.m.65 views

ESPCMS 6.2 /interface/order.php SQL注入漏洞

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2015/01/15 12:00 a.m.65 views

嘉缘人才系统SQL注入漏洞

简要描述: RT 详细说明: 在common/comment.php中 requiredirnameFILE.'/../config.inc.php'; !isset$db&&$db=connectdb; requireonceFRROOT.'/inc/paylog.inc.php'; if!$cfg'comment'=='1'echo "alert'本站未开启评论功能!';window.close;";exit; $submit=isset$POST'Submit'?$POST'Submit':''; if$submit if$cfg'comment' if$anonymous...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/11/13 12:00 a.m.65 views

Drupal Core <= 7.32 - SQL Injection (#2)

No description provided by source. !/usr/bin/python Drupal 7.x SQL Injection SA-CORE-2014-005 https://www.drupal.org/SA-CORE-2014-005 Inspired by yukyuk's P.o.C https://www.reddit.com/user/fyukyuk Tested on Drupal 7.31 with BackBox 3.x This material is intended for educational purposes only and t...

7.5CVSS7.2AI score0.99974EPSS
SaveExploits23
seebug.org
seebug.org
added 2014/07/07 12:00 a.m.65 views

F5 BIG-IP SQL注入漏洞

No description provided by source. SEC Consult Vulnerability Lab Security Advisory 20130122-1 ======================================================================= title: SQL Injection product: F5 BIG-IP vulnerable version: =11.2.0 fixed version: 11.2.0 HF3 11.2.1 HF3 CVE number: CVE-2012-3000...

7.5CVSS6.5AI score0.0159EPSS
SaveExploits2
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.65 views

shop7z 注入漏洞2

简要描述: shop7z 注入漏洞2 详细说明: News.asp 漏洞证明: 测试 192.168.236.131/news.asp?lid=1' http://www.shop7z.com/Demo/news.asp?lid=1%27...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.65 views

MIPS Little Endian Reverse Shell Shellcode (Linux)

No description provided by source. MIPS Little Endian Reverse Shell ASM File and Assembled Shellcode Written by Jacob Holcomb, Security Analyst @ Independent Security Evaluators Blog: http://infosec42.blogspot.com Company Website: http://securityevaluators.com .data .bss .text .globl start start:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.65 views

Dew-NewPHPLinks 2.1b (index.php) - SQL Injection Vulnerability

No description provided by source. Dew-NewPHPLinks v.2.1b index.php Sql Injection Vulnerability ====================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://www.dew-code.com/ .:. Dork : Powered By Dew-NewPHPLinks v.2.1b .:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.65 views

Litespeed Technologies Web Server Remote Poison null byte Exploit

No description provided by source. Litespeed Technologies Web Server Remote Poison null byte Zero-Day discovered and exploited by Kingcope in June 2010 google gives me over 9million hits Example exploit session: %nc 192.168.2.19 80 HEAD / HTTP/1.0 HTTP/1.0 200 OK Date: Sun, 13 Jun 2010 00:10:38 G...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.65 views

Linux Kernel 2.4/2.6 - sock_sendpage() ring0 Root Exploit (Simple Version)

No description provided by source. / 0x82-CVE-2009-2692 Linux kernel 2.4/2.6 32bit socksendpage local ring0 root exploit simple ver Tested RedHat Linux 9.0, Fedora core 411, Whitebox 4, CentOS 4.x. -- Discovered by Tavis Ormandy and Julien Tinnes of the Google Security Team. spender and venglin's...

7.2CVSS0.3AI score0.14633EPSS
SaveExploits23
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.65 views

MobPartner Counter - Remote File Upload Vulnerability

No description provided by source. MobPartner Counter Remote File Upload Vulnerability + Author : wlhaan hacker + Email : [email protected] + Site : www.sa-hacker.com/vb + team wlhaan Hacker + Dork : MobPartner Counter upload files The exploit : http://localhost/path/upload.php edit shell...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.65 views

Tandberg E, EX and C Series Endpoints Default Credentials for Root Account

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Default Credentials for Root Account on Tandberg E, EX and C Series Endpoints Advisory ID: cisco-sa-20110202-tandberg Revision 1.0 For Public Release 2011 February 2 1600 UTC GMT...

10CVSS6.5AI score0.13988EPSS
SaveExploits4
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.65 views

Commercial Interactive Media SCOOP! 2.3 prePurchaserRegistration.asp Invalid Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/16015/info Commercial Interactive Media SCOOP! is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

7.1AI score
SaveExploits0
Total number of security vulnerabilities5000