56796 matches found
ZeroCms 1.0 /zero_view_article.php SQL注入漏洞
No description provided by source...
CiMe - Citas Médicas - Multiple Vulnerabilities
No description provided by source. Exploit Title: Control de Citas 1.4 CIME - Multiple Vulnerabilities Date: 01/02/2014 Exploit Author: vinicius777 Contact: vinicius777 AT gmail / @vinicius777 Vendor Homepage: http://www.cgaredes.tk/ Software Link:...
Flussonic Media Server 4.1.25 - 4.3.3 - Aribtrary File Disclosure
No description provided by source. Document Title: ============ Flussonic Media Server 4.3.3 Multiple Vulnerabilities Release Date: =========== June 29, 2014 Product & Service Introduction: ======================== Flussonic is a mutli-protocol streaming server with support for many protocols,...
IBM Algorithmics RICOS 4.5.0 - 4.7.0 - Multiple Vulnerabilities
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory 20140630-0 ======================================================================= title: Multiple severe vulnerabilities product: IBM Algorithmics RICOS vulnerable...
phpscripte24 Countdown Standart Rückwärts Auktions System SQL Injection
No description provided by source. ----------------------------Information------------------------------------------------ +Name : phpscripte24 Countdown Standart Rückwärts Auktions System SQL Injection Vulnerability +Autor : Easy Laster +ICQ : 11-051-551 +Date : 08.05.2010 +Script : phpscripte24...
phpscripte24 Vor und Rückwärts Auktions System Blind SQL Injection Vulnerability
No description provided by source. ----------------------------Information------------------------------------------------ +Name : phpscripte24 Vor und Rückwärts Auktions System Blind SQL Injection auktion.php +Autor : Easy Laster +Date : 02.04.2010 +Script : phpscripte24Vor und Rückwärts Auktion...
Powie's PSCRIPT Gästebuch <= 2.09 SQL Injection Vulnerability
No description provided by source. ----------------------------Information------------------------------------------------ +Name : Powie's PSCRIPT Gästebuch = 2.09 SQL Injection Vulnerability +Autor : Easy Laster +Date : 29.03.2010 +Script : Powie's PSCRIPT Gästebuch = 2.09 +Download :...
Toms Gästebuch 1.00 form.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/25507/info Toms Gästebuch is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...
PerlSoft Gästebuch Version: 1.7b 'admincenter.cgi' Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33525/info PerlSoft Gästebuch is prone to a vulnerability that attackers can leverage to execute arbitrary commands. This issue occurs because the application fails to adequately sanitize user-supplied input. Note that a...
Oracle JRE - java.net.URLConnection class – Same-of-Origin (SOP) Policy Bypass
No description provided by source. Description Security-Assessment.com discovered that a Java Applet making use of java.net.URLConnection class can be used to bypass same-of-origin SOP policy and domain based security controls in modern browsers when communication occurs between two domains that...
Généré par KDPics 1.18 - Remote Add Admin
No description provided by source. ============================================================================== » Généré par KDPics v1.18 Remote Add Admin ============================================================================== » Script: Généré par KDPics v1.18 http://www.kdland.org/kdpic...
Conceptronic Grab’n’Go and Sitecom Storage Center Password Disclosure
No description provided by source. Updated to include Sitecom MD-253 and MD254 Minor textual changes == Conceptronic Grab’n’Go and Sitecom Storage Center - Password disclosure Vulnerability - Security Advisory AA-002 Severity Rating: High Discovery Date: May 5, 2012 Vendor Notification: May 31,...
Conceptronic Grab’n’Go Network Storage Directory Traversal
No description provided by source. Security Advisory AA-003: Directory Traversal Vulnerability in Conceptronic Grab’n’Go Network Storage Severity Rating: High Discovery Date: July 29, 2012 Vendor Notification: July 30, 2012 Disclosure Date: September 3, 2012 Vulnerability Type= Directory Traversa...
wdlinux一处sql注射
简要描述： rt 详细说明： http://www.wdlinux.cn/bbs/faq.php?action=grouppermission&gids99=%27&gids1000=%20and%20select%201%20from%20select%20count,concatversion,floorrand02x%20from%20informationschema%20.tables%20group%20by%20xa%23 漏洞证明：...
Toms Gästebuch 1.00 admin/header.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/25507/info Toms Gästebuch is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...
PageAdmin最新版反射xss
简要描述： http://demo.pageadmin.net/ PageAdmin最新版反射xss 详细说明： 构造ID参数，双引号闭合前面。 即可植入html代码。 http://demo.pageadmin.net/e/aspx/advnew.aspx?id=1" http://demo.pageadmin.net/e/aspx/advnew.aspx?id=1%22%3C/div%3E%3Cimg/src=1%20onerror=alert%28/XSS/%29%3E 漏洞证明：...
Mesut Manþet Haber 1.0 - Auth Bypass Vulnerability
No description provided by source. ============================================================================== » Note : LionTurk.Turkblog.com Resmi Web Sitem :D ============================================================================== »Mesut Manþet Haber V1.0 Auth Bypass Vulnerability...
Stem Innovation ‘IZON’ Hard-coded Credentials
No description provided by source. Stem Innovation ‘IZON’ Hard-coded Credentials CVE-2013-6236 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Stem Innovation's IP camera called ‘IZON’ utilizes numerous hard-coded credentials within its Linux...
Internet Explorer 8 - Fixed Col Span ID Full ASLR, DEP & EMET 4.1.X Bypass
No description provided by source. !-- Internet Explorer 8 Fixed Col Span ID full ASLR, DEP and EMET 4.1.X bypass Offensive Security Research Team http://www.offensive-security.com/vulndev/disarming-enhanced-mitigation-experience-toolkit-emet Affected Software: Internet Explorer 8 Vulnerability:...
53快服某系统MongoDB配置不当
简要描述： 53快服某系统 MongoDB 配置不当 详细说明： 60.12.147.136 60.191.223.39 不知道是什么系统，但是应该是53KF卖给客户的。 漏洞证明：...
Date & Sex Vor und Rückwärts Auktions System <= 2 - Blind SQL Injection Exploit
No description provided by source. ---------------------------Information------------------------------------------------ +Name : Date & Sex Vor und Rückwärts Auktions System = v2 Blind SQL Injection Exploit +Autor : Easy Laster +Date : 27.03.2010 +Script : Date & Sex Vor und Rückwärts Auktions...
Adobe Acrobat Reader and Flash Player - “newclass” invalid pointer
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 1 Binary Analysis | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/adobe-acrobat-newclass-invalid-pointer-vulnerability/...
华天动力OA任意文件删除
简要描述： Just another bug. 详细说明： 以官网http://demo.oa8000.com/为例， user:123456 登陆后， 向http://demo.oa8000.com/OAapp/bfapp//buffalo/oaPubptUploadService POST如下参数： \n removeFile\n C:/PROGRA1/htoa/Tomcat/webapps/OAapp/1.html\n 即可删除1.html 漏洞证明： 在删除前，利用wooyun-2014-065670看到的结果本来是这样的 删除后，...
ZeroCms 1.0 /zero_transact_article.php SQL注入漏洞
No description provided by source...
maccms8 由于涉及缺陷可以再系统内部随意创建文件目录
简要描述： maccms8 由于涉及缺陷可以再系统内部随意创建文件目录（开启文件缓存！！！！！！） 详细说明： 今天在查看苹果cms的时候发现一个任意创建文件目录的代码，本想着可以任意创建文件，但是由于对于文件各方面的过滤，还有一些目录遍历方面的过滤，只能审计到此，啥也不说了，直接看代码 index.php41-42: $tpl-ifex; setPageCache$tpl-P'cp',$tpl-P'cn',$tpl-H; $tpl-run; echo $tpl-H; setPageCache这个函数功能就是把页面内容缓存起来，那么我们进入到缓存的函数里面查看 function...
UranyumSoft Ýlan Servisi Database Disclosure Vulnerability
No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : Mutlu...
wesoft /MainPage.aspx SQL注入漏洞
No description provided by source...
CmsEasy最新 V5.5-UTF8 正式版暴力注入
简要描述： 官网下载最新版为20140605 注入+后台getshell 详细说明： cmseasy最新版后台无验证码，导致管理员账户可被暴力破解： 1.cmseasy后台无验证码导致可暴力破解管理员密码登陆后台； 2.后台模板编辑html文件，发现html里可执行php代码，利用php的写文件函数写shell。 漏洞证明： 0x01:爆破登陆后台 1.后台点击登陆后抓包： 2.burp爆破，通过回显得知管理员密码： 3.成功登陆后台： 0x02:后台模板编辑getshell 后台模板编辑处，我们先看left.html，点击编辑后发现是一堆代码。那我添加写文件的代码不就getshell了...
Ibrahim Ã?AKICI Okul Portal 2.0 Haber_Oku.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24379/info Ibrahim Ã?AKICI Okul Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue by...
BSDI BSD/OS <= 2.1,Caldera OpenLinux Standard 1.0,Data General DG/UX <= 5.4 4.11,IBM AIX <= 4.3,ISC
No description provided by source. source: http://www.securityfocus.com/bid/134/info A buffer overflow exists in certain versions of BIND, the nameserver daemon currently maintained by the Internet Software Consortium ISC. BIND fails to properly bound the data recieved when processing an inverse...
Invision Power Board 2.x - 'Signature' iFrame Security Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28466/info Invision Power Board IP.Board is prone to a security vulnerability that can aid attackers in social-engineering attacks. Attacker-supplied script code could exploit vulnerabilities in the user's browser or give...
1st Class Mail Server 4.0 1 viewmail.tagz XSS
No description provided by source. source: http://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail Server version 4.01 is reporte...
Oracle AutoVue 20.0.1 AutoVueX ActiveX Control SaveViewStateToFile Vulnerability
No description provided by source. Oracle AutoVue 20.0.1 AutoVueX ActiveX Control SaveViewStateToFile Remote File Creation / Overwrite Vulnerability tested against: Internet Explorer 8 Microsoft Windows Server 2003 r2 sp2 download url of a test version:...
Geomi CMS 1.2 & 3.0 - SQL Injection Vulnerability
No description provided by source. + Exploit Title : Geomi CMS by Tridan IT Sql Injection Vunerability Author : ThunDEr HeaD Contact : [email protected] Date : 11-01-2011 HomePage : www.indishell.in Version : 1.2 , 3.0 Tested on : PBL Technology Vulnerability Style : PHPCMS Sql Injection...
Claroline 1.8.9 course_description/index.php URL XSS
No description provided by source. source: http://www.securityfocus.com/bid/30269/info Claroline is prone to multiple input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities. 2. A remote URI-redirection vulnerability. An attacker may leverage these issues to execute...
CONTROLzx HMS 3.3.4 shared_order.php sharedPlanID Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17282/info CONTROLzx HMS is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to...
Linux Kernel 2.4.x.2.5.x/2.6.x Ssockaddr_In.Sin_Zero Kernel Memory Disclosure Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17203/info The Linux kernel is affected by local memory-disclosure vulnerabilities. These issues are due to the kernel's failure to properly clear previously used kernel memory before returning it to local users. These...
simple web-server 1.2 - Directory Traversal
No description provided by source. ------------------------------------------------------------------------ Software................Simple web-server 1.2 Vulnerability...........Directory Traversal Threat Level............Serious 3/5 Download................http://www.storecalc.com Discovery...
Cisco CallManager 4.1 Search Form Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24119/info Cisco CallManager is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this vulnerability could allow an attacker to perform...
Wolf CMS 0.7.5 - Multiple Vulnerabilities
No description provided by source. Title: ====== Wolf CMS v0.7.5 - Multiple Web Vulnerabilities Date: ===== 2012-02-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=452 VL-ID: ===== 452 Introduction: ============= Wolf CMS is a content management system and is Free...
PostNuke 0.72/0.75 Reviews Module Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10802/info PostNuke is reported prone to a cross-site scripting vulnerability. This issue affects the 'title' parameter of 'Reviews' script. Exploitation of this issue could allow for theft of cookie-based authentication...
Wordpress Top Quark Architecture 2.10 - Arbitrary File Upload Vulnerability
No description provided by source. Exploit Title: Wordpress Top Quark Architecture Version 2.10 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/topquark/lib/js/fancyupload/showcase/batch/ Date: 11/06/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://topquark.com/ Software...
ChBg 1.5 Scenario File Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11957/info ChBg is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in to sensitive process...
Inout Mobile Webmail APP Persistent XSS Vulnerability
No description provided by source...
Windows Media Player with K-Lite Codec Pack DoS PoC
No description provided by source. Greetings, There is a DOS condition on windows media player when the klite codec pack is installed. Exploit Title: Windows Media Player with klite codec pack DOS Poc Date: 14/06/2011 Author: Nicolas Krassas , www.twitter.com/dinosn Version:Windows Media Player 1...
KSign KSignSWAT <= 2.0.3.3 ActiveX Control Remote BoF Exploit
No description provided by source. !-- /////////////////////////////////////////////////////////////////// // KSignSWAT SWATLogin PoC Code. // // // // URL : www.ksign.com // // Author : KIM Kee-hong [email protected] // // Date : 2007/05/13 // // Notice : Tested on WinXP SP2 KOREAN all patched...
Savant Webserver 3.1 File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5709/info Savant Webserver is vulnerable to an input validation bug, that could allow malicious users access to password protected folders. It should be noted that versions below 3.1 may also be vulnerable to this issue...
rsync <= 2.5.1 - Remote Exploit
No description provided by source. / 7350fuqnut - rsync = 2.5.1 remote exploit -- linux/x86 ver. current version 2.5.5 but bug was silently fixed it appears so vuln versions still ship, maybe security implemecations were not recognized. we can write NULL bites below &line0 by supplying negative...
AWStats <= 6.4 'awstats.pl' Multiple Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34159/info AWStats is prone to a path-disclosure vulnerability. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable computer. The following...