WordPress Catpro Gallery plugin arbitrary file upload vulnerability

No description provided by source...

Vanderbilt IP-Camera CCPW3025-IR, CVMW3025-IR readfile. cgi information disclosure vulnerability

No description provided by source...

Honeywell IP-Camera HICC-1100PT Remote Authentication information disclosure vulnerability

No description provided by source...

sapido router system command execution vulnerability

No description provided by source...

WordPress Bliss Gallery plugin arbitrary file upload vulnerability

0x00 overview Plug-in version of the version 2.3, the PoC attached to the plug-in network disk download address 0x01 vulnerability analysis The vulnerability appears in the wp-content\plugins\wp-bliss-gallery\html\manage.php that the the the the Talk to wp-content\plugins\wp-bliss-gallery\bliss.p...

tcPbX VoIP phone system tcpbx_lang local file inclusion vulnerability

No description provided by source...

kingdeeEAS /easoa/login/kingdee_sso_auth. jsp injection vulnerability

No description provided by source...

FreePBX 13.0.35 remote code execution

A vulnerability overview 1. Vulnerability description FreePBX is called the Asterisk Management Portal, IP telephony tools Asterisk standardized implementation that provides a Web configuration interface and other workers FreePBX in functions.inc.php file exists for the parameters without...

FreePBX 13.0.35 - SQL injection

No description provided by source...

WebNMS Framework 5.2SP1 Information Disclosure

Summary WebNMS is an industry-leading used to build network management applications architecture. Storage of the password using a vulnerable confused with the encryption algorithm, combined with File Download vulnerability to obtain the password in plain text. Vulnerability details ./...

Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR - Local File Disclosure

Vanderbilt IP-Camera CCPW3025-IR + CVMW3025-IR allows an unauthenticated user through the browser sends a request to obtain a user name and password Requesting links is as follows: http://host:port/cgi-bin/readfile.cgi?query=ADMINID Return information example: var AdmID="admin"; var...

Weaver E-cology /js/jquery/plugins/jqueryFileTree/connectors/jqueryFileTree. jsp parameters dir directory traversal vulnerability

No description provided by source...

Wordpress Multi Themes arbitrary File Download vulnerability

No description provided by source...

Small and micro OA office management system v2. 0 \Application\Home\Controller\TaskController.class.php parameters task_id SQL injection

No description provided by source...

vBulletin /forumrunner/request.php SQL injection vulnerability

Author: janesknow Chong Yu 404 security lab Date: 2016-11-15 Vulnerability overview Vulnerability description vBulletin is a commercial Forum application, using PHP language, researchers have found that the VBulletin core plug-in forumrunner presence of SQL injection vulnerabilities: CVE-2016-619...

Fancier /travel/tour_view. aspx a parameter injection vulnerability

No description provided by source...

WebNMS Framework 5.2SP1 File Upload

WebNMS 是一个业界领先的用于构建网络管理应用的架构。上传功能存在目录遍历及远程代码执行漏洞。 漏洞细节 FileUploadServlet允许未登录上传JSP文件。提交如下 POST 请求： POST /servlets/FileUploadServlet?fileName=../jsp/Login.jsp HTTP/1.1 下载官方Windows试用版软件测试通过： http://www.webnms.com/webnms/14107380/WebNMSFramework5STDWindows.exe 其它信息 漏洞发现者：Pedro Ribeiro...

WebNMS Framework 5.2SP1 Login Bypass

Summary WebNMS is an industry-leading used to build network management applications architecture. By submitting a custom headers parameter can directly obtain the session Cookie, skip login authentication. Vulnerability details Submit the following Get request HTTP header, add a UserName specify ...

WebNMS Framework 5.2SP1 Text File Download

Summary WebNMS is an industry-leading used to build network management applications architecture. The File Download feature does not require login you can download any text, non-binary file. Vulnerability details FetchFile to allow not logged in download the file, but only the text content of the...

Joomla DOCman Component parameter file local file inclusion vulnerability

No description provided by source...

WordPress Bonkersbeat-theme Arbitrary File Download Vulnerability

No description provided by source...

WordPress 3.6-4.5.2 Authenticated Revision History Information Disclosure

No description provided by source...

Byte Revolution ficha.php parameter id SQL injection vulnerability

No description provided by source...

Organic Technologies CMS productos.php parameter id SQL injection vulnerability

No description provided by source...

Even the Federal administrative examination and approval system /workplate/xzsp/kqgl/kqsz/kqsz. aspx unauthorized access vulnerability

No description provided by source...

Weaver E-cology weaver. file. SignatureDownLoad injection vulnerability

No description provided by source...

WordPress 4.5 admin-ajax.php Path traversal & DoS

Impact version WordPress 4.6 4.5.3 test by Analysis The above code can be seen, the directory traversal vulnerability is triggered in security checks before. No echo is slightly tasteless, but the attacker can use this directory through repeated read/dev/random blocking the php script, resulting ...

Goigi CMS 后台/admin/index.php universal password bypass vulnerability

No description provided by source...

Pan micro-OA system webservice-xml/login/login. wsdl. php blind

No description provided by source...

Weaver E-cology /messager/users. data unauthorized access vulnerability

No description provided by source...

phpmyadmin2. 8. 0. 3 arbitrary file include vulnerability

0x00 overview phpmyadmin vulnerability exists in the known version is 2.8.0.3 rest version unknown This test version is 2. 8. 0. 3 Many within the network system in this version, the external network is also not a few! 0x01 vulnerability analysis See there are holes in the file code...

Joomla component com_joomanager parameters path to arbitrary File Download vulnerability

No description provided by source...

Emmertex product.php parameter id SQL injection vulnerability

No description provided by source...

WordPress Mail Masta Plugin 1.0 - local file inclusion

This file contains the vulnerability allows an attacker to include a file,usually using a“dynamic file include”mechanisms in the target application. The vulnerability occurs due to the use of user-supplied input without proper validation. Source file: /inc/campaign/countofsend.php Line 4:...

Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)

No description provided by source...

WordPress <4.5 SSRF

No description provided by source...

imo cloud Office system get_file.php parameter nid arbitrary command execution vulnerability

No description provided by source...

TOPSEC Firewalls - Remote Code Execution (ELIGIBLEBOMBSHELL)

No description provided by source...

TOPSEC Firewalls - Remote Code Execution (ELIGIBLECANDIDATE)

Cookie: sessionid=command To this URL to send the POST package if the included file is saved in the/tmp directory a file named cgixxxxxx Behind the characters randomly So you can put sh script to write to the firewall of the tmp directory together with Execute permissions after execution...

TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)

No description provided by source...

Cisco ASA / PIX - Privilege Escalation (EPICBANANA)

No description provided by source...

TOPSEC Firewalls - Remote Code Execution (ELIGIBLECONTESTANT)

No description provided by source...

WatchGuard Firewalls - ifconfig Privilege Escalation (ESCALATEPLOWMAN)

No description provided by source...

phpcollab any user to create privilege upgrade-csrf

No description provided by source. document.forms0.submit...

GlobalSearch CMS system.php parameter id SQL injection vulnerability

No description provided by source...

DMac Web Industries product.php parameter id SQL injection vulnerability

No description provided by source...

Honeywell IP-Camera HICC-1100PT - Credentials Disclosure

imply go to the following url: http://host:port/cgi-bin/readfile.cgi?query=ADMINID Should return some javascript variable which contain the credentials and other configuration vars: var AdmID="admin"; var AdmPass1=“admin”; var AdmPass2=“admin”; var Language=“en”; var LogoffTime="0"; Request: GET...

The micro-engine technology-no need to login-payment-alipay-sql injection

No description provided by source...

HandMade Connection CMS index.php parameter file arbitrary File Download vulnerability

No description provided by source...

SIEMENS IP Camera CCMW1025 x. 2. 2. 1798-remote management of password change vulnerability

No description provided by source. !/bin/bash SIEMENS IP Camera CCMW1025 x.2.2.1798 remote change admin user/password Copyright 2016 c Todor Donev http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous programs is for Educational purpose ONLY. Do not...