This cgi script allows to reboot the device via GET request.
There is a SQL injection vulnerability in the Login field of the login form located at the top of the site pages. If you inject a single apostrophe (') into this field and pass anything you want in password field you can trigger the SQL Error message. It requires the use of double-query injection, using string method, over POST request to exploit this vulnerability which can lead to extraction of user info as well as databse user credentials.
A buffer overflow vulnerability exists in Microsoft Office 2003 Home/Pro which allows an attacker to execute arbitrary code on the target system. The vulnerability is triggered when a specially crafted RTF file is opened in Microsoft Office 2003 Home/Pro. This can be exploited to execute arbitrary code on the target system by enticing a user to open a malicious RTF file.
Short code parameter 'id' is prone to blind sqli, you need to be able to write a post/page to exploit this: [paywithtweet id="1' AND 1=2"] and [paywithtweet id="1' AND 1=1"]. Multiple XSS in pay.php http://target.com/wp-content/plugins/pay-with-tweet.php/pay.php After connecting to twitter: ?link=&22></input>[XSS] After submitting the tweet: ?title=[XSS]&dl=[REDIRECT-TO-URL]%27)">[XSS] The final download link will be replaced with [REDIRECT-TO-URL]. POC: pay.php?link=%22></input><script>alert(document.cookie)</script>&title=<script>alert(document.cookie)</script>&dl=http://brindi.si%27"><script>alert(document.cookie)</script>
SEC Consult Vulnerability Lab discovered multiple critical vulnerabilities in Apache Struts2 that allow attackers to bypass the mentioned security restrictions and execute arbitrary methods and access context variables. To prevent attackers calling arbitrary methods within parameters the flag “xwork.MethodAccessor.denyMethodExecution” is set to “true” and the SecurityMemberAccess field “allowStaticMethodAccess” is set to “false” by default. Also, to prevent access to context variables an improved character whitelist for paramteter names is applied in the ParametersInterceptor. SEC Consult Vulnerability Lab discovered a way to bypass these security restrictions by providing a parameter like “product.id=1” the OGNL parser will call the appropiate setter getProduct().setId(1) in the current action context.
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netware. Authenication is not required to exploit this vulnerability. The specific flaw exists within the XNFS.NLM module. The issue lies in the handling of the NFSRENAME RPC call. By sending a specially crafted packet, an attacker can cause a stack-based buffer overflow.
TinyWebGallery 1.8.3 is vulnerable to Remote Command Execution due to improper sanitization of user-supplied input. An attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to the vulnerable server. This can allow the attacker to execute arbitrary commands on the server with the privileges of the web server process.
The vulnerability can be exploited by sending a malicious HTTP request to the vulnerable server with a crafted URL containing a malicious SQL query. The malicious SQL query can be used to extract data from the database or to execute malicious code on the server.
This exploit is a denial of service attack against Netcut 2. It uses scapy to send ARP packets with random source IP and MAC addresses to the target. The attack is successful when the target receives more than 50% of the packets sent. The attack is successful when the target receives more than 50% of the packets sent.
Posse Sports is vulnerable to SQL injection in multiple parameters. An attacker can exploit this vulnerability to gain access to the database and extract sensitive information such as usernames and passwords. The vulnerable parameters are news_id, iddirector, idtourn, tourn_id, idclass, idfield, and id. An example of an exploit is http://[target]/newsdetail.php?news_id=[SQL] -9999+union+select+1,2,group_concat(id,0x3a,username,0x3a,password)+from+user
Services By CQR