技术研究(Research)-诺赛科技技术站

Oracle Weblogic 10.3.2 Node Manager fun

诺赛科技技术站 http://www.nosec.org/ — 2010-02-09 09:30:54

Time for the final bug in our Week of Web Server bugs. It is in Vulndisco since Oct, 2008. Oracle Weblogic has an optional Node Manager utility which is used to start/stop server instances from a remo
Tags:Oracle Weblogic

MySQL yaSSL CertDecoder::GetName Buffer Overflow

诺赛科技技术站 http://www.nosec.org/ — 2010-02-09 09:50:09

TinyMCE WYSIWYG Editor Multiple Vulnerabilities

诺赛科技技术站 http://www.nosec.org/ — 2010-02-09 10:07:20

[+] Vurnerebility: *Js tiny_mce/tiny_mce WYSIWYG{java script} vurnerebility xss-->popup *& SQl implemented [+] Language : Java--,Xml [+] lisences : LGPL [+] Vendor : Moxiecode Systems AB [+] suppo
Tags:TinyMCE

Joomla Component "com_productbook" SQL Injection Vulnerability

诺赛科技技术站 http://www.nosec.org/ — 2010-02-09 10:11:51

Joomla Component "com_productbook" SQL Injection Vulnerability ======================================================== #################################################################### .:. Author :
Tags:Joomla

Joomla (com_photoblog) Blind Sql Injection Vulnerability

诺赛科技技术站 http://www.nosec.org/ — 2010-02-09 10:14:13

Joomla (com_photoblog) Blind Sql Injection Vulnerability ======================================================== #################################################################### .:. Author : ALTBT
Tags:Joomla

Joomla (Job Component) SQL Injection Vulnerability

诺赛科技技术站 http://www.nosec.org/ — 2010-02-09 10:14:45

[~]>> ...[BEGIN ADVISORY]... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Joomla (Yelp Component) SQL Injection Vulnerability

诺赛科技技术站 http://www.nosec.org/ — 2010-02-09 10:15:48

[~]>> ...[BEGIN ADVISORY]... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Joomla Component com_dms SQL Injection Vulnerability

诺赛科技技术站 http://www.nosec.org/ — 2010-02-09 10:16:07

/************************************************************************** [~] Joomla Component com_dms

Joomla Component JE Event Calendar SQL Injection Vulnerability

诺赛科技技术站 http://www.nosec.org/ — 2010-02-09 10:16:28

[~]>> ...[BEGIN ADVISORY]... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Joomla Component com_simplefaq (catid) Blind Sql Injection Vulnerability

诺赛科技技术站 http://www.nosec.org/ — 2010-02-09 10:16:44

Joomla Component com_simplefaq (catid) Blind Sql Injection Vulnerability ====================================================================

eWebeditor ASP Version Multiple Vulnerabilities

诺赛科技技术站 http://www.nosec.org/ — 2010-02-09 10:17:00

################################################################# # Application Info: # Name: eWebeditor
Tags:eWebeditor

Joomla 1.5.12 read/exec remote files

诺赛科技技术站 http://www.nosec.org/ — 2010-02-09 10:20:34

Tags:Joomla

eWebeditor Directory Traversal

诺赛科技技术站 http://www.nosec.org/ — 2010-02-09 10:21:10

################################################################# # Application Info: # Name: eWebeditor
Tags:eWebeditor

Vulnerability in Oracle 11gR2 allows system privileges for all - Update

诺赛科技技术站 http://www.nosec.org/ — 2010-02-12 09:38:28

http://www.h-online.com/security/news/item/Vulnerability-in-Oracle-11gR2-allows-system-privileges-for-all-Update-923143.html?view=print
Tags:oracle

CVE-2009-2693 Apache Tomcat unexpected file deletion and/or alteration

诺赛科技技术站 http://www.nosec.org/ — 2010-02-12 09:39:06

http://www.securityfocus.com/archive/1/archive/1/509148/100/0/threaded
Tags:tomcat war deploying

PHP 5.2.12/5.3.1 session.save_path safe_mode and open_basedir bypass

诺赛科技技术站 http://www.nosec.org/ — 2010-02-12 09:49:44

[ PHP 5.2.12/5.3.1 session.save_path safe_mode and open_basedir bypass ] Credit: Grzegorz Stachowiak Provided by: SecurityReason.com Date: - Written: 31.01.2010 - Public: 11.02.2010 SecurityRisk: Medium A
Tags:php session.save_path bypass

cint也不安全

诺赛科技技术站 http://www.nosec.org/ — 2010-02-12 09:50:15

http://t00ls.net/thread-6281-1-1.html?jdfwkey=re0jz3

Sablog-X v2.x 任意变量覆盖漏洞

诺赛科技技术站 http://www.nosec.org/ — 2010-02-23 09:09:20

http://www.80vul.com/sablog/sablog-x.txt
Tags:Sablog 漏洞

Sablog-X 2.0 后台管理权限欺骗漏洞

诺赛科技技术站 http://www.nosec.org/ — 2010-02-25 10:44:10

http://bbs.wolvez.org/topic/124/
Tags:漏洞后台权限 Sablog-X

尘月网络企业网站管理系统上传漏洞

诺赛科技技术站 http://www.nosec.org/ — 2010-04-20 09:50:27

代码： <%
Tags:漏洞企业网站管理系统