jsp

jsp 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

ManageEngine EventLog Analyzer – Multiple Vulnerabilities (1)

Mogwai Security Advisory MSA-2014-01

2014-09-01 Hans-Martin Muench webapps

ManageEngine Desktop Central – Arbitrary File Upload / Remote Code Execution

Arbitrary file upload / remote code execution in ManageEngine Desktop Central / Desktop Central MSP

2014-09-01 Pedro Ribeiro webapps

IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----

2014-07-01 SEC Consult webapps

Xangati – ‘/servlet/Installer?file’ Directory Traversal

source: https://www.securityfocus.com/bid/66817/info

2014-04-14 Jan Kadijk webapps

Xangati – ‘/servlet/MGConfigData’ Multiple Directory Traversals

source: https://www.securityfocus.com/bid/66817/info

2014-04-14 Jan Kadijk webapps

McAfee Asset Manager 6.6 – Multiple Vulnerabilities

Cloud SSO is vuln to unauthed XSS in the authentication audit form:

2014-03-19 Brandon Perry webapps

Ganib Project Management 2.3 – SQL Injection

# Exploit title: Ganib 2.x SQLi

2014-02-24 drone webapps

Oracle Forms and Reports 11.1 – Arbitrary Code Execution

#!/usr/bin/env ruby

2014-01-29 Mekanismen remote

SonicWALL Gms 7.x – Filter Bypass / Persistent

Document Title:

2013-12-05 Vulnerability-Lab webapps

ManageEngine Desktop Central 8.0.0 build < 80293 - Arbitrary File Upload

( , ) (,

2013-11-18 Security-Assessment.com webapps

JReport – ‘dealSchedules.jsp’ Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/63363/info

2013-10-25 Poonam Singh webapps

OpenEMM-2013 8.10.380.hf13.0.066 – SOAP SQL Injection / Persistent Cross-Site Scripting

import os

2013-07-29 drone webapps

Sybase EAServer 6.3.1 – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20130719-0 >

2013-07-22 SEC Consult webapps

Resin Application Server 4.0.36 – Source Code Disclosure

Resin Application Server 4.0.36 Source Code Disclosure Vulnerability

2013-06-10 LiquidWorm webapps

Imperva SecureSphere Operations Manager 9.0.0.5 – Multiple Vulnerabilities

Original: http://www.digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt

2013-06-05 Pedro Andujar webapps

jPlayer – ‘Jplayer.swf’ Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/59030/info

2013-03-29 Malte Batram webapps

Cisco Video Surveillance Operations Manager 6.3.2 – Multiple Vulnerabilities

# Exploit Title:Cisco Video Surveillance Operations Manager Multiple

2013-03-15 Bassem webapps

JForum – ‘jforum.page’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58164/info

2013-02-26 ZeroDayLab webapps

Cisco Unity Express – Multiple Vulnerabilities

# Exploit Title: Cisco Unity Express Multiple Vulnerabilities

2013-02-05 Jacob Holcomb webapps

Perforce P4Web – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57514/info

2013-01-22 Christy Philip Mathew webapps

Oracle Application Framework – Diagnostic Mode Bypass

Trustwave SpiderLabs Security Advisory TWSL2012-023:

2013-01-16 Trustwave's SpiderLabs webapps

ManageEngine Support Center Plus 7908 – Multiple Vulnerabilities

+--------------------------------------------------------------------------------------------------------------------...

2012-10-17 xistence webapps

JAMF Casper Suite MDM – Cross-Site Request Forgery

CVE-2012-4051 - JAMF Casper Suite MDM CSRF Vulnerability

2012-09-27 Jacob Holcomb webapps

IFOBS – ‘regclientprint.jsp’ Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/55561/info

2012-09-15 MustLive webapps

jira 4.4.3 / greenhopper < 5.9.8 - Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----

2012-09-04 Hoyt LLC Research webapps

DataWatch Monarch Business Intelligence – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/54733/info

2012-07-31 Raymond Rizk webapps

TEMENOS T24 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54235/info

2012-06-28 Rehan Ahmed webapps

Openfire Server 3.6.0a – Admin Console Authentication Bypass (Metasploit)

##

2012-06-28 Metasploit webapps

Atlassian JIRA FishEye 2.5.7 / Crucible 2.5.7 Plugins – XML Parsing Security

source: https://www.securityfocus.com/bid/53603/info

2012-05-17 anonymous webapps

Atlassian Tempo 6.4.3 / JIRA 5.0.0 / Gliffy 3.7.0 – XML Parsing Denial of Service

source: https://www.securityfocus.com/bid/53595/info

2012-05-17 anonymous dos

OpenKM 5.1.7 – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/53602/info

2012-05-03 Cyrill Brunschwiler webapps

ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet – Directory Traversal

ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet Unauthenticated

2012-03-19 rgod webapps

Ilient SysAid 8.5.5 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/52356/info

2012-03-08 Julien Ahrens webapps

stoneware webnetwork6 – Multiple Vulnerabilities

Stoneware WebNetwork6 Vulnerability Assessment

2012-01-24 Jacob Holcomb webapps

Cloupia End-to-end FlexPod Management – Directory Traversal

Advisory ID: KUSTODIAN-2011-011

2012-01-15 Chris Rock webapps

OpenKM Document Management System 5.1.7 – Command Execution

########################################################################

2012-01-03 Cyrill Brunschwiler webapps

Barracuda Control Center 620 – Multiple Web Vulnerabilities

Title:

2011-12-21 Vulnerability-Lab webapps