what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 7 of 7

Files from Jiawang Zhang

TWiki 6.0.2 Cross Site Scripting

Posted Jan 7, 2019

Authored by Jiawang Zhang

TWiki version 6.0.2 suffers from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2018-20212

SHA-256 | 12344c33a0d166986f451979a17987cea192019740523cd407fca283dac30bef

Download | Favorite | View

LibTIFF 4.0.8 Memory Leak

Posted Dec 21, 2018

Authored by Jiawang Zhang

LibTIFF version 4.0.8 suffers from multiple memory leak vulnerabilities.

tags | advisory, vulnerability, memory leak, info disclosure

advisories | CVE-2017-16232

SHA-256 | 99b39c7e3e305f25232c535712f3fc0ca2051fdcf102d69777eda04623c5b380

Download | Favorite | View

PCRE 8.41 Buffer Overflow

Posted Dec 21, 2018

Authored by Jiawang Zhang

PCRE version 8.41 suffers from a buffer overflow in the match() function.

tags | exploit, overflow

advisories | CVE-2017-16231

SHA-256 | 3f1207d02f6c9c3867b95b89f18c07e29db058dcc1a59efdfff8b4e9cda80af0

Download | Favorite | View

Tpshop 2.0.8 Arbitrary File Download / SSRF

Posted May 2, 2018

Authored by Jiawang Zhang, Qian Wu, Bo Wang

Tpshop versions 2.0.8 and below suffer from arbitrary file download and server-side request forgery vulnerabilities.

tags | exploit, arbitrary, vulnerability

advisories | CVE-2018-9919

SHA-256 | 72617106a23937eb486c3d74c5d9851c94a8e0111b645152e755b474fcd86c31

Download | Favorite | View

Cockpit CMS 0.5.5 Server-Side Request Forgery

Posted Apr 28, 2018

Authored by Jiawang Zhang, Qian Wu, Bo Wang

Cockpit CMS versions 0.4.4 through 0.5.5 suffer from a server-side request forgery vulnerability.

tags | exploit

advisories | CVE-2017-14611, CVE-2018-9302

SHA-256 | 877fb3147fad9053c21d2ae76bcbba82752af4be9b3e9a70fa171c8a6b4a756e

Download | Favorite | View

Cockpit CMS 0.13.0 Server Side Request Forgery

Posted Apr 6, 2018

Authored by Jiawang Zhang, Qian Wu, Bo Wang

Cockpit CMS version 0.13.0 suffers from a server-side request forgery vulnerability.

tags | exploit

advisories | CVE-2017-14611

SHA-256 | bb9d51a2d563f68c1b06acdd86fb3398e16932eeb518fbffe5169b60bd4b3a86

Download | Favorite | View

Onethink CMS Server Side Request Forgery

Posted Apr 6, 2018

Authored by Jiawang Zhang, Qian Wu, Bo Wang

Onethink CMS versions released up to date 2018/04/06 suffer from a server-side request forgery vulnerability.

tags | exploit

advisories | CVE-2017-14323

SHA-256 | aad2879de55bb8ba9ba5796d011af0f016e871cd9b6bf150c3994af20e87b21e

Download | Favorite | View