what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 4 of 4

Files from Qian Wu

Tpshop 2.0.8 Arbitrary File Download / SSRF

Posted May 2, 2018

Authored by Jiawang Zhang, Qian Wu, Bo Wang

Tpshop versions 2.0.8 and below suffer from arbitrary file download and server-side request forgery vulnerabilities.

tags | exploit, arbitrary, vulnerability

advisories | CVE-2018-9919

SHA-256 | 72617106a23937eb486c3d74c5d9851c94a8e0111b645152e755b474fcd86c31

Download | Favorite | View

Cockpit CMS 0.5.5 Server-Side Request Forgery

Posted Apr 28, 2018

Authored by Jiawang Zhang, Qian Wu, Bo Wang

Cockpit CMS versions 0.4.4 through 0.5.5 suffer from a server-side request forgery vulnerability.

tags | exploit

advisories | CVE-2017-14611, CVE-2018-9302

SHA-256 | 877fb3147fad9053c21d2ae76bcbba82752af4be9b3e9a70fa171c8a6b4a756e

Download | Favorite | View

Cockpit CMS 0.13.0 Server Side Request Forgery

Posted Apr 6, 2018

Authored by Jiawang Zhang, Qian Wu, Bo Wang

Cockpit CMS version 0.13.0 suffers from a server-side request forgery vulnerability.

tags | exploit

advisories | CVE-2017-14611

SHA-256 | bb9d51a2d563f68c1b06acdd86fb3398e16932eeb518fbffe5169b60bd4b3a86

Download | Favorite | View

Onethink CMS Server Side Request Forgery

Posted Apr 6, 2018

Authored by Jiawang Zhang, Qian Wu, Bo Wang

Onethink CMS versions released up to date 2018/04/06 suffer from a server-side request forgery vulnerability.

tags | exploit

advisories | CVE-2017-14323

SHA-256 | aad2879de55bb8ba9ba5796d011af0f016e871cd9b6bf150c3994af20e87b21e

Download | Favorite | View