Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 196

Joomla! Component Directorix Directory Manager 1.1.1 – SQL Injection

# # # # #

2017-02-21 Ihsan Sencan webapps

Joomla! Component Magic Deals Web 1.2.0 – SQL Injection

# # # # #

2017-02-21 Ihsan Sencan webapps

Joomla! Component J-BusinessDirectory 4.6.8 – SQL Injection

# # # # #

2017-02-21 Ihsan Sencan webapps

Joomla! Component AppointmentBookingPro 4.0.1 – SQL Injection

# # # # #

2017-02-21 Ihsan Sencan webapps

Microsoft Office PowerPoint 2010 – ‘MSO!Ordinal5429’ Missing Length Check Heap Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=949

2017-02-21 Google Security Research dos

Microsoft Office PowerPoint 2010 – MSO/OART Heap Out-of-Bounds Access

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=950

2017-02-21 Google Security Research dos

Microsoft Office PowerPoint 2010 – GDI ‘GDI32!ConvertDxArray’ Insufficient Bounds Check

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=951

2017-02-21 Google Security Research dos

Adobe Flash – MP4 AMF Parsing Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1018

2017-02-21 Google Security Research dos

Adobe Flash – SWF Stack Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1013

2017-02-21 Google Security Research dos

Adobe Flash – Use-After-Free in Applying Bitmap Filter

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1007

2017-02-21 Google Security Research dos

Adobe Flash – YUVPlane Decoding Heap Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1008

2017-02-21 Google Security Research dos

Lock Photos Album&Videos Safe 4.3 – Directory Traversal

Document Title:

2017-02-21 Vulnerability-Lab webapps

ProjectSend r754 – Insecure Direct Object Reference

Document Title:

2017-02-21 Vulnerability-Lab webapps

Grails PDF Plugin 0.6 – XML External Entity Injection

# Exploit Title: Grails PDF Plugin 0.6 XXE

2017-02-21 Charles Fol webapps

Joomla! Component MaQma Helpdesk 4.2.7 – ‘id’ SQL Injection

# # # # #

2017-02-20 Ihsan Sencan webapps

Joomla! Component PayPal IPN for DOCman 3.1 – ‘id’ SQL Injection

# # # # #

2017-02-20 Ihsan Sencan webapps

Album Lock 4.0 iOS – Directory Traversal

Document Title:

2017-02-20 Vulnerability-Lab webapps

PHPShell 2.4 – Session Fixation

[+] Credits: John Page AKA hyp3rlinx

2017-02-19 hyp3rlinx webapps

Joomla! Component Joomloc-CAT 4.1.3 – ‘ville’ SQL Injection

# # # # #

2017-02-18 Ihsan Sencan webapps

Joomla! Component Joomloc-Lite 1.3.2 – ‘site_id’ SQL Injection

# # # # #

2017-02-18 Ihsan Sencan webapps

Joomla! Component JomWALL 4.0 – ‘wuid’ SQL Injection

# # # # #

2017-02-18 Ihsan Sencan webapps

Joomla! Component OS Property 3.0.8 – SQL Injection

# # # # #

2017-02-18 Ihsan Sencan webapps

Joomla! Component EShop 2.5.1 – ‘id’ SQL Injection

# # # # #

2017-02-18 Ihsan Sencan webapps

Joomla! Component OS Services Booking 2.5.1 – SQL Injection

# # # # #

2017-02-18 Ihsan Sencan webapps

Joomla! Component Room Management 1.0 – SQL Injection

# # # # #

2017-02-18 Ihsan Sencan webapps

Joomla! Component Bazaar Platform 3.0 – SQL Injection

# # # # #

2017-02-18 Ihsan Sencan webapps

Joomla! Component Google Map Store Locator 4.4 – SQL Injection

# # # # #

2017-02-18 Ihsan Sencan webapps

Joomla! Component Most Wanted Real Estate 1.1.0 – SQL Injection

# # # # #

2017-02-18 Ihsan Sencan webapps

Netgear DGN2200v1/v2/v3/v4 – ‘ping.cgi’ Remote Command Execution

#!/usr/bin/python

2017-02-18 SivertPL webapps

Sawmill Enterprise 8.7.9 – Authentication Bypass

[+] Credits: John Page AKA Hyp3rlinx

2017-02-18 hyp3rlinx webapps

WordPress Plugin Mail Masta 1.0 – SQL Injection

# Exploit Title: Multiple SQL injection vulnerabilities in Mail Masta (aka mail-masta) plugin 1.0 for Wordpress.

2017-02-18 Hanley Shun webapps

Joomla! Component Team Display 1.2.1 – ‘filter_category’ SQL Injection

# # # # #

2017-02-17 Ihsan Sencan webapps

Joomla! Component Groovy Gallery 1.0.0 – SQL Injection

# # # # #

2017-02-17 Ihsan Sencan webapps

Joomla! Component WMT Content Timeline 1.0 – ‘id’ SQL Injection

# # # # #

2017-02-17 Ihsan Sencan webapps

Artifex MuPDF mujstest 1.10a – Null Pointer Dereference

Source: http://seclists.org/oss-sec/2017/q1/458

2017-02-17 Agostino Sarubbo dos

Joomla! Component Spider Calendar Lite 3.2.16 – SQL Injection

# # # # #

2017-02-16 Ihsan Sencan webapps

Joomla! Component Spider Catalog Lite 1.8.10 – SQL Injection

# # # # #

2017-02-16 Ihsan Sencan webapps

Joomla! Component Spider Facebook 1.6.1 – SQL Injection

# # # # #

2017-02-16 Ihsan Sencan webapps

Joomla! Component Spider FAQ Lite 1.3.1 – SQL Injection

# # # # #

2017-02-16 Ihsan Sencan webapps

WordPress Plugin Corner Ad 1.0.7 – Cross-Site Scripting

# Exploit Title: Authorized Stored XSS at WordPress Corner-Ad plugin.

2017-02-16 Atik Rahman webapps

dotCMS 3.6.1 – Blind Boolean SQL Injection

: '

2017-02-16 Ben Nott webapps

Joomla! Component JEmbedAll 1.4 – SQL Injection

# # # # #

2017-02-16 Ihsan Sencan webapps

Geutebruck 5.02024 G-Cam/EFD-2250 – ‘testaction.cgi’ Remote Command Execution (Metasploit)

##

2017-02-15 RandoriSec webapps

Joomla! Component JoomBlog 1.3.1 – SQL Injection

# # # # #

2017-02-15 Ihsan Sencan webapps

Microsoft Windows – ‘gdi32.dll’ EMR_SETDIBITSTODEVICE Heap Out-of-Bounds Reads / Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=992

2017-02-15 Google Security Research dos

NVIDIA Driver 375.70 – DxgkDdiEscape 0x100008b Out-of-Bounds Read/Write

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=985

2017-02-15 Google Security Research dos

NVIDIA Driver 375.70 – Buffer Overflow in Command Buffer Submission

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1012

2017-02-15 Google Security Research dos

OpenText Documentum D2 – Remote Code Execution

CVE Identifier: CVE-2017-5586

2017-02-15 Andrey B. Panfilov remote

GOM Player 2.3.10.5266 – ‘.fpx’ Denial of Service

# Exploit Title: GOM Player 2.3.10.5266 - Remote heap corruption (.fpx)

2017-02-15 Peter Baris dos

Joomla! Component JSP Store Locator 2.2 – ‘id’ SQL Injection

# # # # #

2017-02-15 Ihsan Sencan webapps