Joomla! Component Spider FAQ – SQL Injection
##################################################################################################
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 258
Free MP3 CD Ripper 2.6 – ‘.wav’ Local Buffer Overflow
#!/usr/bin/python
WordPress Plugin Marketplace 2.4.0 – Arbitrary File Download
# Exploit Title: WP Marketplace 2.4.0 Arbitrary File Download
Telescope 0.9.2 – Markdown Persistent Cross-Site Scripting
# Exploit Title: Persistent XSS via Markdown on Telescope
Microsoft Windows 8.1 – Local WebDAV NTLM Reflection Privilege Escalation
Source: https://code.google.com/p/google-security-research/issues/detail?id=222
FastStone Image Viewer 5.3 – ‘.tga’ Crash (PoC)
# Exploit Title : FastStoneImage Viewer (Corrupted tga) IMAGESPECIFICATION.Width Crash POC
Chamilo LMS 1.9.10 – Multiple Vulnerabilities
I. Overview
Joomla! Component ECommerce-WD 1.2.5 – SQL Injection
Version 1.2.5 of the ECommerce-WD plugin for Joomla! has multiple
Citrix Nitro SDK – Command Injection
Abstract
Fortinet Single Sign On – Stack Overflow
1. Advisory Information
Spybot Search & Destroy 1.6.2 Security Center Service – Local Privilege Escalation
Spybot Search & Destroy 1.6.2 Security Center Service Privilege Escalation
Moodle 2.5.9/2.6.8/2.7.5/2.8.3 – Block Title Handler Cross-Site Scripting
Moodle 2.5.9/2.6.8/2.7.5/2.8.3 Block Title Handler Cross-Site Scripting
Metasploit Project < 4.11.1 - Initial User Creation Cross-Site Request Forgery (Metasploit)
# Exploit Title: Metasploit Project initial User Creation CSRF
Joomla! Component com_simplephotogallery 1.0 – SQL Injection
#======================================================================================
Smart PHP Poll – Authentication Bypass
# Exploit Title: Smart PHP Poll Auth Bypass Vulnerability
Brasero CD/DVD Burner 3.4.1 – ‘.m3u’ Buffer Overflow Crash (PoC)
#!/usr/bin/python
Foxit Reader 7.0.6.1126 – Unquoted Service Path Privilege Escalation
Foxit Reader 7.0.6.1126 Unquoted Service Path Elevation Of Privilege
WordPress Plugin SEO by Yoast 1.7.3.3 – Blind SQL Injection
Title: WordPress SEO by Yoast
Intel Network Adapter Diagnostic Driver – IOCTL Handling
Intel Network Adapter Diagnostic Driver IOCTL Handling Vulnerability
WoltLab Community Gallery – Persistent Cross-Site Scripting
#Vulnerability title: Community Gallery - Stored Cross-Site Scripting
ArcSight Logger – Arbitrary File Upload / Code Execution
# Exploit Title: ArcSight Logger - Arbitrary File Upload (Code Execution)
Citrix Netscaler NS10.5 – WAF Bypass (Via HTTP Header Pollution)
# Exploit Title: [Citrix Netscaler NS10.5 WAF Bypass via HTTP Header Pollution]
Codiad 2.5.3 – Local File Inclusion
[+]Title: Codiad v2.5.3 - LFI Vulnerability
Ubuntu 15.04 (Development) – ‘Upstart’ Logrotation Privilege Escalation
Source: http://www.halfdog.net/Security/2015/UpstartLogrotationPrivilegeEscalation/
Foxit Products GIF Conversion – ‘LZWMinimumCodeSize’ Memory Corruption
#####################################################################################
Foxit Products GIF Conversion – ‘DataSubBlock’ Memory Corruption
#####################################################################################
Microsoft Windows – Text Services Memory Corruption (MS15-020)
#####################################################################################
ElasticSearch – Remote Code Execution
#!/bin/python2
CS-Cart 4.2.4 – Cross-Site Request Forgery
# Exploit Title: CS-Cart 4.2.4 CSRF
CodoForum 2.5.1 – Arbitrary File Download
# Exploit Title: Codoforum 2.5.1 Arbitrary File Download
GeniXCMS 0.0.1 – Multiple Vulnerabilities
GeniXCMS v0.0.1 Remote Unauthenticated SQL Injection Exploit
Joomla! Component com_simplephotogallery 1.0 – Arbitrary File Upload
######################################################################
Rowhammer – NaCl Sandbox Escape
Sources:
Sagem F@st 3304-V2 – Telnet Crash (PoC)
# Title : Sagem F@st 3304-V2 Telnet Crash POC
WordPress Plugin Reflex Gallery 3.1.3 – Arbitrary File Upload
# Exploit Title: Wordpress Plugin Reflex Gallery - Arbitrary File Upload
Elastix 2.x – Blind SQL Injection
# Title: Elastix v2.x Blind SQL Injection Vulnerability
ProjectSend r561 – SQL Injection
#Vulnerability title: ProjectSend r561 - SQL injection vulnerability