NetIQ Access Manager 4.0 SP1 – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20141218-2 >
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 263
GParted 0.14.1 – OS Command Execution
SEC Consult Vulnerability Lab Security Advisory < 20141218-1 >
Phase Botnet – Blind SQL Injection
import requests
Notepad++ 6.6.9 – Buffer Overflow
#!/usr/bin/python
PsychoStats < 2.2.4 Beta - Cross Site Scripting
PsychoStats Cross Site Scripting
MiniBB 3.1 – Blind SQL Injection
# Exploit Title: miniBB 3.1 Blind SQL Injection
Ettercap 0.8.0 < 0.8.1 - Multiple Denial of Service Vulnerabilities
#Exploit Title: 6 Remote ettercap Dos exploits to 1
ProjectSend r561 – Multiple Vulnerabilities
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Piwigo 2.7.2 – Multiple Vulnerabilities
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
GQ File Manager 0.2.5 – Multiple Vulnerabilities
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Codiad 2.4.3 – Multiple Vulnerabilities
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
CIK Telecom VoIP Router SVG6000RW – Privilege Escalation / Command Execution
####################################################################
CMS Papoo 6.0.0 Rev. 4701 – Persistent Cross-Site Scripting
Advisory: Persistent XSS Vulnerability in CMS Papoo Light v6
GLPI 0.85 – Blind SQL Injection
# Exploit Title: GLPI 0.85 Blind SQL Injection
Soitec SmartEnergy 1.4 – SCADA Login SQL Injection / Authentication Bypass
Soitec SmartEnergy 1.4 SCADA Login SQL Injection Authentication Bypass Exploit
Mediacoder 0.8.33 build 5680 – ‘.m3u’ Buffer Overflow (PoC) (SEH Overwrite)
# Exploit Title: Mediacoder 0.8.33 build 5680 SEH Buffer Overflow Exploit Dos (.m3u)
Mediacoder 0.8.33 build 5680 – ‘.lst’ Buffer Overflow (PoC) (SEH Overwrite)
# Exploit Title: Mediacoder 0.8.33 build 5680 SEH Buffer Overflow Exploit Dos (.lst)
jaangle 0.98i.977 – Denial of Service
# jaangle 0.98i.977 Denial of Service Vulnerability
WordPress Plugin Download Manager 2.7.4 – Remote Code Execution
#!/usr/bin/python
PHPads 213607 – Authentication Bypass / Password Change
PHPads Authentication Bypass Exploit
phpMyAdmin 4.0.x/4.1.x/4.2.x – Denial of Service
=============
ResourceSpace 6.4.5976 – Cross-Site Scripting / SQL Injection / Insecure Cookie Handling
Title: ResourceSpace Multiple Cross Site Scripting, and HTML and SQL
WordPress Plugin WP Symposium 14.11 – Arbitrary File Upload
#!/usr/bin/python
JetAudio 8.1.3 – ‘.mp4’ Crash (PoC)
# Exploit Title : jetAudio 8.1.3 Basic Use-after-free (Corrupted mp4) Crash POC
Winamp 5.666 build 3516 – Corrupted .flv Crash (PoC)
# Exploit Title : Winamp 5.666 build 3516 'f263.w5s' (Corrupted flv) Crash POC
IBM Tivoli Service Automation Manager 7.2.4 – Remote Code Execution
# Exploit Title: IBM Tivoli Service Automation Manager Remote Code Execution
Humhub 0.10.0-rc.1 – SQL Injection
# Exploit Title: Humhub
Humhub 0.10.0-rc.1 – Multiple Persistent Cross-Site Scripting Vulnerabilities
# Exploit Title: Humhub
Apache James Server 2.3.2 – Remote Command Execution
#!/usr/bin/python
OpenEMR 4.1.2(7) – Multiple SQL Injections
Vulnerability title: Multiple Authenticated SQL Injections In OpenEMR
Advantech AdamView 4.30.003 – ‘.gni’ Local Buffer Overflow (SEH)
#!/usr/bin/env ruby
WordPress Plugin Symposium 14.10 – SQL Injection
# Exploit Title: WP Symposium 14.10 SQL Injection
Flat Calendar 1.1 – HTML Injection
#!/usr/bin/perl -w
IceHrm 7.1 – Multiple Vulnerabilities
IceHrm name = $saveFileName;
PBBoard CMS – Persistent Cross-Site Scripting
##############################################################################
Free Article Submissions 1.0 – SQL Injection
# Exploit Title: Free Article Submissions SQL Injection Vulnerability
WordPress Plugin Ajax Store Locator 1.2 – Arbitrary File Download
######################
Offset2lib – Bypassing Full ASLR On 64 bit Linux
-----BEGIN PGP SIGNED MESSAGE-----
PBBoard CMS 3.0.1 – SQL Injection
Vulnerability title: SQL Injection in PBBoard CMS
Microsoft Windows Kerberos – Privilege Escalation (MS14-068)
#!/usr/bin/python
Technicolor DT5130 2.05.C29GV – Multiple Vulnerabilities
Product: Wireless N ADSL 2/2+ Modem Router
Advertise With Pleasure! (AWP) 6.6 – SQL Injection
# Exploit Title: Advertise With Pleasure! (AWP)
WordPress Plugin Google Document Embedder 2.5.16 – ‘mysql_real_escpae_string’ Bypass SQL Injection
Exploit Title : Google Document Embedder 2.5.16 mysql_real_escpae_string bypass SQL Injection