Exploits

Exploit Database - Exploits for Penetration Testers, Researchers, and Ethical Hackers

共24745Exploits
日期 标题 类型 平台 作者
2014-09-20

Fast Image Resizer 098 – Local Crash (PoC)

  • dos
  • windows
  • niko sec
    2014-09-20

    vBulletin 4.x Verify Email Before Registration Plugin – SQL Injection

  • webapps
  • php
  • Dave
    2014-09-20

    M/Monit 3.3.2 – Cross-Site Request Forgery

  • webapps
  • php
  • Dolev Farhi
    2014-09-16

    ZTE ZXDSL-931VII – Configuration Dump

  • webapps
  • hardware
  • L0ukanik0-s S0kniaku0l
    2014-09-16

    Laravel – ‘Hash::make()’ Password Truncation Security

  • remote
  • multiple
  • Pichaya Morimoto
    2014-09-16

    USB&WiFi Flash Drive 1.3 iOS – Code Execution

  • webapps
  • ios
  • Vulnerability-Lab
    2014-09-16

    WordPress Plugin Slideshow Gallery 1.4.6 – Arbitrary File Upload

  • webapps
  • php
  • Claudio Viviani
    2014-09-15

    Aztech Modem Routers – Session Hijacking

  • remote
  • hardware
  • Eric Fajardo
    2014-09-15

    Aztech Routers – ‘/cgi-bin/AZ_Retrain.cgi’ Denial of Service

  • dos
  • hardware
  • Federick Joe P Fajardo
    2014-09-15

    Aztech Modem Routers – Information Disclosure

  • remote
  • hardware
  • Eric Fajardo
    2014-09-15

    CacheGuard-OS 5.7.7 – Cross-Site Request Forgery

  • webapps
  • linux
  • William Costa
    2014-09-15

    SolarWinds Storage Manager – Authentication Bypass (Metasploit)

  • remote
  • java
  • Metasploit
    2014-09-15

    ManageEngine Eventlog Analyzer – Arbitrary File Upload (Metasploit)

  • remote
  • multiple
  • Metasploit
    2014-09-15

    Railo 4.2.1 – Remote File Inclusion (Metasploit)

  • remote
  • multiple
  • Metasploit
    2014-09-15

    Rejetto HTTP File Server (HFS) 2.3.x – Remote Command Execution (1)

  • remote
  • windows
  • Daniele Linguaglossa
    2014-09-15

    Briefcase 4.0 iOS – Code Execution / File Inclusion

  • webapps
  • ios
  • Vulnerability-Lab
    2014-09-15

    ALCASAR 2.8.1 – Remote Code Execution

  • webapps
  • php
  • eF
    2014-09-14

    WordPress Plugin Wordfence Security – Multiple Vulnerabilities

  • webapps
  • php
  • Voxel@Night
    2014-09-13

    Comodo Internet Security – HIPS/Sandbox Escape

  • local
  • windows
  • Joxean Koret
    2014-09-13

    Ammyy Admin 3.5 – Remote Code Execution (Metasploit)

  • remote
  • windows
  • scriptjunkie
    2014-09-12

    Food Order Portal – ‘admin_user_delete.php’ Cross-Site Request Forgery

  • webapps
  • php
  • KnocKout
    2014-09-12

    Joomla! Component com_formmaker 3.4 – SQL Injection

  • webapps
  • php
  • Claudio Viviani
    2014-09-11

    ChatSecure IM 2.2.4 iOS – Persistent Cross-Site Scripting

  • webapps
  • ios
  • Vulnerability-Lab
    2014-09-11

    Photorange 1.0 iOS – Local File Inclusion

  • webapps
  • ios
  • Vulnerability-Lab
    2014-09-11

    Joomla! Component Spider Contacts 1.3.6 – ‘contacts_id’ SQL Injection

  • webapps
  • php
  • Claudio Viviani
    2014-09-11

    OroCRM – Persistent Cross-Site Scripting

  • webapps
  • php
  • Provensec
    2014-09-09

    ALCASAR 2.8 – Remote Code Execution

  • remote
  • linux
  • eF
    2014-09-09

    ManageEngine Desktop Central StatusUpdate – Arbitrary File Upload (Metasploit)

  • remote
  • windows
  • Metasploit
    2014-09-09

    Parallels Plesk Sitebuilder 9.5 – Multiple Vulnerabilities

  • webapps
  • php
  • alieye
    2014-09-09

    WordPress Plugin WP Support Plus Responsive Ticket System 2.0 – Multiple Vulnerabilities

  • webapps
  • php
  • Fikri Fadzil
    2014-09-09

    PHP Stock Management System 1.02 – Multiple Vulnerabilities

  • dos
  • aix
  • jsass
    2014-09-08

    phpMyFAQ 2.8.x – Multiple Vulnerabilities

  • webapps
  • php
  • smash
    2014-09-08

    WordPress Plugin W3 Total Cache – ‘admin.php’ Cross-Site Request Forgery

  • webapps
  • php
  • Voxel@Night
    2014-09-08

    vBulletin 5.1.x – Persistent Cross-Site Scripting

  • webapps
  • php
  • smash
    2014-09-08

    WordPress Plugin Xhanch My Twitter – Cross-Site Request Forgery

  • webapps
  • php
  • Voxel@Night
    2014-09-08

    WordPress Plugin Bulk Delete Users by Email 1.0 – Cross-Site Request Forgery

  • webapps
  • php
  • Fikri Fadzil
    2014-09-08

    WordPress Plugin WP to Twitter – Authentication Bypass

  • webapps
  • php
  • Voxel@Night
    2014-09-08

    WordPress Theme Acento – ‘view-pdf.php?File’ Arbitrary File Download

  • webapps
  • php
  • alieye
    2014-09-08

    WordPress Plugin Ninja Forms 2.7.7 – Authentication Bypass

  • webapps
  • php
  • Voxel@Night
    2014-09-08

    Joomla! Component Spider Calendar 3.2.6 – SQL Injection

  • webapps
  • php
  • Claudio Viviani
    2014-09-08

    WordPress Theme Antioch – ‘download.php’ Arbitrary File Download

  • webapps
  • php
  • Ashiyane Digital Security Team
    2014-09-08

    WordPress Theme Epic – ‘download.php’ Arbitrary File Download

  • webapps
  • php
  • Ashiyane Digital Security Team
    2014-09-08

    WordPress Theme Authentic – ‘download.php’ Arbitrary File Download

  • webapps
  • php
  • Ashiyane Digital Security Team
    2014-09-08

    WordPress Theme Urban City – ‘download.php’ Arbitrary File Download

  • webapps
  • php
  • Ashiyane Digital Security Team
    2014-09-08

    Jenkins 1.578 – Multiple Vulnerabilities

  • webapps
  • multiple
  • JoeV
    2014-09-08

    Mpay24 PrestaShop Payment Module 1.5 – Multiple Vulnerabilities

  • webapps
  • php
  • Wireghoul
    2014-09-08

    Atmail Webmail 7.2 – Multiple Vulnerabilities

  • webapps
  • php
  • smash
    2014-09-08

    TP-Link TL-WR841N / TL-WR841ND – Multiple Vulnerabilities

  • webapps
  • hardware
  • smash
    2014-09-08

    TP-Link TL-WR340G / TL-WR340GD – Multiple Vulnerabilities

  • webapps
  • hardware
  • smash
    2014-09-08

    osCommerce 2.3.4 – Multiple Vulnerabilities

  • webapps
  • php
  • smash