Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 269

webEdition 6.3.8.0 (SVN-Revision: 6985) – Directory Traversal

Advisory ID: HTB23227

2014-09-24 High-Tech Bridge SA webapps

LittleSite 0.1 – ‘index.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/43495/info

2014-09-23 Eolas_Gadai webapps

M/Monit 3.3.2 – Cross-Site Request Forgery

Vulnerability title: M/Monit CSRF Author: Dolev Farhi Contact: dolevf at

2014-09-20 Dolev Farhi webapps

vBulletin 4.x Verify Email Before Registration Plugin – SQL Injection

#Title: vBulletin Verify Email Before Registration Plugin - SQL Injection

2014-09-20 Dave webapps

Fast Image Resizer 098 – Local Crash (PoC)

#!/usr/bin/perl

2014-09-20 niko sec dos

Livefyre LiveComments Plugin – Persistent Cross-Site Scripting

Title : Stored XSS in Livefyre LiveComments Plugin

2014-09-20 Brij Kishore Mishra webapps

ClassApps SelectSurvey.net – Multiple SQL Injections

##########

2014-09-20 BillV-Lists webapps

Seafile-server 3.1.5 – Remote Denial of Service

# Exploit Title: ccnet-server remote DoS (assert) seafile-server

2014-09-20 nop nop dos

ZTE ZXDSL-931VII – Configuration Dump

# Exploit Title: ZTE ZXDSL-931VII Unauthenticated Configuration Dump

2014-09-16 L0ukanik0-s S0kniaku0l webapps

WordPress Plugin Slideshow Gallery 1.4.6 – Arbitrary File Upload

#!/usr/bin/env python

2014-09-16 Claudio Viviani webapps

USB&WiFi Flash Drive 1.3 iOS – Code Execution

Document Title:

2014-09-16 Vulnerability-Lab webapps

Laravel – ‘Hash::make()’ Password Truncation Security

source: https://www.securityfocus.com/bid/69849/info

2014-09-16 Pichaya Morimoto remote

ALCASAR 2.8.1 – Remote Code Execution

#!/usr/bin/env python

2014-09-15 eF webapps

Briefcase 4.0 iOS – Code Execution / File Inclusion

Document Title:

2014-09-15 Vulnerability-Lab webapps

Rejetto HTTP File Server (HFS) 2.3.x – Remote Command Execution (1)

# Exploit Title: HttpFileServer 2.3.x Remote Command Execution

2014-09-15 Daniele Linguaglossa remote

Railo 4.2.1 – Remote File Inclusion (Metasploit)

##

2014-09-15 Metasploit remote

ManageEngine Eventlog Analyzer – Arbitrary File Upload (Metasploit)

##

2014-09-15 Metasploit remote

SolarWinds Storage Manager – Authentication Bypass (Metasploit)

##

2014-09-15 Metasploit remote

CacheGuard-OS 5.7.7 – Cross-Site Request Forgery

I. VULNERABILITY

2014-09-15 William Costa webapps

Aztech Modem Routers – Information Disclosure

source: https://www.securityfocus.com/bid/69808/info

2014-09-15 Eric Fajardo remote

Aztech Routers – ‘/cgi-bin/AZ_Retrain.cgi’ Denial of Service

source: https://www.securityfocus.com/bid/69809/info

2014-09-15 Federick Joe P Fajardo dos

Aztech Modem Routers – Session Hijacking

source: https://www.securityfocus.com/bid/69811/info

2014-09-15 Eric Fajardo remote

WordPress Plugin Wordfence Security – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/69815/info

2014-09-14 Voxel@Night webapps

Ammyy Admin 3.5 – Remote Code Execution (Metasploit)

Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34647.zip (aa0day.zip)

2014-09-13 scriptjunkie remote

Comodo Internet Security – HIPS/Sandbox Escape

Exploit: http://www.joxeankoret.com/download/comodo_sandbox_escape/sandbox_test1.tar.gz

2014-09-13 Joxean Koret local

Joomla! Component com_formmaker 3.4 – SQL Injection

######################

2014-09-12 Claudio Viviani webapps

Food Order Portal – ‘admin_user_delete.php’ Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/69787/info

2014-09-12 KnocKout webapps

OroCRM – Persistent Cross-Site Scripting

# Affected software: OroCRM is an easy-to-use, open source CRM with built in marketing automation tools for your comm...

2014-09-11 Provensec webapps

Joomla! Component Spider Contacts 1.3.6 – ‘contacts_id’ SQL Injection

#!/usr/bin/env python

2014-09-11 Claudio Viviani webapps

Photorange 1.0 iOS – Local File Inclusion

Document Title:

2014-09-11 Vulnerability-Lab webapps

ChatSecure IM 2.2.4 iOS – Persistent Cross-Site Scripting

Document Title:

2014-09-11 Vulnerability-Lab webapps

PHP Stock Management System 1.02 – Multiple Vulnerabilities

# Exploit Title: PHP Stock Management System 1.02 - Multiple Vulnerabilty

2014-09-09 jsass dos

WordPress Plugin WP Support Plus Responsive Ticket System 2.0 – Multiple Vulnerabilities

# Exploit Title: Wordpress WP Support Plus Responsive Ticket System 2.0

2014-09-09 Fikri Fadzil webapps

Parallels Plesk Sitebuilder 9.5 – Multiple Vulnerabilities

#+++++++++++++++++++++++++++++++++++++++++++++++++++++++++

2014-09-09 alieye webapps

ManageEngine Desktop Central StatusUpdate – Arbitrary File Upload (Metasploit)

##

2014-09-09 Metasploit remote

ALCASAR 2.8 – Remote Code Execution

#!/usr/bin/env python

2014-09-09 eF remote

Joomla! Component Spider Calendar 3.2.6 – SQL Injection

#!/usr/bin/env python

2014-09-08 Claudio Viviani webapps

WordPress Theme Acento – ‘view-pdf.php?File’ Arbitrary File Download

#+++++++++++++++++++++++++++++++++++++++++++++++++++++++++

2014-09-08 alieye webapps

WordPress Plugin Bulk Delete Users by Email 1.0 – Cross-Site Request Forgery

# Exploit Title: Bulk Delete Users by Email, Wordpress Plugin 1.0 - CSRF

2014-09-08 Fikri Fadzil webapps

vBulletin 5.1.x – Persistent Cross-Site Scripting

#Title: vBulletin 5.1.X - Cross Site Scripting

2014-09-08 smash webapps

phpMyFAQ 2.8.x – Multiple Vulnerabilities

#Title: phpMyFAQ 2.8.X - Multiple Vulnerabilities

2014-09-08 smash webapps

Zen Cart 1.5.3 – Multiple Vulnerabilities

#Title: Zen Cart 1.5.3 - CSRF & Admin Panel XSS

2014-09-08 smash webapps

osCommerce 2.3.4 – Multiple Vulnerabilities

#Title: osCommerce 2.3.4 - Multiple vulnerabilities

2014-09-08 smash webapps

TP-Link TL-WR340G / TL-WR340GD – Multiple Vulnerabilities

#Title: TP-LINK Model No. TL-WR340G/TL-WR340GD - Multiple Vulnerabilities

2014-09-08 smash webapps

TP-Link TL-WR841N / TL-WR841ND – Multiple Vulnerabilities

#Title: TP-LINK Model No. TL-WR841N / TL-WR841ND - Multiple Vulnerabilities

2014-09-08 smash webapps

Atmail Webmail 7.2 – Multiple Vulnerabilities

#Title: Atmail Webmail =>7.2 - Multiple XSS & FPD

2014-09-08 smash webapps

Mpay24 PrestaShop Payment Module 1.5 – Multiple Vulnerabilities

Mpay24 PrestaShop Payment Module Multiple Vulnerabilities

2014-09-08 Wireghoul webapps

Jenkins 1.578 – Multiple Vulnerabilities

#Affected Vendor: http://jenkins-ci.org/

2014-09-08 JoeV webapps

WordPress Theme Urban City – ‘download.php’ Arbitrary File Download

source: https://www.securityfocus.com/bid/69670/info

2014-09-08 Ashiyane Digital Security Team webapps

WordPress Theme Authentic – ‘download.php’ Arbitrary File Download

source: https://www.securityfocus.com/bid/69671/info

2014-09-08 Ashiyane Digital Security Team webapps