WordPress Theme Epic – ‘download.php’ Arbitrary File Download
source: https://www.securityfocus.com/bid/69672/info
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 270
WordPress Theme Antioch – ‘download.php’ Arbitrary File Download
source: https://www.securityfocus.com/bid/69673/info
WordPress Plugin Ninja Forms 2.7.7 – Authentication Bypass
source: https://www.securityfocus.com/bid/69740/info
WordPress Plugin WP to Twitter – Authentication Bypass
source: https://www.securityfocus.com/bid/69741/info
WordPress Plugin Xhanch My Twitter – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/69744/info
WordPress Plugin W3 Total Cache – ‘admin.php’ Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/69745/info
Invision Power Board (IP.Board) 3.x – Cross-Site Request Forgery / Token Hjiacking
#Title: IP Board 3.x CSRF - Token hjiacking
LoadedCommerce7 – Systemic Query Factory
Title: LoadedCommerce7 Systemic Query Factory Vulnerability
WordPress Plugin Like Dislike Counter 1.2.3 – SQL Injection
#################################################################################################
PhpOnlineChat 3.0 – Cross-Site Scripting
# Exploit Title: [phponlinechat xss ]
WordPress Plugin Spider Facebook – ‘facebook.php’ SQL Injection
source: https://www.securityfocus.com/bid/69675/info
WordPress Plugin Premium Gallery Manager – Configuration Access
#Exploit Title : Wordpress Plugins Premium Gallery Manager Unauthenticated Configuration Access Vulnerability
MyBB User Social Networks Plugin 1.2 – Persistent Cross-Site Scripting
# Exploit Title: User Social Networks MyBB Plugin 1.2 - Cross Site Scripting
BulletProof FTP Client 2010 – Buffer Overflow (SEH)
# !/usr/bin/python
vBulletin 4.0.x < 4.1.2 - 'search.php?cat' SQL Injection
# vBulletin 4.0.x => 4.1.2 AUTOMATIC SQL Injection exploit
WordPress Plugin Huge-IT Image Gallery 1.0.1 – (Authenticated) SQL Injection
######################
Syslog LogAnalyzer 3.6.5 – Persistent Cross-Site Scripting
Vulnerability title: Syslog LogAnalyzer 3.6.5 Stored XSS
Mozilla Firefox 9.0.1 / Thunderbird 3.1.20 – Information Disclosure
source: https://www.securityfocus.com/bid/69525/info
Mulitple WordPress Themes – ‘admin-ajax.php?img’ Arbitrary File Download
# WordPress CuckooTap Theme & eShop Arbitrary File Download
LeapFTP 3.1.0 – URL Handling Buffer Overflow (SEH)
# Exploit Title: LeapFTP 3.1.0 URL Handling SEH Exploit
Arachni Web Application Scanner Web UI – Persistent Cross-Site Scripting
Title: Arachni Web Application Scanner Web UI Stored XSS Vulnerability
WordPress Plugin Slideshow Gallery 1.4.6 – Arbitrary File Upload
Summary: WordPress Slideshow Gallery plugin version 1.4.6 suffers from a remote shell upload vulnerability.
ManageEngine Desktop Central – Arbitrary File Upload / Remote Code Execution
Arbitrary file upload / remote code execution in ManageEngine Desktop Central / Desktop Central MSP
ManageEngine EventLog Analyzer – Multiple Vulnerabilities (1)
Mogwai Security Advisory MSA-2014-01
HTML Help Workshop 1.4 – Local Buffer Overflow (SEH)
import subprocess
NRPE 2.15 – Remote Code Execution
#!/usr/bin/python
HTML Help Workshop 1.4 – Buffer Overflow (SEH) (PoC)
#----------------------------------------------------------------------------------------------------#
F5 Big-IP – rsync Access
When configured in a high availability mode, the F5 solution suffers from an unauthenticated rsync access vulnerabili...
WordPress Plugin ShortCode 0.2.3 – Local File Inclusion
#################################################################################################
Plogger 1.0-RC1 – (Authenticated) Arbitrary File Upload
#!/usr/bin/env python
ManageEngine DeviceExpert 5.9 – User Credential Disclosure
>> User credential disclosure in ManageEngine DeviceExpert 5.9
ActualAnalyzer Lite 2.81 – Command Execution
###############################
PhpWiki – Remote Command Execution
###############################################################
XRms – Blind SQL Injection / Command Execution
#######################
Microsoft Internet Explorer – Memory Corruption (PoC) (MS14-029)
function stc()
WordPress Plugin WooCommerce Store Exporter 1.7.5 – Multiple Cross-Site Scripting Vulnerabilities
# Exploit Title: WooCommerce Store Exporter v1.7.5 Stored XSS
ntopng 1.2.0 – Cross-Site Scripting Injection
ntopng 1.2.0 XSS injection using monitored network traffic
VTLS Virtua InfoStation.cgi – SQL Injection
=====[Alligator Security Team - Security Advisory]============================
Granding MA300 – Traffic Sniffing Man In The Middle Fingerprint PIN Disclosure
source: https://www.securityfocus.com/bid/69390/info
Granding MA300 – Weak Pin Encryption Brute Force
source: https://www.securityfocus.com/bid/69390/info
Joomla! Component spidervideoplayer – ‘theme’ SQL Injection
source: https://www.securityfocus.com/bid/69422/info
PHP Stock Management System 1.02 – Multiple Persistent Cross-Site Scripting Vulnerabilities
# Exploit Title: Multiple Persistent Cross Site Scripting Vulnerabilities
Innovaphone PBX Admin-GUI – Cross-Site Request Forgery
Title: Innovaphone PBX Admin-GUI CSRF
Air Transfer Iphone 1.3.9 – Multiple Vulnerabilities
# Exploit Title: Air Transfer Iphone v1.3.9 -Remote crash, Broken Authentication file download and Memo Access.
WordPress Plugin KenBurner Slider – ‘admin-ajax.php’ Arbitrary File Download
source: https://www.securityfocus.com/bid/69387/info
LiveWorld Multiple Products – Cross Site Scripting
LiveWorld Cross Site Scripting