MyAwards MyBB Module – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/69386/info
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 271
MyBB 1.8 Beta 3 – Multiple Vulnerabilities
# Title: MyBB 1.8 Beta 3 - Cross Site Scripting & SQL Injection
BlazeDVD Pro Player 7.0 – ‘.plf’ Local Buffer Overflow (SEH)
# BlazeDVD Pro v7.0 - (.plf) Buffer Overflow SEH
ManageEngine Password Manager Pro / ManageEngine IT360 – SQL Injection
source: https://www.securityfocus.com/bid/69303/info
ArticleFR – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/69307/info
WordPress Plugin WP Content Source Control – ‘download.php’ Directory Traversal
source: https://www.securityfocus.com/bid/69278/info
Tenda A5s Router 3.02.05_CN – Authentication Bypass
-----------------------------------------------------------------------
BlazeDVD Pro Player 7.0 – ‘.plf’ Direct RET Local Stack Buffer Overflow
# BlazeDVD Pro v7.0 - (.plf) Stack Based Buffer Overflow (direct RET) - ALSR/DEP bypass on Win8.1 Pro
WordPress Plugin GB Gallery Slideshow – ‘/wp-admin/admin-ajax.php’ SQL Injection
source: https://www.securityfocus.com/bid/69181/info
PhotoSync Wifi & Bluetooth 1.0 – Local File Inclusion
Document Title:
Easy FTP Pro 4.2 iOS – Command Injection
Document Title:
SHARP MX Series – Denial of Service
# Exploit Title: SHARP MX Series - Denial Of Service
Sky Broadband Router SR101 – Weak WPA-PSK Generation Algorithm
# Exploit Title: Sky Broadband Router Weak algorithm used to generate WPA-PSK Key
VoipSwitch – ‘user.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/69109/info
HybridAuth 2.2.2 – Remote Code Execution
######################################################################
Pro Chat Rooms 8.2.0 – Multiple Vulnerabilities
# Exploit Title: Pro Chat Rooms v8.2.0 - Multiple Vulnerabilities
Feng Office – Persistent Cross-Site Scripting
# Affected software: Feng Office - URL: http://www.fengoffice.com/web/demo.php
WordPress Plugin wpSS – ‘ss_handler.php’ SQL Injection
source: https://www.securityfocus.com/bid/69089/info
Symantec Endpoint Protection 11.x/12.x – Kernel Pool Overflow / Local Privilege Escalation
# Symantec Endpoint Protection 11.x, 12.x - Kernel Pool Overflow
Video WiFi Transfer 1.01 – Directory Traversal
Document Title:
FreeDisk 1.01 iOS – Multiple Vulnerabilities
Document Title:
Barracuda Web Application Firewall – Authentication Bypass
source: https://www.securityfocus.com/bid/69028/info
TP-Link TL-WR740N v4 Router (FW-Ver. 3.16.6 Build 130529 Rel.47286n) – Command Execution
# Exploit Title: TP-Link TL-WR740N v4 router (FW-Ver. 3.16.6 Build 130529 Rel.47286n) arbitrary shell command execution
RaidenTunes – ‘music_out.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42167/info
Sphider Search Engine – Multiple Vulnerabilities
# Exploit Title: Sphider Search Engine - Multiple Vulnerabilities
Status2k Server Monitoring Software – Multiple Vulnerabilities
# Exploit Title: Status2k Multiple Vulnerabilities/0days
TigerCom iFolder+ 1.2 iOS – Multiple Vulnerabilities
Document Title:
ISPConfig 3.0.54p1 – (Authenticated) Admin Privilege Escalation
# Exploit Title: ISPConfig 3 authenticated admin Localroot vulnerability
Photo WiFi Transfer 1.01 – Directory Traversal
Document Title:
ArticleFR 11.06.2014 – ‘data.php’ Privilege Escalation
Advisory ID: HTB23219
D-Link DWR-113 Rev. Ax – Cross-Site Request Forgery / Denial of Service
Exploit Title: Dlink DWR-113 Rev. Ax - CSRF causing Denial of Service
SkaDate Lite 2.0 – Multiple Cross-Site Request Forgery / Persistent Cross-Site Scripting Vulnerabilities
SkaDate Lite 2.0 Multiple XSRF And Persistent XSS Vulnerabilities
SkaDate Lite 2.0 – Remote Code Execution
#!/usr/bin/env python
D-Link AP 3200 – Multiple Vulnerabilities
# Exploit Title: D-Link AP 3200 Multiple Vulnerabilities
WiFi HD 7.3.0 iOS – Multiple Vulnerabilities
Document Title:
Ubiquiti UbiFi / mFi / AirVision – Cross-Site Request Forgery
# Vendor Homepage: (http://www.ubnt.com/)
Sphider Search Engine 1.3.6 – Multiple Vulnerabilities
# Exploit Title: Sphider 1.3.6 or later SQL Injection
Oxwall 1.7.0 – Multiple Cross-Site Request Forgery / HTML Injection Vulnerabilities
Oxwall 1.7.0 Multiple CSRF And Stored XSS Vulnerabilities
Oxwall 1.7.0 – Remote Code Execution
#!/usr/bin/env python
WordPress Plugin Lead Octopus Power – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/68934/info
WordPress Plugin WhyDoWork AdSense – ‘options-general.php’ Cross-Site Request Forgery (Option Manipulation)
source: https://www.securityfocus.com/bid/68954/info