Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 272

CMSimple – Default Administrator Credentials

source: https://www.securityfocus.com/bid/68961/info

2014-07-28 Govind Singh webapps

CMSimple 4.4.4 – Remote File Inclusion

source: https://www.securityfocus.com/bid/68961/info

2014-07-28 Govind Singh webapps

CMSimple 4.4.4 – ‘color’ Remote Code Execution

source: https://www.securityfocus.com/bid/68961/info

2014-07-28 Govind Singh webapps

WordPress Plugin FB Gorilla – ‘game_play.php’ SQL Injection

source: https://www.securityfocus.com/bid/69222/info

2014-07-28 Amirh03in webapps

Moodle 2.7 – Persistent Cross-Site Scripting

Title: Moodle 2.7 Persistent XSS

2014-07-27 Osanda Malith Jayathissa webapps

ZeroCMS 1.0 – Persistent Cross-Site Scripting

######################

2014-07-27 Mayuresh Dani webapps

Sagem Fast 3304-V1 – Denial of Service

# Title : Sagem F@st 3304-V1 denial of service Vulnerability

2014-07-27 Z3ro0ne dos

DirPHP 1.0 – Local File Inclusion

# Exploit Title: DirPHP - version 1.0 Local File Inclusion

2014-07-27 black hat webapps

Zenoss Monitoring System 4.2.5-2108 (x64) – Persistent Cross-Site Scripting

# Exploit Title: Stored XSS vulnerability in Zenoss core open source monitoring system

2014-07-25 Dolev Farhi webapps

Microsoft Windows XP SP3 – ‘MQAC.sys’ Arbitrary Write Privilege Escalation (Metasploit)

##

2014-07-25 Metasploit local

Pligg CMS 2.0.1 – Multiple Vulnerabilities

#!/usr/bin/python

2014-07-25 BlackHawk webapps

Omeka 2.2.1 – Remote Code Execution

#!/usr/bin/env python

2014-07-24 LiquidWorm remote

WordPress Plugin Video Gallery 2.5 – Multiple Vulnerabilities

Wordpress Video Gallery

2014-07-24 Claudio Viviani webapps

BulletProof FTP Client 2010 – Buffer Overflow (SEH) (PoC)

#-----------------------------------------------------------------------------#

2014-07-24 Gabor Seljan dos

Lian Li NAS – Multiple Vulnerabilities

# Exploit Title: Lian Li NAS Multiple vulnerabilities

2014-07-24 pws webapps

Make 3.81 – Heap Overflow (PoC)

=for comment

2014-07-24 HyP dos

Barracuda Networks #35 Web Firewall 610 6.0.1 – Filter Bypass / Persistent

Document Title:

2014-07-23 Vulnerability-Lab webapps

Netgear DGN2200 1.0.0.29_1.7.29_HotS – Password Disclosure

# Exploit Title: Password Disclosure vulnerability

2014-07-23 Dolev Farhi webapps

Ilya Birman E2 – ‘/@actions/comment-process’ SQL Injection

source: https://www.securityfocus.com/bid/68843/info

2014-07-23 High-Tech Bridge webapps

Ubiquiti Networks UniFi Video Default – ‘crossdomain.xml’ Security Bypass

source: https://www.securityfocus.com/bid/68866/info

2014-07-23 Seth Art webapps

DjVuLibre 3.5.25.3 – Out of Bounds Access Violation

from shutil import copyfile

2014-07-22 drone dos

MTS MBlaze Ultra Wi-Fi / ZTE AC3633 – Multiple Vulnerabilities

#Author: Ajin Abraham - xboz

2014-07-21 Ajin Abraham webapps

World Of Warcraft 3.3.5a – ‘macros-cache.txt’ Stack Overflow

# Exploit Title: World Of Warcraft 3.3.5a Stack Overflow (macros-cache.txt)

2014-07-21 Alireza Chegini dos

Raritan PowerIQ 4.1.0 – SQL Injection (Metasploit)

=begin

2014-07-21 Brandon Perry webapps

Microsoft Windows XP SP3 – ‘BthPan.sys’ Arbitrary Write Privilege Escalation

"""

2014-07-21 KoreLogic local

IBM GCM16/32 1.20.0.22575 – Multiple Vulnerabilities

The IBM 1754 GCM family provides KVM over IP and serial console management

2014-07-21 Alejandro Alvarez Bravo remote

Apache 2.4.7 mod_status – Scoreboard Handling Race Condition

--[ 0. Sparse summary

2014-07-21 Marek Kroemeke dos

Linux Kernel < 3.2.0-23 (Ubuntu 12.04 x64) - 'ptrace/sysret' Local Privilege Escalation

#include

2014-07-21 Vitaly Nikolenko local

WordPress Plugin WP BackupPlus – Database and Files Backup Download

# Exploit Title: Wordpress wpbackupplus Database and files Backup download (0-day)

2014-07-20 pSyCh0_3D webapps

Microsoft Windows XP SP3 – ‘MQAC.sys’ Arbitrary Write Privilege Escalation

Title: Microsoft XP SP3 MQAC.sys Arbitrary Write Privilege Escalation

2014-07-19 KoreLogic local

ACME micro_httpd – Denial of Service

"""

2014-07-18 Yuval tisf Nativ dos

Barracuda Networks Message Archiver 650 – Persistent Cross-Site Scripting

Document Title:

2014-07-18 Vulnerability-Lab webapps

WordPress Plugin Gallery Objects 0.4 – SQL Injection

######################

2014-07-18 Claudio Viviani webapps

Omeka 2.2 – Cross-Site Request Forgery / Persistent Cross-Site Scripting

Omeka 2.2 CSRF And Stored XSS Vulnerability

2014-07-17 LiquidWorm webapps