Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 274

D-Link Devices – ‘Authentication.cgi’ Remote Buffer Overflow (Metasploit)

##

2014-06-24 Metasploit remote

D-Link Devices – ‘hedwig.cgi’ Remote Buffer Overflow in Cookie Header (Metasploit)

##

2014-06-24 Metasploit remote

Alienvault Open Source SIEM (OSSIM) – av-centerd Command Injection (Metasploit)

##

2014-06-24 Metasploit remote

ZeusCart – ‘prodid’ SQL Injection

source: https://www.securityfocus.com/bid/68182/info

2014-06-24 Kenny Mathis webapps

ZeroCMS 1.0 – ‘zero_transact_article.php’ SQL Injection

ZeroCMS v1.0 SQL Injection Vulnerability (zero_transact_article.php article_id POST parameter)

2014-06-23 Filippos Mastrogiannis webapps

D-Link DSL-2760U-E1 – Persistent Cross-Site Scripting

#!/bin/bash

2014-06-21 Yuval tisf Nativ webapps

Linux Kernel 3.13 – SGID Privilege Escalation

#define _GNU_SOURCE

2014-06-21 Vitaly Nikolenko local

Lunar CMS 3.3 – Cross-Site Request Forgery / Persistent Cross-Site Scripting

CSRF Add Admin

2014-06-21 LiquidWorm webapps

Ericom AccessNow Server – Remote Buffer Overflow (Metasploit)

##

2014-06-19 Metasploit remote

web2Project 3.1 – Multiple Vulnerabilities

Advisory ID: HTB23213

2014-06-19 High-Tech Bridge SA webapps

ZTE WXV10 W300 – Multiple Vulnerabilities

# Exploit Title: ZTE WXV10 W300 Multiple Vulnerabilities

2014-06-18 Osanda Malith Jayathissa webapps

Ubisoft Rayman Legends 1.2.103716 – Remote Stack Buffer Overflow (PoC)

#!/usr/bin/perl

2014-06-18 LiquidWorm dos

Alienvault Open Source SIEM (OSSIM) < 4.7.0 - av-centerd 'get_log_line()' Remote Code Execution

# Exploit Title: AlienVault OSSIM < 4.7.0 av-centerd 'get_log_line()' Remote Code Execution

2014-06-18 Alfredo Ramirez remote

Rocket Servergraph Admin Center – fileRequestor Remote Code Execution (Metasploit)

##

2014-06-18 Metasploit remote

Docker 0.11 – VMM-Container Breakout

#define _GNU_SOURCE

2014-06-18 Sebastian Krahmer local

Cacti Superlinks Plugin 1.4-2 – SQL Injection

$$$$$$\ $$\ $$\ $$$$$$\

2014-06-18 Napsterakos webapps

Java – Debug Wire Protocol Remote Code Execution (Metasploit)

##

2014-06-17 Metasploit remote

Easy File Management Web Server – Remote Stack Buffer Overflow (Metasploit)

##

2014-06-17 Metasploit remote

Adobe Reader for Android < 11.2.0 - 'addJavascriptInterface' Local Overflow (Metasploit)

##

2014-06-17 Metasploit local

Motorola SBG901 Wireless Modem – Cross-Site Request Forgery

Exploit Title : Motorola SBG901 Wireless Modem CSRF Vulnerability

2014-06-17 Blessen Thomas webapps

PostgreSQL 8.4.1 – JOIN Hashtable Size Integer Overflow Denial of Service

source: https://www.securityfocus.com/bid/38619/info

2014-06-13 Bernt Marius Johnsen dos

Plesk 10.4.4/11.0.9 – SSO XML External Entity / Cross-Site Scripting Injection

# Exploit Title: Plesk SSO XXE injection (Old bug) Exploit #

2014-06-13 BLacK ZeRo webapps

ZTE / TP-Link RomPager – Denial of Service

#!/usr/bin/env python

2014-06-13 Osanda Malith Jayathissa dos

Yealink VoIP Phone SIP-T38G – Default Credentials

Title: Yealink VoIP Phone SIP-T38G Default Credentials

2014-06-13 Mr.Un1k0d3r remote

Yealink VoIP Phone SIP-T38G – Local File Inclusion

Title: Yealink VoIP Phone SIP-T38G Local File Inclusion

2014-06-13 Mr.Un1k0d3r webapps

Yealink VoIP Phone SIP-T38G – Remote Command Execution

Title: Yealink VoIP Phone SIP-T38G Remote Command Execution

2014-06-13 Mr.Un1k0d3r remote

Yealink VoIP Phone SIP-T38G – Privilege Escalation

Title: Yealink VoIP Phone SIP-T38G Privileges Escalation

2014-06-13 Mr.Un1k0d3r remote

ZeroCMS 1.0 – ‘zero_transact_user.php’ Handling Privilege Escalation

import sys,getopt,cookielib,urllib2,urllib

2014-06-13 Tiago Carvalho webapps

netKar PRO 1.1 – ‘.nkuser’ File Creation Null Pointer Denial of Service

source: https://www.securityfocus.com/bid/39558/info

2014-06-13 A reliable source dos

Alienvault Open Source SIEM (OSSIM) < 4.8.0 - 'get_file' Information Disclosure (Metasploit)

require 'msf/core'

2014-06-13 James Fitts remote

IBM AIX 6.1.8 – ‘libodm’ Arbitrary File Write

Vulnerability title: Privilege Escalation in IBM AIX

2014-06-12 Portcullis local

Yealink VoIP Phones – ‘/servlet’ HTTP Response Splitting

source: https://www.securityfocus.com/bid/68022/info

2014-06-12 Jesus Oquendo webapps

Core FTP LE 2.2 – Heap Overflow (PoC)

#-----------------------------------------------------------------------------#

2014-06-11 Gabor Seljan dos

SHOUTcast DNAS 2.2.1 – Persistent Cross-Site Scripting

# Exploit Title: SHOUTcast DNAS v2.2.1 win32 XSS\HTML Injection in Song history (other version may be also affected)

2014-06-11 rob222 webapps

ZeroCMS 1.0 – ‘zero_view_article.php’ SQL Injection

ZeroCMS 1.0 (article_id) SQL Injection Vulnerability

2014-06-10 LiquidWorm webapps

WordPress Plugin JW Player for Flash & HTML5 Video – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/67954/info

2014-06-10 Tom Adams webapps

WordPress Plugin Featured Comments – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/67955/info

2014-06-10 Tom Adams webapps

eFront 3.6.14.4 – ‘surname’ Persistent Cross-Site Scripting

# Exploit Title: Persistent Cross Site Scripting Vulnerability in eFront

2014-06-09 shyamkumar somana webapps

WebTitan 4.01 (Build 68) – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20140606-0 >

2014-06-09 SEC Consult webapps

DevExpress ASPxFileManager 10.2 < 13.2.8 - Directory Traversal

Advisory: Directory Traversal in DevExpress ASP.NET File Manager

2014-06-09 RedTeam Pentesting webapps

WordPress Theme Infocus – ‘/infocus/lib/scripts/dl-skin.php’ Local File Disclosure

source: https://www.securityfocus.com/bid/67934/info

2014-06-08 Felipe Andrian Peixoto webapps

WordPress Theme Elegance – ‘/elegance/lib/scripts/dl-skin.php’ Local File Disclosure

source: https://www.securityfocus.com/bid/67935/info

2014-06-08 Felipe Andrian Peixoto webapps

Madness Pro 1.14 – Persistent Cross-Site Scripting

#!/usr/bin/env python2

2014-06-06 bwall webapps

Madness Pro 1.14 – SQL Injection

#!/usr/bin/env python2

2014-06-06 bwall webapps

Foreman Smart-Proxy – Remote Command Injection

source: https://www.securityfocus.com/bid/68117/info

2014-06-05 Lukas Zapletal remote

PHPBTTracker+ 2.2 – SQL Injection

# Exploit Title: PHPBTTracker+ 2.2 SQL Injection

2014-06-03 BackBox Linux Team webapps

NG WifiTransfer Pro 1.1 – Local File Inclusion

Document Title:

2014-06-03 Vulnerability-Lab webapps

Files Desk Pro 1.4 iOS – Local File Inclusion

Document Title:

2014-06-03 Vulnerability-Lab webapps

Privacy Pro 1.2 HZ iOS – Local File Inclusion

Document Title:

2014-06-03 Vulnerability-Lab webapps

TigerCom My Assistant 1.1 iOS – Local File Inclusion

Document Title:

2014-06-03 Vulnerability-Lab webapps