Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 276

HP Release Control – (Authenticated) XML External Entity (Metasploit)

##

2014-05-19 Brandon Perry webapps

XOOPS Glossaire Module – ‘/modules/glossaire/glossaire-aff.php’ SQL Injection

source: https://www.securityfocus.com/bid/67460/info

2014-05-19 AtT4CKxT3rR0r1ST webapps

Softmatica SMART iPBX – Multiple SQL Injections

source: https://www.securityfocus.com/bid/67465/info

2014-05-19 AtT4CKxT3rR0r1ST webapps

WordPress Plugin NextGEN Gallery 1.9.1 – ‘photocrati_ajax’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/68414/info

2014-05-19 SANTHO webapps

Wiser Backup – Information Disclosure

source: https://www.securityfocus.com/bid/67481/info

2014-05-19 AtT4CKxT3rR0r1ST webapps

WordPress Plugin cnhk-Slideshow – Arbitrary File Upload

source: https://www.securityfocus.com/bid/67469/info

2014-05-18 Ashiyane Digital Security Team webapps

Wireshark 1.10.7 – Denial of Service (PoC)

#!/usr/bin/python

2014-05-16 Osanda Malith Jayathissa dos

Mozilla Firefox 29.0 – Null Pointer Dereference

Mozilla Firefox Null Pointer Dereference Vulnerability

2014-05-16 Mr.XHat dos

Nagios Plugins check_dhcp 2.0.1 – Arbitrary Option File Read

=============================================

2014-05-16 Dawid Golunski local

eGroupWare 1.8.006 – Multiple Vulnerabilities

Advisory ID: HTB23212

2014-05-16 High-Tech Bridge SA webapps

Winamp – ‘.flv’ File Processing Memory Corruption

source: https://www.securityfocus.com/bid/67429/info

2014-05-16 Aryan Bayaninejad dos

Intel Indeo – Video Memory Corruption

source: https://www.securityfocus.com/bid/67431/info

2014-05-16 Aryan Bayaninejad dos

RealPlayer – ‘.3gp’ File Processing Memory Corruption

source: https://www.securityfocus.com/bid/67434/info

2014-05-16 Aryan Bayaninejad dos

ALLPlayer – ‘.wav’ File Processing Memory Corruption

source: https://www.securityfocus.com/bid/67436/info

2014-05-16 Aryan Bayaninejad dos

CIS Manager – ’email’ SQL Injection

source: https://www.securityfocus.com/bid/67442/info

2014-05-16 Edge webapps

ElasticSearch – Remote Code Execution

Toggle navigation

2014-05-15 Jeff Geiger webapps

UPS Web/SNMP-Manager CS121 – Authentication Bypass

source: https://www.securityfocus.com/bid/67438/info

2014-05-15 jkmac remote

Seo Panel – ‘file’ Directory Traversal

source: https://www.securityfocus.com/bid/67911/info

2014-05-15 Eric Sesterhenn webapps

TFTPD32 4.5 / TFTPD64 4.5 – Denial of Service (PoC)

# Exploit Title: TFTPD32 4.5 / TFTPD64 4.5 DoS poc

2014-05-14 Martinez FrostCard dos

Easy File Sharing Web Server 6.8 – Remote Stack Buffer Overflow

# Exploit Title: Easy File Sharing Web Server 6.8 stack buffer overflow

2014-05-14 superkojiman remote

Broadcom PIPA C211 – Sensitive Information Disclosure

Vulnerability title: Unauthenticated Credential And Configuration

2014-05-14 Portcullis webapps

TFTPD32 / Tftpd64 – Denial of Service

source: https://www.securityfocus.com/bid/67404/info

2014-05-14 j0s3h4x0r dos

Alienvault Open Source SIEM (OSSIM) 4.6.1 – (Authenticated) SQL Injection (Metasploit)

Exploit Title: AlienVault newpolicyform.php SQLi

2014-05-12 Chris Hebert webapps

EFS Easy Chat Server 3.1 – Remote Stack Buffer Overflow

## Exploit-DB Note: The offset to SEH is influenced by the installation path of the program.

2014-05-12 superkojiman remote

Skybox Security 6.3.x < 6.4.x - Multiple Information Disclosures

# Exploit Title: [SKYBOX Security – Multiple

2014-05-12 Luigi Vezzoso webapps

Skybox Security 6.3.x < 6.4.x - Multiple Denial of Service Vulnerabilities

# Exploit Title: [SKYBOX Security - DDOS]

2014-05-12 Luigi Vezzoso dos

SpiceWorks 7.2.00174 – Persistent Cross-Site Scripting

# Exploit Title: Multiple Stored XSS vulnerabilities in SpiceWorks Ticketing system

2014-05-12 Dolev Farhi webapps

Yokogawa CS3000 – ‘BKESimmgr.exe’ Remote Buffer Overflow (Metasploit)

##

2014-05-12 Metasploit remote

JetAudio 8.1.1 – ‘.ogg’ Crash (PoC)

'''

2014-05-12 Aryan Bayaninejad dos

Adobe Flash Player – Shader Buffer Overflow (Metasploit)

##

2014-05-12 Metasploit remote

VM Turbo Operations Manager 4.5x – Directory Traversal

Product: VM Turbo Operations Manager

2014-05-12 Jamal Pecou webapps

GOM Player 2.2.57.5189 – ‘.ogg’ Crash (PoC)

'''

2014-05-12 Aryan Bayaninejad dos

VideoLAN VLC Media Player 2.1.3 – ‘.wav’ File Memory Corruption

source: https://www.securityfocus.com/bid/67315/info

2014-05-09 Aryan Bayaninejad dos

OpenFiler 2.99.1 – Arbitrary Code Execution

# Exploit Title: Arbitrary Code Execution in Openfiler

2014-05-08 Dolev Farhi webapps

OpenFiler 2.99.1 – Multiple Persistent Cross-Site Scripting Vulnerabilities

# Exploit Title: Multiple persistent XSS in Openfiler

2014-05-08 Dolev Farhi webapps

Collabtive 1.2 – SQL Injection

Vulnerability title: SQL Injection / SQL Error message in Collabtive

2014-05-08 Deepak Rathore webapps

Collabtive 1.2 – Persistent Cross-Site Scripting

Vulnerability title: Stored XSS vulnerability in Collabtive application

2014-05-08 Deepak Rathore webapps

Python – Interpreter Heap Memory Corruption (PoC)

# Title: Python Interpreter Heap Memory Corruption

2014-05-08 Debasish Mandal dos

Cobbler 2.4.x < 2.6.x - Local File Inclusion

# Exploit Title: Local File Inclusion vulnerability in cobbler

2014-05-08 Dolev Farhi webapps

TOA – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/67291/info

2014-05-08 High-Tech Bridge webapps

CMS Touch – ‘pages.php?Page_ID’ SQL Injection

source: https://www.securityfocus.com/bid/67377/info

2014-05-08 indoushka webapps

CMS Touch – ‘news.php?News_ID’ SQL Injection

source: https://www.securityfocus.com/bid/67377/info

2014-05-08 indoushka webapps

Foscam IP Camera – Predictable Credentials Security Bypass

// source: https://www.securityfocus.com/bid/67510/info

2014-05-08 Sergey Shekyan remote

Caldera – ‘/costview2/jobs.php?tr’ SQL Injection

source: https://www.securityfocus.com/bid/67256/info

2014-05-07 Thomas Fischer webapps

Caldera – ‘/costview2/printers.php?tr’ SQL Injection

source: https://www.securityfocus.com/bid/67256/info

2014-05-07 Thomas Fischer webapps

Adobe Flash Player – Integer Underflow Remote Code Execution (Metasploit)

##

2014-05-06 Metasploit remote

Microsoft Windows – NTUserMessageCall Win32k Kernel Pool Overflow ‘schlamperei.x86.dll’ (MS13-053) (Metasploit)

##

2014-05-06 Metasploit local

TeamHelpdesk Customer Web Service (CWS) 8.3.5 & Technician Web Access (TWA) 8.3.5 – Remote User Credential Dump

# Exploit Title: Team Helpdesk Customer Web Service (CWS) Remote User Credential Dump exploit

2014-05-05 bhamb webapps

PrestaShop – ‘getSimilarManufacturer.php?id_manufacturer’ SQL Injection

source: https://www.securityfocus.com/bid/67249/info

2014-05-05 indoushka webapps

AssistMyTeam Team Helpdesk – Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/67271/info

2014-05-05 bhamb remote