Exploits

Exploit Database - Exploits for Penetration Testers, Researchers, and Ethical Hackers

共24745Exploits
日期 标题 类型 平台 作者
2014-02-17

Joomla! Component com_wire_immogest – ‘index.php’ SQL Injection

  • webapps
  • php
  • MR.XpR
    2014-02-17

    i-doit Pro – ‘objID’ SQL Injection

  • webapps
  • php
  • Stephan Rickauer
    2014-02-16

    Office Assistant Pro 2.2.2 iOS – Local File Inclusion

  • webapps
  • ios
  • Vulnerability-Lab
    2014-02-16

    Trendchip HG520 ADSL2+ Wireless Modem – Cross-Site Request Forgery

  • webapps
  • hardware
  • Dhruv Shah
    2014-02-16

    HP Data Protector – ‘EXEC_BAR’ Remote Command Execution

  • remote
  • windows
  • Chris Graham
    2014-02-16

    ImageMagick 6.8.8-4 – Local Buffer Overflow (SEH)

  • local
  • windows
  • Mike Czumak
    2014-02-16

    Dexter (CasinoLoader) Panel – SQL Injection

  • webapps
  • multiple
  • bwall
    2014-02-16

    Linksys E-series – Remote Code Execution

  • remote
  • hardware
  • Rew
    2014-02-16

    Dexter (CasinoLoader) – SQL Injection (Metasploit)

  • remote
  • php
  • Metasploit
    2014-02-16

    Eudora Qualcomm WorldMail 9.0.333.0 – IMAPd Service UID Buffer Overflow

  • remote
  • windows
  • Muhammad Alharmeel
    2014-02-16

    File Hub 1.9.1 iOS – Multiple Vulnerabilities

  • webapps
  • ios
  • Vulnerability-Lab
    2014-02-16

    mbDriveHD 1.0.7 iOS – Multiple Vulnerabilities

  • webapps
  • ios
  • Vulnerability-Lab
    2014-02-13

    CA 2E Web Option 8.1.2 – Authentication Bypass

  • webapps
  • multiple
  • Mike Emery
    2014-02-13

    Easy CD-DA Recorder – ‘.pls’ Local Buffer Overflow (Metasploit)

  • local
  • windows
  • Metasploit
    2014-02-12

    Rhino – Cross-Site Scripting / Password Reset

  • webapps
  • php
  • Slotleet
    2014-02-12

    MyBB 1.6.12 – ‘misc.php’ Remote Denial of Service

  • dos
  • php
  • Amir
    2014-02-12

    jDisk (stickto) 2.0.3 iOS – Multiple Vulnerabilities

  • webapps
  • ios
  • Vulnerability-Lab
    2014-02-12

    Netgear DGN2200 N300 Wireless Router – Multiple Vulnerabilities

  • webapps
  • hardware
  • Andrew Horton
    2014-02-12

    Apache Commons FileUpload and Apache Tomcat – Denial of Service

  • dos
  • multiple
  • Trustwave's SpiderLabs
    2014-02-11

    Linux Kernel < 3.4.5 (Android 4.2.2/4.4 ARM) - Local Privilege Escalation

  • local
  • arm
  • Piotr Szerman
    2014-02-11

    WordPress Plugin BuddyPress 1.9.1 – Privilege Escalation

  • webapps
  • php
  • Pietro Oliva
    2014-02-11

    WiFi Camera Roll 1.2 iOS – Multiple Vulnerabilities

  • webapps
  • ios
  • Vulnerability-Lab
    2014-02-11

    WordPress Plugin Frontend Upload – Arbitrary File Upload

  • webapps
  • php
  • Daniel Godoy
    2014-02-11

    D-Link DSL-2750B ADSL Route’ – Cross-Site Request Forgery

  • webapps
  • hardware
  • killall-9
    2014-02-11

    phpBB 3.0.8 – Remote Denial of Service

  • dos
  • php
  • Amir
    2014-02-11

    Tableau Server < 8.0.7 / < 8.1.2 - Blind SQL Injection

  • webapps
  • windows
  • Trustwave's SpiderLabs
    2014-02-11

    Titan FTP Server 10.32 Build 1816 – Directory Traversal

  • webapps
  • windows
  • Fara Rustein
    2014-02-11

    Kloxo – SQL Injection / Remote Code Execution (Metasploit)

  • remote
  • unix
  • Metasploit
    2014-02-11

    Microsoft Windows – TrackPopupMenuEx Win32k NULL Page (MS13-081) (Metasploit)

  • local
  • windows
  • Metasploit
    2014-02-11

    KingScada – kxClientDownload.ocx ActiveX Remote Code Execution (Metasploit)

  • remote
  • windows
  • Metasploit
    2014-02-09

    ZTE ZXV10 W300 Router – Hard-Coded Credentials

  • webapps
  • hardware
  • Cesar Neira
    2014-02-09

    MyBB Extended Useradmininfo Plugin 1.2.1 – Cross-Site Scripting

  • webapps
  • php
  • Fikri Fadzil
    2014-02-08

    Publish-It 3.6d – ‘.pui’ Local Buffer Overflow (SEH)

  • local
  • windows
  • Muhamad Fadzil Ramli
    2014-02-08

    OneHTTPD 0.8 – Crash (PoC)

  • dos
  • windows
  • Mahmod Mahajna (Mahy)
    2014-02-07

    doorGets CMS 5.2 – SQL Injection

  • webapps
  • php
  • High-Tech Bridge SA
    2014-02-07

    Pandora Fms – Remote Code Execution (Metasploit)

  • remote
  • linux
  • Metasploit
    2014-02-07

    Android Browser and WebView addJavascriptInterface – Code Execution (Metasploit)

  • remote
  • hardware
  • Metasploit
    2014-02-07

    CTERA 3.2.29.0/3.2.42.0 – Persistent Cross-Site Scripting

  • webapps
  • php
  • Luigi Vezzoso
    2014-02-07

    S9Y Serendipity 1.7.5 – ‘Backend’ Multiple Vulnerabilities

  • webapps
  • php
  • Stefan Schurtz
    2014-02-07

    osCommerce 2.3.3.4 – ‘geo_zones.php?zID’ SQL Injection

  • webapps
  • php
  • Ahmed Aboul-Ela
    2014-02-07

    WHMCompleteSolution (WHMCS) 5.12 – ‘cart.php’ Denial of Service

  • dos
  • php
  • Amir
    2014-02-07

    AuraCMS 2.3 – Multiple Vulnerabilities

  • webapps
  • php
  • High-Tech Bridge SA
    2014-02-06

    Publish-It 3.6d – Buffer Overflow

  • dos
  • windows
  • Core Security
    2014-02-06

    Asseco SEE iBank FX Client 2.0.9.3 – Local Privilege Escalation

  • local
  • windows
  • LiquidWorm
    2014-02-06

    Joomla! 3.2.1 – SQL Injection

  • webapps
  • php
  • killall-9
    2014-02-06

    PHP Webcam Video Conference – Multiple Vulnerabilities

  • webapps
  • php
  • vinicius777
    2014-02-05

    ownCloud 6.0.0a – Multiple Vulnerabilities

  • webapps
  • php
  • absane
    2014-02-05

    Plogger 1.0 (RC1) – Multiple Vulnerabilities

  • webapps
  • php
  • killall-9
    2014-02-05

    D-Link DIR-100 – Multiple Vulnerabilities

  • webapps
  • hardware
  • Felix Richter
    2014-02-05

    WordPress Theme Dandelion – Arbitrary File Upload

  • webapps
  • php
  • TheBlackMonster