Haihaisoft Universal Player 1.5.8 – ‘.m3u’ / ‘.pls ‘/ ‘.asx’ Buffer Overflow (SEH)
#-----------------------------------------------------------------------------#
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 280
qEngine 4.1.6/6.0.0 – ‘task.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/66401/info
Microsoft Windows Media Player 11.0.5721.5230 – Memory Corruption (PoC)
#!/usr/bin/python
jetVideo 8.1.1 – Basic ‘.wav’ Local Crash (PoC)
#!/usr/bin/python
BigDump 0.35b – Arbitrary File Upload
[+] Arbitrary Upload on BigDump v0.35b
Light Audio Player 1.0.14 – Memory Corruption (PoC)
#!/usr/bin/python
GOM Media Player (GOMMP) 2.2.56.5183 – Memory Corruption (PoC)
#!/usr/bin/python
GOM Video Converter 1.1.0.60 – ‘.wav’ Memory Corruption (PoC)
#!/usr/bin/python
Symphony 2.2.4 – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/66536/info
WordPress Theme Felici – ‘Uploadify.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/66490/info
Immunity Debugger 1.85 – Stack Overflow (PoC)
# Exploit Title: [title]
LifeSize UVC 1.2.6 – (Authenticated) Remote Code Execution
LifeSize UVC 1.2.6 authenticated vulnerabilities
innoEDIT – ‘innoedit.cgi’ Remote Command Execution
source: https://www.securityfocus.com/bid/66367/info
OXID eShop < 4.7.11/5.0.11 / < 4.8.4/5.1.4 - Multiple Vulnerabilities
# Exploit Title: OXID eShop v
Wireless Drive 1.1.0 iOS – Multiple Web Vulnerabilities
Document Title:
D-Link DIR-600L AX 1.00 – Cross-Site Request Forgery
####################################################################################
Kaspersky Internet Security – Remote Denial of Service
source: https://www.securityfocus.com/bid/66343/info
MP3Info 0.8.5a – Local Buffer Overflow (SEH)
# Exploit Title: mp3info SEH exploit
SePortal 2.5 – SQL Injection (2)
####################################################################
McAfee Asset Manager 6.6 – Multiple Vulnerabilities
Cloud SSO is vuln to unauthed XSS in the authentication audit form:
Quantum vmPRO 3.1.2 – Local Privilege Escalation
-----------
Quantum DXi V1000 2.2.1 – Static SSH Key
-----------
GNUBoard 4.3x – ‘ajax.autosave.php’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/66228/info
BigACE 2.7.5 – ‘LANGUAGE’ Directory Traversal
source: https://www.securityfocus.com/bid/66350/info
OpenSupports 2.x – Authentication Bypass / Cross-Site Request Forgery
[+] Author: TUNISIAN CYBER
OpenSupports 2.0 – Blind SQL Injection
Open Support Blind SQL Injection v2.0 Vulnerability
Joomla! Component AJAX Shoutbox 1.6 – SQL Injection
###################################################################################
Free Download Manager – Stack Buffer Overflow
RCE Security Advisory
iOS 7 – Kernel Mode Memory Corruption
~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.
osCMax 2.5 – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/66272/info
Church Edit – Blind SQL Injection
Exploit Title: Church Edit Blind SQL Injection
OpenX 2.8.x – Multiple Cross-Site Request Forgery Vulnerabilities
source: https://www.securityfocus.com/bid/66251/info
MicroP 0.1.1.1600 – ‘.mppl’ Local Stack Buffer Overflow
#!/usr/bin/env ruby
Fonality trixbox – ‘mac’ Remote Code Injection
# App : Trixbox all versions
Ubee EVW3200 – Multiple Persistent Cross-Site Scripting Vulnerabilities
# Exploit Title: Ubee EVW3200 - Multiple Persistent Cross Site Scripting
Ubee EVW3200 – Cross-Site Request Forgery
# Exploit Title: Ubee EVW3200 - Multiple Cross Site Request Forgery
Fonality trixbox – SQL Injection
# Exploit Title: SQL injection in Trixbox All Versions
ZYXEL P-660HN-T1A Router – Authentication Bypass
# Exploit Title: ZyXEL Router P-660HN-T1A - Login Bypass
Huawei Technologies eSpace Meeting Service 1.0.0.23 – Local Privilege Escalation
Huawei Technologies eSpace Meeting Service 1.0.0.23 Local Privilege Escalation
GNUPanel 0.3.5_R4 – Multiple Vulnerabilities
# Exploit Title :GNUpanel 0.3.5_R4 - Multiple Vulnerabilities
Oracle VM VirtualBox – 3D Acceleration Multiple Vulnerabilities
Core Security - Corelabs Advisory