Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 281
LuxCal 3.2.2 – Cross-Site Request Forgery / Blind SQL Injection
[+] Author: TUNISIAN CYBER
Procentia IntelliPen 1.1.12.1520 – ‘data.aspx’ Blind SQL Injection
CVE: CVE-2014-2043
vTiger CRM 5.4.0/6.0 RC/6.0.0 GA – ‘browse.php’ Local File Inclusion
CVE: CVE-2014-1222
FreePBX 2.11.0 – Remote Command Execution
#!/usr/bin/perl
KMPlayer 3.8.0.117 – Local Buffer Overflow
#!/usr/bin/python
Kentico CMS 7.0.75 – User Information Disclosure
# Exploit Title: Kentico CMS User Enumeration Bug
iCAM Workstation Control 4.8.0.0 – Authentication Bypass
# Exploit Title: iCAM Workstation Control Software Local Authentication Bypass
Huawei E5331 MiFi Mobile Hotspot 21.344.11.00.414 – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20140307-0 >
ownCloud 4.0.x/4.5.x – ‘upload.php?Filename’ Remote Code Execution
Vulnerability title: Remote Code Execution in ownCloud
QNX – ‘.Phgrafx’ File Enumeration
source: www.securityfocus.com/bid/66098/info
Apple iOS 4.2.1 – ‘facetime-audio://’ Security Bypass
source: https://www.securityfocus.com/bid/66108/info
MeiuPic 2.1.2 – ‘ctl’ Local File Inclusion
source: https://www.securityfocus.com/bid/66317/info
ClipSharePro 4.1 – Local File Inclusion
# Exploit Title : ClipSharePro 0){ $config_file = $_GET['config_file']; }
ET – Chat Password Reset Security Bypass
source: https://www.securityfocus.com/bid/66149/info
Professional Designer E-Store – ‘id’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/66100/info
Ajax File Manager – Directory Traversal
# Exploit Title: Ajax File Manager DirectoryTraversal
WordPress Plugin Premium Gallery Manager – Arbitrary File Upload
source: https://www.securityfocus.com/bid/66044/info
OpenDocMan 1.2.7 – Multiple Vulnerabilities
Advisory ID: HTB23202
Ilch CMS 2.0 – Persistent Cross-Site Scripting
Advisory ID: HTB23203
Cory Jobs Search – ‘cid’ SQL Injection
source: https://www.securityfocus.com/bid/65969/info
Calavera UpLoader 3.5 – Local Buffer Overflow (SEH)
#exploit por Daniel - La Calavera
WordPress Plugin Relevanssi – ‘category_name’ SQL Injection
source: https://www.securityfocus.com/bid/65960/info
couponPHP CMS 1.0 – Multiple Persistent Cross-Site Scripting / SQL Injections
couponPHP CMS 1.0 Multiple Stored XSS and SQL Injection Vulnerabilities
SpagoBI 4.0 – Persistent Cross-Site Scripting
###################################################
SpagoBI 4.0 – Persistent HTML Script Insertion
###################################################
SpagoBI 4.0 – Arbitrary Cross-Site Scripting / Arbitrary File Upload
###################################################
ALLPlayer 5.8.1 – ‘.m3u’ Local Buffer Overflow (SEH)
#-----------------------------------------------------------------------------#
PHP-CMDB 0.7.3 – Multiple Vulnerabilities
# ==============================================================
PHP Ticket System Beta 1 – ‘get_all_created_by_user.php?id’ SQL Injection
# ==============================================================
Gold MP4 Player 3.3 – Local Buffer Overflow (SEH)
#!/usr/bin/python
Webuzo 2.1.3 – Multiple Vulnerabilities
# Exploit Title: Webuzo Multiple Vulnerabilities
Plex Media Server 0.9.9.2.374-aa23a69 – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20140228-1 >
Plex Media Server 0.9.9.2.374-aa23a69 – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20140228-1 >
MICROSENS Profi Line Switch 10.3.1 – Privilege Escalation
SEC Consult Vulnerability Lab Security Advisory < 20140228-0 >
WordPress Plugin VideoWhisper 4.27.3 – Multiple Vulnerabilities
Advisory ID: HTB23199