Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 284

Publish-It 3.6d – Buffer Overflow

Core Security - Corelabs Advisory

2014-02-06 Core Security dos

XnView 1.92.1 – Command-Line Arguments Buffer Overflow

// source: https://www.securityfocus.com/bid/28259/info

2014-02-05 Sylvain THUAL remote

Job Site 1.0 – Multiple Vulnerabilities

Jobsite logo - Multiple Vulnerabilties

2014-02-05 AtT4CKxT3rR0r1ST webapps

TopicsViewer 3.0 Beta 1 – Multiple Vulnerabilities

TopicsViewer v3.0 Beta 1 - Multiple Sql Injection Vulnerabilty

2014-02-05 AtT4CKxT3rR0r1ST webapps

Eventy Online Scheduler 1.8 – Multiple Vulnerabilities

Eventy Online Scheduler V1.8 - Multiple Vulnerabilties

2014-02-05 AtT4CKxT3rR0r1ST webapps

Booking Calendar – Multiple Vulnerabilities

Booking Calendar PHP - Multiple Vulnerabilties

2014-02-05 AtT4CKxT3rR0r1ST webapps

IBM Business Process Manager – User Account Reconfiguration

Exploit Title: IBM BMPS (BPM) User account reconfiguration/Privilege Escalation/Information Disclosure

2014-02-05 0in webapps

WordPress Theme Dandelion – Arbitrary File Upload

# Exploit Title: Wordpress Dandelion Themes Arbitry File Upload

2014-02-05 TheBlackMonster webapps

D-Link DIR-100 – Multiple Vulnerabilities

# Table of Contents

2014-02-05 Felix Richter webapps

Plogger 1.0 (RC1) – Multiple Vulnerabilities

# Exploit Title: Multiply vulnerabilites in plogger 1.0 (RC1)

2014-02-05 killall-9 webapps

ownCloud 6.0.0a – Multiple Vulnerabilities

# Exploit Title: ownCloud 6.0.0a File Deletion XSS and CSRF Protection Bypass

2014-02-05 absane webapps

VideoLAN VLC Media Player 2.1.2 – ‘.asf’ Crash (PoC)

#!/usr/bin/python

2014-02-05 Saif dos

Inteno DG301 – Command Injection

1. Background

2014-02-05 Juan J. Guelfo webapps

ImpressCMS 1.3.5 – Multiple Vulnerabilities

I have discovered two vulnerabilities in ImpressCMS. These have been

2014-02-05 Pedro Ribeiro webapps

Skybluecanvas CMS – Remote Code Execution (Metasploit)

##

2014-02-05 Metasploit remote

Apache Tomcat Manager – Application Upload (Authenticated) Code Execution (Metasploit)

##

2014-02-05 Metasploit remote

Apache Struts – Developer Mode OGNL Execution (Metasploit)

##

2014-02-05 Metasploit remote

Joomla! Component com_community 2.6 – Code Execution

#!/usr/bin/python

2014-02-05 Matias Fontanini webapps

Pandora Fms 5.0RC1 – Remote Command Injection

-----------

2014-02-05 xistence webapps

Singapore 0.9.9b Beta – Image Gallery Remote File Inclusion / Cross-Site Scripting

source: https://www.securityfocus.com/bid/65420/info

2014-02-05 TUNISIAN CYBER webapps

Netgear D6300B – ‘/diag.cgi?IPAddr4’ Remote Command Execution

source: https://www.securityfocus.com/bid/65444/info

2014-02-05 Marcel Mangold remote

WordPress Theme Kiddo – Arbitrary File Upload

source: https://www.securityfocus.com/bid/65460/info

2014-02-05 TUNISIAN CYBER webapps

Adrenalin Player 2.2.5.3 – ‘.m3u’ Local Buffer Overflow (SEH) (ASLR + DEP Bypass)

#!/usr/bin env ruby

2014-02-04 Muhamad Fadzil Ramli local

CiMe Citas Médicas – Multiple Vulnerabilities

# Exploit Title: Control de Citas 1.4 (CIME) - Multiple Vulnerabilities

2014-02-03 vinicius777 webapps

Seowon Intech WiMAX SWC-9100 Router – ‘/cgi-bin/reboot.cgi’ Remote Reboot (Denial of Service)

source: https://www.securityfocus.com/bid/65306/info

2014-02-03 Josue Rojas dos

Seowon Intech WiMAX SWC-9100 Router – ‘/cgi-bin/diagnostic.cgi?ping_ipaddr’ Remote Code Execution

source: https://www.securityfocus.com/bid/65306/info

2014-02-03 Josue Rojas remote

Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.10) - 'CONFIG_X86_X32' Arbitrary Write (2)

#define _GNU_SOURCE

2014-02-02 saelo local

Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.04/13.10 x64) - 'CONFIG_X86_X32=y' Local Privilege Escalation (3)

recvmmsg.c - linux 3.4+ local root (CONFIG_X86_X32=y)

2014-02-02 rebel local

MediaWiki 1.22.1 PdfHandler – Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE-----

2014-02-01 @u0x webapps

Linux Kernel 3.4 < 3.13.2 - recvmmsg x32 compat (PoC)

#define _GNU_SOURCE

2014-01-31 Kees Cook dos

Oracle Forms and Reports 11.1 – Arbitrary Code Execution

#!/usr/bin/env ruby

2014-01-29 Mekanismen remote

PCMan FTP Server 2.07 – ‘ABOR’ Remote Buffer Overflow

# Exploit Title: PCMAN FTP 2.07 ABOR Command Buffer Overflow

2014-01-29 Mahmod Mahajna (Mahy) remote

PCMan FTP Server 2.07 – ‘CWD’ Remote Buffer Overflow

# Exploit Title: PCMAN FTP 2.07 CWD Command Buffer Overflow

2014-01-29 Mahmod Mahajna (Mahy) remote

LinPHA 1.3.4 – Multiple Vulnerabilities

# Exploit Title: linPHA 1.3.4 - Pemanent XSS and CSRF

2014-01-29 killall-9 webapps

SimplyShare 1.4 iOS – Multiple Vulnerabilities

Document Title:

2014-01-29 Vulnerability-Lab webapps

haneWIN DNS Server 1.5.3 – Remote Buffer Overflow (SEH)

#!/usr/bin/python

2014-01-29 Dario Estrada remote

A10 Networks Loadbalancer – Directory Traversal

-----------

2014-01-29 xistence webapps

ManageEngine Support Center Plus 7916 – Directory Traversal

-----------

2014-01-29 xistence webapps

pfSense 2.1 build 20130911-1816 – Directory Traversal

######################################################################

2014-01-29 @u0x webapps

Simple E-document – Arbitrary File Upload (Metasploit)

##

2014-01-29 Metasploit remote

Eventum 2.3.4 – ‘hostname’ Remote Code Execution

Advisory ID: HTB23198

2014-01-28 High-Tech Bridge webapps

MP3Info 0.8.5a – Buffer Overflow

# Waste of CPU clock N2

2014-01-27 jsacco dos

Ability Mail Server 2013 -Persistent Cross-Site Scripting / Cross-Site Request Forgery (Password Reset)

these configurations*

2014-01-27 David Um webapps

Oracle Outside In MDB – File Parsing Stack Buffer Overflow (PoC)

#!/usr/bin/python

2014-01-27 Citadelo dos

Mozilla Thunderbird 17.0.6 – Input Validation Filter Bypass

Document Title:

2014-01-27 Vulnerability-Lab dos

Eventum – Insecure File Permissions

source: https://www.securityfocus.com/bid/65186/info

2014-01-27 High-Tech Bridge webapps

NCH Software Express Burn Plus 4.68 – ‘.EBP’ Project File Buffer Overflow

#!/usr/local/bin/perl

2014-01-24 LiquidWorm dos

pChart 2.1.3 – Multiple Vulnerabilities

# Exploit Title: pChart 2.1.3 Directory Traversal and Reflected XSS

2014-01-24 Balazs Makany webapps

Joomla! Component Komento 1.7.2 – Persistent Cross-Site Scripting

Advisory ID: HTB23194

2014-01-24 High-Tech Bridge SA webapps

Joomla! Component JV Comment 3.0.2 – ‘id’ SQL Injection

Advisory ID: HTB23195

2014-01-24 High-Tech Bridge SA webapps