Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 288

Cisco EPC3925 – Cross-Site Request Forgery

#######################################################################

2013-12-16 Jeroen - IT Nerdbox webapps

Lowest Unique Bid Auction – SQL Injection

##################################################################################

2013-12-16 3spi0n webapps

Penny Auction 5 – SQL Injection

##################################################################################

2013-12-16 3spi0n webapps

C2C Forward Auction Creator 2.0 – ‘/auction/asp/list.asp?pa’ SQL Injection

source: https://www.securityfocus.com/bid/64329/info

2013-12-16 R3d-D3V!L webapps

C2C Forward Auction Creator – ‘/auction/casp/Admin.asp’ SQL Injection (Admin Authentication Bypass)

source: https://www.securityfocus.com/bid/64329/info

2013-12-16 R3d-D3V!L webapps

Icinga – cgi/config.c process_cgivars Function Off-by-One Read Remote Denial of Service

source: https://www.securityfocus.com/bid/64363/info

2013-12-16 DTAG Group Information Security dos

Linux Kernel 2.6.10 < 2.6.31.5 - 'pipe.c' Local Privilege Escalation

Watch a video of the exploit here:

2013-12-16 spender local

Piwigo CMS 2.5.3 – Multiple Web Vulnerabilities

###########################################################

2013-12-15 sajith webapps

PotPlayer 1.5.42509 Beta – Integer Division by Zero Denial of Service

###########################################################

2013-12-15 sajith dos

Phone Drive Eightythree 4.1.1 iOS – Multiple Vulnerabilities

Document Title:

2013-12-15 Vulnerability-Lab webapps

iScripts AutoHoster – ‘checktransferstatus.php’ SQL Injection

source: https://www.securityfocus.com/bid/64377/info

2013-12-15 i-Hmx webapps

iScripts AutoHoster – ‘checktransferstatusbck.php’ SQL Injection

source: https://www.securityfocus.com/bid/64377/info

2013-12-15 i-Hmx webapps

iScripts AutoHoster – ‘additionalsettings.php’ SQL Injection

source: https://www.securityfocus.com/bid/64377/info

2013-12-15 i-Hmx webapps

iScripts AutoHoster – ‘invno’ SQL Injection

source: https://www.securityfocus.com/bid/64377/info

2013-12-15 i-Hmx webapps

iScripts AutoHoster – ‘main_smtp.php’ Traversal

source: https://www.securityfocus.com/bid/64377/info

2013-12-15 i-Hmx webapps

iScripts AutoHoster – ‘tmpid’ Local File Inclusion

source: https://www.securityfocus.com/bid/64377/info

2013-12-15 i-Hmx webapps

iScripts AutoHoster – ‘fname’ Local File Inclusion

source: https://www.securityfocus.com/bid/64377/info

2013-12-15 i-Hmx webapps

iScripts AutoHoster – ‘id’ Local File Inclusion

source: https://www.securityfocus.com/bid/64377/info

2013-12-15 i-Hmx webapps

Etoshop B2B Vertical Marketplace Creator – Multiple SQL Injections

source: https://www.securityfocus.com/bid/64332/info

2013-12-14 R3d-D3V!L webapps

Osclass – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/64386/info

2013-12-14 R3d-D3V!L webapps

Nagios XI – ‘tfPassword’ SQL Injection

source: https://www.securityfocus.com/bid/63754/info

2013-12-13 Denis Andzakovic remote

BoastMachine – ‘blog’ SQL Injection

source: https://www.securityfocus.com/bid/64278/info

2013-12-13 Omar Kurt webapps

Dynamic Biz Website Builder (QuickWeb) 1.0 – ‘/apps/news-events/newdetail.asp?id’ SQL Injection

source: https://www.securityfocus.com/bid/64371/info

2013-12-13 R3d-D3V!L webapps

Dynamic Biz Website Builder ‘QuickWeb’ 1.0 – ‘/login.asp’ Multiple Field SQL Injections / Authentication Bypass

source: https://www.securityfocus.com/bid/64371/info

2013-12-13 R3d-D3V!L webapps

Joomla! Component Projoom NovaSFH 3.0.2 – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/65438/info

2013-12-13 Yuri Kramarz webapps

KikChat – Local File Inclusion / Remote Code Execution

# KikChat

2013-12-12 cr4wl3r webapps

Cisco Unified Communications Manager – TFTP Service

#!/bin/bash

2013-12-12 daniel svartman local

Cythosia 2.x Botnet (C2 Web Panel) – SQL Injection

##########################################################################

2013-12-12 GalaxyAndroid webapps

Castripper 2.50.70 – ‘.pls’ DEP Bypass

# Castripper 2.50.70 (.pls) exploit (Stack buffer overflow/DEP bypass)

2013-12-12 Morteza Hashemi local

WHMCompleteSolution (WHMCS) 4.x/5.x – Multiple Web Vulnerabilities

# Exploit Title: WHMCS v4.x & v5.x - Multiple Web Vulnerabilities

2013-12-12 AhwAk20o0 -- webapps

Pentagram Cerberus P 6363 DSL Router – Multiple Vulnerabilities

PENTAGRAM Cerberus P 6363 DSL Router Multiple Vulnerabilities

2013-12-12 condis webapps

IcoFX 2.5.0.0 – ‘.ico’ Buffer Overflow (PoC)

Core Security - Corelabs Advisory

2013-12-11 Core Security dos

HP LoadRunner EmulationAdmin – Web Service Directory Traversal (Metasploit)

##

2013-12-11 Metasploit remote

Adobe ColdFusion 9 – Administrative Authentication Bypass (Metasploit)

##

2013-12-11 Metasploit remote

EMC Data Protection Advisor DPA Illuminator – EJBInvokerServlet Remote Code Execution

EMC Data Protection Advisor DPA Illuminator EJBInvokerServlet Remote Code Execution

2013-12-11 rgod remote

vBulletin 5 – ‘index.php/ajax/api/reputation/vote?nodeid’ SQL Injection (Metasploit)

##

2013-12-11 Metasploit remote

eFront 3.6.14 (build 18012) – Multiple Persistent Cross-Site Scripting Vulnerabilities

###########################################################

2013-12-11 sajith webapps

Photo Video Album Transfer 1.0 iOS – Multiple Vulnerabilities

Document Title:

2013-12-11 Vulnerability-Lab webapps

eduTrac – ‘showmask’ Directory Traversal

source: https://www.securityfocus.com/bid/64255/info

2013-12-11 High-Tech Bridge webapps

Veno File Manager – ‘q’ Arbitrary File Download

source: https://www.securityfocus.com/bid/64346/info

2013-12-11 Daniel Godoy webapps

RedHat Piranha – Remote Security Bypass

source: https://www.securityfocus.com/bid/65587/info

2013-12-11 Andreas Schiermeier remote

PlaySms 0.9.9.2 – Cross-Site Request Forgery

# Exploit Title : PlaySMS

2013-12-10 Saadi Siddiqui webapps

Air Gallery 1.0 Air Photo Browser – Multiple Vulnerabilities

Document Title:

2013-12-10 Vulnerability-Lab local

Linux Kernel 3.0.5 – ‘ath9k_htc_set_bssid_mask()’ Information Disclosure

source: https://www.securityfocus.com/bid/63743/info

2013-12-10 Mathy Vanhoef remote

GOM Player 2.2.53.5169 – ‘.reg’ Local Buffer Overflow (SEH)

#!/usr/bin/perl

2013-12-09 Mike Czumak local

CGILua 3.0 – SQL Injection

# Exploit Title: CGILua SQL Injection

2013-12-09 aceeeeeeeer . webapps

osCMax – Arbitrary File Upload / Full Path Information Disclosure

source: https://www.securityfocus.com/bid/64307/info

2013-12-09 KedAns-Dz webapps

WordPress Plugin Download Manager Free & Pro 2.5.8 – Persistent Cross-Site Scripting

# Exploit Title: Wordpress Plugin: Wordpress Download Manager Free & Pro

2013-12-08 Jeroen - IT Nerdbox webapps

Ovidentia 7.9.6 – Multiple Vulnerabilities

###########################################################

2013-12-08 sajith webapps

Feetan Inc WireShare 1.9.1 iOS – Persistent

Document Title:

2013-12-08 Vulnerability-Lab webapps