Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 292

VideoCharge Studio 2.12.3.685 – Local Buffer Overflow (SEH)

#!/usr/bin/python

2013-10-27 metacom local

Open Flash Chart 2 – Arbitrary File Upload (Metasploit)

##

2013-10-26 Metasploit remote

WordPress Theme Curvo – Cross-Site Request Forgery / Arbitrary File Upload

###################################################################################################

2013-10-26 Byakuya Kouta webapps

Photodex ProShow Producer 5.0.3310 – Local Buffer Overflow (SEH)

#!/usr/bin/perl

2013-10-26 Mike Czumak local

Poppler 0.14.3 – ‘/utils/pdfseparate.cc’ Local Format String

source: https://www.securityfocus.com/bid/63374/info

2013-10-26 Daniel Kahn Gillmor local

JReport – ‘dealSchedules.jsp’ Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/63363/info

2013-10-25 Poonam Singh webapps

WordPress Theme SAICO 1.0 < 1.0.2 - Arbitrary File Upload

###################################################################################################

2013-10-24 Byakuya Kouta webapps

FortKnox Personal Firewall 9.0.305.0/10.0.305.0 – Kernel Driver ‘fortknoxfw.sys’ Memory Corruption

# Exploit Title: [0day] FortKnox Personal Firewall kernel driver (fortknoxfw.sys) memory corruption vulnerability

2013-10-24 Arash Allebrahim dos

ASF Demux for VideoLAN VLC Media Player 2.0.x – Denial of Service (PoC)

# Exploit Title: Denial of service in ASF demux for VLC 2.0.X

2013-10-23 Pedro Ribeiro dos

WordPress Theme Daily Deal – Arbitrary File Upload

source: https://www.securityfocus.com/bid/63257/info

2013-10-23 DevilScreaM webapps

Avira Internet Security – ‘avipbb.sys’ Filter Bypass / Privilege Escalation

# Exploit Title: Avira internet security avipbb.sys filter bypass and

2013-10-22 Ahmad Moghimi local

D-Link DIR-605L – Captcha Handling Buffer Overflow (Metasploit)

##

2013-10-22 Metasploit remote

HP Intelligent Management Center BIms UploadServlet – Directory Traversal (Metasploit)

##

2013-10-22 Metasploit remote

Interactive Graphical SCADA System – Remote Command Injection (Metasploit)

##

2013-10-22 Metasploit remote

ARRIS DG860A – NVRAM Backup Password Disclosure

#!/usr/bin/env ruby

2013-10-22 Justin Oberdorf webapps

WebTester 5.x – Command Execution (Metasploit)

##

2013-10-22 Metasploit remote

Apache Shindig – XML External Entity Information Disclosure

source: https://www.securityfocus.com/bid/63260/info

2013-10-21 Kousuke Ebihara remote

Course Registration Management System – Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/63435/info

2013-10-21 Omar Kurt webapps

ZonPHP 2.25 – Remote Code Execution

# Exploit Title: ZonPHP V2.25 RCE Vulnerability

2013-10-20 Halim Cruzito webapps

Joomla! Component Maian15 – ‘name’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/63287/info

2013-10-20 SultanHaikal webapps

WordPress Theme Area53 – Arbitrary File Upload

###################################################################################################

2013-10-19 Byakuya Kouta webapps

WHMCompleteSolution (WHMCS) 5.2.8 – SQL Injection

# Exploit Title: WHMCS 5.2.8 SQL Injection

2013-10-19 g00n webapps

Elite Graphix ElitCMS 1.01 / PRO – Multiple Web Vulnerabilities

Document Title:

2013-10-18 Vulnerability-Lab webapps

SikaBoom – Remote Buffer Overflow (Metasploit)

##

2013-10-18 Asesino04 remote

PHP Point Of Sale – ‘ofc_upload_image.php’ Remote Code Execution

source: https://www.securityfocus.com/bid/63219/info

2013-10-18 Gabby remote

WordPress Plugin Quick Paypal Payments 3.0 – Presistant Cross-Site Scripting

TITLE

2013-10-17 Zy0d0x webapps

Zikula CMS 1.3.5 – Multiple Vulnerabilities

Document Title:

2013-10-17 Vulnerability-Lab webapps

WordPress Plugin Realty – Blind SQL Injection

$$$$$$\ $$\ $$\ $$$$$$\

2013-10-17 Napsterakos webapps

Woltlab Burning Board Regenbogenwiese 2007 Addon – SQL Injection

# Exploit Title: Woltlab Burning Board Regenbogenwiese 2007 Addon SQL Injection Exploit

2013-10-17 Easy Laster webapps

WebTester 5.x – Multiple Vulnerabilities

==========================================================================================

2013-10-16 X-Cisadane webapps

Aladdin Knowledge Systems Ltd. PrivAgent – ActiveX Control Overflow

Aladdin Knowledge Systems Ltd. PrivAgent ActiveX Control Overflow

2013-10-15 blake remote

Beetel Connection Manager PCW_BTLINDV1.0.0B04 – Local Buffer Overflow (SEH)

#!/usr/bin/python

2013-10-15 metacom local

WordPress Plugin Dexs PM System – (Authenticated) Persistent Cross-Site Scripting

===============================================================================

2013-10-15 TheXero webapps

Dolibarr ERP/CRM 3.4.0 – ‘exportcsv.php?sondage’ SQL Injection

# Exploit Title: Dolibarr 3.4.0 SQLi

2013-10-15 drone webapps

Zabbix 2.0.8 – SQL Injection / Remote Code Execution (Metasploit)

##

2013-10-15 Jason Kratzer webapps

HP Data Protector – Cell Request Service Buffer Overflow (Metasploit)

##

2013-10-15 Metasploit remote

Microsoft Internet Explorer – CDisplayPointer Use-After-Free (MS13-080) (Metasploit)

##

2013-10-15 Metasploit remote