Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 293

D-Link / PLANEX COMMUNICATIONS – ‘RuntimeDiagnosticPing()’ Remote Stack Buffer Overflow

source: https://www.securityfocus.com/bid/63234/info

2013-10-14 Craig Heffner remote

vBulletin 4.1.x – ‘/install/upgrade.php’ Security Bypass

source: https://www.securityfocus.com/bid/62909/info

2013-10-13 Joshua Rogers webapps

Fortinet FortiAnalyzer – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/63663/info

2013-10-12 William Costa remote

Bilboplanet – ‘auth.php’ SQL Injection

source: https://www.securityfocus.com/bid/62989/info

2013-10-11 Omar Kurt webapps

IBM Cognos Business Intelligence – XML External Entity Information Disclosure

source: https://www.securityfocus.com/bid/63719/info

2013-10-11 IBM remote

ONO Hitron CDE-30364 Router – Denial of Service

#!/usr/bin/python

2013-10-10 Matias Mingorance Svensson dos

Indusoft Thin Client 7.1 – ActiveX Buffer Overflow

2013-10-10 blake remote

Imperva SecureSphere Web Application Firewall MX 9.5.6 – Blind SQL Injection

Blind SQL Injection to Imperva SecureSphere Web Application Firewall MX

2013-10-10 Giuseppe D'Amore webapps

ALLPlayer 5.6.2 – ‘.m3u’ Local Buffer Overflow (PoC)

Title: ALLPlayer Local Buffer Overflow PoC UNICODE

2013-10-10 metacom dos

Ziteman CMS – Login Page SQL Injection

source: https://www.securityfocus.com/bid/62949/info

2013-10-10 Ashiyane Digital Security Team webapps

Bugzilla – ‘editflagtypes.cgi’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/63204/info

2013-10-09 Mateusz Goik webapps

Bugzilla 4.2 – Tabular Reports Cross-Site Scripting

source: https://www.securityfocus.com/bid/63205/info

2013-10-09 Mateusz Goik webapps

davfs2 1.4.6/1.4.7 – Local Privilege Escalation

davfs2 1.4.6/1.4.7 local privilege escalation exploit

2013-10-08 Lorenzo Cantoni local

WHMCompleteSolution (WHMCS) 5.2.7 – SQL Injection

#!/usr/bin/env python

2013-10-08 localhost.re webapps

WordPress Plugin Quick Contact Form 6.0 – Persistent Cross-Site Scripting

===============================================================================

2013-10-08 Zy0d0x webapps

HP LoadRunner – ‘magentproc.exe’ Remote Overflow (Metasploit)

##

2013-10-08 Metasploit remote

GestioIP – Remote Command Execution (Metasploit)

##

2013-10-08 Metasploit remote

Apple Motion 5.0.7 – Integer Overflow

Apple Motion Integer Overflow Vulnerability

2013-10-08 Jean Pascal Pereira dos

Alienvault Open Source SIEM (OSSIM) – ‘Timestamp’ Directory Traversal

source: https://www.securityfocus.com/bid/62899/info

2013-10-08 Ding Yu-Chi webapps

WordPress Plugin WP-Realty – ‘listing_id’ SQL Injection

source: https://www.securityfocus.com/bid/63217/info

2013-10-08 Napsterakos webapps

WordPress Plugin Woopra Analytics – ‘ofc_upload_image.php’ Arbitrary PHP Code Execution

source: https://www.securityfocus.com/bid/62876/info

2013-10-07 wantexz webapps

elproLOG MONITOR Webaccess 2.1 – Multiple Vulnerabilities

Title:

2013-10-04 Vulnerability-Lab webapps

FlashChat 6.0.2 < 6.0.8 - Arbitrary File Upload

#######################################################

2013-10-04 x-hayben21 webapps

CMS Formulasi 2.07 – Multiple Vulnerabilities

###################################################################################################################

2013-10-04 Sarahma Security webapps

Apache Tomcat/JBoss EJBInvokerServlet / JMXInvokerServlet (RMI over HTTP) Marshalled Object – Remote Code Execution

2013-10-04 rgod remote

FreeBSD 9.0 – Intel SYSRET Kernel Privilege Escalation

#include

2013-10-04 CurcolHekerLink local

Aanval 7.1 build 70151 – Multiple Vulnerabilities

-----------

2013-10-04 xistence webapps

SIEMENS Solid Edge ST4 SEListCtrlX – ActiveX Remote Code Execution (Metasploit)

##

2013-10-04 Metasploit remote

WordPress Plugin SEO Watcher – ‘ofc_upload_image.php’ Arbitrary PHP Code Execution

source: https://www.securityfocus.com/bid/62825/info

2013-10-03 wantexz webapps

SPAMINA Cloud Email Firewall – Directory Traversal

source: https://www.securityfocus.com/bid/64693/info

2013-10-03 Sisco Barrera webapps

Evince PDF Reader 2.32.0.145 (Windows) / 3.4.0 (Linux) – Denial of Service

Advisory Information :

2013-10-02 Deva dos

PinApp Mail-SeCure 3.70 – Access Control Failure

Core Security - Corelabs Advisory

2013-10-02 Core Security local

freeFTPd 1.0.10 – ‘PASS’ Remote Buffer Overflow (Metasploit)

##

2013-10-02 Metasploit remote

Micorosft Internet Explorer – SetMouseCapture Use-After-Free (Metasploit)

##

2013-10-02 Metasploit remote

HylaFAX+ 5.2.4 > 5.5.3 – Buffer Overflow

Details

2013-10-02 Dennis Jenkins dos

Gnew 2013.1 – Multiple Vulnerabilities (2)

Advisory ID: HTB23171

2013-10-02 High-Tech Bridge SA webapps

GLPI 0.84.1 – Multiple Vulnerabilities

Advisory ID: HTB23173

2013-10-02 High-Tech Bridge SA webapps

Alienvault Open Source SIEM (OSSIM) 3.1 – ‘date_from’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/62790/info

2013-10-02 Yu-Chi Ding webapps

Tenda W309R Router 5.07.46 – Configuration Disclosure

---------------------------------------------------

2013-09-30 SANTHO webapps

KMPlayer 3.7.0.109 – ‘.wav’ Crash (PoC)

# Exploit Title: KMPlayer 3.7.0.109 Integer division by zero DoS.

2013-09-30 xboz dos

Asus RT-N66U 3.0.0.4.374_720 – Cross-Site Request Forgery

Exploit Title: CSRF Asus RT-N66U Arbitrary Command Execution

2013-09-30 cgcai webapps

mod_accounting Module 0.5 – Blind SQL Injection

- Affected Vendor: http://sourceforge.net/projects/mod-acct/files/

2013-09-30 Wireghoul webapps

XAMPP 1.8.1 – ‘lang.php?WriteIntoLocalDisk method’ Local Write Access

=============================================

2013-09-30 Manuel García Cárdenas webapps

Nodejs – ‘js-yaml load()’ Code Exec (Metasploit)

##

2013-09-30 Metasploit local

SimpleRisk 20130915-01 – Multiple Vulnerabilities

1. *Advisory Information*

2013-09-30 Ryan Dewhurst webapps

glibc and eglibc 2.5/2.7/2.13 – Local Buffer Overflow

#include

2013-09-30 Hector Marco & Ismael Ripoll local

Abuse HTTP Server – Remote Denial of Service

'''

2013-09-30 Zico Ekel dos

FreeSMS – ‘/pages/crc_handler.php?scheduleid’ SQL Injection

source: https://www.securityfocus.com/bid/63004/info

2013-09-27 Sarahma Security webapps

FreeSMS – ‘/pages/crc_handler.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/63004/info

2013-09-27 Sarahma Security webapps

Piwigo 2.5.2 – Cross-Site Scripting

#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#

2013-09-26 Arsan webapps