Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 294

Blast XPlayer – Local Buffer Overflow (PoC)

Title: Blast XPlayer Local Buffer Overflow PoC

2013-09-26 flux77 dos

Hewlett-Packard (HP) 2620 Switch Series. Edit Admin Account – Cross-Site Request Forgery

# Exploit Title: Hewlett-Packard 2620 Switch Series. Edit Admin Account - CSRF Vulnerability

2013-09-26 Hubert Gradek webapps

Posnic Stock Management System 1.02 – Multiple Vulnerabilities

# Exploit Title: Posnic Stock Management System 1.02 Multiple Vulnerabilities

2013-09-26 Sarahma Security webapps

ArticleSetup – Multiple Vulnerabilities

#Exploit Title : ArticleSetup Multiple Vulnerabilities

2013-09-26 DevilScreaM webapps

Good for Enterprise 2.2.2.1611 – Cross-Site Scripting

The vulnerable versions are v2.2.2.1611 and earlier

2013-09-25 Mario webapps

X2CRM 3.4.1 – Multiple Vulnerabilities

Advisory ID: HTB23172

2013-09-25 High-Tech Bridge SA webapps

ZeroShell ‘cgi-bin/kerbynet’ – Local File Disclosure

Introduction to the PoC :

2013-09-25 Yann CAM webapps

IBM AIX 6.1/7.1 – Local Privilege Escalation

# Exploit-DB Note: Screenshot provided by exploit author

2013-09-24 Kristian Erik Hermansen local

Raidsonic NAS Devices – Remote Command Execution (Metasploit)

##

2013-09-24 Metasploit remote

Microsoft Internet Explorer – CCaret Use-After-Free (MS13-069) (Metasploit)

##

2013-09-23 Metasploit remote

GLPI – ‘install.php’ Remote Command Execution (Metasploit)

##

2013-09-23 Metasploit remote

Microsoft Windows Theme File Handling – Arbitrary Code Execution (MS13-071) (Metasploit)

##

2013-09-23 Metasploit remote

Linksys WRT110 – Remote Command Execution (Metasploit)

##

2013-09-23 Metasploit remote

WordPress Plugin NOSpamPTI – Blind SQL Injection

[ NOSpamPTI Wordpress plugin Blind SQL Injection ]

2013-09-23 Alexandro Silva webapps

Blue Coat ProxySG 5.x and Security Gateway OS – Denial of Service

source: https://www.securityfocus.com/bid/62647/info

2013-09-23 anonymous dos

SilverStripe CMS – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/62782/info

2013-09-23 Benjamin Kunz Mejri webapps

FiberHome Modem Router HG-110 – Authentication Bypass To Remote Change DNS Servers

# Exploit Title: Directory Path Traversal FiberHome Modem Router HG-110 / Remote Change DNS Servers

2013-09-22 Javier Perez remote

Share KM 1.0.19 – Remote Denial of Service

Advisory Information :

2013-09-22 Yuda Prawira dos

WordPress Plugin Lazy SEO 1.1.9 – Arbitrary File Upload

#######################################################################

2013-09-22 Ashiyane Digital Security Team webapps

SolarWinds Server and Application Monitor – ActiveX ‘Pepco32c’ Buffer Overflow

2013-09-22 blake dos

ShareKM – Remote Denial of Service

source: https://www.securityfocus.com/bid/62586/info

2013-09-22 Yuda Prawira dos

Joomla! Component JVideoClip 1.5.1 – ‘uid’ SQL Injection

source: https://www.securityfocus.com/bid/62610/info

2013-09-21 SixP4ck3r webapps

Western Digital Arkeia < 10.0.10 - Remote Code Execution (Metasploit)

##

2013-09-20 xistence remote

OpenEMR 4.1.1 Patch 14 – SQL Injection / Privilege Escalation / Remote Code Execution (Metasploit)

##

2013-09-20 xistence remote

vTiger CRM 5.4.0 – ‘index.php?onlyforuser’ SQL Injection

Advisory ID: HTB23168

2013-09-20 High-Tech Bridge SA webapps

Monstra CMS 1.2.0 – ‘login’ SQL Injection

source: https://www.securityfocus.com/bid/62572/info

2013-09-20 linc0ln.dll webapps

MentalJS – Sandbox Security Bypass

source: https://www.securityfocus.com/bid/62581/info

2013-09-20 Rafay Baloch webapps

AspxCommerce 2.0 – Arbitrary File Upload

# Exploit Title: AspxCommerce v2.0 - Arbitrary File Upload Vulnerability

2013-09-19 SANTHO webapps

WordPress Plugin RokIntroScroller – ‘thumb.php’ Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/62493/info

2013-09-19 MustLive webapps

WordPress Plugin RokMicroNews – ‘thumb.php’ Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/62513/info

2013-09-19 MustLive webapps

TeraCopy 2.3 – ‘default.mo’ Language File Integer Overflow

#!J:\Perl\bin\perl.exe

2013-09-18 LiquidWorm dos

McKesson – ActiveX File/Environmental Variable Enumeration

McKesson Rad Station ActiveX File/Variable Enumeration

2013-09-18 blake remote

WordPress Plugin Complete Gallery Manager 3.3.3 – Arbitrary File Upload

Title:

2013-09-18 Vulnerability-Lab webapps

WordPress Plugin RokNewsPager – ‘thumb.php’ Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/62458/info

2013-09-18 MustLive webapps

PCMan FTP Server 2.07 – ‘STOR’ Remote Stack Overflow (Metasploit)

##

2013-09-17 Rick Flores remote

OpenEMR 4.1.1 Patch 14 – Multiple Vulnerabilities

#####################################################################################################################...

2013-09-17 xistence webapps

Oracle Java – ‘ShortComponentRaster.verify()’ Memory Corruption

-----BEGIN PGP SIGNED MESSAGE-----

2013-09-17 Packet Storm remote

Western Digital Arkeia Appliance 10.0.10 – Multiple Vulnerabilities

#####################################################################################################################...

2013-09-17 xistence webapps

Sophos Web Protection Appliance – clear_keys.pl Privilege Escalation (Metasploit)

##

2013-09-17 Metasploit local

D-Link Devices – UPnP SOAP TelnetD Command Execution (Metasploit)

##

2013-09-17 Metasploit remote

Sophos Web Protection Appliance – ‘sblistpack’ Arbitrary Command Execution (Metasploit)

##

2013-09-17 Metasploit remote

Agnitum Outpost Internet Security – Local Privilege Escalation (Metasploit)

##

2013-09-17 Metasploit local

HP ProCurve Manager – SNAC UpdateDomainControllerServlet Arbitrary File Upload (Metasploit)

##

2013-09-17 Metasploit remote

HP ProCurve Manager SNAC – UpdateCertificatesServlet Arbitrary File Upload (Metasploit)

##

2013-09-17 Metasploit remote

Vino VNC Server 3.7.3 – Persistent Denial of Service

Trustwave SpiderLabs Security Advisory TWSL2013-028:

2013-09-17 Trustwave's SpiderLabs dos

Vino VNC Server 3.7.3 – Persistent Denial of Service

Trustwave SpiderLabs Security Advisory TWSL2013-028:

2013-09-17 Trustwave's SpiderLabs dos

WordPress Plugin RokStories – ‘thumb.php’ Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/62459/info

2013-09-17 MustLive webapps

Mozilla Firefox 9.0.1 – Same Origin Policy Security Bypass

source: https://www.securityfocus.com/bid/62480/info

2013-09-17 Takeshi Terada remote

Mitsubishi MC-WorkX 8.02 – ActiveX Control ‘IcoLaunch’ File Execution

Mitsubishi MC-WorkX Suite Insecure ActiveX Control (IcoLaunch)

2013-09-15 blake remote

Router ONO Hitron CDE-30364 – Cross-Site Request Forgery

# Exploit Title: Router ONO Hitron CDE-30364 - CSRF Vulnerability

2013-09-14 Matias Mingorance Svensson webapps