Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 295

Zimplit CMS 3.0 – Multiple Vulnerabilities

#####################################################################################################################...

2013-09-13 Yashar shahinzadeh webapps

Vestel TV 42pf9322 – Denial of Service

#!/usr/bin/python

2013-09-13 HackerSofi dos

WordPress Plugin mukioplayer4wp – ‘cid’ SQL Injection

source: https://www.securityfocus.com/bid/62438/info

2013-09-13 Ashiyane Digital Security Team webapps

Talkie Bluetooth Video iFiles 2.0 iOS – Multiple Vulnerabilities

Title:

2013-09-12 Vulnerability-Lab webapps

Target Longlife Media Player 2.0.2.0 – ‘.wav’ Crash (PoC)

# Exploit Title : Target Longlife Media Player Version 2.0.2.0 - (.wav) - Crash POC

2013-09-12 gunslinger_ dos

Microsoft SharePoint 2013 (Cloud) – Persistent Exception Handling (MS13-067)

Title:

2013-09-12 Vulnerability-Lab webapps

D-Link DSL-2740B – Multiple Cross-Site Request Forgery Vulnerabilities

+--------------------------------------------------------------------------------------------------------------------...

2013-09-12 Ivano Binetti webapps

Synology DiskStation Manager (DSM) 4.3-3776 – Multiple Vulnerabilities

Title: Synology DSM multiple vulnerabilities

2013-09-12 Andrea Fabrizi webapps

eM Client e-mail client 5.0.18025.0 – Persistent Cross-Site Scripting

#!/usr/bin/python

2013-09-10 loneferret remote

D-Link DIR-505 1.06 – Multiple Vulnerabilities

Multiple vulnerabilities on D-Link Dir-505 devices

2013-09-10 Alessandro Di Pinto webapps

glFusion 1.3.0 – ‘search.php?cat_id’ SQL Injection

Information

2013-09-10 Omar Kurt webapps

Microsoft Internet Explorer – CAnchorElement Use-After-Free (MS13-055) (Metasploit)

##

2013-09-10 Metasploit remote

HP SiteScope (Windows) – Remote Code Execution (Metasploit)

##

2013-09-10 Metasploit remote

AjaXplorer 1.0 – Multiple Vulnerabilities

Trustwave SpiderLabs Security Advisory TWSL2013-027:

2013-09-10 Trustwave's SpiderLabs webapps

eTransfer Lite – ‘file name’ HTML Injection

source: https://www.securityfocus.com/bid/62313/info

2013-09-10 Benjamin Kunz Mejri webapps

freeFTPd 1.0.10 – ‘PASS’ Remote Buffer Overflow (SEH) (Metasploit)

##

2013-09-09 Muhamad Fadzil Ramli remote

Moodle 2.3.8/2.4.5 – Multiple Vulnerabilities

#######################################################################

2013-09-09 Ciaran McNally webapps

Zyxware Health Monitoring System – Multiple Vulnerabilities

# Exploit Title: Zyxware Health Monitoring System Multiple Vulnerability

2013-09-09 Sarahma Security webapps

Sophos Web Protection Appliance – Multiple Vulnerabilities

Core Security - Corelabs Advisory

2013-09-09 Core Security webapps

Watchguard Server Center – Local Privilege Escalation

// source: https://www.securityfocus.com/bid/62261/info

2013-09-08 Julien Ahrens local

WordPress Plugin Event Easy Calendar – Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/62269/info

2013-09-07 anonymous webapps

Woltlab Burning Board FLVideo Addon – ‘video.php?value’ SQL Injection

# Exploit Title: Woltlab Burning Board FLVideo Addon SQL Injection flvideo.php Exploit

2013-09-06 Easy Laster webapps

CMS Mini 0.2.2 – Multiple Vulnerabilities

------------------------------------------------------------------------------------------

2013-09-06 SANTHO webapps

Practico CMS 13.7 – Authentication Bypass

############################################################

2013-09-06 shiZheni webapps

IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) – Missing DLL (Metasploit)

##

2013-09-06 Metasploit local

jetAudio 8.0.16.2000 Plus VX – ‘.wav’ Crash (PoC)

# Exploit Title: jetAudio Version 8.0.16.2000 Plus VX - (.wav) - Crash POC

2013-09-04 ariarat dos

GOMPlayer 2.2.53.5169 – ‘.wav’ Crash (PoC)

# Exploit Title: GOMPlayer Version 2.2.53.5169 (.wav) - Crash POC

2013-09-04 ariarat dos

Apple Safari 6.0.1 for iOS 6.0 / Apple Mac OSX 10.7/8 – Heap Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE-----

2013-09-04 Vitaliy Toropov remote

Microsoft Internet Explorer – CFlatMarkupPointer Use-After-Free (MS13-059) (Metasploit)

##

2013-09-04 Metasploit remote

HP LoadRunner – lrFileIOService ActiveX WriteFileString Remote Code Execution (Metasploit)

##

2013-09-04 Metasploit remote

KingView 6.53 – ‘SuperGrid’ Insecure ActiveX Control

KingView Insecure ActiveX Control Proof of Concept - SuperGrid.ocx

2013-09-04 blake local

KingView 6.53 – ‘KChartXY’ ActiveX File Creation / Overwrite

2013-09-04 blake local

GreenBrowser 6.4.0515 – Heap Overflow

# Exploit Title: Green Browser 6.4.0515 Heap Overflow

2013-09-03 Asesino04 dos

Oracle Java lookUpByteBI – Heap Buffer Overflow

# Exploit Title: Oracle Java lookupByteBI function heap buffer overflow

2013-09-03 GuHe dos

PotPlayer 1.5.39036 – ‘.wav’ Crash (PoC)

# Exploit Title: PotPlayer Version 1.5.39036 - Beta (.wav) - Crash POC

2013-09-03 ariarat dos

Zoom Telephonics ADSL Modem/Router – Multiple Vulnerabilities

Five models of the Zoom Telephonics ADSL Modem/Router line suffer from

2013-09-03 Kyle Lovett webapps

WordPress Plugin IndiaNIC Testimonial – Multiple Vulnerabilities

Details

2013-09-03 RogueCoder webapps

TP-Link TD-W8951ND – Multiple Vulnerabilities

-----------

2013-09-03 xistence webapps

MikroTik RouterOS – sshd (ROSSSH) Remote Heap Corruption

During an audit the Mikrotik RouterOS sshd (ROSSSH) has been identified to have a remote previous to authentication h...

2013-09-03 kingcope remote

dBlog CMS – ‘m’ SQL Injection

source: https://www.securityfocus.com/bid/62146/info

2013-09-03 ACC3SS webapps

Flo CMS – ‘archivem’ SQL Injection

source: https://www.securityfocus.com/bid/62186/info

2013-09-03 ACC3SS webapps

Apple Mac OSX 10.8.4 – Local Privilege Escalation

#!/usr/bin/python

2013-08-30 David Kennedy (ReL1K) local

VMware – Setuid VMware-mount Unsafe popen(3) (Metasploit)

##

2013-08-29 Metasploit local

HP LoadRunner – lrFileIOService ActiveX Remote Code Execution (Metasploit)

##

2013-08-29 Metasploit remote

Mozilla Firefox – XMLSerializer Use-After-Free (Metasploit)

##

2013-08-29 Metasploit remote

SPIP – ‘connect’ PHP Injection (Metasploit)

##

2013-08-29 Metasploit remote

AVTECH DVR Firmware 1017-1003-1009-1003 – Multiple Vulnerabilities

Core Security - Corelabs Advisory

2013-08-29 Core Security dos

Oracle Java – ByteComponentRaster.verify() Memory Corruption

-----BEGIN PGP SIGNED MESSAGE-----

2013-08-29 Packet Storm remote

Apple Mac OSX – Sudo Password Bypass (Metasploit)

##

2013-08-29 Metasploit local

appRain CMF – Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/62061/info

2013-08-29 Yashar shahinzadeh webapps