Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 297

Intrasrv 1.0 – Remote Buffer Overflow (Metasploit)

##

2013-08-15 Metasploit remote

MiniWeb 300 – Arbitrary File Upload (Metasploit)

##

2013-08-15 Metasploit remote

Ultra Mini HTTPd – Remote Stack Buffer Overflow (Metasploit)

##

2013-08-15 Metasploit remote

Chasys Draw IES – Local Buffer Overflow (Metasploit)

##

2013-08-15 Metasploit local

Joomla! Component Media Manager – Arbitrary File Upload (Metasploit)

##

2013-08-15 Metasploit remote

Oracle Java – ‘IntegerInterleavedRaster.verify()’ Signed Integer Overflow

-----BEGIN PGP SIGNED MESSAGE-----

2013-08-15 Packet Storm remote

ACal 2.2.6 – ‘view’ Local File Inclusion

source: https://www.securityfocus.com/bid/61801/info

2013-08-15 ICheer_No0M webapps

OneHTTPD 0.7 – Denial of Service

#!/usr/bin/env python

2013-08-13 superkojiman dos

MinaliC WebServer 2.0.0 – Remote Buffer Overflow (Egghunter)

#!/usr/bin/env python

2013-08-13 PuN1sh3r remote

HP StorageWorks P4000 Virtual SAN Appliance – Login Buffer Overflow (Metasploit)

##

2013-08-13 Metasploit remote

Open-FTPD 1.2 – Arbitrary File Upload (Metasploit)

##

2013-08-13 Metasploit remote

CakePHP 2.2.8/2.3.7 – AssetDispatcher Class Local File Inclusion

source: https://www.securityfocus.com/bid/61746/info

2013-08-13 Takeshi Terada webapps

DotNetNuke 6.1.x – Cross-Site Scripting

source: https://www.securityfocus.com/bid/61770/info

2013-08-13 Sajjad Pourali webapps

Tribq CMS 5.2.7 – Cross-Site Request Forgery (Adding/Editing New Administrator Account)

###########################################################################################

2013-08-12 Yashar shahinzadeh webapps

Open Real Estate CMS 1.5.1 – Multiple Vulnerabilities

#####################################################################################################################...

2013-08-12 Yashar shahinzadeh webapps

MLMAuction Script – ‘gallery.php?id’ SQL Injection

##################################################################################

2013-08-12 3spi0n webapps

Ajax PHP Penny Auction 1.x 2.x – Multiple Vulnerabilities

################################################################################

2013-08-12 Taha Hunter webapps

PHPVID 1.2.3 – Multiple Vulnerabilities

##################################################################################

2013-08-12 3spi0n webapps

Gnew 2013.1 – Multiple Vulnerabilities (1)

Gnew v2013.1 Multiple XSS And SQL Injection Vulnerabilities

2013-08-12 LiquidWorm webapps

Sami FTP Server 2.0.1 – MKD Buffer Overflow ASLR Bypass (SEH)

#!/usr/bin/python

2013-08-12 Polunchis remote

Integrated CMS 1.0 – SQL Injection

==========================================================================================================

2013-08-12 DSST webapps

Oracle Java – ‘storeImageArray()’ Invalid Array Indexing

-----BEGIN PGP SIGNED MESSAGE-----

2013-08-12 Packet Storm remote

Ruby on Rails – Known Secret Session Cookie Remote Code Execution (Metasploit)

##

2013-08-12 Metasploit remote

D-Link Devices – ‘command.php’ Remote Command Execution (Metasploit)

##

2013-08-12 Metasploit remote

Squash – YAML Code Execution (Metasploit)

##

2013-08-12 Metasploit remote

OpenX – Backdoor PHP Code Execution (Metasploit)

##

2013-08-12 Metasploit remote

WordPress Plugin Hms Testimonials 2.0.10 – Multiple Vulnerabilities

Update

2013-08-12 RogueCoder webapps

Joomla! Component redSHOP 1.2 – SQL Injection

--------------------------------------------

2013-08-12 Matias Fontanini webapps

HTC Sync Manager – Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/61745/info

2013-08-11 Iranian_Dark_Coders_Team remote

D-Link Devices – ‘tools_vct.xgi’ Remote Command Execution (Metasploit)

##

2013-08-08 Metasploit remote

Mozilla Firefox – onreadystatechange Event DocumentViewerImpl Use-After-Free (Metasploit)

##

2013-08-08 Metasploit remote

BigTree CMS 4.0 RC2 – Multiple Vulnerabilities

Advisory ID: HTB23165

2013-08-08 High-Tech Bridge SA webapps

PHPFox 3.6.0 (build3) – Multiple SQL Injections

------------------------------------------------------------

2013-08-08 Matias Fontanini webapps

Advanced Guestbook – ‘addentry.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/61735/info

2013-08-08 Ashiyane Digital Security Team webapps

FTP OnConnect 1.4.11 iOS – Multiple Vulnerabilities

Title:

2013-08-07 Vulnerability-Lab webapps

Apache suEXEC – Information Disclosure / Privilege Escalation

Apache suEXEC privilege elevation / information disclosure

2013-08-07 kingcope remote

Pluck CMS 4.7 – HTML Code Injection

###########################################################################################

2013-08-07 Yashar shahinzadeh webapps

WordPress Plugin Booking Calendar 4.1.4 – Cross-Site Request Forgery

###########################################################################################

2013-08-07 Dylan Irzi webapps

HP Data Protector – Remote Command Execution

"""

2013-08-07 Alessandro Di Pinto & Claudio Moletta remote

(Gabriel’s FTP Server) Open & Compact FTP Server 1.2 – Authentication Bypass / Directory Traversal SAM Retrieval

#!/usr/bin/python

2013-08-07 Wireghoul remote

Hikvision IP Cameras 4.1.0 b130111 – Multiple Vulnerabilities

Core Security - Corelabs Advisory

2013-08-07 Core Security webapps

WordPress Plugin Usernoise 3.7.8 – Persistent Cross-Site Scripting

Details

2013-08-07 RogueCoder webapps

Joomla! Component com_sectionex 2.5.96 – SQL Injection

-------------------------------------------------------------------------------------

2013-08-07 Matias Fontanini webapps

McAfee SuperScan 4.0 – Cross-Site Scripting

Trustwave SpiderLabs Security Advisory TWSL2013-024:

2013-08-07 Trustwave's SpiderLabs webapps

Kwok Information Server – Multiple SQL Injections

source: https://www.securityfocus.com/bid/61728/info

2013-08-07 Yogesh Phadtare webapps

Mozilla Firefox 5.0 < 15.0.1 - exposedProps XCS Code Execution (Metasploit)

##

2013-08-06 Metasploit local

Nmap – Arbitrary File Write

source: https://www.securityfocus.com/bid/62024/info

2013-08-06 Piotr Duszynski remote

RiteCMS 1.0.0 – Multiple Vulnerabilities

###########################################################################################

2013-08-03 Yashar shahinzadeh webapps

Easy LAN Folder Share 3.2.0.100 – Local Buffer Overflow (SEH)

#!/usr/bin/python

2013-08-03 sagi- local

StarUML – ‘WinGraphviz.dll’ ActiveX Buffer Overflow

# Exploit Title: StarUML WinGraphviz.dll ActiveX buffer overflow vulnerability

2013-08-03 d3b4g dos