Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 299

Super Player 3500 – ‘.m3u’ Local Stack Buffer Overflow

#!/usr/bin/perl

2013-07-23 jun local

Photo Server 2.0 iOS – Multiple Vulnerabilities

Title:

2013-07-23 Vulnerability-Lab webapps

Samsung PS50C7700 TV – Denial of Service

#!/usr/bin/python

2013-07-23 Malik Mesellem dos

D-Link Devices – UPnP SOAP Command Execution (Metasploit)

##

2013-07-23 Metasploit remote

Foreman (RedHat OpenStack/Satellite) – bookmarks/create Code Injection (Metasploit)

##

2013-07-23 Metasploit remote

VMware vCenter – Chargeback Manager ImageUploadServlet Arbitrary File Upload (Metasploit)

##

2013-07-23 Metasploit remote

Artweaver 3.1.5 – ‘.awd’ Buffer Overflow

Core Security - Corelabs Advisory

2013-07-23 Core Security dos

XnView 2.03 – ‘.pct’ Buffer Overflow

Core Security - Corelabs Advisory

2013-07-23 Core Security dos

Microsoft DirectShow – Arbitrary Memory Overwrite (MS13-056)

Introduction:

2013-07-23 Andrés Gómez Ramírez dos

Barracuda LB / SVF / WAF / WEF – Multiple Vulnerabilities

Title:

2013-07-22 Vulnerability-Lab webapps

Barracuda CudaTel 2.6.02.040 – SQL Injection

Title:

2013-07-22 Vulnerability-Lab webapps

PCMan FTP Server 2.0.7 – Remote (Metasploit)

# Exploit-DB Note: Ret needs adjustment for Windows XP SP3 English

2013-07-22 MSJ remote

MLM (Multi Level Marketing) Script – Multiple Vulnerabilities

##################################################################################

2013-07-22 3spi0n webapps

VbsEdit 5.9.3 – ‘.smi’ Buffer Overflow (PoC)

# Exploit Title: VbsEdit 5.9.3(.smi file handling) Buffer overflow vulnerability

2013-07-22 d3b4g dos

Sybase EAServer 6.3.1 – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20130719-0 >

2013-07-22 SEC Consult webapps

Apple QuickTime 7 – Invalid Atom Length Buffer Overflow (Metasploit)

##

2013-07-22 Metasploit remote

HP Managed Printing Administration – jobAcct Remote Command Execution (Metasploit)

##

2013-07-22 Metasploit remote

Collabtive – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/61384/info

2013-07-22 Enrico Cinquini webapps

WordPress Plugin FlagEm – ‘cID’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/61401/info

2013-07-22 IeDb ir webapps

Symantec Workspace Virtualization 6.4.1895.0 – Kernel Mode Privilege Escalation

# Symantec Workspace Virtualization 6.4.1895.0 Local Kernel Mode Privilege Escalation Exploit

2013-07-18 MJ0011 local

Microsoft Windows Movie Maker 2.1.4026.0 – ‘.wav’ Crash (PoC)

# Exploit Title: Windows Movie Maker Version 2.1.4026.0 (.wav) - Crash POC

2013-07-18 ariarat dos

WiFly 1.0 Pro iOS – Multiple Vulnerabilities

Title:

2013-07-18 Vulnerability-Lab webapps

Flux Player 3.1.0 iOS – Multiple Vulnerabilities

Title:

2013-07-18 Vulnerability-Lab webapps

ePhoto Transfer 1.2.1 iOS – Multiple Vulnerabilities

Title:

2013-07-18 Vulnerability-Lab webapps

Xibo 1.2.2/1.4.1 – ‘index.php?p’ Directory Traversal

Exploit Title: Xibo Directory Traversal Vulnerability

2013-07-18 Mahendra webapps

Dell PacketTrap MSP RMM 6.6.x – Multiple Cross-Site Scripting Vulnerabilities

Title:

2013-07-18 Vulnerability-Lab webapps

Dell PacketTrap PSA 7.1 – Multiple Cross-Site Scripting Vulnerabilities

Title:

2013-07-18 Vulnerability-Lab webapps

Anchor CMS 0.9.1 – Persistent Cross-Site Scripting

# Exploit Title : AnchorCMS Stored XSS exploit v0.9.1

2013-07-18 DURAKIBOX webapps

Barracuda CudaTel – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/61353/info

2013-07-17 Benjamin Kunz Mejri remote

Squid 3.3.5 – Denial of Service (PoC)

#Squid Crash PoC

2013-07-16 kingcope dos

FTP Sprite 1.2.1 iOS – Persistent Cross-Site Scripting

Title:

2013-07-16 Vulnerability-Lab webapps

rpcbind – CALLIT procedure UDP Crash (PoC)

#!/usr/bin/ruby

2013-07-16 Sean Verity dos

BlazeDVD Pro Player 6.1 – Direct RET Local Stack Buffer Overflow

#!/usr/bin/perl

2013-07-16 PuN1sh3r local

Olive File Manager 1.0.1 iOS – Multiple Vulnerabilities

Title:

2013-07-16 Vulnerability-Lab webapps

Kate’s Video Toolkit 7.0 – ‘.wav’ Crash (PoC)

# Exploit Title: Kate's Video Toolkit Version 7.0 (.wav) - Crash POC

2013-07-16 ariarat dos

Light Audio Mixer 1.0.12 – ‘.wav’ Crash (PoC)

# Exploit Title: Light Audio Mixer Version 1.0.12 (.wav) - Crash POC

2013-07-16 ariarat dos

Saurus CMS 4.7.1 – Multiple Vulnerabilities

[waraxe-2013-SA#106] - Multiple Vulnerabilities in Saurus CMS 4.7.1

2013-07-16 waraxe webapps

Dell Kace 1000 SMA 5.4.70402 – Persistent Cross-Site Scripting

Title:

2013-07-16 Vulnerability-Lab webapps

Apache Struts 2.2.3 – Multiple Open Redirections

source: https://www.securityfocus.com/bid/61196/info

2013-07-16 Takeshi Terada remote

MCImageManager – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/61825/info

2013-07-16 MustLive webapps

ReadyMedia – Remote Heap Buffer Overflow

source: https://www.securityfocus.com/bid/61282/info

2013-07-15 Zachary Cutlip remote

Tri-PLC Nano-10 r81 – Denial of Service

# Exploit Title: Tri-PLC Nano-10 DoS

2013-07-13 Sapling dos

WordPress Plugin Spicy Blogroll – Local File Inclusion

2013-07-13 Ahlspiess webapps

Corel PDF Fusion – Local Stack Buffer Overflow (Metasploit)

##

2013-07-13 Metasploit local

BMC Service Desk Express 10.2.1.95 – Multiple Vulnerabilities

Classification: NON SENSITIVE INFORMATION RELEASABLE TO THE PUBLIC

2013-07-13 Nuri Fattah webapps

McAfee ePO 4.6.6 – Multiple Vulnerabilities

Classification: NON SENSITIVE INFORMATION RELEASABLE TO THE PUBLIC

2013-07-13 Nuri Fattah webapps

S9Y Serendipity 1.6.2 – ‘serendipity_admin_image_selector.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/61138/info

2013-07-12 Omar Kurt webapps

WordPress Plugin Pie Register – ‘wp-login.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/61140/info

2013-07-12 gravitylover webapps

Corda Highwire – ‘Highwire.ashx’ Full Path Disclosure

source: https://www.securityfocus.com/bid/61152/info

2013-07-12 Adam Willard webapps

OpenEMR 4.1 – ‘note’ HTML Injection

source: https://www.securityfocus.com/bid/61154/info

2013-07-12 Nate Drier webapps