Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 300

Corda .NET Redirector – ‘redirector.corda’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/61156/info

2013-07-12 Adam Willard webapps

Nginx 1.3.9/1.4.0 (x86) – Brute Force

#nginx 1.3.9/1.4.0 x86 brute force remote exploit

2013-07-11 kingcope remote

Ultra Mini HTTPd 1.21 – Remote Stack Buffer Overflow

# Exploit Title: Ultra Mini HTTPD stack buffer overflow

2013-07-11 superkojiman remote

WordPress Plugin miniBB – SQL Injection / Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/61116/info

2013-07-11 Netsparker webapps

PrestaShop – Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/61158/info

2013-07-11 EntPro Cyber Security Research Group webapps

Jolix Media Player 1.1.0 – ‘.m3u’ Denial of Service

#!/usr/bin/python

2013-07-10 IndonesiaGokilTeam dos

vBulletin Advanced User Tagging Mod – Persistent Cross-Site Scripting

##########################################################################################

2013-07-10 []0iZy5 webapps

vBulletin vBShout Mod – Persistent Cross-Site Scripting

##########################################################################################

2013-07-10 []0iZy5 webapps

Zoom Telephonics X4/X5 ADSL Modem – Multiple Vulnerabilities

Vulnerable Products -

2013-07-10 Kyle Lovett webapps

iVote – ‘details.php’ SQL Injection

source: https://www.securityfocus.com/bid/61086/info

2013-07-10 Ashiyane Digital Security Team webapps

Mintboard – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/61114/info

2013-07-10 Canberk BOLAT webapps

ERS Viewer 2013 – ‘.ERS’ File Handling Buffer Overflow (Metasploit)

##

2013-07-09 Metasploit local

Solaris Recommended Patch Cluster 6/19 (x86) – Local Privilege Escalation

Solaris Recommended Patch Cluster 6/19 local root on x86

2013-07-09 Larry W. Cashdollar local

Apache CXF < 2.5.10/2.6.7/2.7.4 - Denial of Service

SEC Consult Vulnerability Lab Security Advisory < 20130709-0 >

2013-07-09 SEC Consult dos

Zoom Telephonics (Multiple Devices) – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/61044/info

2013-07-09 Kyle Lovett remote

Air Drive Plus – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/61081/info

2013-07-09 Benjamin Kunz Mejri remote

Cisco WebEx One-Click Client Password Encryption – Information Disclosure

// source: https://www.securityfocus.com/bid/61304/info

2013-07-09 Brad Antoniewicz local

Adobe Reader X 10.1.4.38 – ‘.BMP’/’.RLE’ Heap Corruption

'''

2013-07-08 feliam local

D-Link – OS-Command Injection via UPnP Interface

Title: OS-Command Injection via UPnP SOAP Interface in multiple D-Link devices

2013-07-07 m-1-k-3 webapps

OpenNetAdmin 13.03.01 – Remote Code Execution

# Exploit Title: OpenNetAdmin Remote Code Execution

2013-07-07 Mandat0ry webapps

phpVibe 3.1 – Information Disclosure / Remote File Inclusion

source: https://www.securityfocus.com/bid/61026/info

2013-07-06 indoushka webapps

Mobile Atlas Creator 1.9.12 – Persistent Command Injection

Title:

2013-07-05 Vulnerability-Lab webapps

InstantCMS 1.6 – PHP Remote Code Execution (Metasploit)

require 'msf/core'

2013-07-05 Metasploit remote

Kasseler CMS 2 r1223 – Multiple Vulnerabilities

Advisory ID: HTB23158

2013-07-05 High-Tech Bridge SA webapps

OpenX 2.8.10 – Multiple Vulnerabilities

Advisory ID: HTB23155

2013-07-05 High-Tech Bridge SA webapps

Realtek Sound Manager AvRack – ‘.wav’ Crash (PoC)

# !/usr/bin/python

2013-07-03 Asesino04 dos

ABBS Audio Media Player – ‘.LST’ Local Buffer Overflow (Metasploit)

##

2013-07-03 Metasploit local

Google Android – ‘APK’ code Remote Security Bypass

#source: https://www.securityfocus.com/bid/60952/info

2013-07-03 Bluebox Security remote

Machform Form Maker 2 – Multiple Vulnerabilities

###########################################################################################

2013-07-02 Yashar shahinzadeh webapps

Microsoft Windows – ‘EPATHOBJ::pprFlattenRec’ Local Privilege Escalation (Metasploit)

##

2013-07-02 Metasploit local

Opera 12.15 – vtable Corruption

Opera 12.15 DOS POC

2013-07-02 echo dos

Winamp 5.63 – Invalid Pointer Dereference

Inshell Security Advisory

2013-07-02 Julien Ahrens dos

Winamp 5.63 – Stack Buffer Overflow

Inshell Security Advisory

2013-07-02 Julien Ahrens dos

RealNetworks RealPlayer – Denial of Service

source: https://www.securityfocus.com/bid/60903/info

2013-07-02 Akshaysinh Vaghela dos

WordPress Plugin WP Feed – ‘nid’ SQL Injection

source: https://www.securityfocus.com/bid/60904/info

2013-07-02 Iranian Exploit DataBase webapps

WordPress Plugin Category Grid View Gallery – ‘ID’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/60905/info

2013-07-02 Iranian Exploit DataBase webapps

Intelligent Platform Management Interface – Information Disclosure

source: https://www.securityfocus.com/bid/61076/info

2013-07-02 Dan Farmer remote

Microsoft PowerPoint 2007 – Crash (PoC)

# Title : Microsoft Office PowerPoint 2007 Crash PoC

2013-07-01 Asesino04 dos

AVS Media Player 4.1.11.100 – ‘.ac3’ Denial of Service

#!/usr/bin/python

2013-07-01 metacom dos

Static HTTP Server 1.0 – Local Overflow (SEH)

#!/usr/bin/env python

2013-07-01 Jacob Holcomb local

C.P.Sub 4.5 – Authentication Bypass

#!/usr/bin/python

2013-07-01 Chako webapps

AudioCoder (.lst) – Local Buffer Overflow (Metasploit)

require 'msf/core'

2013-07-01 Asesino04 local

Adrenalin Player 2.2.5.3 – ‘.wvx’ Local Buffer Overflow (SEH)

#Exploit Title:Adrenalin Player 2.2.5.3 (.wvx) SEH-Buffer Overflow

2013-07-01 MrXors local

VideoLAN VLC Media Player 2.0.7 – ‘.png’ Crash (PoC)

#!/usr/bin/python

2013-07-01 Kevin Fujimoto dos

Barracuda SSL VPN 680Vx 2.3.3.193 – Multiple Script Injection Vulnerabilities

Barracuda SSL VPN 680Vx 2.3.3.193 Multiple Script Injection Vulnerabilities

2013-07-01 LiquidWorm webapps

Fortigate Firewalls – Cross-Site Request Forgery

Vulnerability ID: CVE-2013-1414

2013-07-01 Sven Wurth webapps

Java Applet – ProviderSkeleton Insecure Invoke Method (Metasploit)

##

2013-07-01 Metasploit remote

GLPI 0.83.9 – ‘Unserialize()’ Remote Code Execution

source: https://www.securityfocus.com/bid/60823/info

2013-07-01 Xavier Mehrenberger webapps

libvirt – ‘virConnectListAllInterfaces’ Method Denial of Service

source: https://www.securityfocus.com/bid/60876/info

2013-07-01 Daniel P. Berrange dos

FileCOPA FTP Server – Remote Denial of Service

source: https://www.securityfocus.com/bid/60909/info

2013-07-01 Chako dos