Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 304

Nginx 1.3.9 < 1.4.0 - Chuncked Encoding Stack Buffer Overflow (Metasploit)

##

2013-05-28 Metasploit remote

Elastix – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/60262/info

2013-05-28 cheki webapps

Barracuda SSL VPN 680 – ‘returnTo’ Open Redirection

source: https://www.securityfocus.com/bid/60172/info

2013-05-27 Chokri Ben Achor remote

WordPress Plugin ADIF Log Search Widget – ‘logbook_search.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/60198/info

2013-05-27 k3170makan webapps

SIEMENS Solid Edge ST4/ST5 SEListCtrlX – ActiveX SetItemReadOnly Arbitrary Memory Rewrite Remote Code Execution

SIEMENS Solid Edge ST4/ST5 SEListCtrlX ActiveX Control SetItemReadOnly

2013-05-26 rgod dos

SIEMENS Solid Edge ST4/ST5 WebPartHelper – ActiveX RFMSsvs!JShellExecuteEx Remote Code Execution

SIEMENS Solid Edge ST4/ST5 WebPartHelper ActiveX Control

2013-05-26 rgod remote

SAS Integration Technologies Client 9.31_M1 ‘SASspk.dll’ – Stack Overflow

SAS Integration Technologies Client ActiveX Stack BoF 0-day

2013-05-26 LiquidWorm dos

HP LaserJet Pro P1606dn – Webadmin Password Reset

#!/usr/bin/python

2013-05-26 m3tamantra webapps

AVE.CMS 2.09 – ‘index.php?module’ Blind SQL Injection

#!/usr/bin/env python

2013-05-26 mr.pr0n webapps

Sony Playstation 3 (PS3) 4.31 – Save Game Preview ‘.SFO’ Handling Local Command Execution

Title:

2013-05-26 Vulnerability-Lab local

Trend Micro DirectPass 1.5.0.1060 – Multiple Software Vulnerabilities

Title:

2013-05-26 Vulnerability-Lab dos

Vanilla Forums 2.0.18.8 – Multiple Vulnerabilities

# Exploit Title: Vanilla Forums Insecure Permissions Vulnerability

2013-05-26 Henry Hoggard webapps

WordPress Plugin User Role Editor 3.12 – Cross-Site Request Forgery

# Exploit Title: WP User Role Editor CSRF

2013-05-26 Henry Hoggard webapps

WordPress Plugin Spider Event Calendar 1.3.0 – Multiple Vulnerabilities

[waraxe-2013-SA#104] - Multiple Vulnerabilities in Spider Event Calendar Wordpress Plugin

2013-05-26 waraxe webapps

WordPress Plugin Spider Catalog 1.4.6 – Multiple Vulnerabilities

[waraxe-2013-SA#105] - Multiple Vulnerabilities in Spider Catalog Wordpress Plugin

2013-05-26 waraxe webapps

AdobeCollabSync – Local Buffer Overflow / Adobe Reader X Sandbox Bypass (Metasploit)

##

2013-05-26 Metasploit local

RadioCMS 2.2 – ‘menager.php?playlist_id’ SQL Injection

#################################################

2013-05-26 Rooster(XEKA) webapps

Matterdaddy Market – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/60150/info

2013-05-24 KedAns-Dz webapps

Weyal CMS – Multiple SQL Injections

source: https://www.securityfocus.com/bid/60089/info

2013-05-23 XroGuE webapps

WordPress Plugin ProPlayer 4.7.9.1 – SQL Injection

##############

2013-05-21 Ashiyane Digital Security Team webapps

Kimai 0.9.2.1306-3 – SQL Injection

# Exploit Title: Kimai 0.9.2.1306-3 SQLi

2013-05-21 drone webapps

Ophcrack 3.5.0 – Code Execution Local Buffer Overflow

# Exploit Title: ophcrack v3.5.0 - Local Code Execution BOF

2013-05-21 xis_one local

Linksys WRT160N v2 – ‘apply.cgi’ Remote Command Injection (Metasploit)

##

2013-05-21 Metasploit remote

D-Link DIR-615H – OS Command Injection (Metasploit)

##

2013-05-21 Metasploit remote

Microsoft Windows – Win32k!EPATHOBJ::pprFlattenRec Uninitialized Next Pointer Testcase

I'm quite proud of this list cycle trick, here's how to turn it into an

2013-05-21 Tavis Ormandy dos

Acme thttpd HTTP Server – Directory Traversal

source: https://www.securityfocus.com/bid/60010/info

2013-05-19 Metropolis remote

Python RRDtool Module – Function Format String

source: https://www.securityfocus.com/bid/60004/info

2013-05-18 Thomas Pollet remote

Drupal Module CKEditor < 4.1WYSIWYG (Drupal 6.x/7.x) - Persistent Cross-Site Scripting

# Exploit Title: Persistent XSS in wysiwyg CKEditor

2013-05-17 r0ng webapps

PHP-Charts 1.0 – Code Execution

# Exploit Title: PHP-CHARTS v1.0 code execution vulnerability

2013-05-17 fizzle stick webapps

Nginx 1.3.9 < 1.4.0 - Denial of Service (PoC)

# Exploit Title: nginx v1.3.9-1.4.0 DOS POC (CVE-2013-2028)

2013-05-17 Mert SARICA dos

Mutiny 5 – Arbitrary File Upload (Metasploit)

##

2013-05-17 Metasploit remote

Exponent CMS 2.2.0 Beta 3 – Multiple Vulnerabilities

Advisory ID: HTB23154

2013-05-17 High-Tech Bridge SA webapps

WordPress Plugin Mail On Update – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/59932/info

2013-05-16 Henri Salo webapps

WordPress Plugin WP Cleanfix – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/59940/info

2013-05-16 Enigma Ideas webapps

Serva 32 TFTP 2.1.0 – Buffer Overflow (Denial of Service) (PoC)

#Serva 32 TFTP Buffer overflow DoS

2013-05-15 Sapling dos

WordPress Plugin wp-FileManager – ‘path’ Arbitrary File Download

source: https://www.securityfocus.com/bid/59886/info

2013-05-15 ByEge webapps

Jojo CMS – ‘search’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/59933/info

2013-05-15 High-Tech Bridge SA webapps

Jojo CMS – ‘x-forwarded-for’ HTTP header SQL Injection

source: https://www.securityfocus.com/bid/59934/info

2013-05-15 High-Tech Bridge SA webapps

WordPress Plugin wp-FileManager – Arbitrary File Download

Title: Wordpress wp-FileManager Local File Download Vulnerability

2013-05-14 ByEge webapps

Invision Power Board 1.x?/2.x/3.x – Admin Takeover

IPB (Invision Power Board) all versions (1.x? / 2.x / 3.x) Admin account Takeover leading to code execution

2013-05-14 John JEAN webapps

WHMCS 4.x – ‘invoicefunctions.php?id’ SQL Injection

# Title: WHMCS 4.x SQL Injection Vulnerability

2013-05-14 Ahmed Aboul-Ela webapps

Linux Kernel 2.6.32 < 3.x (CentOS 5/6) - 'PERF_EVENTS' Local Privilege Escalation (1)

#define _GNU_SOURCE 1

2013-05-14 sd local

Quick Search 1.1.0.189 – Buffer Overflow (SEH)

# Exploit Title: Quick Search Version 1.1.0.189 Buffer Overflow vulnerability(SEH)

2013-05-14 ariarat dos

SAP SOAP RFC – SXPG_COMMAND_EXECUTE Remote Command Execution (Metasploit)

##

2013-05-14 Metasploit remote

SAP SOAP RFC – SXPG_CALL_SYSTEM Remote Command Execution (Metasploit)

##

2013-05-14 Metasploit remote

ERS Viewer 2011 – ‘.ERS’ File Handling Buffer Overflow (Metasploit)

##

2013-05-14 Metasploit local

Alienvault Open Source SIEM (OSSIM) 4.1.2 – Multiple SQL Injections

RunRunLevel Web Security Research - AlienVault OSSIM multiple SQL Injection vulnerabilities

2013-05-14 RunRunLevel webapps

UMI CMS 2.9 – Cross-Site Request Forgery

Advisory ID: HTB23151

2013-05-14 High-Tech Bridge SA webapps

Linux Kernel < 3.8.x - open-time Capability 'file_ns_capable()' Local Privilege Escalation

#define _GNU_SOURCE

2013-05-14 Andrew Lutomirski local

Gallery Server Pro – Arbitrary File Upload

source: https://www.securityfocus.com/bid/59831/info

2013-05-14 Drew Calcott webapps