Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 307

Free Monthly Websites 2.0 – Admin Password Change

==========================================================================================

2013-04-12 Yassin Aboukir webapps

Nagios Remote Plugin Executor – Arbitrary Command Execution (Metasploit)

##

2013-04-12 Metasploit remote

Simple HRM System 2.3 – Multiple Vulnerabilities

# Exploit Title: Multiple Vulnerabilities in Simple HRM system v2.3 and

2013-04-12 Doraemon webapps

D-Link DIR-645 / DIR-815 – ‘diagnostic.php’ Command Execution (Metasploit)

##

2013-04-12 Metasploit remote

WordPress Plugin Spider Video Player – ‘theme’ SQL Injection

source: https://www.securityfocus.com/bid/59021/info

2013-04-11 Ashiyane Digital Security Team webapps

Request Tracker – ‘ShowPending’ SQL Injection

source: https://www.securityfocus.com/bid/59022/info

2013-04-11 cheki webapps

BigAnt Server 2.97 – DDNF ‘Username’ Remote Buffer Overflow

#!/usr/bin/python

2013-04-10 Craig Freyman remote

Freefloat FTP Server 1.0 – DEP Bypass with ROP

#!usr/bin/python

2013-04-10 negux remote

Linksys WRT54GL – ‘apply.cgi’ Command Execution (Metasploit)

##

2013-04-10 Metasploit remote

Adobe ColdFusion APSB13-03 – Remote Multiple Vulnerabilities (Metasploit)

##

2013-04-10 Metasploit remote

WordPress Plugin Spiffy XSPF Player – ‘playlist_id’ SQL Injection

source: https://www.securityfocus.com/bid/58976/info

2013-04-10 Ashiyane Digital Security Team webapps

Hero Framework – ‘/users/login?Username’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/59041/info

2013-04-10 High-Tech Bridge webapps

Hero Framework – ‘/users/forgot_password?error’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/59041/info

2013-04-10 High-Tech Bridge webapps

Sysax Multi Server 6.10 – SSH Denial of Service

#!/usr/bin/env ruby

2013-04-09 Matt Andreko dos

ZAPms 1.41 – SQL Injection

=============================================================================================================

2013-04-09 NoGe webapps

Foscam IP (Multiple Cameras) – Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/58943/info

2013-04-09 shekyan remote

EasyPHP – ‘/index.php’ Authentication Bypass / Remote PHP Code Injection

source: https://www.securityfocus.com/bid/58945/info

2013-04-09 KedAns-Dz webapps

WordPress Plugin Traffic Analyzer – ‘aoid’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58948/info

2013-04-09 Beni_Vanda webapps

phpMyAdmin – ‘tbl_gis_visualization.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58962/info

2013-04-09 waraxe webapps

OpenCart – Cross-Site Request Forgery (Change User Password)

# Exploit Title : OpenCart CSRF

2013-04-08 Saadi Siddiqui webapps

OTRS 3.x – FAQ Module Persistent Cross-Site Scripting

# Exploit Title: [OTRS Faq Module - Persistent XSS]

2013-04-08 Luigi Vezzoso webapps

Google AD Sync Tool – Exposure of Sensitive Information

Sense of Security - Security Advisory - SOS-13-001

2013-04-08 Sense of Security local

Belkin Wemo – Arbitrary Firmware Upload

# Exploit Title: Belkin Wemo Arbitrary Firmware Vulnerability

2013-04-08 Daniel Buentello webapps

D-Link – Multiple Vulnerabilities

# Exploit Title: Multiple Vulnerabilities in Dlink devices

2013-04-08 m-1-k-3 webapps

Vanilla Forums 2-0-18-4 – SQL Injection

# Exploit Title: Vanilla Forums - SQL-Injection - Insert arbitrary user & dump usertable

2013-04-08 bl4ckw0rm webapps

TP-Link TD-8817 6.0.1 Build 111128 Rel.26763 – Cross-Site Request Forgery

######################################################################

2013-04-08 Un0wn_X webapps

HP System Management Homepage – Local Privilege Escalation (Metasploit)

##

2013-04-08 Metasploit local

Groovy Media Player 3.2.0 – ‘.mp3’ Buffer Overflow

Title:

2013-04-08 Akshaysinh Vaghela dos

Netgear DGN1000B – ‘setup.cgi’ Remote Command Execution (Metasploit)

##

2013-04-08 Metasploit remote

Sophos Web Protection Appliance 3.7.8.1 – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20130403-0 >

2013-04-08 SEC Consult webapps

PonyOS 0.4.99-mlp – Multiple Vulnerabilities

Advisory: PonyOS Security Issues

2013-04-08 John Cartwright local

WHMCompleteSolution (WHMCS) Group Pay Plugin 1.5 – ‘grouppay.php?hash’ SQL Injection

#######################################################################

2013-04-08 HJauditing Employee Tim webapps

MongoDB – nativeHelper.apply Remote Code Execution (Metasploit)

##

2013-04-08 Metasploit remote

Linksys E1500/E2500 – ‘apply.cgi’ Remote Command Injection (Metasploit)

##

2013-04-08 Metasploit remote

HP System Management – Anonymous Access Code Execution (Metasploit)

##

2013-04-08 Metasploit remote

Novell ZENworks Configuration Management 10 SP3/11 SP2 – Remote Execution (Metasploit)

##

2013-04-08 Metasploit remote

MongoDB 2.2.3 – nativeHelper.apply Remote Code Execution

#Title: MongoDB nativeHelper.apply Remote Code Execution

2013-04-08 agix remote

HexChat 2.9.4 – Local Overflow

#!/usr/bin/python

2013-04-07 Matt Andreko local

Easy DVD Player 3.5.1 – libav ‘libavcodec_plugin.dll’ Denial of Service

#!/usr/bin/python

2013-04-05 metacom dos

Personal File Share 1.0 – Denial of Service

#!/usr/bin/python

2013-04-05 npn dos

Apache Subversion 1.6.x – ‘mod_dav_svn/lock.c’ Remote Denial of Service

source: https://www.securityfocus.com/bid/58897/info

2013-04-05 anonymous dos

Apache Subversion – Remote Denial of Service

source: https://www.securityfocus.com/bid/58898/info

2013-04-05 Greg McMullin dos