Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 309

Mutiny – Remote Command Execution (Metasploit)

##

2013-03-25 Metasploit remote

WordPress Plugin Banners Lite – ‘wpbanners_show.php’ HTML Injection

source: https://www.securityfocus.com/bid/58671/info

2013-03-25 Fernando A. Lagos B webapps

Atmail WebMail – Message Attachment File Name Reflected Cross-Site Scripting

source: https://www.securityfocus.com/bid/65408/info

2013-03-25 Vicente Aguilera Diaz webapps

Atmail WebMail – ‘searchResultsTab5?filter’ Reflected Cross-Site Scripting

source: https://www.securityfocus.com/bid/65408/info

2013-03-25 Vicente Aguilera Diaz webapps

Atmail WebMail – ‘INBOX.Trash?mailId’ Reflected Cross-Site Scripting

source: https://www.securityfocus.com/bid/65408/info

2013-03-25 Vicente Aguilera Diaz webapps

Jaow CMS – ‘add_ons’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58658/info

2013-03-23 Metropolis webapps

StarVedia IPCamera IC502w IC502w+ v020313 – ‘Username’/Password Disclosure

#!/usr/bin/perl

2013-03-22 Todor Donev webapps

GnuTLS libgnutls – Double-Free Certificate List Parsing Remote Denial of Service

Sorry I forgot to write headers in previous mail.

2013-03-22 Shawn the R0ck dos

TP-Link TL-WR740N Wireless Router – Denial of Service

#!/usr/local/bin/perl

2013-03-22 LiquidWorm dos

WordPress Plugin IndiaNIC FAQs Manager 1.0 – Multiple Vulnerabilities

#####################################################

2013-03-22 m3tamantra webapps

WordPress Plugin IndiaNIC FAQs Manager 1.0 – Blind SQL Injection

# Exploit Title: WordPress IndiaNIC FAQ 1.0 Plugin Blind SQL Injection

2013-03-22 m3tamantra webapps

AContent 1.3 – Local File Inclusion

##########################################

2013-03-22 DaOne webapps

Flatnux CMS 2013-01.17 – ‘index.php’ Local File Inclusion

##########################################

2013-03-22 DaOne webapps

Slash CMS – Multiple Vulnerabilities

##########################################

2013-03-22 DaOne webapps

Photodex ProShow Gold/Producer 5.0.3310/6.0.3410 – ‘ScsiAccess.exe’ Local Privilege Escalation

## Exploit-DB Note: Vuln still in 6.0.3410 as well as 'Photodex ProShow Gold'

2013-03-22 Julien Ahrens local

Stradus CMS 1.0beta4 – Multiple Vulnerabilities

##########################################

2013-03-22 DaOne webapps

Apache Struts – ‘ParametersInterceptor’ Remote Code Execution (Metasploit)

##

2013-03-22 Metasploit remote

Sami FTP Server – ‘LIST’ Buffer Overflow (Metasploit)

##

2013-03-22 Metasploit remote

Cool PDF Image Stream – Remote Buffer Overflow (Metasploit)

##

2013-03-22 Metasploit remote

OpenCart 1.5.5.1 – ‘FileManager.php’ Directory Traversal Arbitrary File Access

[waraxe-2013-SA#098] - Directory Traversal Vulnerabilities in OpenCart 1.5.5.1

2013-03-22 waraxe webapps

EastFTP 4.6.02 – ActiveX Control

#################################################################

2013-03-20 Dr_IDE local

WordPress Plugin Occasions 1.0.4 – Cross-Site Request Forgery

CSRF Occasions

2013-03-19 m3tamantra webapps

WordPress Plugin Count Per Day 3.2.5 – ‘counter.php’ Cross-Site Scripting

#!/usr/bin/ruby

2013-03-19 m3tamantra webapps

Verizon Fios Router MI424WR-GEN3I – Cross-Site Request Forgery

# Exploit Title: Verizon Fios Router CSRF Admin Shell

2013-03-19 Jacob Holcomb webapps

Rebus:list – ‘list.php?list_id’ SQL Injection

# Exploit Title: Rebus:list SQL Injection Vulnerability

2013-03-19 Robert Cooper webapps

ViewGit 0.0.6 – Multiple Cross-Site Scripting Vulnerabilities

Vulnerability Report

2013-03-19 Matthew R. Bucci webapps

WordPress Plugin Occasions – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/58599/info

2013-03-19 m3tamantra webapps

BlazeVideo HDTV Player Standard – ‘.plf’ File Remote Buffer Overflow

source: https://www.securityfocus.com/bid/58624/info

2013-03-19 metacom remote

DaloRadius – Multiple Vulnerabilities

-------------------------------------------------------------------------

2013-03-18 Saadi Siddiqui webapps

WordPress Plugin Simply Poll 1.4.1 – Multiple Vulnerabilities

# Exploit Title: WordPress Simply Poll Plugin 1.4.1 CSRF and stored XSS

2013-03-18 m3tamantra webapps

Joomla! Component com_rsfiles – ‘cid’ SQL Injection

# Title : Joomla Component RSfiles

2013-03-18 ByEge webapps

Cisco Video Surveillance Operations Manager 6.3.2 – Multiple Vulnerabilities

# Exploit Title:Cisco Video Surveillance Operations Manager Multiple

2013-03-15 Bassem webapps

Nitro Pro 8.0.3.1 – Crash (PoC)

#!C:\Python27\python.exe

2013-03-15 John Cobb dos

WordPress Plugin LeagueManager 3.8 – SQL Injection

#!/usr/bin/ruby

2013-03-15 Joshua Reynolds webapps

Open-Xchange Server 6 – Multiple Vulnerabilities

Multiple security issues for Open-Xchange Server have been discovered and fixed. The vendor has chosen responsible fu...

2013-03-15 Martin Braun webapps

ClipShare 4.1.4 – Multiple Vulnerabilities

=====================================================================

2013-03-15 AkaStep webapps

aktiv-player 2.9.0 – Crash (PoC)

# !/usr/bin/python

2013-03-15 metacom dos

Petite Annonce – Cross-Site Scripting

source: https://www.securityfocus.com/bid/58508/info

2013-03-14 Metropolis webapps

TagScanner 5.1 – Stack Buffer Overflow (PoC)

Title:

2013-03-13 Vulnerability-Lab dos

Web Cookbook – Multiple SQL Injections

# Exploit Title: Web Cookbook Multiple SQL Injection

2013-03-13 Saadat Ullah webapps

Cam2pc 4.6.2 – ‘.BMP’ Image Processing Integer Overflow

Application: Cam2pc BMP Image Processing Integer Overflow Vulnerability

2013-03-13 coolkaveh dos

Apache Rave 0.11 < 0.20 - User Information Disclosure

CVE-2013-1814: Apache Rave exposes User over API

2013-03-13 Andreas Guth webapps

Honeywell HSC Remote Deployer – ActiveX Remote Code Execution (Metasploit)

##

2013-03-13 Metasploit remote

Linux Kernel 3.7.10 (Ubuntu 12.10 x64) – ‘sock_diag_handlers’ Local Privilege Escalation (2)

#include

2013-03-13 Kacper Szczesniak local

Linux Kernel – ‘SCTP_GET_ASSOC_STATS()’ Stack Buffer Overflow (PoC)

#include

2013-03-13 Petr Matousek dos

QlikView – ‘.qvw’ File Remote Integer Overflow

source: https://www.securityfocus.com/bid/58463/info

2013-03-13 A. Antukh remote

Cisco Video Surveillance Operations Manager – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/58476/info

2013-03-13 b.saleh remote

Linux Kernel 3.0 < 3.3.5 - 'CLONE_NEWUSER|CLONE_FS' Local Privilege Escalation

source: https://www.securityfocus.com/bid/58478/info

2013-03-13 Sebastian Krahmer local

RubyGems fastreader – ‘entry_controller.rb’ Remote Command Execution

source: https://www.securityfocus.com/bid/58450/info

2013-03-12 Larry W. Cashdollar remote

Microsoft Silverlight – ScriptObject Unsafe Memory Access (MS13-022/MS13-087) (Metasploit)

##

2013-03-12 Metasploit local