Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 310

WordPress Plugin podPress – ‘playerID’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58421/info

2013-03-11 hiphop webapps

Privoxy Proxy – Authentication Information Disclosure

source: https://www.securityfocus.com/bid/58425/info

2013-03-11 Chris John Riley webapps

KindEditor – Multiple Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/58431/info

2013-03-11 KedAns-Dz webapps

PHPBoost – Arbitrary File Upload / Information Disclosure

source: https://www.securityfocus.com/bid/58432/info

2013-03-11 KedAns-Dz webapps

SWFupload – Multiple Content Spoofing / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58417/info

2013-03-10 MustLive webapps

Asteriskguru Queue Statistics – ‘warning’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58418/info

2013-03-10 Manuel García Cárdenas webapps

Your Own Classifieds – Cross-Site Scripting

source: https://www.securityfocus.com/bid/58399/info

2013-03-08 Rafay Baloch webapps

McAfee Vulnerability Manager – ‘cert_cn’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58401/info

2013-03-08 Asheesh Anaconda remote

WordPress Plugin Terillion Reviews – Profile Id HTML Injection

source: https://www.securityfocus.com/bid/58415/info

2013-03-08 Aditya Balapure webapps

Qool CMS 2.0 RC2 – Multiple Vulnerabilities

Qool CMS v2.0 RC2 XSRF Add Root Exploit

2013-03-07 LiquidWorm webapps

mnoGoSearch 3.3.12 (search.cgi) – Arbitrary File Read

-----------------------------------------------------------

2013-03-07 Sergey Bobrov webapps

CosCMS 1.721 – OS Command Injection

Advisory ID: HTB23145

2013-03-07 High-Tech Bridge SA webapps

MySQL / MariaDB – Geometry Query Denial of Service

source: https://www.securityfocus.com/bid/58511/info

2013-03-07 Alyssa Milburn dos

Remote File Manager 1.2 iOS – Multiple Vulnerabilities

Title:

2013-03-06 Vulnerability-Lab webapps

Matrix42 Service Store – ‘default.aspx’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/59290/info

2013-03-06 43zsec webapps

VMware Virtual Machine Communication Interface (VMCI) – ‘vmci.sys’

CVE-2013-1406 exploitation PoC

2013-03-06 Artem Shishkin local

Tunnelblick – Setuid Privilege Escalation (Metasploit)

##

2013-03-05 Metasploit local

Viscosity – setuid-set ViscosityHelper Privilege Escalation (Metasploit)

##

2013-03-05 Metasploit local

Kaspersky Internet Security 2013 – Denial of Service

I usually do not write security advisories unless absolutely necessary.

2013-03-05 Marc Heuse dos

WordPress Plugin Count Per Day – ‘daytoshow’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58307/info

2013-03-05 alejandr0.m0f0 webapps

Varnish Cache – Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/58314/info

2013-03-05 tytusromekiatomek dos

Squid – ‘httpMakeVaryMark()’ Remote Denial of Service

source: https://www.securityfocus.com/bid/58319/info

2013-03-05 tytusromekiatomek dos

D-Link DSL-2740B ADSL Router – Authentication Bypass

+--------------------------------------------------------------------------------------------------------------------...

2013-03-04 Ivano Binetti webapps

Nconf 1.3 – Multiple SQL Injections

# Exploit Title: nconf handle_item.php，Modify_attr.php etc Multiple Sql injection

2013-03-04 Saadi Siddiqui webapps

HP Intelligent Management Center – ‘topoContent.jsf’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58293/info

2013-03-04 Julien Ahrens webapps

Plogger – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/58271/info

2013-03-02 Saadat Ullah webapps

Hanso Player 2.1.0 – ‘.m3u’ Buffer Overflow

#!/usr/bin/python

2013-03-01 metacom dos

Sami FTP Server 2.0.1 – ‘LIST’ Buffer Overflow

#!/usr/bin/env python

2013-03-01 superkojiman remote

doorGets CMS – Cross-Site Request Forgery

# Title: Doorgets CSRF Vulnerability

2013-03-01 n0pe webapps

Piwigo 2.4.6 – Multiple Vulnerabilities

Advisory ID: HTB23144

2013-03-01 High-Tech Bridge SA webapps

PHP-Fusion 7.02.05 – Multiple Vulnerabilities

[waraxe-2013-SA#097] - Multiple Vulnerabilities in PHP-Fusion 7.02.05

2013-03-01 waraxe webapps

Batavi – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58151/info

2013-03-01 Dognaedis webapps

WordPress Plugin Uploader – ‘blog’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58285/info

2013-03-01 CodeV webapps

Foscam < 11.37.2.49 - Directory Traversal

source: https://www.securityfocus.com/bid/58290/info

2013-03-01 Frederic Basse remote

Question2Answer – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/58414/info

2013-03-01 MustLive webapps

rpi-update – Insecure Temporary File Handling / Security Bypass

// source: https://www.securityfocus.com/bid/58292/info

2013-02-28 Technion local

Joomla! 3.0.2 – ‘highlight.php’ PHP Object Injection

-------------------------------------------------------------------

2013-02-27 EgiX webapps

WordPress Plugin Comment Rating 2.9.32 – Multiple Vulnerabilities

# Exploit Title: Wordpress plugin: Comment Rating SQL injection

2013-02-27 ebanyu webapps

Linux Kernel 3.3.x < 3.7.x (Arch Linux x86-64) - 'sock_diag_handlers[]' Local Privilege Escalation (1)

// archer.c

2013-02-27 sd local

Geeklog – Cross-Site Scripting

source: https://www.securityfocus.com/bid/58209/info

2013-02-27 High-Tech Bridge webapps

Brewthology 0.1 – SQL Injection

#Brewthology 0.1 SQL Injection Exploit

2013-02-26 cr4wl3r webapps

Rix4Web Portal – Blind SQL Injection

################################################

2013-02-26 L0n3ly-H34rT webapps

iOS IPMap 2.5 – Arbitrary File Upload

Title:

2013-02-26 Vulnerability-Lab webapps

MTP Image Gallery 1.0 – ‘edit_photos.php?title’ Cross-Site Scripting

MTP Image Gallery 1.0 (title) Remote Script Insertion Vulnerability

2013-02-26 LiquidWorm webapps

MTP Guestbook 1.0 – Multiple Cross-Site Scripting Vulnerabilities

MTP Guestbook 1.0 Multiple Remote Script Insertion Vulnerabilities

2013-02-26 LiquidWorm webapps

MTP Poll 1.0 – Multiple Cross-Site Scripting Vulnerabilities

MTP Poll 1.0 Multiple Remote Script Insertion Vulnerabilities

2013-02-26 LiquidWorm webapps

Kordil EDms 2.2.60rc3 – Arbitrary File Upload (Metasploit)

##

2013-02-26 Metasploit remote

Glossword 1.8.8 < 1.8.12 - Arbitrary File Upload (Metasploit)

##

2013-02-26 Metasploit remote

PolarPearCMS – Arbitrary ‘.PHP’ File Upload (Metasploit)

##

2013-02-26 Metasploit remote

WiFilet 1.2 iPad iPhone – Multiple Vulnerabilities

Title:

2013-02-26 Vulnerability-Lab webapps