Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 311

JForum – ‘jforum.page’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58164/info

2013-02-26 ZeroDayLab webapps

Java Applet JMX – Remote Code Execution (Metasploit) (2)

##

2013-02-25 Metasploit remote

WordPress Plugin Smart Flv – ‘jwplayer.swf’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58135/info

2013-02-25 Henri Salo webapps

phpMyRecipes – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/58160/info

2013-02-25 PDS webapps

AirDrive HD 1.6 iPad iPhone – Multiple Vulnerabilities

Title:

2013-02-24 Vulnerability-Lab webapps

Linux Kernel 3.3 < 3.8 (Ubuntu / Fedora 18) - 'sock_diag_handlers()' Local Privilege Escalation (3)

#include

2013-02-24 SynQ local

Microsoft Internet Explorer – SLayoutRun Use-After-Free (MS13-009) (Metasploit) (2)

##

2013-02-23 Metasploit remote

Photodex ProShow Producer – Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/58131/info

2013-02-23 Julien Ahrens remote

File Manager – HTML Injection / Local File Inclusion

source: https://www.securityfocus.com/bid/58313/info

2013-02-23 Benjamin Kunz Mejri webapps

Web Cookbook – Multiple Vulnerabilities

# Web Cookbook Multiple Vulnerability

2013-02-21 cr4wl3r webapps

Alt-N MDaemon 12.5.6/13.0.3 – Email Body HTML/JS Injection

==============================================================

2013-02-21 QSecure & Demetris Papapetrou webapps

RTTucson Quotations Database Script – Authentication Bypass

# RTTucson Quotations Database Script (Auth Bypass) SQL Injection Vulnerability

2013-02-21 cr4wl3r webapps

glFusion 1.2.2 – Multiple Cross-Site Scripting Vulnerabilities

Advisory ID: HTB23142

2013-02-21 High-Tech Bridge SA webapps

Alt-N MDaemon WorldClient 13.0.3 – Multiple Vulnerabilities

======================================================================

2013-02-21 QSecure & Demetris Papapetrou webapps

PHPMyRecipes 1.2.2 – ‘viewrecipe.php?r_id’ SQL Injection

#phpMyRecipes 1.2.2 SQL Injection Exploit

2013-02-21 cr4wl3r webapps

PHPmyGallery 1.5 – Local File Disclosure / Cross-Site Scripting

source: https://www.securityfocus.com/bid/58081/info

2013-02-21 TheMirkin webapps

OpenEMR – ‘site’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58085/info

2013-02-21 Gjoko Krstic webapps

RTTucson Quotations Database – Multiple Vulnerabilities

##################################################################################

2013-02-20 3spi0n webapps

Microsoft Office 2010 – Download Execute

#!/usr/bin/python

2013-02-20 g11tch remote

BigAnt Server 2.97 – SCH / DUPF Buffer Overflow (Metasploit)

##

2013-02-20 Metasploit remote

BigAnt Server 2.97 – DUPF Command Arbitrary File Upload (Metasploit)

##

2013-02-20 Metasploit remote

OpenEMR – Arbitrary ‘.PHP’ File Upload (Metasploit)

##

2013-02-20 Metasploit remote

CKEditor 4.0.1 – Multiple Vulnerabilities

===========================================

2013-02-20 AkaStep webapps

WordPress Plugin Pretty Link – Cross-Site Scripting

source: https://www.securityfocus.com/bid/58072/info

2013-02-20 hiphop webapps

ZenPhoto – ‘index.php’ SQL Injection

source: https://www.securityfocus.com/bid/58078/info

2013-02-20 HosseinNsn webapps

ZeroClipboard 1.9.x – ‘id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58116/info

2013-02-20 MustLive webapps

Piwigo 2.4.6 – ‘/install.php’ Arbitrary File Read/Delete

Piwigo 2.4.6 (install.php) Remote Arbitrary File Read/Delete Vulnerability

2013-02-19 LiquidWorm webapps

Squirrelcart – ‘table’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58025/info

2013-02-19 Gjoko Krstic webapps

CKEditor – ‘posteddata.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58045/info

2013-02-19 AkaStep webapps

Netgear DGN2200B – Multiple Vulnerabilities

Device Name: DGN2200B

2013-02-18 m-1-k-3 webapps

Scripts Genie Pet Rate Pro – Multiple Vulnerabilities

#########################################################################

2013-02-18 TheMirkin webapps

Cometchat Application – Multiple Vulnerabilities

#####################################

2013-02-18 z3r0sPlOiT webapps

Scripts Genie Hot Scripts Clone – ‘showcategory.php?cid’ SQL Injection

-+=--+=--+=--+=--+=--+=--+=--+=--+=--+=-

2013-02-18 Easy Laster webapps

USB Sharp 1.3.4 iPad iPhone – Multiple Vulnerabilities

Title:

2013-02-18 Vulnerability-Lab webapps

MIMEsweeper For SMTP – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58012/info

2013-02-18 Anastasios Monachos webapps

Alt-N MDaemon WorldClient And WebAdmin – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/58076/info

2013-02-18 QSecure remote

Scripts Genie Gallery Personals – ‘gallery.php?L’ SQL Injection

##################################################################################

2013-02-17 3spi0n webapps

Scripts Genie Games Site Script – ‘index.php?id’ SQL Injection

##################################################################################

2013-02-17 3spi0n webapps

SAP NetWeaver Message Server – Multiple Vulnerabilities

1. *Advisory Information*

2013-02-17 Core Security dos

Scripts Genie Domain Trader – ‘catalog.php?id’ SQL Injection

##################################################################################

2013-02-17 3spi0n webapps

Scripts Genie Top Sites – ‘out.php?id’ SQL Injection

##################################################################################

2013-02-17 3spi0n webapps

Edimax EW-7206-APg and EW-7209APg – Multiple Vulnerabilities

Device Name: EW-7206APg / EW-7209APg

2013-02-15 m-1-k-3 webapps

TP-Link TL-WA701N / TL-WA701ND – Multiple Vulnerabilities

Device Name: TL-WA701N / TL-WA701ND

2013-02-15 m-1-k-3 webapps

Photodex ProShow Producer 5.0.3297 – ‘.pxs’ Memory Corruption

#!/usr/bin/python

2013-02-15 Julien Ahrens local

Cometchat – Multiple Vulnerabilities

##################################################################################

2013-02-15 B127Y webapps

ChillyCMS 1.3.0 – Multiple Vulnerabilities

# Exploit Title: chillyCMS 1.3.0 Multiple Vulnerabilities

2013-02-15 Abhi M Balakrishnan webapps

Polycom HDX – Telnet Authentication Bypass (Metasploit)

========================================================================

2013-02-14 Paul Haas remote

Microsoft Internet Explorer – SLayoutRun Use-After-Free (MS13-009) (Metasploit) (1)

##

2013-02-14 Scott Bell remote

SonicWALL Scrutinizer 9.5.2 – SQL Injection

Title:

2013-02-14 Vulnerability-Lab webapps

Transferable Remote 1.1 iPad iPhone – Multiple Vulnerabilities

Title:

2013-02-14 Vulnerability-Lab webapps