Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 312

OpenPLI 3.0 Beta (OpenPLi-beta-dm7000-20130127-272) – Multiple Vulnerabilities

# Exploit Title: Multiple Vulnerabilities in OpenPLI

2013-02-14 m-1-k-3 webapps

Raidsonic IB-NAS5220 and IB-NAS4220-B – Multiple Vulnerabilities

Device Name: IB-NAS5220 / IB-NAS4220-B

2013-02-14 m-1-k-3 webapps

SonicWALL OEM Scrutinizer 9.5.2 – Multiple Vulnerabilities

Title:

2013-02-14 Vulnerability-Lab webapps

Ultra Light Forum – Persistent Cross-Site Scripting

# Ultra Light Forum Persistant XSS Vulnerability

2013-02-14 cr4wl3r webapps

Foxit Reader Plugin – URL Processing Buffer Overflow (Metasploit)

##

2013-02-14 Metasploit remote

Dell SonicWALL Scrutinizer – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/57949/info

2013-02-14 Benjamin Kunz Mejri remote

WordPress Plugin NextGEN Gallery – Full Path Disclosure

source: https://www.securityfocus.com/bid/57957/info

2013-02-14 Henrique Montenegro webapps

OpenEMR 4.1.1 – ‘ofc_upload_image.php’ Arbitrary File Upload

2013-02-13 LiquidWorm webapps

VMware OVF Tools – Format String (Metasploit) (2)

##

2013-02-12 Metasploit remote

Novell Groupwise Client – ‘gwcls1.dll’ ActiveX Remote Code Execution (Metasploit)

##

2013-02-12 Metasploit remote

osCommerce – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/57892/info

2013-02-12 Jakub Galczyk webapps

BlackNova Traders – ‘news.php’ SQL Injection

source: https://www.securityfocus.com/bid/57910/info

2013-02-12 ITTIHACK webapps

Sonar – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57982/info

2013-02-12 DevilTeam webapps

Linksys E1500/E2500 – Multiple Vulnerabilities

Device Name: Linksys E1500 / E2500

2013-02-11 m-1-k-3 webapps

Linksys WAG200G – Multiple Vulnerabilities

Device Name: Linksys WAG200G

2013-02-11 m-1-k-3 webapps

D-Link DIR-615 Rev H – Multiple Vulnerabilities

Device Name: DIR-615 - Hardware revision H1

2013-02-11 m-1-k-3 webapps

Linksys WRT160N – Multiple Vulnerabilities

Device Name: Linksys WRT160Nv2

2013-02-11 m-1-k-3 webapps

Freefloat FTP Server 1.0 – ‘Raw’ Remote Buffer Overflow

#!/usr/bin/env python

2013-02-11 superkojiman remote

IRIS Citations Management Tool – (Authenticated) Remote Command Execution

Here is a bug that I finally found time to write about :-)

2013-02-11 aeon webapps

IP.Gallery 4.2.x/5.0.x – Persistent Cross-Site Scripting

# Exploit Title: IP.Gallery 4.2.x and 5.0.x persistent XSS vulnerability

2013-02-11 Mohamed Ramadan webapps

TP-Link – Admin Panel Multiple Cross-Site Request Forgery Vulnerabilities

Advisory Name: Multiple Cross Site Request Forgery vulnerabilities in

2013-02-11 CYBSEC Labs webapps

Air Disk Wireless 1.9 iPad iPhone – Multiple Vulnerabilities

Title:

2013-02-11 Vulnerability-Lab webapps

Microsoft Windows – HWND_BROADCAST (PoC) (MS13-005)

ms13-005-funz-poc.cpp - Drive a Medium IL cmd.exe via a Low IL

2013-02-11 0vercl0k dos

Google Chrome – Silent HTTP Authentication

# Exploit Title: [Google Chrome Silent HTTP Authentication]

2013-02-11 T355 dos

cURL – Buffer Overflow (PoC)

cURL buffer overflow

2013-02-11 Volema dos

KMPlayer – Denial of Service

Title : KMPlayer (PlayList M3U) Denial Of Service PoC All Versions

2013-02-10 Jigsaw dos

Easy Live Shop System – SQL Injection

+--------------------------------------------------

2013-02-10 Ramdan Yantu webapps

Schneider Electric Accutech Manager – Heap Overflow (PoC)

#Schneider Electric

2013-02-10 Evren Yalçın dos

WordPress Theme Pinboard – ‘tab’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57873/info

2013-02-09 Henrique Montenegro webapps

TP-Link TL-WR2543ND Router – Admin Panel Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/57877/info

2013-02-08 Juan Manuel Garcia remote

Cool PDF Reader 3.0.2.256 – Buffer Overflow

# Exploit Title: Cool PDF Reader 3.0.2.256 buffer overflow

2013-02-07 Chris Gabriel dos

Netgear DGN1000B – Multiple Vulnerabilities

Device Name: DGN1000B

2013-02-07 m-1-k-3 webapps

CubeCart 5.2.0 – ‘cubecart.class.php’ PHP Object Injection

-------------------------------------------------------------------------

2013-02-07 EgiX webapps

WirelessFiles 1.1 iPad iPhone – Multiple Vulnerabilities

Title:

2013-02-07 Vulnerability-Lab webapps

ActFax 5.01 – RAW Server (Metasploit)

##

2013-02-07 Craig Freyman remote

VMware OVF Tools – Format String (Metasploit) (1)

##

2013-02-06 Metasploit remote

Hiverr 2.2 – Multiple Vulnerabilities

# Exploit Title: Hiverr v2.2 Multiple Vulnerabilities

2013-02-06 xStarCode webapps

ezStats2 – ‘style.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/57757/info

2013-02-06 L0n3ly-H34rT webapps

ezStats for Battlefield 3 – ‘/ezStats2/compare.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57759/info

2013-02-06 L0n3ly-H34rT webapps

WordPress Plugin CommentLuv – ‘_ajax_nonce’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57771/info

2013-02-06 High-Tech Bridge webapps

WordPress Plugin Wysija Newsletters – Multiple SQL Injections

source: https://www.securityfocus.com/bid/57775/info

2013-02-06 High-Tech Bridge webapps

xNBD – ‘/tmp/xnbd.log’ Insecure Temporary File Handling

source: https://www.securityfocus.com/bid/57784/info

2013-02-06 Sebastian Pipping local

Verax NMS – Multiple Method Authentication Bypass

source: https://www.securityfocus.com/bid/58334/info

2013-02-06 Andrew Brooks webapps

Opera SVG – Use-After-Free

2013-02-05 Cons0ul dos

Cisco Unity Express – Multiple Vulnerabilities

# Exploit Title: Cisco Unity Express Multiple Vulnerabilities

2013-02-05 Jacob Holcomb webapps

FreeBSD 9.1 – ‘ftpd’ Remote Denial of Service

FreeBSD 9.1 ftpd Remote Denial of Service

2013-02-05 Maksymilian Arciemowicz dos

ArrowChat 1.5.61 – Multiple Vulnerabilities

# Exploit Title: ArrowChat

2013-02-05 kallimero webapps

AdaptCMS 2.0.4 – ‘config.php?question’ SQL Injection

# Exploit Title: AdaptCMS

2013-02-05 kallimero webapps

D-Link DIR-600 / DIR-300 (Rev B) – Multiple Vulnerabilities

Device Name: DIR-600 / DIR 300 - HW rev B1

2013-02-05 m-1-k-3 webapps

Free Monthly Websites 2.0 – Multiple Vulnerabilities

Title:

2013-02-05 X-Cisadane webapps