Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 313

Portable UPnP SDK – ‘unique_service_name()’ Remote Code Execution (Metasploit)

##

2013-02-05 Metasploit remote

glossword 1.8.12 – Multiple Vulnerabilities

===================================================

2013-02-05 AkaStep webapps

Glossword 1.8.3 – SQL Injection

#cs

2013-02-05 AkaStep webapps

Oracle Automated Service Manager 1.3 – Installation Privilege Escalation

Oracle Automated Service Manager 1.3 local root during install

2013-02-05 Larry W. Cashdollar local

Linux Kernel 2.6.32-5 (Debian 6.0.5) – ‘/dev/ptmx’ Key Stroke Timing Local Disclosure

#!/bin/bash

2013-02-05 vladz local

Simple Machine Forum 2.0.x < 2.0.4 - File Disclosure / Directory Traversal

# Exploit Title: SMF < 2.0.4 File Disclosure/Path Traversal

2013-02-04 NightlyDev webapps

EasyITSP – ‘voicemail.php’ Directory Traversal

source: https://www.securityfocus.com/bid/57741/info

2013-02-04 Michal Blaszczak webapps

WordPress Theme flashnews – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/57676/info

2013-02-02 MustLive webapps

CADA 3S CoDeSys Gateway Server – Directory Traversal (Metasploit)

##

2013-02-02 Metasploit local

DataLife Engine – ‘preview.php’ PHP Code Injection (Metasploit)

##

2013-02-01 Metasploit remote

Netgear SPH200D – Multiple Vulnerabilities

Device Name: SPH200D

2013-01-31 m-1-k-3 webapps

D-Link DCS Cameras – Multiple Vulnerabilities

Unauthenticated remote access to D-Link DCS cameras

2013-01-31 Roberto Paleari webapps

Buffalo TeraStation TS-Series – Multiple Vulnerabilities

Title: Buffalo TeraStation TS-Series multiple vulnerabilities

2013-01-31 Andrea Fabrizi webapps

Novell Groupwise Client 8.0 – Multiple Remote Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/57657/info

2013-01-31 High-Tech Bridge remote

WordPress Plugin Audio Player – ‘playerID’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57848/info

2013-01-31 hiphop webapps

Firebird – Relational Database CNCT Group Number Buffer Overflow (Metasploit)

##

2013-01-31 Metasploit local

Ruby on Rails – JSON Processor YAML Deserialization Code Execution (Metasploit)

##

2013-01-29 Metasploit remote

Fortinet FortiMail 400 IBE – Multiple Vulnerabilities

Title:

2013-01-29 Vulnerability-Lab webapps

Kohana Framework 2.3.3 – Directory Traversal

Title:

2013-01-29 Vulnerability-Lab webapps

Apple Quick Time Player (Windows) 7.7.3 – Out of Bound Read

# Title: Apple Quick Time Player (Windows)Version 7.7.3 Out of Bound Read

2013-01-29 Debasish Mandal dos

pfSense UTM Platform 2.0.1 – Cross-Site Scripting

┴┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┴

2013-01-29 Dimitris Strevinas webapps

Multiple Hunt CCTV – Information Disclosure

source: https://www.securityfocus.com/bid/57579/info

2013-01-29 Alejandro Ramos remote

Microsoft Internet Explorer 8/9 – Steal Any Cookie

# Exploit Title: Internet Explorer 8 & Internet Explorer 9 steal any Cookie

2013-01-28 Christian Haider webapps

PHP weby directory software 1.2 – Multiple Vulnerabilities

===========================================

2013-01-28 AkaStep webapps

DataLife Engine 9.7 – ‘preview.php’ PHP Code Injection

------------------------------------------------------------------

2013-01-28 EgiX webapps

WordPress Plugin SolveMedia 1.1.0 – Cross-Site Request Forgery

# Exploit Title: WordPress SolveMedia 1.1.0 CSRF Vulnerability

2013-01-25 Junaid Hussain webapps

ImageCMS 4.0.0b – Multiple Vulnerabilities

Advisory ID: HTB23132

2013-01-25 High-Tech Bridge SA webapps

Microsoft Windows – Manage Memory Payload Injection (Metasploit)

##

2013-01-25 Metasploit local

PHPWeby Free Directory Script – ‘contact.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/57561/info

2013-01-25 AkaStep webapps

iCart Pro – ‘section’ SQL Injection

source: https://www.securityfocus.com/bid/57564/info

2013-01-25 n3tw0rk webapps

Java Applet – Method Handle Remote Code Execution (Metasploit)

##

2013-01-24 Metasploit remote

Java Applet – AverageRangeStatisticImpl Remote Code Execution (Metasploit)

##

2013-01-24 Metasploit remote

ZoneMinder Video Server – packageControl Command Execution (Metasploit)

##

2013-01-24 Metasploit remote

Aloaha PDF Crypter (3.5.0.1164) – ActiveX Arbitrary File Overwrite

-----BEGIN PGP SIGNED MESSAGE-----

2013-01-24 shinnai dos

SQLiteManager 1.2.4 – Remote PHP Code Injection

#!/usr/bin/env python

2013-01-24 RealGame webapps

SonicWALL Gms 6 – Arbitrary File Upload (Metasploit)

##

2013-01-24 Metasploit remote

Novell eDirectory 8 – Remote Buffer Overflow (Metasploit)

##

2013-01-24 Metasploit remote

WordPress Plugin WP-Table Reloaded – ‘id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57664/info

2013-01-24 hiphop webapps

gpEasy CMS – ‘section’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57522/info

2013-01-23 High-Tech Bridge SA webapps

WordPress Theme Chocolate WP – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/57541/info

2013-01-23 Eugene Dokukin webapps

WordPress Plugin Developer Formatter – Cross-Site Request Forgery

====================================================================================================================

2013-01-22 Junaid Hussain webapps

Adult WebMaster Script – Password Disclosure

# Exploit Title: Yagina.com Adult Webmaster Script Admin Password Disclosure

2013-01-22 Dshellnoi Unix webapps

DigiLIBE – Execution-After-Redirect Information Disclosure

source: https://www.securityfocus.com/bid/57499/info

2013-01-22 Robert Gilbert webapps

Perforce P4Web – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57514/info

2013-01-22 Christy Philip Mathew webapps

NConf 1.3 – ‘/detail.php/detail_admin_items.php?id’ SQL Injection

# Exploit Title: nconf detail.php，detail_admin_items.php blind injection

2013-01-21 haidao webapps

Jenkins – Script-Console Java Execution (Metasploit)

##

2013-01-21 Metasploit remote

NConf 1.3 – Arbitrary File Creation

# Exploit Title: nconf file read and wrtite exploit

2013-01-21 haidao webapps

PHP-Charts 1.0 – PHP Code Execution (Metasploit)

##

2013-01-21 Metasploit remote

GNU Coreutils ‘sort’ Text Utility – Local Buffer Overflow

source: https://www.securityfocus.com/bid/57492/info

2013-01-21 anonymous local

F5 Networks BIG-IP – XML External Entity Injection

source: https://www.securityfocus.com/bid/57496/info

2013-01-21 anonymous remote