Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 314

Aloaha Credential Provider Monitor 5.0.226 – Local Privilege Escalation

Aloaha Credential Provider Monitor 5.0.226 Local Privilege Escalation Vulnerability

2013-01-20 LiquidWorm local

Scripts Genie Classified Ultra – SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/57465/info

2013-01-20 3spi0n webapps

Joomla! Component com_collector – Arbitrary File Upload

# Exploit Title:Joomla com_collecter shell upload

2013-01-19 Red Dragon_al webapps

WordPress Plugin Ripe HD FLV Player – SQL Injection

-------------------------------------------------------------------

2013-01-19 Zikou-16 webapps

PHP-Charts – Arbitrary PHP Code Execution

===============================================================

2013-01-18 AkaStep webapps

SonicWALL GMS/Viewpoint/Analyzer – Authentication Bypass

-------------------------- NSOADV-2013-002 ---------------------------

2013-01-18 Nikolas Sotiriu webapps

Linksys WRT54GL Firmware 4.30.15 build 2 – Multiple Vulnerabilities

Device Name: Linksys WRT54GL v1.1

2013-01-18 m-1-k-3 webapps

Novell NCP – Remote Command Execution

In the interest of full-disclosure, here is a remote exploit for the

2013-01-18 Gary Nilson remote

SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x – Remote Command Execution

#!/usr/bin/perl

2013-01-18 Nikolas Sotiriu webapps

Nvidia Display Driver Service (Nsvr) – Local Buffer Overflow

NVidia Display Driver Service (Nsvr) Exploit - Christmas 2012

2013-01-18 Jon Bailey local

Jenkins CI Script Console – Command Execution (Metasploit)

##

2013-01-18 Spencer McIntyre remote

Apache OFBiz 10.4.x – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57463/info

2013-01-18 Juan Caillava remote

Invision Gallery 2.0.5 – SQL Injection

##############

2013-01-17 Ashiyane Digital Security Team webapps

IP.Gallery – ‘img’ SQL Injection

source: https://www.securityfocus.com/bid/57444/info

2013-01-17 Ashiyane Digital Security Team webapps

Oracle Application Framework – Diagnostic Mode Bypass

Trustwave SpiderLabs Security Advisory TWSL2012-023:

2013-01-16 Trustwave's SpiderLabs webapps

Cydia Repo Manager – Cross-Site Request Forgery

# Cydia Repo Manager CSRF Vulnerability

2013-01-16 Ramdan Yantu webapps

Nagios3 – ‘history.cgi’ Host Command Execution (Metasploit)

##

2013-01-16 Metasploit remote

freeSSHd 1.2.6 – Authentication Bypass (Metasploit)

require 'msf/core'

2013-01-15 Metasploit remote

CMS snews – SQL Injection

____ ____ ____ _______/ |________ ____ ____

2013-01-15 By onestree webapps

phpLiteAdmin – ‘table’ SQL Injection

source: https://www.securityfocus.com/bid/57431/info

2013-01-15 KedAns-Dz webapps

phpShop 2.0 – SQL Injection

# Exploit Title : phpshop 2.0 SQL Injection Vulnerability

2013-01-14 By onestree webapps

Serva 2.0.0 – DNS Server QueryName Remote Denial of Service

#!/usr/bin/python

2013-01-14 Julien Ahrens dos

Serva 2.0.0 – HTTP Server GET Remote Denial of Service

#!/usr/bin/python

2013-01-14 Julien Ahrens dos

Nagios3 – ‘history.cgi’ Remote Command Execution

#!/usr/bin/python

2013-01-13 blasty remote

phlyLabs phlyMail Lite 4.03.04 – ‘go’ Open Redirect

phlyLabs phlyMail Lite 4.03.04 (go param) Open Redirect Vulnerability

2013-01-13 LiquidWorm webapps

phlyLabs phlyMail Lite 4.03.04 – Full Path Disclosure / Persistent Cross-Site Scripting

phlyLabs phlyMail Lite 4.03.04 Path Disclosure and Stored XSS Vulnerabilities

2013-01-13 LiquidWorm webapps

PHPLiteAdmin 1.9.3 – Remote PHP Code Injection

# Exploit Title: phpliteadmin

2013-01-11 L@usch webapps

Java Applet JMX – Remote Code Execution (Metasploit) (1)

##

2013-01-11 Metasploit remote

Microsoft Lync 2010 4.0.7577.0 – User-Agent Header Handling Arbitrary Command Execution

source: https://www.securityfocus.com/bid/57300/info

2013-01-11 Christopher Emerson remote

Microsoft Internet Explorer 8 – Fixed Col Span ID (Full ASLR + DEP Bypass) (MS12-037)

2013-01-10 sickness remote

eXtplorer 2.1 – Arbitrary File Upload (Metasploit)

##

2013-01-10 Metasploit remote

Ruby on Rails – XML Processor YAML Deserialization Code Execution (Metasploit)

##

2013-01-10 Metasploit remote

Microsoft Internet Explorer – Option Element Use-After-Free (MS11-081) (Metasploit)

##

2013-01-10 Metasploit remote

Honeywell Tema Remote Installer – ActiveX Remote Code Execution (Metasploit)

##

2013-01-10 Metasploit remote

Nero MediaHome 4.5.8.0 – Denial of Service

Advisory ID: HTB23130

2013-01-10 High-Tech Bridge SA dos

Colloquy 1.3.5/1.3.6 – Denial of Service

#!/usr/bin/python3

2013-01-10 UberLame dos

WordPress Plugin Gallery – ‘filename_1’ Arbitrary File Access

source: https://www.securityfocus.com/bid/57256/info

2013-01-10 Beni_Vanda webapps

WebsiteBaker Addon Concert Calendar 2.1.4 – Multiple Vulnerabilities

Advisory: Websitebaker Add-on 'Concert Calendar 2.1.4' XSS & SQLi vulnerability

2013-01-09 Stefan Schurtz webapps

Free Blog 1.0 – Multiple Vulnerabilities

# Free Blog 1.0 Multiple Vulnerability

2013-01-09 cr4wl3r webapps

Watson Management Console 4.11.2.G – Directory Traversal

# Exploit Title: Watson Management Console Directory Traversal Vulnerability

2013-01-09 Dhruv Shah webapps

Inmatrix Ltd. Zoom Player 8.5 – ‘.jpeg’File Memory Corruption / Arbitrary Code Execution

# Exploit Title: Inmatrix Ltd. Zoom Player Crafted JPEG File Memory Corruption and Arbitrary Code Execution Exploit.

2013-01-09 Debasish Mandal local

WeBid 1.0.6 – SQL Injection

# Exploit Title: WeBid 1.0.6 SQL Injection Vulnerability

2013-01-09 Life Wasted webapps

Dell OpenManage Server Administrator – Cross-Site Scripting

source: https://www.securityfocus.com/bid/57212/info

2013-01-09 Tenable NS remote

tinybrowser – ‘type’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57230/info

2013-01-09 MustLive webapps

TinyBrowser – ‘tinybrowser.php’ Directory Listing

source: https://www.securityfocus.com/bid/57230/info

2013-01-09 MustLive webapps

TinyBrowser – ‘edit.php’ Directory Listing

source: https://www.securityfocus.com/bid/57230/info

2013-01-09 MustLive webapps

Schmid Watson Management Console – Directory Traversal

source: https://www.securityfocus.com/bid/57237/info

2013-01-09 Dhruv Shah remote

Prizm Content Connect – Arbitrary File Upload

source: https://www.securityfocus.com/bid/57242/info

2013-01-09 Include Security Research webapps

Samsung Kies – Remote Buffer Overflow

source: https://www.securityfocus.com/bid/57249/info

2013-01-09 High-Tech Bridge remote

Quick.CMS / Quick.Cart – Cross-Site Scripting

source: https://www.securityfocus.com/bid/57254/info

2013-01-09 High-Tech Bridge webapps