Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 315

Colloquy – Remote Denial of Service

source: https://www.securityfocus.com/bid/57255/info

2013-01-09 Aph3x dos

E Sms Script – Multiple SQL Injections

# E SMS Script Multiple SQL Injection Vulnerability

2013-01-08 cr4wl3r webapps

Advantech Webaccess HMI/SCADA Software – Persistence Cross-Site Scripting

##############################################################################

2013-01-08 SecPod Research webapps

IBM Cognos – ‘tm1admsd.exe’ Remote Overflow (Metasploit)

##

2013-01-08 Metasploit remote

WordPress Plugin Google Document Embedder – Arbitrary File Disclosure (Metasploit)

##

2013-01-08 Metasploit webapps

MotoCMS – ‘admin/data/users.xml’ Access Restriction / Information Disclosure

source: https://www.securityfocus.com/bid/57055/info

2013-01-08 AkaStep webapps

Joomla! Component com_incapsula – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57190/info

2013-01-08 Gjoko Krstic webapps

WordPress Plugin NextGEN Gallery – ‘test-head’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57200/info

2013-01-08 Am!r webapps

BT Home Hub – ‘uuid’ Buffer Overflow

source: https://www.securityfocus.com/bid/57243/info

2013-01-08 Zachary Cutlip dos

Mozilla Firefox < 17.0.1 - Flash Privileged Code Injection (Metasploit)

##

2013-01-08 Metasploit local

Foxit Reader 5.4.4.1128 Firefox Plugin – ‘npFoxitReaderPlugin.dll’ Stack Buffer Overflow (PoC)

2013-01-07 rgod dos

Ettercap 0.7.5.1 – Stack Overflow

Title: Ettercap Stack overflow (CWE-121)

2013-01-07 Sajjad Pourali dos

Movable Type 4.2x/4.3x – Web Upgrade Remote Code Execution (Metasploit)

##

2013-01-07 Metasploit remote

Facebook for Android – ‘LoginActivity’ Information Disclosure

source: https://www.securityfocus.com/bid/57173/info

2013-01-07 Takeshi Terada remote

FoxPlayer 2.9.0 – Denial of Service

#!/usr/bin/python

2013-01-06 metacom dos

Nexpose Security Console – Cross-Site Request Forgery

Product: Nexpose Security Console

2013-01-06 Robert Gilbert webapps

Havalite CMS – ‘comment’ HTML Injection

source: https://www.securityfocus.com/bid/57169/info

2013-01-06 Henri Salo webapps

pfSense 2.0.1 – Cross-Site Scripting / Cross-Site Request Forgery / Remote Command Execution

######################################################################

2013-01-05 Yann CAM webapps

Simple Web Server 2.3-rc1 – Directory Traversal

# Exploit Title: Simple Webserver 2.3-rc1 Directory Traversal

2013-01-04 CwG GeNiuS webapps

Enterasys NetSight – ‘nssyslogd.exe’ Remote Buffer Overflow (Metasploit)

##

2013-01-04 Metasploit remote

MyBB Profile Wii Friend Code – Multiple Vulnerabilities

# Exploit Title: MyBB Profile Wii Friend Code SQLi/Persistent XSS

2013-01-04 Ichi webapps

Multiple WordPress WPScientist Themes – Arbitrary File Upload

source: https://www.securityfocus.com/bid/57152/info

2013-01-04 JingoBD webapps

TomatoCart – ‘json.php’ Security Bypass

source: https://www.securityfocus.com/bid/57156/info

2013-01-04 Aung Khant webapps

Allied Telesis AT-MCF2000M 3.0.2 – Remote Command Execution

:::::::-. ... ::::::. :::.

2013-01-03 dun remote

WordPress Plugin Advanced Custom Fields – Remote File Inclusion (Metasploit)

##

2013-01-03 Metasploit remote

WordPress Plugin Uploader – Arbitrary File Upload

source: https://www.securityfocus.com/bid/57112/info

2013-01-03 Sammy FORGIT webapps

Belkin Wireless Router – Default WPS PIN Security

source: https://www.securityfocus.com/bid/57128/info

2013-01-03 ZhaoChunsheng remote

Microsoft Internet Explorer – CButton Object Use-After-Free (Metasploit)

##

2013-01-02 Metasploit remote

e107 1.0.1 – Arbitrary JavaScript Execution (via Cross-Site Request Forgery)

# Exploit Title: e107 v1.0.1 Administrator CSRF Resulting in Arbitrary Javascript Execution

2013-01-02 Joshua Reynolds webapps

e107 1.0.2 – SQL Injection (via Cross-Site Request Forgery)

# Exploit Title: e107 v1.0.2 Administrator CSRF Resulting in SQL Injection

2013-01-02 Joshua Reynolds webapps

Astium VoIP PBX 2.1 build 25399 – Remote Crash (PoC)

#!/usr/bin/python

2013-01-02 xistence dos

Astium VoIP PBX 2.1 build 25399 – Multiple Vulnerabilities/Remote Command Execution

#!/usr/bin/python

2013-01-02 xistence webapps

WordPress Plugin Xerte Online – ‘save.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/57098/info

2013-01-02 Sammy FORGIT webapps

osTicket – ‘l.php?url’ Arbitrary Site Redirect

source: https://www.securityfocus.com/bid/57111/info

2013-01-02 AkaStep webapps

osTicket – ‘tickets.php?status’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57111/info

2013-01-02 AkaStep webapps

WordPress Plugin Shopping Cart for WordPress – ‘/wp-content/plugins/levelfourstorefront/scripts/administration/exportsubscribers.php? reqID’ SQL Injection

source: https://www.securityfocus.com/bid/57101/info

2013-01-01 Sammy FORGIT webapps

WordPress Plugin Shopping Cart for WordPress – ‘/wp-content/plugins/levelfourstorefront/scripts/administration/backup.php?reqID’ SQL Injection

source: https://www.securityfocus.com/bid/57101/info

2013-01-01 Sammy FORGIT webapps

WordPress Plugin Shopping Cart for WordPress – ‘/wp-content/plugins/levelfourstorefront/scripts/administration/exportaccounts.php?reqID’ SQL Injection

source: https://www.securityfocus.com/bid/57101/info

2013-01-01 Sammy FORGIT webapps

IBM Lotus QuickR qp2 – ActiveX Buffer Overflow (Metasploit)

##

2012-12-31 Metasploit remote

IBM Lotus iNotes dwa85W – ActiveX Buffer Overflow (Metasploit)

##

2012-12-31 Metasploit remote

Microsoft Internet Explorer – CDwnBindInfo Object Use-After-Free (Metasploit)

##

2012-12-31 Metasploit remote

Grep < 2.11 - Integer Overflow Crash (PoC)

Grep

2012-12-31 Joshua Rogers dos

Aktiv Player 2.80 – Crash (PoC)

# !/usr/bin/python

2012-12-31 IndonesiaGokilTeam dos

MyBB 1.6.9 – ‘editpost.php?posthash’ Blind SQL Injection

MyBB

2012-12-31 Joshua Rogers webapps

Joomla! Component Spider Calendar – ‘date’ Blind SQL Injection

Happy New year for all

2012-12-31 Red-D3v1L webapps

BlazeDVD 6.1 – ‘.PLF’ File (ASLR + DEP Bypass) (Metasploit)

##

2012-12-31 Craig Freyman local

WHMCS 5.0 – Insecure Cookie Authentication Bypass

source: https://www.securityfocus.com/bid/57145/info

2012-12-31 Agd_Scorp webapps

WordPress Plugin Zingiri Forums – ‘language’ Local File Inclusion

source: https://www.securityfocus.com/bid/56777/info

2012-12-30 Amirh03in webapps

LShell 0.9.15 – Remote Code Execution

import paramiko

2012-12-30 drone remote

Ubiquiti AirOS 5.5.2 – (Authenticated) Remote Command Execution

#!/usr/bin/python

2012-12-29 xistence remote