Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 316

RealPlayer – ‘.RealMedia’ File Handling Buffer Overflow (Metasploit)

##

2012-12-27 Metasploit remote

Astaro Security Gateway 8.1 – HTML Injection

source: https://www.securityfocus.com/bid/51301/info

2012-12-27 Vulnerability Research Laboratory remote

cPanel WebHost Manager (WHM) – ‘/webmail/x3/mail/clientconf.html?acct’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57060/info

2012-12-27 Christy Philip Mathew webapps

cPanel – ‘detailbw.html’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57060/info

2012-12-27 Christy Philip Mathew webapps

WHM – ‘filtername’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57061/info

2012-12-27 Rafay Baloch webapps

Guru Auction 2.0 – Multiple SQL Injections

) ) ) ( ( ( ( ( ) )

2012-12-26 v3n0m webapps

cPanel – ‘dir’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57064/info

2012-12-26 Rafay Baloch webapps

Microsoft SQL Server – Database Link Crawling Command Execution (Metasploit)

##

2012-12-25 Metasploit remote

IBM Lotus Notes Client URL Handler – Command Injection (Metasploit)

##

2012-12-25 Metasploit remote

WordPress Plugin WP-Property – Arbitrary ‘.PHP’ File Upload (Metasploit)

##

2012-12-25 Metasploit remote

WordPress Plugin Asset-Manager – Arbitrary ‘.PHP’ File Upload (Metasploit)

##

2012-12-25 Metasploit remote

City Directory Review and Rating Script – ‘search.php’ SQL Injection

# Exploit Title: City Directory Review and Rating Script SQL Injection

2012-12-24 3spi0n webapps

MyBB HM My Country Flags – SQL Injection

# Exploit title: HM My Country Flags SQL Injection

2012-12-24 JoinSe7en webapps

MyBB AwayList Plugin – ‘index.php?id’ SQL Injection

# Exploit Title: AwayList MyBB plugin SQLi 0day

2012-12-24 Red_Hat webapps

Hero Framework – ‘search?q’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57035/info

2012-12-24 Stefan Schurtz webapps

Hero Framework – users/login ‘Username’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57035/info

2012-12-24 Stefan Schurtz webapps

cPanel – ‘account’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57045/info

2012-12-24 Rafay Baloch webapps

TWiki MAKETEXT – Remote Command Execution (Metasploit)

##

2012-12-23 Metasploit remote

Foswiki MAKETEXT – Remote Command Execution (Metasploit)

##

2012-12-23 Metasploit remote

Netwin SurgeFTP – Remote Command Execution (Metasploit)

##

2012-12-23 Metasploit remote

City Reviewer – ‘search.php’ Script SQL Injection

source: https://www.securityfocus.com/bid/57049/info

2012-12-22 3spi0n webapps

Sony PC Companion 2.1 – ‘DownloadURLToFile()’ Unicode Stack Buffer Overflow

Sony PC Companion 2.1 (DownloadURLToFile()) Stack-based Unicode Buffer Overload SEH

2012-12-21 LiquidWorm dos

Sony PC Companion 2.1 – ‘Load()’ Unicode Stack Buffer Overflow

Sony PC Companion 2.1 (Load()) Stack-based Unicode Buffer Overload SEH

2012-12-21 LiquidWorm dos

Sony PC Companion 2.1 – ‘CheckCompatibility()’ Unicode Stack Buffer Overflow

Sony PC Companion 2.1 (CheckCompatibility()) Stack-based Unicode Buffer Overload

2012-12-21 LiquidWorm dos

Sony PC Companion 2.1 – ‘Admin_RemoveDirectory()’ Unicode Stack Buffer Overflow

Sony PC Companion 2.1 (Admin_RemoveDirectory()) Stack-based Unicode Buffer Overload SEH

2012-12-21 LiquidWorm dos

YeaLink IP Phone SIP-TxxP Firmware 9.70.0.100 – Multiple Vulnerabilities

#+-------------------------------------------------------------------------------------------------------------------...

2012-12-21 xistence webapps

SelectSurvey CMS – ‘ASP.NET’ Arbitrary File Upload

=============================================================

2012-12-21 040 webapps

banana dance b.2.6 – Multiple Vulnerabilities

Advisory ID: HTB23118

2012-12-21 High-Tech Bridge SA webapps

FireFly Mediaserver 1.0.0.1359 – Null Pointer Dereference

Advisory ID: HTB23129

2012-12-21 High-Tech Bridge SA dos

Elite Bulletin Board 2.1.21 – Multiple SQL Injections

Advisory ID: HTB23133

2012-12-21 High-Tech Bridge SA webapps

VoipNow Service Provider Edition – Arbitrary Command Execution

source: https://www.securityfocus.com/bid/57032/info

2012-12-21 i-Hmx webapps

Google Android 4.2 Browser and WebView – ‘addJavascriptInterface’ Code Execution (Metasploit)

##

2012-12-21 Metasploit local

InduSoft Web Studio – ‘ISSymbol.ocx InternationalSeparator()’ Heap Overflow (Metasploit)

##

2012-12-20 Metasploit remote

NetWin SurgeFTP – (Authenticated) Admin Command Injection (Metasploit)

require 'msf/core'

2012-12-20 Spencer McIntyre remote

gdb (GNU debugger) 7.5.1 – Null Pointer Dereference

After patching an ELF file with this code, the following happens:

2012-12-20 nitr0us dos

IDA Pro 6.3 – Crash (PoC)

pment)

2012-12-20 nitr0us dos

WordPress Theme Clockstone (and other CMSMasters Themes) – Arbitrary File Upload

# Exploit Title: [Clockstone and Various other CMSMasters Theme File Upload Vulnerabilities]

2012-12-19 DigiP webapps

DIMIN Viewer 5.4.0 – GIF Decode Crash (PoC)

PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/23496.tar.gz

2012-12-19 Lizhi Wang dos

SonicWALL SonicOS 5.8.1.8 WAF – Cross-Site Scripting

Title:

2012-12-19 Vulnerability-Lab webapps

Enterpriser16 Load Balancer 7.1 – Multiple Cross-Site Scripting Vulnerabilities

Title:

2012-12-19 Vulnerability-Lab webapps

Joomla! Component com_ztautolink – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/56994/info

2012-12-19 Xr0b0t webapps

Joomla! Component com_bit – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/56995/info

2012-12-19 Xr0b0t webapps

Adobe Flash Player 11.5.502.135 – Crash (PoC)

Title : Adobe Flash Player 11,5,502,135 memory corruption

2012-12-18 coolkaveh dos

Crystal Reports CrystalPrintControl – ActiveX ServerResourceVersion Property Overflow (Metasploit)

##

2012-12-18 Metasploit remote

MyBB Transactions Plugin – ‘transaction’ SQL Injection

source: https://www.securityfocus.com/bid/57009/info

2012-12-18 limb0 webapps

PHPWCMS 1.5.4.6 – ‘preg_replace’ Multiple Vulnerabilities

2012-12-17 aeon webapps

WordPress Plugin RokBox Plugin – ‘/wp-content/plugins/wp_rokbox/jwplayer/jwplayer.swf?abouttext’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56953/info

2012-12-17 MustLive webapps

MyBB User Profile Skype ID Plugin 1.0 – Persistent Cross-Site Scripting

# Exploit Title: Profile Skype ID MyBB Plugin Stored XSS

2012-12-16 limb0 webapps

Totem Movie Player 3.4.3 (Ubuntu) – Stack Corruption

Title : Totem movie player(Ubuntu)stack corruption

2012-12-16 coolkaveh dos

Social Sites MyBB Plugin 0.2.2 – Cross-Site Scripting

# Exploit Title: Social Sites MyBB Plugin 0.2.2 Cross Site Scripting

2012-12-14 s3m00t webapps