Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 317

MyYoutube MyBB Plugin 1.0 – SQL Injection

# Exploit Title: MyYoutube MyBB plugin SQL UPDATE injection.

2012-12-13 Zixem webapps

MyBB AJAX Chat – Persistent Cross-Site Scripting

# Title: MyBB AJAX Chat Persistent XSS Vulnerability

2012-12-13 Mr. P-teo webapps

Facebook Profile MyBB Plugin 2.4 – Persistent Cross-Site Scripting

# Exploit Title: MyBB Facebook Profile Plugin Persistant XSS

2012-12-13 limb0 webapps

WordPress Plugin Portable phpMyAdmin – Authentication Bypass

'portable-phpMyAdmin (WordPress Plugin)' Authentication Bypass (CVE-2012-5469)

2012-12-13 Mark Stanislav webapps

MyBB DyMy User Agent Plugin – ‘newreply.php’ SQL Injection

############################################################################

2012-12-13 JoinSe7en webapps

Cisco Wireless Lan Controller 7.2.110.0 – Multiple Vulnerabilities

Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities

2012-12-13 Jacob Holcomb dos

Centreon Enterprise Server 2.3.3 < 2.3.9-4 - Blind SQL Injection

#!/usr/bin/env python

2012-12-13 modpr0be webapps

N-able N-central – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/56933/info

2012-12-13 Cartel webapps

PHP Address Book – ‘group’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56937/info

2012-12-13 Kenneth F. Belva webapps

Linux Kernel 3.3.5 – Btrfs CRC32C feature Infinite Loop Local Denial of Service

source: https://www.securityfocus.com/bid/56939/info

2012-12-13 Pascal Junod dos

Microsoft Internet Explorer 6 < 10 - Mouse Tracking

Summary: Unprivileged attackers can track your system-wide mouse

2012-12-12 Nick Johnson remote

TipsOfTheDay MyBB Plugin – Multiple Vulnerabilities

# Exploit Title: TipsOfTheDay mybb plugin stored XSS and SQL injection vulnerabilitys.

2012-12-12 VipVince webapps

Novell File Reporter (NFR) Agent – XML Parsing Remote Code Execution

# wwww.abysssec.com

2012-12-12 Abysssec remote

Axway Secure Transport 5.1 SP2 – Directory Traversal

Secure Transport Path Traversal Vulnerability

2012-12-12 Sebastian Perez webapps

MyBB Bank- 3 Plugin – SQL Injection

# Exploit Title: Bank v3 MyBB plugin SQLi 0day

2012-12-11 Red_Hat webapps

Joomla! Component com_jooproperty 1.13.0 – Multiple Vulnerabilities

1 ######################################### 1

2012-12-11 D4NB4R webapps

MyBB Profile Blogs Plugin 1.2 – Multiple Vulnerabilities

# Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities.

2012-12-11 Zixem webapps

IrfanView 4.33 – ‘IMXCF.dll’ Plugin Code Execution

>From the simple.xcf file, 0x004ABABC will overwrite eip.

2012-12-11 beford dos

PHP-Nuke 8.2.4 – Cross-Site Request Forgery

###########################################################

2012-12-11 sajith webapps

HP Data Protector – DtbClsLogin Buffer Overflow (Metasploit)

##

2012-12-11 Metasploit remote

DIMIN Viewer 5.4.0 – Crash (PoC)

#!/usr/bin/perl

2012-12-10 Jean Pascal Pereira dos

FreeVimager 4.1.0 – Crash (PoC)

#!/usr/bin/perl

2012-12-10 Jean Pascal Pereira dos

Smartphone Pentest Framework – Multiple Remote Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/56881/info

2012-12-10 High-Tech Bridge webapps

SimpleInvoices invoices Module – Customer Field Cross-Site Scripting

source: https://www.securityfocus.com/bid/56882/info

2012-12-10 tommccredie webapps

Splunk 5.0 – Custom App Remote Code Execution (Metasploit)

##

2012-12-09 Metasploit remote

Maxthon3 – about:history XCS Trusted Zone Code Execution (Metasploit)

##

2012-12-09 Metasploit remote

Freefloat FTP Server – Arbitrary File Upload (Metasploit)

##

2012-12-09 Metasploit remote

Nagios XI Network Monitor Graph Explorer Component – Command Injection (Metasploit)

##

2012-12-09 Metasploit remote

Freefloat FTP Server – ‘USER’ Remote Buffer Overflow

#Exploit title: FreeFloat FTP Server Remote Command Execution USER Command Buffer Overflow

2012-12-09 D35m0nd142 remote

SumatraPDF 2.1.1/MuPDF 1.0 – Integer Overflow

Sumatra 2.1.1/MuPDF 1.0 Integer Overflow

2012-12-09 beford dos

Google Android Kernel 2.6 – Local Denial of Service Crash (PoC)

# Exploit Title: Android Kernel 2.6 Local DoS

2012-12-09 G13 dos

MyBB KingChat Plugin – Persistent Cross-Site Scripting

Exploit Title: MyBB 'kingchat' chat-box plugin.

2012-12-09 VipVince webapps

Cisco DPC2420 – Multiples Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----

2012-12-09 Facundo M. de la Cruz webapps

Centrify Deployment Manager 2.1.0.283 – Local Privilege Escalation

Centrify Deployment Manager v2.1.0.283 local root

2012-12-09 Larry W. Cashdollar local

Clipbucket 2.6 Revision 738 – Multiple SQL Injections

Advisory ID: HTB23125

2012-12-09 High-Tech Bridge SA webapps

Achievo 1.4.5 – Multiple Vulnerabilities (2)

Advisory ID: HTB23126

2012-12-09 High-Tech Bridge SA webapps

TVMOBiLi 2.1.0.3557 – Denial of Service

Advisory ID: HTB23120

2012-12-09 High-Tech Bridge SA dos

vBulletin ajaxReg Module – SQL Injection

source: https://www.securityfocus.com/bid/56877/info

2012-12-08 Cold Zero webapps

VideoLAN VLC Media Player 2.0.4 – ‘.swf’ Crash (PoC)

Title : VLC media player 2.0.4 buffer overflow POC

2012-12-07 coolkaveh dos

m0n0wall 1.33 – Multiple Cross-Site Request Forgery Vulnerabilities

######################################################################

2012-12-07 Yann CAM webapps

IBM System Director Agent – DLL Injection (Metasploit)

##

2012-12-07 Metasploit remote

WordPress Plugin Simple Gmail Login – Stack Trace Information Disclosure

source: https://www.securityfocus.com/bid/56860/info

2012-12-07 Aditya Balapure webapps

FOOT Gestion – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56862/info

2012-12-07 Emmanuel Farcy webapps

Nvidia Install Application 2.1002.85.551 – ‘NVI2.dll’ Unicode Buffer Overflow (PoC)

2012-12-06 LiquidWorm dos

Adobe IndesignServer 5.5 – SOAP Server Arbitrary Script Execution (Metasploit)

##

2012-12-06 Metasploit remote

Oracle MySQL (Windows) – MOF Execution (Metasploit)

##

2012-12-06 Metasploit remote

Kordil EDms 2.2.60rc3 – SQL Injection

# Exploit Title: Kordil EDMS v2.2.60rc3 SQL Injection Vulnerability

2012-12-06 Woody Hughes webapps

Oracle MySQL / MariaDB – Insecure Salt Generation Security Bypass

source: https://www.securityfocus.com/bid/56837/info

2012-12-06 kingcope remote

Ektron 8.02 – XSLT Transform Remote Code Execution (Metasploit)

##

2012-12-05 Metasploit remote

(SSH.com Communications) SSH Tectia – USERAUTH Change Request Password Reset (Metasploit)

##

2012-12-05 Metasploit remote