Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 318

Advantech Studio 7.0 – SCADA/HMI Directory Traversal

# Exploit Title: Advantech Studio v7.0 SCADA/HMI Directory Traversal 0-day

2012-12-04 Nin3 webapps

WordPress Theme Nest – ‘codigo’ SQL Injection

source: https://www.securityfocus.com/bid/56792/info

2012-12-04 Ashiyane Digital Security Team webapps

Sourcefabric Newscoop – ‘f_email’ SQL Injection

source: https://www.securityfocus.com/bid/56800/info

2012-12-04 AkaStep webapps

SchoolCMS – Persistent Cross-Site Scripting

Title: SchoolCMS Persistant XSS.

2012-12-03 VipVince webapps

MyBB KingChat Plugin – SQL Injection

# Exploit Title: KingChat MyBB plugin SQL Injection 0day

2012-12-03 Red_Hat webapps

Opera Web Browser 12.11 – Crash (PoC)

Title : Opera Web Browser 12.11 WriteAV Vulnerability

2012-12-03 coolkaveh dos

Symantec Messaging Gateway 9.5.3-3 – Cross-Site Request Forgery

=======

2012-12-03 Ben Williams webapps

Symantec Messaging Gateway 9.5.3-3 – Arbitrary File Download

=======

2012-12-03 Ben Williams webapps

FirePass SSL VPN – Local File Inclusion

SEC Consult Vulnerability Lab Security Advisory < 20121203-0 >

2012-12-03 SEC Consult webapps

MySQL 5.1/5.5 (Windows) – ‘MySQLJackpot’ Remote Command Execution

FARLiGHT ELiTE HACKERS LEGACY R3L3ASE

2012-12-02 kingcope remote

IBM System Director Agent – Remote System Level

IBM System Director Remote System Level Exploit (CVE-2009-0880 extended zeroday)

2012-12-02 kingcope remote

MySQL (Linux) – Stack Buffer Overrun (PoC)

#!/usr/bin/perl

2012-12-02 kingcope dos

MySQL (Linux) – Database Privilege Escalation

use DBI();

2012-12-02 kingcope local

MySQL (Linux) – Heap Overrun (PoC)

# MySQL Heap Overrun

2012-12-02 kingcope dos

MySQL – Denial of Service (PoC)

5.5.19-log on SuSE Linux

2012-12-02 kingcope dos

freeFTPd 1.2.6 – Remote Authentication Bypass

FreeFTPD all versions Remote System Level Exploit Zero-Day -- No username needed, straightforward rooting!

2012-12-02 kingcope remote

MySQL – Remote User Enumeration

# MySQL User Account Enumeration Utility

2012-12-02 kingcope remote

freeSSHd 2.1.3 – Remote Authentication Bypass

FreeSSHD all version Remote Authentication Bypass ZERODAY

2012-12-02 kingcope remote

(SSH.com Communications) SSH Tectia (SSH < 2.0-6.1.9.95 / Tectia 6.1.9.95) - Remote Authentication Bypass

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/23082.zip

2012-12-02 kingcope remote

MySQL – ‘Stuxnet Technique’ Windows Remote System

MySQL Scanner & MySQL Server for Windows Remote SYSTEM Level Exploit

2012-12-02 kingcope remote

BlazeVideo HDTV Player Pro 6.6 – Filename Handling (Metasploit)

##

2012-12-01 Metasploit local

TinyMCPUK – ‘test’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56767/info

2012-12-01 eidelweiss webapps

Fortinet FortiWeb (Multiple Appliances) – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56774/info

2012-12-01 Benjamin Kunz Mejri remote

Free Hosting Manager 2.0 – ‘id’ SQL Injection

##########################################################################

2012-11-30 Yakir Wizman webapps

SmartCMS – ‘/index.php?menuitem’ SQL Injection / Cross-Site Scripting

##########################################################################

2012-11-30 Yakir Wizman webapps

SilverStripe CMS 3.0.2 – (Multiple Vulnerabilities) Cross-Site Scripting / Cross-Site Request Forgery

Sense of Security - Security Advisory - SOS-12-011

2012-11-30 Sense of Security webapps

UMPlayer Portable 0.95 – Crash (PoC)

# Exploit Title: UMPlayer (Portable Edition)

2012-11-29 p3kok dos

Oracle OpenSSO 8.0 – Multiple Cross-Site Scripting POST Injection Vulnerabilities

Oracle OpenSSO 8.0 Multiple XSS POST Injection Vulnerabilities

2012-11-29 LiquidWorm webapps

FCKEditor Core ASP 2.6.8 – Arbitrary File Upload Protection Bypass

- Title: FCKEditor 2.6.8 ASP Version File Upload Protection bypass

2012-11-29 Soroush Dalili webapps

Network Shutdown Module 3.21 – ‘sort_values’ Remote PHP Code Injection (Metasploit)

##

2012-11-29 Metasploit remote

Microsoft Windows – AlwaysInstallElevated MSI (Metasploit)

##

2012-11-29 Metasploit local

WordPress Plugin Video Lead Form – ‘errMsg’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56737/info

2012-11-29 Aditya Balapure webapps

WordPress Theme Toolbox – ‘mls’ SQL Injection

source: https://www.securityfocus.com/bid/56745/info

2012-11-29 Ashiyane Digital Security Team webapps

Elastix – ‘page’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56746/info

2012-11-29 cheki webapps

gleamtech filevista/fileultimate 4.6 – Directory Traversal

Hello

2012-11-28 Soroush Dalili webapps

Apple QuickTime 7.7.2 – MIME Type Buffer Overflow (Metasploit)

##

2012-11-28 Metasploit remote

BigDump 0.29b and 0.32b – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/56744/info

2012-11-28 Ur0b0r0x webapps

WordPress Theme CStar Design – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56694/info

2012-11-27 Amirh03in webapps

mcrypt 2.5.8 – Local Stack Overflow

#!/usr/bin/perl

2012-11-26 Tosh local

BuyClassifiedScript – PHP Code Injection

# Exploit Title: buyclassifiedscript PHP code injection vulnerability

2012-11-26 d3b4g webapps

BlazeVideo HDTV Player 6.6 Professional – Direct RETN

# Exploit Title: BlazeVideo HDTV Player 6.6 Professional (Direct Retn)

2012-11-26 Nezim local

Aviosoft Digital TV Player Professional 1.x – ‘.PLF’ Direct Retn

# Exploit Title: Aviosoft Digital TV Player Professional 1.x (Direct Retn)

2012-11-26 Nezim local

Websense Proxy – Filter Bypass

Websense Proxy Filter Bypass

2012-11-26 Nahuel Grisolia dos

PRADO PHP Framework 3.2.0 – Arbitrary File Read

PRADO PHP Framework 3.2.0 Arbitrary File Read Vulnerability

2012-11-26 LiquidWorm webapps

SmartCMS – ‘index.php?idx’ SQL Injection

=============================================================================================================

2012-11-26 NoGe webapps

mcrypt 2.6.8 – Stack Buffer Overflow (PoC)

#!/usr/bin/env python

2012-11-26 _ishikawa dos

WordPress Plugin Ads Box – ‘count’ SQL Injection

source: https://www.securityfocus.com/bid/56681/info

2012-11-26 Ashiyane Digital Security Team webapps

Forescout CounterACT – ‘a’ Open Redirection

source: https://www.securityfocus.com/bid/56687/info

2012-11-26 Joseph Sheridan webapps

WordPress Theme Wp-ImageZoom – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56691/info

2012-11-26 Amirh03in webapps

jBilling 3.0.2 – Cross-Site Scripting

# Exploit Title: jBilling 3.0.2 Cross Site Scripting Vulnerability

2012-11-25 Woody Hughes webapps