Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 319

ES CmS 0.1 – SQL Injection

# Exploit Title: ES CmS 0.1 Sql Injection Vulnerability

2012-11-25 hossein beizaee webapps

Apple QuickTime 7.7.2 – TeXML Style Element font-table Field Stack Buffer Overflow (Metasploit)

##

2012-11-24 Metasploit remote

Beat Websites – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56683/info

2012-11-24 Metropolis webapps

TrouSerS – Denial of Service

# crash_tcsd.py

2012-11-23 Andy Lutomirski dos

Greenstone – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/56662/info

2012-11-23 AkaStep remote

Twitter for iPhone – Man in the Middle Security

source: https://www.securityfocus.com/bid/56665/info

2012-11-23 Carlos Reventlov remote

lighttpd 1.4.31 – Denial of Service (PoC)

#!/bin/bash

2012-11-22 t4c dos

NetIQ Privileged User Manager 2.3.1 – ‘ldapagnt_eval()’ Perl Remote Code Execution (Metasploit)

##

2012-11-22 Metasploit remote

WordPress Plugin Zingiri Web Shop – ‘path’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/56659/info

2012-11-22 Ashiyane Digital Security Team webapps

WordPress Plugin Webplayer – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56660/info

2012-11-22 Novin hack webapps

WordPress Plugin Plg Novana – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56661/info

2012-11-22 sil3nt webapps

WordPress Plugin Zarzadzonie Kontem – ‘ajaxfilemanager.php’ Script Arbitrary File Upload

source: https://www.securityfocus.com/bid/56663/info

2012-11-22 Ashiyane Digital Security Team webapps

WordPress Theme Magazine Basic – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56664/info

2012-11-22 Novin hack webapps

OpenBSD 4.x – Portmap Remote Denial of Service

// source: https://www.securityfocus.com/bid/56671/info

2012-11-22 auto236751 dos

Narcissus Image Configuration – Passthru (Metasploit)

##

2012-11-21 Metasploit remote

Yii Framework 1.1.8 – Search SQL Injection

# Exploit Title: Yii Framework - Search SQL Injection Vulnerability

2012-11-21 Juno_okyo webapps

Adobe Reader 10.1.4 – JP2KLib&CoolType Crash (PoC)

Title : Adobe Reader 10.1.4 JP2KLib&CoolType WriteAV Vulnerability

2012-11-21 coolkaveh dos

ManageEngine ServiceDesk 8.0 – Multiple Vulnerabilities

Title:

2012-11-21 Vulnerability-Lab webapps

PHP Server Monitor – Persistent Cross-Site Scripting

# Author: loneferret of Offensive Security

2012-11-21 loneferret webapps

dotProject 2.1.x – ‘index.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/56624/info

2012-11-21 High-Tech Bridge webapps

dotProject 2.1.x – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56624/info

2012-11-21 High-Tech Bridge webapps

Feng Office – Security Bypass / HTML Injection

source: https://www.securityfocus.com/bid/56626/info

2012-11-21 Ur0b0r0x webapps

XiVO – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/56652/info

2012-11-21 Francis Provencher webapps

Microsoft Office OneNote 2010 – Crash (PoC)

Title : Microsoft Office OneNote 2010 WriteAV Vulnerability

2012-11-20 coolkaveh dos

FormatFactory 3.0.1 – Profile File Handling Buffer Overflow

#!/usr/bin/python

2012-11-20 Julien Ahrens local

SonicWALL CDP 5040 6.x – Multiple Vulnerabilities

Title:

2012-11-20 Vulnerability-Lab webapps

WordPress Plugin Facebook Survey 1.0 – SQL Injection

Title:

2012-11-20 Vulnerability Research Laboratory webapps

LAN.FS Messenger 2.4 – Command Execution

Title:

2012-11-20 Vulnerability-Lab remote

Apple QuickTime 7.7.2 – Targa image Buffer Overflow

Versions :

2012-11-20 Senator of Pirates dos

openSIS 5.1 – ‘ajax.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/56598/info

2012-11-20 Julian Horoszkiewicz webapps

WordPress Theme Madebymilk – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56608/info

2012-11-20 Ashiyane Digital Security Team webapps

Novell File Reporter (NFR) Agent FSFUI Record – Arbitrary File Upload / Remote Code Execution (Metasploit)

##

2012-11-19 Metasploit remote

WeBid 1.0.5 – Cross-Site Scripting

# Exploit Title: WeBid

2012-11-19 Woody Hughes webapps

weBid 1.0.5 – Directory Traversal

# Author: loneferret of Offensive Security

2012-11-19 loneferret webapps

Omni-Secure – ‘dir’ Multiple File Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/56575/info

2012-11-19 HaCkeR_EgY webapps

Splunk 4.3.1 – Denial of Service

source: https://www.securityfocus.com/bid/56581/info

2012-11-19 Alexander Klink dos

friendsinwar FAQ Manager – ‘view_faq.php?question’ SQL Injection

# Exploit Title: friendsinwar FAQ Manager SQL Injection (URL) Vulnerability

2012-11-16 unsuprise webapps

Media Player Classic (MPC) 1.5 – WebServer Request Handling Remote Denial of Service

source: https://www.securityfocus.com/bid/56567/info

2012-11-16 X-Cisadane dos

WordPress Theme Dailyedition-mouss – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56568/info

2012-11-16 Ashiyane Digital Security Team webapps

WordPress Plugin Tagged Albums – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56569/info

2012-11-16 Ashiyane Digital Security Team webapps

Friends in War The FAQ Manager – ‘question’ SQL Injection

source: https://www.securityfocus.com/bid/56576/info

2012-11-16 unsuprise webapps

Open-Realty 2.5.8 – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/56580/info

2012-11-16 Aung Khant webapps

ATutor 2.1 – ‘tool_file’ Local File Inclusion

source: https://www.securityfocus.com/bid/56600/info

2012-11-16 Julian Horoszkiewicz webapps

Oracle Database Client System Analyzer – Arbitrary File Upload (Metasploit)

##

2012-11-15 Metasploit remote

iDev Rentals 1.0 – Multiple Vulnerabilities

Title:

2012-11-15 Vulnerability-Lab webapps

Friends in War Make or Break 1.3 – Authentication Bypass

# Exploit Title: friendsinwar Make or break V1.3 SQL Injection (authbypass) Vulnerability

2012-11-15 d3b4g webapps

Novell NetIQ Privileged User Manager 2.3.1 – ‘auth.dll’ pa_modify_accounts() Remote Code Execution

Novell NetIQ Privileged User Manager 2.3.1 auth.dll pa_modify_accounts()

2012-11-15 rgod remote

Novell NetIQ Privileged User Manager 2.3.1 – ‘ldapagnt.dll’ ldapagnt_eval() Perl Code Evaluation Remote Code Execution

Novell NetIQ Privileged User Manager 2.3.1 ldapagnt.dll ldapagnt_eval()

2012-11-15 rgod remote

Broadcom BCM4325 / BCM4329 Devices – Denial of Service

# Exploit Author:

2012-11-15 CoreLabs dos

BabyGekko 1.2.2e – Multiple Vulnerabilities

Advisory ID: HTB23122

2012-11-15 High-Tech Bridge SA webapps