Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 321

AWAuctionScript CMS – Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/56388/info

2012-11-04 X-Cisadane webapps

Joomla! Component Parcoauto – ‘idVeicolo’ SQL Injection

source: https://www.securityfocus.com/bid/56384/info

2012-11-03 Andrea Bocchetti webapps

WordPress Plugin All Video Gallery 1.1 – SQL Injection

# Exploit Title: Wordpress All Video Gallery 1.1 SQL Injection Vulnerability

2012-11-02 Ashiyane Digital Security Team webapps

vBulletin ChangUonDyU Advanced Statistics – SQL Injection

# Exploit Title: vBulletin ChangUonDyU Advanced Statistics - SQL Injection

2012-11-02 Juno_okyo webapps

PrestaShop 1.5.1 – Persistent Cross-Site Scripting

PrestaShop

2012-11-02 David Sopas webapps

Achievo 1.4.5 – Multiple Vulnerabilities (1)

Information

2012-11-02 Canberk BOLAT webapps

DCForum – ‘auth_user_file.txt’ File Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/56383/info

2012-11-02 r45c4l webapps

Aladdin Knowledge System Ltd – ‘ChooseFilePath’ Remote Buffer Overflow (Metasploit)

##

2012-11-01 Metasploit remote

WordPress Plugin bbPress – Multiple Vulnerabilities

# Souhail Hammou - Independant Security Researcher & Penetration Tester .

2012-11-01 Dark-Puzzle webapps

SIEMENS Sipass Integrated 2.6 Ethernet Bus – Arbitrary Pointer Dereference

IOActive Security Advisory

2012-11-01 Lucas Apa dos

Invision Power Board (IP.Board) 3.3.4 – ‘Unserialize()’ PHP Code Execution

2012-11-01 EgiX webapps

Endpoint Protector 4.0.4.2 – Multiple Persistent Cross-Site Scripting Vulnerabilities

Advisory Name: Multiple Persistent Cross-Site Scripting (XSS) in Endpoint

2012-11-01 CYBSEC Labs webapps

Microsoft Internet Explorer 9 – Memory Corruption Crash (PoC)

2012-11-01 Jean Pascal Pereira dos

RealPlayer 15.0.6.14(.3g2) – ‘WriteAV’ Crash (PoC)

Title : RealPlayer 15.0.6.14(.3g2) WriteAV Vulnerability

2012-11-01 coolkaveh dos

Joomla! Component Spider Catalog 1.1 – ‘Product_ID’ SQL Injection

1 ######################################### 1

2012-11-01 D4NB4R webapps

MyBB Follower User Plugin – SQL Injection

# Exploit Title: Follower User MyBB plugin SQL Injection 0day

2012-11-01 Zixem webapps

Konqueror 4.7.3 – Memory Corruption

-----BEGIN PGP SIGNED MESSAGE-----

2012-11-01 Tim Brown dos

vam shop 1.69 – Multiple Vulnerabilities

Product: VaM Shop

2012-10-31 Security Effect Team webapps

PG Dating Pro CMS 1.0 – Multiple Vulnerabilities

Title:

2012-10-31 Vulnerability-Lab webapps

WordPress Plugin foxypress 0.4.2.5 – Multiple Vulnerabilities

[waraxe-2012-SA#095] - Multiple Vulnerabilities in Wordpress FoxyPress Plugin

2012-10-31 waraxe webapps

NetCat CMS – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56340/info

2012-10-31 Security Effect Team webapps

SolarWinds Orion IP Address Manager (IPAM) – ‘search.aspx’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56342/info

2012-10-31 Anthony Trummer webapps

Axigen Mail Server – ‘Filename’ Directory Traversal

source: https://www.securityfocus.com/bid/56343/info

2012-10-31 Zhao Liang remote

BloofoxCMS 0.3.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56353/info

2012-10-31 Canberk BOLAT webapps

Freefloat FTP Server – ‘PUT’ Remote Buffer Overflow

#!/usr/bin/python

2012-10-30 Jacob Holcomb remote

Joomla! Component com_quiz – SQL Injection

source: https://www.securityfocus.com/bid/56338/info

2012-10-30 Daniel Barragan webapps

HP Operations Agent – Opcode ‘coda.exe’ 0x8c Buffer Overflow (Metasploit)

##

2012-10-29 Metasploit remote

HP Operations Agent – Opcode ‘coda.exe’ 0x34 Buffer Overflow (Metasploit)

##

2012-10-29 Metasploit remote

Microsoft Excel 2010 – Crash (PoC) (1)

Title : Microsoft Office Excel 2010 memory corruption

2012-10-29 coolkaveh dos

TP-Link TL-WR841N Router – Local File Inclusion

source: https://www.securityfocus.com/bid/56320/info

2012-10-29 Matan Azugi webapps

WordPress Plugin Easy Webinar – Blind SQL Injection

# Exploit Title: Wordpress Easy Webinar Plugin Blind SQL Injection Vulnerability

2012-10-28 Robert Cooper webapps

Aladdin Knowledge System Ltd – ‘PrivAgent.ocx’ ChooseFilePath Buffer Overflow

2012-10-28 b33f remote

hMAilServer 5.3.3 – IMAP Remote Crash (PoC)

# Exploit Title: hMailServer 5.3.3 IMAP Remote Crash PoC

2012-10-28 John Smith dos

Microsoft Windows Help Program – ‘WinHlp32.exe’ Crash (PoC)

#!/usr/bin/perl

2012-10-28 coolkaveh dos

ManageEngine Security Manager Plus 5.5 build 5505 – SQL Injection (Metasploit)

##

2012-10-28 Metasploit remote

Microsoft Publisher 2010 – Crash (PoC)

Title : Microsoft Office Publisher 2010 memory corruption

2012-10-28 coolkaveh dos

CorePlayer – ‘callback’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56334/info

2012-10-28 MustLive webapps

Microsoft Paint 5.1 – ‘.bmp’ Denial of Service

source: https://www.securityfocus.com/bid/56311/info

2012-10-27 coolkaveh dos

Aladdin Knowledge System Ltd. PrivAgent ActiveX Control 2.0 – Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----

2012-10-26 shinnai dos

Inventory – Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/56293/info

2012-10-26 G13 webapps

VicBlog – Multiple SQL Injections

source: https://www.securityfocus.com/bid/56307/info

2012-10-26 Geek webapps

EasyITSP – ‘customers_edit.php’ Authentication Bypass

source: https://www.securityfocus.com/bid/56321/info

2012-10-26 Michal Blaszczak webapps

KMPlayer 3.0.0.1440 – ‘.avi’ File Local Denial of Service

source: https://www.securityfocus.com/bid/56322/info

2012-10-26 Am!r dos

Microsoft Office Picture Manager 2010 – Crash (PoC)

Title : Microsoft Office Picture Manager 2010 memory corruption

2012-10-25 coolkaveh dos

Gramophone – ‘rs’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56299/info

2012-10-25 G13 webapps

Apple QuickTime Player 7.7.2 – Crash (PoC)

#!/usr/bin/perl

2012-10-24 coolkaveh dos

Microsoft Word 2010 – Crash (PoC)

Title : Microsoft Office Word 2010 Stack Overflow

2012-10-24 coolkaveh dos

Bitweaver 2.8.1 – Multiple Vulnerabilities

Trustwave SpiderLabs Security Advisory TWSL2012-016:

2012-10-24 Trustwave's SpiderLabs webapps

Turbo FTP Server 1.30.823 – PORT Overflow (Metasploit)

##

2012-10-23 Metasploit remote

ClanSphere 2011.3 – ‘cs_lang’ Cookie Local File Inclusion

Exploit Title: ClanSphere 2011.3 (cs_lang cookie parameter) Local File Include Vulnerability

2012-10-23 blkhtc0rp webapps