Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 322

SMF – ‘view’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56223/info

2012-10-23 Am!r webapps

Joomla! Component com_commedia – ‘task’ SQL Injection

Exploit Title: Joomla commedia Remote Exploit

2012-10-22 D4NB4R webapps

Movable Type Pro 5.13en – Persistent Cross-Site Scripting

-----BEGIN PGP SIGNED MESSAGE-----

2012-10-22 sqlhacker webapps

RealPlayer 15.0.6.14.3gp – Crash (PoC)

#!/usr/bin/perl

2012-10-22 coolkaveh dos

Joomla! Component com_kunena – ‘search’ SQL Injection

#!/usr/bin/perl

2012-10-22 D35m0nd142 webapps

Adobe Reader 10.1.4 – Crash (PoC)

#!/usr/bin/perl

2012-10-22 coolkaveh dos

WordPress Plugin White Label CMS 1.5 – Cross-Site Request Forgery / Persistent Cross-Site Scripting

# Exploit Title: White Label CMS v 1.5 CSRF w/ persistent XSS

2012-10-22 pcsjj webapps

Schoolhos CMS Beta 2.29 – ‘id’ SQL Injection

# Exploit Title: Schoolhos CMS SQL Injetions

2012-10-22 Cumi webapps

WordPress Plugin social discussions 6.1.1 – Multiple Vulnerabilities

[waraxe-2012-SA#093] - Multiple Vulnerabilities in Wordpress Social Discussions Plugin

2012-10-22 waraxe webapps

subrion CMS 2.2.1 – Multiple Vulnerabilities

Advisory ID: HTB23113

2012-10-22 High-Tech Bridge SA webapps

ATutor 1.2 – Multiple Vulnerabilities

Advisory ID: HTB23117

2012-10-22 High-Tech Bridge SA webapps

WHMCompleteSolution (WHMCS) 4.5.2 – ‘googlecheckout.php’ SQL Injection

source: https://www.securityfocus.com/bid/56173/info

2012-10-22 Starware Security Team webapps

FirePass 7.0 SSL VPN – ‘refreshURL’ Open Redirection

source: https://www.securityfocus.com/bid/56156/info

2012-10-21 Aung Khant remote

WebTitan – ‘logs-x.php’ Directory Traversal

source: https://www.securityfocus.com/bid/55904/info

2012-10-20 Richard Conner webapps

ManageEngine Security Manager Plus 5.5 build 5505 – Directory Traversal

#!/usr/bin/python

2012-10-19 xistence webapps

ManageEngine Security Manager Plus 5.5 build 5505 – Remote Root/SYSTEM SQL Injection

#!/usr/bin/python

2012-10-19 xistence remote

ManageEngine Security Manager Plus 5.5 build 5505 – Remote SYSTEM SQL Injection (Metasploit)

##

2012-10-19 xistence remote

Joomla! Component com_fss 1.9.1.1447 – SQL Injection

Exploit Title: Joomla Freestyle Support com_fss sqli

2012-10-19 D4NB4R webapps

Joomla! Component com_tag – ‘tag’ SQL Injection

Exploit Title: Joomla tag Remote Sql Exploit

2012-10-19 D4NB4R webapps

CMSQLite 1.3.2 – Multiple Vulnerabilities

Title:

2012-10-19 Vulnerability-Lab webapps

Microsoft Internet Explorer 9 – Cross-Site Scripting Filter Bypass

#################################################

2012-10-19 Jean Pascal Pereira dos

CMS Mini 0.2.2 – ‘index.php’ Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/56148/info

2012-10-19 Netsparker webapps

Vm86 – Syscall Task Switch Kernel Panic Denial of Service / Privilege Escalation

Source: http://www.halfdog.net/Security/2013/Vm86SyscallTaskSwitchKernelPanic/

2012-10-19 halfdog local

Oracle Database – Protocol Authentication Bypass

source: https://www.securityfocus.com/bid/55651/info

2012-10-18 Esteban Martinez Fayo local

OTRS 3.1 – Persistent Cross-Site Scripting

#!/usr/bin/python

2012-10-18 Mike Eduard webapps

WordPress Plugin FireStorm Professional Real Estate 2.06.01 – SQL Injection

# Exploit Title: Wordpress FireStorm Professional Real Estate 2.06.01 SQL Injection Vulnerability

2012-10-18 Ashiyane Digital Security Team webapps

BSW Gallery – ‘uploadpic.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/56109/info

2012-10-18 cr4wl3r webapps

Amateur Photographer’s Image Gallery – ‘force-download.php?File’ Information Disclosure

source: https://www.securityfocus.com/bid/56110/info

2012-10-18 cr4wl3r webapps

Amateur Photographer’s Image Gallery – ‘plist.php?albumid’ SQL Injection

source: https://www.securityfocus.com/bid/56110/info

2012-10-18 cr4wl3r webapps

Amateur Photographer’s Image Gallery – ‘plist.php?albumid’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56110/info

2012-10-18 cr4wl3r webapps

Amateur Photographer’s Image Gallery – ‘fullscreen.php?albumid’ SQL Injection

source: https://www.securityfocus.com/bid/56110/info

2012-10-18 cr4wl3r webapps

Broadcom WIDCOMM Bluetooth – ‘btkrnl.sys’ Driver Privilege Escalation

source: https://www.securityfocus.com/bid/56124/info

2012-10-18 Nikita Tarakanov local

WordPress Plugin Wordfence Security – Cross-Site Scripting

source: https://www.securityfocus.com/bid/56159/info

2012-10-18 MustLive webapps

Sisfokol 4.0 – Arbitrary File Upload

Undergroundthalo Hacking Team - Security Advisory

2012-10-17 cr4wl3r webapps

Symphony CMS 2.3 – Multiple Vulnerabilities

Symphony cms 2.3 multiple vulnerabilities

2012-10-17 Wireghoul webapps

ManageEngine Support Center Plus 7908 – Multiple Vulnerabilities

+--------------------------------------------------------------------------------------------------------------------...

2012-10-17 xistence webapps

Oracle WebCenter Sites (FatWire Content Server) – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20121017-2 >

2012-10-17 SEC Consult webapps

WordPress Plugin Slideshow – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56090/info

2012-10-17 waraxe webapps

ModSecurity – ‘POST’ Security Bypass

source: https://www.securityfocus.com/bid/56096/info

2012-10-17 Bernhard Mueller remote

jCore – ‘/admin/index.php?path’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56102/info

2012-10-17 High-Tech Bridge webapps

Project Pier – Arbitrary File Upload (Metasploit)

##

2012-10-16 Metasploit webapps

AjaXplorer – ‘checkInstall.php’ Remote Command Execution (Metasploit)

##

2012-10-16 Metasploit remote

Microsoft Windows – Escalate Service Permissions Privilege Escalation (Metasploit)

##

2012-10-16 Metasploit local

MyBB Profile Albums Plugin 0.9 – ‘albums.php?album’ SQL Injection

# Exploit Title: Profile Albums MyBB plugin SQL Injection 0day

2012-10-16 Zixem webapps

Joomla! Component com_icagenda – ‘id’ Multiple Vulnerabilities

# Souhail Hammou - Independant Security Researcher & Penetration Tester .

2012-10-16 Dark-Puzzle webapps

Visual Tools DVR3.0.6.16, vx series 4.2.19.2 – Multiple Vulnerabilities

# Exploit Title: Visual Tools DVR multiple vulnerabilities

2012-10-16 Andrea Fabrizi webapps

EZHomeTech EzServer 7.0 – Remote Heap Corruption

[Title]:

2012-10-16 Lorenzo Cantoni dos

Samsung Kies 2.3.2.12054_20 – Multiple Vulnerabilities

Advisory ID: HTB23099

2012-10-16 High-Tech Bridge SA remote

WANem – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56326/info

2012-10-16 Brendan Coles webapps

Microsoft Windows Media Player 10 – ‘.avi’ Integer Division By Zero Crash (PoC)

#!/usr/bin/perl

2012-10-15 Dark-Puzzle dos