Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 324

FastStone Image Viewer 4.6 – ReadAVonIP Crash (PoC)

#!/usr/bin/perl

2012-10-07 Jean Pascal Pereira dos

Open Realty – ‘select_users_lang’ Local File Inclusion

source: https://www.securityfocus.com/bid/55834/info

2012-10-06 L0n3ly-H34rT webapps

WordPress Plugin Shopp – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/55817/info

2012-10-05 T0x!c webapps

Cyme ChartFX Client Server – ActiveX Control Array Indexing

#####################################################################################

2012-10-04 Francis Provencher dos

JPEGsnoop 1.5.2 – WriteAV Crash (PoC)

#!/usr/bin/perl

2012-10-04 Jean Pascal Pereira dos

phpMyChat Plus 1.94 RC1 – Multiple Vulnerabilities

############################################

2012-10-04 L0n3ly-H34rT webapps

XnView 1.99.1 – ‘.JLS’ File Decompression Heap Overflow

SUMMARY

2012-10-04 Joseph Sheridan dos

Template CMS 2.1.1 – Multiple Vulnerabilities

Advisory ID: HTB23115

2012-10-04 High-Tech Bridge SA webapps

phpMyBitTorrent 2.04 – Multiple Vulnerabilities

[waraxe-2012-SA#091] - Multiple Vulnerabilities in phpMyBitTorrent 2.04

2012-10-04 waraxe webapps

Novell Sentinel Log Manager 1.2.0.2 – Retention Policy

Novell Sentinel Log Manager ver.

2012-10-04 Piotr Chmylkowski webapps

NCMedia Sound Editor Pro 7.5.1 – Local Overflow (SEH + DEP Bypass)

#!/usr/bin/python

2012-10-03 b33f local

WordPress Plugin spider Calendar – Multiple Vulnerabilities

Exploit Title: Wordpress spider calendar Plugin Multiple Vulnerabilities

2012-10-03 D4NB4R webapps

Omnistar Mailer 7.2 – Multiple Vulnerabilities

Title:

2012-10-03 Vulnerability-Lab webapps

phptax 0.8 – Remote Code Execution

-----------------------------------------------------

2012-10-02 Jean Pascal Pereira webapps

soapbox 0.3.1 – Local Privilege Escalation

-----------------------------------

2012-10-02 Jean Pascal Pereira local

Switchvox – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/55739/info

2012-10-02 Ibrahim El-Sayed webapps

ZenPhoto – ‘admin-news-articles.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55755/info

2012-10-02 Scott Herbert webapps

Foxit Reader 5.4.3.0920 – Crash (PoC)

Title : Foxit Reader suffers from Division By Zero

2012-10-01 coolkaveh dos

WordPress Theme Archin 3.2 – Configuration Access

# Exploit Title: Archin WordPress Theme Unauthenticated Configuration Access

2012-10-01 bwall webapps

WordPress Plugin Akismet – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55749/info

2012-10-01 Tapco Security webapps

Omnistar Mailer – Multiple SQL Injections / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/55760/info

2012-10-01 Vulnerability Laboratory webapps

Reaver Pro – Local Privilege Escalation

source: https://www.securityfocus.com/bid/55725/info

2012-09-30 infodox local

AlamFifa CMS – ‘user_name_cookie’ SQL Injection

source: https://www.securityfocus.com/bid/55746/info

2012-09-30 L0n3ly-H34rT webapps

IBM Lotus Notes Traveler 8.5.1.x – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/55740/info

2012-09-28 MustLive remote

PowerTCP WebServer for – ActiveX Denial of Service

source: https://www.securityfocus.com/bid/55761/info

2012-09-28 catatonicprime dos

JAMF Casper Suite MDM – Cross-Site Request Forgery

CVE-2012-4051 - JAMF Casper Suite MDM CSRF Vulnerability

2012-09-27 Jacob Holcomb webapps

Trend Micro Control Manager 5.5/6.0 AdHocQuery – (Authenticated) Blind SQL Injection

#!/usr/bin/env python

2012-09-27 otoy webapps

Smartfren Connex EC 1261-2 UI OUC – Local Privilege Escalation

==========================================================================

2012-09-27 X-Cisadane local

Midori Browser 0.3.2 – Denial of Service

source: https://www.securityfocus.com/bid/55709/info

2012-09-27 Ryuzaki Lawlet dos

ViArt Shop Evaluation 4.1 – Multiple Remote File Inclusions

############################################

2012-09-26 L0n3ly-H34rT webapps

Cisco DPC2100 – Denial of Service

# Exploit Title: Cisco DPC2100 Denial of Service

2012-09-26 Daniel Smith dos

YingZhiPython – Directory Traversal / Arbitrary File Upload

source: https://www.securityfocus.com/bid/55685/info

2012-09-26 Larry Cashdollar remote

WordPress Plugin ABC Test – ‘id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55689/info

2012-09-26 Scott Herbert webapps

QNX 6.5.0 / QCONN 1.4.207944 – Remote Command Execution

# Title : QNX QCONN Remote Command Execution Vurnerability

2012-09-25 Mor!p3r remote

ViArt Shop Enterprise 4.1 – Arbitrary Command Execution

2012-09-25 LiquidWorm webapps

WordPress Plugin Token Manager – ‘tid’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55664/info

2012-09-25 TheCyberNuxbie webapps

SafeNet Sentinel Keys Server – Crash (PoC)

# Exploit Title: SafeNet Sentinel Keys Server DoS

2012-09-24 retset dos

ZEN Load Balancer – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/55638/info

2012-09-24 Brendan Coles webapps

Samba 3.5.11/3.6.3 – Remote Code Execution

source: https://www.securityfocus.com/bid/55655/info

2012-09-24 kb remote

WordPress Core 3.4.2 – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/55660/info

2012-09-22 AkaStep webapps

WordPress Plugin Sexy Add Template – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/55666/info

2012-09-22 the_cyber_nuxbie webapps

YCommerce – Multiple SQL Injections

source: https://www.securityfocus.com/bid/55653/info

2012-09-21 Ricardo Almeida webapps

Thomson Wireless VoIP Cable Modem – Authentication Bypass

# Exploit Title: Thomson Wireless VoIP Cable Modem Auth Bypass

2012-09-20 Glafkos Charalambous webapps

Manhali 1.8 – Local File Inclusion

############################################

2012-09-20 L0n3ly-H34rT webapps

Poweradmin – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55619/info

2012-09-20 Siavash webapps

WordPress Plugin MF Gig Calendar – Cross-Site Scripting

source: https://www.securityfocus.com/bid/55622/info

2012-09-20 Chris Cooper webapps

SpiceWorks 6.0.00993 – Multiple Script Injection Vulnerabilities

Spiceworks 6.0.00993 Multiple Script Injection Vulnerabilities

2012-09-19 LiquidWorm webapps

WordPress Plugin wp-topbar 4.02 – Multiple Vulnerabilities

# Exploit Title: WP-TopBar 4.02 CSRF

2012-09-19 Blake Entrekin webapps

Fortigate UTM WAF Appliance – Multiple Vulnerabilities

Title:

2012-09-19 Vulnerability-Lab webapps

SonicWALL email security 7.3.5 – Multiple Vulnerabilities

Title:

2012-09-19 Vulnerability-Lab webapps