Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 325

torrenttrader 2.08 – Multiple Vulnerabilities

[waraxe-2012-SA#089] - Multiple Vulnerabilities in TorrentTrader 2.08

2012-09-19 waraxe webapps

TAGWORX.CMS – ‘cid’ SQL Injection

source: https://www.securityfocus.com/bid/55586/info

2012-09-18 Crim3R webapps

AxisInternet VoIP Manager – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55589/info

2012-09-18 Benjamin Kunz Mejri webapps

vBulletin 4.1.12 – ‘blog_plugin_useradmin.php’ SQL Injection

source: https://www.securityfocus.com/bid/55592/info

2012-09-18 Am!r webapps

WordPress Core 3.4.2 – Multiple Path Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/55597/info

2012-09-18 AkaStep webapps

luxcal 2.7.0 – Multiple Vulnerabilities

#################################################

2012-09-17 L0n3ly-H34rT webapps

Novell Groupwise 8.0.2 HP3 and 2012 – Integer Overflow

#####################################################################################

2012-09-17 Francis Provencher dos

webERP 4.08.4 – ‘WorkOrderEntry.php’ SQL Injection

# Exploit Title: webERP

2012-09-17 modpr0be webapps

Auxilium PetRatePro – Multiple Vulnerabilities

##########################################

2012-09-17 DaOne webapps

Netsweeper WebAdmin Portal – Multiple Vulnerabilities

# Exploit Title: Netsweeper WebAdmin Portal CSRF, Reflective XSS, and SQL Injection ("The later")\

2012-09-17 Jacob Holcomb webapps

NCMedia Sound Editor Pro 7.5.1 – ‘MRUList201202.dat’ File Handling Buffer Overflow

#!/usr/bin/python

2012-09-17 Julien Ahrens local

CoSoSys Endpoint Protector – Predictable Password Generation

source: https://www.securityfocus.com/bid/55570/info

2012-09-17 Christopher Campbell remote

minimal Gallery – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55577/info

2012-09-17 ayastar webapps

IFOBS – ‘regclientprint.jsp’ Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/55561/info

2012-09-15 MustLive webapps

ASTPP VoIP Billing (4cf207a) – Multiple Vulnerabilities

Title:

2012-09-14 Vulnerability-Lab webapps

NeoBill CMS 0.8 Alpha – Multiple Vulnerabilities

Title:

2012-09-14 Vulnerability-Lab webapps

Internet Download Manager – Local Stack Buffer Overflow

#!/usr/bin/perl

2012-09-14 Dark-Puzzle local

Trend Micro Interscan Messaging Security Suite – Persistent Cross-Site Scripting / Cross-Site Request Forgery

# Exploit Title: Trend Micro InterScan Messaging Security Suite Stored XSS and CSRF

2012-09-14 modpr0be webapps

Internet Download Manager – Local Buffer Overflow (SEH)

#!/usr/bin/perl

2012-09-14 Dark-Puzzle local

Winamp – MAKI Buffer Overflow (Metasploit)

##

2012-09-12 Metasploit local

Subrion CMS 2.2.1 – Cross-Site Request Forgery (Add Admin)

Subrion CMS 2.2.1 CSRF Add Admin Exploit

2012-09-12 LiquidWorm webapps

Sitecom MD-25x – Multiple Vulnerabilities

#!/usr/bin/python

2012-09-12 Mattijs van Ommeren remote

Webify eDownloads Cart – Arbitrary File Deletion

#########################################################################################

2012-09-12 JIKO webapps

Webify Business Directory – Arbitrary File Deletion

#########################################################################################

2012-09-12 JIKO webapps

Webify Photo Gallery – Arbitrary File Deletion

#########################################################################################

2012-09-12 JIKO webapps

Knowledge Base Enterprise Edition 4.62.0 – SQL Injection

Exploit Author: Vulnerability-Lab

2012-09-12 Vulnerability-Lab webapps

Ezylog Photovoltaic Management Server – Multiple Vulnerabilities

Multiple vulnerabilities in Ezylog photovoltaic management server

2012-09-12 Roberto Paleari webapps

Atlassian Confluence 3.4.x – Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/55509/info

2012-09-12 D. Niedermaier webapps

Google Chrome for Android – com.android.browser.application_id Intent Extra Data Cross-Site Scripting

source: https://www.securityfocus.com/bid/55523/info

2012-09-12 Artem Chaykin remote

Google Chrome for Android – Multiple ‘file::’ URL Handler Local Downloaded Content Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/55523/info

2012-09-12 Artem Chaykin remote

Google Chrome for Android – Local Application Handling Cookie Theft

source: https://www.securityfocus.com/bid/55523/info

2012-09-12 Artem Chaykin remote

Google Chrome for Android – Same-origin Policy Bypass Local Symlink

source: https://www.securityfocus.com/bid/55523/info

2012-09-12 Artem Chaykin remote

Webify Blog – Arbitrary File Deletion

#########################################################################################

2012-09-11 JIKO webapps

akcms 4.2.4 – Information Disclosure

############################################

2012-09-11 L0n3ly-H34rT webapps

libguac – Remote Buffer Overflow

source: https://www.securityfocus.com/bid/55497/info

2012-09-11 Michael Jumper remote

FBDj – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/55504/info

2012-09-11 TUNISIAN CYBER webapps

WAN Emulator 2.3 – Command Execution (Metasploit)

##

2012-09-10 Metasploit remote

OpenFiler 2.x – NetworkCard Command Execution (Metasploit)

##

2012-09-10 Metasploit remote

VICIDIAL Call Center Suite 2.2.1-237 – Multiple Vulnerabilities

####################################################################################

2012-09-10 Ertebat Gostar Co webapps

Joomla! Component RokModule 1.1 – ‘module’ Blind SQL Injection

Titulo: Joomla Component RokModule Blind SQLi [module] Vulnerability

2012-09-10 Yarolinux webapps

SiteGo – Remote File Inclusion

############################################

2012-09-10 L0n3ly-H34rT webapps

Oracle VM VirtualBox 4.1 – Local Denial of Service

source: https://www.securityfocus.com/bid/55471/info

2012-09-10 halfdog dos

VICIDIAL Call Center Suite – Multiple SQL Injections

source: https://www.securityfocus.com/bid/55476/info

2012-09-10 Ertebat Gostar Co webapps

DELTAScripts PHP Links – Multiple SQL Injections

source: https://www.securityfocus.com/bid/55478/info

2012-09-10 L0n3ly-H34rT webapps

HP SiteScope (Linux/Windows) – Remote Code Execution (Metasploit)

##

2012-09-08 Metasploit remote

Sflog! CMS 1.0 – Arbitrary File Upload (Metasploit)

##

2012-09-08 Metasploit remote

ActiveFax (ActFax) 4.3 – Client Importer Buffer Overflow (Metasploit)

##

2012-09-08 Metasploit local

WAP Proof 2008 – Denial of Service

[] Description :

2012-09-08 Orion Einfold dos

Pinterest Clone Script – Multiple Vulnerabilities

##########################################

2012-09-08 DaOne webapps

Pinterestclones – Security Bypass / HTML Injection

source: https://www.securityfocus.com/bid/55469/info

2012-09-08 DaOne webapps