Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 326

SAP NetWeaver Dispatcher – DiagTraceR3Info Buffer Overflow (Metasploit)

##

2012-09-07 Metasploit remote

Cannonbolt Portfolio Manager 1.0 – Multiple Vulnerabilities

Cannonbolt Portfolio Manager v1.0 Stored XSS and SQL Injection Vulnerabilities

2012-09-07 LiquidWorm webapps

Clipster Video – Persistent Cross-Site Scripting

##########################################

2012-09-07 DaOne webapps

Sitecom Home Storage Center – Authentication Bypass

Security Advisory AA-006: Authorization Bypass Vulnerability in Password Reset Function Sitecom Home Storage Center (...

2012-09-07 Mattijs van Ommeren webapps

TestLink 1.9.3 – Cross-Site Request Forgery

Advisory ID: HTB23088

2012-09-07 High-Tech Bridge SA webapps

GNU glibc – ‘strcoll()’ Routine Integer Overflow

// source: https://www.securityfocus.com/bid/55462/info

2012-09-07 Jan iankko Lieskovsky dos

WordPress Theme Purity – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55605/info

2012-09-07 Matan Azugi webapps

web@all – Local File Inclusion / Multiple Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/55426/info

2012-09-06 KedAns-Dz webapps

OpenFiler 2.3 – Multiple Cross-Site Scripting / Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/55500/info

2012-09-06 Brendan Coles webapps

MobileCartly 1.0 – Arbitrary File Creation (Metasploit)

##

2012-09-05 Metasploit webapps

JBoss – DeploymentFileRepository WAR Deployment (via JMXInvokerServlet) (Metasploit)

require 'msf/core'

2012-09-05 Metasploit remote

QNAP Turbo NAS TS-1279U-RP – Multiple Path Injections

# Exploit Title: QNAP Turbo NAS Multiple Path Injection

2012-09-05 Andrea Fabrizi webapps

ES Job Search Engine 3.0 – SQL Injection

Title:

2012-09-05 Vulnerability-Lab webapps

Ektron CMS 8.5.0 – Multiple Vulnerabilities

Sense of Security - Security Advisory - SOS-12-009

2012-09-05 Sense of Security webapps

Cm3 CMS – ‘search.asp’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55395/info

2012-09-05 Crim3R webapps

Kayako Fusion – ‘download.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55417/info

2012-09-05 High-Tech Bridge webapps

Flogr – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55418/info

2012-09-05 High-Tech Bridge webapps

Extcalendar 2.0 – Multiple SQL Injections / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/55424/info

2012-09-05 Ashiyane Digital Security Team webapps

Net-SNMP – SNMPD AgentX Subagent Timeout Denial of Service

source: https://www.securityfocus.com/bid/64048/info

2012-09-05 Ken Farnen dos

jira 4.4.3 / greenhopper < 5.9.8 - Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----

2012-09-04 Hoyt LLC Research webapps

Splunk 4.3.3 – Arbitrary File Read

# Exploit Title: Splunk

2012-09-04 Marcio Almeida webapps

Support4Arabs Pages 2.0 – SQL Injection

############################################

2012-09-04 L0n3ly-H34rT webapps

Group Office Calendar – ‘/calendar/json.php’ SQL Injection

/-------------------------------------\

2012-09-04 Chris Cooper webapps

Sciretech (Multiple Products) – Multiple SQL Injections

source: https://www.securityfocus.com/bid/55390/info

2012-09-04 AkaStep webapps

PHPFox 3.0.1 – ‘ajax.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55405/info

2012-09-04 Crim3R webapps

ThinPrint – ‘tpfc.dll’ Insecure Library Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/55421/info

2012-09-04 Moshe Zioni local

Conceptronic Grab’n’Go Network Storage – Directory Traversal

Security Advisory AA-003: Directory Traversal Vulnerability in Conceptronic Grab’n’Go Network Storage

2012-09-03 Mattijs van Ommeren webapps

Sitecom Home Storage Center – Directory Traversal

Security Advisory AA-004: Directory Traversal Vulnerability in Sitecom Home Storage Center

2012-09-03 Mattijs van Ommeren webapps

Sitemax Maestro – SQL Injection / Local File Inclusion

source: https://www.securityfocus.com/bid/55386/info

2012-09-03 AkaStep webapps

Admidio 2.3.5 – Multiple Vulnerabilities

Advisory: Admidio 2.3.5 Multiple security vulnerabilities

2012-09-02 Stefan Schurtz webapps

AV Arcade Free Edition – ‘add_rating.php?id’ Blind SQL Injection

##########################################

2012-09-02 DaOne webapps

Adobe Photoshop CS6 – ‘.png’ Parsing Heap Overflow

#####################################################################################

2012-09-01 Francis Provencher dos

SugarCRM Community Edition 6.5.2 (Build 8410) – Multiple Vulnerabilities

################################################################################

2012-09-01 Brendan Coles webapps

Joomla! Component Spider Calendar – SQL Injection

Exploit Title: Joomla spider calendar lite Remote Exploit

2012-09-01 D4NB4R webapps

SAP NetWeaver HostControl – Command Injection (Metasploit)

##

2012-08-31 Metasploit remote

Internet Download Manager – Memory Corruption

#!/usr/bin/perl

2012-08-31 Dark-Puzzle dos

vBulletin Yet Another Awards System 4.0.2 – SQL Injection

# Exploit Title: vBulletin Yet Another Awards System 4.0.2 Time Based SQL Injection 0day

2012-08-31 Backsl@sh/Dan webapps

WarFTP Daemon 1.82 RC 11 – Remote Format String

# Exploit Title: War FTP Daemon Remote Format String Vulnerability

2012-08-31 coolkaveh dos

OTRS Open Technology Real Services 3.1.8/3.1.9 – Cross-Site Scripting

#!/usr/bin/python

2012-08-31 Mike Eduard webapps

SugarCRM Community Edition – Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/55347/info

2012-08-31 Brendan Coles webapps

Booking System Pro – Cross-Site Request Forgery

# Exploit Title: Booking System Pro CSRF Vulnerability

2012-08-30 DaOne webapps

Symantec Messaging Gateway 9.5/9.5.1 – SSH Default Password Security Bypass (Metasploit)

##

2012-08-30 Metasploit remote

SquidGuard 1.4 – Long URL Handling Remote Denial of Service

source: https://www.securityfocus.com/bid/55291/info

2012-08-30 Stefan Bauer dos

TomatoCart – ‘example_form.ajax.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55295/info

2012-08-30 HauntIT webapps

XM Forum – ‘search.asp’ SQL Injection

source: https://www.securityfocus.com/bid/55299/info

2012-08-30 Crim3R webapps

Crowbar – ‘file’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55315/info

2012-08-30 Matthias Weckbecker webapps

WordPress Plugin Download Monitor – ‘dlsearch’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55487/info

2012-08-30 Chris Cooper webapps

Disqus Blog Comments – Blind SQL Injection

:--------------------------------------------------------------------------------------------------------------------...

2012-08-29 Spy_w4r3 webapps

ActFax Server 4.31 Build 0225 – Local Privilege Escalation

#!/usr/bin/python

2012-08-29 Craig Freyman local

Winlog Lite SCADA HMI system – Overwrite (SEH)

######################################################################################

2012-08-29 Ciph3r dos