Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 327

WordPress Plugin HD Webplayer 1.1 – SQL Injection

_______ _____ _ _ _______ _____

2012-08-29 JoinSe7en webapps

JW Player – ‘logo.link’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55199/info

2012-08-29 MustLive webapps

Phorum 5.2.18 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55275/info

2012-08-29 High-Tech Bridge webapps

PrestaShop 1.4.7 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55280/info

2012-08-29 High-Tech Bridge webapps

HP Intelligent Management Center < 5.0 E0102 - UAM Buffer Overflow (Metasploit)

##

2012-08-29 Metasploit local

Express Burn Plus 4.58 – EBP Project File Handling Buffer Overflow (PoC)

#!/usr/bin/perl

2012-08-28 LiquidWorm dos

CommPort 1.01 – Multiple Vulnerabilities

--------------------------------------------

2012-08-28 Jean Pascal Pereira webapps

mieric AddressBook 1.0 – SQL Injection

-----------------------------------------------------

2012-08-28 Jean Pascal Pereira webapps

RV Article Publisher – Cross-Site Request Forgery

# Exploit Title: RV Article publisher CSRF Vulnerability

2012-08-28 DaOne webapps

RV Shopping Cart – Cross-Site Request Forgery

# Exploit Title: RV Shopping cart CSRF Vulnerability

2012-08-28 DaOne webapps

Simple Web Server 2.2-rc2 – ASLR Bypass

use IO::Socket;

2012-08-28 pole remote

Conceptronic Grab’n’Go and Sitecom Storage Center – Password Disclosure

==

2012-08-28 Mattijs van Ommeren webapps

WordPress Plugin Cloudsafe365 – ‘file’ Remote File Disclosure

source: https://www.securityfocus.com/bid/55241/info

2012-08-28 Jan Van Niekerk webapps

WordPress Plugin Simple:Press Forum – Arbitrary File Upload

source: https://www.securityfocus.com/bid/55243/info

2012-08-28 Iranian Dark Coders webapps

Zabbix Server – Arbitrary Command Execution (Metasploit)

##

2012-08-27 Metasploit remote

Wiki Web Help 0.3.9 – Multiple Persistent Cross-Site Scripting Vulnerabilities

# Exploit Title: Multiple Stored XSS Vulnerabilities in Wiki Web Help.

2012-08-27 Shai rod webapps

XWiki 4.2-milestone-2 – Multiple Persistent Cross-Site Scripting Vulnerabilities

# Exploit Title: Multiple Stored XSS Vulnerabilities in XWiki.

2012-08-27 Shai rod webapps

web@all CMS 2.0 – Multiple Vulnerabilities

web@all CMS 2.0 (_order) SQL Injection Vulnerability

2012-08-27 LiquidWorm webapps

Vlinks 2.0.3 – ‘id’ SQL Injection

#########################################################################################

2012-08-27 JIKO webapps

Microsoft Windows Kernel – Intel x64 SYSRET (MS12-042)

Source: http://packetstormsecurity.org/files/115908/sysret.rar

2012-08-27 Shahriyar Jalayeri local

WordPress Plugin Count Per Day 3.2.3 – Cross-Site Scripting

###################################################################################

2012-08-27 Crim3R webapps

xt:Commerce VEYTON 4.0.15 – ‘products_name_de’ Script Insertion

xt:Commerce VEYTON 4.0.15 (products_name_de) Script Insertion Vulnerability

2012-08-27 LiquidWorm webapps

Elcom CMS 7.4.10 – Community Manager Insecure Arbitrary File Upload

Elcom CMS - Community Manager Insecure File Upload Vulnerability - Security

2012-08-27 Sense of Security webapps

Java 7 Applet – Remote Code Execution (Metasploit)

##

2012-08-27 Metasploit remote

aoop CMS 0.3.6 – Multiple Vulnerabilities

Inshell Security Advisory

2012-08-27 Julien Ahrens webapps

IBM Rational ClearQuest 8.0 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/55125/info

2012-08-27 anonymous webapps

Joomla! Component Komento – ‘cid’ SQL Injection

source: https://www.securityfocus.com/bid/55212/info

2012-08-27 Crim3R webapps

Power-eCommerce – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55216/info

2012-08-25 Crim3R webapps

WordPress Plugin Finder – ‘order’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55217/info

2012-08-25 Crim3R webapps

Web Wiz Forums – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55220/info

2012-08-25 Crim3R webapps

LibGuides – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55222/info

2012-08-25 Crim3R webapps

Mihalism Multi Host – ‘users.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55237/info

2012-08-25 Explo!ter webapps

webpa 1.1.0.1 – Multiple Vulnerabilities

:::::::-. ... ::::::. :::.

2012-08-24 dun webapps

Wireshark 1.6.0/1.8.2 – Buffer Overflow (PoC)

WireShark Buffer Overflow 0day

2012-08-24 X-h4ck dos

Ad Manager Pro – Multiple Vulnerabilities

-----------------------------------------------------------

2012-08-24 Yakir Wizman webapps

Text Exchange Pro – ‘index.php’ Local File Inclusion

-----------------------------------------------------------

2012-08-24 Yakir Wizman webapps

AB Banner Exchange – ‘index.php’ Local File Inclusion

-----------------------------------------------------------

2012-08-24 Yakir Wizman webapps

Easy Banner Pro – ‘index.php’ Local File Inclusion

-----------------------------------------------------------

2012-08-24 Yakir Wizman webapps

businesswiki 2.5rc3 – Persistent Cross-Site Scripting / Arbitrary file upload

#!/usr/bin/python

2012-08-24 Shai rod webapps

Microsoft Indexing Service – ‘ixsso.dll’ ActiveX Control Denial of Service

source: https://www.securityfocus.com/bid/55202/info

2012-08-24 coolkaveh dos

PHP Web Scripts Text Exchange Pro – ‘page’ Local File Inclusion

source: https://www.securityfocus.com/bid/55205/info

2012-08-24 Yakir Wizman webapps

Vice City Multiplayer Server 0.3z R2 – Remote Code Execution

Exploit Title: Vice City Multiplayer remote code execution (Server)

2012-08-23 Sasuke78200 remote

letodms 3.3.6 – Multiple Vulnerabilities

# Exploit Title: LetoDMS 3.3.6 Multiple Reflected/Stored XSS & Password Change CSRF Vulnerability

2012-08-23 Shai rod webapps

op5 Monitoring 5.4.2 – VM Applicance Multiple Vulnerabilities

# Author: loneferret of Offensive Security

2012-08-23 loneferret webapps

Ad Manager Pro 4 – Local File Inclusion

-=[--------------------ADVISORY-------------------]=-

2012-08-23 CorryL webapps

Apache Struts 2 – Skill Name Remote Code Execution

source: https://www.securityfocus.com/bid/55165/info

2012-08-23 kxlzx remote

SiNG cms – ‘Password.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55168/info

2012-08-23 LiquidWorm webapps

Monstra CMS 1.2.1 – Multiple HTML Injection Vulnerabilities

Monstra 1.2.1 Multiple HTML Injection Vulnerabilities

2012-08-23 LiquidWorm webapps

KindEditor – ‘name’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55172/info

2012-08-23 LiquidWorm webapps

Adobe Pixel Bender Toolkit2 – ‘tbbmalloc.dll’ Multiple DLL Loading Code Execution Vulnerabilities

// source: https://www.securityfocus.com/bid/55179/info

2012-08-23 coolkaveh remote