Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 328

PHP Web Scripts Ad Manager Pro – ‘page’ Local File Inclusion

source: https://www.securityfocus.com/bid/55189/info

2012-08-23 Corrado Liotta webapps

Websense Content Gateway – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55194/info

2012-08-23 Steven Sim Kok Leong remote

OpenDocMan 1.2.6.1 – Cross-Site Request Forgery (Password Change)

# Exploit Title: OpenDocMan Password Change CSRF

2012-08-22 Shai rod webapps

VamCart 0.9 – Cross-Site Request Forgery

# Exploit Title: VamCart v0.9 CSRF Vulnerability

2012-08-22 DaOne webapps

E-Mail Security Virtual Appliance – ‘learn-msg.cgi’ Command Injection (Metasploit)

##

2012-08-22 Metasploit webapps

XODA 0.4.5 – Arbitrary ‘.PHP’ File Upload (Metasploit)

##

2012-08-22 Metasploit webapps

Jara 1.6 – Multiple SQL Injections / Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55145/info

2012-08-22 Canberk BOLAT webapps

OrderSys 1.6.4 – Multiple SQL Injections / Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55147/info

2012-08-22 Canberk BOLAT webapps

Banana Dance – Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/55153/info

2012-08-22 Canberk BOLAT webapps

Joomla! Component CiviCRM – Multiple Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/55166/info

2012-08-22 Crim3R webapps

1024 CMS 2.1.1 – ‘p’ SQL Injection

source: https://www.securityfocus.com/bid/55170/info

2012-08-22 kallimero webapps

WordPress Plugin Rich Widget – Arbitrary File Upload

source: https://www.securityfocus.com/bid/55174/info

2012-08-22 Crim3R webapps

WordPress Plugin Monsters Editor for WP Super Edit – Arbitrary File Upload

source: https://www.securityfocus.com/bid/55175/info

2012-08-22 Crim3R webapps

Sysax Multi Server 5.64 – Create Folder Buffer Overflow (Metasploit)

##

2012-08-21 Matt Andreko remote

XODA Document Management System 0.4.5 – Cross-Site Scripting / Arbitrary File Upload

# Exploit Title: XODA Document Management System Stored XSS & Arbitrary File Upload Vulnerability.

2012-08-21 Shai rod webapps

Clipbucket 2.5 – Directory Traversal

# Author: loneferret of Offensive Security

2012-08-21 loneferret webapps

SAP NetWeaver Dispatcher 7.0 ehp1/2 – Multiple Vulnerabilities

1. Advisory Information

2012-08-21 Core Security dos

Symantec Web Gateway 5.0.3.18 – Arbitrary Password Change (Metasploit)

##

2012-08-21 Kc57 webapps

Symantec Web Gateway 5.0.3.18 – Arbitrary Password Change

#!/usr/bin/python

2012-08-21 Kc57 webapps

Clipbucket 2.5 – Blind SQL Injection

# Author: loneferret of Offensive Security

2012-08-21 loneferret webapps

JPM Article Blog Script 6 – ‘tid’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55112/info

2012-08-21 Mr.0c3aN webapps

Adobe Flash Player 11.3 – Font Parsing Code Execution (Metasploit)

##

2012-08-20 Metasploit remote

T-dah Webmail – Cross-Site Request Forgery / Persistent Cross-Site Scripting

# -----------------------------------------------------------

2012-08-20 Yakir Wizman webapps

Clipbucket 2.5 – Cross-Site Request Forgery

##########################################

2012-08-20 DaOne webapps

Alpha Networks ADSL2/2+ Wireless Router ASL-26555 – Password Disclosure

- Title:

2012-08-20 Alberto Ortega webapps

hupa webmail 0.0.2 – Persistent Cross-Site Scripting

#!/usr/bin/python

2012-08-20 Shai rod webapps

GWebmail 0.7.3 – Cross-Site Scripting / Local File Inclusion / Remote Code Execution

#!/usr/bin/python

2012-08-20 Shai rod webapps

PG Portal Pro – Cross-Site Request Forgery

###########################################################

2012-08-20 Noxious webapps

Hivemail Webmail – Multiple Persistent Cross-Site Scripting Vulnerabilities

#!/usr/bin/python

2012-08-20 Shai rod webapps

YourArcadeScript 2.4 – ‘index.php?id’ SQL Injection

##########################################

2012-08-20 DaOne webapps

uebimiau webmail 2.7.2 – Persistent Cross-Site Scripting

#!/usr/bin/python

2012-08-20 Shai rod webapps

IOServer 1.0.18.0 – Directory Traversal

=====================================================================

2012-08-20 hinge webapps

Divx Player 6.8.2 – Denial of Service

source: https://www.securityfocus.com/bid/55105/info

2012-08-20 Dark-Puzzle dos

Apple QuickTime plugin – Windows 4.1.2 (Japanese) Remote Overflow

source: https://www.securityfocus.com/bid/2328/info

2012-08-18 UNYUN remote

IlohaMail Webmail – Persistent Cross-Site Scripting

#!/usr/bin/python

2012-08-18 Shai rod webapps

ManageEngine OpUtils 6.0 – Persistent Cross-Site Scripting

# Author: loneferret of Offensive Security

2012-08-18 loneferret webapps

SaltOS – ‘download.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55117/info

2012-08-18 Stefan Schurtz webapps

Jaow CMS 2.3 – Cross-Site Request Forgery

##########################################

2012-08-17 DaOne webapps

ManageEngine OpStor 7.4 – Multiple Vulnerabilities

Title:

2012-08-17 Vulnerability-Lab webapps

Social Engine 4.2.5 – Multiple Vulnerabilities

Title:

2012-08-17 Vulnerability-Lab webapps

Inferno vBShout 2.5.2 – SQL Injection

====================================================================

2012-08-17 Luit webapps

hastymail2 webmail 1.1 rc2 – Persistent Cross-Site Scripting

#!/usr/bin/python

2012-08-17 Shai rod webapps

T-dah Webmail Client – Multiple Persistent Cross-Site Scripting Vulnerabilities

#!/usr/bin/python

2012-08-17 Shai rod webapps

webid 1.0.4 – Multiple Vulnerabilities

:::::::-. ... ::::::. :::.

2012-08-17 dun webapps

Jaow CMS 2.3 – Blind SQL Injection

# Author: loneferret of Offensive Security

2012-08-17 loneferret webapps

Elastix 2.2.0 – ‘graph.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/55078/info

2012-08-17 cheki webapps

LISTSERV 16 – ‘SHOWTPL’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55082/info

2012-08-17 Jose Carlos de Arriba webapps

Mozilla Firefox – Remote Denial of Service

source: https://www.securityfocus.com/bid/55091/info

2012-08-17 Jean Pascal Pereira dos

Microsoft Internet Explorer – Time Element Memory Corruption (MS11-050)

######################################################################################

2012-08-16 Ciph3r remote

Roundcube Webmail 0.8.0 – Persistent Cross-Site Scripting

#!/usr/bin/python

2012-08-16 Shai rod webapps