Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 331

Dell SonicWALL Scrutinizer 9 – SQL Injection (Metasploit)

##

2012-08-03 Metasploit remote

Zenoss 3 – showDaemonXMLConfig Command Execution (Metasploit)

##

2012-08-03 Metasploit remote

FreeBSD – SCTP Remote NULL Ptr Dereference Denial of Service

#include

2012-08-03 Shaun Colley dos

ntop – ‘arbfile’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54792/info

2012-08-03 Marcos Garcia webapps

Elefant CMS – ‘id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54805/info

2012-08-03 PuN!Sh3r webapps

WebPageTest – Arbitrary ‘.PHP’ File Upload (Metasploit)

##

2012-08-02 Metasploit webapps

Microsoft Internet Explorer – Fixed Table Col Span Heap Overflow (MS12-037) (Metasploit)

##

2012-08-02 Metasploit remote

Joomla! Component com_joomgalaxy 1.2.0.4 – Multiple Vulnerabilities

_______________________________________________________________________________________

2012-08-02 D4NB4R webapps

am4ss 1.2 – Multiple Vulnerabilities

###########################################

2012-08-02 s3n4t00r webapps

am4ss Support System 1.2 – PHP Code Injection

2012-08-02 i-Hmx webapps

Nvidia Linux Driver – Local Privilege Escalation

#define IS_BLACKLISTED_REG_OFFSET(nv, offset, length) 1

2012-08-02 anonymous local

Barracuda Email Security Service – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/54773/info

2012-08-02 Benjamin Kunz Mejri remote

Mahara 1.4.1 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/54776/info

2012-08-02 anonymous webapps

PHP 5.4.3 – PDO Memory Access Violation Denial of Service

source: https://www.securityfocus.com/bid/54777/info

2012-08-02 0x721427D8 dos

VideoLAN VLC Media Player 2.0.2 – ‘.3gp’ File Divide-by-Zero Denial of Service

source: https://www.securityfocus.com/bid/54791/info

2012-08-02 Dark-Puzzle dos

WordPress Theme ShopperPress – SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/55062/info

2012-08-02 Benjamin Kunz Mejri webapps

eGlibc – Signedness Code Execution

# Exploit Title: eGlibc Signedness Vulnerability

2012-08-01 c0ntex dos

Joomla! Component com_niceajaxpoll 1.3.0 – SQL Injection

############################################################

2012-08-01 Patrick de Brouwer webapps

pBot – Remote Code Execution

#!/usr/bin/perl

2012-08-01 bwall remote

Joomla! Component com_movm – SQL Injection

_______________________________________________________________________________________

2012-08-01 D4NB4R webapps

ManageEngine Mobile Application Manager 10 – SQL Injection

Title:

2012-08-01 Vulnerability-Lab webapps

ManageEngine Application Manager 10 – Multiple Vulnerabilities

Title:

2012-08-01 Vulnerability-Lab webapps

ManageEngine Applications Manager – Multiple SQL Injections

source: https://www.securityfocus.com/bid/54756/info

2012-08-01 Ibrahim El-Sayed webapps

Distimo Monitor – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54757/info

2012-08-01 Benjamin Kunz Mejri webapps

ManageEngine Applications Manager – Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/54759/info

2012-08-01 Ibrahim El-Sayed webapps

WordPress Plugin G-Lock Double Opt-in Manager – SQL Injection

source: https://www.securityfocus.com/bid/54767/info

2012-08-01 BEASTIAN webapps

tekno.Portal 0.1b – ‘link.php’ SQL Injection

source: https://www.securityfocus.com/bid/54786/info

2012-08-01 Socket_0x03 webapps

Microsoft Office SharePoint Server 2007 – Remote Code Execution (MS10-104) (Metasploit)

##

2012-07-31 Metasploit remote

Dr. Web Control Center 6.00.3.201111300 – Cross-Site Scripting

Dr. Web Control Center Admin UI Remote Script Code Injection

2012-07-31 Oliver Karow webapps

DataWatch Monarch Business Intelligence – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/54733/info

2012-07-31 Raymond Rizk webapps

Limny – ‘index.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/54753/info

2012-07-31 L0n3ly-H34rT webapps

Symantec Web Gateway 5.0.3.18 – ‘deptUploads_data.php?groupid’ Blind SQL Injection

#!/usr/bin/python

2012-07-30 Kc57 webapps

Scrutinizer 9.0.1.19899 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54725/info

2012-07-30 Mario Ceballos webapps

Scrutinizer 9.0.1.19899 – Arbitrary File Upload

source: https://www.securityfocus.com/bid/54726/info

2012-07-30 Mario Ceballos webapps

Scrutinizer 9.0.1.19899 – HTTP Authentication Bypass

source: https://www.securityfocus.com/bid/54727/info

2012-07-30 Mario Ceballos webapps

Zenoss 3.2.1 – (Authenticated) Remote Command Execution

source: https://www.securityfocus.com/bid/54793/info

2012-07-30 Brendan Coles webapps

Zenoss 3.2.1 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/54793/info

2012-07-30 Brendan Coles webapps

httpdx 1.5.4 – Remote Heap Overflow

#!/usr/bin/perl -w

2012-07-29 st3n remote

ocPortal 7.1.5 – ‘redirect’ Open Redirection

source: https://www.securityfocus.com/bid/54715/info

2012-07-29 Aung Khant webapps

JW Player – ‘playerready’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54739/info

2012-07-29 MustLive webapps

eNdonesia – ‘cid’ SQL Injection

source: https://www.securityfocus.com/bid/54741/info

2012-07-29 Crim3R webapps

phpBB – Multiple SQL Injections

source: https://www.securityfocus.com/bid/54734/info

2012-07-28 HauntIT webapps

Photodex ProShow Producer 5.0.3256 – load File Handling Buffer Overflow (Metasploit)

##

2012-07-27 Metasploit local

CuteFlow 2.11.2 – Arbitrary File Upload (Metasploit)

##

2012-07-27 Metasploit webapps

Cisco Linksys PlayerPT – ActiveX Control Buffer Overflow (Metasploit)

##

2012-07-27 Metasploit remote

Symantec Web Gateway 5.0.2.18 – ‘pbcontrol.php’ Command Injection (Metasploit)

##

2012-07-27 Metasploit remote

Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 – Local Buffer Overflow (ASLR + DEP Bypass)

# Exploit Title: Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 local buffer overflow (\w ASLR and DEP bypass)

2012-07-27 Ptrace Security local

Linux Kernel 2.6.x – ‘rds_recvmsg()’ Local Information Disclosure

source: https://www.securityfocus.com/bid/54702/info

2012-07-26 Jay Fenlason local

ISC DHCP 4.x – Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/54665/info

2012-07-25 Markus Hietava dos

Joomla! Component Odudeprofile 2.8 – ‘profession’ SQL Injection

source: https://www.securityfocus.com/bid/54677/info

2012-07-25 Daniel Barragan webapps