Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 332

tekno.Portal 0.1b – ‘anket.php’ SQL Injection

source: https://www.securityfocus.com/bid/54698/info

2012-07-25 Socket_0x03 webapps

Barcodewiz ‘Barcodewiz.dll’ ActiveX Control – ‘Barcode’ Method Remote Buffer Overflow

source: https://www.securityfocus.com/bid/54701/info

2012-07-25 coolkaveh remote

Symantec Web Gateway 5.0.3.18 – Local/Remote File Inclusion / Remote Command Execution

#!/usr/bin/python

2012-07-24 muts webapps

WordPress Plugin Front End Upload 0.5.4.4 – Arbitrary ‘.PHP’ File Upload

# Exploit Title: WordPress Front End Upload v0.5.4.4 Arbitrary PHP File Upload Vulnerability

2012-07-24 Chris Kellum webapps

Zabbix 2.0.1 – Session Extractor

#!/usr/bin/python

2012-07-24 muts webapps

Symantec Web Gateway 5.0.3.18 – ‘pbcontrol.php’ Root Remote Code Execution

#!/usr/bin/python

2012-07-24 muts remote

phpProfiles – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/54660/info

2012-07-24 L0n3ly-H34rT webapps

Simple Web Server – Connection Header Buffer Overflow (Metasploit)

##

2012-07-23 Metasploit remote

EGallery – Arbitrary ‘.PHP’ File Upload (Metasploit)

##

2012-07-23 Metasploit webapps

Photodex ProShow Producer 5.0.3256 – Local Buffer Overflow

#######################################################################################

2012-07-23 mr.pr0n local

Atmail WebAdmin and Webmail Control Panel – SQL Root Password Disclosure

######################################################################################

2012-07-23 Ciph3r webapps

Symantec Web Gateway 5.0.2 – ‘blocked.php?id’ Blind SQL Injection

#!/usr/bin/python

2012-07-23 muts webapps

Symantec Web Gateway 5.0.3.18 – Blind SQL Injection Backdoor via MySQL Triggers

######################################################################################

2012-07-23 muts webapps

MyMp3 Player Stack – ‘.m3u’ File DEP Bypass

'''

2012-07-23 Daniel Romero local

MySQL Squid Access Report 2.1.4 – HTML Injection

# Exploit Title: MySQL Squid Access Report 2.1.4 / HTML Injection#

2012-07-23 Daniel Godoy webapps

Alienvault Open Source SIEM (OSSIM) 3.1 – Reflected Cross-Site Scripting / Blind SQL Injection

#!/usr/bin/python

2012-07-23 muts webapps

SpiceWorks 5.3.75941 – Persistent Cross-Site Scripting / (Authenticated) SQL Injection

Product: SpiceWorks

2012-07-23 dookie webapps

ipswitch whatsup gold 15.02 – Persistent Cross-Site Scripting / Blind SQL Injection / Remote Code Execution

######################################################################################

2012-07-22 muts webapps

Dell SonicWALL Scrutinizer 9.0.1 – ‘statusFilter.php?q’ SQL Injection

#!/usr/bin/python

2012-07-22 muts webapps

AtMail Email Server Appliance 6.4 – Persistent Cross-Site Scripting / Cross-Site Request Forgery / Remote Code Execution

######################################################################################

2012-07-21 muts remote

X-Cart Gold 4.5 – ‘products_map.php?symb’ Cross-Site Scripting

######################################################################################

2012-07-21 muts webapps

SolarWinds Orion Network Performance Monitor 10.2.2 – Multiple Vulnerabilities

######################################################################################

2012-07-21 muts webapps

WordPress Plugin chenpress – Arbitrary File Upload

source: https://www.securityfocus.com/bid/54635/info

2012-07-21 Am!r webapps

Novell ZENworks Configuration Management Preboot Service – 0x6c Buffer Overflow (Metasploit)

##

2012-07-20 Metasploit remote

Novell ZENworks Configuration Management Preboot Service – 0x4c Buffer Overflow (Metasploit)

##

2012-07-20 Metasploit remote

Oracle Outside-In – ‘.FPX’ File Parsing Heap Overflow

#####################################################################################

2012-07-20 Francis Provencher dos

Oracle Outside-In JP2 – File Parsing Heap Overflow

#####################################################################################

2012-07-20 Francis Provencher dos

Oracle Outside-In – ‘.LWP’ File Parsing Stack Buffer Overflow

#####################################################################################

2012-07-20 Francis Provencher dos

PHP 6.0 – ‘openssl_verify()’ Local Buffer Overflow (PoC)

2012-07-20 Yakir Wizman dos

PHP-Nuke module (SPChat) – SQL Injection

## Owner : Pr0T3cT10n

2012-07-20 Yakir Wizman webapps

iBoutique 4.0 – ‘key’ SQL Injection

##############################################################################

2012-07-20 SecPod Research webapps

Oxide WebServer 2.0.4 – Denial of Service

##############################################################################

2012-07-20 SecPod Research dos

ptunnel 0.72 – Remote Denial of Service

#!/usr/bin/env python

2012-07-20 st3n dos

httpdx 1.5.4 – HTTP Server Remote Denial of Service

#!/usr/bin/perl -w

2012-07-20 st3n dos

Maian Survey – ‘/index.php’ URI redirection / Local File Inclusion

source: https://www.securityfocus.com/bid/54613/info

2012-07-20 PuN!Sh3r webapps

Microsoft Windows – Task Scheduler ‘.XML’ Local Privilege Escalation (MS10-092) (Metasploit)

##

2012-07-19 Metasploit local

Novell ZENworks Configuration Management Preboot Service 0x06 – Remote Buffer Overflow (Metasploit)

##

2012-07-19 Metasploit remote

Novell ZENworks Configuration Management Preboot Service 0x21 – Remote Buffer Overflow (Metasploit)

##

2012-07-19 Metasploit remote

Linux Kernel 2.4.4 < 2.4.37.4 / 2.6.0 < 2.6.30.4 - 'Sendpage' Local Privilege Escalation (Metasploit)

##

2012-07-19 Metasploit local

Simple Web Server 2.2 rc2 – Remote Buffer Overflow

use IO::Socket;

2012-07-19 mr.pr0n remote

Joomla! Component com_hello – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/54611/info

2012-07-19 AJAX Security Team webapps

CodeIgniter 2.1 – ‘xss_clean()’ Filter Security Bypass

source: https://www.securityfocus.com/bid/54620/info

2012-07-19 Krzysztof Kotowicz webapps

WebKit Cross-Site Scripting Filter – ‘Cross-Site ScriptingAuditor.cpp’ Security Bypass

source: https://www.securityfocus.com/bid/56570/info

2012-07-19 Tushar Dalvi webapps

Nwahy Articles 2.2 – Cross-Site Request Forgery (Add Admin)

##########################################

2012-07-18 DaOne webapps

Barracuda SSL VPN – ‘launchAgent.do?return-To’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54593/info

2012-07-18 Benjamin Kunz Mejri remote

Barracuda SSL VPN – ‘fileSystem.do’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54593/info

2012-07-18 Benjamin Kunz Mejri remote

Arora Browser – Remote Denial of Service

source: https://www.securityfocus.com/bid/54599/info

2012-07-18 t3rm!n4t0r dos

Forum Oxalis 0.1.2 – SQL Injection

#################################################

2012-07-17 Jean Pascal Pereira webapps

libdbus – ‘DBUS_SYSTEM_BUS_ADDRESS’ Local Privilege Escalation

#include

2012-07-17 Sebastian Krahmer local

AVA VoIP – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/54591/info

2012-07-17 Ibrahim El-Sayed webapps