Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 335

Real Networks RealPlayer – ‘.avi’ File Divide-by-Zero Denial of Service

source: https://www.securityfocus.com/bid/54220/info

2012-06-28 Dark-Puzzle dos

PHP-Fusion Advanced MP3 Player Infusion – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54228/info

2012-06-28 Sammy FORGIT webapps

TEMENOS T24 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54235/info

2012-06-28 Rehan Ahmed webapps

Mobile USB Drive HD – Multiple Local File Inclusion / Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/60847/info

2012-06-28 Benjamin Kunz Mejri webapps

symantec Web gateway 5.0.2.8 – Multiple Vulnerabilities

Software: Symantec Web Gateway

2012-06-27 S2 Crew webapps

Symantec pcAnywhere 12.5.0 – ‘Login’ / ‘Password’ Remote Buffer Overflow

#!/usr/bin/python

2012-06-27 S2 Crew remote

Zend Framework < 2.0.0 beta4 < 1.12 RC1 < 1.11.11 - Local File Disclosure

SEC Consult Vulnerability Lab Security Advisory < 20120626-0 >

2012-06-27 SEC Consult webapps

Sielco Sistemi Winlog 2.07.16 – Multiple Vulnerabilities

#######################################################################

2012-06-27 Luigi Auriemma dos

Schoolhos CMS – HTML Injection

source: https://www.securityfocus.com/bid/54204/info

2012-06-27 the_cyber_nuxbie webapps

WordPress Plugin Website FAQ 1.0 – SQL Injection

# Exploit Title: WordPress Website FAQ Plugin v1.0 SQL Injection

2012-06-26 Chris Kellum webapps

Apple QuickTime – QuickTime.util.QTByteObject Initialization Security Checks Bypass

In order to test the POC code for the reported Issue 22, manually add

2012-06-26 Security Explorations local

Western Digital’s WD TV Live SMP/Hub – Privilege Escalation

Introduction

2012-06-26 Wolfgang Borst remote

SugarCRM CE 6.3.1 – ‘Unserialize()’ PHP Code Execution (Metasploit)

##

2012-06-26 Metasploit webapps

DigPHP – ‘dig.php’ Script Remote File Disclosure

source: https://www.securityfocus.com/bid/54207/info

2012-06-26 Ryuzaki Lawlet webapps

Google Chrome 19.0.1084.52 – ‘metro_driver.dll’ DLL Loading Arbitrary Code Execution

source: https://www.securityfocus.com/bid/54477/info

2012-06-26 Moshe Zioni remote

Adobe Flash Player – Object Type Confusion (Metasploit)

##

2012-06-25 Metasploit remote

Apple iTunes 10 – Extended M3U Stack Buffer Overflow (Metasploit)

##

2012-06-25 Metasploit remote

Kingview Touchview 6.53 – EIP Overwrite

# Exploit Title: Kingview Touchview EIP direct control

2012-06-25 Carlos Mario Penagos Hollmann dos

Kingview Touchview 6.53 – Multiple Heap Overflow Vulnerabilities

# Exploit Title: Kingview 6.53 touchview.exe heap overflow 2

2012-06-25 Carlos Mario Penagos Hollmann dos

Slimpdf Reader 1.0 – Memory Corruption

# Exploit Title:

2012-06-25 Carlos Mario Penagos Hollmann dos

Able2Extract and Able2Extract Server 6.0 – Memory Corruption

# Exploit Title: Able2Extract and Able2Extract Server v 6.0 Memory

2012-06-25 Carlos Mario Penagos Hollmann dos

Parodia 6.8 – ’employer-profile.asp’ SQL Injection

# Exploit Title: Parodia 6.8 and early SQL injection

2012-06-25 Carlos Mario Penagos Hollmann webapps

Able2Doc and Able2Doc Professional 6.0 – Memory Corruption

# Exploit Title: Able2Doc and Able2Doc Professional v 6.0 memory corruption

2012-06-25 Carlos Mario Penagos Hollmann dos

WordPress Plugin Fancy Gallery 1.2.4 – Arbitrary File Upload

##################################################

2012-06-25 Sammy FORGIT webapps

Drupal Module Drag & Drop Gallery 6.x-1.5 – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54179/info

2012-06-25 Sammy FORGIT webapps

FCKEditor Core – ‘Editor ‘spellchecker.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54188/info

2012-06-25 Emilio Pinna webapps

Winamp 5.13 – ‘.m3u’ File Exception Handling Remote Denial of Service

source: https://www.securityfocus.com/bid/54190/info

2012-06-25 Dark-Puzzle dos

Umapresence – Local File Inclusion / Arbitrary File Deletion

source: https://www.securityfocus.com/bid/54194/info

2012-06-25 Sammy FORGIT webapps

IrfanView 4.33 – ‘.DJVU’ Image Processing Heap Overflow

#####################################################################################

2012-06-24 Francis Provencher dos

UCCASS 1.8.1 – Blind SQL Injection

:::::::-. ... ::::::. :::.

2012-06-24 dun webapps

SugarCRM CE 6.3.1 – ‘Unserialize()’ PHP Code Execution

2012-06-23 EgiX webapps

Amazon S3 Uploadify Script – ‘Uploadify.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54170/info

2012-06-23 Sammy FORGIT webapps

SilverStripe CMS Pixlr Image Editor – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54172/info

2012-06-23 Sammy FORGIT webapps

WordPress Plugin Flip Book – ‘PHP.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54173/info

2012-06-23 Sammy FORGIT webapps

Qutecom SoftPhone 2.2.1 – Heap Overflow Crash (Denial of Service) (PoC)

# Title: Qutecom (Cross-platform, open source softphone) Heap Overflow DoS/Crash Proof of Concept

2012-06-22 Debasish Mandal dos

agora project 2.13.1 – Multiple Vulnerabilities

###################################################################

2012-06-22 Chris Russell webapps

LimeSurvey 1.92+ build120620 – Multiple Vulnerabilities

:::::::-. ... ::::::. :::.

2012-06-22 dun webapps