Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 337

vBSEO – ‘u’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55908/info

2012-06-16 MegaMan webapps

Useresponse 1.0.2 – Privilege Escalation / Remote Code Execution

#!/usr/bin/python

2012-06-15 mr_me webapps

TFM MMPlayer – ‘.m3u’ / ‘.ppl’ Local Buffer Overflow (Metasploit)

##

2012-06-15 Metasploit local

ComSndFTP 1.3.7 Beta – USER Format String (Write4) (Metasploit)

##

2012-06-15 Metasploit remote

ADICO – ‘index.php’ Script SQL Injection

source: https://www.securityfocus.com/bid/54023/info

2012-06-15 Ibrahim El-Sayed webapps

WordPress Plugin ORGanizer – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/54039/info

2012-06-15 MustLive webapps

Joomla! Component JCal Pro Calendar – SQL Injection

source: https://www.securityfocus.com/bid/54042/info

2012-06-15 Taurus Omar webapps

XM Easy Personal FTP Server 5.30 – Remote Format String Write4

#!/usr/bin/python

2012-06-14 mr_me remote

Myre Real Estate Mobile 2012 – Multiple Vulnerabilities

Title:

2012-06-14 Vulnerability-Lab webapps

Cells Blog CMS 1.1 – Multiple Web Vulnerabilities

Title:

2012-06-14 Vulnerability-Lab webapps

Swoopo Gold Shop CMS 8.4.56 – Multiple Web Vulnerabilities

Title:

2012-06-14 Vulnerability-Lab webapps

Squirrelcart Cart Shop 3.3.4 – Multiple Web Vulnerabilities

Title:

2012-06-14 Vulnerability-Lab webapps

Wyse – Machine Remote Power Off (Denial of Service) (Metasploit)

require 'msf/core'

2012-06-14 it.solunium dos

ESRI ArcGIS 10.0.x / ArcMap 9 – Arbitrary Code Execution

=====

2012-06-14 Boston Cyber Defense local

Adobe Illustrator CS5.5 – Memory Corruption

##########################################################################

2012-06-14 Felipe Andres Manzano local

Microsoft Internet Explorer – Same ID Property Deleted Object Handling Memory Corruption (MS12-037) (Metasploit)

##

2012-06-14 Metasploit remote

qdPM 7 – Arbitrary File upload

######################################################################################

2012-06-14 loneferret webapps

WordPress Plugin Invit0r – ‘ofc_upload_image.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/53995/info

2012-06-14 Sammy FORGIT webapps

Edimax IC-3030iWn – UDP Packet Password Information Disclosure

source: https://www.securityfocus.com/bid/54006/info

2012-06-14 y3dips remote

WordPress Plugin Zingiri Web Shop 2.4.3 – ‘uploadfilexd.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54020/info

2012-06-14 Sammy FORGIT webapps

Simple Forum PHP – Multiple SQL Injections

source: https://www.securityfocus.com/bid/54024/info

2012-06-14 Vulnerability Research Laboratory webapps

NetArt Media Jobs Portal – SQL Injection

source: https://www.securityfocus.com/bid/54026/info

2012-06-14 Ibrahim El-Sayed webapps

Squiz CMS – Multiple Cross-Site Scripting / XML External Entity Injection Vulnerabilities

source: https://www.securityfocus.com/bid/54049/info

2012-06-14 Nadeem Salim webapps

Juniper Networks Mobility System Software – ‘/aaa/wba_login.html’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54075/info

2012-06-14 Craig Lambert remote

Apple iTunes 10.6.1.7 – ‘.m3u’ Walking Heap Buffer Overflow (PoC)

#!/usr/bin/perl

2012-06-13 LiquidWorm dos

F5 BIG-IP – SSH Private Key Exposure (Metasploit)

##

2012-06-13 Metasploit remote

WordPress Plugin Foxypress – ‘Uploadify.php’ Arbitrary Code Execution (Metasploit)

##

2012-06-13 Metasploit webapps

WordPress Plugin HD FLV Player – ‘uploadVideo.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/53967/info

2012-06-13 Sammy FORGIT webapps

Joomla! Component IDoEditor – ‘image.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/53973/info

2012-06-13 Sammy FORGIT webapps

Joomla! Component mod_jfancy – ‘script.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/53975/info

2012-06-13 Sammy FORGIT webapps

XAMPP for Windows 1.7.7 – Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/53979/info

2012-06-13 Sangteamtham remote

SPIP 2.x – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53983/info

2012-06-13 anonymous webapps

Zimplit CMS 3.0 – Local File Inclusion / Arbitrary File Upload

source: https://www.securityfocus.com/bid/53990/info

2012-06-13 KedAns-Dz webapps

Symantec Web Gateway 5.0.2.8 – ‘ipchange.php’ Command Injection (Metasploit)

##

2012-06-12 Metasploit webapps

Microsoft Windows OpenType Font – File Format Denial of Service

OpenType font file format remote (client-side) DoS exploit for Windows

2012-06-12 Cr4sh dos

F5 BIG-IP – Authentication Bypass

#!/usr/bin/python

2012-06-12 David Kennedy (ReL1K) remote

MySQL – Authentication Bypass

#!/usr/bin/python

2012-06-12 David Kennedy (ReL1K) remote

WordPress Plugin Contus Video Gallery – ‘upload1.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/53931/info

2012-06-12 Sammy FORGIT webapps

XOOPS Cube PROJECT FileManager – ‘xupload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/53945/info

2012-06-12 KedAns-Dz webapps

Joomla! Component com_simpleswfupload – ‘uploadhandler.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/53968/info

2012-06-12 Sammy FORGIT webapps

Joomla! Component mod_artuploader – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/53969/info

2012-06-12 Sammy FORGIT webapps

Joomla! Component DentroVideo 1.2 – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/53972/info

2012-06-12 Sammy FORGIT webapps

Joomla! Component Easy Flash Uploader – ‘helper.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/53977/info

2012-06-12 Sammy FORGIT webapps

Microsoft Office – ClickOnce Unsafe Object Package Handling (MS12-005) (Metasploit)

##

2012-06-11 Metasploit local