Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 339

WordPress Plugin WP-Property 1.35.0 – Arbitrary File Upload

##################################################

2012-06-05 Sammy FORGIT webapps

WordPress Plugin Marketplace Plugin 1.5.0 < 1.6.1 - Arbitrary File Upload

##################################################

2012-06-05 Sammy FORGIT webapps

WordPress Plugin Google Maps via Store Locator 2.7.1 < 3.0.1 - Multiple Vulnerabilities

##################################################

2012-06-05 Sammy FORGIT webapps

WordPress Plugin HTML5 AV Manager 0.2.7 – Arbitrary File Upload

##################################################

2012-06-05 Sammy FORGIT webapps

WordPress Plugin Foxypress 0.4.1.1 < 0.4.2.1 - Arbitrary File Upload

##################################################

2012-06-05 Sammy FORGIT webapps

WordPress Plugin Asset Manager 0.2 – Arbitrary File Upload

##################################################

2012-06-05 Sammy FORGIT webapps

Bigware Shop 2.1x – ‘main_bigware_54.php’ SQL Injection

source: https://www.securityfocus.com/bid/53810/info

2012-06-05 rwenzel webapps

Sysax 5.60 – Create SSL Certificate Buffer Overflow

#Title: Sysax Security Settings Configure -> Create Certificate ->

2012-06-04 Craig Freyman local

Hexamail Server 4.4.5 – Persistent Cross-Site Scripting

#Title: Hexamail Server meal.txt

2012-06-04 modpr0be webapps

Mnews 1.1 – ‘view.php’ SQL Injection

2012-06-04 WhiteCollarGroup webapps

Log1 CMS – ‘writeInfo()’ PHP Code Injection (Metasploit)

##

2012-06-03 Metasploit webapps

PHP 5.3.10 – ‘spl_autoload()’ Local Denial of Service

2012-06-03 Yakir Wizman dos

PHP 5.3.10 – ‘spl_autoload_register()’ Local Denial of Service

2012-06-03 Yakir Wizman dos

PHP 5.3.10 – ‘spl_autoload_call()’ Local Denial of Service

2012-06-03 Yakir Wizman dos

vanilla forums poll plugin 0.9 – Persistent Cross-Site Scripting

# Title: Vanilla Poll 0.9 Stored XSS

2012-06-03 Henry Hoggard webapps

Vanilla Forums 2.0.18.4 – Tagging Persistent Cross-Site Scripting

# Title: Vanilla Tagging Stored XSS

2012-06-03 Henry Hoggard webapps

TinyCMS 1.3 – Arbitrary File Upload / Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/53761/info

2012-06-03 KedAns-Dz webapps

TinyCMS 1.3 – ‘index.php?page’ Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/53761/info

2012-06-03 KedAns-Dz webapps

TinyCMS 1.3 – ‘/admin/admin.php?do’ Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/53761/info

2012-06-03 KedAns-Dz webapps

AdaptCMS 2.0.2 TinyURL Plugin – ‘index.php?id’ SQL Injection

source: https://www.securityfocus.com/bid/53764/info

2012-06-03 KedAns-Dz webapps

AdaptCMS 2.0.2 TinyURL Plugin – ‘admin.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/53764/info

2012-06-03 KedAns-Dz webapps

Ignite Solutions CMS – ‘car-details.php’ SQL Injection

source: https://www.securityfocus.com/bid/53771/info

2012-06-03 Am!r webapps

WordPress Plugin Picturesurf Gallery – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/53894/info

2012-06-03 Sammy FORGIT webapps

IrfanView 4.33 – Format PlugIn ‘.TTF’ File Parsing Stack Overflow

#####################################################################################

2012-06-02 Francis Provencher dos

GIMP script-fu – Server Buffer Overflow (Metasploit)

##

2012-06-02 Metasploit remote

Vanilla Forum Tagging Plugin Enchanced 1.0.1 – Persistent Cross-Site Scripting

# Title: Vanilla Tagging Enchanced 1.0.1 Stored XSS

2012-06-02 Henry Hoggard webapps

IrfanView 4.33 – Format PlugIn ECW Decompression Heap Overflow

#####################################################################################

2012-06-01 Francis Provencher dos

4PSA VoIPNow Professional 2.5.3 – Multiple Vulnerabilities

4PSA VoipNow Professional 2.5.3 Reflected XSS / CSRF (Add Reseller) Vulnerabilities

2012-06-01 Aboud-el webapps

Citrix Provisioning Services 5.6 SP1 – Streamprocess Opcode 0x40020004 Buffer Overflow (Metasploit)

##

2012-06-01 Metasploit remote

Citrix Provisioning Services 5.6 SP1 – Streamprocess Opcode 0x40020006 Buffer Overflow (Metasploit)

##

2012-06-01 Metasploit remote

Citrix Provisioning Services 5.6 SP1 – Streamprocess Opcode 0x40020002 Buffer Overflow (Metasploit)

##

2012-06-01 Metasploit remote

Membris 2.0.1 – Multiple Vulnerabilities

###################################

2012-06-01 Dr.abolalh webapps

VoipNow Professional 2.5.3 – ‘nsextt’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53759/info

2012-06-01 Aboud-el webapps

GIMP 2.6 script-fu < 2.8.0 - Buffer Overflow (PoC)

# There is a buffer overflow in the script-fu server component of GIMP

2012-05-31 Joseph Sheridan dos

PHP Volunteer Management System 1.0.2 – Arbitrary File Upload (Metasploit)

##

2012-05-31 Metasploit webapps

Sony VAIO Wireless Manager 4.0.0.0 – Buffer Overflow

Advisory ID: HTB23063

2012-05-31 High-Tech Bridge SA dos

Browsers Browsers – Navigation Download Trick

Another moderately interesting tidbit, I guess...

2012-05-31 Michal Zalewski local

NewsAdd 1.0 – ‘lerNoticia.php?id’ SQL Injection

##########################################################################

2012-05-31 Yakir Wizman webapps

Supernews 2.6.1 – ‘noticias.php?cat’ SQL Injection

##########################################################################

2012-05-31 Yakir Wizman webapps

Sorensoft Power Media 6.0 – Denial of Service

#!/usr/bin/python

2012-05-31 Onying dos

WHMCompleteSolution (WHMCS) 5.0 – Cross-Site Request Forgery (Multiple Application Function)

source: https://www.securityfocus.com/bid/53740/info

2012-05-31 Shadman Tanjim webapps

WHMCompleteSolution (WHMCS) 5.0 – ‘KnowledgeBase.php?search’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53740/info

2012-05-31 Shadman Tanjim webapps

PHP4dvd – ‘config.php’ PHP Code Injection

source: https://www.securityfocus.com/bid/60257/info

2012-05-31 CWH Underground webapps

NewsAdd 1.0 – Multiple SQL Injections

# Exploit Title: NewsAdd

2012-05-30 WhiteCollarGroup webapps

Microsoft Wordpad 5.1 – ‘.doc’ Null Pointer Dereference

Microsoft Wordpad 5.1 (.doc) Null Pointer Dereference Vulnerability

2012-05-30 condis dos

Ganesha Digital Library 4.0 – Multiple Vulnerabilities

=====================================================

2012-05-30 X-Cisadane webapps

MPlayer – ‘.SAMI’ Subtitle File Buffer Overflow (Metasploit)

##

2012-05-30 Metasploit local

Simple Web Content Management System 1.1 < 1.3 - Multiple SQL Injections

######################################################################################

2012-05-30 loneferret webapps

WinRadius Server 2009 – Denial of Service

Title: WinRadius Server Denial Of Service Vulnerability

2012-05-29 demonalex dos

TFTPD32 DNS Server 4.00 – Denial of Service

Title: Tftpd32 DNS Server Denial Of Service Vulnerability

2012-05-29 demonalex dos