Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 340

ispVM System – ‘.XCF’ File Handling Overflow (Metasploit)

##

2012-05-29 Metasploit local

PBBoard 2.1.4 – Multiple SQL Injections

# Title: PBBoard v2.1.4 multiple SQLi Vulnerabilities

2012-05-29 loneferret webapps

WHMCompleteSolution (WHMCS) – ‘boleto_bb.php’ SQL Injection

source: https://www.securityfocus.com/bid/53711/info

2012-05-29 dex webapps

PBBoard 2.1.4 – Local File Inclusion

################################################################################################

2012-05-28 n4ss1m webapps

LibreOffice 3.5.3 – ‘.rtf’ FileOpen Crash

2012-05-28 shinnai dos

PHP Volunteer Management System 1.0.2 – Multiple Vulnerabilities

# Exploit Title: PHP Volunteer Management System v 1.0.2 Multiple Vulnerabilities

2012-05-28 Ashoo webapps

Symantec Web Gateway 5.0.2.8 – Command Execution (Metasploit)

##

2012-05-28 Metasploit remote

PHP Volunteer Management System 1.0.2 – Multiple SQL Injections

# Title: PHP Volunteer Management System v 1.0.2 multiple SQLi Vulnerabilities

2012-05-28 loneferret webapps

Yamamah Photo Gallery 1.1 – Database Information Disclosure

source: https://www.securityfocus.com/bid/53709/info

2012-05-28 L3b-r1'z webapps

quickshare file share 1.2.1 – Directory Traversal (Metasploit) (2)

##

2012-05-27 Metasploit remote

WeBid – ‘converter.php’ Remote PHP Code Injection (Metasploit)

##

2012-05-27 Metasploit webapps

b2ePms 1.0 – Multiple SQL Injection Vulnerabilities

# Title: b2ePMS 1.0 multiple SQLi Vulnerabilities

2012-05-27 loneferret webapps

AzDGDatingMedium 1.9.3 – Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/53692/info

2012-05-27 AkaStep webapps

Nilehoster Topics Viewer 2.3 – Multiple SQL Injections / Local File Inclusion

source: https://www.securityfocus.com/bid/53708/info

2012-05-27 n4ss1m webapps

Symantec Web Gateway 5.0.2 – Local/Remote File Inclusion / Remote Code Execution

#!/usr/bin/python

2012-05-26 muts webapps

phpList 2.10.9 – ‘Sajax.php’ PHP Code Injection

source: https://www.securityfocus.com/bid/53693/info

2012-05-26 L3b-r1'z webapps

Small-Cms – ‘hostname’ Remote PHP Code Injection

source: https://www.securityfocus.com/bid/53703/info

2012-05-26 L3b-r1'z webapps

appRain CMF – Arbitrary ‘.PHP’ File Upload (Metasploit)

##

2012-05-25 Metasploit webapps

OpenOffice – OLE Importer DocumentSummaryInformation Stream Handling Overflow (Metasploit)

##

2012-05-25 Metasploit local

bsnes 0.87 – Local Denial of Service

2012-05-25 Yakir Wizman dos

SocialEngine 4.2.2 – Multiple Vulnerabilities

Social Engine 4.2.2 Multiples Vulnerabilities

2012-05-25 i4k webapps

RabidHamster R4 – Log Entry ‘sprintf()’ Remote Buffer Overflow (Metasploit)

##

2012-05-25 Metasploit remote

Apple iOS 5.1.1 Safari Browser – ‘JS match()’ / ‘search()’ Crash (PoC)

#!/usr/bin/env ruby

2012-05-25 Alberto Ortega dos

DynPage 1.0 – ‘ckfinder’ Multiple Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/53696/info

2012-05-25 KedAns-Dz webapps

Apache Mod_Auth_OpenID – Session Stealing

https://github.com/paranoid/mod_auth_openid/blob/master/CVE-2012-2760.markdown

2012-05-24 Peter Ellehauge local

Wireshark – DIAMETER Dissector Denial of Service

source: https://www.securityfocus.com/bid/53652/info

2012-05-24 Wireshark dos

Wireshark – Multiple Dissector Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/53651/info

2012-05-24 Laurent Butti dos

Wireshark – Misaligned Memory Denial of Service

source: https://www.securityfocus.com/bid/53653/info

2012-05-24 Klaus Heckelmann dos

Jaow 2.4.5 – Blind SQL Injection

# Exploit Title: Jaow

2012-05-24 kallimero webapps

PHPCollab 2.5 – ‘uploadfile.php’ Crafted Request Arbitrary Non-PHP File Upload

source: https://www.securityfocus.com/bid/53675/info

2012-05-24 team ' & 1=1-- webapps

phpCollab 2.5 – Direct Request Multiple Protected Page Access

source: https://www.securityfocus.com/bid/53675/info

2012-05-24 team ' & 1=1-- webapps

FlexNet License Server Manager – lmgrd Buffer Overflow (Metasploit)

##

2012-05-23 Metasploit remote

Symantec End Point Protection 11.x / Symantec Network Access Control 11.x – Local Code Execution (PoC)

# Symantec End Point Protection 11.x & Symantec Network Access Control 11.x Local Code Execution POC

2012-05-23 41.w4r10r dos

Ruubikcms 1.1.x – Cross-Site Scripting / Information Disclosure / Directory Traversal

source: https://www.securityfocus.com/bid/53655/info

2012-05-23 AkaStep webapps

phpCollab 2.5 – Database Backup Information Disclosure

source: https://www.securityfocus.com/bid/53656/info

2012-05-23 team ' & 1=1-- webapps

Ajaxmint Gallery 1.0 – Local File Inclusion

source: https://www.securityfocus.com/bid/53659/info

2012-05-23 AkaStep webapps

Pligg CMS 1.x – ‘module.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53662/info

2012-05-23 High-Tech Bridge SA webapps

pragmaMx 1.12.1 – ‘modules.php’ URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/53669/info

2012-05-23 High-Tech Bridge SA webapps

pragmaMx 1.12.1 – ‘/includes/wysiwyg/spaw/editor/plugins/imgpopup/img_popup.php?img_url’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53669/info

2012-05-23 High-Tech Bridge SA webapps

Yellow Duck Framework 2.0 Beta1 – Local File Disclosure

source: https://www.securityfocus.com/bid/53674/info

2012-05-23 L3b-r1'z webapps

Novell Client 4.91 SP4 – Local Privilege Escalation

# Novell Client 4.91 SP3/4 Privilege escalation exploit

2012-05-22 sickness local

Plogger Photo Gallery – SQL Injection

source: https://www.securityfocus.com/bid/53644/info

2012-05-22 Eyup CELIK webapps

Mosh – Remote Denial of Service

source: https://www.securityfocus.com/bid/53646/info

2012-05-22 Timo Juhani Lindfors dos

HP StorageWorks P4000 – Virtual SAN Appliance Command Execution (Metasploit)

##

2012-05-21 Metasploit remote

Real-DRAW PRO 5.2.4 – Import File Crash

Real-DRAW PRO 5.2.4 Import File Crash

2012-05-21 Ahmed Elhady Mohamed dos

DVD-Lab Studio 1.25 – ‘.DAL’ File Open Crash

DVD-Lab Studio 1.25 DAL File Open Crash

2012-05-21 Ahmed Elhady Mohamed dos

Foxit Reader 3.0 – Open Execute Action Stack Buffer Overflow (Metasploit)

##

2012-05-21 Metasploit local

PHP 5.4.3 – wddx_serialize_* / stream_bucket_* Variant Object Null Ptr Dereference

2012-05-21 condis dos

PHP 5.4.3 – ‘com_event_sink’ Denial of Service

2012-05-21 condis dos

Vanilla Forums About Me Plugin – Persistent Cross-Site Scripting

# Title: Vanilla About Me Plugin Persistant XSS Vulnerability

2012-05-21 Henry Hoggard webapps