Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 342

WordPress Plugin Track That Stat 1.0.8 – Cross-Site Scripting

source: https://www.securityfocus.com/bid/53551/info

2012-05-15 Heine Pedersen webapps

FlexNet License Server Manager – Stack Overflow In lmgrd

#######################################################################

2012-05-14 Luigi Auriemma dos

Pro-face Pro-Server EX WinGP PC Runtime – Multiple Vulnerabilities

#######################################################################

2012-05-14 Luigi Auriemma dos

Universal Reader 1.16.740.0 – ‘uread.exe’ Denial of Service

source: https://www.securityfocus.com/bid/53508/info

2012-05-14 demonalex dos

Mozilla Firefox 8/9 – ‘AttributeChildRemoved()’ Use-After-Free (Metasploit)

##

2012-05-13 Metasploit remote

Travelon Express CMS 6.2.2 – Multiple Vulnerabilities

Title:

2012-05-13 Vulnerability-Lab webapps

Proman Xpress 5.0.1 – Multiple Vulnerabilities

Title:

2012-05-13 Vulnerability-Lab webapps

Viscacha Forum CMS 0.8.1.1 – Multiple Vulnerabilities

Title:

2012-05-13 Vulnerability-Lab webapps

Free Realty 3.1-0.6 – Multiple Vulnerabilities

Title:

2012-05-13 Vulnerability-Lab webapps

Galette – ‘picture.php’ SQL Injection

source: https://www.securityfocus.com/bid/53463/info

2012-05-13 sbz webapps

Liferay Portal 6.0.x < 6.1 - Privilege Escalation

Liferay users can assign themselves to organizations, leading to

2012-05-13 Jelmer Kuperus webapps

RealVNC 4.1.0/4.1.1 – Authentication Bypass

# Exploit Title: RealVNC 4.1.0 and 4.1.1 Authentication Bypass Exploit

2012-05-13 fdiskyou remote

WordPress Plugin WP-FaceThumb 0.1 – ‘pagination_wp_facethum’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53497/info

2012-05-13 d3v1l webapps

WikkaWiki 1.3.2 – Spam Logging PHP Injection (Metasploit)

##

2012-05-12 Metasploit webapps

Distinct TFTP 3.01 – Writable Directory Traversal Execution (Metasploit)

##

2012-05-12 Metasploit remote

Sockso 1.51 – Persistent Cross-Site Scripting

#######################################################################

2012-05-12 Ciaran McNally webapps

AnvSoft Any Video Converter 4.3.6 – Unicode Buffer Overflow

# Exploit Title: AnvSoft Any Video Converter 4.3.6 unicode buffer overflow.

2012-05-12 h1ch4m local

Belkin N150 Wireless Router – Password Disclosure

============================================

2012-05-11 Avinash Tangirala webapps

PHP 5.4.3 (Windows x86 Polish) – Code Execution

// Exploit Title: PHP 5.4 (5.4.3) Code Execution 0day (Win32)

2012-05-11 0in local

Adobe Photoshop CS5.1 – U3D.8BI Collada Asset Elements Stack Overflow

'.

2012-05-11 rgod local

QNX phrelay/phindows/phditto – Multiple Vulnerabilities

#######################################################################

2012-05-11 Luigi Auriemma dos

Kerio WinRoute Firewall Web Server < 6 - Source Code Disclosure

# Exploit Title: Kerio WinRoute Firewall Embedded Web ServerVersion: Source

2012-05-10 Andrey Komarov webapps

eLearning server 4g – Multiple Vulnerabilities

# Exploit Title: eLearning Server Multiple Remote Vulnerabilities

2012-05-10 Andrey Komarov webapps

Chevereto 1.91 – ‘/Upload/engine.php?v’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53448/info

2012-05-10 AkaStep webapps

Chevereto 1.91 – ‘/Upload/engine.php?v’ Traversal Arbitrary File Enumeration

source: https://www.securityfocus.com/bid/53448/info

2012-05-10 AkaStep webapps

Mozilla Firefox 7 / 8 < 8.0.1 - nsSVGValue Out-of-Bounds Access (Metasploit)

##

2012-05-09 Metasploit remote

X7 Chat 2.0.5.1 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: X7 Chat 2.0.5.1 CSRF Add Admin Exploit

2012-05-09 DennSpec webapps

Guitar Pro 6.1.1 r10791 – ‘.gpx’ Crash (PoC)

#!/usr/bin/python

2012-05-09 condis dos

DecisionTools SharpGrid – ActiveX Control Remote Code Execution

#####################################################################################

2012-05-09 Francis Provencher dos

SAP NetWeaver Dispatcher – Multiple Vulnerabilities

Core Security - Corelabs Advisory

2012-05-09 Core Security dos