Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 343

SolarWinds Storage Manager 5.1.0 – SQL Injection (Metasploit)

##

2012-05-04 Metasploit remote

PHP 5.3.12/5.4.2 – CGI Argument Injection (Metasploit)

##

2012-05-04 Metasploit remote

VideoLAN VLC Media Player 2.0.0 – Mms Stream Handling Buffer Overflow (Metasploit)

##

2012-05-03 Metasploit remote

AnvSoft Any Video Converter 4.3.6 – Local Stack Overflow

#!/usr/bin/python

2012-05-03 cikumel local

Baby Gekko CMS 1.1.5c – Multiple Persistent Cross-Site Scripting Vulnerabilities

Baby Gekko CMS v1.1.5c Multiple Stored Cross-Site Scripting Vulnerabilities

2012-05-03 LiquidWorm webapps

PluXml 5.1.5 – Local File Inclusion

Advisory ID: HTB23086

2012-05-03 High-Tech Bridge SA webapps

OpenKM 5.1.7 – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/53602/info

2012-05-03 Cyrill Brunschwiler webapps

Microsoft Windows XP – ‘win32k.sys’ Local Kernel Denial of Service

////////////////////////////////////////////////////////////////////////////

2012-05-02 Lufeng Li dos

OpenConf 4.11 – ‘/author/edit.php’ Blind SQL Injection

2012-05-02 EgiX webapps

PHP-decoda – ‘Video Tag’ Cross-Site Scripting

Advisory: php-decoda: Cross-Site Scripting in Video Tags

2012-05-02 RedTeam Pentesting webapps

Symantec pcAnywhere – Insecure File Permissions Privilege Escalation

=======

2012-05-02 Edward Torkington local

Websense Triton – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/51086/info

2012-05-02 Ben Williams webapps

iGuard Security Access Control Device Firmware 3.6.7427A – Cross-Site Scripting

source: https://www.securityfocus.com/bid/53355/info

2012-05-02 Usman Saeed webapps

WordPress Plugin Zingiri Web Shop 2.4.2 – Persistent Cross-Site Scripting

##############################################################################

2012-05-01 Mehmet Ince webapps

SAMSUNG NET-i Viewer 1.37 – Overwrite (SEH)

2012-05-01 blake local

GENU CMS 2012.3 – Multiple SQL Injections

Title:

2012-05-01 Vulnerability-Lab webapps

McAfee Virtual Technician MVTControl 6.3.0.1911 – GetObject (Metasploit)

##

2012-05-01 Metasploit remote

opencart 1.5.2.1 – Multiple Vulnerabilities

Author: Janek Vind "waraxe"

2012-05-01 waraxe webapps

MyClientBase 0.12 – Multiple Vulnerabilities

Title:

2012-05-01 Vulnerability-Lab webapps

STRATO NewsLetter Manager – Directory Traversal

STRATO Newsletter Manager is vulnerable against Directory Traversal

2012-05-01 Zero X webapps

LAN Messenger 1.2.28 – Denial of Service

#!/usr/bin/python

2012-05-01 Julien Ahrens dos

Mikrotik Router – Denial of Service

#!/usr/bin/python

2012-05-01 PoURaN dos

SolarWinds Storage Manager 5.1.0 – Remote SYSTEM SQL Injection

#!/usr/bin/python

2012-05-01 muts remote

Car Portal CMS 3.0 – Multiple Vulnerabilities

Title:

2012-04-30 Vulnerability-Lab webapps

C4B XPhone UC Web 4.1.890S R1 – Cross-Site Scripting

Title:

2012-04-30 Vulnerability-Lab webapps

Opial CMS 2.0 – Multiple Vulnerabilities

Title:

2012-04-30 Vulnerability-Lab webapps

DIY CMS 1.0 Poll – Multiple Vulnerabilities

Title:

2012-04-30 Vulnerability-Lab webapps

McAfee Virtual Technician 6.3.0.1911 MVT.MVTControl.6300 – ActiveX ‘GetObject()’ Code Execution

McAfee Virtual Technician 6.3.0.1911 MVT.MVTControl.6300 ActiveX Control

2012-04-30 rgod remote

WordPress Plugin WPsc MijnPress – ‘rwflush’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53302/info

2012-04-30 Am!r webapps

WebCalendar 1.2.4 – Remote Code Injection (Metasploit)

##

2012-04-29 Metasploit webapps

Soco CMS – Local File Inclusion

#######################################################################################

2012-04-29 BHG Security Center webapps

Remote-Anything Player 5.60.15 – Denial of Service

#!python

2012-04-29 Saint Patrick dos

Alienvault Open Source SIEM (OSSIM) 3.1 – Multiple Vulnerabilities

#####################################################################################

2012-04-29 Stefan Schurtz webapps

Croogo CMS 1.3.4 – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/53287/info

2012-04-29 Chokri Ben Achor webapps

Shawn Bradley PHP Volunteer Management 1.0.2 – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/53301/info

2012-04-28 eidelweiss webapps

WordPress Core 3.3.1 – Multiple Cross-Site Request Forgery Vulnerabilities

+--------------------------------------------------------------------------------------------------------------------...

2012-04-27 Ivano Binetti webapps

CPE17 Autorun Killer 1.7.1 – Local Stack Buffer Overflow (Metasploit)

#

2012-04-27 Xenithz xpt local

Axous 1.1.0 – SQL Injection

########################################################################################

2012-04-27 H4ckCity Secuirty TeaM webapps

Nokia PC Suite Video Manager 7.1.180.64 – ‘.mp4’ Denial of Service

###########################################################################################################

2012-04-27 Senator of Pirates dos

SilverStripe CMS 2.4.7 – ‘install.php’ PHP Code Injection

# source: https://www.securityfocus.com/bid/53282/info

2012-04-27 Mehmet Ince webapps

SKYUC 3.2.1 – ‘encode’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53291/info

2012-04-27 farbodmahini webapps

XM Forum – ‘id’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/53292/info

2012-04-27 Farbod Mahini webapps

Uiga FanClub – ‘p’ SQL Injection

source: https://www.securityfocus.com/bid/53295/info

2012-04-27 Farbod Mahini webapps