Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 346

Quest vWorkspace 7.5 Connection Broker Client – ActiveX Control ‘pnllmcli.dll 7.5.304.547’ SaveMiniLaunchFile() Method Remote File Creation / Overwrite

2012-04-05 rgod remote

Sony Bravia – Remote Denial of Service

# Exploit Title: Sony Bravia Remote Denial of Service

2012-04-05 Gabriel Menezes Nunes dos

GENU CMS – SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

2012-04-05 hordcode security webapps

Sony Bravia KDL-32CX525 – ‘hping’ Remote Denial of Service

source: https://www.securityfocus.com/bid/52893/info

2012-04-05 Gabriel Menezes Nunes dos

WordPress Plugin TagGator – ‘tagid’ SQL Injection

source: https://www.securityfocus.com/bid/52908/info

2012-04-05 Am!r webapps

NetOp Remote Control Client 9.5 – Remote Buffer Overflow (Metasploit)

##

2012-04-04 Metasploit remote

Xion Audio Player 1.0.127 – ‘.aiff’ Denial of Service

#!/usr/bin/python

2012-04-04 condis dos

Plume CMS 1.2.4 – Multiple Persistent Cross-Site Scripting Vulnerabilities

+--------------------------------------------------------------------------------------------------------------------...

2012-04-04 Ivano Binetti webapps

e-ticketing – SQL Injection

'e-ticketing' SQL Injection (CVE-2012-1673)

2012-04-04 Mark Stanislav webapps

phpPaleo – Local File Inclusion

'phpPaleo' Local File Inclusion (CVE-2012-1671)

2012-04-04 Mark Stanislav webapps

Hotel Booking Portal – SQL Injection

'Hotel Booking Portal' SQL Injection (CVE-2012-1672)

2012-04-04 Mark Stanislav webapps

osCMax 2.5 – ‘/admin/login.php?Username’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52886/info

2012-04-04 High-Tech Bridge SA webapps

osCMax 2.5 – ‘/admin/htaccess.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52886/info

2012-04-04 High-Tech Bridge SA webapps

osCMax 2.5 – ‘/admin/xsell.php?search’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52886/info

2012-04-04 High-Tech Bridge SA webapps

osCMax 2.5 – ‘/admin/stats_products_purchased.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52886/info

2012-04-04 High-Tech Bridge SA webapps

osCMax 2.5 – ‘/admin/stats_monthly_sales.php?status’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52886/info

2012-04-04 High-Tech Bridge SA webapps

osCMax 2.5 – ‘/admin/stats_customers.php?sorted’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52886/info

2012-04-04 High-Tech Bridge SA webapps

osCMax 2.5 – ‘/admin/information_manager.php?information_id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52886/info

2012-04-04 High-Tech Bridge SA webapps

osCMax 2.5 – ‘/admin/geo_zones.php?zID’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52886/info

2012-04-04 High-Tech Bridge SA webapps

osCMax 2.5 – ‘/admin/new_attributes_include.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52886/info

2012-04-04 High-Tech Bridge SA webapps

osCMax 2.5 – ‘/admin/login.php?Username’ SQL Injection

source: https://www.securityfocus.com/bid/52886/info

2012-04-04 High-Tech Bridge SA webapps

osCMax 2.5 – ‘/admin/stats_monthly_sales.php?status’ SQL Injection

source: https://www.securityfocus.com/bid/52886/info

2012-04-04 High-Tech Bridge SA webapps

vBulletin 4.1.10 – ‘announcementid’ SQL Injection

source: https://www.securityfocus.com/bid/52897/info

2012-04-04 Am!r webapps

BlazeVideo HDTV Player 6.6 Professional – Local Overflow (SEH + ASLR + DEP Bypass)

#!/usr/bin/python -w

2012-04-03 b33f local

Simple PHP Agenda 2.2.8 – Cross-Site Request Forgery (Add Admin / Add Event)

+--------------------------------------------------------------------------------------------------------------------...

2012-04-03 Ivano Binetti webapps

Sysax 5.57 – Directory Traversal

#!/usr/bin/python

2012-04-03 Craig Freyman remote

Arbor Networks Peakflow SP 3.6.1 – ‘index/’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52881/info

2012-04-03 b.saleh remote

JBMC Software DirectAdmin 1.403 – ‘domain’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52845/info

2012-04-02 Dawid Golak webapps

FoxPlayer 2.6.0 – Denial of Service

Denial of Service in FoxPlayer version 2.6.0

2012-04-01 Ahmed Elhady Mohamed dos

SnackAmp 3.1.3 – ‘.aiff’ Denial of Service

SnackAmp 3.1.3 Malicious aiff File Denial of service

2012-04-01 Ahmed Elhady Mohamed dos

ManageEngine Firewall Analyzer 7.2 – ‘/fw/index2.do’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52841/info

2012-04-01 Vulnerability Research Laboratory webapps

ManageEngine Firewall Analyzer 7.2 – ‘fw/createAnomaly.do?subTab’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52841/info

2012-04-01 Vulnerability Research Laboratory webapps

ManageEngine Firewall Analyzer 7.2 – ‘fw/mindex.do?url’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52841/info

2012-04-01 Vulnerability Research Laboratory webapps

ManageEngine Firewall Analyzer 7.2 – ‘fw/syslogViewer.do?port’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52841/info

2012-04-01 Vulnerability Research Laboratory webapps

FlatnuX CMS – Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/52846/info

2012-04-01 Vulnerability Laboratory webapps

FlatnuX CMS – Cross-Site Request Forgery (Add Admin)

source: https://www.securityfocus.com/bid/52846/info

2012-04-01 Vulnerability Laboratory webapps

Landshop 0.9.2 – Multiple Web Vulnerabilities

Title:

2012-03-31 Vulnerability-Lab webapps

EMC Data Protection Advisor 5.8.1 – Denial of Service

#######################################################################

2012-03-31 Luigi Auriemma dos

Woltlab Burning Board 2.2/2.3 [WN]KT KickTipp 3.1 – SQL Injection

========================================================================================

2012-03-31 Easy Laster webapps

WordPress Plugin BuddyPress Plugin 1.5.x < 1.5.5 - SQL Injection

# Exploit Title: Buddypress plugin of Wordpress remote SQL Injection

2012-03-31 Ivan Terkin webapps

Flock 2.6.1 – Denial of Service

source: https://www.securityfocus.com/bid/52856/info

2012-03-31 r45c4l dos

Java – AtomicReferenceArray Type Violation (Metasploit)

##

2012-03-30 Metasploit remote

coppermine 1.5.18 – Multiple Vulnerabilities

[waraxe-2012-SA#081] - Multiple Vulnerabilities in Coppermine 1.5.18

2012-03-30 waraxe webapps

Bitsmith PS Knowbase 3.2.3 – Local Buffer Overflow

Title:

2012-03-30 Vulnerability-Lab local

ArticleSetup – Multiple Persistence Cross-Site Scripting / SQL Injections

##############################################################################

2012-03-30 SecPod Research webapps

MailMax 4.6 – POP3 ‘USER’ Remote Buffer Overflow

#!/usr/bin/python

2012-03-30 localh0t remote

dalbum 144 build 174 – Cross-Site Request Forgery

dalbum 144 build 174 and earlier CSRF Vulnerabilities

2012-03-30 Ahmed Elhady Mohamed webapps

SyndeoCMS 3.0.01 – Persistent Cross-Site Scripting

+--------------------------------------------------------------------------------------------------------------------...

2012-03-30 Ivano Binetti webapps

PHP Designer 2007 Personal – Multiple SQL Injections

source: https://www.securityfocus.com/bid/52819/info

2012-03-30 MR.XpR webapps

e107 1.0 – ‘view’ SQL Injection

source: https://www.securityfocus.com/bid/52821/info

2012-03-30 Am!r webapps