Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 348

Oreans WinLicense 2.1.8.0 – XML File Handling Memory Corruption

#!/usr/bin/perl

2012-03-21 LiquidWorm dos

D-Link DIR-605 – Cross-Site Request Forgery

# Exploit Title: D-Link DIR-605 CSRF Vulnerability

2012-03-21 iqzer0 webapps

phpList 2.10.17 – SQL Injection / Cross-Site Scripting

phpList 2.10.17 Remote SQL Injection and XSS Vulnerability

2012-03-21 LiquidWorm webapps

CMSimple 3.3 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52661/info

2012-03-21 Stefan Schurtz webapps

Open Journal Systems (OJS) 2.3.6 – ‘index.php?authors[][url]’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52666/info

2012-03-21 High-Tech Bridge webapps

Open Journal Systems (OJS) 2.3.6 – ‘/lib/pkp/classes/core/String.inc.php?String::stripUnsafeHtml()’ Method Cross-Site Scripting

source: https://www.securityfocus.com/bid/52666/info

2012-03-21 High-Tech Bridge webapps

Open Journal Systems (OJS) 2.3.6 – Multiple Script Arbitrary File Upload

source: https://www.securityfocus.com/bid/52666/info

2012-03-21 High-Tech Bridge webapps

Open Journal Systems (OJS) 2.3.6 – ‘rfiles.php’ Traversal Arbitrary File Manipulation

source: https://www.securityfocus.com/bid/52666/info

2012-03-21 High-Tech Bridge webapps

Minify 2.1.x – ‘g’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52672/info

2012-03-21 Ayoub Aboukir webapps

PeerFTP Server 4.01 – Remote Crash (PoC)

#!/usr/bin/python

2012-03-20 localh0t dos

Tiny Server 1.1.9 – HEAD Denial of Service

#!/usr/bin/python

2012-03-20 brock haun dos

Android FTPServer 1.9.0 – Remote Denial of Service

# Exploit Title: Android FTPServer 1.9.0 Remote DoS

2012-03-20 G13 dos

OneForum – ‘topic.php’ SQL Injection

#

2012-03-20 Red Security TEAM webapps

OneFileCMS – Failure to Restrict URL Access

# Exploit Title: OneFileCMS - Failure to Restrict URL Access

2012-03-20 Abhi M Balakrishnan webapps

Adobe Photoshop 12.1 – ‘.tiff’ Parsing Use-After-Free

#####################################################################################

2012-03-20 Francis Provencher dos

GNUBoard 4.34.20 – ‘download.php’ HTML Injection

source: https://www.securityfocus.com/bid/52622/info

2012-03-20 wh1ant webapps

WebGlimpse 2.14.1/2.18.8 – ‘webglimpse.cgi’ Remote Command Injection

source: https://www.securityfocus.com/bid/52627/info

2012-03-20 Kevin Perry webapps

Joomla! 2.5.0 < 2.5.1 - Blind SQL Injection

#!/usr/bin/perl

2012-03-19 A. Ramos webapps

Apache Tomcat – Account Scanner / ‘PUT’ Request Command Execution

ISOWAREZ RELEASE

2012-03-19 kingcope remote

Dell Webcam Software Bundled – ActiveX Remote Buffer Overflow

Dell Webcam Software Bundled ActiveX Control CrazyTalk4Native.dll

2012-03-19 rgod remote

LANDesk Lenovo ThinkManagement Suite 9.0.3 – Core Server Remote Code Execution

LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server AMTConfig.Business.dll

2012-03-19 rgod remote

LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server – Arbitrary File Deletion

LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server WSVulnerabilityCore.dll

2012-03-19 rgod remote

2X Client for RDP 10.1.1204 – ClientSystem Class ActiveX Control Download and Execute

2X Client for RDP 10.1.1204 ClientSystem Class ActiveX Control

2012-03-19 rgod remote

2X ApplicationServer 10.1 – TuxSystem Class ActiveX Control Remote File Overwrite

2X ApplicationServer 10.1 TuxSystem Class ActiveX Control TuxScripting.dll

2012-03-19 rgod remote

ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet – Directory Traversal

ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet Unauthenticated

2012-03-19 rgod webapps

TYPSoft FTP Server 1.1 – ‘APPE’ Remote Buffer Overflow

source: https://www.securityfocus.com/bid/52554/info

2012-03-19 brock haun dos

ClassifiedsGeek.com Vacation Packages – ‘listing_search’ SQL Injection

source: https://www.securityfocus.com/bid/52637/info

2012-03-19 r45c4l webapps

Pre Printing Press – ‘product_desc.php?pid’ SQL Injection

========================================================================================

2012-03-18 Easy Laster webapps

JavaBB 0.99 – ‘userId’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52545/info

2012-03-18 sonyy webapps

WebGlimpse 2.x – ‘wgarcmin.cgi’ Full Path Disclosure

source: https://www.securityfocus.com/bid/52646/info

2012-03-18 Websecurity webapps

ASP Classifieds – SQL Injection

# Exploit Title: ASP Classifieds Sql Injection

2012-03-17 r45c4l webapps

PRE PRINTING STUDIO – SQL Injection

# Exploit Title: PRE PRINTING STUDIO Sql Injection

2012-03-17 r45c4l webapps

TYPSoft FTP Server 1.1 – ‘APPE’ Remote Denial of Service

#!/usr/bin/python

2012-03-17 brock haun dos

Microsoft Terminal Services – Use-After-Free (MS12-020)

#######################################################################

2012-03-16 Luigi Auriemma dos

OneFileCMS 1.1.5 – Local File Inclusion

# Exploit Title: OneFileCMS v.1.1.5 Local File Inclusion Vulnerability

2012-03-16 mr.pr0n webapps

FlexCMS 3.2.1 – Persistent Cross-Site Scripting

#Persistent XSS in FLEXCMS 3.2.1

2012-03-16 storm webapps

FlexCMS 3.2.1 – Multiple Cross-Site Request Forgery Vulnerabilities

+--------------------------------------------------------------------------------------------------------------------...

2012-03-16 Ivano Binetti webapps

Tiny Server 1.1.5 – Arbitrary File Disclosure

#!/usr/bin/perl -w

2012-03-16 KaHPeSeSe remote

RM Downloader 3.1.3.3.2010.06.26 – ‘.m3u’ Local Buffer Overflow (Metasploit)

##

2012-03-16 KaHPeSeSe local

JPM Article Script 6 – ‘page2’ SQL Injection

source: https://www.securityfocus.com/bid/52528/info

2012-03-16 Vulnerability Research Laboratory webapps

Netmechanica NetDecision HTTP Server 4.5.1 – Remote Buffer Overflow (Metasploit)

##

2012-03-15 Metasploit remote

sockso 1.5 – Directory Traversal

#######################################################################

2012-03-15 Luigi Auriemma webapps

Asterisk – ‘ast_parse_digest()’ Stack Buffer Overflow (PoC)

===========================

2012-03-15 Russell Bryant dos

Citrix 11.6.1 – Licensing Administration Console Denial of Service

source: https://www.securityfocus.com/bid/52522/info

2012-03-15 Rune dos

ModX 2.2.0 – Multiple Vulnerabilities

# Exploit Title: Modx 2.2.0 LFI and Full Path Disclosure

2012-03-14 n0tch webapps

Simple Posting System – Multiple Vulnerabilities

# Exploit Title: Simple Posting System [Multple]

2012-03-14 n0tch webapps

Max Guestbook 1.0 – Multiple Vulnerabilities

# Exploit Title: Maxs Guestbook

2012-03-14 n0tch webapps

Sitecom WLM-2501 – Cross-Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------...

2012-03-14 Ivano Binetti webapps

Encaps PHP Gallery – SQL Injection

# Exploit Title: Encaps PHP Gallery SQL Injection

2012-03-14 Daniel Godoy webapps

asaanCart – Cross-Site Scripting / Local File Inclusion

______________________________________________________________________________________

2012-03-14 Number 7 webapps