Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 349

presto! pagemanager 9.01 – Multiple Vulnerabilities

#######################################################################

2012-03-14 Luigi Auriemma dos

EMC NetWorker 7.6 sp3 – Denial of Service

#######################################################################

2012-03-14 Luigi Auriemma dos

Epson EventManager 2.50 – Denial of Service

#######################################################################

2012-03-14 Luigi Auriemma dos

TVersity 1.9.7 – Arbitrary File Download

#######################################################################

2012-03-14 Luigi Auriemma webapps

Max’s Guestbook 1.0 – Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/52471/info

2012-03-14 n0tch webapps

Max’s PHP Photo Album 1.0 – ‘id’ Local File Inclusion

source: https://www.securityfocus.com/bid/52474/info

2012-03-14 n0tch webapps

F5 FirePass 7.0 – SQL Injection

source: https://www.securityfocus.com/bid/52653/info

2012-03-14 anonymous remote

VideoLAN VLC Media Player 1.1.11 – ‘.NSV’ File Denial of Service

// source: https://www.securityfocus.com/bid/64623/info

2012-03-14 Dan Fosco dos

VideoLAN VLC Media Player 1.1.11 – ‘.EAC3’ File Denial of Service

// source: https://www.securityfocus.com/bid/64626/info

2012-03-14 Dan Fosco dos

PBLang Bulletin Board System – Local File Inclusion

||\\ || || || |-\\ //-| ____ ________ __________

2012-03-13 Number 7 webapps

Cycade Gallery – SQL Injection

# Exploit Title: Cycade Gallery SQL Injection Exploit

2012-03-13 -DownFall webapps

4Images Image Gallery Management System – Cross-Site Request Forgery

########################################################################################################

2012-03-13 Dmar al3noOoz webapps

Omnistar Live – Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/52438/info

2012-03-13 sonyy webapps

LightDM 1.0.6 – Arbitrary File Deletion

source: https://www.securityfocus.com/bid/52452/info

2012-03-13 Ryan Lortie local

Zend Server 5.6.0 – Multiple Remote Script Insertion Vulnerabilities

Zend Server 5.6.0 Multiple Remote Script Insertion Vulnerabilities

2012-03-12 LiquidWorm webapps

Saman Portal – Local File Inclusion

===========================================================

2012-03-12 TMT webapps

GOM Media Player 2.1.37 – Buffer Overflow

Introduction:

2012-03-12 longrifle0x dos

XnView FlashPix Image Processing – Heap Overflow

Application: XnView FlashPix Image Processing Heap Overflow

2012-03-12 Francis Provencher dos

Network Instrument Observer – SNMP SetRequest Denial of Service

Application: Network Instrument Observer SNMP SetRequest Denial of Service Vulnerability

2012-03-12 Francis Provencher dos

Acal Calendar 2.2.6 – Cross-Site Request Forgery

# Exploit Title: [Acal calendar 2.2.6 CSRF Vulnerability]

2012-03-12 Number 7 webapps

Synology Photo Station 5 DSM 3.2 – ‘photo_one.php’ Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/52416/info

2012-03-12 Simon Ganiere webapps

TP-Link TL-WR740N 111130 – ‘ping_addr’ HTML Injection

source: https://www.securityfocus.com/bid/52424/info

2012-03-12 l20ot remote

Wikidforum 2.10 – Advanced Search Multiple Field SQL Injections

source: https://www.securityfocus.com/bid/52425/info

2012-03-12 Stefan Schurtz webapps

Wikidforum 2.10 – Search Field Cross-Site Scripting

source: https://www.securityfocus.com/bid/52425/info

2012-03-12 Stefan Schurtz webapps

Wikidforum 2.10 – Advanced Search Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52425/info

2012-03-12 Stefan Schurtz webapps

Litespeed Web Server – ‘gtitle’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55946/info

2012-03-12 K1P0D remote

Singapore 0.10.1 – ‘gallery’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52399/info

2012-03-11 T0xic webapps

EJBCA 4.0.7 – ‘issuer’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52400/info

2012-03-11 MustLive webapps

CreateVision CMS – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/52648/info

2012-03-11 Zwierzchowski Oskar webapps

PHP Address Book 6.2.12 – Multiple Vulnerabilities

Advisory: PHP Address Book 6.2.12 Multiple security vulnerabilities

2012-03-10 Stefan Schurtz webapps

PyPAM Python bindings for PAM – Double-Free Corruption

=== LSE Leading Security Experts - Security Advisory 2012-03-01 ===

2012-03-10 Markus Vervier dos

PHPMyVisites 2.4 – ‘PHPmv2/index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52377/info

2012-03-09 AkaStep webapps

Adobe Flash Player – ‘.mp4 cprt’ Remote Overflow (Metasploit)

##

2012-03-08 Metasploit remote

RazorCMS 1.2.1 STABLE – Arbitrary File Upload

# Exploit Title: RazorCMS

2012-03-08 i2sec_Hyo jun Oh webapps

RazorCMS 1.2.1 Stable – Cross-Site Request Forgery (Delete Web Pages)

+--------------------------------------------------------------------------------------------------------------------...

2012-03-08 Ivano Binetti webapps

LeKommerce – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/52347/info

2012-03-08 Mazt0r webapps

ToendaCMS 1.6.2 – ‘/setup/index.php?site’ Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/52350/info

2012-03-08 AkaStep webapps

Macro Toolworks 7.5 – Local Buffer Overflow

source: https://www.securityfocus.com/bid/52351/info

2012-03-08 Julien Ahrens local

Ilient SysAid 8.5.5 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/52356/info

2012-03-08 Julien Ahrens webapps

Barracuda CudaTel Communication Server 2.0.029.1 – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/52358/info

2012-03-08 Benjamin Kunz Mejri remote

SAP Business Objects InfoVew System – ‘listing.aspx?searchText’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52361/info

2012-03-08 vulns@dionach.com webapps

SAP Business Objects InfoView System – ‘/help/helpredir.aspx?guide’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52361/info

2012-03-08 vulns@dionach.com webapps

SAP Business Objects InfoView System – ‘/webi/webi_modify.aspx?id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52361/info

2012-03-08 vulns@dionach.com webapps

LotusCMS 3.0 – ‘eval()’ Remote Command Execution (Metasploit)

##

2012-03-07 Metasploit remote

Iciniti Store – SQL Injection

Sense of Security - Security Advisory - SOS-12-003

2012-03-07 Sense of Security webapps

HomeSeer HS2 and HomeSeer PRO – Multiple Vulnerabilities

# HomeSeer Home Automation Software Multiple Web Vulnerabilities (0day)

2012-03-07 Silent_Dream webapps

promise webpam 2.2.0.13 – Multiple Vulnerabilities

Promise WebPAM v2.2.0.13 Multiple Remote Vulnerabilities

2012-03-07 LiquidWorm webapps

NetDecision 4.6.1 – Multiple Directory Traversal Vulnerabilities

source: https://www.securityfocus.com/bid/52327/info

2012-03-07 Luigi Auriemma remote

Exponent CMS 2.0 – ‘src’ SQL Injection

source: https://www.securityfocus.com/bid/52328/info

2012-03-07 Rob Miller webapps

OSClass 2.3.x – Directory Traversal / Arbitrary File Upload

source: https://www.securityfocus.com/bid/52336/info

2012-03-07 Filippo Cavallarin webapps