Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 350

Fork CMS 3.2.x – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/52319/info

2012-03-06 Gjoko Krstic webapps

Symfony2 – Local File Disclosure

Sense of Security - Security Advisory - SOS-12-002

2012-03-05 Sense of Security webapps

lizard cart – ‘search.php’ SQL Injection

# Exploit Title: [lizard cart SQLi (search.php)]

2012-03-05 Number 7 webapps

Etano 1.20/1.22 – ‘search.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52295/info

2012-03-05 Aung Khant webapps

Etano 1.20/1.22 – ‘photo_search.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52295/info

2012-03-05 Aung Khant webapps

Etano 1.20/1.22 – ‘photo_view.php?return’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52295/info

2012-03-05 Aung Khant webapps

Open Realty 2.5.x – ‘select_users_template’ Local File Inclusion

source: https://www.securityfocus.com/bid/52296/info

2012-03-05 Aung Khant webapps

11in1 CMS 1.2.1 – ‘admin/comments?topicID’ SQL Injection

source: https://www.securityfocus.com/bid/52306/info

2012-03-05 Chokri B.A webapps

11in1 CMS 1.2.1 – ‘admin/tps?id’ SQL Injection

source: https://www.securityfocus.com/bid/52306/info

2012-03-05 Chokri B.A webapps

Joomla! 2.5.1 – ‘redirect.php’ Blind SQL Injection

source: https://www.securityfocus.com/bid/52312/info

2012-03-05 Colin Wong webapps

Sysax 5.53 – SSH ‘Username’ Remote Buffer Overflow (Metasploit)

##

2012-03-04 Metasploit remote

DZCP (deV!L`z Clanportal) Witze Addon 0.9 – SQL Injection

========================================================================================

2012-03-04 Easy Laster webapps

AneCMS 2e2c583 – Local File Inclusion

# Exploit Title: AneCMS v.2e2c583 LFI exploit

2012-03-04 I2sec-Jong Hwan Park webapps

LastGuru ASP Guestbook – ‘View.asp’ SQL Injection

source: https://www.securityfocus.com/bid/52293/info

2012-03-04 demonalex webapps

Passport PC To Host – ‘.zws’ File Memory Corruption

# Exploit Title: Passport PC To Host Malformed .zws file Memory Corruption

2012-03-03 Silent_Dream dos

Rivettracker 1.03 – Multiple SQL Injections

# Exploit Title: Multiple SQL injections in rivettracker

2012-03-03 Ali Raheem webapps

Timesheet Next Gen 1.5.2 – Multiple SQL Injections

# Exploit Title: Timesheet Next Gen 1.5.2 Multiple SQLi

2012-03-03 G13 webapps

FlashFXP 4.1.8.1701 – Remote Buffer Overflow

Title:

2012-03-03 Vulnerability-Lab remote

Endian UTM Firewall 2.4.x < 2.5.0 - Multiple Web Vulnerabilities

Title:

2012-03-03 Vulnerability-Lab webapps

Splash PRO 1.12.1 – ‘.avi’ File Denial of Service

source: https://www.securityfocus.com/bid/52273/info

2012-03-03 Senator of Pirates dos

EasyFTP Server 1.7.0.11 – ‘APPE’ Remote Buffer Overflow

#!/usr/bin/env python

2012-03-03 Swappage remote

DJ Studio Pro 5.1 – ‘.pls’ Local Stack Buffer Overflow (Metasploit)

##

2012-03-02 Metasploit local

VideoLAN VLC Media Player 0.9.5 – RealText Subtitle Overflow (Metasploit)

##

2012-03-02 Metasploit local

phxEventManager 2.0 Beta 5 – ‘search.php’ search_terms SQL Injection

# Exploit Title: phxEventManager 2.0 beta 5 search.php search_terms SQL

2012-03-02 skysbsb webapps

Drupal 7.12 – Multiple Vulnerabilities

+--------------------------------------------------------------------------------------------------------------------...

2012-03-02 Ivano Binetti webapps

starCMS – ‘q’ URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/52262/info

2012-03-02 Am!r webapps

Novell Groupwise – Address Book Remote Code Execution

#####################################################################################

2012-03-01 Francis Provencher dos

ASUS Net4Switch – ‘ipswcom.dll’ ActiveX Stack Buffer Overflow (Metasploit)

##

2012-02-29 Metasploit remote

IBM Personal Communications I-Series Access Workstation 5.9 – Profile (Metasploit)

##

2012-02-29 Metasploit remote

Yealink VOIP Phone – Persistent Cross-Site Scripting

==============================================================

2012-02-29 Narendra Shinde webapps

Netmechanica NetDecision HTTP Server – Denial of Service

##############################################################################

2012-02-29 SecPod Research dos

Netmechanica NetDecision Traffic Grapher Server – Information Disclosure

##############################################################################

2012-02-29 SecPod Research remote

Netmechanica NetDecision Dashboard Server – Information Disclosure

##############################################################################

2012-02-29 SecPod Research remote

ImgPals Photo Host 1.0 – Admin Account Disactivation

-=[--------------------ADVISORY-------------------]=-

2012-02-29 CorryL webapps

Wolf CMS 0.7.5 – Multiple Vulnerabilities

Title:

2012-02-29 longrifle0x webapps

GNOME NetworkManager 0.x – Local Arbitrary File Access

source: https://www.securityfocus.com/bid/52206/info

2012-02-29 Ludwig local

Dotclear 2.4.1.2 – ‘/admin/auth.php?login_data’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52221/info

2012-02-29 High-Tech Bridge SA webapps

Dotclear 2.4.1.2 – ‘/admin/blogs.php?nb’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52221/info

2012-02-29 High-Tech Bridge SA webapps

Dotclear 2.4.1.2 – ‘/admin/comments.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52221/info

2012-02-29 High-Tech Bridge SA webapps

Dotclear 2.4.1.2 – ‘/admin/plugin.php?page’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52221/info

2012-02-29 High-Tech Bridge SA webapps

Traidnt Topics Viewer 2.0 – ‘main.php’ Cross-Site Request Forgery

# source: https://www.securityfocus.com/bid/52224/info

2012-02-29 Green Hornet webapps

WebfolioCMS 1.1.4 – Cross-Site Request Forgery (Add Admin/Modify Pages)

+--------------------------------------------------------------------------------------------------------------------...

2012-02-28 Ivano Binetti webapps

Fork CMS 3.x – ‘/private/en/locale/index?name’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52236/info

2012-02-28 anonymous webapps

Fork CMS 3.x – ‘/backend/modules/error/actions/index.php?parse()’ Multiple Error Display Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52236/info

2012-02-28 anonymous webapps

Mozilla Firefox 4.0.1 – ‘Array.reduceRight()’ Remote Overflow

[crayon-6ab889dbb356a209029769/]

2012-02-27 pa_kt remote

Socusoft Photo 2 Video 8.05 – Local Buffer Overflow

Title:

2012-02-27 Vulnerability-Lab local

Sysax Multi Server 5.53 – SFTP (Authenticated) (SEH)

#!/usr/bin/python

2012-02-27 Craig Freyman remote

Sysax 5.53 – SSH ‘Username’ Remote Buffer Overflow Remote Code Execution (Egghunter)

#!/usr/bin/python

2012-02-27 Craig Freyman remote

Endian Firewall 2.4 – ‘openvpn_users.cgi?PATH_INFO’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52076/info

2012-02-27 Vulnerability Research Laboratory remote

Endian Firewall 2.4 – ‘dnat.cgi?createrule’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52076/info

2012-02-27 Vulnerability Research Laboratory remote