Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 351

Endian Firewall 2.4 – ‘dansguardian.cgi?addrule’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52076/info

2012-02-27 Vulnerability Research Laboratory remote

Bontq – ‘user/’ URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/52183/info

2012-02-27 sonyy webapps

OSQA’s CMS – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/52184/info

2012-02-27 Ucha Gobejishvili webapps

ContaoCMS (aka TYPOlight) 2.11 – Cross-Site Request Forgery (Delete Admin / Delete Article)

+--------------------------------------------------------------------------------------------------------------------...

2012-02-26 Ivano Binetti webapps

MyJobList 0.1.3 – ‘eid’ SQL Injection

source: https://www.securityfocus.com/bid/52168/info

2012-02-26 Red Security TEAM webapps

Webglimpse 2.x – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52170/info

2012-02-26 MustLive webapps

HP Data Protector 6.1 – EXEC_CMD Remote Code Execution (Metasploit)

##

2012-02-25 Metasploit remote

cPassMan 1.82 – Remote Command Execution

Product. Collaborative Passwords Manager (cPassMan)

2012-02-25 ls webapps

webgrind 1.0 – ‘file’ Local File Inclusion

webgrind 1.0 (file param) Local File Inclusion Vulnerability

2012-02-25 LiquidWorm webapps

Tiny HTTP Server 1.1.9 – Remote Crash (PoC)

#!/usr/bin/python

2012-02-25 localh0t dos

YVS Image Gallery – SQL Injection

-=[+] Application: YVS Image Gallery

2012-02-25 CorryL webapps

libpurple 2.8.10 – OTR Information Disclosure

source: https://www.securityfocus.com/bid/52175/info

2012-02-25 Dimitris Glynos remote

Symantec Encryption Desktop 10 – Local Buffer Overflow / Local Privilege Escalation

source: https://www.securityfocus.com/bid/57835/info

2012-02-25 Nikita Tarakanov local

PHP Gift Registry 1.5.5 – SQL Injection

# Exploit Title: PHP Gift Registry 1.5.5 SQL Injection

2012-02-24 G13 webapps

Sun Java Web Start Plugin – Command Line Argument Injection (2012) (Metasploit)

##

2012-02-24 Metasploit remote

Trend Micro Control Manger 5.5 – ‘CmdProcessor.exe’ Remote Stack Buffer Overflow (Metasploit)

##

2012-02-23 Metasploit remote

Orbit Downloader – URL Unicode Conversion Overflow (Metasploit)

##

2012-02-23 Metasploit local

phpDenora 1.4.6 – Multiple SQL Injections

############################################################

2012-02-23 Patrick de Brouwer webapps

Snom IP Phone – Privilege Escalation

Sense of Security - Security Advisory - SOS-12-001

2012-02-23 Sense of Security webapps

The Uploader 2.0.4 (English/Italian) – Arbitrary File Upload / Remote Code Execution (Metasploit)

require 'msf/core'

2012-02-23 Danny Moules webapps

D-Link DCS – ‘security.cgi’ Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/52134/info

2012-02-23 Rigan Iimrigan remote

Mobile Mp3 Search Script 2.0 – ‘dl.php’ HTTP Response Splitting

source: https://www.securityfocus.com/bid/52136/info

2012-02-23 Corrado Liotta webapps

Sagem F@ST 2604 ADSL Router – Cross-Site Request Forgery

================================================================================

2012-02-22 KinG Of PiraTeS webapps

Brim < 2.0.0 - SQL Injection

BRIM < 2.0.0 SQL InjectionExploit information

2012-02-22 ifnull webapps

DAMN Hash Calculator 1.5.1 – Local Heap Overflow (PoC)

#!/usr/bin/python

2012-02-22 Julien Ahrens dos

LimeSurvey (PHPSurveyor 1.91+ stable) – Blind SQL Injection

# Exploit Title: LimeSurvey Blind SQL injection

2012-02-22 TorTukiTu webapps

D-Link DCS Series – Cross-Site Request Forgery (Change Admin Password)

Title: Dlink DCS series CSRF Change Admin Password

2012-02-22 rigan webapps

WebcamXP and webcam 7 – Directory Traversal

# Exploit Title: WebcamXP and Webcam7 Directory Traversal Vulnerability

2012-02-22 Silent_Dream webapps

D-Link DSL-2640B ADSL Router – Authentication Bypass

+--------------------------------------------------------------------------------------------------------------------...

2012-02-22 Ivano Binetti webapps

Unity 3D Web Player 3.2.0.61061 – Denial of Service

#######################################################################

2012-02-22 Luigi Auriemma dos

DFLabs PTK 1.0.5 – Steal Authentication Credentials

+--------------------------------------------------------------------------------------------------------------------...

2012-02-22 Ivano Binetti webapps

ContentLion Alpha 1.3 – ‘login.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52112/info

2012-02-22 Stefan Schurtz webapps

Dolibarr ERP/CRM 3.2 Alpha – Multiple Directory Traversal Vulnerabilities

source: https://www.securityfocus.com/bid/52113/info

2012-02-22 Benjamin Kunz Mejri webapps

Chyrp 2.1.1 – ‘ajax.php’ HTML Injection

source: https://www.securityfocus.com/bid/52115/info

2012-02-22 High-Tech Bridge SA webapps

Chyrp 2.1.2 – ‘/includes/error.php?body’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52117/info

2012-02-22 High-Tech Bridge SA webapps

Oxwall 1.1.1 – ‘plugin’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52125/info

2012-02-22 Ariko-Security webapps

Cisco Linksys WAG54GS – Cross-Site Request Forgery (Change Admin Password)

+--------------------------------------------------------------------------------------------------------------------...

2012-02-21 Ivano Binetti webapps

Fork CMS 3.2.5 – Multiple Vulnerabilities

+--------------------------------------------------------------------------------------------------------------------...

2012-02-21 Ivano Binetti webapps

Dolphin 7.0.x – ‘viewFriends.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52088/info

2012-02-21 Aung Khant webapps

Dolphin 7.0.x – ‘explanation.php?explain’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52088/info

2012-02-21 Aung Khant webapps

Xavi 7968 ADSL Router – Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/52098/info

2012-02-21 Busindre remote

Xavi 7968 ADSL Router – ‘/webconfig/lan/lan_config.html/local_lan_config?host_name_txtbox’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52098/info

2012-02-21 Busindre webapps

Xavi 7968 ADSL Router – ‘/webconfig/wan/confirm.html/confirm?pvcName’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52098/info

2012-02-21 Busindre remote

CPG Dragonfly CMS 9.3.3.0 – Multiple Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52100/info

2012-02-21 Ariko-Security webapps

Mercury MR804 Router – Multiple HTTP Header Fields Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/52106/info

2012-02-21 demonalex dos

D-Link DSL-2640B ADSL Router – Cross-Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------...

2012-02-20 Ivano Binetti webapps

Blade API Monitor – Unicode Bypass Serial Number Buffer Overflow

#!/usr/bin/python -w

2012-02-20 b33f local

DJ Studio Pro 5.1.6.5.2 – Local Overflow (SEH) (Metasploit)

##

2012-02-20 Death-Shadow-Dark local

Plume CMS 1.2.4 – Cross-Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------...

2012-02-20 Ivano Binetti webapps

VOXTRONIC Voxlog Professional 3.7.x – ‘get.php?v’ Arbitrary File Access

source: https://www.securityfocus.com/bid/52081/info

2012-02-20 J. Greil webapps