Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 354

Sysax Multi Server 5.52 – File Rename Buffer Overflow Remote Code Execution (Egghunter)

#!/usr/bin/python

2012-02-09 Craig Freyman remote

Apache MyFaces – ‘ln’ Information Disclosure

source: https://www.securityfocus.com/bid/51939/info

2012-02-09 Paul Nicolucci remote

IBM solidDB 6.5.0.8 – ‘SELECT’ Statement ‘WHERE’ Condition Denial of Service

source: https://www.securityfocus.com/bid/52111/info

2012-02-09 IBM dos

Gazelle CMS 1.0 – Update Statement SQL Injection

# Exploit Title: Ananta Gazelle CMS - Update Statement Sql injection

2012-02-08 hackme webapps

TORCS 1.3.2 – ‘.xml’ File Buffer Overflow /SafeSEH Evasion

# Author: Andres Gomez and David Mora (a.k.a Mighty-D) ... Pwn and beans!

2012-02-08 Andres Gomez & David Mora local

Cyberoam Central Console 2.00.2 – Remote File Inclusion

Title:

2012-02-08 Vulnerability-Lab webapps

D-Link ShareCenter Products – Multiple Remote Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/51918/info

2012-02-08 Roberto Paleari remote

Flyspray 0.9.9.6 – Cross-Site Request Forgery

#Exploit Title: Flyspray 0.9.9.6 CSRF Vulnerability

2012-02-07 Vaibhav Gupta webapps

TYPSoft FTP Server 1.10 – Multiple Denial of Service Vulnerabilities

#!/usr/bin/perl

2012-02-07 Balazs Makany dos

Simple Groupware 0.742 – ‘export’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51882/info

2012-02-07 Infoserve Security Team webapps

ManageEngine ADManager Plus 5.2 Build 5210 – ‘Operation’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51893/info

2012-02-07 LiquidWorm webapps

ManageEngine ADManager Plus 5.2 Build 5210 – ‘domainName’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51893/info

2012-02-07 LiquidWorm webapps

eFront 3.6.10 – ‘administrator.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51894/info

2012-02-07 Chokri B.A webapps

BASE 1.4.5 – ‘base_qry_main.php?t_view’ SQL Injection

# Exploit Title: BASE 1.4.5 SQL Injection Vulnerability

2012-02-06 a.kadir altan webapps

Tube Ace (Adult PHP Tube Script) – SQL Injection

# Exploit Title: Tube Ace(Adult PHP Tube Script) SQL Injection

2012-02-06 Daniel Godoy webapps

XRayCMS 1.1.1 – SQL Injection

# Exploit Title: XRayCMS 1.1.1 SQL Injection Vulnerability

2012-02-06 chap0 webapps

Edraw Diagram Component 5 – ActiveX Control ‘LicenseName()’ Method Buffer Overflow

source: https://www.securityfocus.com/bid/51866/info

2012-02-06 Senator of Pirates dos

Apache 2.2.15 mod_proxy – Reverse Proxy Security Bypass

source: https://www.securityfocus.com/bid/51869/info

2012-02-06 Tomas Hoger remote

Vespa 0.8.6 – ‘getid3.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/51878/info

2012-02-06 T0x!c webapps

PDF Viewer Component – ActiveX Denial of Service

Title : PDF Viewer Component ActiveX DoS

2012-02-05 Senator of Pirates dos

GAzie 5.20 – Cross-Site Request Forgery

========================================

2012-02-05 Giuseppe D'Inverno webapps

PHP 5.4.0RC6 (x64) – Denial of Service

2012-02-04 Stefan Esser dos

Edraw Diagram Component 5 – ActiveX Buffer Overflow (Denial of Service) (PoC)

Author : Senator of Pirates

2012-02-04 Senator of Pirates dos

torrent-stats – ‘httpd.c’ Denial of Service

#!/usr/bin/python

2012-02-03 otr dos

PHP 5.4SVN-2012-02-03 – htmlspecialchars/entities Buffer Overflow

From: cataphract

2012-02-03 cataphract dos

project-open 3.4.x – ‘account-closed.tcl’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51842/info

2012-02-03 Michail Poultsakis webapps

PHP-Fusion 7.2.4 – ‘weblink_id’ SQL Injection

source: https://www.securityfocus.com/bid/51865/info

2012-02-03 Am!r webapps

Sunway ForceControl – SNMP ‘NetDBServer.exe’ Opcode 0x57 (Metasploit)

##

2012-02-02 Metasploit remote

Icona SpA C6 Messenger – DownloaderActiveX Control Arbitrary File Download and Execute (Metasploit)

##

2012-02-02 Metasploit remote

Sphinix Mobile Web Server 3.1.2.47 – Multiple Persistent Cross-Site Scripting Vulnerabilities

##############################################################################

2012-02-02 SecPod Research webapps

Apache Struts – Multiple Persistent Cross-Site Scripting Vulnerabilities

##############################################################################

2012-02-02 SecPod Research webapps

OfficeSIP Server 3.1 – Denial of Service

##############################################################################

2012-02-02 SecPod Research dos

NetSarang Xlpd Printer Daemon 4 – Denial of Service

##############################################################################

2012-02-02 SecPod Research dos

osCommerce 3.0.2 – Persistent Cross-Site Scripting

Title:

2012-02-02 Vulnerability-Lab webapps

Achievo 1.4.3 – Multiple Web Vulnerabilities

Title:

2012-02-02 Vulnerability-Lab webapps

GForge 5.7.1 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51799/info

2012-02-02 sonyy webapps

Joomla! Component com_bnf – ‘seccion_id’ SQL Injection

source: https://www.securityfocus.com/bid/51802/info

2012-02-02 Daniel Godoy webapps

iknSupport ‘search’ Module – Cross-Site Scripting

source: https://www.securityfocus.com/bid/51803/info

2012-02-02 Red Security TEAM webapps

Joomla! Component Currency Converter 1.0.0 – ‘from’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51804/info

2012-02-02 BHG Security Center webapps

swDesk – Multiple Vulnerabilities

#

2012-02-01 Red Security TEAM webapps