Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 355

sudo 1.8.0 < 1.8.3p1 - Format String

Phenoelit Advisory

2012-01-31 joernchen dos

Adobe Flash Player – MP4 SequenceParameterSetNALUnit Remote Code Execution

# Abysssec Public Exploit

2012-01-31 Abysssec remote

Ez Album – Blind SQL Injection

#

2012-01-31 Red Security TEAM webapps

PragmaMX 1.2.10 – Persistent Cross-Site Scripting

# TITLE ... # Persistent XSS in PragmaMX 1.12.0 for logged in users #

2012-01-31 HauntIT webapps

EdrawSoft Office Viewer Component ActiveX 5.6 – ‘officeviewermme.ocx’ Buffer Overflow (PoC)

EdrawSoft Office Viewer Component ActiveX 5.6 (officeviewermme.ocx) BoF PoC

2012-01-31 LiquidWorm dos

Vastal I-Tech Agent Zone – ‘search.php’ Blind SQL Injection

Agent Zone Vastal I-Tech Blind SQL Injection Vulnerability

2012-01-31 Cagri Tepebasili webapps

Apache – httpOnly Cookie Disclosure

// Source: https://gist.github.com/1955a1c28324d4724b7b/7fe51f2a66c1d4a40a736540b3ad3fde02b7fb08

2012-01-31 pilate remote

Joomla! Component com_crhotels – ‘catid’ SQL Injection

source: https://www.securityfocus.com/bid/51728/info

2012-01-31 the_cyber_nuxbie webapps

4Images 1.7.10 – ‘/admin/categories.php?cat_parent_id’ SQL Injection

source: https://www.securityfocus.com/bid/51774/info

2012-01-31 RandomStorm webapps

4Images 1.7.10 – ‘/admin/categories.php?cat_parent_id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51774/info

2012-01-31 RandomStorm webapps

4Images 1.7.10 – ‘/admin/index.php?redirect’ Arbitrary Site Redirect

source: https://www.securityfocus.com/bid/51774/info

2012-01-31 RandomStorm webapps

HostBill App 2.3 – Remote Code Injection

=-=-=-=-=-=-=-=-=-=-=-=-=-=-{In The Name Of Allah, The Most Beneficent, The Most Merciful}-=-=-=-=-=-=-=-=-=-=-=-=-=-...

2012-01-30 Dr.DaShEr webapps

4Images 1.7.6-9 – Cross-Site Request Forgery / PHP Code Injection

#!/usr/bin/perl

2012-01-30 Or4nG.M4N webapps

Campaign Enterprise 11.0.421 – SQL Injection

########################################################################################

2012-01-30 Craig Freyman webapps

Ajax Upload – Arbitrary File Upload

# Exploit Title: Ajax Upload Arbitrary File Upload

2012-01-30 Daniel Godoy webapps

phux Download Manager – Blind SQL Injection

#

2012-01-30 Red Security TEAM webapps

Joomla! Component com_firmy – ‘Id’ SQL Injection

source: https://www.securityfocus.com/bid/51727/info

2012-01-30 the_cyber_nuxbie webapps

Joomla! Component com_propertylab – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/51729/info

2012-01-30 the_cyber_nuxbie webapps

Joomla! Component com_bbs – Multiple SQL Injections

source: https://www.securityfocus.com/bid/51730/info

2012-01-30 the_cyber_nuxbie webapps

Tracker Software pdfSaver ActiveX 3.60 – ‘pdfxctrl.dll’ Stack Buffer Overflow (SEH) (PoC)

Tracker Software pdfSaver ActiveX 3.60 (pdfxctrl.dll) Stack Buffer Overflow (SEH)

2012-01-29 LiquidWorm dos

Microsoft Windows – midiOutPlayNextPolyEvent Heap Overflow (MS12-004) (Metasploit)

##

2012-01-28 Metasploit remote

Joomla! Component com_visa – Local File Inclusion / SQL Injection

source: https://www.securityfocus.com/bid/51726/info

2012-01-28 the_cyber_nuxbie webapps

Joomla! Component com_cmotour – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/51779/info

2012-01-28 the_cyber_nuxbie webapps

MiniUPnP 1.4 – Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/57602/info

2012-01-28 Rapid7 dos

HP Diagnostics Server – ‘magentservice.exe’ Remote Overflow (Metasploit)

require 'msf/core'

2012-01-27 Metasploit remote

vBSEO 3.6.0 – ‘proc_deutf()’ Remote PHP Code Injection (Metasploit)

require 'msf/core'

2012-01-27 EgiX webapps

VR GPub 4.0 – Cross-Site Request Forgery

+-------------------------------------------------------------------------+

2012-01-26 Cyber-Crystal webapps

phpList 2.10.9 – Cross-Site Request Forgery / Cross-Site Scripting

+-------------------------------------------------------------------------+

2012-01-26 Cyber-Crystal webapps

Sysax Multi Server 5.50 – Create Folder Remote Code Execution Buffer Overflow (Metasploit)

##########################################################################################################

2012-01-26 Craig Freyman remote

Peel Shopping 2.8/ 2.9 – Cross-Site Scripting / SQL Injections

+-------------------------------------------------------------------------+

2012-01-26 Cyber-Crystal webapps

Joomla! Component com_motor – ‘cid’ SQL Injection

source: https://www.securityfocus.com/bid/51673/info

2012-01-26 the_cyber_nuxbie webapps

Joomla! Component com_products – Multiple SQL Injections

source: https://www.securityfocus.com/bid/51674/info

2012-01-26 the_cyber_nuxbie webapps

WordPress Plugin Slideshow Gallery 1.1.x – ‘border’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51678/info

2012-01-26 Bret Hawk webapps

xClick Cart 1.0.x – ‘shopping_url’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51699/info

2012-01-26 sonyy webapps

WordPress Core 3.3.1 – Multiple Vulnerabilities

Trustwave's SpiderLabs Security Advisory TWSL2012-002:

2012-01-25 Trustwave's SpiderLabs webapps

OSClass 2.3.3 – ‘index.php?sCategory’ SQL Injection

source: https://www.securityfocus.com/bid/51662/info

2012-01-25 High-Tech Bridge SA webapps

OSClass 2.3.3 – ‘index.php?getParam()’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51662/info

2012-01-25 High-Tech Bridge SA webapps

DClassifieds 0.1 final – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/51671/info

2012-01-25 High-Tech Bridge SA webapps

vBadvanced CMPS 3.2.2 – ‘vba_cmps_include_bottom.php’ Remote File Inclusion

source: https://www.securityfocus.com/bid/51672/info

2012-01-25 PacketiK webapps

stoneware webnetwork6 – Multiple Vulnerabilities

Stoneware WebNetwork6 Vulnerability Assessment

2012-01-24 Jacob Holcomb webapps

WordPress Plugin YouSayToo auto-publishing 1.0 – ‘submit’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51649/info

2012-01-24 H4ckCity Security Team webapps

glFusion 1.x – SQL Injection

source: https://www.securityfocus.com/bid/51650/info

2012-01-24 KedAns-Dz webapps

UltraPlayer 2.112 – ‘.avi’ File Denial of Service

source: https://www.securityfocus.com/bid/51652/info

2012-01-24 KedAns-Dz dos

Ultimate Locator – ‘radius’ SQL Injection

source: https://www.securityfocus.com/bid/51653/info

2012-01-24 Robert Cooper webapps

Joomla! Component JE Story Submit – ‘index.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/51657/info

2012-01-24 Robert Cooper webapps

Linux Kernel 2.6.39 < 3.2.2 (Gentoo / Ubuntu x86/x64) - 'Mempodipper' Local Privilege Escalation (1)

Exploit code is here: http://git.zx2c4.com/CVE-2012-0056/plain/mempodipper.c

2012-01-23 zx2c4 local

WordPress Plugin Kish Guest Posting 1.0 – Arbitrary File Upload

2012-01-23 EgiX webapps

SpamTitan Application 5.08x – SQL Injection

Title:

2012-01-23 Vulnerability-Lab webapps

Joomla! Component com_br – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/51613/info

2012-01-23 the_cyber_nuxbie webapps

Joomla! Component com_xball – ‘team_id’ SQL Injection

source: https://www.securityfocus.com/bid/51618/info

2012-01-23 CoBRa_21 webapps