Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 356

WordPress Plugin AllWebMenus < 1.1.9 Menu Plugin - Arbitrary File Upload

#Exploit Title: AllWebMenus WordPress Menu Plugin Arbitrary file upload

2012-01-22 6Scan webapps

MiniCMS 1.0/2.0 – PHP Code Injection

########################################################################

2012-01-22 Or4nG.M4N webapps

Savant Web Server 3.1 – Denial of-Service (PoC)

#!/usr/bin/python

2012-01-22 DDD004 dos

Savant Web Server 3.1 – Remote Buffer Overflow (Egghunter)

#!/usr/bin/python

2012-01-21 red-dragon remote

PHP iReport 1.0 – Remote Html Code Injection

#!/usr/bin/perl

2012-01-21 Or4nG.M4N webapps

Nova CMS – Directory Traversal

#

2012-01-21 Red Security TEAM webapps

iSupport 1.x – Cross-Site Request Forgery / HTML Code Injection (Add Admin)

#!/usr/bin/perl

2012-01-21 Or4nG.M4N webapps

ARYADAD – Multiple Vulnerabilities

#

2012-01-21 Red Security TEAM webapps

Savant Web Server 3.1 – Remote Buffer Overflow (4)

source: https://www.securityfocus.com/bid/51607/info

2012-01-21 red-dragon remote

Acidcat ASP CMS 3.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51608/info

2012-01-21 Avram Marius webapps

Tribiq CMS – ‘index.php’ SQL Injection

source: https://www.securityfocus.com/bid/51614/info

2012-01-21 Skote Vahshat webapps

Joomla! Component Full – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/51616/info

2012-01-21 the_cyber_nuxbie webapps

Joomla! Component Vik Real Estate 1.0 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/51617/info

2012-01-21 the_cyber_nuxbie webapps

Joomla! Component com_boss – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/51619/info

2012-01-21 the_cyber_nuxbie webapps

Joomla! Component com_car – Multiple SQL Injections

source: https://www.securityfocus.com/bid/51620/info

2012-01-21 the_cyber_nuxbie webapps

Joomla! Component com_some – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/51621/info

2012-01-21 the_cyber_nuxbie webapps

Joomla! Component com_bulkenquery – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/51622/info

2012-01-21 the_cyber_nuxbie webapps

Joomla! Component com_kp – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/51623/info

2012-01-21 the_cyber_nuxbie webapps

Raven 1.0 – ‘connector.asp’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/51631/info

2012-01-21 HELLBOY webapps

Lead Capture – ‘login.php’ Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/51785/info

2012-01-21 HashoR webapps

HP OpenView Network Node Manager – ‘ov.dll’ _OVBuildPath Buffer Overflow (Metasploit)

##

2012-01-20 Metasploit remote

Gitorious – Arbitrary Command Execution (Metasploit)

##

2012-01-20 Metasploit remote

ICTimeAttendance – Authentication Bypass

) ) ) ( ( ( ( ( ) )

2012-01-20 v3n0m webapps

EasyPage – SQL Injection

#

2012-01-20 Red Security TEAM webapps

WhatsApp – Remote Change Status

#!/bin/bash

2012-01-20 emgent webapps

Avaya WinPDM UniteHostRouter 3.8.2 – Remote Command Execution

# Abysssec Public Exploit

2012-01-20 Abysssec remote

VideoLAN VLC Media Player 1.2.0 – ‘libtaglib_pluggin.dll’ Denial of Service

import binascii

2012-01-20 Mitchell Adair dos

Snitz Forums 2000 – ‘TOPIC_ID’ SQL Injection

source: https://www.securityfocus.com/bid/51596/info

2012-01-20 snup webapps

Syneto Unified Threat Management 1.3.3/1.4.2 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/51597/info

2012-01-20 Alexander Fuchs webapps

Drupal Module CKEditor 3.0 < 3.6.2 - Persistent EventHandler Cross-Site Scripting

# Exploit Title: Drupal CKEditor 3.0 - 3.6.2 - Persistent EventHandler XSS

2012-01-19 MaXe webapps

WordPress Plugin ucan post 1.0.09 – Persistent Cross-Site Scripting

# Exploit Title: Wordpress uCan Post plugin

2012-01-19 Gianluca Brindisi webapps

appRain CMF 0.1.5 – ‘Uploadify.php’ Unrestricted Arbitrary File Upload

2012-01-19 EgiX webapps

PostNuke pnAddressbook Module – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/51566/info

2012-01-19 Robert Cooper webapps

Vastal EzineShop – ‘view_mags.php’ SQL Injection

source: https://www.securityfocus.com/bid/51571/info

2012-01-19 Lazmania61 webapps

HP Easy Printer Care – XMLCacheMgr Class ActiveX Control Remote Code Execution (Metasploit)

##

2012-01-18 Metasploit remote

Sysax Multi Server 5.50 – Create Folder Buffer Overflow

#!/usr/bin/python

2012-01-18 Craig Freyman remote

pGB 2.12 – ‘kommentar.php’ SQL Injection

# Exploit Title: pGB 2.12 SQL Injection Vulnerability

2012-01-18 3spi0n webapps

PHPBridges Blog System – ‘members.php’ SQL Injection

# Exploit Title: PhpBridges Blog System SQL Injection Vulnerability

2012-01-18 3spi0n webapps

DZCP (deV!L`z Clanportal) Gamebase Addon – SQL Injection

========================================================================================

2012-01-18 Easy Laster webapps

DZCP (deV!L`z Clanportal) 1.5.5 Moviebase Addon – Blind SQL Injection

========================================================================================

2012-01-18 Easy Laster webapps

Toner Cart – ‘show_series_ink.php’ SQL Injection

source: https://www.securityfocus.com/bid/51530/info

2012-01-18 Lazmania61 webapps

MMORPG Zone – ‘view_news.php’ SQL Injection

source: https://www.securityfocus.com/bid/51532/info

2012-01-18 Lazmania61 webapps

Freelance Zone – ‘show_code.php’ SQL Injection

source: https://www.securityfocus.com/bid/51533/info

2012-01-18 Lazmania61 webapps

OneOrZero AIMS – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51549/info

2012-01-18 High-Tech Bridge SA webapps

BS.Player 2.57 – Local Buffer Overflow (SEH Unicode) (Metasploit)

##

2012-01-17 Metasploit local

McAfee SaaS MyCioScan ShowReport – Remote Command Execution (Metasploit)

##

2012-01-17 Metasploit remote

Mozilla Firefox 3.6.16 (OSX) – mChannel Use-After-Free (Metasploit) (2)

##

2012-01-17 Metasploit remote

Linux Kernel 2.6.36 IGMP – Remote Denial of Service

#include

2012-01-17 kingcope dos

Joomla! Component com_discussions – SQL Injection

#

2012-01-17 Red Security TEAM webapps

Rockwell Automation FactoryTalk Activation Server – Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/51444/info

2012-01-17 Luigi Auriemma dos