Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 357

OverlayFS inode Security Checks – ‘inode.c’ Local Security Bypass

#source: https://www.securityfocus.com/bid/51529/info

2012-01-17 Gary Poster local

PHPDomainRegister 0.4a-RC2-dev – Multiple Vulnerabilities

Title = PHPDomainRegister v0.4a-RC2-dev => [SQL Auth][SQL Inject][XSS]

2012-01-16 Or4nG.M4N webapps

PHP Membership Site Manager Script 2.1 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51416/info

2012-01-16 Atmon3r webapps

BoltWire 3.4.16 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51422/info

2012-01-16 Stefan Schurtz webapps

ATutor 2.0.3 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51423/info

2012-01-16 Stefan Schurtz webapps

Beehive Forum 101 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51424/info

2012-01-16 Stefan Schurtz webapps

phpVideoPro 0.8.x/0.9.7 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51428/info

2012-01-16 Stefan Schurtz webapps

Giveaway Manager – ‘members.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51431/info

2012-01-16 Am!r webapps

Annuaire PHP – ‘sites_inscription.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51434/info

2012-01-16 Atmon3r webapps

Cloupia End-to-end FlexPod Management – Directory Traversal

Advisory ID: KUSTODIAN-2011-011

2012-01-15 Chris Rock webapps

PHP Ringtone Website – ‘ringtones.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51418/info

2012-01-15 Atmon3r webapps

Microsoft Internet Explorer – JavaScript OnLoad Handler Remote Code Execution (MS05-054) (Metasploit)

##

2012-01-14 Metasploit remote

Adobe Reader – U3D Memory Corruption (Metasploit)

##

2012-01-14 Metasploit local

XAMPP – WebDAV PHP Upload (Metasploit)

##

2012-01-14 Metasploit remote

Linux BSD-derived Telnet Service Encryption Key ID – Remote Buffer Overflow (Metasploit)

##

2012-01-14 Metasploit remote

FreeBSD – Telnet Service Encryption Key ID Buffer Overflow (Metasploit)

##

2012-01-14 Metasploit remote

PHP 5.3.8 – Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----

2012-01-14 Maksymilian Arciemowicz dos

phpMyAdmin 3.3.x/3.4.x – Local File Inclusion via XML External Entity Injection (Metasploit)

# Exploit Title: poc-phpmyadmin-local-file-inclusion-via-xxe-injection

2012-01-14 Marco Batista webapps

Microsoft Windows – Assembly Execution (MS12-005)

# Exploit Title: MS12-005 : Microsoft Windows Assembly Execution Vulnerability

2012-01-14 Byoungyoung Lee local

WordPress Plugin Evarisk – ‘uploadPhotoApres.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/53994/info

2012-01-14 Sammy FORGIT webapps

Tine 2.0 – Maischa Multiple Cross-Site Scripting Vulnerabilities

Title:

2012-01-13 Vulnerability-Lab webapps

Pragyan CMS 2.6.1 – Arbitrary File Upload

==========================================

2012-01-13 Dr.KroOoZ webapps

MailEnable Webmail – Cross-Site Scripting

ME020567: MailEnable webmail cross-site scripting vulnerability (CWE-79)

2012-01-13 Sajjad Pourali webapps

Contus Job Portal – ‘Category’ SQL Injection

source: https://www.securityfocus.com/bid/51404/info

2012-01-13 Lazmania61 webapps

Advanced Image Hosting Script – SQL Injection

# Exploit Title: AIHS (Advanced Image Hosting Script) SQL Injection Vulnerability

2012-01-12 Robert Cooper webapps

WordPress Plugin wp-autoyoutube – Blind SQL Injection

######################################################

2012-01-12 longrifle0x webapps

WorldMail IMAPd 3.0 – Remote Overflow (SEH) (Egghunter)

#!/usr/bin/env python

2012-01-12 TheXero remote

WordPress Plugin Count Per Day – Multiple Vulnerabilities

#Exploit Title: Count-per-day Wordpress plugin Arbitrary file download and XSS

2012-01-12 6Scan webapps

Linux Kernel 2.6.39 < 3.2.2 (x86/x64) - 'Mempodipper' Local Privilege Escalation (2)

Exploit code is here: http://git.zx2c4.com/CVE-2012-0056/plain/mempodipper.c

2012-01-12 zx2c4 local

GreenBrowser 6.0.1002 – Search Bar Short Cut Button Double-Free Remote Memory Corruption

source: https://www.securityfocus.com/bid/51393/info

2012-01-12 NCNIPC remote

MailEnable 6.02 – ‘ForgottonPassword.aspx’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51401/info

2012-01-12 Sajjad Pourali webapps

Joomla! Component com_contushdvideoshare 1.3 – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/51411/info

2012-01-12 Lazmania61 webapps

ExpressView Browser Plugin 6.5.0.3330 – Multiple Integer Overflow / Remote Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/51367/info

2012-01-11 Luigi Auriemma remote

KnowledgeTree 3.x – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51373/info

2012-01-11 High-Tech Bridge SA webapps

Kayako SupportSuite 3.x – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/51377/info

2012-01-11 Yuri Goltsev webapps

Apache 2.2 – Scoreboard Invalid Free On Shutdown

Source: http://www.halfdog.net/Security/2011/ApacheScoreboardInvalidFreeOnShutdown/

2012-01-11 halfdog dos

RazorCMS 1.2 – Directory Traversal

# Exploit Title: razorCMS 1.2 Path Traversal

2012-01-10 chap0 webapps

TFTP Server 1.4 – ST ‘RRQ’ Remote Buffer Overflow

#!/usr/bin/python

2012-01-10 b33f remote

Pragyan CMS 3.0 – Remote File Disclosure

Title

2012-01-10 Or4nG.M4N webapps

w-CMS 2.01 – Multiple Vulnerabilities

# Exploit Title: W-Cms Multiple Vulnerability

2012-01-10 th3.g4m3_0v3r webapps

Blade API Monitor 3.6.9.2 – Unicode Stack Buffer Overflow

# Exploit Title: Blade API Monitor Unicode Stack Buffer Overflow (the serial number!!)

2012-01-10 FullMetalFouad local

WordPress Plugin Age Verification 0.4 – Open Redirect

# Exploit Title: Wordpress Age Verification plugin

2012-01-10 Gianluca Brindisi webapps

Novell Netware – XNFS caller_name xdrDecodeString Remote Code Execution

#####################################################################################

2012-01-10 Francis Provencher dos

Microsoft AntiXSS 3/4.0 Library Sanitization Module – Security Bypass

source: https://www.securityfocus.com/bid/51291/info

2012-01-10 Adi Cohen remote

SonicWALL AntiSpam & EMail 7.3.1 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/51337/info

2012-01-10 Benjamin Kunz Mejri remote

WordPress Plugin Age Verification 0.4 – ‘redirect_to’ Open Redirection

source: https://www.securityfocus.com/bid/51357/info

2012-01-10 Gianluca Brindisi webapps

PHP-Fusion 7.2.4 – ‘downloads.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51365/info

2012-01-10 Am!r webapps

Wireshark – Buffer Underflow / Denial of Service

source: https://www.securityfocus.com/bid/51710/info

2012-01-10 Laurent Butti dos

GPSMapEdit 1.1.73.2 – ‘.lst’ Local Denial of Service

#!/usr/bin/python

2012-01-09 Julien Ahrens dos

Paddelberg Topsite Script – Authentication Bypass

# Exploit Title: Paddelberg's topsite-script admin auth bypass.

2012-01-09 Christian Inci webapps