Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 358

Clipbucket 2.6 – Multiple Vulnerabilities

# Exploit : Multiple Vulnerability on ClipBucket 2.6

2012-01-09 YaDoY666 webapps

SAPID 1.2.3 Stable – Remote File Inclusion

# Exploit Title: SAPID Stable (RFI)

2012-01-09 Opa Yong webapps

Enigma2 Webinterface 1.5.x/1.6.x/1.7.x (Linux) – Remote File Disclosure

#!/usr/bin/perl

2012-01-09 Todor Donev webapps

Clipbucket 2.6 – ‘channels.php?cat’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51321/info

2012-01-09 YaDoY666 webapps

Clipbucket 2.6 – ‘collections.php?cat’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51321/info

2012-01-09 YaDoY666 webapps

Clipbucket 2.6 – ‘groups.php?cat’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51321/info

2012-01-09 YaDoY666 webapps

Clipbucket 2.6 – ‘search_result.php?query’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51321/info

2012-01-09 YaDoY666 webapps

Clipbucket 2.6 – ‘videos.php?cat’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51321/info

2012-01-09 YaDoY666 webapps

Clipbucket 2.6 – ‘view_collection.php?type’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51321/info

2012-01-09 YaDoY666 webapps

Clipbucket 2.6 – ‘view_item.php?type’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51321/info

2012-01-09 YaDoY666 webapps

Clipbucket 2.6 – ‘videos.php?time’ SQL Injection

source: https://www.securityfocus.com/bid/51321/info

2012-01-09 YaDoY666 webapps

Clipbucket 2.6 – ‘channels.php?time’ SQL Injection

source: https://www.securityfocus.com/bid/51321/info

2012-01-09 YaDoY666 webapps

Marinet CMS – ‘room2.php?roomid’ SQL Injection

source: https://www.securityfocus.com/bid/51336/info

2012-01-09 H4ckCity Security Team webapps

Marinet CMS – ‘galleryphoto.php?id’ SQL Injection

source: https://www.securityfocus.com/bid/51336/info

2012-01-09 H4ckCity Security Team webapps

Marinet CMS – ‘gallery.php?id’ SQL Injection

source: https://www.securityfocus.com/bid/51336/info

2012-01-09 H4ckCity Security Team webapps

Gregarius 0.6.1 – Multiple SQL Injections / Cross-Site Scripting

source: https://www.securityfocus.com/bid/51338/info

2012-01-09 sonyy webapps

Advanced File Management 1.4 – ‘users.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51339/info

2012-01-09 Am!r webapps

Microsoft Office 2003 Home/Pro – Code Execution (MS10-087)

#!/usr/bin/python

2012-01-08 b33f & g11tch local

MangosWeb – SQL Injection

EXPLOIT TITLE: MangosWeb SQL Vulnerability

2012-01-08 Hood3dRob1n webapps

AirTies-4450 – Unauthorized Remote Reboot (Denial of Service)

#!/usr/bin/perl

2012-01-08 rigan dos

M-Player 0.4 – Local Denial of Service

#!/usr/bin/perl

2012-01-08 JaMbA dos

phpMyDirectory.com 1.3.3 – SQL Injection

# Exploit Title: phpMyDirectory.com (v. 1.3.3) SQL Injection

2012-01-08 Serseri webapps

DIGIT CMS 1.0.7 – Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/51316/info

2012-01-07 BHG Security Center webapps

Atar2b CMS 4.0.1 – ‘gallery_e.php?id’ SQL Injection

source: https://www.securityfocus.com/bid/51317/info

2012-01-07 BHG Security Center webapps

Atar2b CMS 4.0.1 – ‘pageH.php?id’ SQL Injection

source: https://www.securityfocus.com/bid/51317/info

2012-01-07 BHG Security Center webapps

Atar2b CMS 4.0.1 – ‘pageE.php?id’ SQL Injection

source: https://www.securityfocus.com/bid/51317/info

2012-01-07 BHG Security Center webapps

TinyWebGallery 1.8.3 – Remote Command Execution

[»] TinyWebGallery 1.8.3 Remote Command Execution

2012-01-06 Expl0!Ts webapps

Novell Netware – XNFS.NLM NFS Rename Remote Code Execution

#####################################################################################

2012-01-06 Francis Provencher dos

Novell Netware – XNFS.NLM STAT Notify Remote Code Execution

#####################################################################################

2012-01-06 Francis Provencher dos

Apache Struts 2 < 2.3.1 - Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20120104-0 >

2012-01-06 SEC Consult webapps

WordPress Plugin Pay with Tweet 1.1 – Multiple Vulnerabilities

# Exploit Title: Wordpress Pay With Tweet plugin [XSS]

2012-01-06 Gianluca Brindisi webapps

eFront 3.6.10 – ‘download’ Directory Traversal

source: https://www.securityfocus.com/bid/51302/info

2012-01-06 Chokri B.A webapps

IpTools 0.1.4 – Tiny TCP/IP servers Directory Traversal

source: https://www.securityfocus.com/bid/51311/info

2012-01-06 demonalex remote

IPtools 0.1.4 – Remote Buffer Overflow

source: https://www.securityfocus.com/bid/51312/info

2012-01-06 demonalex remote

SenseSites CommonSense CMS – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/55893/info

2012-01-06 H4ckCity Security Team webapps

SenseSites CommonSense CMS – ‘special.php?id’ SQL Injection

source: https://www.securityfocus.com/bid/55893/info

2012-01-06 H4ckCity Security Team webapps

SenseSites CommonSense CMS – ‘article.php?id’ SQL Injection

source: https://www.securityfocus.com/bid/55893/info

2012-01-06 H4ckCity Security Team webapps

Yaws-Wiki 1.88 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/51276/info

2012-01-05 SiteWatch webapps

HServer 0.1.1 – Directory Traversal

source: https://www.securityfocus.com/bid/51286/info

2012-01-05 demonalex remote

VertrigoServ 2.25 – ‘extensions.php’ Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/51293/info

2012-01-05 Stefan Schurtz webapps

SQLiteManager 1.2.4 – ‘main.php?dbsel’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51294/info

2012-01-05 Stefan Schurtz webapps

SQLiteManager 1.2.4 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51294/info

2012-01-05 Stefan Schurtz webapps

Apache APR – Hash Collision Denial of Service

source: https://www.securityfocus.com/bid/51917/info

2012-01-05 Moritz Muehlenhoff dos

Typo3 4.5 < 4.7 - Remote Code Execution / Local File Inclusion / Remote File Inclusion

# Exploit Title: Typo3 v4.5-4.7 - Remote Code Execution (RFI/LFI)

2012-01-04 MaXe webapps

VideoLAN VLC Media Player 1.1.11 – ‘.amr’ Denial of Service (PoC)

#!/usr/bin/perl

2012-01-04 Fabi@habsec dos

Posse Softball Director CMS – SQL Injection

############################################################################

2012-01-04 H4ckCity Security Team webapps

Netcut 2.0 – Denial of Service

#!/usr/bin/env python

2012-01-04 MaYaSeVeN dos

Posse Softball Director CMS – ‘team.php’ Blind SQL Injection

.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-=--=-=--=-.

2012-01-04 Easy Laster webapps

TextPattern 4.4.1 – ‘ddb’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51254/info

2012-01-04 Jonathan Claudius webapps

GraphicsClone Script – ‘term’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51258/info

2012-01-04 Mr.PaPaRoSSe webapps