Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 359

Orchard 1.3.9 – ‘ReturnUrl’ Open Redirection

source: https://www.securityfocus.com/bid/51260/info

2012-01-04 Mesut Timur webapps

Limny 3.0.1 – ‘login.php’ Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/51261/info

2012-01-04 Gjoko Krstic webapps

UBBCentral UBB.Threads 7.5.6 – ‘Username’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51275/info

2012-01-04 sonyy webapps

StatIt 4 – ‘statistik.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51280/info

2012-01-04 sonyy webapps

PHP Hash Table Collision – Denial of Service (PoC)

#!/usr/bin/env python

2012-01-03 Christian Mehlmauer dos

OpenKM Document Management System 5.1.7 – Command Execution

########################################################################

2012-01-03 Cyrill Brunschwiler webapps

Tienda Virtual – ‘art_detalle.php’ SQL Injection

source: https://www.securityfocus.com/bid/51240/info

2012-01-03 Arturo Zamora webapps

WordPress Plugin Comment Rating 2.9.20 – ‘path’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51241/info

2012-01-03 The Evil Thinker webapps

WordPress Plugin WHOIS 1.4.2 3 – ‘domain’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51244/info

2012-01-03 Atmon3r webapps

WSN Links Script 2.3.4 – SQL Injection

############################################################################

2012-01-02 H4ckCity Security Team webapps

PHP-X-Links Script – SQL Injection

############################################################################

2012-01-02 H4ckCity Security Team webapps

MyPHPDating 1.0 – SQL Injection

MyPHPDating 1.0 SQL Injection Vulnerability \

2012-01-02 ITTIHACK webapps

FuseTalk Forums 3.2 – ‘windowed’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51227/info

2012-01-02 sonyy webapps

PHP 5.3.8 – Hashtables Denial of Service

# Exploit Title: CVE-2011-4885 PHP Hashtables Denial of Service

2012-01-01 infodox dos

Siena CMS 1.242 – ‘err’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51218/info

2012-01-01 Net.Edit0r webapps

WordPress Plugin WP Live.php 1.2.1 – ‘s’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51220/info

2012-01-01 H4ckCity Security Team webapps

lighttpd – Denial of Service (PoC)

29 of November 2011 was the date of public disclosure interesting

2011-12-31 pi3 dos

WordPress Plugin The Welcomizer 1.3.9.4 – ‘twiz-index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51037/info

2011-12-31 Am!r webapps

WordPress Plugin TheCartPress 1.6 – ‘OptionsPostsList.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51216/info

2011-12-31 6Scan webapps

Reaver – WiFi Protected Setup (WPS)

# Exploit Title: Reaver WiFi Protected Setup Exploit

2011-12-30 cheffner remote

Dede CMS – SQL Injection

# Dede Cms All Versions Sql Vulnerability Exploit

2011-12-30 CWH & Nafsh webapps

Akiva WebBoard 8.x – SQL Injection

# Exploit Title: Akiva Webboard 8.x SQL Injection + Plaintext Passwords

2011-12-30 Alexander Fuchs webapps

Neturf eCommerce Shopping Cart – ‘searchFor’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55667/info

2011-12-30 farbodmahini webapps

DIY-CMS blog mod – SQL Injection

# Exploit Title: DIY-CMS blog mod SQL Injection

2011-12-29 snup webapps

Winn Guestbook 2.4.8c – Persistent Cross-Site Scripting

# Exploit Title: Winn Guestbook v2.4.8c Stored XSS

2011-12-29 G13 webapps

Pligg CMS 1.1.2 – ‘status’ SQL Injection

source: https://www.securityfocus.com/bid/51273/info

2011-12-29 SiteWatch webapps

Pligg CMS 1.1.4 – ‘SERVER[php_self]’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51274/info

2011-12-29 SiteWatch webapps

Linux Kernel 3.1.8 – KVM Local Denial of Service

source: https://www.securityfocus.com/bid/51389/info

2011-12-29 Stephan Sattler dos

VideoLAN VLC Media Player 1.1.11 – libav ‘libavcodec_plugin.dll’ Denial of Service

print '\n\n########################################################'

2011-12-28 Mitchell Adair dos

Joomla! Component Module Simple File Upload 1.3 – Remote Code Execution

2011-12-28 gmda webapps

CoCSoft Stream Down 6.8.0 – Universal (Metasploit)

##

2011-12-27 Fady Mohammed Osman remote

WordPress Plugin Mailing List – Arbitrary File Download

#Exploit Title: Mailing List plugin for Wordpress Arbitrary file download

2011-12-26 6Scan webapps

Free Image Hosting Script – Arbitrary File Upload

============================================

2011-12-26 ySecurity webapps

Nagios Plugins check_ups – Local Buffer Overflow (PoC)

#################################################################

2011-12-26 Stefan Schurtz dos

TelnetD encrypt_keyid – Function Pointer Overwrite

#include

2011-12-26 NighterMan & BatchDrake remote

OpenEMR 4 – Multiple Vulnerabilities

OpenEMR 4 (Level @ Smash The Stack)

2011-12-25 Level webapps

freeSSHd – Denial of Service (PoC)

import sys, socket, binascii

2011-12-24 Level dos

MySQL 5.5.8 – Remote Denial of Service

import socket, sys

2011-12-24 Level dos

Putty 0.60 – Crash (PoC)

print "\n"

2011-12-24 Level dos

Microsoft Windows Media Player 11.0.5721.5262 – Remote Denial of Service

import socket, binascii

2011-12-24 Level dos

Microsoft Windows Explorer – Denial of Service

# Windows 2008 SP2 RC2 Explorer Go Byebye :P

2011-12-24 Level dos

Open Conference/Journal/Harvester Systems 2.3.x – Multiple Remote Code Execution Vulnerabilities

#!/usr/bin/python

2011-12-23 mr_me webapps

Tiki Wiki CMS Groupware 8.2 – ‘snarf_ajax.php’ Remote PHP Code Injection

-------------------------------------------------------------------------

2011-12-22 EgiX webapps

Infoproject Business Hero – Multiple Vulnerabilities

Infoproject Biznis Heroj (login.php) Authentication Bypass Vulnerability

2011-12-21 LiquidWorm webapps

Barracuda Control Center 620 – Multiple Web Vulnerabilities

Title:

2011-12-21 Vulnerability-Lab webapps

SpamTitan 5.08 – Multiple Vulnerabilities

Title:

2011-12-21 Vulnerability-Lab webapps

Plone and Zope – Remote Command Execution

# Exploit Title: Plone - Remote Command Execution

2011-12-21 Nick Miles webapps

epesi BIM 1.2 rev 8154 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51149/info

2011-12-21 High-Tech Bridge SA webapps

Barracuda Control Center 620 – Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/51156/info

2011-12-21 Vulnerability-Lab remote

Kaspersky Internet Security/Anti-Virus – ‘.cfg’ File Memory Corruption

source: https://www.securityfocus.com/bid/51161/info

2011-12-21 Vulnerability Research Laboratory local