Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 360

IrfanView FlashPix PlugIn – Double-Free

#####################################################################################

2011-12-20 Francis Provencher dos

IrfanView – ‘.tiff’ Image Processing Buffer Overflow

#####################################################################################

2011-12-20 Francis Provencher dos

TORCS 1.3.1 – acc Buffer Overflow

# Date: 20/12/2011

2011-12-20 Andrés Gómez local

Joomla! Component com_tsonymf – ‘idofitem’ SQL Injection

source: https://www.securityfocus.com/bid/51125/info

2011-12-20 CoBRa_21 webapps

Tiki Wiki CMS Groupware 8.1 – ‘show_errors’ HTML Injection

source: https://www.securityfocus.com/bid/51128/info

2011-12-20 Stefan Schurtz webapps

PHPShop CMS 3.4 – Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/51130/info

2011-12-20 High-Tech Bridge SA webapps

Joomla! Component com_caproductprices – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/51141/info

2011-12-20 CoBRa_21 webapps

Cyberoam UTM 10 – ‘tableid’ SQL Injection

source: https://www.securityfocus.com/bid/51143/info

2011-12-20 Benjamin Kunz Mejri webapps

appRain CMF 0.1.5 – Multiple Web Vulnerabilities

Title:

2011-12-19 Vulnerability-Lab webapps

DotA OpenStats 1.3.9 – SQL Injection

=============

2011-12-19 HvM17 webapps

Joomla! Component com_dshop – SQL Injection

################################################################################################

2011-12-19 CoBRa_21 webapps

Free Mp3 Player 1.0 – Local Denial of Service

#!/usr/bin/perl

2011-12-19 JaMbA dos

PHP Booking Calendar 10e – ‘page_info_message’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51119/info

2011-12-19 G13 webapps

Apple Safari – GdiDrawStream Blue Screen of Death

# Exploit Title: GdiDrawStream BSoD

2011-12-18 webDEViL dos

novell sentinel log manager 1.2.0.1 – Directory Traversal

# Exploit Title: Novell Sentinel Log Manager directory traversal

2011-12-18 Andrea Fabrizi webapps

Video Community Portal – ‘userID’ SQL Injection

source: https://www.securityfocus.com/bid/51108/info

2011-12-18 Lazmania61 webapps

PHP 5.3.8 – Remote Denial of Service

source: https://www.securityfocus.com/bid/52043/info

2011-12-18 anonymous dos

Flirt-Projekt 4.8 – ‘rub’ SQL Injection

source: https://www.securityfocus.com/bid/51106/info

2011-12-17 Lazmania61 webapps

Social Network Community 2 – ‘userID’ SQL Injection

source: https://www.securityfocus.com/bid/51107/info

2011-12-17 Lazmania61 webapps

Seotoaster – SQL Injection

#################################################################################

2011-12-16 Stefan Schurtz webapps

Capexweb 1.1 – SQL Injection

# Exploit Title: Capexweb Sql Vulnerable

2011-12-16 D1rt3 Dud3 webapps

mPDF 5.3 – File Disclosure

# Exploit Title: mPDF = 2);

2011-12-16 ZadYree webapps

Fork CMS 3.1.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51045/info

2011-12-16 Avram Marius webapps

Splunk – Remote Command Execution

from sec1httplib.requestbuilder import Requestobj

2011-12-15 Gary O'Leary-Steele remote

Owl Intranet Engine 1.00 – ‘userid’ Authentication Bypass

source: https://www.securityfocus.com/bid/51076/info

2011-12-15 RedTeam Pentesting GmbH webapps

Websense 7.6 – Triton Report Management Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/51085/info

2011-12-15 Ben Williams webapps

Websense 7.6 Triton – ‘ws_irpt.exe’ Remote Command Execution

source: https://www.securityfocus.com/bid/51086/info

2011-12-15 Ben Williams webapps

Websense 7.6 Products – ‘favorites.exe’ Authentication Bypass

source: https://www.securityfocus.com/bid/51087/info

2011-12-15 Ben Williams webapps

PmWiki 2.2.34 – ‘pagelist’ Remote PHP Code Injection (2) (Metasploit)

##

2011-12-14 Metasploit webapps

Pulse Pro 1.7.2 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51056/info

2011-12-14 Avram Marius webapps