Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 361

Apache – Denial of Service

#include

2011-12-09 Ramon de C Valle dos

SePortal 2.5 – SQL Injection (1)

############################################################################

2011-12-09 Don webapps

Free Opener – Local Denial of Service

#!/usr/bin/perl

2011-12-09 Iolo Morganwg dos

Docebo Lms 4.0.4 – ‘Messages’ Remote Code Execution

2011-12-09 mr_me webapps

CSF Firewall – Buffer Overflow (PoC)

############################################################################

2011-12-09 FoX HaCkEr dos

Pet Listing – ‘preview.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50996/info

2011-12-09 Mr.PaPaRoSSe webapps

SantriaCMS – SQL Injection

# I Think, I can, But i'm just loser

2011-12-08 Troy webapps

Joomla! Component com_qcontacts 1.0.6 – SQL Injection

############################################################################

2011-12-08 Don webapps

HomeSeer HS2 2.5.0.20 – Web Interface Log Viewer Page URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/50978/info

2011-12-08 Silent Dream remote

HP Application Lifestyle Management 11 – ‘GetInstalledPackages’ Local Privilege Escalation

source: https://www.securityfocus.com/bid/50982/info

2011-12-08 anonymous local

Family Connections CMS 2.7.1 – ‘less.php’ Remote Command Execution (Metasploit)

##

2011-12-07 Metasploit webapps

PHP City Portal Script Software – SQL Injection

############################################################################

2011-12-07 Don webapps

Traq 2.3 – Authentication Bypass / Remote Code Execution

2011-12-07 EgiX webapps

SourceBans 1.4.8 – SQL Injection / Local File Inclusion Injection

# Exploit Title: SourceBans

2011-12-07 Havok webapps

phpBB MyPage Plugin – SQL Injection

====================================================

2011-12-07 CrazyMouse webapps

SMF 2.0.1 – SQL Injection / Privilege Escalation

#!/usr/bin/python

2011-12-07 The:Paradox webapps

Apache Struts 2.0.9/2.1.8 – Session Tampering Security Bypass

source: https://www.securityfocus.com/bid/50940/info

2011-12-07 Hisato Killing remote

PowerDVD 11.0.0.2114 – Remote Denial of Service

source: https://www.securityfocus.com/bid/50953/info

2011-12-07 Luigi Auriemma dos

Axis M10 Series Network Cameras – Cross-Site Scripting

source: https://www.securityfocus.com/bid/50968/info

2011-12-07 Matt Metzger remote

Alstrasoft EPay Enterprise 4.0 – Blind SQL Injection

############################################################################

2011-12-06 Don webapps

WordPress Plugin Pretty Link 1.5.2 – ‘pretty-bar.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50921/info

2011-12-06 Am!r webapps

Simple Machines Forum (SMF) 1.1.15 – ‘fckeditor’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/50925/info

2011-12-06 HELLBOY webapps

Linux Kernel 2.6.35 – Network Namespace Remote Denial of Service

source: https://www.securityfocus.com/bid/50938/info

2011-12-06 Serge Hallyn dos

D-Link DNS-320 ShareCenter – Remote Reboot/Shutdown/Reset (Denial of Service)

#!/usr/bin/perl

2011-12-05 rigan dos

SopCast 3.4.7 – ‘sop://’ URI Handling Remote Stack Buffer Overflow (PoC)

#!/usr/bin/perl

2011-12-05 LiquidWorm dos

SopCast 3.4.7 – ‘Diagnose.exe’ Improper Permissions

SopCast 3.4.7 (Diagnose.exe) Improper Permissions

2011-12-05 LiquidWorm local

Meditate Web Content Editor ‘username_input’ – SQL Injection

Advisory: Meditate Web Content Editor 'username_input' SQL-Injection vulnerability

2011-12-05 Stefan Schurtz webapps

Serv-U FTP Server 11.1.0.3 – Denial of Service / Security Bypass

source: https://www.securityfocus.com/bid/50906/info

2011-12-05 Luigi Auriemma dos

Elxis CMS 2009 – ‘index.php?task’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50910/info

2011-12-05 Ewerson Guimaraes webapps

Elxis CMS 2009 – ‘administrator/index.php’ URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/50910/info

2011-12-05 Ewerson Guimaraes webapps

Family Connections CMS 2.5.0/2.7.1 – ‘less.php’ Remote Command Execution

2011-12-04 mr_me webapps

CCMPlayer 1.5 – ‘.m3u’ Stack Buffer Overflow (Metasploit)

##

2011-12-03 Metasploit local

NJStar Communicator MiniSmtp – Buffer Overflow (ASLR Bypass)

# Exploit Title: NJStart Communicator MiniSmtp Buffer Overflow [ASLR Bypass]

2011-12-03 Zune dos

Hillstone Software HS TFTP Server 1.3.2 – Denial of Service

##############################################################################

2011-12-02 SecPod Research dos

Ipswitch TFTP Server 1.0.0.24 – Directory Traversal

##############################################################################

2011-12-02 SecPod Research remote

RhinoSoft Serv-U FTPd Server < 4.2 - Remote Buffer Overflow (Metasploit)

##

2011-12-02 Metasploit remote

Joomla! Component com_jobprofile – SQL Injection

[~] Joomla Component Jobprofile (com_jobprofile) SQL Injection Vulnerability

2011-12-02 kaMtiEz webapps

WSN Classifieds 6.2.12/6.2.18 – Multiple Vulnerabilities

################################################################################################

2011-12-02 d3v1l webapps

HP Device Access Manager for HP ProtectTools 5.0/6.0 – Heap Memory Corruption

source: https://www.securityfocus.com/bid/50895/info

2011-12-02 High-Tech Bridge SA dos

FreeBSD – ‘ftpd / ProFTPd’ Remote Command Execution

I m better than TESO 7350 see attached.

2011-12-01 kingcope remote

Serv-U FTP Server – Jail Break

I m better than TESO!

2011-12-01 kingcope remote

AVID Media Composer Phonetic Indexer – Remote Stack Buffer Overflow (Metasploit)

#Name :AVID Media Composer Phonetic Indexer Remote Stack Buffer Overflow

2011-12-01 Nick Freeman remote

Final Draft 8 – Multiple Stack Buffer Overflows (Metasploit)

#Name : Final Draft 8 Multiple Stack Buffer Overflows

2011-12-01 Nick Freeman local

Muster Render Farm Management System – Arbitrary File Download

#Name: Muster Render Farm Management System Arbitrary File Download

2011-12-01 Nick Freeman webapps

StoryBoard Quick 6 – Local Stack Buffer Overflow (Metasploit)

#NameLStoryBoard Quick 6 Stack Buffer Overflow

2011-12-01 Nick Freeman local

CoDeSys SCADA 2.3 – Remote Buffer Overflow

See Also: http://aluigi.altervista.org/adv/codesys_1-adv.txt

2011-12-01 Celil Ünüver remote

AtMail 1.04 – ‘func’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50877/info

2011-12-01 DognÃ¦dis webapps

Hero 3.69 – ‘month’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50878/info

2011-12-01 Gjoko Krstic webapps

Java Applet Rhino Script Engine – Remote Code Execution (Metasploit)

##

2011-11-30 Metasploit remote

CTEK SkyRouter 4200/4300 – Command Execution (Metasploit)

##

2011-11-30 Metasploit remote