Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 362

Bugbear FlatOut 2005 – ‘.bed’ File Buffer Overflow

#Exploit Title: FlatOut Malformed .bed file Buffer Overflow

2011-11-30 Silent_Dream dos

GOM Player 2.1.33.5071 – ‘.asx’ File Unicode Stack Buffer Overflow

# Exploit Title: GOM Player Crafted ASX File Unicode Stack Buffer Overflow and Arbitrary Code Execution.

2011-11-30 Debasish Mandal local

Microsoft Windows XP/2003 – ‘afd.sys’ Local Privilege Escalation (MS11-080)

################################################################################

2011-11-30 ryujin local

WikkaWiki 1.3.2 – Multiple Vulnerabilities

----------------------------------------------------

2011-11-30 EgiX webapps

CCMPlayer 1.5 – ‘.m3u’ Stack Buffer Overflow (SEH) (Metasploit)

# Exploit: CCMPlayer 1.5 Stack based Buffer Overflow SEH Exploit (.m3u)

2011-11-30 Rh0 local

IBM Lotus Domino Server Controller – Authentication Bypass

# Exploit Title: IBM Lotus Domino Controller auth. bypass

2011-11-30 Alexey Sintsov remote

CoDeSys 3.4 – POST Null Pointer Content-Length Parsing Remote Denial of Service

source: https://www.securityfocus.com/bid/50854/info

2011-11-30 Luigi Auriemma dos

CoDeSys 3.4 – Null Pointer Invalid HTTP Request Parsing Remote Denial of Service

source: https://www.securityfocus.com/bid/50854/info

2011-11-30 Luigi Auriemma dos

OrangeHRM 2.6.11 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50857/info

2011-11-30 High-Tech Bridge SA webapps

OrangeHRM 2.6.11 – ‘lib/controllers/CentralController.php’ URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/50857/info

2011-11-30 High-Tech Bridge SA webapps

OrangeHRM 2.6.11 – ‘/lib/controllers/CentralController.php?id’ SQL Injection

source: https://www.securityfocus.com/bid/50857/info

2011-11-30 High-Tech Bridge SA webapps

WordPress Plugin 1-jquery-photo-gallery-Slideshow-flash 1.01 – Cross-Site Scripting

source: https://www.securityfocus.com/bid/50860/info

2011-11-30 Am!r webapps

WordPress Plugin flash-album-gallery – ‘facebook.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50861/info

2011-11-30 Am!r webapps

SugarCRM Community Edition 6.3.0RC1 – ‘index.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/50870/info

2011-11-30 High-Tech Bridge SA webapps

Virtual Vertex Muster 6.1.6 – Web Interface Directory Traversal

source: https://www.securityfocus.com/bid/50841/info

2011-11-29 Nick Freeman webapps

Oxide WebServer – Directory Traversal

source: https://www.securityfocus.com/bid/50845/info

2011-11-29 demonalex remote

Google Android – ‘content://’ URI Multiple Information Disclosure Vulnerabilities

2011-11-28 Thomas Cannon webapps

siemens automation license manager 500.0.122.1 – Multiple Vulnerabilities

#######################################################################

2011-11-28 Luigi Auriemma dos

Siemens SIMATIC WinCC Flexible (Runtime) – Multiple Vulnerabilities

#######################################################################

2011-11-28 Luigi Auriemma dos

JQuery-Real-Person plugin – Bypass Captcha

# Exploit Title: Bypass the JQuery-Real-Person captcha plugin

2011-11-28 Alberto_García_Illera webapps

WordPress Plugin Skysa App Bar – ‘idnews’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50824/info

2011-11-28 Amir webapps

Manx 1.0.1 – ‘/admin/tiny_mce/plugins/ajaxfilemanager/ajax_get_file_listing.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50839/info

2011-11-28 LiquidWorm webapps

Manx 1.0.1 – ‘/admin/tiny_mce/plugins/ajaxfilemanager_OLD/ajax_get_file_listing.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50839/info

2011-11-28 LiquidWorm webapps

Manx 1.0.1 – ‘/admin/admin_blocks.php?Filename’ Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/50839/info

2011-11-28 LiquidWorm webapps

Manx 1.0.1 – ‘/admin/admin_pages.php?Filename’ Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/50839/info

2011-11-28 LiquidWorm webapps

eSyndiCat Pro 2.3.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50822/info

2011-11-26 d3v1l webapps

PHP video script – SQL Injection

######################################################

2011-11-25 longrifle0x webapps

XChat 2.8.9 – Heap Overflow Denial of Service

#!/usr/bin/python

2011-11-25 Jane Doe dos

Titan FTP Server 8.40 – ‘APPE’ Remote Denial of Service

source: https://www.securityfocus.com/bid/50819/info

2011-11-25 Houssam Sahli dos

Log1 CMS 2.0 – ‘ajax_create_folder.php’ Remote Code Execution

2011-11-24 Adel SBM webapps

LibLime Koha 4.2 – Local File Inclusion

# Exploit Title: [Koha Opac Local File Inclusion]

2011-11-24 Akin Tosunlar webapps

Zabbix 1.8.4 – ‘popup.php’ SQL Injection

# Exploit Title: Zabbix

2011-11-24 Marcio Almeida webapps

AdaptCMS 2.0 – SQL Injection

source: https://www.securityfocus.com/bid/50795/info

2011-11-24 X-Cisadane webapps

Balitbang CMS 3.3 – ‘index.php?hal’ SQL Injection

source: https://www.securityfocus.com/bid/50797/info

2011-11-24 X-Cisadane webapps

Balitbang CMS 3.3 – ‘alumni.php?hal’ SQL Injection

source: https://www.securityfocus.com/bid/50797/info

2011-11-24 X-Cisadane webapps