WordPress Plugin NewsLetter Meenews 5.1 – ‘idnews’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50783/info
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 363
PrestaShop 1.4.4.1 mondialrelay (kit_mondialrelay) – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50784/info
PrestaShop 1.4.4.1 – ‘/modules/mondialrelay/googlemap.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50784/info
PrestaShop 1.4.4.1 – ‘/modules/mondialrelay/kit_mondialrelay/SuiviExpedition_ajax.php?Expedition’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50784/info
PrestaShop 1.4.4.1 – ‘/admin/ajaxfilemanager/ajax_save_text.php’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50784/info
Prestashop 1.4.4.1 – ‘displayImage.php’ HTTP Response Splitting
source: https://www.securityfocus.com/bid/50785/info
Zen Cart CMS 1.3.9h – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50787/info
Pro Clan Manager 0.4.2 – SQL Injection
source: https://www.securityfocus.com/bid/50794/info
Wireshark 1.4.4 – DECT Dissector Remote Buffer Overflow
#!/usr/bin/env python
Microsoft Windows XP/7 Kernel – ‘win32k.sys’ Keyboard Layout Privilege Escalation (MS10-073)
source: https://www.securityfocus.com/bid/50763/info
TA.CMS (TeachArabia) – ‘index.php?id’ SQL Injection
source: https://www.securityfocus.com/bid/50773/info
TA.CMS (TeachArabia) – ‘lang’ Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/50773/info
Hastymail2 – ‘rs’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50789/info
QQPLAYER Player 3.2 – PICT PnSize Buffer Overflow Windows (ASLR + DEP Bypass) (Metasploit)
# Exploit Title: QQPLAYER PICT PnSize Buffer Overflow WIN7 DEP_ASLR BYPASS
VMware – Update Manager Directory Traversal
# Exploit Title:VMware Update Manager Directory Traversal
WordPress Plugin Alert Before Your Post – ‘name’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50743/info
WordPress Plugin Advanced Text Widget 2.0 – ‘page’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50744/info
WordPress Plugin Adminimize 1.7.21 – ‘page’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50745/info
WordPress Plugin Lanoba Social 1.0 – ‘action’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50746/info
Digital Attic Foundation CMS – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/50735/info
WordPress Plugin jetpack – ‘sharedaddy.php’ ID SQL Injection
######################################################
Freelancer Calendar 1.01 – SQL Injection
------------------------------------------------------------------------
Valid tiny-erp 1.6 – SQL Injection
------------------------------------------------------------------------
Blogs manager 1.101 – SQL Injection
------------------------------------------------------------------------
ARASTAR – SQL Injection
+#######+
Thunder Kankan Player 4.8.3.840 – Stack Overflow / Denial of Service
#!/usr/bin/env python
Jetty Web Server – Directory Traversal
source: https://www.securityfocus.com/bid/50723/info
GoAhead Web Server 2.5 – ‘goform/formTest’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50729/info
webERP 4.3.8 – Multiple Script URI Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50713/info
webERP 4.3.8 – ‘/reportwriter/ReportMaker.php?reportid’ SQL Injection
source: https://www.securityfocus.com/bid/50713/info
webERP 4.3.8 – ‘/reportwriter/FormMaker.php?ReportID’ SQL Injection
source: https://www.securityfocus.com/bid/50713/info
ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/50717/info
WordPress Plugin Flexible Custom Post Type – ‘id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/50719/info
Attachmate Reflection FTP Client – Heap Overflow
#####################################################################################
FleaHttpd – Remote Denial of Service
#!/usr/bin/python
SonicWALL Aventail SSL-VPN – SQL Injection
================================================================================
Webistry 1.6 – ‘pid’ SQL Injection
source: https://www.securityfocus.com/bid/50689/info
Authenex A-Key/ASAS Web Management Control 3.1.0.2 – Blind SQL Injection
============================================================
QuiXplorer 2.3 – Bugtraq Arbitrary File Upload
# Exploit Title: QuiXplorer 2.3
optima apiftp server 1.5.2.13 – Multiple Vulnerabilities
#######################################################################
WordPress Plugin AdRotate 3.6.6 – SQL Injection
# Exploit Title: WordPress AdRotate plugin get_var($wpdb->prepare("SELECT `link` FROM `".$prefix."adrotate` WHERE `id...