Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 365

Libc – ‘regcomp()’ Stack Exhaustion Denial of Service

2011-11-04 Maksymilian Arciemowicz dos

Centreon 2.3.1 – ‘command_name’ Remote Command Execution

source: https://www.securityfocus.com/bid/50568/info

2011-11-04 Christophe de la Fuente webapps

Jara 1.6 – Multiple Vulnerabilities

#!/Mohammed/bin/YahYa

2011-11-03 Or4nG.M4N webapps

Web File Browser 0.4b14 – File Download

Exploit Title: [Web File Browser 0.4b14 File Download Vulnerability]

2011-11-03 Sangyun YOO webapps

Calibre E-Book Reader – Local Privilege Escalation (2)

# Exploit Title: .60-Calibrer Assault Mount: Another Calibre E-Book Reader Local Root

2011-11-03 zx2c4 local

Calibre E-Book Reader – Race Condition Privilege Escalation

#!/bin/sh

2011-11-03 zx2c4 local

S9Y Serendipity 1.5.5 – ‘serendipity[filter][bp.ALT]’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50502/info

2011-11-03 Stefan Schurtz webapps

CmyDocument – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50512/info

2011-11-03 demonalex webapps

Google Android 2.3.5 – PowerVR SGX Driver Information Disclosure

// source: https://www.securityfocus.com/bid/57900/info

2011-11-03 Geremy Condra remote

Oracle Hyperion Financial Management TList6 – ActiveX Control Remote Code Execution

Oracle Hyperion Financial Management TList6 ActiveX

2011-11-02 rgod remote

BST (BestShopPro) – ‘nowosci.php’ Multiple Vulnerabilities

################################################################################################

2011-11-02 CoBRa_21 webapps

Calibre E-Book Reader – Local Privilege Escalation (1)

#!/bin/sh

2011-11-02 zx2c4 local

SetSeed CMS 5.8.20 – ‘loggedInUser’ SQL Injection

SetSeed CMS 5.8.20 (loggedInUser) Remote SQL Injection Vulnerability

2011-11-02 LiquidWorm webapps

CaupoShop Pro (2.x < 3.70) Classic 3.01 - Local File Inclusion

CaupoShop Pro (2.x/

2011-11-02 Rami Salama webapps

Microsoft Excel 2007 SP2 – Buffer Overwrite (MS11-021)

Abysssec Research

2011-11-02 Abysssec local

eFront 3.6.x – Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/50492/info

2011-11-02 High-Tech Bridge SA webapps

Apache < 2.0.64 / < 2.2.21 mod_setenvif - Integer Overflow

Source: http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/

2011-11-02 halfdog dos

ZTE ZXDSL 831IIV7.5.0a_Z29_OV – Multiple Vulnerabilities

# Exploit Title: ZTE ZXDSL 831IIV7.5.0a_Z29_OV Multiple vulnerabilities

2011-11-01 mehdi boukazoula webapps

Domain Shop – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50454/info

2011-11-01 Mr.PaPaRoSSe webapps

vBulletin 4.1.7 – Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/50455/info

2011-11-01 indoushka webapps

Hyperic HQ Enterprise 4.5.1 – Cross-Site Scripting / Multiple Security Vulnerabilities

source: https://www.securityfocus.com/bid/50456/info

2011-11-01 Benjamin Kunz Mejri webapps

IBSng B1.34(T96) – ‘str’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50468/info

2011-11-01 Isfahan webapps

eFront 3.6.10 Build 11944 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50469/info

2011-11-01 Netsparker Advisories webapps

Symphony 2.2.3 – ‘/symphony/publish/images?filter’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50470/info

2011-11-01 Mesut Timur webapps

Symphony 2.2.3 – ‘/symphony/publish/comments?filter’ SQL Injection

source: https://www.securityfocus.com/bid/50470/info

2011-11-01 Mesut Timur webapps

Joomla! Component HM Community – Multiple Vulnerabilities

_00000__00000__00000__00000__0___0__00000____0___0___000___0___0_

2011-10-31 599eme Man webapps

BroadWin Webaccess SCADA/HMI Client – Remote Code Execution

BroadWin WebAccess SCADA/HMI Remote Code Execution Vulnerability [0day]

2011-10-31 Snake remote

Oracle DataDirect ODBC Drivers – HOST Attribute ‘arsqls24.dll’ Stack Buffer Overflow (PoC)

2011-10-31 rgod dos

WordPress Theme classipress 3.1.4 – Persistent Cross-Site Scripting

# Exploit Title: WordPress Classipress Theme

2011-10-31 Paul Loftness webapps

WordPress Plugin Glossary – SQL Injection

######################################################

2011-10-31 longrifle0x webapps

jbShop e107 7 CMS Plugin – SQL Injection

# Exploit Title: jbShop - e107 v7 CMS plugin - SQL Injection vulnerability

2011-10-31 Robert Cooper webapps

NJStar Communicator 3.00 – MiniSMTP Server Remote (Metasploit)

##

2011-10-31 Dillon Beresford remote

Joomla! Component Alameda 1.0 – SQL Injection

[~] Joomla Component Alameda (com_alameda) SQL Injection Vulnerability

2011-10-31 kaMtiEz webapps

PHP Photo Album 0.4.1.16 – Multiple Disclosure Vulnerabilities

----------------------------------------------------------------

2011-10-29 BHG Security Center webapps

Joomla! Component Barter Sites 1.3 – Multiple Vulnerabilities

####################################################################################

2011-10-29 Chris Russell webapps

Joomla! Component com_jeemasms 3.2 – Multiple Vulnerabilities

###################################################################

2011-10-29 Chris Russell webapps

Joomla! Component Vik Real Estate 1.0 – Multiple Vulnerabilities

###################################################################

2011-10-29 Chris Russell webapps

Apple Mac OSX 10.6.5 / iOS 4.3.3 Mail – Denial of Service

source: https://www.securityfocus.com/bid/50446/info

2011-10-29 shebang42 dos

X.Org xorg 1.4 < 1.11.2 - File Permission Change

Author: vladz (http://vladz.devzero.fr)

2011-10-28 vladz local

Joomla! Component Techfolio 1.0 – SQL Injection

###################################################################

2011-10-28 Chris Russell webapps

GFI Faxmaker Fax Viewer 10.0 (build 237) – Denial of Service (PoC)

#!/usr/bin/python

2011-10-28 loneferret dos

eFront 3.6.10 – ‘professor.php’ Script Multiple SQL Injections

source: https://www.securityfocus.com/bid/50419/info

2011-10-28 Vulnerability Research Laboratory webapps

Opera Web Browser 11.52 – Escape Sequence Stack Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/50421/info

2011-10-28 Marcel Bernhardt dos

SjXjV 2.3 – ‘post.php’ SQL Injection

source: https://www.securityfocus.com/bid/50426/info

2011-10-28 599eme Man webapps

Plici Search 2.0.0.Stable.r.1878 – ‘p48-search.html’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50428/info

2011-10-28 599eme Man webapps

eFront 3.6.10 (build 11944) – Multiple Vulnerabilities

----------------------------------------------------------------

2011-10-27 EgiX webapps

WordPress Plugin wptouch – SQL Injection

# Exploit Title: WordPress wptouch plugin SQL Injection Vulnerability

2011-10-27 longrifle0x webapps

Online Subtitles Workshop – Cross-Site Scripting

===================================================================================

2011-10-26 M.Jock3R webapps

phpScheduleIt 1.2.10 – ‘reserve.php’ Arbitrary Code Injection (Metasploit)

##

2011-10-26 Metasploit webapps

GTA SA-MP – ‘server.cfg’ Local Buffer Overflow (Metasploit)

##

2011-10-26 Metasploit local