Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 366

vTiger CRM 5.2.1 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities (2)

source: https://www.securityfocus.com/bid/50364/info

2011-10-26 LiquidWorm webapps

Cisco – ‘file’ Directory Traversal

source: https://www.securityfocus.com/bid/50372/info

2011-10-26 Sandro Gauci remote

Trend Micro IWSS 3.1 – Local Privilege Escalation

source: https://www.securityfocus.com/bid/50380/info

2011-10-26 Buguroo Offensive Security local

XAMPP 1.7.4 – Cross-Site Scripting

source: https://www.securityfocus.com/bid/50381/info

2011-10-26 Sangteamtham remote

BlueZone Desktop – Multiple Malformed Files Local Denial of Service Vulnerabilities

# Exploit Title: BlueZone Desktop Malformed .zmd file Local Denial of Service

2011-10-25 Silent_Dream dos

phpLDAPadmin 1.2.1.1 – Remote PHP Code Injection (Metasploit) (2)

##

2011-10-25 Metasploit webapps

Joomla! Component com_yjcontactus – Local File Inclusion

================================================================================

2011-10-25 MeGo webapps

Alsbtain Bulletin 1.5/1.6 – Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/50350/info

2011-10-25 Null H4ck3r webapps

Cytel Studio 9.0 – ‘.CY3’ Local Stack Buffer Overflow (Metasploit)

##

2011-10-24 Metasploit local

zFTPServer – ‘cwd/stat’ Remote Denial of Service

#!/usr/bin/python

2011-10-24 Myo Soe dos

BlueZone – ‘.zft’ File Local Denial of Service

#!/usr/bin/perl -w

2011-10-24 Iolo Morganwg dos

SAP Management Console – OSExecute Payload Execution (Metasploit)

##

2011-10-24 Metasploit webapps

Oracle AutoVue 20.0.1 – ‘AutoVueX.ocx’ ActiveX Control ‘ExportEdaBom()’ Insecure Method

source: https://www.securityfocus.com/bid/50332/info

2011-10-24 rgod remote

e107 0.7.24 – ‘cmd’ Remote Command Execution

source: https://www.securityfocus.com/bid/50339/info

2011-10-24 Matt Bergin webapps

InverseFlow 2.4 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50344/info

2011-10-24 Amir Expl0its webapps

Jara 1.6 – SQL Injection

jara 1.6 sql injection vulnerability

2011-10-23 muuratsalo webapps

phpLDAPadmin 1.2.1.1 – Remote PHP Code Injection (1)

2011-10-23 EgiX webapps

InverseFlow 2.4 – Cross-Site Request Forgery (Add Admin)

#(+) Exploit Title: InverseFlow v2.4 CSRF Vulnerabilities (Add Admin User)

2011-10-23 EjRaM HaCkEr webapps

phpLDAPadmin 0.9.4b – Denial of Service

import java.io.PrintStream;

2011-10-23 Alguien dos

Microsoft Win32k – Null Pointer De-reference (PoC) (MS11-077)

# Exploit Title: MS11-077 Win32k Null Pointer De-reference Vulnerability POC

2011-10-23 KiDebug dos

Google Chrome – Denial of Service

GGGGGG\

2011-10-23 Prashant Uniyal dos

Google Chrome – Killing Thread (PoC)

## _ (`-') _ pigtail23 (`-') (`-') _ _ www.remoteshell.de ##

2011-10-22 pigtail23 dos

Opera 11.51 – Use-After-Free Crash (PoC)

# Exploit Title: Opera Use After Free - Crash PoC

2011-10-21 Roberto Suggi Liverani dos

Oracle AutoVue 20.0.1 AutoVueX – ActiveX Control SaveViewStateToFile

Oracle AutoVue 20.0.1 AutoVueX ActiveX Control SaveViewStateToFile Remote

2011-10-21 rgod remote

Cyclope Internet Filtering Proxy 4.0 – ‘CEPMServer.exe’ Denial of Service (PoC)

#!/usr/bin/python

2011-10-21 loneferret dos

SportsPHool 1.0 – Remote File Inclusion

2011-10-21 cr4wl3r webapps

DELL Quest One Password Manager – CAPTCHA Security Bypass

source: https://www.securityfocus.com/bid/63259/info

2011-10-21 Johnny Bravo remote

CMS mini 0.2.2 – Local File Inclusion

# Exploit Title: [CMSmini 0.2.2 Local File Inclusion]

2011-10-20 BeopSeong/I2Sec webapps

Uiga Personal Portal – Multiple Vulnerabilities

# Exploit Title: Uiga Personal Portal Multiple Vulnerability

2011-10-20 Eyup CELIK webapps

fims File Management System 1.2.1a – Multiple Vulnerabilities

# Exploit Title: fims - File Management System execute("select * from fims_user where email='$email' and password=md5...

2011-10-20 Skraps webapps

Simple Free PHP Forum Script – SQL Injection

# Exploit Title: Simple Free PHP Forum Script Set("cat_id",$get_id);

2011-10-20 Skraps webapps

OCS Inventory NG 2.0.1 – Persistent Cross-Site Scripting

OCS Inventory NG 2.0.1 - Persistent XSS (CVE-2011-4024)

2011-10-20 Nicolas DEROUET webapps

Opera 11.52 – Denial of Service (PoC)

## _ (`-') _ (`-') (`-') _ _ ##

2011-10-20 pigtail23 dos

Oracle DataDirect – Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Buffer Overflows (PoC)

Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers

2011-10-20 rgod dos

Opera 11.52 – Stack Overflow

## _ (`-') _ pigtail23 (`-') (`-') _ _ www.remoteshell.de ##

2011-10-20 pigtail23 dos

Pre Studio Business Cards Designer – SQL Injection

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

2011-10-20 dr_zig webapps

UnrealIRCd 3.2.8.1 – Local Configuration Stack Overflow

# Exploit Title: UnrealIRCd local configuration stack overflow

2011-10-20 DiGMi dos

Metasploit Web UI 4.1.0 – Persistent Cross-Site Scripting

Advisory: Metasploit 4.1.0 Web UI stored XSS vulnerability

2011-10-20 Stefan Schurtz webapps

Cyclope Internet Filtering Proxy 4.0 – Persistent Cross-Site Scripting

#!/usr/bin/python

2011-10-20 loneferret webapps

HP Power Manager – ‘formExportDataLogs’ Remote Buffer Overflow (Metasploit)

##

2011-10-20 Metasploit remote

Innovate Portal 2.0 – ‘cat’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50295/info

2011-10-20 Eyup CELIK webapps

Splunk 4.1.6 – ‘segment’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50296/info

2011-10-20 Filip Palian remote

Splunk 4.1.6 Web Component – Remote Denial of Service

source: https://www.securityfocus.com/bid/50298/info

2011-10-20 Filip Palian dos

osCommerce – Arbitrary File Upload / File Disclosure

source: https://www.securityfocus.com/bid/50301/info

2011-10-20 indoushka webapps

Tine 2.0 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50307/info

2011-10-20 High-Tech Bridge SA webapps

Yet Another CMS 1.0 – SQL Injection / Cross-Site Scripting

Advisory: Yet Another CMS 1.0 SQL Injection & XSS vulnerabilities

2011-10-19 Stefan Schurtz webapps

Openemr-4.1.0 – SQL Injection

# Exploit Title: [Openemr-4.1.0 SQL injection Vulnerability]

2011-10-19 I2sec-dae jin Oh webapps

WHMCompleteSolution (WHMCS) 3.x < 4.0.x - 'cart.php' Local File Disclosure

# Title : WHMCompleteSolution (cart.php) Local File Disclosure

2011-10-19 Lagripe-Dz & Mca-Crb webapps

1024 CMS 1.1.0 Beta – ‘force_download.php’ Local File Inclusion

# Exploit Title: [1024 CMS Version 1.1.0 beta(/complete-modules/modules/forcedownload/force_download.php) Local File ...

2011-10-19 Sangyun YOO webapps

Boonex Dolphin 6.1 – ‘get_list.php’ SQL Injection

source: https://www.securityfocus.com/bid/50286/info

2011-10-19 Yuri Goltsev webapps