Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 368

MyBB Forum Userbar Plugin (Userbar 2.2) – SQL Injection

---------------------------------------------------------------------

2011-10-10 Mario_Vs webapps

atvise webMI2ADS Web Server 1.0 – Multiple Vulnerabilities

#######################################################################

2011-10-10 Luigi Auriemma dos

IRAI AUTOMGEN 8.0.0.7 – Use-After-Free

#######################################################################

2011-10-10 Luigi Auriemma dos

OPC Systems.NET 4.00.0048 – Denial of Service

#######################################################################

2011-10-10 Luigi Auriemma dos

ACDSee FotoSlate – ‘.PLP’ File ‘id’ Local Overflow (Metasploit)

##

2011-10-10 Metasploit local

Jaws 0.8.14 – Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/50022/info

2011-10-10 indoushka webapps

GoAhead Web Server 2.18 – ‘addgroup.asp?group’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50039/info

2011-10-10 Silent Dream remote

GoAhead Web Server 2.18 – ‘addlimit.asp?url’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50039/info

2011-10-10 Silent Dream remote

GoAhead Web Server 2.18 – ‘adduser.asp’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50039/info

2011-10-10 Silent Dream remote

6KBBS 8.0 build 20101201 – Cross-Site Scripting / Information Disclosure

source: https://www.securityfocus.com/bid/50050/info

2011-10-10 labs insight webapps

Snortreport – ‘/nmap.php’ / ‘nbtscan.php’ Remote Command Execution (Metasploit)

##

2011-10-09 Metasploit webapps

ScriptFTP 3.3 – LIST Remote Buffer Overflow (Metasploit) (2)

##

2011-10-09 Metasploit remote

MyBB 1.6.4 – Backdoor Access (Metasploit)

##

2011-10-09 Metasploit webapps

GotoCode Online Classifieds – Multiple Vulnerabilities

###############################################################################

2011-10-09 Nathaniel Carew webapps

Joomla! Component com_expedition – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/50019/info

2011-10-09 BHG Security Center webapps

pkexec – Race Condition Privilege Escalation

¡Á U can reach us @ http://www.wooyun.org :)

2011-10-08 xi4oyu local

BOOKSolved 1.2.2 – Remote File Disclosure

...BOOKSolved 1.2.2 (l) Remote File Disclosure Vulnerability

2011-10-08 bd0rk webapps

Joomla! Component Time Returns 2.0 – SQL Injection

#############################################################################################################

2011-10-08 kaMtiEz webapps

NexusPHP 1.5 – SQL Injection

# Exploit Title: Nexusphp.v1.5 SQL injection Vulnerability

2011-10-08 flyh4t webapps

URL Shortener Script 1.0 – SQL Injection

===================================================================================

2011-10-07 M.Jock3R webapps

EFront 3.6.9 Community Edition – Multiple Vulnerabilities

# Exploit Title: EFront

2011-10-07 IHTeam webapps

BlazeVideo HDTV Player 6.6 Professional – Universal ASLR + DEP Bypass

# Exploit Title: BlazeVideo HDTV Player 6.6 Professional (Universal DEP+ASLR Bypass)

2011-10-07 modpr0be local

Spreecommerce 0.60.1 – Arbitrary Command Execution (Metasploit)

##

2011-10-07 Metasploit webapps

BuzzyWall 1.3.2 – ‘resolute.php’ Information Disclosure

source: https://www.securityfocus.com/bid/50018/info

2011-10-07 cr4wl3r webapps

Tsmim Lessons Library – ‘show.php’ SQL Injection

===================================================================================

2011-10-06 M.Jock3R webapps

Opera 10/11 – Bad Nesting with Frameset Tag Memory Corruption (Metasploit)

###############################################################################################################

2011-10-06 Jose A. Vazquez remote

Active CMS 1.2 – ‘mod’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50001/info

2011-10-06 Stefan Schurtz webapps

PHP 5.3.11/5.4.0RC2 – ‘header()’ HTTP Header Injection

source: https://www.securityfocus.com/bid/55297/info

2011-10-06 Mr. Tokumaru remote

PolicyKit polkit-1 < 0.101 - Local Privilege Escalation

/* polkit-pwnage.c * * * ============================== * = PolicyKit Pwnage = * = by zx2c4 ...

2011-10-05 zx2c4 local

DivX Plus Web Player – ‘file://’ Buffer Overflow (PoC)

# Exploit Title: DivX Plus Web Player "file://" Buffer Overflow Vulnerability PoC ( 0day )

2011-10-05 Snake dos

Concrete5 CMS < 5.4.2.1 - Multiple Vulnerabilities

# Exploit Title: Concrete5 setQuery(

2011-10-04 Ryan Dewhurst webapps

Easy Hosting Control Panel – Admin Authentication Bypass

# Exploit Title: Easy Hosting Control Panel Admin Auth Bypass

2011-10-04 Jasman webapps

CF Image Hosting Script 1.3.82 – File Disclosure

#!/usr/bin/perl

2011-10-04 bd0rk webapps

Ashampoo Burning Studio Elements 10.0.9 – ‘.ashprj’ Heap Overflow

#!/usr/bin/perl

2011-10-04 LiquidWorm dos

Google Chrome < 14.0.835.163 - '.pdf' File Handling Memory Corruption

----------------Security Adisory----------------

2011-10-04 Mario Gomes dos

Cytel Studio 9.0.0 – Multiple Vulnerabilities

#######################################################################

2011-10-04 Luigi Auriemma dos

GenStat 14.1.0.5943 – Multiple Vulnerabilities

#######################################################################

2011-10-04 Luigi Auriemma dos

vTiger CRM 5.2.1 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities (1)

source: https://www.securityfocus.com/bid/49927/info

2011-10-04 Aung Khant webapps

vTiger CRM 5.2.1 – ‘PHPrint.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49927/info

2011-10-04 Aung Khant webapps

SonicWALL – ‘SessId’ Cookie Brute Force / Admin Session Hijacking

source: https://www.securityfocus.com/bid/49930/info

2011-10-04 Hugo Vazquez remote

GotoCode Online Bookstore – Multiple Vulnerabilities

###############################################################################

2011-10-03 Nathaniel Carew webapps

JBoss & JMX Console – Misconfigured Deployment Scanner

#!/usr/bin/perl

2011-10-03 y0ug webapps

Netvolution 2.5.8 – ‘referer’ Header SQL Injection

source: https://www.securityfocus.com/bid/49918/info

2011-10-03 Patroklos Argyroudis webapps

Phorum 5.2.18 – ‘/admin/index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49920/info

2011-10-03 Stefan Schurtz webapps

Adobe Photoshop Elements 8.0 – Multiple Arbitrary Code Execution Vulnerabilities

Title:

2011-10-02 LiquidWorm dos

Banana Dance CMS and Wiki – SQL Injection

+-----------------------+

2011-10-02 Aodrulez webapps

Vivvo CMS – Local File Inclusion

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

2011-10-02 JaBrOtxHaCkEr webapps

CA Total Defense Suite – reGenerateReports Stored procedure SQL Injection (Metasploit)

##

2011-10-02 Metasploit webapps

SonicWALL Viewpoint 6.0 – ‘scheduleID’ SQL Injection

source: https://www.securityfocus.com/bid/49906/info

2011-10-02 Rem0ve webapps

Perl 5.x – Digest Module ‘Digest->new()’ Code Injection

source: https://www.securityfocus.com/bid/49911/info

2011-10-02 anonymous remote