Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 369

ContaoCMS 2.10.1 – Cross-Site Scripting

source: https://www.securityfocus.com/bid/50061/info

2011-10-02 Stefan Schurtz webapps

ezCourses – ‘admin.asp’ Security Bypass

source: https://www.securityfocus.com/bid/49907/info

2011-10-01 J.O webapps

Polipo 1.0.4.1 – POST/PUT HTTP Header Processing Denial of Service

source: https://www.securityfocus.com/bid/49908/info

2011-10-01 Usman Saeed dos

WordPress Plugin Bannerize 2.8.7 – SQL Injection

# Exploit Title: WordPress WP Bannerize plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)

2011-09-30 Miroslav Stampar webapps

FreeBSD – UIPC socket heap Overflow (PoC)

#!/bin/sh

2011-09-30 Shaun Colley dos

Marinet CMS – ‘room.php’ Blind SQL Injection

====================================================

2011-09-30 BHG Security Center webapps

Feed on Feeds 0.5 – Remote PHP Code Injection

2011-09-30 EgiX webapps

WordPress Theme Morning Coffee 3.5 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49878/info

2011-09-30 SiteWatch webapps

WordPress Theme Black-LetterHead 1.5 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49879/info

2011-09-30 SiteWatch webapps

WordPress Theme RedLine 1.65 – ‘s’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49880/info

2011-09-30 SiteWatch webapps

WordPress Plugin WP Bannerize 2.8.7 – ‘ajax_sorter.php’ SQL Injection

source: https://www.securityfocus.com/bid/49893/info

2011-09-30 Miroslav Stampar webapps

ProjectForum 7.0.1 3038 – ‘more’ Object HTML Injection

source: https://www.securityfocus.com/bid/49895/info

2011-09-30 Paul Davis webapps

NCSS 07.1.21 – Array Overflow with Write2

#######################################################################

2011-09-29 Luigi Auriemma dos

ScriptFTP 3.3 – Remote Buffer Overflow (Metasploit)

#Exploit Title: ScriptFTP 3.3 Remote Buffer Overflow (MSF)

2011-09-29 otoy remote

Typo3 – File Disclosure

________________________________________________________________________________________

2011-09-29 Number 7 webapps

Joomla! < 1.7.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49853/info

2011-09-29 Aung Khant webapps

Bitweaver 2.8.1 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49864/info

2011-09-29 Stefan Schurtz webapps

WordPress Theme Atahualpa 3.6.7 – ‘s’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49865/info

2011-09-29 SiteWatch webapps

WordPress Theme Elegant Grunge 1.0.3 – ‘s’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49869/info

2011-09-29 SiteWatch webapps

WordPress Theme EvoLve 1.2.5 – ‘s’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49872/info

2011-09-29 SiteWatch webapps

WordPress Theme Pixiv Custom Theme 2.1.5 – ‘cpage’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49875/info

2011-09-29 SiteWatch webapps

timelive time and expense tracking 4.1.1 – Multiple Vulnerabilities

###############################################################################

2011-09-28 Nathaniel Carew webapps

Apple Mac OSX < 10.6.7 - Kernel Panic (Denial of Service)

Mac OS X < 10.6.7 Kernel Panic Exploit

2011-09-28 hkpco dos

Norman Security Suite 8 – ‘nprosec.sys’ Local Privilege Escalation

#include

2011-09-28 Xst3nZ local

Traq 2.2 – Multiple SQL Injections / Cross-Site Scripting

source: https://www.securityfocus.com/bid/49835/info

2011-09-28 High-Tech Bridge SA webapps

A2CMS – ‘index.php’ Local File Disclosure

source: https://www.securityfocus.com/bid/49883/info

2011-09-28 St493r webapps

WordPress Plugin Mingle Forum 1.0.31 – SQL Injection

# Exploit Title: WordPress Mingle Forum plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)

2011-09-27 Miroslav Stampar webapps

Jarida 1.0 – Multiple Vulnerabilities

# Exploit Title: Jarida 1.0 SQL Injection

2011-09-27 Ptrace Security webapps

PcVue 10.0 – Multiple Vulnerabilities

#######################################################################

2011-09-27 Luigi Auriemma dos

Omnidocs – Multiple Vulnerabilities

--------------------------------------------------------------------

2011-09-27 Sohil Garg webapps

redmind Online-Shop / E-Commerce-System – SQL Injection

[#] Exploit Title : redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability

2011-09-27 Indonesian BlackCoder webapps

Adobe ColdFusion 7 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49787/info

2011-09-27 MustLive webapps

Vanira CMS – ‘vtpidshow’ SQL Injection

source: https://www.securityfocus.com/bid/49789/info

2011-09-27 kurdish hackers team webapps

ServersCheck Monitoring Software 8.8.x – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/49793/info

2011-09-27 Vulnerability-Lab remote

Sterling Trader 7.0.2 – Integer Overflow

#######################################################################

2011-09-26 Luigi Auriemma dos

GMER 1.0.15.15641 – MFT Overwrite

#include

2011-09-26 Heurs dos

WordPress Plugin CevherShare 2.0 – SQL Injection

=> WordPress CevherShare 2.0 plugin SQL Injection Vulnerability

2011-09-26 bd0rk webapps

Muse Music All-in-One 1.5.0.001 – ‘.pls’ Local Buffer Overflow (DEP Bypass)

#!/usr/bin/perl

2011-09-26 C4SS!0 G0M3S local

GTA SA-MP server.cfg – Local Buffer Overflow

# GTA SA-MP server.cfg Local Buffer Overflow Vulnerability (0day)

2011-09-26 Silent_Dream local

WordPress Plugin BuddyPress 1.2.10 / WordPress Theme DEV Blogs Mu 1.2.6 (WordPress 3.1.4) – Regular Subscriber HTML Injection

source: https://www.securityfocus.com/bid/49765/info

2011-09-26 knull webapps

AdaptCMS 2.0.1 – Cross-Site Scripting / Information Disclosure

source: https://www.securityfocus.com/bid/49769/info

2011-09-26 Stefan Schurtz webapps

S9Y Serendipity Freetag-plugin 3.23 – ‘serendipity[tagview]’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49771/info

2011-09-26 Stefan Schurtz webapps

Joomla! Component Biitatemplateshop – ‘groups’ SQL Injection

source: https://www.securityfocus.com/bid/49786/info

2011-09-26 BHG Security Group webapps

WordPress Plugin Link Library 5.2.1 – SQL Injection

# Exploit Title: WordPress Link Library plugin

2011-09-24 Miroslav Stampar webapps

WordPress Plugin AdRotate 3.6.5 – SQL Injection

# Exploit Title: WordPress AdRotate plugin

2011-09-24 Miroslav Stampar webapps

IceWarp Mail Server 10.3.2 server/webmail.php Soap Message Parsing – Arbitrary File Disclosure

source: https://www.securityfocus.com/bid/49753/info

2011-09-24 David Kirkpatrick webapps

WordPress Theme Hybrid 0.9 – ‘cpage’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49866/info

2011-09-24 SiteWatch webapps

WordPress Theme F8 Lite 4.2.1 – ‘s’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49867/info

2011-09-24 SiteWatch webapps

WordPress Theme Cover WP 1.6.5 – ‘s’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49873/info

2011-09-24 jabdah webapps

WordPress Theme Web Minimalist 1.1 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49874/info

2011-09-24 SiteWatch webapps