Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 370

WordPress Theme Trending 0.1 – ‘cpage’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49896/info

2011-09-24 SiteWatch webapps

PHP PDORow Object – Remote Denial of Service

source: https://www.securityfocus.com/bid/51952/info

2011-09-24 anonymous dos

sunway ForceControl 6.1 sp3 – Multiple Vulnerabilities

#######################################################################

2011-09-23 Luigi Auriemma dos

Freefloat FTP Server – Remote Buffer Overflow (DEP Bypass)

#!/usr/bin/python

2011-09-23 blake remote

JAKCMS PRO 2.2.5 – Arbitrary File Upload

# Exploit Title: JAKCMS PRO

2011-09-22 EgiX webapps

Blue Coat Reporter – Directory Traversal

# Exploit Title: Blue Coat Reporter Unauthenticated Directory Traversal

2011-09-22 nitr0us remote

Cogent Datahub 7.1.1.63 – Remote Unicode Buffer Overflow

#!/usr/bin/python

2011-09-22 mr_me remote

Zyncro 3.0.1.20 – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/49740/info

2011-09-22 Ferran Pichel Llaquet webapps

Zyncro 3.0.1.20 – Social Network Message Menu SQL Injection

source: https://www.securityfocus.com/bid/49741/info

2011-09-22 Ferran Pichel Llaquet webapps

TWiki 5.0.2 – ‘/bin/view/Main/Jump?newtopic’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49746/info

2011-09-22 Mesut Timur webapps

TWiki 5.0.2 SlideShowPlugin – Slide Show Pages URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/49746/info

2011-09-22 Mesut Timur webapps

AWStats 6.95/7.0 – ‘awredir.pl’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49749/info

2011-09-22 MustLive webapps

EViews 7.0.0.1 (aka 7.2) – Multiple Vulnerabilities

#######################################################################

2011-09-21 Luigi Auriemma dos

MetaServer RT 3.2.1.450 – Multiple Vulnerabilities

#######################################################################

2011-09-21 Luigi Auriemma dos

i-Gallery 3.4 – ‘d’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49712/info

2011-09-21 Kurd-Team webapps

OneCMS 2.6.4 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/49733/info

2011-09-21 kurdish hackers team webapps

SharePoint 2007/2010 and DotNetNuke < 6 - File Disclosure (via XEE)

Exploit Title: File disclosure via XEE in SharePoint and DotNetNuke

2011-09-20 Nicolas Gregoire webapps

Netgear Wireless Cable Modem Gateway – Authentication Bypass / Cross-Site Request Forgery

Sense of Security - Security Advisory - SOS-11-011

2011-09-20 Sense of Security webapps

ScriptFTP 3.3 – Remote Buffer Overflow (LIST) (1)

# Exploit Title: ScriptFTP

2011-09-20 modpr0be remote

AVCon – DEP Bypass

# DEP Bypass for OptIn/OptOut

2011-09-20 blake local

eSignal and eSignal Pro 10.6.2425.1208 – File Parsing Buffer Overflow in QUO (Metasploit)

##

2011-09-20 Metasploit local

IBM Lotus Domino 8.5.2 – ‘NSFComputeEvaluateExt()’ Remote Stack Buffer Overflow

source: https://www.securityfocus.com/bid/49705/info

2011-09-20 rmallof remote

WordPress Plugin Filedownload 0.1 – ‘download.php’ Remote File Disclosure

# Exploit Title: WordPress Filedownload Plugin 0.1 (download.php) Remote File Disclosure Vulnerability

2011-09-19 Septemb0x webapps

Toko Lite CMS 1.5.2 – ‘edit.php’ HTTP Response Splitting

Toko Lite CMS 1.5.2 (edit.php) HTTP Response Splitting Vulnerability

2011-09-19 LiquidWorm webapps

WordPress Plugin TheCartPress 1.1.1 – Remote File Inclusion

# Exploit Title: Thecartpress Wordpress plugin RFI

2011-09-19 Ben Schmidt webapps

WordPress Plugin AllWebMenus 1.1.3 – Remote File Inclusion

# Exploit Title: Allwebmenus Wordpress Menu Plugin Wordpress plugin RFI

2011-09-19 Ben Schmidt webapps

WordPress Plugin WPEasyStats 1.8 – Remote File Inclusion

# Exploit Title: Wpeasystats Wordpress plugin RFI

2011-09-19 Ben Schmidt webapps

WordPress Plugin Annonces 1.2.0.0 – Remote File Inclusion

# Exploit Title: Annonces Wordpress plugin RFI

2011-09-19 Ben Schmidt webapps

WordPress Plugin Livesig 0.4 – Remote File Inclusion

# Exploit Title: Livesig Wordpress plugin RFI

2011-09-19 Ben Schmidt webapps

WordPress Plugin Disclosure Policy 1.0 – Remote File Inclusion

# Exploit Title: Disclosure Policy Plugin Wordpress plugin RFI

2011-09-19 Ben Schmidt webapps

WordPress Plugin Mailing List 1.3.2 – Remote File Inclusion

# Exploit Title: Mailing List Wordpress plugin RFI

2011-09-19 Ben Schmidt webapps

WordPress Plugin Zingiri Web Shop 2.2.0 – Remote File Inclusion

# Exploit Title: Zingiri Web Shop Wordpress plugin RFI

2011-09-19 Ben Schmidt webapps

WordPress Plugin Mini Mail Dashboard Widget 1.36 – Remote File Inclusion

# Exploit Title: Mini Mail Dashboard Widget Wordpress plugin RFI

2011-09-19 Ben Schmidt webapps

WordPress Plugin Relocate Upload 0.14 – Remote File Inclusion

# Exploit Title: Relocate Upload Wordpress plugin RFI

2011-09-19 Ben Schmidt webapps

KnFTP 1.0.0 Server – ‘USER’ Remote Buffer Overflow

# Exploit Title: KnFTP 1.0.0 Server - Remote Buffer Overflow Exploit,'USER' command

2011-09-19 mr.pr0n remote

Cisco TelePresence SOS-11-010 – Multiple Vulnerabilities

Sense of Security - Security Advisory - SOS-11-010

2011-09-19 Sense of Security webapps

Multiple WordPress Plugins – ‘timthumb.php’ File Upload

# Exploit Title: Multiple Wordpress timthumb.php reuse vulnerabilities

2011-09-19 Ben Schmidt webapps

Toko Lite CMS 1.5.2 – HTTP Response Splitting / Cross-Site Scripting

source: https://www.securityfocus.com/bid/49673/info

2011-09-19 Gjoko Krstic webapps

Aspgwy Access 1.0 – ‘matchword’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49674/info

2011-09-19 kurdish hackers team webapps

net4visions (Multiple Products) – ‘dir’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49675/info

2011-09-19 Gjoko Krstic webapps

Apple Mac OSX (Lion) – Directory Services Security Bypass

source: https://www.securityfocus.com/bid/49676/info

2011-09-19 Defence in Depth local

Card sharj 1.0 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/49677/info

2011-09-19 Net.Edit0r webapps

DaqFactory – HMI NETB Request Overflow (Metasploit)

##

2011-09-18 Metasploit remote

KnFTP 1.0.0 Server – Multiple Buffer Overflows (PoC) (SEH)

#!/usr/bin/python

2011-09-18 loneferret dos

WordPress Plugin Count per Day 2.17 – SQL Injection

# Exploit Title: WordPress Count per Day plugin

2011-09-18 Miroslav Stampar webapps

ASP Basit Haber Script 1.0 – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/49667/info

2011-09-18 m3rciL3Ss webapps

phpRS 2.8.1 – Multiple SQL Injections / Cross-Site Scripting

source: https://www.securityfocus.com/bid/49729/info

2011-09-18 iM4n webapps

RealNetworks Realplayer – QCP Parsing Heap Overflow (Metasploit)

##

2011-09-17 Metasploit remote

iBrowser Plugin 1.4.1 – ‘lang’ Local File Inclusion

iBrowser Plugin v1.4.1 (lang) Local File Inclusion Vulnerability

2011-09-17 LiquidWorm webapps

iManager Plugin 1.2.8 – ‘lang’ Local File Inclusion

iManager Plugin v1.2.8 (lang) Local File Inclusion Vulnerability

2011-09-17 LiquidWorm webapps