Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 378

vBulletin 4.0.x 4.1.3 – ‘messagegroupid’ SQL Injection

# Exploit Title: Vbulletin 4.0.x => 4.1.3 (messagegroupid) SQL injection Vulnerability 0-day

2011-07-21 fb1h2s webapps

Joomla! Component JE Story Submit – Local File Inclusion

#!/usr/bin/perl -w

2011-07-21 v3n0m webapps

Joomla! Component mod_spo – SQL Injection

# Exploit Title: Simple Page Option LFI

2011-07-21 SeguridadBlanca webapps

Dell IT Assistant – detectIESettingsForITA.ocx ActiveX Control

2011-07-21 rgod remote

Synergy Software – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/48835/info

2011-07-21 Ehsan_Hp200 webapps

Oracle Sun GlassFish Enterprise Server – Persistent Cross-Site Scripting

Sense of Security - Security Advisory - SOS-11-009

2011-07-20 Sense of Security webapps

Joomla! Component com_rsappt_pro2 – Local File Inclusion

Appointment Booking Pro is a native Joomla component

2011-07-20 Don Tukulesto webapps

Joomla! < 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48805/info

2011-07-20 YGN Ethical Hacker Group webapps

Tiki Wiki CMS Groupware 7.2 – ‘snarf_ajax.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48806/info

2011-07-20 High-Tech Bridge SA webapps

Cyberoam UTM – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48814/info

2011-07-20 Patrick Webster webapps

Freefloat FTP Server – ‘REST’ Remote Buffer Overflow (Metasploit)

##

2011-07-19 KaHPeSeSe remote

Lotus Domino SMTP Router & Email Server and Client – Denial of Service

# Exploit Title: Lotus Domino SMTP router, EMAIL server and client DoS - all 3 may crash

2011-07-19 anonymous dos

Freefloat FTP Server 1.0 – ‘ACCL’ Remote Buffer Overflow

#!/usr/bin/python

2011-07-19 mortis remote

Freefloat FTP Server – ‘MKD’ Remote Buffer Overflow (Metasploit)

##

2011-07-18 James Fitts remote

GDI+ – ‘gdiplus.dll’ CreateDashedPath Integer Overflow

Abysssec Research

2011-07-18 Abysssec dos

Freefloat FTP Server 1.0 – ‘REST’ / ‘PASV’ Remote Buffer Overflow

#!/usr/bin/python

2011-07-18 C4SS!0 G0M3S remote

BlueSoft (Multiple Products) – Multiple SQL Injections

source: https://www.securityfocus.com/bid/48703/info

2011-07-18 Lazmania61 webapps

Iskratel SI2000 Callisto 821+ – Cross-Site Request Forgery / HTML Injection

source: https://www.securityfocus.com/bid/48711/info

2011-07-18 MustLive remote

Freefloat FTP Server 1.0 – ‘MKD’ Remote Buffer Overflow

#!/usr/bin/ruby

2011-07-17 C4SS!0 G0M3S remote

Iconics GENESIS32 9.21.201.01 – Integer Overflow (Metasploit)

##

2011-07-17 Metasploit remote

BlueSoft Social Networking CMS – SQL Injection

source: https://www.securityfocus.com/bid/48707/info

2011-07-17 Lazmania61 webapps

HP OpenView Network Node Manager (OV NNM) – ‘Toolbar.exe’ CGI Cookie Handling Buffer Overflow (Metasploit)

##

2011-07-16 Metasploit remote

Java RMI – Server Insecure Default Configuration Java Code Execution (Metasploit)

##

2011-07-15 Metasploit remote

Auto Web Toolbox – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/48683/info

2011-07-15 Lazmania61 webapps

Easy Estate Rental – ‘s_location’ SQL Injection

source: https://www.securityfocus.com/bid/48684/info

2011-07-15 Lazmania61 webapps

Joomla! Component Foto – ‘id_categoria’ SQL Injection

source: https://www.securityfocus.com/bid/48685/info

2011-07-15 SOLVER webapps

Joomla! Component Juicy Gallery – ‘picId’ SQL Injection

source: https://www.securityfocus.com/bid/48688/info

2011-07-15 SOLVER webapps

Joomla! Component com_hospital – SQL Injection

source: https://www.securityfocus.com/bid/48689/info

2011-07-15 SOLVER webapps

Joomla! Component Controller – ‘Itemid’ SQL Injection

source: https://www.securityfocus.com/bid/48690/info

2011-07-15 SOLVER webapps

Joomla! Component com_newssearch – SQL Injection

source: https://www.securityfocus.com/bid/48698/info

2011-07-15 Robert Cooper webapps

AJ Classifieds – ‘listingid’ SQL Injection

source: https://www.securityfocus.com/bid/48702/info

2011-07-15 Lazmania61 webapps

Joomla! Component com_sobi2 2.9.3.2 – Blind SQL Injections

# Exploit Title: SOBI2 2.9.3.2 Joomla! Component Blind SQL Injections

2011-07-14 jdc webapps

PG eLms Pro vDEC_2007_01 – ‘contact_us.php’ Multiple POST Cross-Site Scripting Vulnerabilities

PG eLMS Pro vDEC_2007_01 (contact_us.php) Multiple POST XSS Vulnerabilities

2011-07-14 LiquidWorm webapps

PG eLms Pro vDEC_2007_01 – Multiple Blind SQL Injections

PG eLMS Pro vDEC_2007_01 Multiple Blind SQL Injection Vulnerabilities

2011-07-14 LiquidWorm webapps

Inscribe Webmedia – SQL Injection

Inscribe Webmedia SQL Injection

2011-07-14 Netrondoank webapps

LiteRadius 3.2 – Multiple Blind SQL Injections

# Exploit Title: LiteRadius

2011-07-13 Robert Cooper webapps

TCExam 11.2.011 – Multiple SQL Injections

TCExam

2011-07-13 LiquidWorm webapps

TCExam 11.2.x – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48669/info

2011-07-13 Gjoko Krstic webapps

Chyrp 2.x – ‘/admin/help.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48672/info

2011-07-13 Wireghoul webapps

Chyrp 2.x – ‘/includes/JavaScript.php?action’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48672/info

2011-07-13 Wireghoul webapps

Fire Soft Board 2.0.1 – Persistent Cross-Site Scripting (Admin Panel)

# Exploit Title: Fire Soft Board popup with your cookies :-)

2011-07-12 _jill for A-S webapps

Tradingeye E-Commerce Shopping Cart – Multiple Vulnerabilities

# Exploit Title: Tradingeye Multiple Vulnerabilities

2011-07-12 $#4d0\/\/[r007k17] webapps

Pandora Fms 3.2.1 – Cross-Site Request Forgery

# Exploit Title: Pandora FMS v3.2.1 Cross Site Request Forgery

2011-07-12 mehdi boukazoula webapps

Joomla! Component com_xmap 1.2.11 – Blind SQL Injection

# Exploit Title: Xmap 1.2.11 Joomla Component Blind SQL Injection

2011-07-12 jdc webapps

Solar FTP Server 2.1.1 – PASV Buffer Overflow

#!/usr/bin/python

2011-07-12 Craig Freyman remote

Alice Modem 1111 – ‘rulename’ Cross-Site Scripting / Denial of Service

source: https://www.securityfocus.com/bid/48642/info

2011-07-12 Moritz Naumann dos

Sphider 1.3.x – Admin Panel Multiple SQL Injections

source: https://www.securityfocus.com/bid/48647/info

2011-07-12 Karthik R webapps

Flowplayer 3.2.7 – ‘linkUrl’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48651/info

2011-07-12 Szymon Gruszecki webapps

Prontus CMS – ‘page’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48637/info

2011-07-11 Zerial webapps

ICMusic 1.2 – ‘music_id’ SQL Injection

source: https://www.securityfocus.com/bid/48639/info

2011-07-11 kaMtiEz webapps