Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 380

DmxReady Faqs Manager 1.2 – SQL Injection

# Exploit Title: DmxReady Faqs Manager v1.2 SQL Injection Vulnerability

2011-07-03 Bellatrix webapps

DmxReady Bilboard 1.2 – SQL Injection

# Exploit Title: DmxReady Bilboard v1.2 SQL Injection Vulnerability

2011-07-03 Bellatrix webapps

DmxReady Document Library Manager 1.2 – SQL Injection

# Exploit Title: DmxReady Document Library Manager v1.2 SQL Injection

2011-07-03 Bellatrix webapps

eTAWASOL – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/48561/info

2011-07-03 Bl4ck.Viper webapps

HP Data Protector 6.11 – Remote Buffer Overflow (DEP Bypass)

#!/usr/bin/python

2011-07-02 muts & dookie remote

Paliz Portal – Cross-Site Scripting / Multiple SQL Injections

source: https://www.securityfocus.com/bid/48559/info

2011-07-02 Net.Edit0r webapps

Joomla! Component mDigg 2.2.8 – SQL Injection

=====================================================================

2011-07-01 Caddy Dz webapps

WordPress Core 3.1.3 – SQL Injection

SEC Consult Vulnerability Lab Security Advisory < 20110701-0 >

2011-07-01 SEC Consult webapps

Ollance Member Login Script – Multiple Vulnerabilities

# Exploit Title: Ollance login script Multiple Vulnerabilities

2011-07-01 $#4d0\/\/[r007k17] webapps

HP – ‘OmniInet.exe’ Opcode 27 Buffer Overflow (Metasploit)

##

2011-07-01 Metasploit remote

NetBSD 5.1 – ‘libc/net’ Multiple Stack Buffer Overflows

// source: https://www.securityfocus.com/bid/48528/info

2011-07-01 Maksymilian Arciemowicz remote

Kaillera – Multiple Clients Buffer Overflow Vulnerabilities

#!/usr/bin/perl

2011-06-30 Sil3nt_Dre4m remote

HP Data Protector 6.20 – EXEC_CMD Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE-----

2011-06-30 Core Security dos

FreeBSD OpenSSH 3.5p1 – Remote Command Execution

OpenSSH 3.5p1 Remote Root Exploit for FreeBSD

2011-06-30 kingcope remote

Rhythmbox – ‘.m3u’ Local Crash (PoC)

####

2011-06-30 Caddy-Dz dos

IBM DB2 – ‘DT_RPATH’ Insecure Library Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/48514/info

2011-06-30 Tim Brown remote

HP Data Protector 6.20 – Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----

2011-06-29 Core Security dos

Valve Steam Client Application 1559/1559 – Local Privilege Escalation

Valve Steam Client Application v1559/1559 Local Privilege Escalation

2011-06-29 LiquidWorm local

rgboard 4.2.1 – SQL Injection

http://[target]/list.php?bbs_code=notice[SQL]

2011-06-28 hamt0ry webapps

Joomla! 1.6.3 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48471/info

2011-06-28 Aung Khant webapps

RealityServer Web Services RTMP Server 3.1.1 build 144525.5 – Null Pointer Dereference Denial of Service

source: https://www.securityfocus.com/bid/48476/info

2011-06-28 Luigi Auriemma dos

Flatpress 0.1010.1 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48482/info

2011-06-28 High-Tech Bridge SA webapps

CygniCon CyViewer – ActiveX Control ‘SaveData()’ Insecure Method

source: https://www.securityfocus.com/bid/48483/info

2011-06-28 High-Tech Bridge SA remote

Atlassian JIRA 3.13.5 – File Download Security Bypass

source: https://www.securityfocus.com/bid/48484/info

2011-06-28 Ignacio Garrido remote

SmallFTPd 1.0.3 – Denial of Service

# Exploit Title: smallFTPD Connection Saturation Remote Denial of Service

2011-06-27 Myo Soe dos

Citrix Provisioning Services 5.6 – ‘streamprocess.exe’ Remote Buffer Overflow (Metasploit)

##

2011-06-27 Metasploit remote

Joomla! Component com_morfeoshow – ‘idm’ SQL Injection

source: https://www.securityfocus.com/bid/48452/info

2011-06-27 Th3.xin0x webapps

Mambo 4.6.x – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48455/info

2011-06-27 Aung Khant webapps

Ubisoft CoGSManager ActiveX Control 1.0.0.23 – ‘Initialize()’ Method Stack Buffer Overflow

source: https://www.securityfocus.com/bid/48462/info

2011-06-27 Luigi Auriemma remote

Sybase Advantage Server 10.0.0.3 – ‘ADS’ Process Off-by-One Buffer Overflow

source: https://www.securityfocus.com/bid/48464/info

2011-06-27 Luigi Auriemma remote

MySQLDriverCS 4.0.1 – SQL Injection

source: https://www.securityfocus.com/bid/48466/info

2011-06-27 Qihan Luo remote

WordPress Plugin Pretty Link Lite 1.4.56 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/48469/info

2011-06-27 MaKyOtOx webapps

Microsoft Visio – ‘VISIODWG.dll .DXF’ File Handling (MS10-028) (Metasploit)

##

2011-06-26 Metasploit local

Joomla! Component JoomlaXi – Persistent Cross-Site Scripting

1.JoomlaXi persistent XSS vulnerabilty

2011-06-26 Karthik R webapps

WordPress Plugin Beer Recipes 1.0 – Cross-Site Scripting

# Exploit Title: Wordpress - Beer Recipes v.1.0 XSS

2011-06-26 TheUzuki.' webapps

Siemens FactoryLink 8 – CSService Logging Path Parameter Buffer Overflow (Metasploit)

##

2011-06-25 Metasploit remote

FreeAmp 2.0.7 – ‘.pls’ Local Buffer Overflow

#!/usr/bin/python

2011-06-24 C4SS!0 G0M3S local

xAurora 10.00 – ‘RSRC32.dll’ DLL Loading Arbitrary Code Execution

source: https://www.securityfocus.com/bid/48432/info

2011-06-24 Zer0 Thunder remote

AzeoTech DaqFactory – Denial of Service

source: https://www.securityfocus.com/bid/48955/info

2011-06-24 Knud Erik Hojgaard dos

BrewBlogger 2.3.2 – Multiple Vulnerabilities

BrewBlogger 2.3.2 multiple security vulnerabilities

2011-06-23 Brendan Coles webapps

iSupport 1.8 – SQL Injection

iSupport 1.8 SQL Injection Vulnerability

2011-06-23 Brendan Coles webapps

ManageEngine ServiceDesk Plus 8.0 – Directory Traversal

Google Dork: ie: intitle:ManageEngine ServiceDesk Plus"

2011-06-23 Keith Lee webapps

IBM Web Application Firewall – Bypass

Trustwave's SpiderLabs Security Advisory TWSL2011-006:

2011-06-23 Trustwave's SpiderLabs remote

FreeAmp 2.0.7 – ‘.fat’ Local Buffer Overflow

# Exploit Title: FreeAmp 2.0.7 .fat Buffer Overflow

2011-06-23 Iván García Ferreira local

ManageEngine Support Center Plus 7.8 Build 7801 – Directory Traversal

Advisory:

2011-06-23 xistence webapps

ActivDesk 3.0 – Multiple Vulnerabilities

ActivDesk 3.0 multiple security vulnerabilities

2011-06-23 Brendan Coles webapps

Webcat – Multiple Blind SQL Injections

# Exploit Title: Webcat - Two Blind SQL Injection Vulnerabilities

2011-06-23 w0rd webapps

2Point Solutions – ‘cmspages.php’ SQL Injection

=============================================

2011-06-23 Newbie Campuz webapps

nodesforum 1.059 – Remote File Inclusion

# Exploit Title: nodesforum 1.059 Remote File Inclusion Vulnerability

2011-06-23 bd0rk webapps

Lotus Notes 8.0.x < 8.5.2 FP2 - Autonomy Keyview ('.lzh' Attachment) (Metasploit)

##

2011-06-23 Metasploit remote