Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 382

Microsoft Office XP – Remote code Execution

#####################################################################################

2011-06-14 Francis Provencher dos

Conky Linux 1.8.0 – Local Denial of Service (PoC)

#include

2011-06-14 Arturo D'Elia dos

Microsoft HyperV – Persistent Denial of Service (MS11-047)

Core Security Technologies - Corelabs Advisory

2011-06-14 Core Security dos

PHP 5.3.6 – Security Bypass

source: https://www.securityfocus.com/bid/48259/info

2011-06-14 Krzysztof Kotowicz remote

Opera Web Browser 11.11 – Denial of Service

source: https://www.securityfocus.com/bid/48262/info

2011-06-14 echo dos

vBTube 1.2.9 – ‘vBTube.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48280/info

2011-06-14 Mr.ThieF webapps

MPlayer – ‘.SAMI’ Subtitle File Buffer Overflow (DEP Bypass) (Metasploit)

require 'msf/core'

2011-06-14 James Fitts local

Oracle HTTP Server – Cross-Site Scripting Header Injection

---------------------------------------------------------------------------------------------------------

2011-06-13 Yasser ABOUKIR webapps

Joomla! Component Scriptegrator 1.5 – Local File Inclusion

# Exploit Title: Scriptegrator plugin for Joomla! 1.5 0day File Inclusion

2011-06-13 jdc webapps

Joomla! Component Minitek FAQ Book 1.3 – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/48223/info

2011-06-13 kaMtiEz webapps

Microsoft Windows XP – ‘tskill’ Local Privilege Escalation

@echo off

2011-06-13 Todor Donev local

WebFileExplorer 3.6 – ‘user’ / ‘pass’ SQL Injection

source: https://www.securityfocus.com/bid/48233/info

2011-06-13 pentesters.ir webapps

Microsoft Lync Server 2010 – ‘ReachJoin.aspx’ Remote Command Injection

source: https://www.securityfocus.com/bid/48235/info

2011-06-13 Mark Lachniet webapps

PHP-Nuke 8.3 – ‘upload.php’ Arbitrary File Upload (1)

source: https://www.securityfocus.com/bid/48257/info

2011-06-13 pentesters.ir webapps

PHP-Nuke 8.3 – ‘upload.php’ Arbitrary File Upload (2)

source: https://www.securityfocus.com/bid/48257/info

2011-06-13 pentesters.ir webapps

IBM Tivoli Endpoint Manager – POST Query Buffer Overflow (Metasploit)

##

2011-06-12 Metasploit remote

The KMPlayer 3.0.0.1440 (Windows 7) – ‘.mp3’ Local Buffer Overflow (ASLR Bypass)

#!/usr/bin/python

2011-06-11 xsploitedsec local

UUSEE ActiveX < 6.11.0412.1 - Buffer Overflow

Exploit Title：UUSEE ActiveX

2011-06-11 huimaozi dos

Trend Micro Data Loss Prevention Virtual Appliance 5.5 – Directory Traversal

Software: Trend Micro Data Loss Prevention Virtual Appliance 5.5

2011-06-11 White Hat Consultores webapps

Technote 7.2 – Blind SQL Injection

# Exploit Title: technote blind sql injection

2011-06-11 BlueH4G webapps

SUBRION CMS – Multiple Vulnerabilities

1.SUBRION CMS multiple vulnerabilties

2011-06-11 Karthik R webapps

Linux Kernel 2.6.28/3.0 (DEC Alpha Linux) – Local Privilege Escalation

close(fd);

2011-06-11 Dan Rosenberg local

Pacer Edition CMS 2.1 – ‘rm’ Arbitrary File Deletion

#!/usr/bin/python

2011-06-10 LiquidWorm webapps

Pacer Edition CMS 2.1 – ‘l’ Local File Inclusion

Pacer Edition CMS 2.1 (l param) Local File Inclusion Vulnerability

2011-06-10 LiquidWorm webapps

Angora Guestbook 1.5 – Local File Inclusion

------------------------------------------------------------------------

2011-06-10 AutoSec Tools webapps

Simple Web Server 1.2 – Directory Traversal

------------------------------------------------------------------------

2011-06-10 AutoSec Tools remote

Tele Data Contact Management Server – Directory Traversal

------------------------------------------------------------------------

2011-06-10 AutoSec Tools webapps

Tolinet Agencia – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/48217/info

2011-06-10 Andrea Bocchetti webapps

7-Technologies IGSS 9 – IGSSdataServer .Rms Rename Buffer Overflow (Metasploit)

##

2011-06-09 Metasploit remote

EquiPCS – SQL Injection

============================================================

2011-06-09 Sideswipe webapps

Aastra IP Phone 9480i – Web Interface Data Disclosure

# _ ____ __ __ ___

2011-06-09 Yakir Wizman webapps

Polycom IP Phone – Web Interface Data Disclosure

# _ ____ __ __ ___

2011-06-09 Yakir Wizman webapps

VideoLAN VLC Media Player 1.1.9 – XSPF Playlist Local File Integer Overflow

TITLE

2011-06-08 TecR0c dos

ActFax Server FTP – (Authenticated) Remote Buffer Overflow

#!/usr/bin/python

2011-06-08 b33f remote

WordPress Plugin GD Star Rating – ‘votes’ SQL Injection

source: https://www.securityfocus.com/bid/48166/info

2011-06-08 anonymous webapps

Perl Data::FormValidator 4.66 Module – ‘results()’ Security Bypass

source: https://www.securityfocus.com/bid/48167/info

2011-06-08 dst remote

IBM Tivoli Endpoint 4.1.1 – Remote SYSTEM

#!/usr/bin/python

2011-06-07 Jeremy Brown remote

Dataface – Local File Inclusion

//==========================================================================

2011-06-07 ITSecTeam webapps

Xataface 1.x – ‘action’ Local File Inclusion

source: https://www.securityfocus.com/bid/48126/info

2011-06-07 ITSecTeam webapps

Blog:CMS 4.2 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48132/info

2011-06-07 Stefan Schurtz webapps

The Pacer Edition CMS 2.1 – ’email’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48215/info

2011-06-07 LiquidWorm webapps

1ClickUnzip 3.00 – ‘.zip’ Heap Overflow

#!/usr/bin/perl

2011-06-06 C4SS!0 G0M3S dos

The KMPlayer 3.0.0.1440 (Windows XP SP3) – ‘.mp3’ File Buffer Overflow (DEP Bypass)

#!/usr/bin/python

2011-06-06 dookie & ronin local

Cisco AnyConnect VPN Client – ActiveX URL Property Download and Execute (Metasploit)

##

2011-06-06 Metasploit remote

vBulletin vBExperience 3 – ‘sortorder’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48106/info

2011-06-06 Mr.ThieF webapps

Joomla! Component CCBoard – SQL Injection / Arbitrary File Upload

source: https://www.securityfocus.com/bid/48108/info

2011-06-06 KedAns-Dz webapps

Nakid CMS 1.0.2 – ‘CKEditorFuncNum’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48109/info

2011-06-06 AutoSec Tools webapps

Multiple WordPress WooThemes Themes – ‘test.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48110/info

2011-06-06 MustLive webapps

PopScript – ‘index.php’ Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/48113/info

2011-06-06 NassRawI webapps

Squiz Matrix 4 – ‘colour_picker.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48118/info

2011-06-06 Patrick Webster webapps