Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 384

Joomla! Component com_shop – SQL Injection

source: https://www.securityfocus.com/bid/47971/info

2011-05-25 ThunDEr HeaD webapps

Kryn.cms 0.9 – ‘_kurl’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47973/info

2011-05-25 AutoSec Tools webapps

Vordel Gateway 6.0.3 – Directory Traversal

source: https://www.securityfocus.com/bid/47975/info

2011-05-25 Brian W. Gary remote

RXS-3211 IP Camera – UDP Packet Password Information Disclosure

source: https://www.securityfocus.com/bid/47976/info

2011-05-25 Spare Clock Cycles remote

BlackBoard Learn 8.0 – ‘keywordraw’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48009/info

2011-05-25 Matt Jezorek webapps

phpScheduleIt 1.2.12 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47951/info

2011-05-24 High-Tech Bridge SA webapps

Lumension Security Lumension Device Control 4.x – Memory Corruption

source: https://www.securityfocus.com/bid/47952/info

2011-05-24 Andy Davis remote

Ajax Chat 1.0 – ‘ajax-chat.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47953/info

2011-05-24 High-Tech Bridge SA webapps

Gadu-Gadu Instant Messenger 6.0 – File Transfer Cross-Site Scripting

source: https://www.securityfocus.com/bid/47957/info

2011-05-24 Kacper Szczesniak remote

vBulletin 4.0.x 4.1.2 – ‘search.php’ SQL Injection

====================================================================

2011-05-23 D4rkB1t webapps

PHPortfolio – SQL Injection

# Exploit Title: SQL Injection Vulnerbility in PHP Portfolio

2011-05-23 lionaneesh webapps

VisiWave – ‘.VWR’ File Parsing Trusted Pointer (Metasploit)

##

2011-05-23 Metasploit local

Joomla! Component Map Locator – ‘cid’ SQL Injection

source: https://www.securityfocus.com/bid/47941/info

2011-05-23 FL0RiX webapps

Tugux CMS 1.2 – Multiple Vulnerabilities

Title:

2011-05-22 LiquidWorm webapps

Magix Musik Maker 16 – ‘.mmm’ Local Stack Buffer Overflow (Metasploit)

##

2011-05-22 Metasploit local

E-Manage MySchool 7.02 – SQL Injection

Exploit Title: SQL Injection MySchool Version 7.02

2011-05-21 az7rb webapps

Ultimate PHP Board 2.2.7 – Broken Authentication and Session Management

# Exploit Title : Ultimate PHP Board 2.2.7 "Broken Authentication and Session Management"

2011-05-20 i2sec webapps

Zen Cart 1.3.9h – Multiple Vulnerabilities

[*]==================================================================>

2011-05-20 Dr. Alberto Fontanella webapps

PHP Captcha / Securimage 2.0.2 – Authentication Bypass

Sense of Security - Security Advisory - SOS-11-007

2011-05-20 Sense of Security webapps

Room Juice 0.3.3 – ‘display.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47914/info

2011-05-19 AutoSec Tools webapps

Andy’s PHP KnowledgeBase 0.95.4 – ‘step5.php’ PHP Remote Code Execution

source: https://www.securityfocus.com/bid/47918/info

2011-05-19 AutoSec Tools webapps

Zend Framework 1.11.4 – ‘PDO_MySql’ Security Bypass

source: https://www.securityfocus.com/bid/47919/info

2011-05-19 Anthony Ferrara remote

LimeSurvey 1.85+ – ‘admin.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47931/info

2011-05-19 Juan Manuel Garcia webapps

Joomla! Component jDownloads 1.0 – Arbitrary File Upload

____________________________________________________________________

2011-05-18 Al-Ghamdi webapps

Cisco Unified Operations Manager – Multiple Vulnerabilities

Sense of Security - Security Advisory - SOS-11-006

2011-05-18 Sense of Security remote

Microsoft Windows Vista/2008 – ‘nsiproxy.sys’ Local Kernel Denial of Service

#!/usr/bin/python

2011-05-18 Lufeng Li dos

SpongeBob SquarePants Typing – Local Buffer Overflow (SEH)

# SEH overwrite exploit for SpongeBob SquarePants Typing

2011-05-18 Infant Overflow local

TWiki 5.0.1 – ‘origurl’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47899/info

2011-05-18 Mesut Timur webapps

CiscoWorks Common Services Framework 3.1.1 Help Servlet – Cross-Site Scripting

source: https://www.securityfocus.com/bid/47902/info

2011-05-18 Sense of Security remote

Cisco Unified Operations Manager 8.5 – Common Services Device Center Cross-Site Scripting

source: https://www.securityfocus.com/bid/47903/info

2011-05-18 Sense of Security remote

CiscoWorks Common Services 3.1.1 – Auditing Directory Traversal

source: https://www.securityfocus.com/bid/47905/info

2011-05-18 Sense of Security webapps

klibc 1.5.2 – DHCP Options Processing Remote Shell Command Execution

source: https://www.securityfocus.com/bid/47924/info

2011-05-18 maximilian attems remote

WordPress Plugin Is-human 1.4.2 – Remote Command Execution

# Exploit Title: is-human (1.4.2 and prior) Worpdress plugin.

2011-05-17 neworder webapps

Pligg CMS 1.1.4 – SQL Injection

# Exploit Title: Pligg

2011-05-17 Null-0x00 webapps

Sonique 1.96 – ‘.m3u’ Local Buffer Overflow

#Application: Sonique BOF EIP Overwrite

2011-05-17 sinfulsecurity local

PHP Calendar Basic 2.3 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47887/info

2011-05-17 High-Tech Bridge SA webapps

XtreamerPRO Media-player 2.6.0/2.7.0 – Multiple Vulnerabilities

# Exploit Title: XtreamerPRO Media-player and streamer multiple vulnerabilities

2011-05-16 Itzik Chen remote

Steam Software – Denial of Service

# Exploit Title: Steam Cloud Denial of Service 0day

2011-05-16 david.r.klein dos

MediaInSpot CMS – Local File Inclusion (2)

#Name : Media In Spot LFI Vulnerability

2011-05-16 wlhaan haker webapps

MediaInSpot CMS – SQL Injection

# Exploit Title: Media In Spot SQL Injection

2011-05-16 Iolo Morganwg webapps

CoolPlayer Portable 2.19.2 – Local Buffer Overflow

#CoolPlayer+ Portable Buffer Overflow

2011-05-16 sinfulsecurity local

Vanilla Forum 2.0.17.9 – Local File Inclusion

------------------------------------------------------------------------

2011-05-16 AutoSec Tools webapps

NoticeBoardPro 1.0 – Multiple Vulnerabilities

# ------------------------------------------------------------------------

2011-05-16 AutoSec Tools webapps

Jcow 4.2.1 – Local File Inclusion

------------------------------------------------------------------------

2011-05-16 AutoSec Tools webapps

Novell Netware eDirectory – Denial of Service

nSense Vulnerability Research Security Advisory NSENSE-2011-002

2011-05-16 nSense dos

7-Technologies IGSS 9.00.00 b11063 – ‘IGSSdataServer.exe’ Remote Stack Overflow (Metasploit)

##

2011-05-16 Metasploit remote

AVS Ringtone Maker 1.6.1 – ‘.au’ File Remote Buffer Overflow

source: https://www.securityfocus.com/bid/47851/info

2011-05-16 KedAns-Dz remote

Joomla! Component com_cbcontact – ‘contact_id’ SQL Injection

source: https://www.securityfocus.com/bid/47856/info

2011-05-16 KedAns-Dz webapps

Mambo Component Docman 1.3.0 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/47857/info

2011-05-16 KedAns-Dz webapps

Novell eDirectory 8.8 and Netware LDAP-SSL Daemon – Denial of Service

source: https://www.securityfocus.com/bid/47858/info

2011-05-16 Knud dos