Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 385

allocPSA 1.7.4 – ‘/login/login.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47860/info

2011-05-16 AutoSec Tools webapps

openQRM 4.8 – ‘source_tab’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47865/info

2011-05-16 AutoSec Tools webapps

eFront 3.6.9 – ‘scripts.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/47870/info

2011-05-16 AutoSec Tools webapps

Mitel Audio and Web Conferencing 4.4.3.0 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47874/info

2011-05-16 Richard Brain webapps

eFront 3.6.9 – ‘submitScore.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47877/info

2011-05-16 John Leitch webapps

Winamp 5.61 – ‘in_midi’ Component heap Overflow (crash only)

# Exploit Title: Winamp 'in_midi' component heap overflow

2011-05-15 Alexander Gavrun dos

Joomla! Component com_question – SQL Injection

###################################################

2011-05-15 NeX HaCkEr webapps

frame-oshop – SQL Injection

product: frame-oshop

2011-05-15 -SmoG- webapps

WordPress Plugin EditorMonkey 2.5 – ‘FCKeditor’ Arbitrary File Upload

#############################################################################################################

2011-05-14 kaMtiEz webapps

osCommerce 2.3.1 – ‘banner_manager.php’ Arbitrary File Upload

# Exploit Title: [OSC 2.3.1: Remote File Upload Vulnerability : Banner Manager]

2011-05-14 Number 7 webapps

A-PDF Wav to MP3 Converter 1.2.0 – DEP Bypass

# Exploit Title: A-PDF Wav to MP3 Converter v 1.2.0 DEP Bypass

2011-05-13 h1ch4m local

Adobe Audition 3.0 build 7283 – Session File Handling Buffer Overflow (PoC)

#!/usr/bin/perl

2011-05-13 LiquidWorm dos

DreamBox DM500(+) – Arbitrary File Download

DreamBox DM500(+) Arbitrary File Download Vulnerability

2011-05-13 LiquidWorm remote

Flash Tag Cloud And MT-Cumulus Plugin – ‘tagcloud’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47845/info

2011-05-13 MustLive webapps

Symantec Backup Exec System Recovery 8.5 – Kernel Pointers Dereferences

#include

2011-05-12 Stefan LE BERRE dos

SlimPDF Reader – Denial of Service (PoC)

Slimpdf Reader from investintech,

2011-05-12 Nicolas Krassas dos

A-PDF All to MP3 Converter 2.0.0 – DEP Bypass

# Exploit Title: A-PDF All to MP3 Converter v.2.0.0 DEP Bypass

2011-05-12 h1ch4m local

Oracle GlassFish Server – Administration Console Authentication Bypass

Oracle GlassFish Server Administration Console Authentication Bypass

2011-05-12 Core Security webapps

Apache 1.4/2.2.x – APR ‘apr_fnmatch()’ Denial of Service

source: https://www.securityfocus.com/bid/47820/info

2011-05-12 Maksymilian Arciemowicz dos

Argyle Social – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47826/info

2011-05-12 High-Tech Bridge SA webapps

DocMGR 1.1.2 – ‘history.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47861/info

2011-05-12 AutoSec Tools webapps

SPlayer 3.7 – Content-Type Buffer Overflow (Metasploit)

##

2011-05-11 Metasploit remote

Chasys Media Player 2.0 – Local Buffer Overflow (SEH)

# Exploit Title: Chasys Media Player Buffer Overflow Exploit(SEH)

2011-05-11 h1ch4m local

showoff! digital media software 1.5.4 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/13598/info

2011-05-11 dr_insane webapps

serva32 1.2.00 rc1 – Multiple Vulnerabilities

# ------------------------------------------------------------------------

2011-05-10 AutoSec Tools dos

Traidnt UP 2.0 – ‘view.php’ SQL Injection

###################################################

2011-05-10 ScOrPiOn webapps

ICONICS WebHMI – ActiveX Buffer Overflow (Metasploit)

##

2011-05-10 Metasploit remote

Apache Struts 2.0.0 < 2.2.1.1 - XWork 's:submit' HTML Tag Cross-Site Scripting

source: https://www.securityfocus.com/bid/47784/info

2011-05-10 Dr. Marian Ventuneac remote

poMMo Aardvark PR16.1 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47786/info

2011-05-10 High-Tech Bridge SA webapps

Calendarix 0.8.20080808 – Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/47790/info

2011-05-10 High-Tech Bridge SA webapps

Joomla! Component com_versioning – SQL Injection

#[~] Author : the_cyber_nuxbie

2011-05-09 the_cyber_nuxbie webapps

Joomla! Component com_hello – SQL Injection

Author : g3mbeLz_YCL

2011-05-09 the_cyber_nuxbie webapps

BlueVoda Website Builder 11 – ‘.bvp’ Local Stack Buffer Overflow

source: https://www.securityfocus.com/bid/47753/info

2011-05-09 KedAns-Dz local