Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 386

WordPress Plugin WP Ajax Calendar 1.0 – ‘example.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47726/info

2011-05-05 High-Tech Bridge SA webapps

PHP Directory Listing Script 3.1 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47727/info

2011-05-05 High-Tech Bridge SA webapps

BMC Remedy Knowledge Management 7.5.00 – Default Account / Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47728/info

2011-05-05 Richard Brain webapps

BMC Dashboards 7.6.01 – Cross-Site Scripting / Information Disclosure

source: https://www.securityfocus.com/bid/47731/info

2011-05-05 Richard Brain webapps

PHPDug 2.0 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47733/info

2011-05-05 High-Tech Bridge SA webapps

Sothink DHTML Menu – SQL Injection

=====================================================================

2011-05-04 Caddy-Dz webapps

SPlayer 3.7 (build 2055) – Remote Buffer Overflow

#!/usr/bin/python

2011-05-04 xsploitedsec remote

ZyWALL USG Appliance – Multiple Vulnerabilities

Advisory: Authentication Bypass in Configuration Import and Export of

2011-05-04 RedTeam Pentesting remote

sipdroid 2.2 – SIP INVITE Response User Enumeration

source: https://www.securityfocus.com/bid/47710/info

2011-05-04 Anibal Vaz Marques remote

Horizon Web Builder – ‘fshow.php’ SQL Injection

# Exploit Title: Horizon SQLi

2011-05-03 Iolo Morganwg webapps

Front Accounting 2.3.4 – Cross-Site Request Forgery

# Software................Front Accounting 2.3.4

2011-05-03 AutoSec Tools webapps

Time and Expense Management System – Multiple Vulnerabilities

# ------------------------------------------------------------------------

2011-05-03 AutoSec Tools webapps

ICONICS WebHMI – ActiveX Stack Overflow

( , ) (,

2011-05-03 sgb & bls remote

Web Auction 0.3.6 – ‘lang’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47682/info

2011-05-03 AutoSec Tools webapps

Proofpoint Protection Server 5.5.5 – ‘process.cgi’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47687/info

2011-05-03 Karan Khosla webapps

E2 Photo Gallery 0.9 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47697/info

2011-05-03 High-Tech Bridge SA webapps

YaPiG 0.95 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47698/info

2011-05-03 High-Tech Bridge SA webapps

SelectaPix 1.4.1 – ‘uploadername’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47701/info

2011-05-03 High-Tech Bridge SA webapps

GoT.MY (Multiple Products) – ‘theme_dir’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47702/info

2011-05-03 Hector.x90 webapps

Perl 5.10 – Multiple Null Pointer Dereference Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/47766/info

2011-05-03 Jonathan Brossard dos

Parnian Opendata CMS – SQL Injection

###########################################################################

2011-05-02 Alexander webapps

Exponent CMS 2.0 Beta 1.1 – Cross-Site Request Forgery (Add Administrator Account)

Exponent CMS 2.0 Beta 1.1 CSRF Add Administrator Account PoC by outlaw.dll

2011-05-02 outlaw.dll webapps

Travel411 – SQL Injection

=====================================================================

2011-05-02 Caddy-Dz webapps

LANSA aXes Web Terminal TN5250 – ‘axes_default.css’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47672/info

2011-05-02 Patrick Webster webapps

LDAP Account Manager 3.4.0 – ‘selfserviceSaveOk’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47674/info

2011-05-02 AutoSec Tools webapps

Asterisk 1.8.x – SIP INVITE Request User Enumeration

source: https://www.securityfocus.com/bid/47676/info

2011-05-02 Francesco Tornieri remote

OpenMyZip 0.1 – ‘.zip’ Remote Buffer Overflow

source: https://www.securityfocus.com/bid/47678/info

2011-05-02 C4SS!0 G0M3S remote

TCExam 11.1.29 – ‘tce_xml_user_results.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/47762/info

2011-05-01 AutoSec Tools webapps

MJM QuickPlayer 1.00 Beta 60a / QuickPlayer 2010 – ‘.s3m’ Local Stack Buffer Overflow (Metasploit)

##

2011-04-30 Metasploit local

MJM Core Player 2011 – ‘.s3m’ Local Stack Buffer Overflow (Metasploit)

##

2011-04-30 Metasploit local

Tine 2.0 – ‘vbook.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47669/info

2011-04-30 AutoSec Tools webapps

phpGraphy 0.9.13b – Multiple Vulnerabilities

=====================================

2011-04-29 High-Tech Bridge SA webapps

Microsoft Excel – Axis Properties Record Parsing Buffer Overflow (PoC) (MS11-02)

"""

2011-04-29 webDEViL dos

SOOP Portal Raven 1.0b – SQL Injection

# Exploit Title: SOOP Portal Raven 1.0b sql injection

2011-04-29 Evil-Thinker webapps

OProfile 0.9.6 – ‘opcontrol’ Utility ‘set_event()’ Local Privilege Escalation

source: https://www.securityfocus.com/bid/47652/info

2011-04-29 Stephane Chauveau local

eyeos 1.9.0.2 – Persistent Cross-Site Scripting Using Image Files

Title: eyeOS

2011-04-28 Alberto Ortega webapps

kusaba x 0.9.1 – Multiple Vulnerabilities

#######################################################

2011-04-28 Emilio Pinna webapps

Libmodplug 0.8.8.2 – ‘.abc’ Stack Buffer Overflow (PoC)

#include

2011-04-28 epiphant dos

NetOp Remote Control 8.0/9.1/9.2/9.5 – Local Buffer Overflow

# Exploit Title: NetOp Remote Control Buffer Overflow

2011-04-28 chap0 local

Subtitle Processor 7.7.1 – ‘.m3u’ File Buffer Overflow (SEH Unicode) (Metasploit)

##

2011-04-28 Metasploit local

WordPress Plugin Daily Maui Photo Widget 0.2 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47620/info

2011-04-28 High-Tech Bridge SA webapps

WordPress Plugin WP Photo Album 1.5.1 – ‘id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47622/info

2011-04-28 High-Tech Bridge SA webapps

BackupPC 3.x – ‘index.cgi’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47628/info

2011-04-28 High-Tech Bridge SA webapps

phpGraphy 0.9.13b – ‘theme_dir’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47634/info

2011-04-28 High-Tech Bridge SA webapps

ClanSphere 2011.0 – Local File Inclusion / Arbitrary File Upload

source: https://www.securityfocus.com/bid/47636/info

2011-04-28 KedAns-Dz webapps

Subtitle Processor 7.7.1 – Local Buffer Overflow (SEH Unicode)

#!/usr/bin/python

2011-04-27 Brandon Murphy local

Symphony CMS 2.1.2 – Blind SQL Injection

--------------------------------------------------------------------------------------------

2011-04-27 Wireghoul webapps

EMC HomeBase Server – Directory Traversal Remote Code Execution (Metasploit)

##

2011-04-27 Metasploit remote

Joostina (Multiple Components) – SQL Injection

source: https://www.securityfocus.com/bid/47595/info

2011-04-27 KedAns-Dz webapps

up.time Software 5 – Administration Interface Remote Authentication Bypass

source: https://www.securityfocus.com/bid/47599/info

2011-04-27 James Burton webapps