Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 387

Cisco Unified Communications Manager 8.5 – ‘xmldirectorylist.jsp’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/47607/info

2011-04-27 Alberto Revelli webapps

Kusaba X 0.9 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47626/info

2011-04-27 Emilio Pinna webapps

WordPress Plugin SermonBrowser 0.43 – SQL Injection

2011-04-26 Ma3sTr0-Dz webapps

Snom IP Phone Web Interface < 8 - Multiple Vulnerabilities

# _ ____ __ __ ___

2011-04-26 Yakir Wizman webapps

Quick.CMS 3.0 – Cross-Site Request Forgery

#(+) Exploit Title: Quick CMS v3.0 Cross Site Request Forgery (Add Admin User)

2011-04-26 ^Xecuti0N3r webapps

WordPress Plugin Sermon Browser 0.43 – Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/47574/info

2011-04-26 Ma3sTr0-Dz webapps

html-edit CMS 3.1.x – ‘html_output’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47576/info

2011-04-26 KedAns-Dz webapps

Noah’s Classifieds 5.0.4 – ‘index.php’ Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/47578/info

2011-04-26 High-Tech Bridge SA webapps

WordPress Plugin WP Ajax Recent Posts 1.0.1 – ‘do’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47579/info

2011-04-26 High-Tech Bridge SA webapps

phpList 2.10.x – ’email’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47580/info

2011-04-26 High-Tech Bridge SA webapps

PHP F1 Max’s Photo Album – ‘showimage.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47582/info

2011-04-26 High-Tech Bridge SA webapps

Football Website Manager 1.1 – SQL Injection / Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/47593/info

2011-04-26 RoAd_KiLlEr webapps

eZip Wizard 3.0 – Local Stack Buffer Overflow (Metasploit)

##

2011-04-25 Metasploit local

mySeatXT 0.1781 – SQL Injection

------------------------------------------------------------------------

2011-04-25 AutoSec Tools webapps

OrangeHRM 2.6.3 – ‘PluginController.php’ Local File Inclusion

------------------------------------------------------------------------

2011-04-25 AutoSec Tools webapps

phpmychat plus 1.93 – Multiple Vulnerabilities

------------------------------------------------------------------------

2011-04-25 AutoSec Tools webapps

AT-TFTP Server 1.8 – ‘Read’ Request Remote Denial of Service

source: https://www.securityfocus.com/bid/47561/info

2011-04-25 Antu Sanadi dos

TemaTres 1.3 – ‘_search_expresion’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47569/info

2011-04-25 AutoSec Tools webapps

eXPert PDF 7.0.880.0 – ‘.pj’ Heap Buffer Overflow

source: https://www.securityfocus.com/bid/47571/info

2011-04-25 KedAns-Dz dos

eyeOS 1.9.0.2 – Image File Handling HTML Injection

source: https://www.securityfocus.com/bid/47629/info

2011-04-25 Alberto Ortega webapps

SoftMP3 – SQL Injection

# Exploit Title: SOFTMP3 source code SQL injection

2011-04-24 mArTi webapps

First Escort Marketing CMS – Multiple SQL Injections Vulnerabilities

# PoC Title: First Escort Marketing CMS Multiple SQL Injection

2011-04-22 NoNameMT webapps

360 Web Manager 3.0 – Multiple Vulnerabilities

# Exploit Title: Multiple vulnerabilities in 360 Web Manager 3.0

2011-04-22 Ignacio Garrido webapps

ZenPhoto 1.4.0.3 – x-forwarded-for HTTP Header Persistent Cross-Site Scripting

# Exploit Title: ZenPhoto 1.4.0.3 patched 2011-4-19 x-forwarded-for HTTP

2011-04-22 Saif webapps

PHP ‘phar’ Extension 1.1.1 – Heap Overflow

from: http://0x1byte.blogspot.com/2011/04/php-phar-extension-heap-overflow.html

2011-04-22 Alexander Gavrun dos

Dolibarr ERP/CRM 3.0.0 – Multiple Vulnerabilities

------------------------------------------------------------------------

2011-04-22 AutoSec Tools webapps

Web2Project 2.3 – SQL Injection

# ------------------------------------------------------------------------

2011-04-22 AutoSec Tools webapps

DynMedia Pro Web CMS 4.0 – Local File Disclosure

|||[!]===========================================================================[!]

2011-04-22 Mbah_Semar webapps

4Images 1.7.9 – Multiple Vulnerabilities

================================

2011-04-22 High-Tech Bridge SA webapps

Realmarketing CMS – Multiple SQL Injections

#(+)Exploit Title: Realmarketing CMS System Sensitive Database Disclosure Vulnerability

2011-04-22 ^Xecuti0N3r webapps

WordPress Plugin Ajax Category Dropdown 0.1.5 – Multiple Vulnerabilities

=============================

2011-04-22 High-Tech Bridge SA webapps

todoyu 2.0.8 – ‘lang’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47540/info

2011-04-22 AutoSec Tools webapps

Dolibarr ERP/CRM 3.0 – Local File Inclusion / Cross-Site Scripting

source: https://www.securityfocus.com/bid/47542/info

2011-04-22 AutoSec Tools webapps

Nuke Evolution Xtreme 2.0 – Local File Inclusion / SQL Injection

source: https://www.securityfocus.com/bid/47552/info

2011-04-22 KedAns-Dz webapps

Gesytec ElonFmt ActiveX 1.1.14 – ‘ElonFmt.ocx’ pid Item Buffer Overflow (SEH)

2011-04-21 LiquidWorm local

Spreecommerce < 0.50.0 - Arbitrary Command Execution (Metasploit)

##

2011-04-21 Metasploit remote

SyCtel Design – ‘menu’ Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/47526/info

2011-04-21 Ashiyane Digital Security Team webapps

ZenPhoto 1.4.0.3 – ‘_zp_themeroot’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47528/info

2011-04-21 High-Tech Bridge SA webapps

LightNEasy 3.2.3 – ‘userhandle’ Cookie SQL Injection

source: https://www.securityfocus.com/bid/47541/info

2011-04-21 AutoSec Tools webapps

Ultimate eShop – Error-Based SQL Injection

# Exploit Title: Ultimate eShop Error Based SQL Injection Vulnerability

2011-04-20 Romka webapps

docuFORM Mercury WebApp 6.16a/5.20 – Multiple Cross-Site Scripting Vulnerabilities

docuFORM Mercury WebApp 6.16a Multiple Cross-Site Scripting Vulnerabilities

2011-04-20 LiquidWorm webapps

SocialCMS 1.0.2 – Multiple Cross-Site Request Forgery Vulnerabilities

[+] Greetings :[ mywisdom - kiddies - kamtiez - r3m1ck - aciz_n1nj4 | mozartklik |syafm0vic-

2011-04-20 vir0e5 webapps

Automagick Tube Script 1.4.4 – ‘module’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47519/info

2011-04-20 Kurd-Team webapps

Yahoo! CD Player – ActiveX Control ‘open()’ Method Stack Buffer Overflow

source: https://www.securityfocus.com/bid/51011/info

2011-04-20 shinnai dos

Wireshark 1.4.4 – ‘packet-dect.c’ Local Stack Buffer Overflow (Metasploit) (1)

##

2011-04-19 Metasploit local

Adobe Flash Player < 10.1.53.64 - Action Script Type Confusion (ASLR + DEP Bypass)

Source: http://www.abysssec.com/blog/2011/04/exploiting-adobe-flash-player-on-windows-7/

2011-04-19 Abysssec remote

IBM Tivoli Directory Server SASL – Bind Request Remote Code Execution

Source: http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=26&Itemid=26

2011-04-19 Francis Provencher dos

dalbum 1.43 – Multiple Vulnerabilities

===============================

2011-04-19 High-Tech Bridge SA webapps

Wireshark 1.4.4 – ‘packet-dect.c’ Remote Stack Buffer Overflow (Metasploit) (2)

##

2011-04-19 Metasploit remote

CRESUS – ‘recette_detail.php’ SQL Injection

source: https://www.securityfocus.com/bid/47416/info

2011-04-19 GrayHatz Security Group webapps