Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 391

Media Player Classic Home Cinema 1.5.0.2827 – ‘.avi’ Denial of Service (PoC)

# done by BraniX

2011-03-30 BraniX dos

YaCOMAS 0.3.6 Alpha – Multiple Vulnerabilities

===================================================================

2011-03-30 Pr@fesOr X webapps

Pligg CMS 1.1.3 – Multiple Vulnerabilities

####

2011-03-30 Jelmer de Hen webapps

Zend Java Bridge – Remote Code Execution

package ZJBpoc;

2011-03-30 ikki remote

IrIran Shoping Script – SQL Injection

==========================================

2011-03-30 Net.Edit0r webapps

BigACE 2.7.5 – Arbitrary File Upload

==========================================

2011-03-30 Net.Edit0r webapps

CosmoQuest – Authentication Bypass

==========================================

2011-03-30 Net.Edit0r webapps

HT Editor 2.0.18 – File Opening Stack Overflow

# Exploit Title: HT Editor File openning Stack Overflow (0day)

2011-03-30 ZadYree local

Andy’s PHP KnowledgeBase 0.95.2 – ‘viewusers.php’ SQL Injection

'Andy's PHP Knowledgebase' SQL Injection Vulnerability (CVE-2011-1546)

2011-03-30 Mark Stanislav webapps

GuppY 4.6.14 – ‘lng’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/47086/info

2011-03-30 kurdish hackers team webapps

YaCOMAS 0.3.6 OpenCMS – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47089/info

2011-03-30 Pr@fesOr X webapps

ICJobSite 1.1 – ‘pid’ SQL Injection

source: https://www.securityfocus.com/bid/47100/info

2011-03-30 RoAd_KiLlEr webapps

Perl 5.x – ‘lc()’ / ‘uc()’ TAINT Mode Protection Security Bypass

source: https://www.securityfocus.com/bid/47124/info

2011-03-30 mmartinec remote

Andy’s PHP KnowledgeBase 0.95.4 – SQL Injection

------------------------------------------------------------------------

2011-03-29 AutoSec Tools webapps

Claroline 1.10 – Persistent Cross-Site Scripting

------------------------------------------------------------------------

2011-03-29 AutoSec Tools webapps

Easy File Sharing Web Server 5.8 – Multiple Vulnerabilities

------------------------------------------------------------------------

2011-03-29 AutoSec Tools remote

IDEAL Administration 2011 11.4 – Local Buffer Overflow (SEH)

#!/usr/bin/env python

2011-03-29 Dr_IDE local

jHTTPd 0.1a – Directory Traversal

# ------------------------------------------------------------------------

2011-03-29 AutoSec Tools remote

oscss2 2.1.0 rc12 – Multiple Vulnerabilities

------------------------------------------------------------------------

2011-03-29 AutoSec Tools webapps

Rumble 0.25.2232 – Denial of Service

# ------------------------------------------------------------------------

2011-03-29 AutoSec Tools dos

GOM Player 2.1.28.5039 – AVI Denial of Service (PoC)

# done by BraniX

2011-03-29 BraniX dos

Microsoft Windows Explorer 6.0.2900.5512 – ‘Shmedia.dll 6.0.2900.5512’ AVI Preview Denial of Service (PoC)

# done by BraniX

2011-03-29 BraniX dos

Winamp 5.61 – AVI Denial of Service (PoC)

# done by BraniX

2011-03-29 BraniX dos

osCSS 2.1 – Multiple Cross-Site Scripting / Local File Inclusions

source: https://www.securityfocus.com/bid/47074/info

2011-03-29 AutoSec Tools webapps

Spitfire 1.0.3x – ‘cms_username’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47077/info

2011-03-29 High-Tech Bridge SA webapps

Tracks 1.7.2 – URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/47078/info

2011-03-29 Mesut Timur webapps

XOOPS – ‘view_photos.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47085/info

2011-03-29 KedAns-Dz webapps

Honey Soft Web Solution – Multiple Vulnerabilities

-----------------------------------------------------------------------------------------

2011-03-28 **RoAd_KiLlEr** webapps

WordPress Plugin BackWPup – Remote Code Execution / Local Code Execution

Sense of Security - Security Advisory - SOS-11-003

2011-03-28 Sense of Security webapps

webEdition CMS – Local File Inclusion

===================================================================

2011-03-28 eidelweiss webapps

Alkacon OpenCMS 7.5.x – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47055/info

2011-03-28 antisnatchor webapps

webEdition CMS 6.1.0.2 – ‘DOCUMENT_ROOT’ Local File Inclusion

source: https://www.securityfocus.com/bid/47065/info

2011-03-28 eidelweiss webapps

Claroline 1.10 – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/47073/info

2011-03-28 AutoSec Tools webapps

SimplisCMS 1.0.3.0 – Multiple Vulnerabilities

##########################################################

2011-03-27 NassRawI webapps

wodWebServer.NET 1.3.3 – Directory Traversal

------------------------------------------------------------------------

2011-03-27 AutoSec Tools remote

webEdition CMS 6.1.0.2 – Multiple Vulnerabilities

------------------------------------------------------------------------

2011-03-27 AutoSec Tools webapps

Distributed Ruby – Send instance_eval/syscall Code Execution (Metasploit)

##

2011-03-27 Metasploit remote

RealPlayer 11 – ‘.rmp’ Remote Buffer Overflow

source: https://www.securityfocus.com/bid/47039/info

2011-03-27 KedAns-Dz remote

eXPert PDF Batch Creator 7.0.880.0 – Denial of Service

source: https://www.securityfocus.com/bid/47040/info

2011-03-27 KedAns-Dz dos

DivX Player 7 – Multiple Remote Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/47042/info

2011-03-27 KedAns-Dz dos

Cetera eCommerce – Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/47044/info

2011-03-27 MustLive webapps

FLVPlayer4Free 2.9 – ‘.fp4f’ Remote Buffer Overflow

source: https://www.securityfocus.com/bid/47045/info

2011-03-27 KedAns-Dz remote

OrangeHRM 2.6.2 – ‘jobVacancy.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47046/info

2011-03-27 AutoSec Tools webapps

VideoLAN VLC Media Player 1.1.4 – ‘AMV’ Dangling Pointer (Metasploit)

##

2011-03-26 Metasploit remote

Family Connections CMS 2.3.2 – Persistent Cross-Site Scripting / XML Injection

Family Connections CMS 2.3.2 Stored XSS And XPath Injection

2011-03-26 LiquidWorm webapps

HP OpenView Network Node Manager (OV NNM) – ‘getnnmdata.exe Hostname’ CGI Buffer Overflow (Metasploit)

##

2011-03-25 Metasploit remote

Family Connections 2.3.2 – ‘subject’ HTML Injection

source: https://www.securityfocus.com/bid/47037/info

2011-03-25 Zero Science Lab webapps

HP OpenView Network Node Manager (OV NNM) – ‘nnmRptConfig.exe schdParams’ Remote Buffer Overflow (Metasploit)

##

2011-03-24 Metasploit remote

HP OpenView Network Node Manager (OV NNM) – ‘getnnmdata.exe ICount’ CGI Buffer Overflow (Metasploit)

##

2011-03-24 Metasploit remote

HP OpenView Network Node Manager (OV NNM) – ‘getnnmdata.exe’ (MaxAge) CGI Buffer Overflow (Metasploit)

##

2011-03-24 Metasploit remote