Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 393

CMS Loko Media – Local File Download

[!]===========================================================================[!]

2011-03-18 Xr0b0t webapps

iCMS 1.1 – Admin SQL Injection / Brute Force

#!/usr/bin/python

2011-03-18 TecR0c webapps

PHP 5.3.5 libzip 0.9.3 – _zip_name_locate Null Pointer Dereference

Source: http://securityreason.com/securityalert/8146

2011-03-18 Maksymilian Arciemowicz dos

XOOPS 2.x – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46916/info

2011-03-18 Aung Khant webapps

Microsoft Source Code Analyzer for SQL Injection 1.3 – Improper Permissions

Microsoft Source Code Analyzer for SQL Injection 1.3 Improper Permissions

2011-03-17 LiquidWorm local

Joomla! 1.6 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/46846/info

2011-03-17 Aung Khant webapps

ACTi ASOC 2200 Web Configurator 2.6 – Remote Command Execution

#!perl

2011-03-17 Todor Donev remote

Joomla! Component com_booklibrary – SQL Injection

# Exploit Title: SQL Injection in component com_booklibrary for Joomla

2011-03-17 Marc Doudiet webapps

Fake Webcam 6.1 – Local Crash (PoC)

#!/usr/bin/ruby

2011-03-17 Anastasios Monachos dos

Tugux CMS 1.0_final – Multiple Vulnerabilities

+----------------------------------------------+

2011-03-17 Aodrulez webapps

RealNetworks RealPlayer – CDDA URI Initialization (Metasploit)

##

2011-03-17 Metasploit remote

WordPress Plugin Sodahead Polls 2.0.2 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46902/info

2011-03-17 High-Tech Bridge SA webapps

WordPress Plugin Rating-Widget 1.3.1 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46904/info

2011-03-17 Todor Donev webapps

LotusCMS 3.0.3 – Multiple Vulnerabilities

Vulnerability ID: HTB22886

2011-03-16 High-Tech Bridge SA webapps

Adobe ColdFusion – Directory Traversal (Metasploit)

##

2011-03-16 Metasploit remote

AVIPreview 0.26 Alpha – Denial of Service

# done by BraniX

2011-03-16 BraniX dos

pointter PHP content management system 1.2 – Multiple Vulnerabilities

Pointter PHP Content Management System 1.2 Multiple Vulnerabilities

2011-03-16 LiquidWorm webapps

WikiWig 5.01 – Multiple Cross-Site Scripting Vulnerabilities

Source: http://packetstormsecurity.org/files/view/99363/wikiwig501-xss.txt

2011-03-16 AutoSec Tools webapps

b2evolution 4.0.3 – Persistent Cross-Site Scripting

Source: http://packetstormsecurity.org/files/view/99362/b2evolution403-xss.txt

2011-03-16 AutoSec Tools webapps

Sun Java Applet2ClassLoader – Remote Code Execution (Metasploit)

##

2011-03-16 Metasploit remote

Monkey’s Audio – ‘.ape’ Remote Buffer Overflow

source: https://www.securityfocus.com/bid/46887/info

2011-03-16 KedAns-Dz remote

AplikaMedia CMS – ‘page_info.php’ SQL Injection

source: https://www.securityfocus.com/bid/46896/info

2011-03-16 H3X webapps

Opera 11.01 – NULL PTR Dereference

Opera 11.01 Null Ptr Derefer

2011-03-15 echo dos

IF-CMS 2.07 – Local File Inclusion (1)

#!/usr/bin/python

2011-03-15 TecR0c webapps

HP OpenView Performance Insight Server – Backdoor Account Code Execution (Metasploit)

##

2011-03-15 Metasploit remote

VideoLAN VLC Media Player 1.0.5 – ‘.ape’ Denial of Service

source: https://www.securityfocus.com/bid/46868/info

2011-03-15 KedAns-Dz dos

SugarCRM 6.1.1 – Information Disclosure

source: https://www.securityfocus.com/bid/46885/info

2011-03-15 RedTeam Pentesting GmbH webapps

Log1 CMS 2.0 – Multiple Vulnerabilities

+---------------------------------------+

2011-03-14 Aodrulez webapps

ABBS Audio Media Player – ‘.m3u’ / ‘.LST’ Local Buffer Overflow

# Exploit: ABBS Audio Media Player Buffer Overflow Exploit (M3U/LST)

2011-03-14 Rh0 local

iOS Checkview 1.1 – Directory Traversal

# Exploit Title: checkview(Ã¥ºä) v1.1 for iPhone / iPod touch, Directory Traversal

2011-03-14 kim@story remote

Linux Kenel 2.6.37-rc1 – serial_core TIOCGICOUNT Leak

/* Linux

2011-03-14 prdelka dos

Google Android 2.0/2.1/2.1.1 – WebKit Use-After-Free

2011-03-14 MJ Keith remote

SmarterMail 8.0 – Multiple Cross-Site Scripting Vulnerabilities

Author: Hoyt LLC Research

2011-03-14 Hoyt LLC Research webapps

ABBS Audio Media Player 3.0 – ‘.lst’ Local Buffer Overflow (SEH)

# Exploit Title: ABBS Audio Media Player Buffer Overflow Exploit (SEH)

2011-03-14 h1ch4m local

ABBS Electronic Flash Cards 2.1 – ‘.fcd’ Local Buffer Overflow

# Exploit Title: ABBS Electronic Flash Cards Buffer Overflow Exploit

2011-03-14 h1ch4m local