Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 394

SmarterStats 6.0 – Multiple Vulnerabilities

Hoyt LLC Research | SmarterStats 6.0, OS Command Execution, Directory Traversal, DoS, Coordinated Disclosure

2011-03-11 Hoyt LLC Research webapps

Constructr CMS 3.03 – Multiple Remote Vulnerabilities

Constructr CMS 3.03 Miltiple Remote Vulnerabilities (XSS/SQLi)

2011-03-11 LiquidWorm webapps

Accellion File Transfer Appliance MPIPE2 – Command Execution (Metasploit)

##

2011-03-11 Metasploit remote

CA BrightStor ARCserve for Laptops & Desktops LGServer – ‘rxsSetDataGrowthScheduleAndFilter’ Remote Buffer Overflow (Metasploit)

##

2011-03-10 Metasploit remote

FreeBSD 6.4 – Netgraph Privilege Escalation

/* * FreeBSD

2011-03-10 zx2c4 local

Linux Kernel < 2.6.37-rc2 - 'TCP_MAXSEG' Kernel Panic (Denial of Service) (2)

#include

2011-03-10 zx2c4 dos

Luch Web Designer – Multiple SQL Injections

Title : Web Designed by LUCH Vulnerable to SQL Injection

2011-03-10 p0pc0rn webapps

Keynect eCommerce – SQL Injection

========================================================================================

2011-03-10 Arturo Zamora webapps

SmarterMail 7.3/7.4 – Multiple Vulnerabilities

Author: Hoyt LLC Research | http://xss.cx | http://cloudscan.me

2011-03-10 Hoyt LLC Research webapps

WordPress Plugin Lazyest Gallery 1.0.26 – ‘image’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46823/info

2011-03-10 High-Tech Bridge SA webapps

Xinha 0.96 – ‘spell-check-savedicts.php’ Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/46825/info

2011-03-10 John Leitch webapps

Cosmoshop 10.05.00 – Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/46828/info

2011-03-10 High-Tech Bridge SA webapps

Microsoft Windows Movie Maker 2.1.4026 – ‘.avi’ Remote Buffer Overflow

source: https://www.securityfocus.com/bid/46835/info

2011-03-10 KedAns-Dz remote

Wikiwig 5.01 – Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/46888/info

2011-03-10 AutoSec Tools webapps

PHP 5.3.x ‘Intl’ Extension – ‘NumberFormatter::setSymbol()’ Denial of Service

source: https://www.securityfocus.com/bid/46968/info

2011-03-10 thoger dos

PHP 5.3.x ‘Zip’ Extension – ‘stream_get_contents()’ Denial of Service

source: https://www.securityfocus.com/bid/46969/info

2011-03-10 paulgao dos

PHP < 5.3.6 'Zip' Extension - 'zip_fread()' Denial of Service

source: https://www.securityfocus.com/bid/46975/info

2011-03-10 TorokAlpar dos

Esselbach Storyteller CMS System 1.8 – SQL Injection

# Exploit Title: Esselbach Storyteller CMS System Version 1.8 [page.php] Remote SQL Injection Vulnerability

2011-03-09 Shamus webapps

Maian Weblog 4.0 – Blind SQL Injection

2011-03-09 mr_me webapps

recordpress 0.3.1 – Multiple Vulnerabilities

----------------------------------------------------------------

2011-03-09 Khashayar Fereidani webapps

Apple QuickTime 7.5 – ‘.m3u’ Remote Stack Buffer Overflow

source: https://www.securityfocus.com/bid/46799/info

2011-03-09 KedAns-Dz remote

WebKit 1.2.x – Local Webpage Cross Domain Information Disclosure

source: https://www.securityfocus.com/bid/46816/info

2011-03-09 Aaron Sigel remote

.NET Runtime Optimization Service – Local Privilege Escalation

# Exploit Title: .NET Runtime Optimization Service Privilege Escalation

2011-03-08 XenoMuta local

EzPub Simple Classic ASP CMS – SQL Injection

Title: EzPub - Simple Classic ASP CMS Vulnerable to SQL Injection

2011-03-08 p0pc0rn webapps

Movavi VideoSuite 8.0 MediaPlayer – ‘.m3u’ Local Buffer Overflow

#!/usr/bin/perl

2011-03-08 KedAns-Dz local

Movavi VideoSuite 8.0 Slideshow – ‘.jpg’ Local Crash (PoC)

#!/usr/bin/perl

2011-03-08 KedAns-Dz dos

Movavi VideoSuite 8.0 Movie Editor – ‘.avi’ Local Crash (PoC)

#!/usr/bin/perl

2011-03-08 KedAns-Dz dos

Nokia N97 – ‘.m3u’ Playlist Crash (PoC)

#!/usr/bin/perl

2011-03-08 KedAns-Dz dos

Ruubikcms 1.0.3 – Multiple Vulnerabilities

----------------------------------------------------------------

2011-03-08 Khashayar Fereidani webapps

WordPress Plugin GRAND Flash Album Gallery 0.55 – Multiple Vulnerabilities

Vulnerability ID: HTB22870

2011-03-08 High-Tech Bridge SA webapps

Oracle MySQL for Microsoft Windows – Payload Execution (Metasploit)

##

2011-03-08 Metasploit remote

WS Interactive Automne 4.1 – ‘/admin/upload-controler.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/46774/info

2011-03-08 AutoSec Tools webapps

WordPress Plugin Inline Gallery 0.3.9 – ‘do’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46781/info

2011-03-08 High-Tech Bridge SA webapps

WordPress Plugin PhotoSmash Galleries 1.0.x – ‘action’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46782/info

2011-03-08 High-Tech Bridge SA webapps

WordPress Plugin 1 Flash Gallery 0.2.5 – Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/46783/info

2011-03-08 High-Tech Bridge SA webapps

Ruubikcms 1.0.3 – ‘head.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46794/info

2011-03-08 Khashayar Fereidani webapps

PHP < 5.3.6 'OpenSSL' Extension - 'openssl_encrypt' Plaintext Data Memory Leak Denial of Service

source: https://www.securityfocus.com/bid/46977/info

2011-03-08 dovbysh dos

PHP < 5.3.6 'OpenSSL' Extension - 'openssl_decrypt' Ciphertext Data Memory Leak Denial of Service

source: https://www.securityfocus.com/bid/46977/info

2011-03-08 dovbysh dos

Bacula-Web 1.3.x < 5.0.3 - Multiple Vulnerabilities

GotGeek Labs

2011-03-07 b0telh0 webapps

KingView 6.5.3 SCADA – ActiveX

# Exploit Title: KingView 6.5.3 SCADA ActiveX

2011-03-07 Carlos Mario Penagos Hollmann remote

EggAvatar 2.3.2 for vBulletin 3.8.x – Local File Read

#!/usr/bin/env perl

2011-03-07 DSecurity webapps

BMForum Myna 6.0 – SQL Injection

# Author: Stephan Sattler

2011-03-07 Stephan Sattler webapps

Hiawatha WebServer 7.4 – Denial of Service

Source: http://packetstormsecurity.org/files/view/99021/DCA-2011-0006.txt

2011-03-07 Rodrigo Escobar dos

Novell iPrint Client 5.52 – ActiveX Control Buffer Overflow (Metasploit)

##

2011-03-07 Metasploit remote

Kodak InSite 5.5.2 – ‘/Troubleshooting/DiagnosticReport.asp?HeaderWarning’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46762/info

2011-03-07 Dionach webapps

Kodak InSite 5.5.2 – ‘/Pages/login.aspx?Language’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46762/info

2011-03-07 Dionach webapps

N-13 News 4.0 – Cross-Site Request Forgery (Add Admin)

N-13 News 4.0 CSRF Vulnerability (Add Admin)

2011-03-06 AtT4CKxT3rR0r1ST webapps

Quick Polls – Local File Inclusion / Deletion

'Quick Polls' Local File Inclusion & Deletion Vulnerabilities (CVE-2011-1099)

2011-03-06 Mark Stanislav webapps

EggAvatar for vBulletin 3.8.x – SQL Injection

#!/usr/bin/env perl

2011-03-06 DSecurity webapps

MySms 1.0 – Multiple Vulnerabilities

MySms v1.0 Multiple Vulnerabilities

2011-03-05 AtT4CKxT3rR0r1ST webapps