Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 396

phreebooks r30rc4 – Multiple Vulnerabilities

------------------------------------------------------------------------

2011-02-26 AutoSec Tools webapps

WordPress Plugin jQuery Mega Menu 1.0 – Local File Inclusion

Source: http://packetstormsecurity.org/files/view/98753/WordPressjQueryMegaMenu1.0-lfi.txt

2011-02-26 AutoSec Tools webapps

WordPress Plugin OPS Old Post Spinner 2.2.1 – Local File Inclusion

Source: http://packetstormsecurity.org/files/view/98751/WordPressOPSOldPostSpinner2.2-lfi.txt

2011-02-26 AutoSec Tools webapps

Cisco Linksys WAG120N – Cross-Site Request Forgery

----------------------------------------------------------------

2011-02-26 Khashayar Fereidani webapps

RaksoCT – Multiple SQL Injections

Title : RaksoCT Web Design Vulnerable to Multiples SQL Injection

2011-02-25 p0pc0rn webapps

Edraw Office Viewer Component 7.4 – ActiveX Stack Buffer Overflow

2011-02-25 Alexander Gavrun remote

iphone folders 2.5 – Directory Traversal

----------------------------------------------------------------

2011-02-25 Khashayar Fereidani remote

iphone ifile 2.0 – Directory Traversal

----------------------------------------------------------------

2011-02-25 Khashayar Fereidani remote

iphone mydocs 2.7 – Directory Traversal

----------------------------------------------------------------

2011-02-25 Khashayar Fereidani remote

Joomla! Component com_xcloner-backupandrestore – Remote Command Execution

#!/usr/bin/python

2011-02-25 mr_me webapps

Pragyan CMS 3.0 – Multiple Vulnerabilities

#Pragyan CMS v 3.0 mutiple Vulnerabilities

2011-02-25 Villy & Abhishek Lyall webapps

GNU glibc < 2.12.2 - 'fnmatch()' Stack Corruption

source: https://www.securityfocus.com/bid/46563/info

2011-02-25 Simon Berry-Byrne dos

phpShop 0.8.1 – ‘page’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46561/info

2011-02-25 Aung Khant webapps

glFusion 1.1.x/1.2.1 – ‘users.php’ SQL Injection

source: https://www.securityfocus.com/bid/46575/info

2011-02-25 H3X webapps

Alcassoft’s SOPHIA CMS – SQL Injection

Title : Alcassoft's SOPHIA CMS Vulnerable to SQL Injection

2011-02-24 p0pc0rn webapps

iSO Air Files 2.6 – Directory Traversal

# Exploit Title: Air Files v2.6 for iPhone / iPod touch, Directory Traversal

2011-02-24 R3d@l3rt, Sp@2K, Sunlight remote

iSO Filer Lite 2.1.0 – Directory Traversal

# Exploit Title: Filer Lite v2.1.0 for iPhone / iPod touch, Directory Traversal

2011-02-24 R3d@l3rt, Sp@2K, Sunlight remote

iOS iDocManager 1.0.0 – Directory Traversal

# Exploit Title: iDocManager v1.0.0 for iPhone / iPod touch, Directory Traversal

2011-02-24 R3d@l3rt, Sp@2K, Sunlight remote

iOS myDBLite 1.1.10 – Directory Traversal

# Exploit Title : myDBLite v1.1.10 for iPhone / iPod touch, Directory Traversal

2011-02-24 R3d@l3rt, Sp@2K, Sunlight remote

Victory FTP Server 5.0 – Denial of Service

#!/usr/bin/python

2011-02-24 C4SS!0 G0M3S dos

iOS Share 1.0 – Directory Traversal

# Exploit Title: Share v1.0 for iPhone / iPod touch, Directory Traversal

2011-02-24 R3d@l3rt, Sp@2K, Sunlight remote

WordPress Plugin GigPress 2.1.10 – Persistent Cross-Site Scripting

# Exploit Title: GigPress 2.1.10 wordpress plugin Stored XSS

2011-02-24 Saif El-Sherei webapps

WordPress Plugin Relevanssi 2.7.2 – Persistent Cross-Site Scripting

# Exploit Title: Relevanssi User Searches WordPress plugin Stored XSS

2011-02-24 Saif El-Sherei webapps

Novell Netware – RPC XNFS xdrDecodeString

#!/usr/bin/ruby

2011-02-24 Francis Provencher dos

WordPress Plugin Forum Server 1.6.5 – SQL Injection

Vulnerability ID: HTB22851

2011-02-24 High-Tech Bridge SA webapps

WordPress Plugin IWantOneButton 3.0.1 – Multiple Vulnerabilities

Vulnerability ID: HTB22846

2011-02-24 High-Tech Bridge SA webapps

Elecard MPEG Player 5.7 – Local Buffer Overflow (PoC) (SEH)

#!/usr/bin/python

2011-02-24 badc0re dos

iphone ishred 1.93 – Directory Traversal

----------------------------------------------------------------

2011-02-24 Khashayar Fereidani remote

iPhone Guitar – Directory Traversal

----------------------------------------------------------------

2011-02-24 Khashayar Fereidani remote

iphone pdf reader pro 2.3 – Directory Traversal

----------------------------------------------------------------

2011-02-24 Khashayar Fereidani remote

Logwatch Log File – Special Characters Privilege Escalation

source: https://www.securityfocus.com/bid/46554/info

2011-02-24 Dominik George remote

Hyena Cart – ‘index.php’ SQL Injection

Hyena Cart (index.php) Sql Injection Vulnerability

2011-02-23 AtT4CKxT3rR0r1ST webapps

tplSoccerStats – ‘player.php’ SQL Injection

tplSoccerStats (player.php) Sql Injection Vulnerability

2011-02-23 AtT4CKxT3rR0r1ST webapps

RedHat Linux – Stickiness of /tmp

from: http://marc.info/?l=full-disclosure&m=129842239022495&w=2

2011-02-23 Tavis Ormandy dos

Bitweaver 2.8.1 – Persistent Cross-Site Scripting

# exploit title: persistant xss in bitweaver2.8.1

2011-02-23 lemlajt webapps

WordPress Plugin Z-Vote 1.1 – SQL Injection

Source: http://packetstormsecurity.org/files/view/98671/zvote-sql.txt

2011-02-23 High-Tech Bridge SA webapps

ProQuiz 2.0.0b – Arbitrary File Upload

Source: http://packetstormsecurity.org/files/view/98669/ProQuiz-Shell.py.txt

2011-02-23 AutoSec Tools webapps

WordPress Plugin Comment Rating 2.9.23 – Multiple Vulnerabilities

Source: http://packetstormsecurity.org/files/view/98660/commentrating-sqldisclose.txt

2011-02-23 High-Tech Bridge SA webapps

course registration management system 2.1 – Multiple Vulnerabilities

Source: http://packetstormsecurity.org/files/view/98650/CourseMS2.1-LFI.txt

2011-02-23 AutoSec Tools webapps

VidiScript – SQL Injection

======================================

2011-02-23 ThEtA.Nu webapps

CesarFTP 0.99g – ‘MKD’ Remote Buffer Overflow (Metasploit) (2)

##

2011-02-23 Metasploit remote

WordPress Plugin IGIT Posts Slider Widget 1.0 – ‘src’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46589/info

2011-02-23 AutoSec Tools webapps

WordPress Plugin ComicPress Manager 1.4.9 – ‘lang’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46590/info

2011-02-23 AutoSec Tools webapps

WordPress Plugin YT-Audio 1.7 – ‘v’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46591/info

2011-02-23 AutoSec Tools webapps

Drupal Module Cumulus 5.x-1.1/6.x-1.4 – ‘tagcloud’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46594/info

2011-02-23 MustLive webapps

WinMerge 2.12.4 – Project File Handling Stack Overflow

#!/usr/bin/perl

2011-02-22 LiquidWorm dos

Solar FTP Server 2.1 – Denial of Service

#!/usr/bin/perl

2011-02-22 x000 dos

DIY Web CMS – Multiple Vulnerabilities

SQL and XSS in DIY Web CMS

2011-02-22 p0pc0rn webapps

Galilery 1.0 – Local File Inclusion

$ cat 15_lfi_galilery.1.0.txt

2011-02-22 lemlajt webapps

dotProject 2.1.5 – Multiple Vulnerabilities

# exploit title: sql injection in dotproject 2.1.5

2011-02-22 lemlajt webapps