Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 397

iOS FtpDisc 1.0 – Directory Traversal

# Exploit Title: FtpDisc v1.0 for iPhone / iPod touch, Directory Traversal

2011-02-22 R3d@l3rt, Sp@2K, Sunlight remote

iOS SideBooks 1.0 – Directory Traversal

# Exploit Title: SideBooks v1.0 for iPhone / iPod touch, Directory Traversal

2011-02-22 R3d@l3rt, Sp@2K, Sunlight remote

Mozilla Firefox – Interleaving ‘document.write’ / ‘appendChild’ (Metasploit)

##

2011-02-22 Metasploit remote

Battlefield 2/2142 – Packet Null Pointer Dereference Remote Denial of Service

source: https://www.securityfocus.com/bid/46478/info

2011-02-22 Luigi Auriemma dos

WordPress Plugin GD Star Rating 1.9.7 – ‘wpfn’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46480/info

2011-02-22 High-Tech Bridge SA webapps

IBM Lotus Sametime Server 8.0 – ‘stcenter.nsf’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46481/info

2011-02-22 andrew webapps

Vanilla Forums 2.0.17.x – ‘p’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46486/info

2011-02-22 Aung Khant webapps

Woltlab Burning Board 2.3.6 Addon – ‘hilfsmittel.php’ SQL Injection

#####################################################################################

2011-02-21 Crazyball webapps

Batavi 1.0 – Multiple Local File Inclusion / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46467/info

2011-02-21 AutoSec Tools webapps

IBM Lotus Sametime – ‘/stconf.nsf/WebMessage?messageString’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46471/info

2011-02-21 Dave Daly remote

IBM Lotus Sametime – stconf.nsf Cross-Site Scripting

source: https://www.securityfocus.com/bid/46471/info

2011-02-21 Dave Daly remote

Icy Phoenix 1.3.0.53a – HTTP Referer Persistent Cross-Site Scripting

# Exploit Title: Icy Phoenix 1.3.0.53a http referer stored XSS

2011-02-20 Saif El-Sherei webapps

JAKCMS 2.01 – Code Execution

#!/usr/bin/python

2011-02-20 mr_me webapps

JAKCMS 2.01 RC1 – Blind SQL Injection

#!/usr/bin/python

2011-02-20 mr_me webapps

Avira AntiVir – ‘.QUA’ File ‘avcenter.exe’ Local Crash (PoC)

#!/usr/bin/perl

2011-02-19 KedAns-Dz dos

eventum issue tracking system 2.3.1 – Persistent Cross-Site Scripting

# Exploit Title: Eventum 2.3.1 stored XSS

2011-02-19 Saif El-Sherei webapps

Escort Directory CMS – SQL Injection

# Exploit Title: Escort Directory CMS SQL Injection Vunerability

2011-02-19 NoNameMT webapps

Independent Escort CMS – Blind SQL Injection

# Exploit Title: Independent Escort CMS Blind SQL Injection Vunerability

2011-02-19 NoNameMT webapps

IBM Lotus Domino LDAP – Bind Request Remote Code Execution

#!/usr/bin/perl

2011-02-18 Francis Provencher dos

Novell ZENworks 10/11 – TFTPD Remote Code Execution

#!/usr/bin/perl

2011-02-18 Francis Provencher dos

Novell Iprint – LPD Remote Code Execution

#!/usr/bin/perl

2011-02-18 Francis Provencher dos

WSN Guest 1.24 – ‘wsnuser’ Cookie SQL Injection

source: https://www.securityfocus.com/bid/46444/info

2011-02-18 Aliaksandr Hartsuyeu webapps

BWMeter 5.4.0 – ‘.csv’ Denial of Service

GotGeek Labs

2011-02-17 b0telh0 dos

WordPress Plugin User Photo Component – Arbitrary File Upload

# Exploit Title: WordPress User Photo Component Remote File Upload Vulnerability

2011-02-17 ADVtools webapps

PHP 5.3.5 – ‘grapheme_extract()’ Null Pointer Dereference

Source: http://securityreason.com/securityalert/8087

2011-02-17 Maksymilian Arciemowicz dos

GAzie 5.10 – ‘Login’ Multiple Vulnerabilities

GAzie 5.10 (Login parameter) Multiple Remote Vulnerabilities

2011-02-17 LiquidWorm webapps

Microsoft Windows – Print Spooler Service Impersonation (MS10-061) (Metasploit)

##

2011-02-17 Metasploit remote

Microsoft Server Service – NetpwPathCanonicalize Overflow (MS06-040) (Metasploit)

##

2011-02-17 Metasploit remote

PHP 5.3.5 – ‘grapheme_extract()’ Null Pointer Dereference Denial of Service

source: https://www.securityfocus.com/bid/46429/info

2011-02-17 Maksymilian Arciemowicz dos

ActFax Server (LPD/LPR) 4.25 Build 0221 (2010-02-11) – Remote Buffer Overflow

#!/usr/bin/perl

2011-02-16 chap0 remote

ActFax Server FTP 4.25 Build 0221 (2010-02-11) – (Authenticated) Remote Buffer Overflow

#!/usr/bin/python

2011-02-16 chap0 remote

Rae Media Real Estate Single Agent – SQL Injection

source: https://www.securityfocus.com/bid/45211/info

2011-02-16 R4dc0re webapps

Rae Media Real Estate Multi Agent – SQL Injection

source: https://www.securityfocus.com/bid/45212/info

2011-02-16 R4dc0re webapps

Ruby on Rails 3.0.5 – ‘WEBrick::HTTPRequest’ Module HTTP Header Injection

source: https://www.securityfocus.com/bid/46423/info

2011-02-16 Jimmy Bandit remote

mySeatXT 0.164 – ‘lang’ Local File Inclusion

source: https://www.securityfocus.com/bid/46507/info

2011-02-16 AutoSec Tools webapps

Oracle 10/11g – ‘exp.exe?file’ Local Buffer Overflow

#!/usr/bin/python

2011-02-15 mr_me local

phpMyBitTorrent 2.0.4 – SQL Injection

# Exploit Title: phpMyBitTorrent 2.0.4 SQL injection

2011-02-15 #forkbombers webapps

Lingxia I.C.E CMS – Blind SQL Injection

#!/usr/bin/python

2011-02-15 mr_me webapps

omegabill 1.0 build 6 – Multiple Vulnerabilities

Source: http://packetstormsecurity.org/files/view/98480/OmegaBillv1.0Build6-php.txt

2011-02-15 AutoSec Tools webapps

AutoPlay 1.33 (autoplay.ini) – Local Buffer Overflow (SEH)

#!/usr/bin/python

2011-02-15 badc0re local

Seo Panel 2.2.0 – SQL Injection

Vulnerability ID: HTB22824

2011-02-15 High-Tech Bridge SA webapps

MG2 0.5.1 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46378/info

2011-02-15 LiquidWorm webapps

Gollos 2.8 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46379/info

2011-02-15 High-Tech Bridge SA webapps

Wikipad 1.6.0 – Cross-Site Scripting / HTML Injection / Information Disclosure

source: https://www.securityfocus.com/bid/46383/info

2011-02-15 High-Tech Bridge SA webapps

Photopad 1.2 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46385/info

2011-02-15 High-Tech Bridge SA webapps

Getsimple CMS 2.03 – ‘upload-ajax.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/46427/info

2011-02-15 s3rg3770 & Chuzz webapps

AWCM 2.2 Final – Persistent Cross-Site Scripting

# Exploit Title: AWCM v2.2 final Persistent Cross Site Script

2011-02-14 _84kur10_ webapps

Microsoft Windows Server 2003 – AD BROWSER ELECTION Remote Heap Overflow

####################################################################################

2011-02-14 Cupidon-3005 dos

jSchool Advanced – SQL Injection

-----------------------------------------------------------------------

2011-02-14 eXa.DisC webapps

RunCMS 2.2.2 – Multiple Vulnerabilities

Source: http://packetstormsecurity.org/files/view/98472/runcms-sqlxss.txt

2011-02-14 High-Tech Bridge SA webapps