Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 398

TaskFreak! 0.6.4 – Multiple Cross-Site Scripting Vulnerabilities

################################################################

2011-02-12 LiquidWorm webapps

Escort Agency CMS – Blind SQL Injection

# Exploit Title: Escort Agency CMS Blind SQL Injection Vunerability

2011-02-12 NoNameMT webapps

PixelPost 1.7.3 – Multiple POST SQL Injections

--------------------------------------------------------------------

2011-02-12 LiquidWorm webapps

CuteZip 2.1 – Local Buffer Overflow

#!/usr/bin/perl

2011-02-12 C4SS!0 G0M3S local

TaskFreak! 0.6.4 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46350/info

2011-02-12 LiquidWorm webapps

TaskFreak! 0.6.4 – ‘print_list.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46350/info

2011-02-12 LiquidWorm webapps

TaskFreak! 0.6.4 – ‘rss.php’ HTTP Referer Header Cross-Site Scripting

source: https://www.securityfocus.com/bid/46350/info

2011-02-12 LiquidWorm webapps

Dokeos 1.8.6 2 – ‘style’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46370/info

2011-02-12 AutoSec Tools webapps

MoviePlay 4.82 – ‘.lst’ Local Buffer Overflow

#!/usr/bin/env python

2011-02-11 sickness local

Horde – Horde_Image::factory driver Argument Local File Inclusion

# Exploit Title: Horde Horde_Image::factory driver Argument Local File

2011-02-11 skysbsb webapps

Geomi CMS 1.2/3.0 – SQL Injection

#########################################################################

2011-02-11 ThunDEr HeaD webapps

Kunena < 1.5.13 / < 1.6.3 - SQL Injection

Vendor/Product: Kunena

2011-02-11 Red Matter webapps

Openedit 5.1294 – Remote Code Execution

#!/usr/bin/python

2011-02-11 mr_me webapps

Drupal Module CAPTCHA – Security Bypass

source: https://www.securityfocus.com/bid/46344/info

2011-02-11 anonymous webapps

Linksys WAP610N – Root Access Security

Secure Network - Security Research Advisory

2011-02-10 Matteo Ignaccolo remote

XM Easy Personal FTP Server 5.8.0 – ‘TYPE’ Denial of Service

#!/usr/bin/python

2011-02-10 Houssam Sahli dos

LocatePC 1.05 (Ligatt Version + Others) – SQL Injection

#Affected Software:

2011-02-10 anonymous webapps

ManageEngine ADSelfService Plus 4.4 – POST Manipulation Security Question

source: https://www.securityfocus.com/bid/46331/info

2011-02-10 Core Security webapps

ManageEngine ADSelfService Plus 4.4 – ‘EmployeeSearch.cc’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46331/info

2011-02-10 Core Security webapps

Dolphin 7.0.4 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46337/info

2011-02-10 AutoSec Tools webapps

webERP 4.0.1 – ‘InputSerialItemsFile.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/46341/info

2011-02-10 AutoSec Tools webapps

RunCMS 2.2.2 – ‘register.php’ SQL Injection

source: https://www.securityfocus.com/bid/46342/info

2011-02-10 High-Tech Bridge SA webapps

Multiple Vendor Calendar Manager – Remote Code Execution

#include

2011-02-09 Rodrigo Rubira Branco remote

DESlock+ < 4.1.10 - 'vdlptokn.sys' Local Kernel Ring0 SYSTEM

pModuleBase = &pModuleInfo->Module[0];

2011-02-09 mu-b local

Auto Database System 1.0 Infusion Addon – SQL Injection

# Exploit Title: PHP-Fusion Auto Database System 1.0 Infusion SQL injection

2011-02-09 Saif webapps

Web 2.0 Social Network Freunde Community – SQL Injection

# Exploit Title: Web 2.0 Social Network Freunde Community SQL Injection

2011-02-09 NoNameMT webapps

xRadio 0.95b – ‘.xrl’ Local Buffer Overflow (SEH)

GotGeek Labs

2011-02-09 b0telh0 local

MihanTools Script 1.3.3 – SQL Injection

# Exploit Title: MihanTools Script SQL Injection Vunerability

2011-02-09 WHITE_DEVIL webapps

WordPress Plugin Enable Media Replace – Multiple Vulnerabilities

PRODUCT NAME: Enable Media Replace WordPress Plugin

2011-02-09 Ulf Harnhammar webapps

Unreal Tournament – Remote Buffer Overflow (SEH)

# Unreal Tournament Remote Buffer Overflow Exploit (SEH) (Windows)

2011-02-09 Fulcrum remote

SourceBans 1.4.7 – Cross-Site Scripting

# Exploit Title: SourceBans Version 1.4.7 XSS

2011-02-09 Sw1tCh webapps

PHPXref 0.7 – ‘nav.html’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46302/info

2011-02-09 MustLive webapps

Smarty Template Engine 2.6.9 – ‘$smarty.template’ PHP Code Injection

source: https://www.securityfocus.com/bid/46366/info

2011-02-09 jonieske webapps

Air Contacts Lite – HTTP Packet Denial of Service

source: https://www.securityfocus.com/bid/46827/info

2011-02-09 Rodrigo Escobar dos

Model Agentur Script – SQL Injection

# Exploit Title: Model Agentur Script SQL Injection Vunerability

2011-02-08 NoNameMT webapps

dotProject 2.1.5 – Cross-Site Request Forgery

Source: http://packetstormsecurity.org/files/view/98245/dotProject2.1.5-xsrf.txt

2011-02-08 AutoSec Tools webapps

AIOCP 1.4.001 – Cross-Site Request Forgery

Source: http://packetstormsecurity.org/files/view/98247/AIOCP-1.4.001-xsrf.txt

2011-02-08 AutoSec Tools webapps

Microsoft SQL Server – Payload Execution (via SQL Injection) (Metasploit)

##

2011-02-08 Metasploit remote

Microsoft SQL Server – sp_replwritetovarbin Memory Corruption (MS09-004) (via SQL Injection) (Metasploit)

##

2011-02-08 Metasploit remote

Microsoft Internet Explorer – CSS Recursive Import Use-After-Free (MS11-003) (Metasploit)

##

2011-02-08 Metasploit remote

VideoLAN VLC Media Player 1.1.6 – ‘MKV’ Memory Corruption (Metasploit)

##

2011-02-08 Metasploit local

Microsoft Windows – CreateSizedDIBSECTION Stack Buffer Overflow (MS11-006) (Metasploit)

##

2011-02-08 Metasploit local

WebAsyst Shop-Script – Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/46250/info

2011-02-08 High-Tech Bridge SA webapps

ViArt Shop 4.0.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46256/info

2011-02-08 High-Tech Bridge SA webapps

CiviCRM 3.3.3 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46275/info

2011-02-08 AutoSec Tools webapps

UMI CMS 2.8.1.2 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46280/info

2011-02-08 High-Tech Bridge SA webapps

T-Content Managment System – Multiple Vulnerabilities

# Exploit Title: T-Content Managment Multiple Vulnerability

2011-02-07 Daniel Godoy webapps

jakcms 2.0 pro rc5 – Persistent Cross-Site Scripting via useragent http header Injection

# Exploit Title: JAKCMS 2.0 PRO RC5 stored XSS via useragent HTTP header

2011-02-07 Saif El-Sherei webapps

ProFTPd – ‘mod_sftp’ Integer Overflow Denial of Service (PoC)

#ProFTPD mod_sftp Integer Overflow

2011-02-07 kingcope dos

MyMarket 1.71 – ‘index.php’ SQL Injection

# Exploit Title: MyMarket version 1.71(index.php) sql Injection

2011-02-07 ahmadso webapps