Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 399

SWFupload 2.5.0 Beta 3 – Arbitrary File Upload

# Exploit Title: SWFUpload v2.5.0 Beta 3 File Arbitrary Upload

2011-02-07 Daniel Godoy webapps

AoA DVD Creator 2.5 – ActiveX Stack Overflow

# Exploit Title: AoA DVD Creator V2.5 Activex

2011-02-07 Carlos Mario Penagos Hollmann local

AoA Mp4 Converter 4.1.0 – ActiveX Stack Overflow

# Exploit Title: AoA Mp4 converter v4.1.0 Activex

2011-02-07 Carlos Mario Penagos Hollmann local

Escortservice 1.0 – ‘custid’ SQL Injection

source: https://www.securityfocus.com/bid/46171/info

2011-02-07 NoNameMT webapps

Multiple Check Point Endpoint Security Products – Information Disclosure

source: https://www.securityfocus.com/bid/46224/info

2011-02-07 Rapid7 remote

Cain & Abel 2.7.3 – ‘dagc.dll’ DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/46239/info

2011-02-07 d3c0der remote

FreeBSD 5.4-RELEASE ftpd 6.00LS – ‘sendfile’ Memory Leak

lockfd = open("exploit.lck", O_CREAT|O_RDWR, 0777);

2011-02-06 kingcope local

Hanso Player 1.4.0.0 – ‘Skinfile’ Buffer Overflow (Denial of Service)

# Exploit Title: Hanso Player 1.4.0.0 Buffer Overflow - DoS Skinfile

2011-02-06 badc0re dos

Hanso Converter 1.1.0 – BufferOverflow Denial of Service

# Exploit Title: Hanso Converter v1.1.0 Language File Buffer Overflow - Denial OF Service

2011-02-06 badc0re dos

Dew-NewPHPLinks 2.1b – ‘index.php’ SQL Injection

Dew-NewPHPLinks v.2.1b (index.php) Sql Injection Vulnerability

2011-02-06 AtT4CKxT3rR0r1ST webapps

Comcast DOCSIS 3.0 Business Gateways – Multiple Vulnerabilities

Trustwave's SpiderLabs Security Advisory TWSL2011-002:

2011-02-06 Trustwave's SpiderLabs remote

Chamilo 1.8.7 / Dokeos 1.8.6 – Remote File Disclosure

# Title: Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure

2011-02-05 beford webapps

Qcodo Development Framework 0.3.3 – Full Information Disclosure

# Exploit Title: Qcodo Development Framework 0.3.3 Full Info

2011-02-05 Daniel Godoy webapps

Escort und Begleitservice Agentur Script – SQL Injection

# Exploit Title: Escort und Begleitservice Agentur Script SQL Injection

2011-02-05 NoNameMT webapps

Podcast Generator 1.3 – Multiple Vulnerabilities

========================================

2011-02-04 High-Tech Bridge SA webapps

reos 2.0.5 – Multiple Vulnerabilities

=====================================

2011-02-04 High-Tech Bridge SA webapps

osCommerce – Authentication Bypass

This is a bug on old oscommerce / creloaded i just didn't find it in the

2011-02-04 Nicolas Krassas webapps

SMC Networks SMCD3G Session Management – Authentication Bypass

source: https://www.securityfocus.com/bid/46178/info

2011-02-04 Zack Fasel & Matthew Jakubowski remote

FTPGetter 3.58.0.21 – ‘PASV’ Remote Buffer Overflow

#!/usr/bin/python

2011-02-03 modpr0be remote

Islam Sound IV2 – ‘details.php’ SQL Injection

# Lab : ZxH-Lab's

2011-02-03 ZxH-Labs webapps

Majordomo2 – ‘SMTP/HTTP’ Directory Traversal

Original Advisory: https://sitewat.ch/en/Advisory/View/1

2011-02-03 Michael Brooks remote

quickshare file share 1.2.1 – Directory Traversal (1)

#!/usr/bin/python

2011-02-03 modpr0be remote

OemPro 3.6.4 – Multiple Vulnerabilities

# Exploit title: Multiple vulnerabilities on OemPro

2011-02-03 Ignacio Garrido webapps

AOL Desktop 9.6 – ‘.rtx’ Local Buffer Overflow

#!/usr/bin/python

2011-02-03 sickness local

VideoLAN VLC Media Player 1.1 – Subtitle ‘StripTags()’ Memory Corruption

Source: https://www.securityfocus.com/bid/46008/info

2011-02-03 Harry Sintonen dos

Octeth Oempro 3.6.4 – SQL Injection / Information Disclosure

source: https://www.securityfocus.com/bid/46135/info

2011-02-03 Ignacio Garrido webapps

Firebook – ‘index.html’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46143/info

2011-02-03 MustLive webapps

Wireshark 1.4.3 – ‘.pcap’ Memory Corruption

source: https://www.securityfocus.com/bid/46167/info

2011-02-03 Huzaifa Sidhpurwala remote

Raja Natarajan Guestbook 1.0 – Local File Inclusion

~ Raja Natarajan GUestbook 1.0 Local File Inclusion Exploit

2011-02-02 h0rd webapps

Terminal Server Client – ‘.rdp’ Denial of Service

#!/usr/bin/perl

2011-02-02 D3V!L FUCKER dos

RedaxScript 0.3.2 – Multiple Vulnerabilities

==================================

2011-02-02 High-Tech Bridge SA webapps

Zikula CMS 1.2.4 – Cross-Site Request Forgery

Source: http://packetstormsecurity.org/files/view/98060/zikulacms-xsrf.txt

2011-02-02 Aung Khant webapps

Android 1.x/2.x HTC Wildfire – Local Privilege Escalation

#include

2011-02-02 The Android Exploid Crew local

Google Android 1.x/2.x – Local Privilege Escalation

#include

2011-02-02 The Android Exploid Crew local

Tandberg E & EX & C Series Endpoints – Default Root Account Credentials

-----BEGIN PGP SIGNED MESSAGE-----

2011-02-02 Cisco Security remote

VideoLAN VLC Media Player 0.9.4 – TiVo Buffer Overflow (Metasploit)

##

2011-02-02 Metasploit local

TCExam 11.1.16 – ‘user_password’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46096/info

2011-02-02 AutoSec Tools webapps

Betsy 4.0 – ‘page’ Local File Inclusion

source: https://www.securityfocus.com/bid/46124/info

2011-02-02 MizoZ webapps

PMB Services 3.4.3 – SQL Injection

888 888 888

2011-02-01 Luchador webapps

NetLink – Arbitrary File Upload

======================================

2011-02-01 lumut-- webapps

TinyWebGallery 1.8.3 – Multiple Vulnerabilities

Date: 01/02/2011 (dd/MM/yyyy)

2011-02-01 Yam Mesicka webapps

Joomla! 1.5/1.6 – JFilterInput Cross-Site Scripting Bypass

# Exploit Title: Joomla! JFilterInput XSS Bypass

2011-02-01 Jeff Channell webapps

CodeBlocks 8.02 – ‘cbp’ Local Buffer Overflow

#!/usr/bin/python

2011-02-01 sup3r local

Joomla! Component com_clan_members – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/46080/info

2011-02-01 FL0RiX webapps

Joomla! Component com_frontenduseraccess – Local File Inclusion

source: https://www.securityfocus.com/bid/46081/info

2011-02-01 wishnusakti webapps

Moodle 2.0.1 – ‘PHPCOVERAGE_HOME’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46085/info

2011-02-01 AutoSec Tools webapps

TinyWebGallery 1.8.3 – Cross-Site Scripting / Local File Inclusion

source: https://www.securityfocus.com/bid/46086/info

2011-02-01 Yam Mesicka webapps

WordPress Plugin TagNinja 1.0 – ‘id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46090/info

2011-02-01 AutoSec Tools webapps

Oracle Java – Floating-Point Value Denial of Service

source: https://www.securityfocus.com/bid/46091/info

2011-02-01 Konstantin Preisser dos

ACollab – ‘t’ SQL Injection

source: https://www.securityfocus.com/bid/46095/info

2011-02-01 AutoSec Tools webapps