Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 400

AOL 9.5 – ‘.rtx’ Local Buffer Overflow

#!/usr/bin/python

2011-01-31 sup3r local

OpenVAS Manager – Command Injection

Source: http://securityreason.com/securityalert/8048

2011-01-31 Tim Brown local

Joomla! Component com_virtuemart 1.1.6 – SQL Injection

source: https://www.securityfocus.com/bid/46070/info

2011-01-31 Andrea Fabrizi webapps

All In One Control Panel 1.4.1 – ‘cp_menu_data_file.php’ SQL Injection

source: https://www.securityfocus.com/bid/46097/info

2011-01-31 AutoSec Tools webapps

vBSEO 3.2.2/3.5.2 – Persistent Cross-Site Scripting via LinkBacks

vBSEO - Persistent XSS via LinkBacks

2011-01-30 MaXe webapps

vBSEO Sitemap 2.5/3.0 – Multiple Vulnerabilities

vBSEO Sitemap - Multiple Vulnerabilities

2011-01-30 MaXe webapps

SDP Downloader 2.3.0 – ‘http_response’ Remote Buffer Overflow

#!/usr/bin/python

2011-01-30 sup3r remote

Google Chrome 8.0.552.237 – replace Denial of Service

# Exploit Title: Google Chrome v8.0.552.237 .replace DOS

2011-01-30 Carlos Mario Penagos Hollmann dos

RW-Download 4.0.6 – ‘index.php’ SQL Injection

/////////////////////////_Dr.NeT_/////////////////////////////////_Dr.NeT_//////////////////////_Dr.NeT_//////////*

2011-01-30 Dr.NeT webapps

NetZip – Classic Buffer Overflow (SEH)

#

2011-01-30 C4SS!0 G0M3S local

Maxthon Browser 3.0.20.1000 – ref / replace Denial of Service

# Exploit Title: Maxthon Browser v3.0.20.1000 .ref .replace DOS

2011-01-30 Carlos Mario Penagos Hollmann dos

vBSEO 3.2.2/3.5.2 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46068/info

2011-01-30 MaXe webapps

eSyndiCat Directory Software 2.2/2.3 – ‘preview’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46082/info

2011-01-30 Avram Marius webapps

Microsoft Internet Explorer – MHTML Protocol Handler Cross-Site Scripting

Hacking with mhtml protocol handler

2011-01-29 80vul local

WM Downloader 3.1.2.2 2010.04.15 – ‘.m3u’ File Buffer Overflow (DEP Bypass)

#!/usr/bin/env python

2011-01-29 sickness local

A-PDF All to MP3 Converter 2.0.0 – ‘.wav’ Local Buffer Overflow (SEH)

# Exploit Title: A-PDF All to MP3 Converter v.2.0.0 SEH overflow

2011-01-29 m0nna local

MultiCMS – Local File Inclusion

Source: http://packetstormsecurity.org/files/view/97987/multicms-lfi.txt

2011-01-29 R3VAN_BASTARD webapps

Caedo HTTPd Server 0.5.1 ALPHA – Arbitrary File Download

#!/usr/bin/perl

2011-01-29 Zer0 Thunder remote

PHP Link Directory Software – ‘sbcat_id’ SQL Injection

==

2011-01-28 h4ck3r webapps

PHP Classified ads software – ‘cid’ Blind SQL Injection

==

2011-01-28 h4ck3r webapps

FreeBSD 8.0 – Local Forced Reboot (Denial of Service)

# Exploit Title: FreeBSD local denial of service - forced reboot

2011-01-28 kingcope dos

Polycom SoundPoint IP Devices – Denial of Service

Source: http://packetstormsecurity.org/files/view/97948/polycomsoundpoint-dos.txt

2011-01-28 pawel gawinek dos

PHP Script Directory Software – ‘sbcat_id’ SQL Injection

==

2011-01-28 h4ck3r webapps

Virtuosa Phoenix Edition 5.2 – ASX Buffer Overflow (SEH)

#!/usr/bin/python

2011-01-28 Acidgen local

comercioplus 5.6 – Multiple Vulnerabilities

# Exploit Title: Comerciosonline CMS SQLi

2011-01-27 Daniel Godoy webapps

Vanilla Forums 2.0.16 – ‘Target’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46039/info

2011-01-27 YGN Ethical Hacker Group webapps

PHPDirector Game Edition – ‘game.php’ SQL Injection

PHPDirector Game Edition (game.php) Sql Injection Vulnerability

2011-01-26 AtT4CKxT3rR0r1ST webapps

AWCM 2.2 Final – Local File Inclusion

[+]Exploit Title: [awcm v2.2 final Local File Inclusion]

2011-01-26 Cucura webapps

class.upload.php 0.30 – Arbitrary File Upload

[#] Exploit Title: class.upload.php v 0.30 Remote File Upload Vulnerability

2011-01-26 DIES3L webapps

Froxlor 0.9.15 – Remote File Inclusion

# Exploit Title: Froxlor v 0.9.15 Remote file include vulnerbility

2011-01-26 DIES3L webapps

Oracle Document Capture 10.1.3.5 – Insecure Method / Buffer Overflow

Source: http://packetstormsecurity.org/files/view/97871/DSECRG-11-006.txt

2011-01-26 Alexandr Polyakov remote

Oracle Document Capture – Actbar2.ocx Insecure Method

Source: http://packetstormsecurity.org/files/view/97866/DSECRG-11-004.txt

2011-01-26 Evdokimov Dmitriy remote

sap crystal report server 2008 – Directory Traversal

Source: http://packetstormsecurity.org/files/view/97865/DSECRG-11-003.txt

2011-01-26 Dmitriy Chastuhin webapps

Oracle Document Capture – ’empop3.dll’ Insecure Methods

Source: http://packetstormsecurity.org/files/view/97868/DSECRG-11-005.txt

2011-01-26 Evdokimov Dmitriy remote

Oracle – Document Capture Insecure READ Method

Source: http://packetstormsecurity.org/files/view/97872/DSECRG-11-007.txt

2011-01-26 Alexey Sintsov remote

MultiPowUpload 2.1 – Arbitrary File Upload

[#] Exploit Title: MultiPowUpload v 2.1 Remote File Upload Vulnerability

2011-01-26 DIES3L webapps

Xnova Legacies 2009.2 – Cross-Site Request Forgery

# Exploit Title: Xnova Legacies 2009.2 CSRF

2011-01-26 Xploit A Day webapps

SimpGB 1.49.2 – ‘Guestbook.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46033/info

2011-01-26 MustLive webapps

Automated Solutions Modbus/TCP OPC Server – Remote Heap Corruption (PoC)

#!/usr/bin/python

2011-01-25 Jeremy Brown dos

Sun Microsystems SunScreen Firewall – Privilege Escalation

Sun Microsystems SunScreen Firewall Root Exploit

2011-01-25 kingcope remote

Opera Web Browser 11.00 – Integer Overflow

#

2011-01-25 C4SS!0 G0M3S dos

ab Web CMS 1.35 – Multiple Vulnerabilities

[!] AB WEB CMS V.1.35 Multiple Remote Vulnerabilities

2011-01-25 Dr.0rYX & Cr3W-DZ webapps

web@all 1.1 – ‘url’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45976/info

2011-01-25 AutoSec Tools webapps

PivotX 2.2.2 – ‘module_image.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45983/info

2011-01-25 AutoSec Tools webapps

ActiveWeb Professional 3.0 – Arbitrary File Upload

source: https://www.securityfocus.com/bid/45985/info

2011-01-25 StenoPlasma webapps

WordPress Plugin Videox7 UGC 2.5.3.2 – ‘listid’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45990/info

2011-01-25 AutoSec Tools webapps

PivotX 2.2 – ‘/pivotx/includes/blogroll.php?color’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45996/info

2011-01-25 High-Tech Bridge SA webapps

PivotX 2.2 – ‘/pivotx/includes/timwrapper.php?src’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45996/info

2011-01-25 High-Tech Bridge SA webapps

WordPress Plugin Featured Content 0.0.1 – ‘listid’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46001/info

2011-01-25 AutoSec Tools webapps

WordPress Plugin Recip.ly 1.1.7 – ‘uploadImage.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/46002/info

2011-01-25 AutoSec Tools webapps