Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 401

Opera Web Browser 11.00 – ‘option’ HTML Element Integer Overflow

source: https://www.securityfocus.com/bid/46003/info

2011-01-25 C4SS!0 G0M3S remote

WordPress Plugin BezahlCode Generator 1.0 – ‘gen_name’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46005/info

2011-01-25 AutoSec Tools webapps

WordPress Plugin FCChat Widget 2.1.7 – ‘path’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46009/info

2011-01-25 AutoSec Tools webapps

Microsoft Fax – Cover Page Editor 5.2.3790.3959 Double-Free Memory Corruption

Source: http://aluigi.org/adv/fxscover_1-adv.txt

2011-01-24 Luigi Auriemma local

Inetserv 3.23 POP3 – Denial of Service

#!/usr/bin/python

2011-01-24 dmnt dos

Joomla! Component com_b2portfolio 1.0.0 – Multiple SQL Injections

B2 Portfolio Joomla Component 1.0.0 Multiple SQL Injection Vulnerability

2011-01-24 Salvatore Fresta webapps

Microsoft SQL Server – sp_replwritetovarbin Memory Corruption (MS09-004) (Metasploit)

##

2011-01-24 Metasploit remote

libxml2 2.6.x – ‘XMLWriter::writeAttribute()’ Memory Leak Information Disclosure

source: https://www.securityfocus.com/bid/45973/info

2011-01-24 Kees Cook remote

WordPress Plugin Uploader 1.0 – ‘num’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45984/info

2011-01-24 AutoSec Tools webapps

WordPress Plugin Feature Slideshow 1.0.6 – ‘src’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46004/info

2011-01-24 AutoSec Tools webapps

WordPress Plugin Powerhouse Museum Collection Image Grid 0.9.1.1 – ‘tbpv_username’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46006/info

2011-01-24 AutoSec Tools webapps

WordPress Plugin oQey-Gallery 0.2 – ‘tbpv_domain’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46007/info

2011-01-24 AutoSec Tools webapps

PHP Coupon Script 6.0 – ‘bus’ Blind SQL Injection

==

2011-01-23 h4ck3r webapps

Inetserv 3.23 – SMTP Denial of Service

#!/usr/bin/python

2011-01-23 G13 dos

Golden FTP Server 4.70 – ‘PASS’ Buffer Overflow

#GoldenFTP 4.70 PASS Exploit

2011-01-23 cd1zz & iglesiasgg remote

PHP Link Directory 4.1.0 – Cross-Site Request Forgery (Add Admin)

PHP Link Directory v4.1.0 CSRF Vulnerability (Add Admin)

2011-01-23 AtT4CKxT3rR0r1ST webapps

WordPress Plugin Audio 0.5.1 – ‘showfile’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45991/info

2011-01-23 AutoSec Tools webapps

WordPress Plugin RSS Feed Reader 0.1 – ‘rss_url’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45997/info

2011-01-23 AutoSec Tools webapps

WordPress Plugin WP Featured Post with Thumbnail 3.0 – ‘src’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45998/info

2011-01-23 AutoSec Tools webapps

WordPress Plugin WP Publication Archive 2.0.1 – ‘file’ Information Disclosure

source: https://www.securityfocus.com/bid/46000/info

2011-01-23 AutoSec Tools webapps

phpCMS 9.0 – Blind SQL Injection

=================================================================

2011-01-22 eidelweiss webapps

cultbooking 2.0.4 – Multiple Vulnerabilities

CultBooking 2.0.4 (lang) Local File Inclusion Vulnerability

2011-01-22 LiquidWorm webapps

Sun Java Web Start BasicServiceImpl – Remote Code Execution (Metasploit)

##

2011-01-22 Metasploit remote

Look n stop – Local Denial of Service

#include

2011-01-21 Heurs dos

Panda Global Protection 2010 – Local Denial of Service

#include

2011-01-21 Heurs dos

Panda Global Protection 2010 – Local Denial of Service (unfiltered wcscpy())

#include

2011-01-21 Heurs dos

Microsoft Windows Server – Service Relative Path Stack Corruption (MS08-067) (Metasploit)

##

2011-01-21 Metasploit remote

phpCMS 2008 – SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-{In The Name Of Allah The Mercifull}-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

2011-01-20 R3d-D3V!L webapps

PHP Lowbids – ‘viewfaqs.php’ Blind SQL Injection

==

2011-01-20 h4ck3r webapps

Microsoft Internet Explorer – CSS SetUserClip Memory Corruption (MS10-090) (Metasploit)

##

2011-01-20 Metasploit remote

Pixie CMS 1.0.4 – ‘/admin/index.php’ SQL Injection

source: https://www.securityfocus.com/bid/45937/info

2011-01-20 High-Tech Bridge SA webapps

Novell iPrint 5.52 – ActiveX ‘GetDriverSettings()’ Command Execution

#http://pocoftheday.blogspot.com

2011-01-19 Dr_IDE remote

Simploo CMS 1.7.1 – PHP Code Execution

Simploo CMS Community Edition - Remote PHP Code Execution Issue

2011-01-19 David Vieira-Kurz webapps

PHP auctions – ‘viewfaqs.php’ Blind SQL Injection

==

2011-01-19 h4ck3r webapps

acpid 1.0.x – Multiple Local Denial of Service Vulnerabilities

// source: https://www.securityfocus.com/bid/45915/info

2011-01-19 Vasiliy Kulikov dos

ESTsoft ALZip 8.12.0.3 – ‘.zip’ Remote Buffer Overflow

source: https://www.securityfocus.com/bid/45917/info

2011-01-19 C4SS!0 G0M3S remote

Golden FTP Server 4.70 – Malformed Message Denial of Service

source: https://www.securityfocus.com/bid/45924/info

2011-01-19 Craig Freyman dos

PHPAuctions – ‘viewfaqs.php’ SQL Injection

source: https://www.securityfocus.com/bid/45928/info

2011-01-19 h4ck3r webapps

A-PDF All to MP3 Converter 2.0.0 – ‘.wav’ Local Buffer Overflow

# Exploit Title: A-PDF All to MP3 Converter v.2.0.0 stack based buffer overflow

2011-01-18 h1ch4m local

Joomla! Component allCineVid 1.0.0 – Blind SQL Injection

http://adv.salvatorefresta.net/allCineVid_Joomla_Component_1.0.0_Blind_SQL_Injection_Vulnerability-18012011.txt

2011-01-18 Salvatore Fresta webapps

CakePHP 1.3.5/1.2.8 – ‘Unserialize()’ File Inclusion

Source: http://securityreason.com/securityalert/8026

2011-01-18 felix webapps

Google Chrome 8.0.552.237 – address Overflow Denial of Service

# Title: Google Chrome v8.0.552.237 address overflow DoS

2011-01-18 Vuk Ivanovic dos

N-13 News 3.4 – Cross-Site Request Forgery (Admin Add)

========================================================

2011-01-18 anT!-Tr0J4n webapps

Pango Font Parsing – ‘pangoft2-render.c’ Heap Corruption

source: https://www.securityfocus.com/bid/45842/info

2011-01-18 Dan Rosenberg remote

B-Cumulus – ‘tagcloud’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45911/info

2011-01-18 MustLive webapps

PHP-Fusion Teams Structure Infusion Addon – SQL Injection

# Exploit Title: PHP-fusion Team Structure Infusion (All versions) SQL

2011-01-17 Saif webapps

SmoothWall Express 3.0 – Multiple Vulnerabilities

The web management interface of SmoothWall Express 3.0 is vulnerable

2011-01-17 dave b webapps

AneCMS 1.3 – Persistent Cross-Site Scripting

# Exploit Title: AneCMS 1.3 Persistant XSS

2011-01-17 Penguin webapps

phpCMS 2008 V2 – ‘data.php’ SQL Injection

source: https://www.securityfocus.com/bid/45913/info

2011-01-17 R3d-D3V!L webapps

Linux Kernel 2.6.32 (Ubuntu 10.04) – ‘/proc’ Handling SUID Privilege Escalation

Source: http://www.halfdog.net/Security/2011/SuidBinariesAndProcInterface/

2011-01-17 halfdog local