Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 403

IrfanView 4.28 – Multiple Denial of Service Vulnerabilities

# done by BraniX

2011-01-09 BraniX dos

KingView 6.5.3 – SCADA HMI Heap Overflow

## Exploit Title: KingView 6.53 SCADA HMI Heap Overflow PoC

2011-01-09 Dillon Beresford remote

Joomla! Plugin Captcha 4.5.1 – Local File Disclosure

:::::::-. ... ::::::. :::.

2011-01-09 dun webapps

ProFTPd 1.3.2 rc3 < 1.3.3b (Linux) - Telnet IAC Buffer Overflow (Metasploit)

##

2011-01-09 Metasploit remote

ProFTPd 1.2 < 1.3.0 (Linux) - 'sreplace' Remote Buffer Overflow (Metasploit)

##

2011-01-09 Metasploit remote

VeryTools VideoSpirit Pro 1.68 – Local Buffer Overflow

# Exploit Title: VideoSpirit Pro v1.68 Local BoF Exploit

2011-01-08 xsploitedsec local

NetSupport Manager Agent – Remote Buffer Overflow (1)

#!/usr/bin/perl

2011-01-08 ikki remote

axdcms-0.1.1 – Local File Inclusion

###############################################

2011-01-08 n0n0x webapps

Elxis CMS 2009.2 – Remote File Inclusion

###############################################

2011-01-08 n0n0x webapps

HP Data Protector Manager 6.11 – RDS Service Remote Denial of Service

#!/usr/bin/perl

2011-01-08 Pepelux dos

Winamp 5.5.8 (in_mod plugin) – Local Stack Overflow (SEH)

#!/usr/bin/python

2011-01-08 fdiskyou local

sahana agasti 0.6.5 – Multiple Vulnerabilities

:::::::-. ... ::::::. :::.

2011-01-08 dun webapps

WordPress Plugin mingle forum 1.0.26 – Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----

2011-01-08 Charles Hooper webapps

Linux Kernel < 2.6.34 (Ubuntu 10.10 x86/x64) - 'CAP_SYS_ADMIN' Local Privilege Escalation (2)

#include

2011-01-08 Joe Sylve local

Zwii 2.1.1 – Remote File Inclusion

# Exploit Title: Zwii v 2.1.1 Remote file include vulnerbility

2011-01-08 Abdi Mohamed webapps

Signed Applet Social Engineering – Code Execution (Metasploit)

##

2011-01-08 Metasploit remote

Microsoft IIS/PWS – CGI Filename Double Decode Command Execution (MS01-026) (Metasploit)

##

2011-01-08 Metasploit remote

Apple QuickTime 7.6.6 – Invalid SMIL URI Buffer Overflow (Metasploit)

##

2011-01-08 Metasploit remote

Sun Java – Runtime New Plugin docbase Buffer Overflow (Metasploit)

##

2011-01-08 Metasploit remote

Apple QuickTime 7.6.7 – _Marshaled_pUnk Code Execution (Metasploit)

##

2011-01-08 Metasploit local

Nuance PDF Reader 6.0 – Launch Stack Buffer Overflow (Metasploit)

##

2011-01-08 Metasploit local

Apple Mac OSX – mDNSResponder UPnP Location Overflow (Metasploit)

##

2011-01-08 Metasploit remote

Redmine SCM Repository 0.9.x/1.0.x – Arbitrary Command Execution (Metasploit)

##

2011-01-08 Metasploit webapps

Fonality trixbox CE 2.6.1 – ‘langChoice’ Local File Inclusion (Metasploit)

##

2011-01-08 Metasploit webapps

Mitel Audio and Web Conferencing – Command Injection (Metasploit)

##

2011-01-08 Metasploit remote

Joostina 1.3 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45732/info

2011-01-08 MustLive webapps

openSite 0.2.2 Beta – Local File Inclusion

#######################################################

2011-01-07 n0n0x webapps

StageTracker 2.5 – Denial of Service

# Exploit Title: StageTracker 2 Local POC

2011-01-07 freak_out dos

BS.Player 2.57 – Local Buffer Overflow (SEH Unicode)

#

2011-01-07 C4SS!0 G0M3S local

GNU libc/regcomp(3) – Multiple Vulnerabilities

// source: http://securityreason.com/securityalert/8003

2011-01-07 Maksymilian Arciemowicz dos

Ignition 1.3 – ‘comment.php’ Local File Inclusion

#######################################################

2011-01-06 n0n0x webapps

Openfire 3.6.4 – Multiple Cross-Site Request Forgery Vulnerabilities

Title: Multiple CSRF Vulnerabilities in Openfire 3.6.4 Administrative

2011-01-06 Riyaz Ahemed Walikar webapps

Enzip 3.00 – Local Buffer Overflow

#[+]Exploit Title: Exploit Buffer Overflow Enzip 3.00

2011-01-06 C4SS!0 G0M3S local

F3Site 2011 alfa 1 – Cross-Site Scripting / Cross-Site Request Forgery

Vulnerability ID: HTB22757

2011-01-06 High-Tech Bridge SA webapps

phpMySport 1.4 – SQL Injection / Authentication Bypass / Full Path Disclosure

Vulnerability ID: HTB22770

2011-01-06 High-Tech Bridge SA webapps

Phenotype CMS 3.0 – SQL Injection

Vulnerability ID: HTB22769

2011-01-06 High-Tech Bridge SA webapps

PHP MicroCMS 1.0.1 – Cross-Site Request Forgery / Cross-Site Scripting

Vulnerability ID: HTB22765

2011-01-06 High-Tech Bridge SA webapps

Joomla! 1.0.x – ‘ordering’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45679/info

2011-01-06 Aung Khant webapps

Lexmark X651de – Printer Ready Message Value HTML Injection

source: https://www.securityfocus.com/bid/45688/info

2011-01-06 dave b remote

PHP MicroCMS 1.0.1 – ‘page_text’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45702/info

2011-01-06 High-Tech Bridge SA webapps

Nucleus 3.61 – Multiple Remote File Inclusions

#######################################################

2011-01-05 n0n0x webapps

PhpGedView 4.2.3 – Local File Inclusion

#!/usr/bin/perl -w

2011-01-05 dun webapps

Concrete CMS 5.4.1.1 – Cross-Site Scripting / Remote Code Execution

#!/usr/bin/python

2011-01-05 mr_me webapps

Linux Kernel < 2.6.34 (Ubuntu 10.10 x86) - 'CAP_SYS_ADMIN' Local Privilege Escalation (1)

#include

2011-01-05 Dan Rosenberg local

WikLink 0.1.3 – ‘getURL.php’ SQL Injection

source: https://www.securityfocus.com/bid/45673/info

2011-01-05 Aliaksandr Hartsuyeu webapps

BlogEngine.NET 1.6 – Directory Traversal / Information Disclosure

source: https://www.securityfocus.com/bid/45681/info

2011-01-05 Deniz Cevik webapps

Openfire 3.6.4 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45682/info

2011-01-05 Walikar Riyaz Ahemed Dawalmalik webapps

Quick Notes Plus 5.0 47 – Multiple DLL Loading Arbitrary Code Executions

// source: https://www.securityfocus.com/bid/45689/info

2011-01-05 d3c0der remote

Music Animation Machine MIDI Player – Local Buffer Overflow (SEH)

# Exploit Title: Music Animation Machine MIDI Player MAMX SEH BOF

2011-01-04 Acidgen local

S40 CMS 0.4.1 – Cross-Site Request Forgery (Change Admin Password)

In The Name Of GOD

2011-01-04 pentesters.ir webapps