Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 404

Xynph FTP Server 1.0 – USER Denial of Service

# Exploit Title: Xynph 1.0 USER Denial of Service Exploit

2011-01-04 freak_out dos

WonderCMS 0.3.3 – ‘editText.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45712/info

2011-01-04 High-Tech Bridge SA webapps

Sahana Agasti 0.6.4 – Multiple Remote File Inclusions

#Sahana Agasti

2011-01-03 n0n0x webapps

Music Animation Machine MIDI Player – Local Crash (PoC)

# Exploit Title: Music Animation Machine MIDI Player Local Crash PoC

2011-01-03 c0d3R'Z dos

Wireshark – ENTTEC DMX Data RLE Buffer Overflow

# source: https://www.securityfocus.com/bid/45634/info

2011-01-03 non-customers crew dos

PHP 5.3.2 – ‘zend_strtod()’ Floating-Point Value Denial of Service

source: https://www.securityfocus.com/bid/45668/info

2011-01-03 Rick Regan dos

Ace Video Workshop 1.2.0.0 – ‘ir50_lcs.dll’ DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/45675/info

2011-01-03 d3c0der remote

OpenLDAP 2.4.x – ‘modrdn’ NULL OldDN Remote Denial of Service

source: https://www.securityfocus.com/bid/46831/info

2011-01-03 Serge Dubrouski dos

GALLARIFIC PHP Photo Gallery Script – ‘gallery.php’ SQL Injection

GALLARIFIC PHP Photo Gallery Script (gallery.php) Sql Injection Vulnerability

2011-01-02 AtT4CKxT3rR0r1ST webapps

YourTube 1.0 – Cross-Site Request Forgery (Add User)

YourTube v1.0 CSRF Vulnerability (Add User)

2011-01-02 AtT4CKxT3rR0r1ST webapps

amoeba CMS 1.01 – Multiple Vulnerabilities

#!/usr/bin/python

2011-01-02 mr_me webapps

Microsoft Windows – Class Handling (MS10-073)

#include

2011-01-02 Tarjei Mandt dos

CoolPlayer 2.18 – DEP Bypass

# Exploit Title: CoolPlayer 2.18 DEP Bypass

2011-01-02 blake local

HP Photo Creative 2.x audio.Record.1 – ActiveX Control Remote Stack Buffer Overflow

2011-01-01 rgod remote

KLINK – SQL Injection

##########################[Andr�s G�mez]################################

2011-01-01 Mauro Rossi & Andres Gomez webapps

ChurchInfo 1.2.12 – SQL Injection

:::::::-. ... ::::::. :::.

2011-01-01 dun webapps

Bywifi 2.8.1 – Local Stack Buffer Overflow

# Exploit Title: [bywifi 2.8.1 stack buffer overflow]

2011-01-01 anonymous local

Sahana Agasti 0.6.4 – SQL Injection

:::::::-. ... ::::::. :::.

2011-01-01 dun webapps

Tech Shop Technote 7 – SQL Injection

# Exploit Title: Technote7(Commercial Version, Free Version)

2011-01-01 MaJ3stY webapps

ImgBurn 2.4 – ‘dwmapi.dll’ DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/45657/info

2011-01-01 d3c0der dos

PHPB2B 4.1 – ‘q’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51221/info

2011-01-01 H4ckCity Security Team webapps

GIMP 2.6.7 – Multiple File Plugins Remote Stack Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/45647/info

2010-12-31 non customers dos

Ignition 1.3 – ‘page.php’ Local File Inclusion

Ignition 1.3 (page) Local File Inclusion Vulnerability

2010-12-30 cOndemned webapps

Ignition 1.3 – Remote Code Execution

2010-12-30 cOndemned webapps

Chilkat Software FTP2 – ActiveX Component Remote Code Execution

original url: http://retrogod.altervista.org/9sg_chilkat.html

2010-12-30 rgod remote

QuickPHP Web Server – Arbitrary ‘.php’ File Download

# _ ____ __ __ ___

2010-12-30 Yakir Wizman remote

CA ARCserve D2D r15 – Web Service Servlet Code Execution

Computer Associates ARCserve D2D r15 Web Service Apache Axis2 World Accessible Servlet

2010-12-30 rgod remote

ardeaCore 2.25 – PHP Framework Remote File Inclusion

[!] Discovered: n0n0x

2010-12-29 n0n0x webapps

DD-WRT 24-preSP2 – Information Disclosure

# Exploit Title: DD-WRT Information Disclosure Vulnerability

2010-12-29 Craig Heffner remote

News Script PHP Pro – ‘FCKeditor’ Arbitrary File Upload

==============================================================================

2010-12-29 Net.Edit0r webapps

IrfanView 4.27 – ‘JP2000.dll’ plugin Denial of Service

# done by BraniX

2010-12-29 BraniX dos

kaibb 1.0.1 – Multiple Vulnerabilities

Vulnerability ID: HTB22749

2010-12-29 High-Tech Bridge SA webapps

DzTube – SQL Injection

Title: DzTube SQL Injection Vulnerability

2010-12-29 errnick qwe webapps

PHP-AddressBook 6.2.4 – ‘group.php’ SQL Injection

#Exploit Title : PHP-AddressBook v6.2.4 SQL INJECTION VULNERABILITIES

2010-12-29 hiphop webapps

LoveCMS 1.6.2 – Cross-Site Request Forgery / Code Injection

#Exploit Title : LoveCMS 1.6.2 - CSRF Code Injection Vulnerability

2010-12-29 hiphop webapps

PiXie CMS 1.04 – Multiple Cross-Site Request Forgery Vulnerabilities

Add Super User:

2010-12-29 Ali Raheem webapps

QuickTime Picture Viewer 7.6.6 JP2000 – Denial of Service

# done by BraniX

2010-12-29 BraniX dos

Siteframe CMS 3.2.3 – ‘user.php’ SQL Injection

# Exploit Title: Siteframe 'user.php' SQL Injection Vulnerability

2010-12-29 AnGrY BoY webapps

DGNews 2.1 – SQL Injection

#Remote SQL Injection Vulnerability

2010-12-29 kalashnikov webapps

Digital Music Pad 8.2.3.4.8 – ‘.pls’ Local Overflow (SEH)

#Digital Music Pad Version 8.2.3.4.8 SEH overflow

2010-12-29 Abhishek Lyall local

TYPO3 – Arbitrary File Retrieval

2010-12-29 ikki webapps

Discovery TorrentTrader 2.6 – Multiple Vulnerabilities

# Exploit Title: TorrentTrader 2.6 Multiple vulnerabilities

2010-12-29 EsS4ndre webapps

WordPress Core 3.0.3 – Persistent Cross-Site Scripting (Internet Explorer 6/7 / NS8.1)

# Exploit Title: Wordpress 3.0.3 stored XSS IE7,6 NS8.1

2010-12-29 Saif webapps

TYPSoft FTP Server 1.10 – ‘RETR’ Denial of Service (2)

#!/usr/bin/python

2010-12-29 emgent dos

httpdasm 0.92 – Directory Traversal

# ------------------------------------------------------------------------

2010-12-29 John Leitch remote

QuickPHP Web Server 1.9.1 – Directory Traversal

# ------------------------------------------------------------------------

2010-12-29 John Leitch remote

LightNEasy 3.2.2 – Multiple Vulnerabilities

Vulnerability ID: HTB22750

2010-12-29 High-Tech Bridge SA webapps

OpenClassifieds 1.7.0.3 – Chained: Captcha Bypass / SQL Injection / Persistent Cross-Site Scripting on FrontPage

Author:Michael Brooks (Rook)

2010-12-28 Michael Brooks webapps

Microsoft Windows Fax Services Cover Page Editor – ‘.cov’ Memory Corruption

2010-12-28 rgod dos

HotWeb Scripts HotWeb Rentals – ‘PageId’ SQL Injection

source: https://www.securityfocus.com/bid/45567/info

2010-12-28 non customers webapps