Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 406

Joomla! Component com_xgallery 1.0 – Local File Inclusion

# Exploit Title: Joomla Component com_xgallery 1.0 Local File Inclusion Vulnerability

2010-12-21 KelvinX webapps

ecava IntegraXor 3.6.4000.0 – Directory Traversal

Source: http://aluigi.org/adv/integraxor_1-adv.txt

2010-12-21 Luigi Auriemma remote

Microsoft IIS 7.5 (Windows 7) – FTPSVC Unauthorized Remote Denial of Service (PoC)

import socket, sys

2010-12-21 Matthew Bergin dos

jobappr 1.4 – Multiple Vulnerabilities

=======================================

2010-12-21 giudinvx webapps

Microsoft SQL Server – Payload Execution (Metasploit)

##

2010-12-21 Metasploit remote

FreeNAS 0.7.2.5543 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45522/info

2010-12-21 db.pub.mail webapps

OpenFiler – ‘device’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45523/info

2010-12-21 db.pub.mail webapps

Habari 0.6.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45530/info

2010-12-21 High-Tech Bridge SA webapps

Calibre 0.7.34 – Cross-Site Scripting / Directory Traversal

source: https://www.securityfocus.com/bid/45532/info

2010-12-21 waraxe remote

Social Share – ‘Username’ SQL Injection

source: https://www.securityfocus.com/bid/45536/info

2010-12-21 Aliaksandr Hartsuyeu webapps

Mitel Audio and Web Conferencing (AWC) – Arbitrary Shell Command Injection

source: https://www.securityfocus.com/bid/45537/info

2010-12-21 Jan Fry remote

WordPress Plugin Mediatricks Viva Thumbs – Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/45539/info

2010-12-21 Richard Brain webapps

ImpressCMS 1.2.x – ‘quicksearch_ContentContent’ HTML Injection

source: https://www.securityfocus.com/bid/45541/info

2010-12-21 High-Tech Bridge SA webapps

MHonArc 2.6.16 – Tag Nesting Remote Denial of Service

source: https://www.securityfocus.com/bid/46923/info

2010-12-21 anonymous dos

Inout Webmail Script – Persistent Cross-Site Scripting

#Name :inoutwebmail Persistent Xss Vulnerability

2010-12-20 Sid3^effects webapps

Word Splash Pro 9.5 – Local Buffer Overflow

# Exploit Title: Word Splash Pro Import then click on Word List Builder button

2010-12-20 h1ch4m local

PHP-Nuke MaticMarket 2.02 – Local File Inclusion

#MaticMarket 2.02 for PHP Nuke LFI Vulnerability

2010-12-20 xer0x webapps

Elcom CommunityManager.NET – Authentication Bypass

Elcom CommunityManager.NET Auth Bypass Vulnerability - Security Advisory - SOS-10-004

2010-12-20 Sense of Security webapps

MP3 CD Converter Professional – Local Buffer Overflow (SEH)

#!/usr/bin/python

2010-12-20 C4SS!0 G0M3S local

Accmeware MP3 Joiner Pro 5.0.9 – Denial of Service (PoC)

# Exploit Title: Accmeware MP3 Joiner Pro 5.0.9 DoS PoC

2010-12-20 0v3r dos

Accmeware MP3 Speed 5.0.9 – Denial of Service (PoC)

# Exploit Title: Accmeware MP3 Speed 5.0.9 DoS PoC

2010-12-20 0v3r dos

Accmeware MP3 Cut 5.0.9 – Denial of Service (PoC)

# Exploit Title: Accmeware MP3 Cut 5.0.9 DoS PoC

2010-12-20 0v3r dos

plx Ad Trader 3.2 – Authentication Bypass

# Vendor or Software Link: http://www.plxwebdev.com/script/ad_trader/

2010-12-20 R4dc0re webapps

PHP Web Scripts Ad Manager Pro 3.0 – SQL Injection

# Vendor or Software Link: http://www.phpwebscripts.com/admanagerpro/

2010-12-20 R4dc0re webapps

Joomla! Component JotLoader 2.2.1 – Local File Inclusion

) ) ) ( ( ( ( ( ) )

2010-12-20 v3n0m webapps

Apple iOS Safari – body alink Remote Crash

2010-12-20 Yakir Wizman dos

Vacation Rental Script 4.0 – Arbitrary File Upload

Script Name: Vacation Rental Script

2010-12-20 Br0ly webapps

Apple iOS Safari – ‘decodeURI’ Remote Crash

2010-12-20 Yakir Wizman dos

Social Share – ‘postid’ SQL Injection

source: https://www.securityfocus.com/bid/45497/info

2010-12-20 Aliaksandr Hartsuyeu webapps

Mafya Oyun Scrpti – ‘profil.php’ SQL Injection

source: https://www.securityfocus.com/bid/45501/info

2010-12-20 DeadLy DeMon webapps

Oto Galery 1.0 – Multiple SQL Injections

+Name : Oto Galery v1.0 *www.cyber-warrior.org*

2010-12-19 DeadLy DeMon webapps

Joomla! Component JE Auto – Local File Inclusion

#Name : Joomla com_jeauto LFI Vulnerability

2010-12-19 Sid3^effects webapps

Redmine SCM Repository – Arbitrary Command Execution (Metasploit)

##

2010-12-19 Metasploit remote

Ecava IntegraXor Remote – ActiveX Buffer Overflow (PoC)

#!/usr/bin/python

2010-12-18 Jeremy Brown dos

MCFileManager Plugin for TinyMCE 3.2.2.3 – Arbitrary File Upload

==============================================

2010-12-18 Vladimir Vorontsov webapps