Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 419
Simple Directory Listing 2.1 – ‘SDL2.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42359/info
W-Agora 4.2.1 – ‘search.php3?bn’ Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/44370/info
W-Agora 4.2.1 – ‘search.php?bn’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44370/info
IBM Tivoli Access Manager for E-Business – ‘/ivt/ivtserver?parm1’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/acl?method’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/domain?method’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/group?method’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/gso?method’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/gsogroup?method’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/os?method’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/pop?method’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/rule?method’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/user?method’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/webseal?method’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44382/info
sNews CMS – Multiple Cross-Site Scripting Vulnerabilities
Vulnerability ID: HTB22638
Adobe Shockwave Player – ‘rcsL chunk’ Memory Corruption
Abysssec Inc Public Advisory
Microsoft Windows Mobile 6.1/6.5 – Double-Free Denial of Service
Vendor: Microsoft
Sawmill Enterprise < 8.1.7.3 - Multiple Vulnerabilities
SEC Consult Security Advisory < 20101021-0 >
Squirrelcart PRO 3.0.0 – Blind SQL Injection
Squirrelcart PRO 3.0.0 Blind SQL Injection Vulnerability
Microsoft Windows Mobile – Overly Long vCard Name Field Denial of Service
source: https://www.securityfocus.com/bid/44287/info
Wiccle Web Builder 2.0 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/44295/info
Micro CMS 1.0 – ‘name’ HTML Injection (2)
source: https://www.securityfocus.com/bid/44300/info
pecio CMS 2.0.5 – ‘target’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44304/info
Microsoft ASP.NET – Auto-Decryptor File Download (MS10-070)
#!/usr/bin/ruby -w
LibSMI smiGetNode – Buffer Overflow When Long OID Is Given In Numerical Form
-----BEGIN PGP SIGNED MESSAGE-----
Travel Portal Script – Cross-Site Request Forgery (Admin Password Change)
=====================================================
Event Ticket Portal Script Admin Password Change – Cross-Site Request Forgery
===========================================================
Hanso Converter 1.4.0 – ‘.ogg’ Denial of Service
===================================================
phpCheckZ 1.1.0 – Blind SQL Injection
phpCheckZ 1.1.0 Blind SQL Injection Vulnerability
Linux Kernel 2.6.36-rc8 – ‘RDS Protocol’ Local Privilege Escalation
// source: http://www.vsecurity.com/resources/advisory/20101019-1/
Winamp 5.5.8 (in_mod plugin) – Local Stack Overflow
#!/usr/bin/python
PowerDVD 5.0.1107 – ‘trigger.dll’ DLL Loading Arbitrary Code Execution
// source: https://www.securityfocus.com/bid/44193/info
ALPHA Player 2.4 – ‘.bmp’ Buffer Overflow
source: https://www.securityfocus.com/bid/44196/info
Phoenix Project Manager 2.1.0.8 – DLL Loading Arbitrary Code Execution
// source: https://www.securityfocus.com/bid/44198/info
Cool iPhone Ringtone Maker 2.2.3 – ‘dwmapi.dll’ DLL Loading Arbitrary Code Execution
// source: https://www.securityfocus.com/bid/44205/info
VideoLAN VLC Media Player 1.1.4 Mozilla MultiMedia Plugin – Remote Code Execution
source: https://www.securityfocus.com/bid/44211/info
MASS PLAYER 2.1 – File Processing Remote Denial of Service
source: https://www.securityfocus.com/bid/44220/info
Mozilla Firefox SeaMonkey 3.6.10 / Thunderbird 3.1.4 – ‘document.write’ Memory Corruption
source: https://www.securityfocus.com/bid/44247/info
sNews 1.7 – ‘snews.php’ Cross-Site Scripting / HTML Injection
source: https://www.securityfocus.com/bid/44255/info
4Site CMS 2.6 – ‘cat’ SQL Injection
source: https://www.securityfocus.com/bid/44258/info
GNU C library dynamic linker – ‘$ORIGIN’ Expansion
from: http://marc.info/?l=full-disclosure&m=128739684614072&w=2
411cc – Multiple SQL Injections
===================================================================
GeekLog 1.7.0 – ‘FCKeditor’ Arbitrary File Upload
###################################################