Brooky CubeCart 2.0.1 – SQL Injection
===================================================================
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 420
Fat Player 0.6b – ‘.wav’ Local Buffer Overflow (SEH)
# Exploit Title: FatPlayer 0.6b Malicious WAV Buffer Overflow Vulnerability (SEH)
Microsoft ASP.NET – Padding Oracle File Download (MS10-070)
#!/usr/bin/ruby -w
Microsoft Windows – NTLM Weak Nonce (MS10-012)
Windows SMB NTLM Authentication Weak Nonce Vulnerability
Novel eDirectory DHost Console 8.8 SP3 – Local Overwrite (SEH)
# Exploit Title: Novel eDirectory DHost Console 8.8 SP3 Local SEH Overwrite
WikiWebHelp 0.3.3 – Insecure Cookie Handling
===============================================
Tastydir 1.2 (1216) – Multiple Vulnerabilities
# Exploit Title: Tastydir
Kisisel Radyo Script – Multiple Vulnerabilities
Kisisel Radyo Script - Multiple Vulnerabilities
Opera 10.63 – SVG Animation Element Denial of Service
# Exploit Title: Opera Denial of Service by SVG Element
Microsoft Office – ‘HtmlDlgHelper’ Class Memory Corruption (MS10-071)
Core Security Technologies - CoreLabs Advisory
ConvexSoft DJ Audio Mixer – Denial of Service
#Exploit Title :ConvexSoft DJ Audio Mixer Denial of Service Vulnerability
PHP Hosting Directory 2.0 – Database Disclosure
#!/usr/bin/env python
KCFinder 2.2 – Arbitrary File Upload
: # Exploit Title: kcfinder 2.2 upload shell :
PCDJ Karaoki 0.6.3819 – Denial of Service
#Exploit Title :Karaoki Denial of Service Vulnerability
DJ Legend 6.01 – Denial of Service
#Exploit Title :DJ Legend Denial of Service Vulnerability
DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) – Buffer Overflow
Source: http://aluigi.org/adv/realwin_1-adv.txt
Rocket Software UniData 7.2.7.3806 – Denial of Service
Source: http://aluigi.org/adv/unirpcd_1-adv.txt
IBM solidDB 6.5.0.3 – Denial of Service
Source: http://aluigi.org/adv/soliddb_1-adv.txt
STDU Explorer 1.0.201 – ‘dwmapi.dll’ DLL Loading Arbitrary Code Execution
// source: https://www.securityfocus.com/bid/44128/info
1CLICK DVD Converter 2.1.7.1 – Multiple DLL Loading Arbitrary Code Execution Vulnerabilities
// source: https://www.securityfocus.com/bid/44163/info
eXV2 CMS – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/44169/info
Data/File – upload and Management Arbitrary File Upload
: # Exploit Title: Data/File upload and management local shell upload :
Ease Jukebox 1.30 – Denial of Service
#Exploit Title :Ease Jukebox 1.30 Dos vulnerability
Xlrstats 2.0.1 – SQL Injection
----------------------------------------------------------------------------
TWiki 5.0 – ‘/bin/view?rev’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44103/info
TWiki 5.0 – bin/login Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/44103/info
Oracle Java 6 – OBJECT tag ‘launchjnlp’/’docbase’ Remote Buffer Overflow
Source: http://code.google.com/p/skylined/issues/detail?id=23
Mozilla Firefox 3.5.10/3.6.6 – ‘WMP’ Memory Corruption Using Popups
Source: http://code.google.com/p/skylined/issues/detail?id=21
Oracle Java – APPLET Tag Children Property Memory Corruption
Source: http://skypher.com/index.php/2010/10/13/issue-18-oracle-java-applet-childre/
Oracle Virtual Server Agent – Command Injection
Oracle Virtual Server Agent Command Injection
Oracle Solaris – ‘su’ Crash
From http://cvs.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/su/su.c
Exponent CMS 0.97 – Multiple Vulnerabilities
Exponent CMS v0.97 Multiple Vulnerabilities
Winamp 5.5.8.2985 – Multiple Buffer Overflows
Source: http://aluigi.org/adv/winamp_1-adv.txt
Joomla! Component Jstore – ‘Controller’ Local File Inclusion
source: https://www.securityfocus.com/bid/44053/info
Torrent DVD Creator – ‘quserex.dll’ DLL Loading Arbitrary Code Execution
// source: https://www.securityfocus.com/bid/44054/info
Ronny CMS 1.1 r935 – Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/44066/info
PluXml 5.0.1 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/44069/info
Disk Pulse Server 2.2.34 – Remote Buffer Overflow
#!/usr/bin/python
WikiWebHelp 0.3.3 – Cross-Site Request Forgery
#Blog: yoyahack.blogspot.com
Collabtive 0.65 – Multiple Vulnerabilities
ANATOLIA SECURITY ADVISORY
Oracle Fusion Middleware 10.1.2/10.1.3 – BPEL Console Cross-Site Scripting
source: https://www.securityfocus.com/bid/43954/info
e2eSoft VCam – DLL Loading Arbitrary Code Execution
source: https://www.securityfocus.com/bid/44051/info
Notepad++ 5.8.2 – ‘libtidy.dll’ DLL Loading Arbitrary Code Execution
source: https://www.securityfocus.com/bid/44052/info
Sync Breeze Server 2.2.30 – Remote Buffer Overflow
#!/usr/bin/python
OrangeHRM 2.6.0.1 – Local File Inclusion
# Exploit Title: OrangeHRM 2.6.0.1 Local File Inclusion Vulnerability
BaconMap 1.0 – SQL Injection
------------------------------------------------------------------------
BaconMap 1.0 – Local File Disclosure
------------------------------------------------------------------------