AoA Audio Extractor 2.x – ActiveX ROP
AoA Audio Extractor v2.x ActiveX ROP exploit
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 421
Joomla! / Mambo Component com_trade – ‘PID’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/43915/info
PHP-Fusion Mod Mg User Fotoalbum 1.0.1 – SQL Injection
----------------------------Information------------------------------------------------
FoxPlayer 2.3.0 – ‘.m3u’ Buffer Overflow
#!/usr/bin/perl
Site2Nite Auto e-Manager – SQL Injection
==================================================
Adobe Dreamweaver CS4 – ‘mfc80esn.dll’ DLL Loading Arbitrary Code Execution
// source: https://www.securityfocus.com/bid/43911/info
IsoBuster 2.7 – ‘wnaspi32.dll’ DLL Loading Arbitrary Code Execution
// source: https://www.securityfocus.com/bid/43912/info
NetStumbler 0.4 – ‘mfc71esn.dll’ DLL Loading Arbitrary Code Execution
// source: https://www.securityfocus.com/bid/43913/info
Microsoft Visio 2007 – ‘mfc80esn.dll’ DLL Loading Arbitrary Code Execution
// source: https://www.securityfocus.com/bid/43914/info
Chipmunk Pwngame – Multiple SQL Injections
===================================================
Joomla! Component JS Calendar 1.5.1 – Multiple Vulnerabilities
JS Calendar 1.5.1 Joomla Component Multiple Remote Vulnerabilities
VideoDB 3.0.3 – Multiple Vulnerabilities
# Exploit Title: VideoDB Multiple Vulnerabilities
xWeblog 2.2 – ‘arsiv.asp?tarih’ SQL Injection
#!/usr/bin/env python
Flex Timesheet – Authentication Bypass
===================================================
Dupehunter Professional 9.0.0.3911 – ‘Fwpuclnt.dll’ DLL Loading Arbitrary Code Execution
// source: https://www.securityfocus.com/bid/43863/info
Lantern CMS – ’11-login.asp’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/43865/info
OPEN IT OverLook 5 – ‘title.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/43872/info
libc/glob(3) – Resource Exhaustion / Remote ftpd-anonymous (Denial of Service)
Source: http://securityreason.com/securityalert/7822
Feindura File Manager 1.0(rc) – Arbitrary File Upload
===================================================
xWeblog 2.2 – ‘oku.asp?makale_id’ SQL Injection
===================================================
Adobe Acrobat and Reader – Array Indexing Remote Code Execution
nSense Vulnerability Research Security Advisory NSENSE-2010-001
Microsoft ASP.NET – Padding Oracle (MS10-070)
# Source: http://blog.mindedsecurity.com/2010/10/breaking-net-encryption-with-or-without.html
Joomla! Component Club Manager – ‘cm_id’ SQL Injection
source: https://www.securityfocus.com/bid/43821/info
Backbone Technology Expression 18.9.2010 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/43910/info
CuteNews – ‘page’ Local File Inclusion
==========================================================
SPAW Editor 2.0.8.1 – Local File Inclusion
# Exploit Title: local file include
Cag CMS 0.2 – Cross-Site Scripting / Blind SQL Injection
-----------------------------------------------------------------------------------------
Elxis 2009.2 rev2631 – SQL Injection
source: https://www.securityfocus.com/bid/43743/info
SquirrelMail Virtual Keyboard Plugin – ‘vkeyboard.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/43749/info
Cilem Haber 1.4.4 (Tr) – Database Disclosure
#!/usr/bin/env python