Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 424

Microsoft Works 7 – ‘WkImgSrv.dll’ WKsPictureInterface() ActiveX (Metasploit)

##

2010-09-25 Metasploit remote

AOL 9.5 – ‘Phobos.Playlist Import()’ Stack Buffer Overflow (Metasploit)

##

2010-09-25 Metasploit local

Adobe – FlateDecode Stream Predictor 02 Integer Overflow (Metasploit) (2)

##

2010-09-25 Metasploit local

ProShow Gold 4.0.2549 – ‘.psh’ Local Stack Buffer Overflow (Metasploit)

##

2010-09-25 Metasploit local

PointDev IDEAL Migration – Buffer Overflow (Metasploit)

##

2010-09-25 Metasploit dos

gAlan 0.2.1 – Local Buffer Overflow (Metasploit) (2)

##

2010-09-25 Metasploit local

Microsoft PowerPoint Viewer – TextBytesAtom Stack Buffer Overflow (MS10-004) (Metasploit)

##

2010-09-25 Metasploit local

Adobe Illustrator CS4 14.0.0 – Postscript (.eps) Buffer Overflow (Metasploit)

##

2010-09-25 Metasploit local

Adobe Acrobat – Bundled LibTIFF Integer Overflow (Metasploit)

##

2010-09-25 Metasploit local

Adobe – JBIG2Decode Memory Corruption (Metasploit) (2)

##

2010-09-25 Metasploit local

Adobe – ‘Collab.collectEmailInfo()’ Local Buffer Overflow (Metasploit)

##

2010-09-25 Metasploit local

Microsoft Visual Basic – ‘.VBP’ Local Buffer Overflow (Metasploit)

##

2010-09-25 Metasploit local

Adobe – ‘Collab.getIcon()’ Local Buffer Overflow (Metasploit) (2)

##

2010-09-25 Metasploit local

Microsoft HTML Help Workshop 4.74 – ‘.hhp’ compiled Buffer Overflow (Metasploit) (4)

##

2010-09-25 Metasploit local

Adobe Flash Player – ‘newfunction’ Invalid Pointer Use (Metasploit) (2)

##

2010-09-25 Metasploit local

Collaborative Passwords Manager 1.07 – Multiple Local File Inclusions

[~] Collaborative Passwords Manager 1.07 Multiple Local Include Exploit

2010-09-24 sh00t0ut webapps

Microsoft Excel – OBJ Record Stack Overflow

'''

2010-09-24 Abysssec local

Microsoft MPEG Layer-3 Audio Decoder – Division By Zero

'''

2010-09-24 Abysssec dos

FreePBX 2.8.0 – Recordings Interface Allows Remote Code Execution

Trustwave's SpiderLabs Security Advisory TWSL2010-005:

2010-09-24 Trustwave's SpiderLabs webapps

SnackAmp 3.1.3B – SMP Buffer Overflow (SEH)

# Exploit Title: SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability (SEH)

2010-09-24 James Fitts local

Joomla! Component Elite Experts – SQL Injection

[+]Title Joomla Component (com_elite_experts) SQL Injection Vulnerability

2010-09-24 **RoAd_KiLlEr** webapps

Traidnt UP – Cross-Site Request Forgery (Add Admin)

# Exploit Title: Traidnt UP - CSRF Add Admin Account

2010-09-24 John Johnz webapps

WebDAV – Application DLL Hijacker (Metasploit)

##

2010-09-24 Metasploit remote

Linksys WRT54 Access Point – ‘apply.cgi’ Remote Buffer Overflow (Metasploit)

##

2010-09-24 Metasploit remote

Adobe Acrobat Reader and Flash – ‘newfunction’ Remote Code Execution

'''

2010-09-23 Abysssec dos

Microsoft Excel – HFPicture Record Parsing Memory Corruption

'''

2010-09-23 Abysssec dos

WAnewsletter 2.1.2 – SQL Injection

================================================

2010-09-23 BrOx-Dz webapps

GeekLog 1.3.8 (filemgmt) – SQL Injection

GeekLog v1.3.8 (filemgmt) SQL Injection Vulnerability

2010-09-23 Gamoscu webapps

OvBB 0.16a – Multiple Local File Inclusions

OvBB v0.16a Multiple Local File Inclusion Vulnerabilities

2010-09-23 cOndemned webapps

Microsoft Excel 2002 – Memory Corruption

source: https://www.securityfocus.com/bid/43419/info

2010-09-23 Abysssec dos

OpenText LiveLink 9.7.1 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/43420/info

2010-09-23 Alejandro Ramos webapps

Joomla! Component com_tax – ‘eid’ SQL Injection

source: https://www.securityfocus.com/bid/43461/info

2010-09-23 FL0RiX webapps

Adobe Shockwave Director tSAC – Chunk Memory Corruption

'''

2010-09-22 Abysssec dos

gausCMS – Multiple Vulnerabilities

'''

2010-09-22 Abysssec webapps

Skybluecanvas 1.1-r248 – Cross-Site Request Forgery

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0

2010-09-22 Sweet webapps

MP3 Workstation 9.2.1.1.2 – Local Overflow (SEH) (Metasploit)

# Exploit Climatisée fermee la Porte DeRrière Twaa xDeii

2010-09-22 Madjix local

BSI Hotel Booking System Admin 1.4/2.0 – Authentication Bypass

-----------------------------------------------------------------------------------------

2010-09-22 K-159 webapps

Joomla! Component TimeTrack 1.2.4 – Multiple SQL Injections

TimeTrack 1.2.4 Joomla Component Multiple SQL Injection Vulnerabilities

2010-09-22 Salvatore Fresta webapps

Joomla! Component Joostina – SQL Injection

#

2010-09-22 Gamoscu webapps

GreenBrowser – ‘RSRC32.dll’ DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/43414/info

2010-09-22 anT!-Tr0J4n remote

Easy Office Recovery – ‘dwmapi.dll’ DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/43416/info

2010-09-22 anT!-Tr0J4n remote

Sothink SWF Decompiler – ‘dwmapi.dll’ DLL Loading Arbitrary Code Execution

source: https://www.securityfocus.com/bid/43417/info

2010-09-22 anT!-Tr0J4n remote

Microsoft Excel – WOPT Record Parsing Heap Memory Corruption

'''

2010-09-21 Abysssec dos

Personal.Net Portal – Multiple Vulnerabilities

'''

2010-09-21 Abysssec webapps

Acoustica Audio Converter Pro 1.1 (build 25) – ‘.mp3 / .wav / .ogg / .wma’ Local Heap Overflow

# Exploit Title: Acoustica Audio Converter Pro 1.1 (build 25) Heap Overflow(.mp3.wav.ogg.wma) PoC

2010-09-21 Carlos Mario Penagos Hollmann local

ibPhotohost 1.1.2 – SQL Injection

#################################################

2010-09-21 fred777 webapps

Softek Barcode Reader Toolkit ActiveX 7.1.4.14 – ‘SoftekATL.dll’ Remote Buffer Overflow

Softek Barcode Reader Toolkit ActiveX 7.1.4.14 (SoftekATL.dll) Buffer Overflow PoC

2010-09-21 LiquidWorm remote

Novell iPrint Client – ActiveX Control call-back-url Buffer Overflow (Metasploit)

##

2010-09-21 Trancer remote

Novell iPrint Client – ActiveX Control ‘debug’ Remote Buffer Overflow (Metasploit)

##

2010-09-21 Trancer remote

mountall 2.15.2 (Ubuntu 10.04/10.10) – Local Privilege Escalation

# source: https://www.securityfocus.com/bid/43084/info

2010-09-21 fuzz local