Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 428

PaysiteReviewCMS 1.1 – ‘search.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43213/info

2010-09-14 Valentin Hoebel webapps

PaysiteReviewCMS – ‘image.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43213/info

2010-09-14 Valentin Hoebel webapps

Mozilla Firefox 3.6.8 – ‘Math.random()’ Cross Domain Information Disclosure

// source: https://www.securityfocus.com/bid/43222/info

2010-09-14 Amit Klein remote

Kingsoft AntiVirus 2010.04.26.648 – Kernel Buffer Overflow

#!/usr/bin/python

2010-09-13 Lufeng Li dos

Group Office 3.5.9 – SQL Injection

=====================================================================================

2010-09-13 ViciOuS webapps

osDate – ‘uploadvideos.php’ Arbitrary File Upload

====================================================

2010-09-13 Xa7m3d webapps

Luftguitar CMS – Upload Arbitrary File

'''

2010-09-13 Abysssec webapps

RealPlayer – FLV Parsing Integer Overflow

'''

2010-09-13 Abysssec dos

Joomla! Component com_mtree 2.1.5 – Arbitrary File Upload

# Exploit Title: Joomla Component Mosets Tree 2.1.5 Shell Upload

2010-09-13 jdc webapps

Storyteller CMS – ‘var’ Local File Inclusion

==

2010-09-13 h4ck3r webapps

UCenter Home 2.0 – SQL Injection

__--==UCenter Home 2.0 -(0day) Remote SQL Injection Vulnerability==--__

2010-09-13 KnocKout webapps

AA SMTP Server 1.1 – Crash (PoC)

=========================

2010-09-13 SONIC dos

MyHobbySite 1.01 – SQL Injection / Authentication Bypass

#########################################################################################

2010-09-12 YuGj VN webapps

eshtery CMS – SQL Injection

'''

2010-09-12 Abysssec webapps

Adobe Acrobat and Reader – ‘pushstring’ Memory Corruption

'''

2010-09-12 Abysssec local

System Shop – ‘Module aktka’ SQL Injection

_____ ______ _____ _____ ______ _______

2010-09-12 secret webapps

Alstrasoft AskMe Pro 2.1 – ‘profile.php’ SQL Injection

########################################################################################

2010-09-12 CoBRa_21 webapps

ASP Nuke – SQL Injection

'''

2010-09-11 Abysssec webapps

Microsoft Word 2007 SP2 – sprmCMajority Buffer Overflow

'''

2010-09-11 Abysssec dos

piwigo-2.1.2 – Multiple Vulnerabilities

--=Sql injection=--

2010-09-11 Sweet webapps

HP Data Protector Media Operations 6.11 (Multiple Modules) – Null Pointer Dereference Denial of Service

#Exploit Title: HP Data Protector Media Operations 6.11 Multiple NULL Pointer Dereference Local DoS (0day)

2010-09-11 d0lc3 dos

YOPS – Web Server Remote Command Execution

[DCA-00015]

2010-09-11 Rodrigo Escobar remote

Joomla! Component Jphone 1.0 Alpha 3 – Local File Inclusion

JPhone 1.0 Alpha 3 Component Joomla Local File Inclusion

2010-09-10 Chip d3 bi0s webapps

fcms 2.2.3 – Remote File Inclusion

[x] Exploit Title: [FCMS_2.2.3 Remote File Inclusion ]

2010-09-10 LoSt.HaCkEr webapps

Excel RTD – Memory Corruption

'''

2010-09-10 Abysssec local

Webkit (Apple Safari < 4.1.2/5.0.2 / Google Chrome < 5.0.375.125) - Memory Corruption

TITLE: WEBKIT (APPLE SAFARI < 4.1.2/5.0.2 & GOOGLE CHROME < 5.0.375.125) MEMORY CORRUPTION VULNERABILITY

2010-09-10 Jose A. Vazquez dos

symphony 2.0.7 – Multiple Vulnerabilities

Symphony 2.0.7 Multiple Vulnerabilities

2010-09-10 JosS webapps

Datetopia Buy Dating Site – Cross-Site Scripting

source: https://www.securityfocus.com/bid/42973/info

2010-09-10 Moudi webapps

festos CMS 2.3b – Multiple Vulnerabilities

'''

2010-09-09 Abysssec webapps

Mozilla Firefox 3.6.3 – XSLT Sort Remote Code Execution

'''

2010-09-09 Abysssec dos

Visitors Google Map Lite 1.0.1 Free mod_visitorsgooglemap Module – SQL Injection

Visitors Google Map Lite 1.0.1 (FREE) (module mod_visitorsgooglemap Remote Sql Injection)

2010-09-09 Chip d3 bi0s webapps

aradblog – Multiple Vulnerabilities

'''

2010-09-09 Abysssec webapps

Acoustica MP3 Audio Mixer 2.471 – Extended .M3U Directives (SEH)

# Exploit Title: Acoustica MP3 Audio Mixer 2.471 Extended M3U directives SEH

2010-09-09 Carlos Mario Penagos Hollmann local

ES Simple Download 1.0. – Local File Inclusion

----------------------------Information------------------------------------------------

2010-09-09 Kazza webapps

Audiotran 1.4.2.4 – Local Overflow (SEH)

#Audiotran 1.4.2.4 SEH Overflow Exploit 0 day

2010-09-09 Abhishek Lyall local

CS-Cart 1.3.3 – ‘install.php’ Cross-Site Scripting

# Exploit Title: [CS CART 1.3.3 INSTALL.PHP XSS]

2010-09-09 crmpays webapps

SmarterTools SmarterStats 5.3.3819 – ‘frmHelp.aspx’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43110/info

2010-09-09 David Hoyt webapps

sirang web-based d-control – Multiple Vulnerabilities

'''

2010-09-08 Abysssec webapps

Microsoft Visio 2002 – ‘.DXF’ Local Stack Overflow

'''

2010-09-08 Abysssec local

FreeBSD 8.1/7.3 – ‘vm.pmap’ Local Race Condition

-----BEGIN PGP SIGNED MESSAGE-----

2010-09-08 Maksymilian Arciemowicz dos

weborf 0.12.2 – Directory Traversal

Title: Weborf httpd

2010-09-07 Rew remote

dynpage 1.0 – Multiple Vulnerabilities

'''

2010-09-07 Abysssec webapps

Novell Netware – NWFTPD RMD/RNFR/DELE Argument Parsing Buffer Overflow

'''

2010-09-07 Abysssec dos

java Bridge 5.5 – Directory Traversal

Date : Sep 6, 2010

2010-09-07 Saxtor webapps

ColdCalendar 2.06 – SQL Injection

#!/usr/bin/python

2010-09-07 mr_me webapps

ColdBookmarks 1.22 – SQL Injection

# ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability

2010-09-07 mr_me webapps

ColdOfficeView 2.04 – Multiple Blind SQL Injections

# ColdGen - coldofficeview v2.04 Remote Blind SQL Injection vulnerabilities

2010-09-07 mr_me webapps

ColdUserGroup 1.06 – Blind SQL Injection

#!/usr/bin/python

2010-09-07 mr_me webapps

QQPlayer 2.3.696.400p1 – ‘.wav’ Denial of Service

#!/usr/bin/python

2010-09-07 s-dz dos

Internet Download Accelerator 5.8 – Remote Buffer Overflow (PoC)

2010-09-07 eidelweiss dos