MUSE 4.9.0.006 – ‘.m3u’ Local Buffer Overflow
# Exploit Title: MUSE v4.9.0.006 (.m3u) Local Buffer Overflow Exploit
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 434
MUSE 4.9.0.006 – ‘.pls’ Universal Local Buffer Overflow (SEH)
# Exploit Title: MUSE v4.9.0.006 (.pls) Local Universal Buffer Overflow [SEH]
Microsoft Internet Explorer 8 – ‘toStaticHTML()’ HTML Sanitization Bypass
source: https://www.securityfocus.com/bid/42467/info
CMSimple 3.3 – Cross-Site Scripting / Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/42470/info
Xilisoft Video Converter 3.1.8.0720b – ‘.ogg’ Buffer Overflow
source: https://www.securityfocus.com/bid/42473/info
123 Flash Chat 7.8 – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/42478/info
PHP-Fusion – Local File Inclusion
# Exploit Title: PHP-Fusion Local File Includes Vulnerability
Guestbook Script PHP – Cross-Site Scripting / HTML Injection
=======================================================================
Zomplog 3.9 – Cross-Site Scripting / Cross-Site Request Forgery
-=[ CSRF PoC 1 - Change Admin Password ]=-
Rosoft Media Player 4.4.4 – Local Buffer Overflow (SEH) (2)
#!/usr/bin/python
CMSQLite 1.2 / CMySQLite 1.3.1 – Remote Code Execution
#!/usr/bin/php -q -d short_open_tag=on
Joomla! Component Weblinks – ‘Itemid’ SQL Injection
source: https://www.securityfocus.com/bid/42455/info
Zomplog 3.9 – ‘message’ Cross-Site Scripting
souce: https://www.securityfocus.com/bid/42457/info
Joomla! Component com_fireboard – ‘Itemid’ SQL Injection
source: https://www.securityfocus.com/bid/42460/info
ACollab – Multiple Vulnerabilities
##########################www.BugReport.ir########################################
Adobe ColdFusion – Directory Traversal
# Working GET request courtesy of carnal0wnage:
Acrobat Acrobat – Font Parsing Integer Overflow
From the authors site:
sFileManager 24a – Local File Inclusion
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Saurus CMS Admin Panel – Multiple Cross-Site Request Forgery Vulnerabilities
# Author: Fady Mohammed Osman (cute hacker)
Sports Accelerator Suite 2.0 – ‘news_id’ SQL Injection
Sports Accelerator Suite v2.0 (news_id) Remote SQL Injection Vulnerability
CA Advantage Ingres 2.6 – Multiple Buffer Overflow Vulnerabilities (PoC)
# Exploit Title: Computer Associates Advantage Ingres 2.6 Multiple Buffer Overflow Vulnerabilities PoC
Xion Player 1.0.125 – Local Stack Buffer Overflow
#!/usr/bin/python
SmartCode ServerX VNC Server ActiveX 1.1.5.0 – ‘scvncsrvx.dll’ Denial of Service
Title: SmartCode ServerX VNC Server ActiveX 1.1.5.0 (scvncsrvx.dll) DoS Exploit
Plogger – Remote File Disclosure
# Plogger Remote File Disclosure Vulnerability
Get Tube – SQL Injection
-----------------------------------------------------------------------------------------
MailForm 1.2 – Remote File Inclusion
# Exploit Title: [MailForm Remote File Include ]
Microsoft Windows Kerberos – ‘Pass The Ticket’ Replay Security Bypass
source: https://www.securityfocus.com/bid/42435/info
CMS Source – Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/42437/info
Edit-X PHP CMS – ‘search_text’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/42442/info
JaMP Player 4.2.2.0 – Denial of Service
# Exploit Title: JaMP Player v4.2.2.0 (.m3u) DoS
CombiWave Lite 4.0.1.4 – Denial of Service
# Exploit Title: CombiWave Lite v4.0.1.4 (.mws) DoS
PHP-Nuke 8.1 SEO Arabic – Remote File Inclusion
# Exploit Title: [PHP-Nuke-8.1-seo-Arabic Remote File Include ]
Kleeja Upload – Cross-Site Request Forgery (Change Admin Password)
# Exploit Title: Kleeja Upload - CSRF Change Admin Password
Mediacoder 0.7.5.4710 – ‘Universal’ Local Buffer Overflow (SEH)
#!/usr/bin/env python
ServletExec – Directory Traversal / Authentication Bypass
source: https://www.securityfocus.com/bid/42411/info
Computer Associates Oneview Monitor 6.0 – ‘doSave.jsp’ Remote Code Execution
source: https://www.securityfocus.com/bid/42413/info
Rock Band CMS 0.10 – ‘news.php’ Multiple SQL Injections (2)
source: https://www.securityfocus.com/bid/42424/info
Sonique 2.0 – ‘.xpl’ Remote Stack Buffer Overflow
source: https://www.securityfocus.com/bid/42434/info
Mediacoder 0.7.5.4710 – Local Buffer Overflow
#media coder 0.7.5.4710 0 day buffer overflow exploit
Microsoft Windows Live Messenger 14.0.8117 – Animation Remote Denial of Service
# Exploit Title: Windows Live Messenger
clearBudget 0.9.8 – Remote File Inclusion
# Exploit Title: clearBudget v0.9.8 Remote File Include
phpMUR – Remote File Disclosure
# Exploit Title: phpMUR Remote File Disclosure
Apache JackRabbit 2.0.0 – webapp XPath Injection
# Title: Apache JackRabbit webapp XPath Injection
Saurus CMS 4.7.0 – Remote File Inclusion
# Exploit Title: [SaurusCMSupdate4.7.0 Remote File Include ]
RightMark Audio Analyzer 6.2.3 – Denial of Service
# Exploit Title: RightMark Audio Analyzer 6.2.3 (.sav , .sac) DoS
Abac Karaoke 2.15 – Denial of Service
# Exploit Title: Abac Karaoke 2.15 (.mp3 , .wma ) DoS
KnowledgeTree 3.5.2 Community Edition – Persistent Cross-Site Scripting
# Exploit Title: KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability
EasyFTP Server 1.7.0.11 – (Authenticated) Multiple Commands Remote Buffer Overflows
# Exploit Title: Easy FTP Server v1.7.0.11 Multiple Command Buffer Overflow
Portable Document Format – Specification Signature Collision
source: https://www.securityfocus.com/bid/42377/info