Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 441

dotDefender 4.02 – Authentication Bypass

dotDefender is prone to a XSS because it doesn't satinate the input vars

2010-07-13 David K webapps

CustomCMS – Persistent Cross-Site Scripting

1 ########################################## 1

2010-07-13 Sid3^effects webapps

eDirectory 8.7.3 – iMonitor Remote Stack Buffer Overflow (Metasploit)

##

2010-07-13 Metasploit remote

Free Download Manager 2.5 Build 758 – Remote Control Server Buffer Overflow (Metasploit)

##

2010-07-13 Metasploit remote

Diem 5.1.2 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41587/info

2010-07-13 High-Tech Bridge SA webapps

Oracle Solaris – ‘rdist’ Privilege Escalation

source: https://www.securityfocus.com/bid/41612/info

2010-07-13 Monarch Rich dos

Oracle Business Process Management 10.3.2 – Cross-Site Scripting

source: https://www.securityfocus.com/bid/41617/info

2010-07-13 Markot remote

Oracle WebLogic Server 10.3.3 – Encoded URL

source: https://www.securityfocus.com/bid/41620/info

2010-07-13 Timothy D. Morgan remote

Oracle Solaris – ‘nfslogd’ Insecure Temporary File Creation

source: https://www.securityfocus.com/bid/41637/info

2010-07-13 Frank Stuart local

Oracle Solaris Management Console – WBEM Insecure Temporary File Creation

source: https://www.securityfocus.com/bid/41642/info

2010-07-13 Frank Stuart local

Qt 4.6.3 – ‘QTextEngine::LayoutData::reallocate()’ Memory Corruption

source: https://www.securityfocus.com/bid/41873/info

2010-07-13 D4rk357 dos

Joomla! Component healthstats – Persistent Cross-Site Scripting

Name : Joomla Health & Fitness Stats Persistent XSS Vulnerability

2010-07-12 Sid3^effects webapps

Joomla! Component EasyBlog – Persistent Cross-Site Scripting

Name : Joomla EasyBlog Persistent XSS Vulnerability

2010-07-12 Sid3^effects webapps

TheHostingTool 1.2.2 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Create Staff Account ]=-

2010-07-12 10n1z3d webapps

Getsimple CMS 2.01 – Multiple Vulnerabilities

-=[ CSRF PoC 1 - Change Admin Password ]=-

2010-07-12 10n1z3d webapps

Linux PAM 1.1.0 (Ubuntu 9.10/10.04) – MOTD File Tampering Privilege Escalation (2)

#!/bin/bash

2010-07-12 anonymous local

Campsite CMS 3.4.0 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Create Admin User ]=-

2010-07-12 10n1z3d webapps

Grafik CMS 1.1.2 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Change Admin Password ]=-

2010-07-12 10n1z3d webapps

Corel WordPerfect Office X5 15.0.0.357 – ‘wpd’ Buffer Overflow (PoC)

- Title: Corel WordPerfect Office X5 15.0.0.357 (wpd) Remote Buffer Preoccupation PoC

2010-07-12 LiquidWorm dos

Corel Presentations X5 15.0.0.357 – ‘shw’ Buffer Preoccupation (PoC)

- Title: Corel Presentations X5 15.0.0.357 (shw) Remote Buffer Preoccupation PoC

2010-07-12 LiquidWorm dos

Opera – Canvas Element (Denial of Service)

Opera.html

2010-07-12 Pouya Daneshmand dos

Microsoft Internet Explorer – Style getElementsByTagName Memory Corruption (MS09-072) (Metasploit)

##

2010-07-12 Metasploit remote

Microsoft Internet Explorer 7 – CFunctionPointer Uninitialized Memory Corruption (MS09-002) (Metasploit)

##

2010-07-12 Metasploit remote

Microsoft Internet Explorer – ‘Aurora’ Memory Corruption (MS10-002) (Metasploit)

##

2010-07-12 Metasploit remote

Blue Coat WinProxy – Host Header Overflow (Metasploit)

##

2010-07-12 Metasploit remote

InterSystems Cache – UtilConfigHome.csp Argument Buffer Overflow (Metasploit)

##

2010-07-12 Metasploit remote

NaviCOPA Web Server 2.0.1 – URL Handling Buffer Overflow (Metasploit)

##

2010-07-12 Metasploit remote

LibTIFF 3.9.4 – Out-Of-Order Tag Type Mismatch Remote Denial of Service

source: https://www.securityfocus.com/bid/41475/info

2010-07-12 Tom Lane dos

dotDefender 4.02 – ‘clave’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41541/info

2010-07-12 David K webapps

Asterisk Recording Interface 0.7.15/0.10 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/41571/info

2010-07-12 TurboBorland remote

Oracle Solaris 8/9/10 – ‘flar’ Insecure Temporary File Creation

source: https://www.securityfocus.com/bid/41619/info

2010-07-12 Frank Stuart local

Macs CMS 1.1.4 – Cross-Site Scripting / Cross-Site Request Forgery

-=[ CSRF PoC 1 - Create Admin User ]=-

2010-07-11 10n1z3d webapps

Frog CMS 0.9.5 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Create Admin User ]=-

2010-07-11 10n1z3d webapps

TomatoCart 1.0.1 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Create Admin User ]=-

2010-07-11 10n1z3d webapps

TomatoCMS 2.0.5 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Change Administrator Password ]=-

2010-07-11 10n1z3d webapps

Orbis CMS 1.0.2 – Multiple Cross-Site Request Forgery Vulnerabilities

-=[ CSRF PoC 1 - Change Admin Password ]=-

2010-07-11 10n1z3d webapps

Mac’s CMS 1.1.4 – ‘SearchString’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41529/info

2010-07-11 10n1z3d webapps