Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 446

Mp3 Digitalbox 2.7.2.0 – ‘.mp3’ Local Stack Overflow (PoC)

#!/usr/bin/perl

2010-07-02 v3n0m dos

iScripts Socialware 2.2.x – Arbitrary File Upload

Name iScripts SocialWare

2010-07-02 Salvatore Fresta webapps

Xplico 0.5.7 – ‘add.ctp’ Cross-Site Scripting (1)

Xplico v0.5.7 (add.ctp) Remote XSS Vulnerability

2010-07-02 Marcos Garcia & Maximiliano Soler webapps

Microsoft IIS 5.0 – Authentication Bypass (MS10-065)

MS10-065 - Directory Authentication Bypass Vulnerability

2010-07-02 Soroush Dalili remote

HP OpenView Network Node Manager (OV NNM) – ‘getnnmdata.exe’ CGI Invalid MaxAge Remote Code Execution

# Exploit Title: HP OpenView NNM getnnmdata.exe CGI Invalid MaxAge Remote Code Execution

2010-07-02 S2 Crew remote

HP OpenView Network Node Manager (OV NNM) – ‘getnnmdata.exe’ CGI Invalid ICount Remote Code Execution

# Exploit Title: HP OpenView NNM getnnmdata.exe CGI Invalid ICount Remote Code Execution

2010-07-02 S2 Crew remote

HP OpenView Network Node Manager (OV NNM) – ‘getnnmdata.exe’ CGI Invalid Hostname Remote Code Execution

# Exploit Title: HP OpenView NNM getnnmdata.exe CGI Invalid Hostname Remote Code Execution

2010-07-02 S2 Crew remote

Xplico 0.5.7 – ‘add.ctp’ Cross-Site Scripting (2)

source: https://www.securityfocus.com/bid/41322/info

2010-07-02 Marcos Garcia & Maximiliano Soler webapps

NinkoBB – Cross-Site Request Forgery

# Title: NinkoBB CSRF Vulnerability

2010-07-01 ADEO Security webapps

Setiran CMS – Blind SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

2010-07-01 Th3 RDX webapps

RM Downloader 3.1.3 (Windows 7) – Local ASLR + DEP Bypass (SEH)

#!/usr/bin/perl

2010-07-01 Node local

Oxygen2PHP 1.1.3 – ‘post.php’ Blind SQL Injection

#!/usr/bin/perl

2010-07-01 Dante90 webapps

Oxygen2PHP 1.1.3 – ‘forumdisplay.php’ Blind SQL Injection

#!/usr/bin/perl

2010-07-01 Dante90 webapps

Mediacoder 0.7.3.4682 – Universal Buffer Overflow (SEH)

###################################################################

2010-07-01 Madjix local

Joomla! Component com_dateconverter 0.1 – SQL Injection

-----------------------------------------------------------------------------------------

2010-07-01 RoAd_KiLlEr webapps

SIDA University System – SQL Injection

# Author: K053

2010-07-01 K053 webapps

Microsoft Windows Vista/2008 – NtUserCheckAccessForIntegrityLevel Use-After-Free

Windows Vista/Server 2008 NtUserCheckAccessForIntegrityLevel Use-after-free Vulnerability

2010-07-01 MSRC dos

Mini-stream RM-MP3 Converter 3.1.2.1 – ‘.m3u’ Local Buffer Overflow

#By Madjix Dz8[at]hotmail[dot]com

2010-07-01 Madjix local

Interscan Web Security 5.0 – Persistent Cross-Site Scripting

####################################################################################

2010-07-01 Ivan Huertas webapps

iScripts EasySnaps 2.0 – Multiple SQL Injections

iScripts EasySnaps 2.0 Multiple SQL Injection Vulnerabilities

2010-07-01 Salvatore Fresta webapps

iScripts ReserveLogic 1.0 – SQL Injection

iScripts ReserveLogic 1.0 SQL Injection Vulnerability

2010-07-01 Salvatore Fresta webapps

Eudora Qualcomm WorldMail 3.0 – IMAPd ‘LIST’ Remote Buffer Overflow (Metasploit)

##

2010-07-01 Metasploit remote

Alt-N MDaemon 6.8.5 – WorldClient ‘form2raw.cgi’ Remote Stack Buffer Overflow (Metasploit)

##

2010-07-01 Metasploit remote

Google Appliance ProxyStyleSheet – Command Execution (Metasploit)

##

2010-07-01 Metasploit webapps

DPScms – ‘q’ SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/41273/info

2010-07-01 Ariko-Security webapps

Sumatra PDF 1.1 – Denial of Service

source: https://www.securityfocus.com/bid/41276/info

2010-07-01 Azim Poonawala dos

Flatnux 2010-06.09 – ‘find’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41282/info

2010-07-01 ITSecTeam webapps

Wiki Web Help 0.2.7 – Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/41306/info

2010-07-01 John Leitch webapps

ReCMS – ‘users_lang’ Directory Traversal

source: https://www.securityfocus.com/bid/41310/info

2010-07-01 Locu webapps

PHP-Nuke 8.0 – SQL Injection

#!/usr/bin/perl

2010-06-30 Dante90 webapps

ShopCartDx 4.30 – ‘products.php’ Blind SQL Injection

#!/usr/bin/perl

2010-06-30 Dante90 webapps

Joomla! Component Gamesbox 1.0.2 – ‘id’ SQL Injection

) ) ) ( ( ( ( ( ) )

2010-06-30 v3n0m webapps

Joomla! Component Joomanager – SQL Injection

Note from the vendor received 10Mar11:

2010-06-30 Sid3^effects webapps

Joomla! Component com_wmtpic 1.0 – SQL Injection

1 ########################################### 1

2010-06-30 RoAd_KiLlEr webapps

webERP 3.11.4 – Multiple Vulnerabilities

# Title: webERP Multiple Vulnerabilities

2010-06-30 ADEO Security webapps

Oxygen2PHP 1.1.3 – ‘member.php’ SQL Injection

#!/usr/bin/perl

2010-06-30 Dante90 webapps

Specialist Bed and Breakfast Website – SQL Injection

# Exploit Title: Specialist Bed and Breakfast website SQL injection

2010-06-30 JaMbA webapps

Golf Club Site – SQL Injection

# Exploit Title: Golf Club SQL injection Vulnerability

2010-06-30 JaMbA webapps

Ubiquity Nanostation5 (Air OS) – Remote Command Execution

# Exploit Title: Ubiquity Nanostation5 (Air OS) 0day Remote Command Execution

2010-06-30 emgent webapps

System CMS Contentia – ‘news.php’ SQL Injection

source: https://www.securityfocus.com/bid/41248/info

2010-06-30 GlaDiaT0R webapps

Ecomat CMS – SQL Injection

Vulnerability ID: HTB22390

2010-06-29 High-Tech Bridge SA webapps

PHPDirector 0.30 – ‘videos.php’ SQL Injection

======================================================================

2010-06-29 Mr-AbdoX webapps

YPNinc JokeScript – ‘ypncat_id’ SQL Injection

) ) ) ( ( ( ( ( ) )

2010-06-29 v3n0m webapps

YPNinc PHP Realty Script – ‘docID’ SQL Injection

) ) ) ( ( ( ( ( ) )

2010-06-29 v3n0m webapps

Allomani E-Store 1.0 – Cross-Site Request Forgery (Add Admin) (1)

# Exploit Title: Allomani - E-Store v1.0 - [CSRF] Add Admin Account

2010-06-29 G0D-F4Th3r webapps

Allomani Super MultiMedia 2.5 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: Allomani - Super Multimedia v2.5 - [CSRF] Add Admin Account

2010-06-29 G0D-F4Th3r webapps

PageDirector CMS – ‘result.php’ SQL Injection

) ) ) ( ( ( ( ( ) )

2010-06-29 v3n0m webapps

Gekko CMS – SQL Injection

##################################################################

2010-06-29 []0iZy5 webapps

CubeCart PHP 4.3.x – ‘shipkey’ SQL Injection

SQL Injection in CubeCart PHP Free & Commercial Shopping Cart Application

2010-06-29 Core Security webapps

LIOOSYS CMS – ‘news.php’ SQL Injection

##############################################################################

2010-06-29 GlaDiaT0R webapps