SolarWinds TFTP Server 10.4.0.13 – Denial of Service
#!/usr/bin/python
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 453
CP3 Studio PC Version – Denial of Service
# Exploit Title : CP3 Studio PC Ver. Dos
VU Case Manager – Authentication Bypass
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
VU Mass Mailer – Authentication Bypass
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
VU Web Visitor Analyst – Authentication Bypass
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
BrightSuite Groupware – SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
Collabtive 0.6.3 – Multiple Vulnerabilities
#!/usr/bin/perl
Yamamah – ‘news’ SQL Injection / Source Code Disclosure
# Exploit Title: Yamamah Vulnerability (news) SQL Injection / disclosure Vulnerability
BDSMIS TraX with Payroll – SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
phpplanner – Cross-Site Scripting / SQL Injection
==================================
Infront – SQL Injection
# Exploit Title: Infront SQL Injection Vulnerability
Yamamah 1.0 – SQL Injection
# Exploit Title: Yamamah 1.0 SQL Injection Vulnerability
Adobe InDesign CS3 – ‘.INDD’ Handling Buffer Overflow
#!/usr/bin/perl
Nginx 0.8.36 – Source Disclosure / Denial of Service
Issue 1: (Remote Source Disclosure)
E-PHP B2B Marketplace – Multiple Vulnerabilities
Name : E-PHP B2B Marketplace Multiple Vulns
Power Tab Editor 1.7 (Build 80) – Local Buffer Overflow
#***********************************************************************************
Nginx 0.7.65/0.8.39 (dev) – Source Disclosure / Download
TITLE: NGINX [ENGINE X] SERVER http://nginx.org/en/ [ref-1]
Savy Soda Documents – Mobile Office Suite ‘.XLS’ Denial of Service
I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplo...
Office^2 iPhone – ‘.XLS’ Denial of Service
I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplo...
GoodiWare GoodReader iPhone – ‘.XLS’ Denial of Service
I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplo...
Site for Real Estate – Brokers SQL Injection
Vendor url:http://www.mformula.com.br/
Development Site Professional Liberal – Company Institutional SQL Injection
Vendor url:http://www.mformula.com.br/
Site to Store Automobile – Motorcycle Boat SQL Injection
Vendor url:http://www.mformula.com.br/
DaLogin – Multiple Vulnerabilities
dalogin 2.2 multiple vulnerabilites
Full Site for Restaurant – SQL Injection
Vendor url:http://www.mformula.com.br/
ardeacore 2.2 – Remote File Inclusion
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
Parallels System Automation (PSA) – Local File Inclusion
#################################################################
Sygate Personal Firewall 5.6 build 2808 – ActiveX with DEP Bypass
Sygate Personal Firewall 5.6 build 2808 ActiveX exploit w/ DEP bypass
AneCMS 1.x – ‘/modules/blog/index.php’ HTML Injection
source: https://www.securityfocus.com/bid/40838/info
AneCMS 1.x – ‘/modules/blog/index.php’ SQL Injection
source: https://www.securityfocus.com/bid/40840/info
Microsoft Windows Help Centre Handles – Malformed Escape Sequences Incorrectly (MS03-044)
Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly
AWCM CMS – Local File Inclusion
# Software Link: http://www.awcm-cms.com/
SchoolMation 2.3 – SQL Injection / Cross-Site Scripting
====================================================
Store Locator – Cross-Site Request Forgery (Add Admin)
# vendor: www.ghostscripter.com
Pars Design CMS – Arbitrary File Upload
#################################################################
Netvolution CMS 2.x – SQL Injection Script
#!/usr/bin/perl
Miniweb 2.0 Business Portal and Social Networking Platform – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Microsoft Help and Support Center – ‘/sysinfo/sysinfomain.htm’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40721/info
Arab Portal 2.2 – ‘members.php’ SQL Injection
source: https://www.securityfocus.com/bid/40735/info
GREEZLE – Global Real Estate Agent Site Auth SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
HauntmAx CMS Haunted House – Directory Listing / SQL Injection
==================================
eLms Pro – SQL Injection / Cross-Site Scripting
=======================================
PGAUTOPro – SQL Injection / Cross-Site Scripting (1)
=======================================
Adobe Flash / Reader – Live Malware
# Exploit-DB Note - Live POC originally found at http://qoop.org/security/poc/cve-2010-1297/
Web Wiz Forums 9.68 – SQL Injection
=========================================
Virtual Real Estate Manager 3.5 – SQL Injection
======================================================
iClone – SQL Injection
1 ########################################## 1