Mongoose Web Server 2.8 – Multiple Directory Traversals
################################################################
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 470
Acritum Femitter 1.03 – Directory Traversal
############################################################
EasyFTP Server 1.7.0.2 – CWD Buffer Overflow (Metasploit)
# Exploit Title: EasyFTP Server %q{
Openregistrecil 1.02 – Local File Inclusion / Remote File Inclusion
==================================================================
Speed Commander 13.10 – ‘.zip’ Memory Corruption
#!/usr/bin/python
Multi-Threaded HTTP Server 1.1 – Directory Traversal (2)
###################################################################
MusicBox 3.3 – SQL Injection
#!/usr/bin/perl
vBulletin Two-Step External Link Module – ‘externalredirect.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39597/info
MIT Kerberos 5 – ‘src/kdc/do_tgs_req.c’ Ticket Renewal Double-Free Memory Corruption
source: https://www.securityfocus.com/bid/39599/info
Flex File Manager – Arbitrary File Upload
====================================================
TweakFS 1.0 FSX Edition – Stack Buffer Overflow
# Exploit Title : TweakFS 1.0 (FSX Edition)
Avtech Software – ActiveX ‘avc781viewer.dll’ Multiple Vulnerabilities
Title: AVTECH Software (AVC781Viewer.dll) ActiveX Multiple Remote Vulnerabilities
N/X Web CMS (N/X WCMS 4.5) – Multiple Vulnerabilities
N/X - Web CMS (N/X WCMS 4.5) Multiple Vulnerability
Openreglement 1.04 – Local File Inclusion / Remote File Inclusion
================================================================
Huawei EchoLife HG520c – Modem Reset (Denial of Service)
# Exploit Title: Huawei EchoLife HG520c Denial of Service and Modem Reset
Huawei EchoLife HG520 – Remote Information Disclosure
# Exploit Title: Huawei EchoLife HG520 Remote Information Disclosure
Joomla! Component GBU Facebook 1.0.5 – SQL Injection
[!]===========================================================================[!]
CMS Ariadna 2009 – SQL Injection
# Exploit Title : CMS Ariadna 2009 SQL Injection
Apple iPhone 3.1.2 – ‘7D11’ Model MB702LL Mobile Safari Denial of Service
Apple iPhone 3.1.2 (7D11) Model MB702LL Mobile Safari Denial-of-Service
HTTP File Server 2.2 – Security Bypass / Denial of Service
source: https://www.securityfocus.com/bid/39544/info
WinMount 3.3.401 – ‘.zip’ Remote Buffer Overflow
source: https://www.securityfocus.com/bid/39557/info
Kleophatra CMS 0.1.1 – ‘module’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39593/info
Redaxo 4.2.1 – Remote File Inclusion
========================================================================
Openscrutin 1.03 – Local File Inclusion / Remote File Inclusion
==============================================================
Alegro 1.2.1 – SQL Injection
========================================================================================
eclime 1.1 – Bypass / Create and Download Backup
========================================================================================
dl_stats – Multiple Vulnerabilities
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
Joomla! Component Archery Scores 1.0.6 – Local File Inclusion
================================================================================================
Joomla! Component ZiMB Comment 0.8.1 – Local File Inclusion
=================================================================================================================
Joomla! Component ZiMBCore 0.1 – Local File Inclusion
==============================================================================================================
Joomla! Component Gadget Factory 1.0.0 – Local File Inclusion
===================================================================================================================
Joomla! Component Matamko 1.01 – Local File Inclusion
=============================================================================================================
Joomla! Component iNetLanka Multiple root 1.0 – Local File Inclusion
===============================================================================================================
Joomla! Component iNetLanka Multiple Map 1.0 – Local File Inclusion
==============================================================================================================
Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 – Local File Inclusion
==============================================================================================================
Joomla! Component com_google – Local File Inclusion
============================================================================================================
Joomla! Component iF surfALERT 1.2 – Local File Inclusion
==================================================================================================================
PHP RapidKill Pro 5.x – Arbitrary File Upload
# Exploit Title: PHP RapidKill Pro 5.x Shell Upload Vulnerability
Microsoft Windows 7/2008 R2 – SMB Client Trans2 Stack Overflow (MS10-020) (PoC)
import sys,SocketServer
Multiple Vendor AgentX++ – Stack Buffer Overflow (PoC)
# Exploit Title: Multiple Vendor AgentX++ Stack Buffer Overflow
FCKEditor Core – ‘FileManager test.html’ Arbitrary File Upload (1)
# Title: CMS (fckeditor) Remote Arbitrary File Upload Exploit
Winamp 5.572 – ‘whatsnew.txt’ (SEH) (Metasploit)
# Title: Winamp 5.572 whatsnew.txt SEH (MSF)
ilchClan 1.0.5B – SQL Injection
----------------------------Information------------------------------------------------
Joomla! Component com_manager 1.5.3 – ‘id’ SQL Injection
-----------------------------------------------------------------------
Microsoft Windows – SMB Client-Side Bug (PoC) (MS10-006)
# More Info: http://g-laurent.blogspot.com/2010/04/turning-smb-client-bug-to-server-side.html
PHP 5.3.x – Denial of Service
//#DOS Php 5.3.x
SIESTTA 2.0 – Local File Inclusion / Cross-Site Scripting
####################################################################
Archive Searcher – ‘.zip’ Local Stack Overflow
#!/usr/bin/ruby
Zyke CMS 1.1 – Authentication Bypass
======================================================
Apache OFBiz – Remote Execution (via SQL Execution)
Apache OFBiz SQL Remote Execution PoC Payload.