Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 486

iPhone FTP Server (WiFi FTP) by SavySoda – Denial of Service (PoC)

#!/usr/bin/python

2010-02-23 b0telh0 dos

PHP Auktion Pro SQL – ‘news.php’ SQL Injection

----------------------------Information------------------------------------------------

2010-02-23 Easy Laster webapps

Top Auktion – ‘news.php’ SQL Injection

----------------------------Information------------------------------------------------

2010-02-23 Easy Laster webapps

Joomla! Component user_id com_sqlreport – Blind SQL Injection

==============================================================================

2010-02-23 snakespc webapps

WorkSimple 1.3.2 – Multiple Vulnerabilities

[ Multiple Remote Vulnerabilities ]

2010-02-23 JIKO webapps

Softbiz Jobs – Multiple SQL Injections

----------------------------Information------------------------------------------------

2010-02-23 Easy Laster webapps

iPhone FtpDisc 1.0 – Denial of Service

#!/usr/bin/perl

2010-02-23 Ale46 dos

Tinypug 0.9.5 – Cross-Site Request Forgery (Password Change)

##########################www.BugReport.ir########################################

2010-02-23 AmnPardaz webapps

QuickDev 4 PHP – Database Disclosure

==============================================================================

2010-02-23 ViRuSMaN webapps

bispage – Bypass

# Exploit Title: [ bispage Bypass Vulnerability]

2010-02-23 SaMir-BonD webapps

iPhone FTP Server By Zhang Boyang – Remote Denial of Service

#!/usr/bin/perl

2010-02-23 Ale46 dos

Softbiz Jobs – ‘sbad_type’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38383/info

2010-02-23 pratul agrawal webapps

Softbiz Jobs – ‘news_desc’ SQL Injection

Softbiz Jobs ( news_desc) SQL Injection Vulnerability

2010-02-22 BAYBORA webapps

Ac4p.com Gallery 1.0 – Multiple Vulnerabilities

========================================================================================

2010-02-22 indoushka webapps

iOS iFTPStorage 1.2 – Remote Denial of Service

#!/usr/bin/perl

2010-02-22 Ale46 dos

Ero Auktion 2.0 – ‘news.php’ SQL Injection

----------------------------Information----------------------------------------

2010-02-22 Easy Laster webapps

Ero Auktion 2010 – ‘news.php’ SQL Injection

----------------------------Information----------------------------------------

2010-02-22 Easy Laster webapps

Galerie Dezign-Box France – Multiple Vulnerabilities

========================================================================================

2010-02-22 indoushka webapps

Arab Cart 1.0.2.0 – Multiple Vulnerabilities

========================================================================================

2010-02-22 indoushka webapps

vBSEO 3.1.0 – Local File Inclusion

======================================================================

2010-02-22 ViRuSMaN webapps

cPanel – Multiple Cross-Site Request Forgery Vulnerabilities

Create Database:

2010-02-22 SecurityRules webapps

phpBugTracker 1.0.1 – File Disclosure

==============================================================================

2010-02-22 ViRuSMaN webapps

Adobe (Multiple Products) – XML External Entity / XML Injection

( , ) (,

2010-02-22 Roberto Suggi Liverani dos

Article Friendly – SQL Injection

#

2010-02-22 SkuLL-HackeR webapps

Microsoft Windows Media Player 11.0.5721.5145 – ‘.mpg’ Buffer Overflow

#!/usr/bin/perl

2010-02-22 cr4wl3r dos

Winamp 5.57 – ‘Browser’ IE Denial of Service

2010-02-22 cr4wl3r dos

Nero Burning ROM 9.4.13.2 – ISO Compilation Local Buffer Invasion (PoC)

#!/usr/bin/perl

2010-02-22 LiquidWorm dos

VKPlayer 1.0 – ‘.mid’ Denial of Service

#!/usr/bin/perl

2010-02-22 cr4wl3r dos

Media Player Classic 6.4.9.1 – ‘.avi’ Buffer Overflow

#!/usr/bin/perl

2010-02-22 cr4wl3r dos

GOM Player 2.1.21.4846 – ‘.wav’ Buffer Overflow

#!/usr/bin/perl

2010-02-22 cr4wl3r dos

Chasys Media Player 1.1 – ‘.mid’ Local Buffer Overflow

#!/usr/bin/perl

2010-02-22 cr4wl3r dos

EasyFTP Server 1.7.0.2 – CWD Remote Buffer Overflow

# Tested on: XP SP3 (Eng)

2010-02-22 athleet remote

Total Video Player 1.31 – ‘.wav’ Local Crash

#!/usr/bin/perl

2010-02-22 v3n0m dos

Total Video Player 1.31 – ‘.avi’ Local Crash (PoC)

#!perl

2010-02-22 diving dos

Galerie Dezign-Box – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/38347/info

2010-02-22 indoushka webapps

WampServer 2.0i – ‘lang’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38357/info

2010-02-22 Gjoko Krstic remote

FlatFile Login System – Remote Password Disclosure

==============================================================================

2010-02-20 ViRuSMaN webapps

TimeClock 0.99 – Cross-Site Request Forgery (Add Admin)

==============================================================================

2010-02-20 ViRuSMaN webapps

Netzbrett – Database Disclosure

==============================================================================

2010-02-20 ViRuSMaN webapps

Joomla! Component com_recipe – Multiple SQL Injections

source: https://www.securityfocus.com/bid/38336/info

2010-02-20 FL0RiX webapps

vBulletin 4.0.2 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/38339/info

2010-02-20 indoushka webapps

phpAutoVideo – Cross-Site Request Forgery

##################################################################

2010-02-19 GoLdeN-z3r0 webapps

Litespeed Web Server 4.0.12 – Cross-Site Request Forgery (Add Admin) / Cross-Site Scripting

# Author: d1dn0t (didnot[at]me[dot]com)

2010-02-19 d1dn0t webapps

Amelia CMS – SQL Injection

# Title: [SQL injection vulnerability in Amelia CMS]

2010-02-19 Ariko-Security webapps

WSC CMS – Authentication Bypass

------------------------------------------------------

2010-02-19 Phenom webapps

Fonality trixbox 2.2.4 – ‘PhonecDirectory.php’ SQL Injection

# Software Link: http://trixbox.org/downloads

2010-02-19 NorSlacker webapps

PHPKit 1.6.1 – ‘mailer.php’ SQL Injection

########################################################################

2010-02-19 Easy Laster webapps

Joomla! Component com_communitypolls 1.5.2 – Local File Inclusion

[!]===========================================================================[!]

2010-02-19 kaMtiEz webapps

Social Web CMS 2 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38329/info

2010-02-19 GoLdeN-z3r0 webapps

IBM Websphere Portal 6.0.1.5 Build wp6015 – Portlet Palette Search HTML Injection

source: https://www.securityfocus.com/bid/38360/info

2010-02-19 Sjoerd Resink remote