RadASM 2.2.1.6 – ‘.rap’ Universal Buffer Overflow
#!/usr/bin/python
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 489
CD Rentals Script – SQL Injection
[!] CD Rentals Script SQL injection Vulnerability
Books/eBooks Rental Software – SQL Injection
[!] Books/eBooks Rental Software SQL injection Vulnerability
Cisco Collaboration Server 5 – Cross-Site Scripting / Source Code Disclosure
Cisco Collaboration Server 5 XSS, Source Code Disclosure
X-Cart Pro 4.0.13 – SQL Injection
X-Cart Pro v4.0.13 SQL Injection Proof of Concept
RSA – SecurID Cross-Site Scripting
Discovered 12-11-2008
J.A.G (Just Another Guestbook) 1.14 – Database Disclosure
# Software Link: http://www.xs4all.nl/~crisp/jag/jag.zip
Core Impact 7.5 – Denial of Service
################################################################
Video Games Rentals Script – SQL Injection
# Exploit Title: video games rentals Script SQL injection Vulnerability
Vacation Rental Script – SQL Injection
:::::::::::::::::::::::::
apemCMS – SQL Injection
============ { Ariko-Security - Advisory #1/2/2010 } =============
Trade Manager Script – SQL Injection
:::::::::::::::::::::::::
vBulletin 3.5.4 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/38179/info
PHP 5.3.1 – ‘session_save_path() Safe_mode()’ Restriction Bypass Exploiot
source: https://www.securityfocus.com/bid/38182/info
CommodityRentals CD Rental Software – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/38184/info
eSmile Script – ‘index.php’ SQL Injection
eSmile (index.php) Sql Injection Vulnerability
HASHE! Solutions – Multiple SQL Injections
HASHE! Multiple Sql Injection Vulnerability
WM Downloader 3.0.0.9 (Windows XP SP3) – PLS PLA
#!/usr/bin/python
ULoki Community Forum 2.1 – ‘usercp.php’ Cross-Site Scripting
# Exploit Title: ULoki Community Forum v2.1 (usercp.php) Cross Site Scripting
(Gabriel’s FTP Server) Open & Compact FTPd 1.2 – Crash (PoC)
# Title: Open & Compact FTPd Pre-Authentication Crash (PoC)
Accellion File Transfer – ‘Appliance web_client_user_guide.html?lang’ Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/38176/info
Accellion Secure File Transfer Appliance – Multiple Command Restriction / Privilege Escalations
source: https://www.securityfocus.com/bid/38176/info
fipsForum 2.6 – Remote Database Disclosure
==============================================================================
UltraISO 9.3.6.2750 – Local Buffer Overflow (PoC)
img file size=109974 bytes
LDAP – Injection
[+] Vurnerebility: LDAP Injection
CPA Site Solutions – Arbitrary File Upload
###########################################################################
NewsLetter Tailor – Database Backup Dump
==============================================================================
NewsLetter Tailor – Authentication Bypass
==============================================================================
Yes Solutions – Webapp SQL Injection
####################################################################
MOJO’s IWms 7 – SQL Injection / Cross-Site Scripting
# Exploit Title: MOJO's IWMS
UltraISO 9.3.6.2750 – Local Buffer Overflow
This 0day is kickass from fl0 fl0w a.k.a Stefan!
WM Downloader 3.0.0.9 – PLS WMDownloader (PoC)
#!/usr/bin/perl
Zomorrod CMS – SQL Injection
#################################################################
Fonts Site Script – Remote File Disclosure
=---------------------------------------------=
Limny 1.01 – Arbitrary File Upload
----------[exploit Debut]
NewsLetter Tailor 0.2.0 – Remote File Inclusion
==============================================================================
feedDemon 3.1.0.9 – ‘.opml’ File Buffer Overflow
This exploit identifies your OS and searches in memory for a RETCODE thus working 100%.*/
osTicket 1.6 RC5 – Multiple Vulnerabilities
Advisory Name: SQL injection in osTicket
Microsoft Windows XP/Vista/2000/2003 – Double-Free Memory Corruption Privilege Escalation
// source: https://www.securityfocus.com/bid/38044/info
Microsoft Windows Vista/2008 – ICMPv6 Router Advertisement Remote Code Execution
source: https://www.securityfocus.com/bid/38061/info
vBulletin Adsense Component – ‘viewpage.php’ SQL Injection
source: https://www.securityfocus.com/bid/38167/info
ThinkPHP 2.0 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39909/info
JaxCMS 1.0 – Local File Inclusion
Name : JaxCMS (p) Local File Include
Blue Dove – SQL Injection
####################################################################
GeFest Web Home Server 1.0 – Directory Traversal
source: https://www.securityfocus.com/bid/38141/info
JDownloader – ‘JDExternInterface.java’ Remote Code Execution
source: https://www.securityfocus.com/bid/38143/info
Mongoose 2.8 – Space String Remote File Disclosure
source: https://www.securityfocus.com/bid/38145/info
Aflam Online 1.0 – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/38147/info