Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 493

Joomla! Component JBDiary – Blind SQL Injection

[~]>> ...[BEGIN ADVISORY]...

2010-01-23 B-HUNT3|2 webapps

OpenDb 1.5.0.4 – Multiple Local File Inclusions

==============================================================================

2010-01-23 ViRuSMaN webapps

SOMPL Player 1.0 – Local Buffer Overflow

# Exploit Title : SOMPL Player Buffer Overflow

2010-01-22 Rick2600 local

IntelliTamper 2.07/2.08 – Remote Buffer Overflow (SEH)

# IntelliTamper 2.07/2.08 (SEH) Remote Buffer Overflow

2010-01-22 loneferret remote

Joomla! Component com_gameserver – SQL Injection

# Exploit Title: Joomla (com_gameserver) SQL Injection Vulnerability

2010-01-22 B-HUNT3|2 webapps

Joomla! Component com_avosbillets – SQL Injection

#--------------------------------------------------------

2010-01-22 snakespc webapps

KosmosBlog 0.9.3 – SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery

[#-----------------------------------------------------------------------------------------------#]

2010-01-22 Milos Zivanovic webapps

Joomla! Component com_gurujibook – SQL Injection

#--------------------------------------------------------

2010-01-22 snakespc webapps

Joomla! Component com_biographies – SQL Injection

#--------------------------------------------------------

2010-01-22 snakespc webapps

yPlay 1.0.76 – ‘.mp3’ Local Crash (PoC)

#!/usr/bin/perl

2010-01-22 cr4wl3r dos

Pico MP3 Player 1.0 – ‘.mp3’ / ‘.pls’ Local Crash (PoC)

#!/usr/bin/perl

2010-01-22 cr4wl3r dos

Microsoft Internet Explorer – ‘wshom.ocx’ (Run) ActiveX Code Execution (Add Admin)

# Exploit Title: IE wshom.ocx (Run) ActiveX Remote Code Execution ( add admin user)

2010-01-22 Stack local

Authentium SafeCentral 2.6 – ‘shdrv.sys’ Local Kernel Ring0 SYSTEM

pModuleBase = &pModuleInfo->Module[0];

2010-01-22 mu-b local

QtWeb 3.0 – Remote Crash (Denial of Service)

#!/usr/bin/perl

2010-01-22 Zer0 Thunder dos

Sun Java System Web Server 7.0 Update 6 – ‘admin’ Server Denial of Service

source: https://www.securityfocus.com/bid/37909/info

2010-01-22 Intevydis dos

Sun Java System Web Server 6.1/7.0 – WebDAV Format String

source: https://www.securityfocus.com/bid/37910/info

2010-01-22 Intevydis dos

OpenX 2.6.1 – SQL Injection

source: https://www.securityfocus.com/bid/37913/info

2010-01-22 AndySoon webapps

Google Chrome 3.0 – Style Sheet redirection Information Disclosure

source: https://www.securityfocus.com/bid/37917/info

2010-01-22 Cesar Cerrudo remote

jetAudio 8.0.0.2 Basic – ‘.m3u’ Local Stack Overflow

#!/usr/bin/perl

2010-01-21 cr4wl3r local

jetAudio 8.0.0.2 Basic – ‘.asx’ Local Crash

#!/usr/bin/perl

2010-01-21 cr4wl3r dos

EFS Easy Chat Server – Universal Buffer Overflow (SEH) (Metasploit)

##

2010-01-21 fb1h2s remote

cPanel – HTTP Response Splitting

Recognize-Security - cPanel HTTP Response Splitting Vulnerability

2010-01-21 Trancer webapps

eWebeditor – Directory Traversal

#################################################################

2010-01-21 anonymous webapps

Joomla! Component com_book – SQL Injection

==============================================================================

2010-01-21 Evil-Cod3r webapps

Microsoft Windows Live Messenger 2009 – ActiveX Heap Overflow (PoC)

#Aouther : [SarBoT511] (xs3@hotmail.com)

2010-01-21 SarBoT511 dos

SHOUTcast Server 1.9.8/Win32 – Cross-Site Request Forgery

# Exploit Title: HOUTcast Server Version

2010-01-21 cp77fk4r webapps

Blog System 1.x – ‘note’ SQL Injection

[#] Script : Blog System

2010-01-21 h4ck3r webapps

IntelliTamper 2.07/2.08 – Defer Remote Buffer Overflow (PoC)

# H0m3 : S3curity-art.com & Google.com

2010-01-21 SkuLL-HackeR dos

jQuery Uploadify 2.1.0 – Arbitrary File Upload

# Exploit Title: jQuery uploadify v2.1.0 Remote File Upload

2010-01-21 k4cp3r/Ablus webapps

Microsoft Internet Explorer 8 – URI Validation Remote Code Execution

source: https://www.securityfocus.com/bid/37884/info

2010-01-21 Lostmon Lords remote

Sun Java System Web Server 6.1/7.0 – Digest Authentication Remote Buffer Overflow

source: https://www.securityfocus.com/bid/37896/info

2010-01-21 Intevydis remote

cPanel and WHM 11.25 – ‘failurl’ HTTP Response Splitting

source: https://www.securityfocus.com/bid/37902/info

2010-01-21 Trancer webapps

AOL 9.5 – ActiveX Heap Spray

AOL 9.5 ActiveX 0day Exploit (heap spray)

2010-01-20 Dz_attacker remote

MP3 Studio 1.x – ‘.m3u’ Local Stack Overflow (Universal)

#!/usr/bin/perl

2010-01-20 D3V!L FUCKER local

Microsoft Internet Explorer 6.0/7.0 – Null Pointer crashes

Microsoft Internet Explorer 6.0/7.0 NULL pointer crashes Two crashes caused by NULL pointer dereferences have been di...

2010-01-20 Skylined dos

PHPMySpace Gold 8.0 – ‘gid’ SQL Injection

source: https://www.securityfocus.com/bid/37881/info

2010-01-20 Ctacok webapps

kloNews 2.0 – ‘cat.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/39987/info

2010-01-20 cr4wl3r webapps

Chipmunk NewsLetter 2.0 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/40024/info

2010-01-20 b0telh0 webapps

AOL 9.5 – ActiveX Heap Overflow

Product:

2010-01-19 Hellcode Research dos

Millenium MP3 Studio 1.x – ‘.m3u’ Local Stack Overflow

#!/usr/bin/perl

2010-01-19 NeoCortex local

OpenOffice – ‘.slk’ Parsing Null Pointer

Product:

2010-01-19 Hellcode Research dos

Microsoft Windows Defender – ActiveX Heap Overflow (PoC)

#Exploits title :[Microsoft Windows Defender ActiveX Heap Overflow PoC]

2010-01-19 SarBoT511 dos

Foxit Reader 3.1.4.1125 – ActiveX Heap Overflow (PoC)

#Vendor :www.foxitsoftware.com

2010-01-19 SarBoT511 & D3V!L FUCKER dos

Mini-stream Ripper 3.0.1.1 – ‘.smi’ Local Buffer Overflow (PoC)

#!/usr/bin/python

2010-01-19 d3b4g dos

al3jeb script – Remote Authentication Bypass

\#'#/

2010-01-19 cr4wl3r webapps

Microsoft Windows NT/2000/2003/2008/XP/Vista/7 – ‘KiTrap0D’ User Mode to Ring Escalation (MS10-015)

Exploit-DB Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11199.zip (KiTrap...

2010-01-19 Tavis Ormandy local

RM Downloader – ‘.m3u’ Local Buffer Overflow (SEH)

#!/usr/bin/perl -w

2010-01-19 jacky local

Pidgin MSN 2.6.4 – File Download

#!/usr/bin/env python

2010-01-19 Mathieu GASPARD remote

DataLife Engine 8.3 – ‘/engine/inc/include/init.php?selected_language’ Remote File Inclusion

source: https://www.securityfocus.com/bid/37851/info

2010-01-19 indoushka webapps

DataLife Engine 8.3 – ‘/engine/inc/help.php?config[langs]’ Remote File Inclusion

source: https://www.securityfocus.com/bid/37851/info

2010-01-19 indoushka webapps