DataLife Engine 8.3 – ‘/engine/ajax/pm.php?config[lang]’ Remote File Inclusion
source: https://www.securityfocus.com/bid/37851/info
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 494
DataLife Engine 8.3 – ‘/engine/ajax/addcomments.php?_REQUEST[skin]’ Remote File Inclusion
source: https://www.securityfocus.com/bid/37851/info
OpenOffice 3.1 – ‘.slk’ Null Pointer Dereference Remote Denial of Service
source: https://www.securityfocus.com/bid/37857/info
VisualShapers EZContents 2.0.3 – Authentication Bypass / Multiple SQL Injections
source: https://www.securityfocus.com/bid/37858/info
Blaze Apps 1.x – SQL Injection / HTML Injection
source: https://www.securityfocus.com/bid/40212/info
AdvertisementManager 3.1 – ‘req’ Local/Remote File Inclusion
source: https://www.securityfocus.com/bid/44165/info
EFS Software Easy Chat Server 2.2 – Remote Buffer Overflow
#!/usr/bin/ruby
Muziic Player 2.0 – ‘.mp3’ Local Denial of Service
# Exploit Title: Muziic Player (.mp3) Local Denial of Service (DoS)
Testlink TestManagement and Execution System 1.8.5 – Multiple Directory Traversal Vulnerabilities
1.Title :Multiple directory Traversal Vulnerabilites in Testlink TestManagement and Execution System.
FreePBX 2.5.x < 2.6.0 - Persistent Cross-Site Scripting
Advisory Name: Permanent Cross-Site Scripting (XSS) in FreePBX 2.5.x – 2.6.0
al3jeb script – Remote Change Password
al3jeb script Remote Change Password Exploit
FreePBX 2.5.1 – SQL Injection
Advisory Name: SQL injection in FreePBX 2.5.1
FreePBX 2.5.x – Information Disclosure
Advisory Name: Information disclosure in FreePBX 2.5.x
Fatwiki (fwiki) 1.0 – Remote File Inclusion
#############################################################################################################
Soft Direct 1.05 – Multiple Vulnerabilities
========================================================================================
Gracenote CDDBControl – ActiveX Control ‘ViewProfile’ Method Heap Buffer Overflow (PoC)
source: https://www.securityfocus.com/bid/37834/info
TestLink 1.8.5 – ‘order_by_login_dir’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37839/info
Zenoss 2.3.3 – Multiple Cross-Site Request Forgery Vulnerabilities
source: https://www.securityfocus.com/bid/37843/info
SurgeFTP 2.x – ‘surgeftpmgr.cgi’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37844/info
Easysitenetwork Jokes Complete Website – ‘id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37852/info
Easysitenetwork Jokes Complete Website – ‘searchingred’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37852/info
vBulletin 4.0.1 – ‘misc.php’ SQL Injection
source: https://www.securityfocus.com/bid/37854/info
Mobile Chat 2.0.2 – ‘chatsmileys.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40232/info
Serialsystem 1.0.4 Beta – ‘list’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40236/info
Bits Video Script 2.05 Gold Beta – ‘showcasesearch.php?rowptem[template]’ Remote File Inclusion
source: https://www.securityfocus.com/bid/40709/info
Bits Video Script 2.05 Gold Beta – ‘showcase2search.php?rowptem[template]’ Remote File Inclusion
source: https://www.securityfocus.com/bid/40709/info
Hitmaaan Gallery 1.3 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/40711/info
Bits Video Script 2.04/2.05 – ‘/addvideo.php’ Arbitrary File Upload / Arbitrary PHP Code Execution
source: https://www.securityfocus.com/bid/40712/info
Bits Video Script 2.04/2.05 – ‘/register.php’ Arbitrary File Upload / Arbitrary PHP Code Execution
source: https://www.securityfocus.com/bid/40712/info
Bits Video Script 2.04/2.05 – ‘search.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40716/info
MediaMonkey 3.2.0 – Local Denial of Service
# Download : http://download.cnet.com/MediaMonkey-Standard/3000-2141_4-10109807.html
Uploader by CeleronDude 5.3.0 – Arbitrary File Upload (2)
#############################
Joomla! Component com_pc – Local File Inclusion
#############################################################
Max’s Image Uploader – Arbitrary File Upload
========================================================================================
Audiotran 1.4.1 – Direct RET Buffer Overflow
# Exploit Title: Audiotran v1.4.1 direct RET BOF
Trend Micro Web-Deployment – ActiveX Remote Execution
# Exploit Title: TrendMicro Web-Deployment ActiveX Remote Exec 0day POC
VideoLAN VLC Media Player 0.8.6 a/b/c/d (Win32 Universal) – ‘.ass’ Local Buffer Overflow
[%]Works every time,works on any win32 OS,tested on Windows xp sp2.
Xunlei XPPlayer 5.9.14.1246 – ActiveX Remote Execution (PoC)
# Author: superli
Joomla! Component com_prime – Directory Traversal
@~~=======================================~~@
Joomla! Component com_libros – SQL Injection
########################################################################
Novatel Wireless MiFi 2352 – Password Information Disclosure
source: https://www.securityfocus.com/bid/37962/info
Microsoft Internet Explorer – ‘wshom.ocx’ ActiveX Control Remote Code Execution
#######################################################################
Google SketchUp 7.1.6087 – ‘lib3ds’ 3DS Importer Memory Corruption
#!/usr/bin/python
BS.Player 2.51 – Universal Overflow (SEH)
# Exploit Title: BS.Player v2.51 Universal SEH Overflow Exploit
Transload Script – Arbitrary File Upload
# Exploit Title: Translod Script Uplaod Vulnerability