Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 495
Rosoft Media Player 4.4.4 – Local Buffer Overflow (SEH) (1)
# Exploit Title: Rosoft Media Player 4.4.4 Buffer OverFlow Exploit (SEH)
CLONEBID B2B Marketplace – Multiple Vulnerabilities
Name : CLONEBID B2B Marketplace
ITechSctipts Alibaba Clone – Multiple Vulnerabilities
Name : ITechSctipts Alibaba Clone
Ebay Clone from clone2009 – SQL Injection
Name : Ebay Clone from (clone2009.com)
Multiple Media Players ((iTunes / QuickTime) – HTTP DataHandler Overflow
ScaryMovie Exploit Study
OtsTurntables Free 1.00.047 – Overwrite (SEH) (PoC)
# Exploit Title: OtsTurntables Free v1.00.047 SEH Overwrite POC
BS.Player 2.51 – Overwrite (SEH)
# BS.Player v2.51
Max’s File Uploader – Arbitrary File Upload
in the name of allah
PonVFTP – Bypass / Arbitrary File Upload
in the name of allah
Aqua Real 1.0/2.0 – Local Crash (PoC)
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
LetoDms 1.4.x – ‘lang’ Local File Inclusion
source: https://www.securityfocus.com/bid/37828/info
Zeus Web Server 4.x – ‘SSL2_CLIENT_HELLO’ Remote Buffer Overflow (PoC)
source: https://www.securityfocus.com/bid/37829/info
SystemTap 1.0 – ‘stat-server’ Arbitrary Command Injection
source: https://www.securityfocus.com/bid/37842/info
Triburom – ‘forum.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40316/info
Aqua Real Screensaver – ‘.ar’ Buffer Overflow
source: https://www.securityfocus.com/bid/40606/info
PonVFTP – ‘login.php’ SQL Injection
source: https://www.securityfocus.com/bid/40608/info
Winamp 5.05 < 5.13 - '.ini' Local Stack Buffer Overflow
The problem is in the skin field when a long string is
Joomla! Component com_articlemanager – SQL Injection
########################################################################
dokuwiki 2009-12-25 – Multiple Vulnerabilities
Reported: 13-01-2010
Zenoss 2.3.3 – Multiple SQL Injections
source: https://www.securityfocus.com/bid/37802/info
OpenOffice 3.1 – ‘.csv’ Remote Denial of Service
source: https://www.securityfocus.com/bid/37807/info
Zend Framework 1.9.6 – Multiple Input Validation Vulnerabilities / Security Bypass
source: https://www.securityfocus.com/bid/37809/info
Technology for Solutions 1.0 – ‘id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37811/info
Xforum 1.4 – ‘nbpageliste’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37818/info
Joomla! Component com_marketplace 1.2 – ‘catid’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37819/info
CiviCRM 3.1 < Beta 5 - Multiple Cross-Site Scripting Vulnerabilities
# Author: h00die (mcyr2@csc.com) & Ch3nz (vpierorazio@csc.com)
SwiFTP 1.11 – Overflow (Denial of Service) (PoC)
# Exploit Title: SwiFTP v1.11 Overflow Dos PoC
Populum 2.3 – SQL Injection
# Exploit Title: Populum SQL injection vulnerability
Hesk Help Desk 2.1 – Cross-Site Request Forgery
#############################################################
Ofilter Player – ‘skin.ini’ Local Crash (PoC)
#!/usr/bin/perl
TurboFTP Server 1.00.712 – Remote Denial of Service
# Exploit Title : TurboFTP Server 1.00.712 Remote DoS
Nemesis Player (NSP) – Local Denial of Service
#!/usr/bin/perl
NPlayer – ‘.dat Skin’ Local Heap Overflow (PoC)
#!/usr/bin/perl
Asp VevoCart Control System 3.0.4 – Database Disclosure
========================================================================================
PSI CMS 0.3.1 – SQL Injection
###########################################
Public Media Manager – SQL Injection
#################################################
GNU Bash 4.0 – ‘ls’ Control Character Command Injection
source: https://www.securityfocus.com/bid/37776/info
Joomla! Component com_tienda – ‘categoria’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37798/info
Tribisur – ‘cat’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37800/info
StivaSoft Stiva SHOPPING CART 1.0 – ‘demo.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40310/info
iOS Udisk FTP Basic Edition – Remote Denial of Service
#!/usr/bin/python
Layout CMS 1.0 – SQL Injection / Cross-Site Scripting
+===================================================================================+
PHPepperShop 2.5 – ‘USER_ARTIKEL_HANDLING_AUFRUF.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37707/info
Docmint 1.0/2.1 – ‘id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37721/info
Oracle Database – Remote Listener Memory Corruption
source: https://www.securityfocus.com/bid/37728/info
Simple PHP Blog 0.5.x – ‘search.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37752/info