java

java 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

EMC M&R (Watch4net) – Credential Disclosure

Abstract

2015-03-19 Han Sahin webapps

Websense Appliance Manager – Command Injection

Abstract

2015-03-18 Han Sahin webapps

ElasticSearch – Search Groovy Sandbox Bypass (Metasploit)

##

2015-03-16 Metasploit remote

Java JMX – Server Insecure Configuration Java Code Execution (Metasploit)

##

2015-02-17 Metasploit remote

ManageEngine (Multiple Products) – (Authenticated) Arbitrary File Upload (Metasploit)

##

2015-01-20 Metasploit remote

Lexmark MarkVision Enterprise – Arbitrary File Upload (Metasploit)

##

2015-01-13 Metasploit remote

Visual Mining NetCharts Server – Remote Code Execution (Metasploit)

##

2014-11-10 Metasploit remote

ManageEngine OpManager / Social IT – Arbitrary File Upload (Metasploit)

##

2014-10-02 Pedro Ribeiro remote

SolarWinds Storage Manager – Authentication Bypass (Metasploit)

##

2014-09-15 Metasploit remote

HP AutoPass License Server – Arbitrary File Upload (Metasploit)

##

2014-06-27 Metasploit remote

Yealink VoIP Phones – ‘/servlet’ HTTP Response Splitting

source: https://www.securityfocus.com/bid/68022/info

2014-06-12 Jesus Oquendo webapps

ElasticSearch Dynamic Script – Arbitrary Java Execution (Metasploit)

##

2014-05-30 Metasploit remote

Apache Struts – Developer Mode OGNL Execution (Metasploit)

##

2014-02-05 Metasploit remote

Cisco Prime Data Center Network Manager – Arbitrary File Upload (Metasploit)

##

2013-12-03 Metasploit remote

Ametys CMS 3.5.2 – ‘lang’ XPath Injection

Ametys CMS 3.5.2 (lang parameter) XPath Injection Vulnerability

2013-11-30 LiquidWorm webapps

Apache Roller – OGNL Injection (Metasploit)

##

2013-11-27 Metasploit remote

SearchBlox – Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/61974/info

2013-08-23 Ricky Roane Jr webapps

Hero Framework – ‘/users/forgot_password?error’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/59041/info

2013-04-10 High-Tech Bridge webapps

Hero Framework – ‘/users/login?Username’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/59041/info

2013-04-10 High-Tech Bridge webapps

Open-Xchange Server 6 – Multiple Vulnerabilities

Multiple security issues for Open-Xchange Server have been discovered and fixed. The vendor has chosen responsible fu...

2013-03-15 Martin Braun webapps

HP Intelligent Management Center – ‘topoContent.jsf’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58293/info

2013-03-04 Julien Ahrens webapps

Java Applet – AverageRangeStatisticImpl Remote Code Execution (Metasploit)

##

2013-01-24 Metasploit remote

Java Applet JMX – Remote Code Execution (Metasploit) (1)

##

2013-01-11 Metasploit remote

N-able N-central – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/56933/info

2012-12-13 Cartel webapps

Oracle Business Transaction Management FlashTunnelService – Remote Code Execution (Metasploit)

##

2012-10-10 Metasploit remote

Java 7 Applet – Remote Code Execution (Metasploit)

##

2012-08-27 Metasploit remote

hupa webmail 0.0.2 – Persistent Cross-Site Scripting

#!/usr/bin/python

2012-08-20 Shai rod webapps

Novell ZENworks Asset Management – Remote Execution (Metasploit)

##

2012-08-15 Metasploit remote

ConcourseSuite – Multiple Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/54881/info

2012-08-08 Matthew Joyce webapps

ManageEngine Applications Manager – Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/54759/info

2012-08-01 Ibrahim El-Sayed webapps

ManageEngine Applications Manager – Multiple SQL Injections

source: https://www.securityfocus.com/bid/54756/info

2012-08-01 Ibrahim El-Sayed webapps

Java Applet – Field Bytecode Verifier Cache Remote Code Execution (Metasploit)

##

2012-07-11 Metasploit remote

Squiz CMS – Multiple Cross-Site Scripting / XML External Entity Injection Vulnerabilities

source: https://www.securityfocus.com/bid/54049/info

2012-06-14 Nadeem Salim webapps

BMC Identity Management – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/53924/info

2012-06-11 Travis Lee webapps

Liferay Portal 6.0.x < 6.1 - Privilege Escalation

Liferay users can assign themselves to organizations, leading to

2012-05-13 Jelmer Kuperus webapps

JBMC Software DirectAdmin 1.403 – ‘domain’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52845/info

2012-04-02 Dawid Golak webapps

ManageEngine Firewall Analyzer 7.2 – ‘fw/syslogViewer.do?port’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52841/info

2012-04-01 Vulnerability Research Laboratory webapps

ManageEngine Firewall Analyzer 7.2 – ‘fw/mindex.do?url’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52841/info

2012-04-01 Vulnerability Research Laboratory webapps

ManageEngine Firewall Analyzer 7.2 – ‘fw/createAnomaly.do?subTab’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52841/info

2012-04-01 Vulnerability Research Laboratory webapps

ManageEngine Firewall Analyzer 7.2 – ‘/fw/index2.do’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52841/info

2012-04-01 Vulnerability Research Laboratory webapps

Apache Struts 2.0 – ‘XSLTResult.java’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/52702/info

2012-03-23 voidloafer webapps

Minify 2.1.x – ‘g’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52672/info

2012-03-21 Ayoub Aboukir webapps

JavaBB 0.99 – ‘userId’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52545/info

2012-03-18 sonyy webapps

EJBCA 4.0.7 – ‘issuer’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52400/info

2012-03-11 MustLive webapps

JaWiki – ‘versionNo’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52060/info

2012-02-17 sonyy webapps

LxCenter Kloxo 6.1.10 – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/51964/info

2012-02-10 anonymous webapps

ManageEngine ADManager Plus 5.2 Build 5210 – ‘domainName’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51893/info

2012-02-07 LiquidWorm webapps

ManageEngine ADManager Plus 5.2 Build 5210 – ‘Operation’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/51893/info

2012-02-07 LiquidWorm webapps

Contus Job Portal – ‘Category’ SQL Injection

source: https://www.securityfocus.com/bid/51404/info

2012-01-13 Lazmania61 webapps

Infoblox NetMRI 6.2.1 – Admin Login Page Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50646/info

2011-11-11 Jose Carlos de Arriba webapps