multiple

multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Innovaphone PBX Admin-GUI – Cross-Site Request Forgery

Title: Innovaphone PBX Admin-GUI CSRF

2014-08-25 Rainer Giedat webapps

ManageEngine Password Manager Pro / ManageEngine IT360 – SQL Injection

source: https://www.securityfocus.com/bid/69303/info

2014-08-20 Pedro Ribeiro webapps

Mozilla Firefox – toString console.time Privileged JavaScript Injection (Metasploit)

##

2014-08-19 Metasploit remote

Zenoss Monitoring System 4.2.5-2108 (x64) – Persistent Cross-Site Scripting

# Exploit Title: Stored XSS vulnerability in Zenoss core open source monitoring system

2014-07-25 Dolev Farhi webapps

Barracuda Networks #35 Web Firewall 610 6.0.1 – Filter Bypass / Persistent

Document Title:

2014-07-23 Vulnerability-Lab webapps

Alfresco – ‘/cmisbrowser?url’ Server-Side Request Forgery

source: https://www.securityfocus.com/bid/68/info

2014-07-16 V. Paulikas remote

Alfresco – ‘/proxy?endpoint’ Server-Side Request Forgery

source: https://www.securityfocus.com/bid/68/info

2014-07-16 V. Paulikas remote

Node Browserify 4.2.0 – Remote Code Execution

#!/usr/bin/python

2014-07-16 Cal Leeming dos

Gitlist – Remote Command Execution (Metasploit)

##

2014-07-07 Metasploit remote

Gitlist 0.4.0 – Remote Code Execution

from commands import getoutput

2014-06-30 drone remote

Endeca Latitude 2.2.2 – Cross-Site Request Forgery

Advisory: Endeca Latitude Cross-Site Request Forgery

2014-06-27 RedTeam Pentesting webapps

Python CGIHTTPServer – Encoded Directory Traversal

Advisory: Python CGIHTTPServer File Disclosure and Potential Code

2014-06-27 RedTeam Pentesting webapps

Rocket Servergraph Admin Center – fileRequestor Remote Code Execution (Metasploit)

##

2014-06-18 Metasploit remote

Java – Debug Wire Protocol Remote Code Execution (Metasploit)

##

2014-06-17 Metasploit remote

PostgreSQL 8.4.1 – JOIN Hashtable Size Integer Overflow Denial of Service

source: https://www.securityfocus.com/bid/38619/info

2014-06-13 Bernt Marius Johnsen dos

Foreman Smart-Proxy – Remote Command Injection

source: https://www.securityfocus.com/bid/68117/info

2014-06-05 Lukas Zapletal remote

Wireshark CAPWAP Dissector – Denial of Service (Metasploit)

#

2014-05-28 j0sm1 dos

Castor Library – XML External Entity Information Disclosure

source: https://www.securityfocus.com/bid/67676/info

2014-05-27 Ron Gutierrez remote

Symantec Workspace Streaming – Arbitrary File Upload (Metasploit)

##

2014-05-26 Metasploit remote

Mayan-EDms Web-Based Document Management OS System – Multiple Persistent Cross-Site Scripting Vulnerabilities

# Exploit Title: Multiple Stored XSS

2014-05-24 Dolev Farhi webapps

RealPlayer – ‘.3gp’ File Processing Memory Corruption

source: https://www.securityfocus.com/bid/67434/info

2014-05-16 Aryan Bayaninejad dos

Mozilla Firefox 29.0 – Null Pointer Dereference

Mozilla Firefox Null Pointer Dereference Vulnerability

2014-05-16 Mr.XHat dos

UPS Web/SNMP-Manager CS121 – Authentication Bypass

source: https://www.securityfocus.com/bid/67438/info

2014-05-15 jkmac remote

ElasticSearch – Remote Code Execution

Toggle navigation

2014-05-15 Jeff Geiger webapps

VideoLAN VLC Media Player 2.1.3 – ‘.wav’ File Memory Corruption

source: https://www.securityfocus.com/bid/67315/info

2014-05-09 Aryan Bayaninejad dos

Python – Interpreter Heap Memory Corruption (PoC)

# Title: Python Interpreter Heap Memory Corruption

2014-05-08 Debasish Mandal dos

AssistMyTeam Team Helpdesk – Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/67271/info

2014-05-05 bhamb remote

Apache Struts – ClassLoader Manipulation Remote Code Execution (Metasploit)

##

2014-05-02 Metasploit remote

miSecureMessages 4.0.1 – Session Management / Authentication Bypass

Affected Product

2014-04-25 Jared Bird webapps

OpenSSL TLS Heartbeat Extension – ‘Heartbleed’ Information Leak (2) (DTLS Support)

/* * CVE-2014-0160 heartbleed OpenSSL information leak exploit * =========================================================...

2014-04-24 Ayman Sagy remote

NRPE 2.15 – Remote Command Execution

=============================================

2014-04-18 Dawid Golunski remote

WhatsApp < 2.11.7 - Remote Crash

#!/usr/bin/python

2014-04-14 Jaime Sánchez dos

OpenSSL TLS Heartbeat Extension – ‘Heartbleed’ Information Leak (1)

c->sslContext = SSL_CTX_new(SSLv23_client_method());

2014-04-10 prdelka remote

csUpload Script Site – Authentication Bypass

# Exploit Title: ["csUpload Script Site" Authentication Bypass]

2014-04-09 Satanic2000 webapps

OpenSSL 1.0.1f TLS Heartbeat Extension – ‘Heartbleed’ Memory Disclosure (Multiple SSL/TLS Versions)

# Exploit Title: [OpenSSL TLS Heartbeat Extension - Memory Disclosure - Multiple SSL/TLS versions]

2014-04-09 Fitzl Csaba remote

OpenSSL TLS Heartbeat Extension – ‘Heartbleed’ Memory Disclosure

#!/usr/bin/python

2014-04-08 Jared Stafford remote

EMC Cloud Tiering Appliance 10.0 – XML External Entity Arbitrary File Read (Metasploit)

EMC Cloud Tiering Appliance v10.0 Unauthed XXE

2014-03-31 Brandon Perry webapps

Dell SonicWALL EMail Security Appliance Application 7.4.5 – Multiple Vulnerabilities

Document Title:

2014-03-27 Vulnerability-Lab webapps

Apache CouchDB 1.5.0 – ‘uuids’ Denial of Service

# Exploit Title: Couchdb uuids DOS exploit

2014-03-26 Krusty Hack dos

Oracle VM VirtualBox – 3D Acceleration Multiple Vulnerabilities

Core Security - Corelabs Advisory

2014-03-12 Core Security dos

ownCloud 4.0.x/4.5.x – ‘upload.php?Filename’ Remote Code Execution

Vulnerability title: Remote Code Execution in ownCloud

2014-03-10 Portcullis webapps

ET – Chat Password Reset Security Bypass

source: https://www.securityfocus.com/bid/66149/info

2014-03-09 IRH remote

Apache Struts < 1.3.10 / < 2.3.16.2 - ClassLoader Manipulation Remote Code Execution (Metasploit)

##

2014-03-06 Metasploit remote

SpagoBI 4.0 – Privilege Escalation

###################################################

2014-02-28 Christian Catalano webapps

Plex Media Server 0.9.9.2.374-aa23a69 – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20140228-1 >

2014-02-28 SEC Consult webapps

Plex Media Server 0.9.9.2.374-aa23a69 – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20140228-1 >

2014-02-28 SEC Consult webapps

Dassault Systemes Catia – Remote Stack Buffer Overflow

source: https://www.securityfocus.com/bid/65675/info

2014-02-19 Mohamed Shetta remote

MediaWiki – ‘Thumb.php’ Remote Command Execution (Metasploit)

##

2014-02-19 Metasploit remote

Dexter (CasinoLoader) Panel – SQL Injection

# Exploit Title: Dexter (CasinoLoader) Panel SQLi

2014-02-16 bwall webapps

CA 2E Web Option 8.1.2 – Authentication Bypass

Vulnerability title: Unauthenticated Privilege Escalation in CA 2E Web Option

2014-02-13 Mike Emery webapps