multiple

multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Apache Commons FileUpload and Apache Tomcat – Denial of Service

#################################################################################

2014-02-12 Trustwave's SpiderLabs dos

Apache Tomcat Manager – Application Upload (Authenticated) Code Execution (Metasploit)

##

2014-02-05 Metasploit remote

VideoLAN VLC Media Player 2.1.2 – ‘.asf’ Crash (PoC)

#!/usr/bin/python

2014-02-05 Saif dos

MediaWiki 1.22.1 PdfHandler – Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE-----

2014-02-01 @u0x webapps

Mozilla Thunderbird 17.0.6 – Input Validation Filter Bypass

Document Title:

2014-01-27 Vulnerability-Lab dos

Apache Struts2 2.0.0 < 2.3.15 - Prefixed Parameters OGNL Injection

CVE Number: CVE-2013-2251

2014-01-14 Takeshi Terada webapps

Oracle Supply Chain Products Suite – Remote Security

source: https://www.securityfocus.com/bid/64836/info

2014-01-14 Oracle remote

ACE Stream Media 2.1 – ‘acestream://’ Format String

ACE Stream Media 2.1 (acestream://) Format String Exploit PoC

2014-01-03 LiquidWorm local

Adobe ColdFusion 9 – Administrative Authentication Bypass (Metasploit)

##

2013-12-11 Metasploit remote

Air Gallery 1.0 Air Photo Browser – Multiple Vulnerabilities

Document Title:

2013-12-10 Vulnerability-Lab local

Nginx 1.1.17 – URI Processing SecURIty Bypass

source: https://www.securityfocus.com/bid/63814/info

2013-11-19 Ivan Fratric remote

SKIDATA Freemotion.Gate – Web Services Multiple Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/63805/info

2013-11-19 Dennis Kelly remote

Apache Tomcat 5.5.25 – Cross-Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------...

2013-11-04 Ivano Binetti webapps

Practico 13.9 – Multiple Vulnerabilities

Practico 13.9 Multiple Vulnerabilities

2013-11-03 LiquidWorm webapps

Openbravo ERP – XML External Entity Information Disclosure

source: https://www.securityfocus.com/bid/63431/info

2013-10-30 Tod Beardsley remote

Apache Shindig – XML External Entity Information Disclosure

source: https://www.securityfocus.com/bid/63260/info

2013-10-21 Kousuke Ebihara remote

Elite Graphix ElitCMS 1.01 / PRO – Multiple Web Vulnerabilities

Document Title:

2013-10-18 Vulnerability-Lab webapps

Oracle GlassFish Server 2.1.1/3.0.1 – Multiple Subcomponent Resource Identifier Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/63052/info

2013-10-15 Alex Kouzemtchenko remote

VMware Hyperic HQ Groovy Script-Console – Java Execution (Metasploit)

##

2013-10-14 Metasploit remote

IBM Cognos Business Intelligence – XML External Entity Information Disclosure

source: https://www.securityfocus.com/bid/63719/info

2013-10-11 IBM remote

Imperva SecureSphere Web Application Firewall MX 9.5.6 – Blind SQL Injection

Blind SQL Injection to Imperva SecureSphere Web Application Firewall MX

2013-10-10 Giuseppe D'Amore webapps

Evince PDF Reader 2.32.0.145 (Windows) / 3.4.0 (Linux) – Denial of Service

Advisory Information :

2013-10-02 Deva dos

Abuse HTTP Server – Remote Denial of Service

'''

2013-09-30 Zico Ekel dos

Nodejs – ‘js-yaml load()’ Code Exec (Metasploit)

##

2013-09-30 Metasploit local

Posnic Stock Management System 1.02 – Multiple Vulnerabilities

# Exploit Title: Posnic Stock Management System 1.02 Multiple Vulnerabilities

2013-09-26 Sarahma Security webapps

Blast XPlayer – Local Buffer Overflow (PoC)

Title: Blast XPlayer Local Buffer Overflow PoC

2013-09-26 flux77 dos

Mozilla Firefox 9.0.1 – Same Origin Policy Security Bypass

source: https://www.securityfocus.com/bid/62480/info

2013-09-17 Takeshi Terada remote

Java – ‘storeImageArray()’ Invalid Array Indexing (Metasploit)

##

2013-08-19 Metasploit remote

Squash – YAML Code Execution (Metasploit)

##

2013-08-12 Metasploit remote

Ruby on Rails – Known Secret Session Cookie Remote Code Execution (Metasploit)

##

2013-08-12 Metasploit remote

Mozilla Firefox 5.0 < 15.0.1 - exposedProps XCS Code Execution (Metasploit)

##

2013-08-06 Metasploit local

Apache Struts 2 – DefaultActionMapper Prefixes OGNL Code Execution (Metasploit)

##

2013-07-27 Metasploit remote

Apache Struts 2.2.3 – Multiple Open Redirections

source: https://www.securityfocus.com/bid/61196/info

2013-07-16 Takeshi Terada remote

Apache CXF < 2.5.10/2.6.7/2.7.4 - Denial of Service

SEC Consult Vulnerability Lab Security Advisory < 20130709-0 >

2013-07-09 SEC Consult dos

Mobile Atlas Creator 1.9.12 – Persistent Command Injection

Title:

2013-07-05 Vulnerability-Lab webapps

Intelligent Platform Management Interface – Information Disclosure

source: https://www.securityfocus.com/bid/61076/info

2013-07-02 Dan Farmer remote

RealNetworks RealPlayer – Denial of Service

source: https://www.securityfocus.com/bid/60903/info

2013-07-02 Akshaysinh Vaghela dos

FileCOPA FTP Server – Remote Denial of Service

source: https://www.securityfocus.com/bid/60909/info

2013-07-01 Chako dos

Java Applet – ProviderSkeleton Insecure Invoke Method (Metasploit)

##

2013-07-01 Metasploit remote

Motion – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/60818/info

2013-06-26 xistence remote

Oracle VM VirtualBox 4.0 – ‘tracepath’ Local Denial of Service

source: https://www.securityfocus.com/bid/60794/info

2013-06-26 Thomas Dreibholz dos

Monkey HTTP Daemon Mandril Security Plugin – Security Bypass

source: https://www.securityfocus.com/bid/60569/info

2013-06-14 felipensp remote

Java Applet – Driver Manager Privileged ‘toString()’ Remote Code Execution (Metasploit)

##

2013-06-11 Metasploit remote

Java – Web Start Double Quote Injection Remote Code Execution (Metasploit)

##

2013-06-11 Rh0 remote

Apache Struts – OGNL Expression Injection

source: https://www.securityfocus.com/bid/60345/info

2013-06-05 Jon Passki remote

Apache Struts – includeParams Remote Code Execution (Metasploit)

##

2013-06-05 Metasploit remote

MongoDB – ‘conn’ Mongo Object Remote Code Execution

source: https://www.securityfocus.com/bid/61309/info

2013-06-04 SCRT Security remote

ModSecurity – Remote Null Pointer Dereference

Source: http://packetstormsecurity.com/files/121815/modsecurity_cve_2013_2765_check.py.txt

2013-05-31 Younes JAAIDI dos

Code::Blocks – Denial of Service

source: https://www.securityfocus.com/bid/60208/info

2013-05-29 ariarat dos

Python RRDtool Module – Function Format String

source: https://www.securityfocus.com/bid/60004/info

2013-05-18 Thomas Pollet remote