multiple

multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

SAP SOAP RFC – SXPG_CALL_SYSTEM Remote Command Execution (Metasploit)

##

2013-05-14 Metasploit remote

SAP SOAP RFC – SXPG_COMMAND_EXECUTE Remote Command Execution (Metasploit)

##

2013-05-14 Metasploit remote

ColdFusion 9-10 – Credential Disclosure

#!/usr/bin/env python

2013-05-08 HTP webapps

Java Applet – Reflection Type Confusion Remote Code Execution (Metasploit)

##

2013-04-23 Metasploit remote

Nginx 0.6.x – Arbitrary Code Execution NullByte Injection

# Exploit Title: nginx Arbitrary Code Execution NullByte Injection

2013-04-19 Neal Poole webapps

SAP ConfigServlet – OS Command Execution (Metasploit)

require 'msf/core'

2013-04-18 Andras Kabai remote

Aibolit – Information Disclosure

source: https://www.securityfocus.com/bid/59053/info

2013-04-13 MustLive webapps

Adobe ColdFusion APSB13-03 – Remote Multiple Vulnerabilities (Metasploit)

##

2013-04-10 Metasploit remote

Novell ZENworks Configuration Management 10 SP3/11 SP2 – Remote Execution (Metasploit)

##

2013-04-08 Metasploit remote

Google AD Sync Tool – Exposure of Sensitive Information

Sense of Security - Security Advisory - SOS-13-001

2013-04-08 Sense of Security local

OTRS 3.x – FAQ Module Persistent Cross-Site Scripting

# Exploit Title: [OTRS Faq Module - Persistent XSS]

2013-04-08 Luigi Vezzoso webapps

Mozilla Firefox – Cookie Verification Denial of Service

source: https://www.securityfocus.com/bid/62969/info

2013-04-04 anonymous dos

Google Chrome – Cookie Verification Denial of Service

source: https://www.securityfocus.com/bid/58857/info

2013-04-04 anonymous dos

Aspen 0.8 – Directory Traversal

Aspen 0.8 - Directory Traversal

2013-04-02 Daniel Ricardo dos Santos webapps

v0pCr3w (Web Shell) – Remote Code Execution (Metasploit)

##

2013-03-29 Metasploit remote

IBM Lotus Domino 8.5.x – ‘x.nsf’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58715/info

2013-03-26 MustLive remote

Apache Struts – ‘ParametersInterceptor’ Remote Code Execution (Metasploit)

##

2013-03-22 Metasploit remote

Apache Rave 0.11 < 0.20 - User Information Disclosure

CVE-2013-1814: Apache Rave exposes User over API

2013-03-13 Andreas Guth webapps

RubyGems fastreader – ‘entry_controller.rb’ Remote Command Execution

source: https://www.securityfocus.com/bid/58450/info

2013-03-12 Larry W. Cashdollar remote

McAfee Vulnerability Manager – ‘cert_cn’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58401/info

2013-03-08 Asheesh Anaconda remote

VMware Virtual Machine Communication Interface (VMCI) – ‘vmci.sys’

CVE-2013-1406 exploitation PoC

2013-03-06 Artem Shishkin local

Varnish Cache – Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/58314/info

2013-03-05 tytusromekiatomek dos

Java Applet JMX – Remote Code Execution (Metasploit) (2)

##

2013-02-25 Metasploit remote

Dell SonicWALL Scrutinizer – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/57949/info

2013-02-14 Benjamin Kunz Mejri remote

Google Chrome – Silent HTTP Authentication

# Exploit Title: [Google Chrome Silent HTTP Authentication]

2013-02-11 T355 dos

Verax NMS – Multiple Method Authentication Bypass

source: https://www.securityfocus.com/bid/58334/info

2013-02-06 Andrew Brooks webapps

Novell Groupwise Client 8.0 – Multiple Remote Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/57657/info

2013-01-31 High-Tech Bridge remote

Multiple Hunt CCTV – Information Disclosure

source: https://www.securityfocus.com/bid/57579/info

2013-01-29 Alejandro Ramos remote

Ruby on Rails – JSON Processor YAML Deserialization Code Execution (Metasploit)

##

2013-01-29 Metasploit remote

Novell eDirectory 8 – Remote Buffer Overflow (Metasploit)

##

2013-01-24 Metasploit remote

SonicWALL Gms 6 – Arbitrary File Upload (Metasploit)

##

2013-01-24 Metasploit remote

SQLiteManager 1.2.4 – Remote PHP Code Injection

#!/usr/bin/env python

2013-01-24 RealGame webapps

Java Applet – Method Handle Remote Code Execution (Metasploit)

##

2013-01-24 Metasploit remote

Jenkins – Script-Console Java Execution (Metasploit)

##

2013-01-21 Metasploit remote

Apache OFBiz 10.4.x – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57463/info

2013-01-18 Juan Caillava remote

Jenkins CI Script Console – Command Execution (Metasploit)

##

2013-01-18 Spencer McIntyre remote

SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x – Remote Command Execution

#!/usr/bin/perl

2013-01-18 Nikolas Sotiriu webapps

SonicWALL GMS/Viewpoint/Analyzer – Authentication Bypass

-------------------------- NSOADV-2013-002 ---------------------------

2013-01-18 Nikolas Sotiriu webapps

Nagios3 – ‘history.cgi’ Remote Command Execution

#!/usr/bin/python

2013-01-13 blasty remote

Ruby on Rails – XML Processor YAML Deserialization Code Execution (Metasploit)

##

2013-01-10 Metasploit remote

Colloquy – Remote Denial of Service

source: https://www.securityfocus.com/bid/57255/info

2013-01-09 Aph3x dos

Dell OpenManage Server Administrator – Cross-Site Scripting

source: https://www.securityfocus.com/bid/57212/info

2013-01-09 Tenable NS remote

Mozilla Firefox < 17.0.1 - Flash Privileged Code Injection (Metasploit)

##

2013-01-08 Metasploit local

BT Home Hub – ‘uuid’ Buffer Overflow

source: https://www.securityfocus.com/bid/57243/info

2013-01-08 Zachary Cutlip dos

Movable Type 4.2x/4.3x – Web Upgrade Remote Code Execution (Metasploit)

##

2013-01-07 Metasploit remote

Nexpose Security Console – Cross-Site Request Forgery

Product: Nexpose Security Console

2013-01-06 Robert Gilbert webapps

Netwin SurgeFTP – Remote Command Execution (Metasploit)

##

2012-12-23 Metasploit remote

IDA Pro 6.3 – Crash (PoC)

pment)

2012-12-20 nitr0us dos

NetWin SurgeFTP – (Authenticated) Admin Command Injection (Metasploit)

require 'msf/core'

2012-12-20 Spencer McIntyre remote

Splunk 5.0 – Custom App Remote Code Execution (Metasploit)

##

2012-12-09 Metasploit remote