multiple

multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Adobe IndesignServer 5.5 – SOAP Server Arbitrary Script Execution (Metasploit)

##

2012-12-06 Metasploit remote

FirePass SSL VPN – Local File Inclusion

SEC Consult Vulnerability Lab Security Advisory < 20121203-0 >

2012-12-03 SEC Consult webapps

Symantec Messaging Gateway 9.5.3-3 – Cross-Site Request Forgery

=======

2012-12-03 Ben Williams webapps

MySQL – Remote User Enumeration

# MySQL User Account Enumeration Utility

2012-12-02 kingcope remote

Oracle OpenSSO 8.0 – Multiple Cross-Site Scripting POST Injection Vulnerabilities

Oracle OpenSSO 8.0 Multiple XSS POST Injection Vulnerabilities

2012-11-29 LiquidWorm webapps

Forescout CounterACT – ‘a’ Open Redirection

source: https://www.securityfocus.com/bid/56687/info

2012-11-26 Joseph Sheridan webapps

Websense Proxy – Filter Bypass

Websense Proxy Filter Bypass

2012-11-26 Nahuel Grisolia dos

Greenstone – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/56662/info

2012-11-23 AkaStep remote

SonicWALL CDP 5040 6.x – Multiple Vulnerabilities

Title:

2012-11-20 Vulnerability-Lab webapps

Splunk 4.3.1 – Denial of Service

source: https://www.securityfocus.com/bid/56581/info

2012-11-19 Alexander Klink dos

Media Player Classic (MPC) 1.5 – WebServer Request Handling Remote Denial of Service

source: https://www.securityfocus.com/bid/56567/info

2012-11-16 X-Cisadane dos

Java Applet – JAX-WS Remote Code Execution (Metasploit)

##

2012-11-13 Metasploit remote

ESRI ArcGIS for Server – ‘where’ SQL Injection

source: https://www.securityfocus.com/bid/56474/info

2012-11-09 anonymous webapps

Cryptocat 2.0.22 – Arbitrary Script Injection

source: https://www.securityfocus.com/bid/61093/info

2012-11-07 Mario Heiderich remote

Cryptocat 2.0.21 Chrome Extension – ‘img/keygen.gif’ File Information Disclosure

source: https://www.securityfocus.com/bid/61090/info

2012-11-07 Mario Heiderich remote

Sophos Products – Multiple Vulnerabilities

List, I've completed the second paper in my series analyzing Sophos

2012-11-05 Tavis Ormandy remote

ZPanel 10.0.1 – Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset

# Exploit Title: ZPanel

2012-11-05 pcsjj webapps

ManageEngine Security Manager Plus 5.5 build 5505 – SQL Injection (Metasploit)

##

2012-10-28 Metasploit remote

ManageEngine Security Manager Plus 5.5 build 5505 – Remote Root/SYSTEM SQL Injection

#!/usr/bin/python

2012-10-19 xistence remote

ManageEngine Security Manager Plus 5.5 build 5505 – Directory Traversal

#!/usr/bin/python

2012-10-19 xistence webapps

Oracle Database – Protocol Authentication Bypass

source: https://www.securityfocus.com/bid/55651/info

2012-10-18 Esteban Martinez Fayo local

Oracle WebCenter Sites (FatWire Content Server) – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20121017-2 >

2012-10-17 SEC Consult webapps

Metasploit < 4.4 - pcap_log Plugin Privilege Escalation (Metasploit)

##

2012-10-12 0a29406d9794e4f9b30b3c5d6702c708 remote

ServersCheck Monitoring Software 9.0.12/9.0.14 – Persistent Cross-Site Scripting

# Author: loneferret of Offensive Security

2012-10-10 loneferret webapps

Endpoint Protector 4.0.4.0 – Multiple Vulnerabilities

Title:

2012-10-09 Vulnerability-Lab webapps

IBM Lotus Notes Traveler 8.5.1.x – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/55740/info

2012-09-28 MustLive remote

Atlassian Confluence 3.4.x – Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/55509/info

2012-09-12 D. Niedermaier webapps

HP SiteScope (Linux/Windows) – Remote Code Execution (Metasploit)

##

2012-09-08 Metasploit remote

JBoss – DeploymentFileRepository WAR Deployment (via JMXInvokerServlet) (Metasploit)

require 'msf/core'

2012-09-05 Metasploit remote

Splunk 4.3.3 – Arbitrary File Read

# Exploit Title: Splunk

2012-09-04 Marcio Almeida webapps

Websense Content Gateway – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55194/info

2012-08-23 Steven Sim Kok Leong remote

Apache Struts 2 – Skill Name Remote Code Execution

source: https://www.securityfocus.com/bid/55165/info

2012-08-23 kxlzx remote

SAP NetWeaver Dispatcher 7.0 ehp1/2 – Multiple Vulnerabilities

1. Advisory Information

2012-08-21 Core Security dos

Mozilla Firefox – Remote Denial of Service

source: https://www.securityfocus.com/bid/55091/info

2012-08-17 Jean Pascal Pereira dos

Worksforweb iAuto – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/54812/info

2012-08-06 Benjamin Kunz Mejri webapps

ntop – ‘arbfile’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54792/info

2012-08-03 Marcos Garcia webapps

Zenoss 3.2.1 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/54793/info

2012-07-30 Brendan Coles webapps

Zenoss 3.2.1 – (Authenticated) Remote Command Execution

source: https://www.securityfocus.com/bid/54793/info

2012-07-30 Brendan Coles webapps

Arora Browser – Remote Denial of Service

source: https://www.securityfocus.com/bid/54599/info

2012-07-18 t3rm!n4t0r dos

Apache Sling – Denial of Service

source: https://www.securityfocus.com/bid/54341/info

2012-07-06 IOactive dos

plow – ‘.plowrc’ File Buffer Overflow

source: https://www.securityfocus.com/bid/54290/info

2012-07-03 Jean Pascal Pereira dos

GIMP 2.8.0 – ‘.FIT’ File Format Denial of Service

Summary

2012-06-30 Joseph Sheridan dos

SWFupload – ‘movieName’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54245/info

2012-06-29 Nathan Partlan webapps

Airlock WAF 4.2.4 – Overlong UTF-8 Sequence Bypass

SEC Consult Vulnerability Lab Security Advisory < 20120618-1 >

2012-06-19 SEC Consult dos

Adobe Illustrator CS5.5 – Memory Corruption

##########################################################################

2012-06-14 Felipe Andres Manzano local

Apple iTunes 10.6.1.7 – ‘.m3u’ Walking Heap Buffer Overflow (PoC)

#!/usr/bin/perl

2012-06-13 LiquidWorm dos

MySQL – Authentication Bypass

#!/usr/bin/python

2012-06-12 David Kennedy (ReL1K) remote

Apache Struts 2.2.1.1 – Remote Command Execution (Metasploit)

##

2012-06-05 Metasploit remote

Browsers Browsers – Navigation Download Trick

Another moderately interesting tidbit, I guess...

2012-05-31 Michal Zalewski local

Wireshark – Misaligned Memory Denial of Service

source: https://www.securityfocus.com/bid/53653/info

2012-05-24 Klaus Heckelmann dos