multiple

multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Wireshark – Multiple Dissector Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/53651/info

2012-05-24 Laurent Butti dos

Wireshark – DIAMETER Dissector Denial of Service

source: https://www.securityfocus.com/bid/53652/info

2012-05-24 Wireshark dos

Squiggle 1.7 – SVG Browser Java Code Execution (Metasploit)

##

2012-05-19 Metasploit remote

Java – Trigerring Java Code from a .SVG Image

SVG is a XML-based file format for static or animated images. Some SVG

2012-05-16 Nicolas Gregoire dos

FlexNet License Server Manager – Stack Overflow In lmgrd

#######################################################################

2012-05-14 Luigi Auriemma dos

Liferay 6.0.x – WebDAV File Reading

Specially crafted webdav request allows reading of local files on liferay 6.0.x

2012-04-22 Jelmer Kuperus remote

Wireshark – ‘call_dissector()’ Null Pointer Dereference Denial of Service

source: https://www.securityfocus.com/bid/52735/info

2012-04-19 Wireshark dos

OpenSSL – ASN1 BIO Memory Corruption

Incorrect integer conversions in OpenSSL can result in memory corruption.

2012-04-19 Tavis Ormandy dos

LibreOffice 3.5.2.2 – Memory Corruption

-----BEGIN PGP SIGNED MESSAGE-----

2012-04-19 shinnai dos

Scrutinizer NetFlow & sFlow Analyzer – Multiple Vulnerabilities

Trustwave SpiderLabs Security Advisory TWSL2012-008:

2012-04-19 Trustwave's SpiderLabs webapps

McAfee Web Gateway 7.1.5.x – ‘Host’ HTTP Header Security Bypass

source: https://www.securityfocus.com/bid/53015/info

2012-04-16 Gabriel Menezes Nunes remote

ManageEngine Support Center Plus 7903 – Multiple Vulnerabilities

_______ _______ _______ __

2012-04-15 xistence webapps

Snort 2 – DCE/RPC Preprocessor Buffer Overflow (Metasploit)

##

2012-04-09 Metasploit remote

Liferay XSL – Command Execution (Metasploit)

##

2012-04-08 Spencer McIntyre webapps

Sony Bravia KDL-32CX525 – ‘hping’ Remote Denial of Service

source: https://www.securityfocus.com/bid/52893/info

2012-04-05 Gabriel Menezes Nunes dos

Java – AtomicReferenceArray Type Violation (Metasploit)

##

2012-03-30 Metasploit remote

PHP 5.4.0 Built-in Web Server – Denial of Service (PoC)

#!/usr/bin/python

2012-03-25 ls dos

Apache Tomcat – Account Scanner / ‘PUT’ Request Command Execution

ISOWAREZ RELEASE

2012-03-19 kingcope remote

VideoLAN VLC Media Player 1.1.11 – ‘.EAC3’ File Denial of Service

// source: https://www.securityfocus.com/bid/64626/info

2012-03-14 Dan Fosco dos

VideoLAN VLC Media Player 1.1.11 – ‘.NSV’ File Denial of Service

// source: https://www.securityfocus.com/bid/64623/info

2012-03-14 Dan Fosco dos

EMC NetWorker 7.6 sp3 – Denial of Service

#######################################################################

2012-03-14 Luigi Auriemma dos

presto! pagemanager 9.01 – Multiple Vulnerabilities

#######################################################################

2012-03-14 Luigi Auriemma dos

Litespeed Web Server – ‘gtitle’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55946/info

2012-03-12 K1P0D remote

Rivettracker 1.03 – Multiple SQL Injections

# Exploit Title: Multiple SQL injections in rivettracker

2012-03-03 Ali Raheem webapps

IBM solidDB 6.5.0.8 – ‘SELECT’ Statement ‘WHERE’ Condition Denial of Service

source: https://www.securityfocus.com/bid/52111/info

2012-02-09 IBM dos

Apache MyFaces – ‘ln’ Information Disclosure

source: https://www.securityfocus.com/bid/51939/info

2012-02-09 Paul Nicolucci remote

Cyberoam Central Console 2.00.2 – Remote File Inclusion

Title:

2012-02-08 Vulnerability-Lab webapps

Apache Struts – Multiple Persistent Cross-Site Scripting Vulnerabilities

##############################################################################

2012-02-02 SecPod Research webapps

Apache – httpOnly Cookie Disclosure

// Source: https://gist.github.com/1955a1c28324d4724b7b/7fe51f2a66c1d4a40a736540b3ad3fde02b7fb08

2012-01-31 pilate remote

Ajax Upload – Arbitrary File Upload

# Exploit Title: Ajax Upload Arbitrary File Upload

2012-01-30 Daniel Godoy webapps

Campaign Enterprise 11.0.421 – SQL Injection

########################################################################################

2012-01-30 Craig Freyman webapps

MiniUPnP 1.4 – Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/57602/info

2012-01-28 Rapid7 dos

Rockwell Automation FactoryTalk Activation Server – Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/51444/info

2012-01-17 Luigi Auriemma dos

PHP 5.3.8 – Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----

2012-01-14 Maksymilian Arciemowicz dos

SonicWALL AntiSpam & EMail 7.3.1 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/51337/info

2012-01-10 Benjamin Kunz Mejri remote

Apache Struts 2 < 2.3.1 - Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20120104-0 >

2012-01-06 SEC Consult webapps

Plone and Zope – Remote Command Execution

# Exploit Title: Plone - Remote Command Execution

2011-12-21 Nick Miles webapps

novell sentinel log manager 1.2.0.1 – Directory Traversal

# Exploit Title: Novell Sentinel Log Manager directory traversal

2011-12-18 Andrea Fabrizi webapps

Capexweb 1.1 – SQL Injection

# Exploit Title: Capexweb Sql Vulnerable

2011-12-16 D1rt3 Dud3 webapps

Splunk – Remote Command Execution

from sec1httplib.requestbuilder import Requestobj

2011-12-15 Gary O'Leary-Steele remote

Nagios XI – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: www.securityfocus.com/bid/51069/info

2011-12-14 anonymous remote

Apache Struts 2.0.9/2.1.8 – Session Tampering Security Bypass

source: https://www.securityfocus.com/bid/50940/info

2011-12-07 Hisato Killing remote

CoDeSys 3.4 – Null Pointer Invalid HTTP Request Parsing Remote Denial of Service

source: https://www.securityfocus.com/bid/50854/info

2011-11-30 Luigi Auriemma dos

CoDeSys 3.4 – POST Null Pointer Content-Length Parsing Remote Denial of Service

source: https://www.securityfocus.com/bid/50854/info

2011-11-30 Luigi Auriemma dos

Java Applet Rhino Script Engine – Remote Code Execution (Metasploit)

##

2011-11-30 Metasploit remote

Authenex A-Key/ASAS Web Management Control 3.1.0.2 – Blind SQL Injection

============================================================

2011-11-15 Jose Carlos de Arriba webapps

Mozilla Firefox 8.0 – Null Pointer Dereference (PoC)

# Firefox GetStatus(&status); // Code execution is here.

2011-11-14 0in dos

Libc – ‘regcomp()’ Stack Exhaustion Denial of Service

2011-11-04 Maksymilian Arciemowicz dos

Google Chrome – Denial of Service

GGGGGG\

2011-10-23 Prashant Uniyal dos

DELL Quest One Password Manager – CAPTCHA Security Bypass

source: https://www.securityfocus.com/bid/63259/info

2011-10-21 Johnny Bravo remote