multiple

multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Splunk 4.1.6 Web Component – Remote Denial of Service

source: https://www.securityfocus.com/bid/50298/info

2011-10-20 Filip Palian dos

Splunk 4.1.6 – ‘segment’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50296/info

2011-10-20 Filip Palian remote

Metasploit Web UI 4.1.0 – Persistent Cross-Site Scripting

Advisory: Metasploit 4.1.0 Web UI stored XSS vulnerability

2011-10-20 Stefan Schurtz webapps

Toshiba e-Studio (Multiple Devices) – Security Bypass

source: https://www.securityfocus.com/bid/50168/info

2011-10-17 Deral Heiland PercX remote

G-WAN 2.10.6 – Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/50108/info

2011-10-13 Fredrik Widlund dos

Apache mod_proxy – Reverse Proxy Exposure

#!/usr/bin/env python

2011-10-11 Rodrigo Marcos remote

Polipo 1.0.4.1 – POST/PUT HTTP Header Processing Denial of Service

source: https://www.securityfocus.com/bid/49908/info

2011-10-01 Usman Saeed dos

Spring Security – HTTP Header Injection

source: https://www.securityfocus.com/bid/49535/info

2011-09-09 David Mas remote

Apache – Remote Memory Exhaustion (Denial of Service)

#Apache httpd Remote Denial of Service (memory exhaustion)

2011-08-19 kingcope dos

Apache Struts < 2.2.0 - Remote Command Execution (Metasploit)

##

2011-08-19 Metasploit remote

Adobe Flash Media Server 4.0.2 – Null Pointer Dereference Remote Denial of Service

source: https://www.securityfocus.com/bid/49103/info

2011-08-09 Knud Erik Hojgaard dos

OpenSLP 1.2.1 / < 1647 trunk - Denial of Service

#!/usr/bin/python

2011-08-05 Nicolas Gregoire dos

Xpdf 3.02-13 – ‘zxpdf’ Security Bypass

source: https://www.securityfocus.com/bid/49007/info

2011-08-04 Chung-chieh Shan remote

DZYGroup CMS Portal – Multiple SQL Injections

.__.__ .__ __

2011-08-04 Netrondoank webapps

foomatic-gui python-foomatic 0.7.9.4 – ‘pysmb.py’ Arbitrary Shell Command Execution

source: https://www.securityfocus.com/bid/48982/info

2011-08-03 daveb remote

Open Handset Alliance Android 2.3.4/3.1 – Browser Sandbox Security Bypass

source: https://www.securityfocus.com/bid/48954/info

2011-08-02 Roee Hay remote

Skype 5.3 – ‘Mobile Phone’ HTML Injection

source: https://www.securityfocus.com/bid/48951/info

2011-08-01 noptrix remote

ManageEngine ServiceDesk Plus 8.0.0 Build 8013 – Improper User Privileges

================================================================================

2011-07-26 Narendra Shinde webapps

Lotus Domino SMTP Router & Email Server and Client – Denial of Service

# Exploit Title: Lotus Domino SMTP router, EMAIL server and client DoS - all 3 may crash

2011-07-19 anonymous dos

Java RMI – Server Insecure Default Configuration Java Code Execution (Metasploit)

##

2011-07-15 Metasploit remote

Flowplayer 3.2.7 – ‘linkUrl’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48651/info

2011-07-12 Szymon Gruszecki webapps

PHP 5.3.6 – Local Buffer Overflow (ROP)

2011-07-04 Jonathan Salwan local

IBM DB2 – ‘DT_RPATH’ Insecure Library Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/48514/info

2011-06-30 Tim Brown remote

Atlassian JIRA 3.13.5 – File Download Security Bypass

source: https://www.securityfocus.com/bid/48484/info

2011-06-28 Ignacio Garrido remote

MySQLDriverCS 4.0.1 – SQL Injection

source: https://www.securityfocus.com/bid/48466/info

2011-06-27 Qihan Luo remote

AzeoTech DaqFactory – Denial of Service

source: https://www.securityfocus.com/bid/48955/info

2011-06-24 Knud Erik Hojgaard dos

IBM Websphere Application Server 7.0.0.13 – Cross-Site Request Forgery

-----BEGIN PGP SIGNED MESSAGE-----

2011-06-15 Core Security webapps

Opera Web Browser 11.11 – Denial of Service

source: https://www.securityfocus.com/bid/48262/info

2011-06-14 echo dos

Oracle HTTP Server – Cross-Site Scripting Header Injection

---------------------------------------------------------------------------------------------------------

2011-06-13 Yasser ABOUKIR webapps

Nagios 3.2.3 – ‘expand’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48087/info

2011-06-01 Stefan Schurtz remote

Gadu-Gadu 10.5 – Remote Code Execution

source: https://www.securityfocus.com/bid/48030/info

2011-05-28 Kacper Szczesniak remote

PHP 5.3.5 – ‘socket_connect()’ Local Buffer Overflow

2011-05-25 Marek Kroemeke local

Gadu-Gadu Instant Messenger 6.0 – File Transfer Cross-Site Scripting

source: https://www.securityfocus.com/bid/47957/info

2011-05-24 Kacper Szczesniak remote

Lumension Security Lumension Device Control 4.x – Memory Corruption

source: https://www.securityfocus.com/bid/47952/info

2011-05-24 Andy Davis remote

Novell eDirectory 8.8 and Netware LDAP-SSL Daemon – Denial of Service

source: https://www.securityfocus.com/bid/47858/info

2011-05-16 Knud dos

Flash Tag Cloud And MT-Cumulus Plugin – ‘tagcloud’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47845/info

2011-05-13 MustLive webapps

Apache Struts 2.0.0 < 2.2.1.1 - XWork 's:submit' HTML Tag Cross-Site Scripting

source: https://www.securityfocus.com/bid/47784/info

2011-05-10 Dr. Marian Ventuneac remote

Imperva SecureSphere – SQL Query Filter Security Bypass

source: https://www.securityfocus.com/bid/47780/info

2011-05-09 @drk1wi remote

sipdroid 2.2 – SIP INVITE Response User Enumeration

source: https://www.securityfocus.com/bid/47710/info

2011-05-04 Anibal Vaz Marques remote

Perl 5.10 – Multiple Null Pointer Dereference Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/47766/info

2011-05-03 Jonathan Brossard dos

Asterisk 1.8.x – SIP INVITE Request User Enumeration

source: https://www.securityfocus.com/bid/47676/info

2011-05-02 Francesco Tornieri remote