multiple

multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

python-feedparser 5.0 – ‘/feedparser/feedparser.py’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47177/info

2011-04-05 fazalmajid remote

Zend Server Java Bridge – Arbitrary Java Code Execution (Metasploit)

##

2011-04-05 Metasploit remote

Yaws-Wiki 1.88-1 (Erlang) – Persistent / Reflective Cross-Site Scripting

Application: yaws-wiki

2011-04-04 Michael Brooks webapps

Zend Java Bridge – Remote Code Execution

package ZJBpoc;

2011-03-30 ikki remote

jHTTPd 0.1a – Directory Traversal

# ------------------------------------------------------------------------

2011-03-29 AutoSec Tools remote

RealPlayer 11 – ‘.rmp’ Remote Buffer Overflow

source: https://www.securityfocus.com/bid/47039/info

2011-03-27 KedAns-Dz remote

Advantech/BroadWin SCADA Webaccess 7.0 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/47008/info

2011-03-23 Ruben Santamarta remote

Perl 5.x – ‘Perl_reg_numbered_buff_fetch()’ Remote Denial of Service

source: https://www.securityfocus.com/bid/47006/info

2011-03-23 Vladimir Perepelitsa dos

Sun Java Applet2ClassLoader – Remote Code Execution (Metasploit)

##

2011-03-16 Metasploit remote

Adobe ColdFusion – Directory Traversal (Metasploit)

##

2011-03-16 Metasploit remote

VideoLAN VLC Media Player 1.0.5 – ‘.ape’ Denial of Service

source: https://www.securityfocus.com/bid/46868/info

2011-03-15 KedAns-Dz dos

Trend Micro WebReputation API 10.5 – URI SecURIty Bypass

source: https://www.securityfocus.com/bid/46864/info

2011-03-14 DcLabs Security Research Group remote

Oracle WebLogic – POST Session Fixation

Name Oracle WebLogic – Session Fixation Via HTTP POST Request

2011-03-11 Roberto Suggi Liverani webapps

Hiawatha WebServer 7.4 – Denial of Service

Source: http://packetstormsecurity.org/files/view/99021/DCA-2011-0006.txt

2011-03-07 Rodrigo Escobar dos

Apple Mail.app – Image Attachment Command Execution (Metasploit)

##

2011-03-05 Metasploit remote

KMPlayer 2.9.3.1214 – ‘.ksf’ Remote Buffer Overflow

source: https://www.securityfocus.com/bid/46608/info

2011-02-28 KedAns-Dz remote

PHP ‘Exif’ Extension – ‘exif_read_data()’ Remote Denial of Service

Source: http://permalink.gmane.org/gmane.comp.security.oss.general/4198

2011-02-28 _ikki & paradoxengine dos

GNU glibc < 2.12.2 - 'fnmatch()' Stack Corruption

source: https://www.securityfocus.com/bid/46563/info

2011-02-25 Simon Berry-Byrne dos

Battlefield 2/2142 – Packet Null Pointer Dereference Remote Denial of Service

source: https://www.securityfocus.com/bid/46478/info

2011-02-22 Luigi Auriemma dos

IBM Lotus Sametime – stconf.nsf Cross-Site Scripting

source: https://www.securityfocus.com/bid/46471/info

2011-02-21 Dave Daly remote

IBM Lotus Sametime – ‘/stconf.nsf/WebMessage?messageString’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46471/info

2011-02-21 Dave Daly remote

Ruby on Rails 3.0.5 – ‘WEBrick::HTTPRequest’ Module HTTP Header Injection

source: https://www.securityfocus.com/bid/46423/info

2011-02-16 Jimmy Bandit remote

LocatePC 1.05 (Ligatt Version + Others) – SQL Injection

#Affected Software:

2011-02-10 anonymous webapps

Air Contacts Lite – HTTP Packet Denial of Service

source: https://www.securityfocus.com/bid/46827/info

2011-02-09 Rodrigo Escobar dos

Multiple Vendor Calendar Manager – Remote Code Execution

#include

2011-02-09 Rodrigo Rubira Branco remote

SMC Networks SMCD3G Session Management – Authentication Bypass

source: https://www.securityfocus.com/bid/46178/info

2011-02-04 Zack Fasel & Matthew Jakubowski remote

VideoLAN VLC Media Player 1.1 – Subtitle ‘StripTags()’ Memory Corruption

Source: https://www.securityfocus.com/bid/46008/info

2011-02-03 Harry Sintonen dos

Majordomo2 – ‘SMTP/HTTP’ Directory Traversal

Original Advisory: https://sitewat.ch/en/Advisory/View/1

2011-02-03 Michael Brooks remote

Oracle Java – Floating-Point Value Denial of Service

source: https://www.securityfocus.com/bid/46091/info

2011-02-01 Konstantin Preisser dos

Google Chrome 8.0.552.237 – replace Denial of Service

# Exploit Title: Google Chrome v8.0.552.237 .replace DOS

2011-01-30 Carlos Mario Penagos Hollmann dos

Opera Web Browser 11.00 – ‘option’ HTML Element Integer Overflow

source: https://www.securityfocus.com/bid/46003/info

2011-01-25 C4SS!0 G0M3S remote

Sun Microsystems SunScreen Firewall – Privilege Escalation

Sun Microsystems SunScreen Firewall Root Exploit

2011-01-25 kingcope remote

libxml2 2.6.x – ‘XMLWriter::writeAttribute()’ Memory Leak Information Disclosure

source: https://www.securityfocus.com/bid/45973/info

2011-01-24 Kees Cook remote

Sun Java Web Start BasicServiceImpl – Remote Code Execution (Metasploit)

##

2011-01-22 Metasploit remote

B-Cumulus – ‘tagcloud’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45911/info

2011-01-18 MustLive webapps

Wireshark – ZigBee ZCL Dissector Infinite Loop Denial of Service

Source: https://www.securityfocus.com/bid/44986/info

2011-01-11 Fred Fierling dos

JBoss JMX – Console Beanshell Deployer WAR Upload and Deployment (Metasploit)

##

2011-01-10 Metasploit remote

Signed Applet Social Engineering – Code Execution (Metasploit)

##

2011-01-08 Metasploit remote

NetSupport Manager Agent – Remote Buffer Overflow (1)

#!/usr/bin/perl

2011-01-08 ikki remote

Wireshark – ENTTEC DMX Data RLE Buffer Overflow

# source: https://www.securityfocus.com/bid/45634/info

2011-01-03 non-customers crew dos

Appweb Web Server 3.2.2-1 – Cross-Site Scripting

source: https://www.securityfocus.com/bid/45568/info

2010-12-23 Gjoko Krstic remote

Java – ‘Statement.invoke()’ Trusted Method Chain (Metasploit)

##

2010-12-15 Metasploit remote

Apache Tomcat Manager – Application Deployer (Authenticated) Code Execution (Metasploit)

##

2010-12-14 Metasploit remote

Axis2 / SAP BusinessObjects – (Authenticated) Code Execution (via SOAP) (Metasploit)

##

2010-12-14 Metasploit remote

Axis2 – (Authenticated) Code Execution (via REST) (Metasploit)

##

2010-12-14 Metasploit remote

Helix Server 14.0.1.571 – Administration Interface Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/45340/info

2010-12-10 John Leitch remote

PHP 5.3.3 – NumberFormatter::getSymbol Integer Overflow

From: Maksymilian Arciemowicz

2010-12-10 Maksymilian Arciemowicz dos

VMware Tools – Update OS Command Injection

VMware Tools update OS Command Injection

2010-12-09 Nahuel Grisolia remote

Apache Archiva 1.0 < 1.3.1 - Cross-Site Request Forgery

ANATOLIA SECURITY ADVISORY

2010-12-09 Anatolia Security webapps

Allegro RomPager 4.07 – UPnP HTTP Request Remote Denial of Service

source: https://www.securityfocus.com/bid/45309/info

2010-12-08 Ricky-Lee Birtles dos