multiple

multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Wireshark 1.2.5 – ‘LWRES getaddrbyname’ Stack Buffer Overflow (PoC)

#!/usr/bin/env python

2010-01-29 babi dos

SAP BusinessObjects 12 – URI redirection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/37972/info

2010-01-27 Richard Brain remote

HP System Management Homepage 3.0.2 – ‘servercert’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/37968/info

2010-01-27 Richard Brain remote

Google Chrome 3.0 – Style Sheet redirection Information Disclosure

source: https://www.securityfocus.com/bid/37917/info

2010-01-22 Cesar Cerrudo remote

Sun Java System Web Server 6.1/7.0 – WebDAV Format String

source: https://www.securityfocus.com/bid/37910/info

2010-01-22 Intevydis dos

Sun Java System Web Server 7.0 Update 6 – ‘admin’ Server Denial of Service

source: https://www.securityfocus.com/bid/37909/info

2010-01-22 Intevydis dos

Sun Java System Web Server 6.1/7.0 – Digest Authentication Remote Buffer Overflow

source: https://www.securityfocus.com/bid/37896/info

2010-01-21 Intevydis remote

jQuery Uploadify 2.1.0 – Arbitrary File Upload

# Exploit Title: jQuery uploadify v2.1.0 Remote File Upload

2010-01-21 k4cp3r/Ablus webapps

cPanel – HTTP Response Splitting

Recognize-Security - cPanel HTTP Response Splitting Vulnerability

2010-01-21 Trancer webapps

Blaze Apps 1.x – SQL Injection / HTML Injection

source: https://www.securityfocus.com/bid/40212/info

2010-01-19 AmnPardaz Security Research Team webapps

Pidgin MSN 2.6.4 – File Download

#!/usr/bin/env python

2010-01-19 Mathieu GASPARD remote

Serialsystem 1.0.4 Beta – ‘list’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/40236/info

2010-01-18 indoushka webapps

Zenoss 2.3.3 – Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/37843/info

2010-01-18 Adam Baldwin remote

FreePBX 2.5.x – Information Disclosure

Advisory Name: Information disclosure in FreePBX 2.5.x

2010-01-18 Ivan Huertas webapps

FreePBX 2.5.1 – SQL Injection

Advisory Name: SQL injection in FreePBX 2.5.1

2010-01-18 Ivan Huertas webapps

FreePBX 2.5.x < 2.6.0 - Persistent Cross-Site Scripting

Advisory Name: Permanent Cross-Site Scripting (XSS) in FreePBX 2.5.x – 2.6.0

2010-01-18 Ivan Huertas webapps

Zeus Web Server 4.x – ‘SSL2_CLIENT_HELLO’ Remote Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/37829/info

2010-01-15 Intevydis dos

Multiple Media Players ((iTunes / QuickTime) – HTTP DataHandler Overflow

ScaryMovie Exploit Study

2010-01-15 Dr_IDE dos

Zenoss 2.3.3 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/37802/info

2010-01-14 nGenuity Information Services webapps

Oracle Database – Remote Listener Memory Corruption

source: https://www.securityfocus.com/bid/37728/info

2010-01-12 Dennis Yurichev dos

BOA Web Server 0.94.x – Terminal Escape Sequence in Logs Command Injection

source: https://www.securityfocus.com/bid/37718/info

2010-01-11 evilaliv3 remote

Orion Application Server 2.0.7 – ‘Terminal Escape Sequence in Logs’ Command Injection

source: https://www.securityfocus.com/bid/37717/info

2010-01-11 evilaliv3 remote

mini_httpd 1.18 – HTTP Request Escape Sequence Terminal Command Injection

source: https://www.securityfocus.com/bid/37714/info

2010-01-11 evilaliv3 remote

thttpd 2.24 – HTTP Request Escape Sequence Terminal Command Injection

source: https://www.securityfocus.com/bid/37714/info

2010-01-11 evilaliv3 remote

Varnish 2.0.6 – ‘Terminal Escape Sequence in Logs’ Command Injection

source: https://www.securityfocus.com/bid/37713/info

2010-01-11 evilaliv3 remote

AOLServer Terminal 4.5.1 – Escape Sequence in Logs Command Injection

source: https://www.securityfocus.com/bid/37712/info

2010-01-11 evilaliv3 remote

Nginx 0.7.64 – Terminal Escape Sequence in Logs Command Injection

source: https://www.securityfocus.com/bid/37711/info

2010-01-11 evilaliv3 remote

Ruby 1.9.1 – WEBrick ‘Terminal Escape Sequence in Logs’ Command Injection

source: https://www.securityfocus.com/bid/37710/info

2010-01-11 evilaliv3 remote

2^6 TCP Control Bit – Fuzzer (No ECN or CWR)

#!/usr/bin/perl

2010-01-11 ShadowHatesYou remote

Nuked KLan 1.7.7 & SP4 – Denial of Service

#!/bin/bash

2010-01-11 Hamza 'MIzoZ' N dos

Sun Java System Directory Server 7.0 – ‘core_get_proxyauth_dn’ Denial of Service

source: https://www.securityfocus.com/bid/37699/info

2010-01-10 Intevydis dos

Mozilla Firefox 3.5.8 – Style Sheet redirection Information Disclosure

source: https://www.securityfocus.com/bid/38369/info

2010-01-09 Cesar Cerrudo remote

Sun Java System Web Server 6.1/7.0 – ‘TRACE’ Heap Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/37648/info

2010-01-06 Evgeny Legerov dos

DirectAdmin 1.33.6 – Symlink Security Bypass

Subject: DirectAdmin

2010-01-06 alnjm33 local

Novell Netware – CIFS and AFP Remote Memory Consumption Denial of Service

#!/usr/bin/perl

2010-01-05 Francis Provencher dos

W-Agora 4.2.1 – Multiple Vulnerabilities

========================================================================================

2010-01-04 indoushka webapps

Google Chrome 4.0.249.30 – Denial of Service (PoC)

#!/usr/bin/perl

2010-01-03 anonymous dos