remote

remote 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

SoapUI 4.6.3 – Remote Code Execution

# Exploit Title: SoapUI Remote Code Execution

2014-01-14 Barak Tawily remote

vTiger CRM 5.4.0 SOAP – AddEmailAttachment Arbitrary File Upload (Metasploit)

##

2014-01-07 Metasploit remote

HP SiteScope issueSiebelCmd – Remote Code Execution (Metasploit)

##

2013-12-24 Metasploit remote

Synology DiskStation Manager – SLICEUPLOAD Remote Command Execution (Metasploit)

##

2013-12-24 Metasploit remote

OpenSIS ‘modname’ – PHP Code Execution (Metasploit)

##

2013-12-24 Metasploit remote

RedHat CloudForms Management Engine 5.1 – agent/linuxpkgs Directory Traversal (Metasploit)

##

2013-12-24 Metasploit remote

Hancom Office – ‘.hml’ File Processing Heap Buffer Overflow

source: https://www.securityfocus.com/bid/64499/info

2013-12-19 diroverflow remote

Adobe Reader ToolButton – Use-After-Free (Metasploit)

##

2013-12-17 Metasploit remote

Ability Mail Server 2013 3.1.1 – Web UI Persistent Cross-Site Scripting

#!/usr/bin/env python

2013-12-17 David Um remote

Nagios XI – ‘tfPassword’ SQL Injection

source: https://www.securityfocus.com/bid/63754/info

2013-12-13 Denis Andzakovic remote

RedHat Piranha – Remote Security Bypass

source: https://www.securityfocus.com/bid/65587/info

2013-12-11 Andreas Schiermeier remote

vBulletin 5 – ‘index.php/ajax/api/reputation/vote?nodeid’ SQL Injection (Metasploit)

##

2013-12-11 Metasploit remote

EMC Data Protection Advisor DPA Illuminator – EJBInvokerServlet Remote Code Execution

EMC Data Protection Advisor DPA Illuminator EJBInvokerServlet Remote Code Execution

2013-12-11 rgod remote

Adobe ColdFusion 9 – Administrative Authentication Bypass (Metasploit)

##

2013-12-11 Metasploit remote

HP LoadRunner EmulationAdmin – Web Service Directory Traversal (Metasploit)

##

2013-12-11 Metasploit remote

Linux Kernel 3.0.5 – ‘ath9k_htc_set_bssid_mask()’ Information Disclosure

source: https://www.securityfocus.com/bid/63743/info

2013-12-10 Mathy Vanhoef remote

Apple Safari For Windows – PhishingAlert Security Bypass

source: https://www.securityfocus.com/bid/64543/info

2013-12-07 Jackmasa remote

Microsoft – Tagged Image File Format ‘.TIFF’ Integer Overflow (Metasploit)

##

2013-12-03 Metasploit remote

Kimai 0.9.2 – ‘db_restore.php’ SQL Injection (Metasploit)

##

2013-12-03 Metasploit remote

ABB MicroSCADA – ‘wserver.exe’ Remote Code Execution (Metasploit)

##

2013-12-03 Metasploit remote

Cisco Prime Data Center Network Manager – Arbitrary File Upload (Metasploit)

##

2013-12-03 Metasploit remote

Apache Roller – OGNL Injection (Metasploit)

##

2013-11-27 Metasploit remote

Microsoft Internet Explorer – COALineDashStyleArray Unsafe Memory Access (MS12-022) (Metasploit)

##

2013-11-27 Metasploit remote

Microsoft Internet Explorer – CardSpaceClaimCollection ActiveX Integer Underflow (MS13-090) (Metasploit)

##

2013-11-27 Metasploit remote

Netgear ReadyNAS – Perl Code Evaluation (Metasploit)

##

2013-11-25 Metasploit remote

DesktopCentral AgentLogUpload – Arbitrary File Upload (Metasploit)

##

2013-11-25 Metasploit remote

Thomson Reuters Velocity Analytics – Remote Code Injection

source: https://www.securityfocus.com/bid/63880/info

2013-11-22 Eduardo Gonzalez remote

PineApp MailSecure – Remote Command Execution

-----------------------------------------------------------------

2013-11-20 Ruben Garrote García remote

Nginx 1.1.17 – URI Processing SecURIty Bypass

source: https://www.securityfocus.com/bid/63814/info

2013-11-19 Ivan Fratric remote

SKIDATA Freemotion.Gate – Web Services Multiple Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/63805/info

2013-11-19 Dennis Kelly remote

DeepOfix SMTP Server 3.3 – Authentication Bypass

======================================================================================

2013-11-19 Gerardo Vazquez, Eduardo Arriols remote

Supermicro Onboard IPMI – ‘close_window.cgi’ Remote Buffer Overflow (Metasploit)

##

2013-11-18 Metasploit remote

LevelOne WBR-3406TX Router – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/63908/info

2013-11-15 Yakir Wizman remote

Symantec Altiris DS – SQL Injection (Metasploit)

##

2013-11-13 Metasploit remote

VICIdial Manager – Send OS Command Injection (Metasploit)

##

2013-11-08 Metasploit remote

Google Android – Signature Verification Security Bypass

source: https://www.securityfocus.com/bid/63547/info

2013-11-04 Jay Freeman remote

ProcessMaker Open Source – (Authenticated) PHP Code Execution (Metasploit)

##

2013-10-31 Metasploit remote

Moodle – Remote Command Execution (Metasploit)

##

2013-10-31 Metasploit remote

OpenMediaVault Cron – Remote Command Execution (Metasploit)

##

2013-10-31 Metasploit remote

ISPConfig – (Authenticated) Arbitrary PHP Code Execution (Metasploit)

##

2013-10-31 Metasploit remote

NAS4Free – Remote Code Execution (Metasploit)

##

2013-10-31 Metasploit remote

Zabbix – (Authenticated) Remote Command Execution (Metasploit)

#

2013-10-31 Metasploit remote

vTiger CRM 5.3.0 5.4.0 – (Authenticated) Remote Code Execution (Metasploit)

##

2013-10-31 Metasploit remote

Apache + PHP < 5.3.12 / < 5.4.2 - Remote Code Execution + Scanner

#!/usr/bin/env python

2013-10-31 noptrix remote

Openbravo ERP – XML External Entity Information Disclosure

source: https://www.securityfocus.com/bid/63431/info

2013-10-30 Tod Beardsley remote

Apache + PHP < 5.3.12 / < 5.4.2 - cgi-bin Remote Code Execution

On Debian and Ubuntu the vulnerability is present in the default install

2013-10-29 kingcope remote

Watchguard Firewall XTM 11.7.4u1 – Remote Buffer Overflow

#!/usr/bin/perl -w

2013-10-29 st3n remote

Open Flash Chart 2 – Arbitrary File Upload (Metasploit)

##

2013-10-26 Metasploit remote

WebTester 5.x – Command Execution (Metasploit)

##

2013-10-22 Metasploit remote

Interactive Graphical SCADA System – Remote Command Injection (Metasploit)

##

2013-10-22 Metasploit remote