remote

remote 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Play! Framework 1.0.3.1 – Directory Traversal

Exploit Title: Play! Framework

2010-08-10 kripthor remote

SopCast 3.2.9 – Remote Command Execution

Sopcast POC by Sud0

2010-08-10 sud0 remote

AoA Audio Extractor – Remote ActiveX SEH JIT Spray (ASLR + DEP Bypass)

Tested on my XPSP3+IE7+/nx=AlwaysOn, should work on Windows 7 with

2010-08-10 Dr_IDE remote

dBpowerAMP Audio Player 2 – ‘FileExists’ ActiveX Buffer Overflow

2010-08-09 s-dz remote

Advanced File Vault – ‘eSellerateControl350.dll’ ActiveX HeapSpray

//# Exploit Title: Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray 0-day

2010-08-08 ThE g0bL!N remote

Nagios XI – Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/42322/info

2010-08-07 Adam Baldwin remote

Sun Java Web Server – System WebDAV OPTIONS Buffer Overflow (Metasploit)

##

2010-08-07 Metasploit remote

RealServer – Describe Buffer Overflow (Metasploit)

##

2010-08-07 Metasploit remote

EFS Easy Chat Server – Authentication Request Handling Buffer Overflow (Metasploit)

##

2010-08-06 Metasploit remote

uzbl ‘uzbl-core’ – ‘@SELECTED_URI’ Mouse Button Bindings Command Injection

source: https://www.securityfocus.com/bid/42297/info

2010-08-05 Chuzz remote

FathFTP 1.8 – ‘FileExists Method’ ActiveX Buffer Overflow (SEH)

2010-08-04 H4kr3m remote

FathFTP 1.8 – ‘EnumFiles Method’ ActiveX Buffer Overflow (SEH)

2010-08-04 Madjix remote

FathFTP 1.8 – ‘DeleteFile Method’ ActiveX Buffer Overflow (SEH)

2010-08-04 Madjix remote

Oracle MySQL < 5.1.50 - Privilege Escalation

source: https://www.securityfocus.com/bid/43677/info

2010-08-03 Libing Song remote

EasyFTP Server 1.7.0.11 – ‘LIST’ Stack Buffer Overflow (Metasploit)

##

2010-08-03 Metasploit remote

JBoss – Java Class DeploymentFileRepository WAR Deployment (Metasploit)

##

2010-08-03 Metasploit remote

FathFTP 1.8 – ‘RasIsConnected Method’ ActiveX Buffer Overflow (SEH)

2010-08-03 Madjix remote

EMC Celerra NAS Appliance – Unauthorized Access to Root NFS Export

Trustwave's SpiderLabs Security Advisory TWSL2010-003:

2010-08-03 Trustwave's SpiderLabs remote

Xerver 4.32 – Source Disclosure / HTTP Authentication Bypass (Metasploit)

# Exploit Title: Xerver Source Disclosure and HTTP Auth Bypass

2010-08-01 Ben Schmidt remote

Barcodewiz Barcode ActiveX Control 3.29 – Remote HeapSpray (Internet Explorer 6/7)

2010-07-31 Dr_IDE remote

SigPlus Pro 3.74 – ActiveX ‘LCDWriteString()’ Remote Buffer Overflow JIT Spray (ASLR + DEP Bypass)

~ mr_me presents ~

2010-07-31 mr_me remote

Barcodewiz Barcode ActiveX Control 3.29 – Remote Buffer Overflow (SEH)

# BarCodeWiz Barcode ActiveX Control 3.29 BoF (SEH)

2010-07-30 loneferret remote

KVIrc 4.0 – ‘\r’ Carriage Return in DCC Handshake Remote Command Execution

source: https://www.securityfocus.com/bid/42026/info

2010-07-28 unic0rn remote

UPlusFTP Server 1.7.1.01 – (Authenticated) HTTP Remote Buffer Overflow

#!/usr/bin/python

2010-07-28 Karn Ganeshen & corelanc0d3r remote

Symantec Ams Intel Alert Handler Service – Design Flaw

// Remote command execution at System level without authentication

2010-07-28 Spider remote

Apache Tomcat < 6.0.18 - 'utf8' Directory Traversal

c0d3r: mywisdom

2010-07-28 mywisdom remote

EasyFTP Server 1.7.0.11 – ‘MKD’ Stack Buffer Overflow (Metasploit)

##

2010-07-27 Metasploit remote

Hyleos ChemView – ActiveX Control Stack Buffer Overflow (Metasploit)

##

2010-07-27 Metasploit remote

Opera 9 – Configuration Overwrite (Metasploit)

##

2010-07-27 Metasploit remote

httpdx – ‘h_handlepeer()’ Remote Buffer Overflow (Metasploit)

##

2010-07-26 Metasploit remote

CommuniCrypt Mail 1.16 – SMTP ActiveX Stack Buffer Overflow (Metasploit)

##

2010-07-26 Metasploit remote

Novell ZENworks 6.5 – Desktop/Server Management Overflow (Metasploit)

##

2010-07-25 Metasploit remote

Apache Tomcat mod_jk 1.2.20 – Remote Buffer Overflow (Metasploit)

##

2010-07-25 Metasploit remote

Microsoft Message Queueing Service – DNS Name Path Overflow (MS07-065) (Metasploit)

##

2010-07-25 Metasploit remote

Microsoft DNS RPC Service – ‘extractQuotedChar()’ TCP Overflow (MS07-029) (Metasploit)

##

2010-07-25 Metasploit remote

Microsoft IIS 5.0 – WebDAV ‘ntdll.dll’ Path Overflow (MS03-007) (Metasploit)

##

2010-07-25 Metasploit remote

Microsoft Windows – ASN.1 Library Bitstring Heap Overflow (MS04-007) (Metasploit)

##

2010-07-25 Metasploit remote

Microsoft IIS – ISAPI FrontPage ‘fp30reg.dll’ Chunked Overflow (MS03-051) (Metasploit)

##

2010-07-25 Metasploit remote

Microsoft IIS – ISAPI ‘nsiislog.dll’ ISAPI POST Overflow (MS03-022) (Metasploit)

##

2010-07-25 Metasploit remote

Solaris – ypupdated Command Execution (Metasploit)

##

2010-07-25 Metasploit remote

IBM AIX 5l – ‘FTPd’ Remote DES Hash

#include

2010-07-24 kingcope remote

IBM Java – UTF8 Byte Sequences Security Bypass

source: https://www.securityfocus.com/bid/41918/info

2010-07-23 IBM remote

EasyFTP Server 1.7.0.11 – ‘LIST’ (Authenticated) Remote Buffer Overflow (Metasploit)

##

2010-07-23 Muhamad Fadzil Ramli remote

Multiple Browsers (FF3.6.7/SM 2.0.6) – Clickjacking

FF3.6.7/SM 2.0.6 ClickJacking Vulnerability

2010-07-23 Pouya Daneshmand remote

id Software id Tech 4 Engine – ‘idGameLocal::GetGameStateObject()’ Remote Code Execution

source: https://www.securityfocus.com/bid/41001/info

2010-07-21 Luigi Auriemma remote

Mozilla Firefox and SeaMonkey Plugin Parameters – Remote Buffer Overflow

source: https://www.securityfocus.com/bid/41842/info

2010-07-20 J23 remote

Microsoft Office Web Components (OWC) Spreadsheet – msDataSourceObject Memory Corruption (MS09-043) (Metasploit)

##

2010-07-20 Metasploit remote

SapGUI BI 7100.1.400.8 – Heap Corruption

Unable to create object

2010-07-20 Elazar Broad remote

Hero DVD – Remote Buffer Overflow (Metasploit)

##################################################################

2010-07-19 Madjix remote

AIX5l with FTP-Server – Hash Disclosure

### AIXCOREDUMP.PL ---

2010-07-18 kingcope remote