webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Router ONO Hitron CDE-30364 – Cross-Site Request Forgery

# Exploit Title: Router ONO Hitron CDE-30364 - CSRF Vulnerability

2013-09-14 Matias Mingorance Svensson webapps

Zimplit CMS 3.0 – Multiple Vulnerabilities

#####################################################################################################################...

2013-09-13 Yashar shahinzadeh webapps

WordPress Plugin mukioplayer4wp – ‘cid’ SQL Injection

source: https://www.securityfocus.com/bid/62438/info

2013-09-13 Ashiyane Digital Security Team webapps

Synology DiskStation Manager (DSM) 4.3-3776 – Multiple Vulnerabilities

Title: Synology DSM multiple vulnerabilities

2013-09-12 Andrea Fabrizi webapps

D-Link DSL-2740B – Multiple Cross-Site Request Forgery Vulnerabilities

+--------------------------------------------------------------------------------------------------------------------...

2013-09-12 Ivano Binetti webapps

Microsoft SharePoint 2013 (Cloud) – Persistent Exception Handling (MS13-067)

Title:

2013-09-12 Vulnerability-Lab webapps

Talkie Bluetooth Video iFiles 2.0 iOS – Multiple Vulnerabilities

Title:

2013-09-12 Vulnerability-Lab webapps

AjaXplorer 1.0 – Multiple Vulnerabilities

Trustwave SpiderLabs Security Advisory TWSL2013-027:

2013-09-10 Trustwave's SpiderLabs webapps

glFusion 1.3.0 – ‘search.php?cat_id’ SQL Injection

Information

2013-09-10 Omar Kurt webapps

D-Link DIR-505 1.06 – Multiple Vulnerabilities

Multiple vulnerabilities on D-Link Dir-505 devices

2013-09-10 Alessandro Di Pinto webapps

eTransfer Lite – ‘file name’ HTML Injection

source: https://www.securityfocus.com/bid/62313/info

2013-09-10 Benjamin Kunz Mejri webapps

Sophos Web Protection Appliance – Multiple Vulnerabilities

Core Security - Corelabs Advisory

2013-09-09 Core Security webapps

Zyxware Health Monitoring System – Multiple Vulnerabilities

# Exploit Title: Zyxware Health Monitoring System Multiple Vulnerability

2013-09-09 Sarahma Security webapps

Moodle 2.3.8/2.4.5 – Multiple Vulnerabilities

#######################################################################

2013-09-09 Ciaran McNally webapps

WordPress Plugin Event Easy Calendar – Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/62269/info

2013-09-07 anonymous webapps

Practico CMS 13.7 – Authentication Bypass

############################################################

2013-09-06 shiZheni webapps

CMS Mini 0.2.2 – Multiple Vulnerabilities

------------------------------------------------------------------------------------------

2013-09-06 SANTHO webapps

Woltlab Burning Board FLVideo Addon – ‘video.php?value’ SQL Injection

# Exploit Title: Woltlab Burning Board FLVideo Addon SQL Injection flvideo.php Exploit

2013-09-06 Easy Laster webapps

TP-Link TD-W8951ND – Multiple Vulnerabilities

-----------

2013-09-03 xistence webapps

WordPress Plugin IndiaNIC Testimonial – Multiple Vulnerabilities

Details

2013-09-03 RogueCoder webapps

Zoom Telephonics ADSL Modem/Router – Multiple Vulnerabilities

Five models of the Zoom Telephonics ADSL Modem/Router line suffer from

2013-09-03 Kyle Lovett webapps

Flo CMS – ‘archivem’ SQL Injection

source: https://www.securityfocus.com/bid/62186/info

2013-09-03 ACC3SS webapps

dBlog CMS – ‘m’ SQL Injection

source: https://www.securityfocus.com/bid/62146/info

2013-09-03 ACC3SS webapps

appRain CMF – Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/62061/info

2013-08-29 Yashar shahinzadeh webapps

cm3 Acora CMS – ‘top.aspx’ Information Disclosure

source: https://www.securityfocus.com/bid/62010/info

2013-08-26 Pedro Andujar webapps

Joomla! Component com_virtuemart 2.0.22a – SQL Injection

------------------------------------------------------------

2013-08-26 Matias Fontanini webapps

Loftek Nexus 543 IP Cameras – Multiple Vulnerabilities

CSRF:

2013-08-26 Craig Young webapps

MusicBox 2.3.8 – Multiple Vulnerabilities

#Exploit Title : Musicbox 2.3.8 Multiple Vulnerabilities

2013-08-26 DevilScreaM webapps

PhpVibe 3.1 – Multiple Vulnerabilities

###########################################################################################

2013-08-26 Esac webapps

mooSocial 1.3 – Multiple Vulnerabilities

###########################################################################################

2013-08-26 Esac webapps

SearchBlox – Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/61974/info

2013-08-23 Ricky Roane Jr webapps

Foreman (RedHat OpenStack/Satellite) – users/create Mass Assignment (Metasploit)

##

2013-08-22 Metasploit webapps

DeWeS 0.4.2 – Directory Traversal

Advisory ID: HTB23167

2013-08-22 High-Tech Bridge SA webapps

Netgear ProSafe – Information Disclosure

#!/usr/bin/python

2013-08-22 Juan J. Guelfo webapps

Ovidentia 7.9.4 – Multiple Vulnerabilities

Ovidentia 7.9.4 Multiple Remote Vulnerabilities

2013-08-22 LiquidWorm webapps

CBHotel Hotel Software and Booking system 1.8 – Multiple Vulnerabilities

###########################################################################################

2013-08-22 Dylan Irzi webapps

Sitecom N300/N600 Devices – Multiple Vulnerabilities

Multiple vulnerabilities on Sitecom N300/N600 devices

2013-08-21 Roberto Paleari webapps

Adobe ColdFusion 9 – Administrative Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE-----

2013-08-21 Scott Buckel webapps

Samsung DVR Firmware 1.10 – Authentication Bypass

Title: Samsung DVR authentication bypass

2013-08-21 Andrea Fabrizi webapps

WordPress Plugin ThinkIT 0.1 – Multiple Vulnerabilities

#####################################################################################################################...

2013-08-21 Yashar shahinzadeh webapps

Bitbot (C2 Web Panel) – ‘gate2.php’ Multiple Vulnerabilities

# Exploit Title: Bitbot C2 Panel gate2.php SQLi + XSS

2013-08-21 bwall webapps

Xibo – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/62064/info

2013-08-21 Jacob Holcomb webapps

Xibo – ‘layout’ HTML Injection

source: https://www.securityfocus.com/bid/62063/info

2013-08-21 Jacob Holcomb webapps

Twilight CMS – DeWeS Web Server Directory Traversal

source: https://www.securityfocus.com/bid/61906/info

2013-08-21 High-Tech Bridge webapps

Bo-Blog 2.1.1 – Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/61880/info

2013-08-20 Ashiyane Digital Security Team webapps

Photo Transfer Upload 1.0 iOS – Multiple Vulnerabilities

Title:

2013-08-17 Vulnerability-Lab webapps

Copy to WebDAV 1.1 iOS – Multiple Vulnerabilities

Title:

2013-08-17 Vulnerability-Lab webapps

Quack Chat 1.0 – Multiple Vulnerabilities

###########################################################################################

2013-08-17 Dylan Irzi webapps

Alibaba Clone Tritanium Version – ‘news_desc.html’ SQL Injection

#--------------------------------------------------------

2013-08-15 IRAQ_JAGUAR webapps

w-CMS 2.0.1 – Remote Code Execution

Exploit Title: w-CMS 2.0.1 Remote Code Execution Vulnerability

2013-08-15 ICheer_No0M webapps