webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

OpenEMM-2013 8.10.380.hf13.0.066 – SOAP SQL Injection / Persistent Cross-Site Scripting

import os

2013-07-29 drone webapps

TRENDnet TEW-812DRU – Cross-Site Request Forgery/Command Injection Root

TRENDnet TEW-812DRU CSRF - Command Injection > Shell Exploit.

2013-07-28 Jacob Holcomb webapps

Symantec Web Gateway 5.1.0.x – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20130726-0 >

2013-07-27 SEC Consult webapps

Broadkam PJ871 – Authentication Bypass

#!/usr/bin/perl

2013-07-27 d3c0der webapps

Basic Forum by JM LLC – Multiple Vulnerabilities

Dear Offensive Security,

2013-07-27 Sp3ctrecore webapps

Windu CMS 2.2 – Multiple Vulnerabilities

Windu CMS 2.2 CSRF Add Admin Exploit

2013-07-27 LiquidWorm webapps

Easy Blog by JM LLC – Multiple Vulnerabilities

Dear Offensive Security,

2013-07-27 Sp3ctrecore webapps

Alienvault Open Source SIEM (OSSIM) – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/61456/info

2013-07-25 xistence webapps

vBulletin 4.0.2 – ‘update_order’ SQL Injection

source: https://www.securityfocus.com/bid/61449/info

2013-07-24 n3tw0rk webapps

WordPress Plugin Duplicator – Cross-Site Scripting

source: https://www.securityfocus.com/bid/61425/info

2013-07-24 High-Tech Bridge webapps

Magnolia CMS – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/61423/info

2013-07-24 High-Tech Bridge webapps

FOSCAM IP-Cameras – Improper Access Restrictions

Core Security - Corelabs Advisory

2013-07-24 Core Security webapps

Photo Server 2.0 iOS – Multiple Vulnerabilities

Title:

2013-07-23 Vulnerability-Lab webapps

Dell Kace 1000 SMA 5.4.742 – SQL Injection

Title:

2013-07-23 Vulnerability-Lab webapps

Sybase EAServer 6.3.1 – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20130719-0 >

2013-07-22 SEC Consult webapps

MLM (Multi Level Marketing) Script – Multiple Vulnerabilities

##################################################################################

2013-07-22 3spi0n webapps

Barracuda CudaTel 2.6.02.040 – SQL Injection

Title:

2013-07-22 Vulnerability-Lab webapps

Barracuda LB / SVF / WAF / WEF – Multiple Vulnerabilities

Title:

2013-07-22 Vulnerability-Lab webapps

WordPress Plugin FlagEm – ‘cID’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/61401/info

2013-07-22 IeDb ir webapps

Collabtive – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/61384/info

2013-07-22 Enrico Cinquini webapps

Anchor CMS 0.9.1 – Persistent Cross-Site Scripting

# Exploit Title : AnchorCMS Stored XSS exploit v0.9.1

2013-07-18 DURAKIBOX webapps

Dell PacketTrap PSA 7.1 – Multiple Cross-Site Scripting Vulnerabilities

Title:

2013-07-18 Vulnerability-Lab webapps

Dell PacketTrap MSP RMM 6.6.x – Multiple Cross-Site Scripting Vulnerabilities

Title:

2013-07-18 Vulnerability-Lab webapps

Xibo 1.2.2/1.4.1 – ‘index.php?p’ Directory Traversal

Exploit Title: Xibo Directory Traversal Vulnerability

2013-07-18 Mahendra webapps

ePhoto Transfer 1.2.1 iOS – Multiple Vulnerabilities

Title:

2013-07-18 Vulnerability-Lab webapps

Flux Player 3.1.0 iOS – Multiple Vulnerabilities

Title:

2013-07-18 Vulnerability-Lab webapps

WiFly 1.0 Pro iOS – Multiple Vulnerabilities

Title:

2013-07-18 Vulnerability-Lab webapps

Dell Kace 1000 SMA 5.4.70402 – Persistent Cross-Site Scripting

Title:

2013-07-16 Vulnerability-Lab webapps

Saurus CMS 4.7.1 – Multiple Vulnerabilities

[waraxe-2013-SA#106] - Multiple Vulnerabilities in Saurus CMS 4.7.1

2013-07-16 waraxe webapps

Olive File Manager 1.0.1 iOS – Multiple Vulnerabilities

Title:

2013-07-16 Vulnerability-Lab webapps

FTP Sprite 1.2.1 iOS – Persistent Cross-Site Scripting

Title:

2013-07-16 Vulnerability-Lab webapps

MCImageManager – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/61825/info

2013-07-16 MustLive webapps

McAfee ePO 4.6.6 – Multiple Vulnerabilities

Classification: NON SENSITIVE INFORMATION RELEASABLE TO THE PUBLIC

2013-07-13 Nuri Fattah webapps

BMC Service Desk Express 10.2.1.95 – Multiple Vulnerabilities

Classification: NON SENSITIVE INFORMATION RELEASABLE TO THE PUBLIC

2013-07-13 Nuri Fattah webapps

WordPress Plugin Spicy Blogroll – Local File Inclusion

2013-07-13 Ahlspiess webapps

Corda .NET Redirector – ‘redirector.corda’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/61156/info

2013-07-12 Adam Willard webapps

OpenEMR 4.1 – ‘note’ HTML Injection

source: https://www.securityfocus.com/bid/61154/info

2013-07-12 Nate Drier webapps

Corda Highwire – ‘Highwire.ashx’ Full Path Disclosure

source: https://www.securityfocus.com/bid/61152/info

2013-07-12 Adam Willard webapps

WordPress Plugin Pie Register – ‘wp-login.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/61140/info

2013-07-12 gravitylover webapps

S9Y Serendipity 1.6.2 – ‘serendipity_admin_image_selector.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/61138/info

2013-07-12 Omar Kurt webapps

PrestaShop – Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/61158/info

2013-07-11 EntPro Cyber Security Research Group webapps

WordPress Plugin miniBB – SQL Injection / Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/61116/info

2013-07-11 Netsparker webapps

Mintboard – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/61114/info

2013-07-10 Canberk BOLAT webapps

iVote – ‘details.php’ SQL Injection

source: https://www.securityfocus.com/bid/61086/info

2013-07-10 Ashiyane Digital Security Team webapps

Zoom Telephonics X4/X5 ADSL Modem – Multiple Vulnerabilities

Vulnerable Products -

2013-07-10 Kyle Lovett webapps

vBulletin vBShout Mod – Persistent Cross-Site Scripting

##########################################################################################

2013-07-10 []0iZy5 webapps

vBulletin Advanced User Tagging Mod – Persistent Cross-Site Scripting

##########################################################################################

2013-07-10 []0iZy5 webapps

OpenNetAdmin 13.03.01 – Remote Code Execution

# Exploit Title: OpenNetAdmin Remote Code Execution

2013-07-07 Mandat0ry webapps

D-Link – OS-Command Injection via UPnP Interface

Title: OS-Command Injection via UPnP SOAP Interface in multiple D-Link devices

2013-07-07 m-1-k-3 webapps

phpVibe 3.1 – Information Disclosure / Remote File Inclusion

source: https://www.securityfocus.com/bid/61026/info

2013-07-06 indoushka webapps