webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

RTTucson Quotations Database – Multiple Vulnerabilities

##################################################################################

2013-02-20 3spi0n webapps

ZeroClipboard 1.9.x – ‘id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58116/info

2013-02-20 MustLive webapps

ZenPhoto – ‘index.php’ SQL Injection

source: https://www.securityfocus.com/bid/58078/info

2013-02-20 HosseinNsn webapps

WordPress Plugin Pretty Link – Cross-Site Scripting

source: https://www.securityfocus.com/bid/58072/info

2013-02-20 hiphop webapps

CKEditor – ‘posteddata.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58045/info

2013-02-19 AkaStep webapps

Squirrelcart – ‘table’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58025/info

2013-02-19 Gjoko Krstic webapps

Piwigo 2.4.6 – ‘/install.php’ Arbitrary File Read/Delete

Piwigo 2.4.6 (install.php) Remote Arbitrary File Read/Delete Vulnerability

2013-02-19 LiquidWorm webapps

USB Sharp 1.3.4 iPad iPhone – Multiple Vulnerabilities

Title:

2013-02-18 Vulnerability-Lab webapps

Scripts Genie Hot Scripts Clone – ‘showcategory.php?cid’ SQL Injection

-+=--+=--+=--+=--+=--+=--+=--+=--+=--+=-

2013-02-18 Easy Laster webapps

Cometchat Application – Multiple Vulnerabilities

#####################################

2013-02-18 z3r0sPlOiT webapps

Scripts Genie Pet Rate Pro – Multiple Vulnerabilities

#########################################################################

2013-02-18 TheMirkin webapps

Netgear DGN2200B – Multiple Vulnerabilities

Device Name: DGN2200B

2013-02-18 m-1-k-3 webapps

MIMEsweeper For SMTP – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58012/info

2013-02-18 Anastasios Monachos webapps

Scripts Genie Top Sites – ‘out.php?id’ SQL Injection

##################################################################################

2013-02-17 3spi0n webapps

Scripts Genie Domain Trader – ‘catalog.php?id’ SQL Injection

##################################################################################

2013-02-17 3spi0n webapps

Scripts Genie Games Site Script – ‘index.php?id’ SQL Injection

##################################################################################

2013-02-17 3spi0n webapps

Scripts Genie Gallery Personals – ‘gallery.php?L’ SQL Injection

##################################################################################

2013-02-17 3spi0n webapps

ChillyCMS 1.3.0 – Multiple Vulnerabilities

# Exploit Title: chillyCMS 1.3.0 Multiple Vulnerabilities

2013-02-15 Abhi M Balakrishnan webapps

Cometchat – Multiple Vulnerabilities

##################################################################################

2013-02-15 B127Y webapps

TP-Link TL-WA701N / TL-WA701ND – Multiple Vulnerabilities

Device Name: TL-WA701N / TL-WA701ND

2013-02-15 m-1-k-3 webapps

Edimax EW-7206-APg and EW-7209APg – Multiple Vulnerabilities

Device Name: EW-7206APg / EW-7209APg

2013-02-15 m-1-k-3 webapps

Ultra Light Forum – Persistent Cross-Site Scripting

# Ultra Light Forum Persistant XSS Vulnerability

2013-02-14 cr4wl3r webapps

SonicWALL OEM Scrutinizer 9.5.2 – Multiple Vulnerabilities

Title:

2013-02-14 Vulnerability-Lab webapps

Raidsonic IB-NAS5220 and IB-NAS4220-B – Multiple Vulnerabilities

Device Name: IB-NAS5220 / IB-NAS4220-B

2013-02-14 m-1-k-3 webapps

OpenPLI 3.0 Beta (OpenPLi-beta-dm7000-20130127-272) – Multiple Vulnerabilities

# Exploit Title: Multiple Vulnerabilities in OpenPLI

2013-02-14 m-1-k-3 webapps

Transferable Remote 1.1 iPad iPhone – Multiple Vulnerabilities

Title:

2013-02-14 Vulnerability-Lab webapps

SonicWALL Scrutinizer 9.5.2 – SQL Injection

Title:

2013-02-14 Vulnerability-Lab webapps

WordPress Plugin NextGEN Gallery – Full Path Disclosure

source: https://www.securityfocus.com/bid/57957/info

2013-02-14 Henrique Montenegro webapps

OpenEMR 4.1.1 – ‘ofc_upload_image.php’ Arbitrary File Upload

2013-02-13 LiquidWorm webapps

Sonar – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57982/info

2013-02-12 DevilTeam webapps

BlackNova Traders – ‘news.php’ SQL Injection

source: https://www.securityfocus.com/bid/57910/info

2013-02-12 ITTIHACK webapps

osCommerce – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/57892/info

2013-02-12 Jakub Galczyk webapps

Air Disk Wireless 1.9 iPad iPhone – Multiple Vulnerabilities

Title:

2013-02-11 Vulnerability-Lab webapps

TP-Link – Admin Panel Multiple Cross-Site Request Forgery Vulnerabilities

Advisory Name: Multiple Cross Site Request Forgery vulnerabilities in

2013-02-11 CYBSEC Labs webapps

IP.Gallery 4.2.x/5.0.x – Persistent Cross-Site Scripting

# Exploit Title: IP.Gallery 4.2.x and 5.0.x persistent XSS vulnerability

2013-02-11 Mohamed Ramadan webapps

IRIS Citations Management Tool – (Authenticated) Remote Command Execution

Here is a bug that I finally found time to write about :-)

2013-02-11 aeon webapps

Linksys WRT160N – Multiple Vulnerabilities

Device Name: Linksys WRT160Nv2

2013-02-11 m-1-k-3 webapps

D-Link DIR-615 Rev H – Multiple Vulnerabilities

Device Name: DIR-615 - Hardware revision H1

2013-02-11 m-1-k-3 webapps

Linksys WAG200G – Multiple Vulnerabilities

Device Name: Linksys WAG200G

2013-02-11 m-1-k-3 webapps

Linksys E1500/E2500 – Multiple Vulnerabilities

Device Name: Linksys E1500 / E2500

2013-02-11 m-1-k-3 webapps

Easy Live Shop System – SQL Injection

+--------------------------------------------------

2013-02-10 Ramdan Yantu webapps

WordPress Theme Pinboard – ‘tab’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57873/info

2013-02-09 Henrique Montenegro webapps

WirelessFiles 1.1 iPad iPhone – Multiple Vulnerabilities

Title:

2013-02-07 Vulnerability-Lab webapps

CubeCart 5.2.0 – ‘cubecart.class.php’ PHP Object Injection

-------------------------------------------------------------------------

2013-02-07 EgiX webapps

Netgear DGN1000B – Multiple Vulnerabilities

Device Name: DGN1000B

2013-02-07 m-1-k-3 webapps

Hiverr 2.2 – Multiple Vulnerabilities

# Exploit Title: Hiverr v2.2 Multiple Vulnerabilities

2013-02-06 xStarCode webapps

Verax NMS – Multiple Method Authentication Bypass

source: https://www.securityfocus.com/bid/58334/info

2013-02-06 Andrew Brooks webapps

WordPress Plugin Wysija Newsletters – Multiple SQL Injections

source: https://www.securityfocus.com/bid/57775/info

2013-02-06 High-Tech Bridge webapps

WordPress Plugin CommentLuv – ‘_ajax_nonce’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/57771/info

2013-02-06 High-Tech Bridge webapps

ezStats for Battlefield 3 – ‘/ezStats2/compare.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57759/info

2013-02-06 L0n3ly-H34rT webapps