CVE-2012-4982

creationtimestamp| type| source ---|---|--- 2012-11-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38062...

CVE-2012-5702

creationtimestamp| type| source ---|---|--- 2012-11-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38043...

CVE-2013-2261

creationtimestamp| type| source ---|---|--- 2012-11-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38636 2024-02-01 18:11:24+00:00| seen| https://t.me/ctinow/177714...

CVE-2013-4103

creationtimestamp| type| source ---|---|--- 2012-11-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38637 2024-02-01 19:16:37+00:00| seen| https://t.me/ctinow/177746...

QQPlayer 'quartz.dll'堆缓冲区溢出漏洞

BUGTRAQ ID: 55918 QQ影音QQPlayer是腾讯公司推出的一款支持任何格式影片和音乐文件的本地播放器。 QQPlayer 3.7.892及其他版本存在堆缓冲区溢出漏洞，成功利用后可允许远程攻击者在受影响应用的上下文中执行任意代码。 0 Tencent QQ影音 厂商补丁： Tencent ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://im.qq.com/qq/dlqq.shtml l = 3315716 "A" s1 = 0,'\x00\x00\x01\xba', 2048,...

AjaXplorer checkInstall.php Remote Command Execution

Exploit for php platform in category web applications This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

SafeNet Sentinel Keys Server - Crash (PoC)

SafeNet Sentinel Keys Server - Crash PoC Exploit Title: SafeNet Sentinel Keys Server DoS Date: 10 Sep 2012 Exploit Author: retset https://twitter.com/ret5et Vendor Homepage: http://www.safenet-inc.com/ Version: Sentinel Protection Installer v7.6.5 sntlkeyssrvr.exe ver. 1.3.1.3 Download link:...

iPhone 5 and 4 Hacked with same Exploit

iPhone 5 is vulnerable to the same attack that successfully breached an iPhone 4S at the mobile Pwn2Own hacker contest held this week at the EUSecWest event in Amsterdam. As we reported that Joost Pol and Daan Keuper won the mobile Pwn2Own contest by compromising a fully patched iPhone 4S device...

Immunity Canvas: IE_EXECCOMMAND

Name| ieexecCommand ---|--- CVE| CVE-2012-4969 Exploit Pack| CANVAS Description| ieexecCommand Notes| CVE Name: CVE-2012-4969 VENDOR: Microsoft Notes: VersionsAffected: Repeatability: Infinite References: 'http://technet.microsoft.com/en-us/security/advisory/2757760' Date public: 09/17/2012 MSADV...

CVE-2012-6151

creationtimestamp| type| source ---|---|--- 2012-09-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38854...

DivX Plus Player plugin 2.2.0.52 Buffer Overflow PoC

Exploit for windows platform in category dos / poc Exploit Title: DivX Plus Player plugin 2.2.0.52 Buffer Overflow PoC Crash:http://img507.imageshack.us/img507/40/divx.png Class: Boundary Condition Error Date: 2012-08-14 Author: coolkaveh email protected Https://twitter.com/coolkaveh Vendor...

Shopping Tree Cross Site Scripting

Exploit Title: Shopping Tree Cross Site Scripting Google Dork: "Shopping Tree, Inc" Date: 14/08/2012 Author: IranianDarkCodersTeam Discovered By : Nafsh Site : http://idc-team.net/ Software Link: http://www.shoppingtree.com Bug : /logon.asp?msg= Xss Example :...

VLC Media Player '.3gp'文件除零拒绝服务漏洞

BUGTRAQ ID: 54791 VLC Media Player是多媒体播放器（最初命名为VideoLAN客户端）是VideoLAN计划的多媒体播放器。 VLC Media Player 2.0.2及其他版本在实现上存在拒绝服务漏洞，成功利用可允许攻击者造成受影响应用崩溃。 0 VLC Media Player 2.0.2 厂商补丁： VideoLAN -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.videolan.org/ !/usr/bin/perl my $a...

AOL Products downloadUpdater2 Plugin - 'SRC' Remote Code Execution

AOL Products downloadUpdater2 Plugin SRC Parameter Remote Code Execution tested against: Microsoft Windows Vista sp2 Microsoft Windows Server 2003 r2 sp2 Mozilla Firefox 14.0.1 download url: http://client.web.aol.com/toolbarfiles/Prod/downloads/downloadupdater/dnupdatersetup.exe this was the upda...

Symantec Web Gateway 5.0.3.18 - pbcontrol.php Root Remote Code Execution

Symantec Web Gateway 5.0.3.18 - pbcontrol.php Root Remote Code Execution !/usr/bin/python import urllib import sys ''' print " " print " Symantec Web Gateway 5.0.3.18 pbcontrol.php ROOT RCE Exploit" print " Offensive Security - http://www.offensive-security.com" print " \n" 06 Jun 2012:...

CVE-2012-1620

slock 0.9 does not properly handle the XRaiseWindow event when the screen is locked, which might allow physically proximate attackers to obtain sensitive information by pressing a button, which reveals the desktop and active windows...

BoutikOne CSRF Add User Vulnerability

Exploit for php platform in category web applications !/usr/bin/perl -w Exploit Title: BoutikOne CSRF Add User Exploit Author: GarA Vendor Homepage: www.boutikone.com Tested on: Win Xp sp3 system "color a"; system "cls"; $numargs = $ARGV + 1; if $numargs != 4 print " :MM:....:HMMM .MMMMMMMMMM. \n...

GetSimple Plugins - The Photo Gallery Timthumb Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Galette <=0.63 picture.class.php SQL注入漏洞

No description provided by source...

SilverStripe CMS 2.4.7 (install.php) Remote Command Execution

Exploit for php platform in category web applications Exploit Title: SilverStripe CMS 2.4.7 install.php Remote Command Execution Exploit Date: 26 Nisan 2012 Author: Mehmet INCE Twitter: https://twitter.com/!/mmetince Company: Bilgi Güvenliği Akademisi www.bga.com.tr Software Link:...