mirror of
https://github.com/trickest/cve.git
synced 2026-11-07 04:29:23 -10:00
Update Wed Aug 19 12:25:35 UTC 2026
This commit is contained in:
trickest-workflows committed
1 parent
b61f8201e6
commit
36c0a522c3
482 files changed
+5595
-52
No files matched your search
@@ -11,6 +11,7 @@ The execve system call in Linux 2.4.x records the file descriptor of the executa
|
||||
|
||||
#### Reference
|
||||
- http://marc.info/?l=bugtraq&m=105664924024009&w=2
|
||||
- http://www.redhat.com/support/errata/RHSA-2003-368.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Integer overflow in the do_brk function for the brk system call in Linux kernel
|
||||
|
||||
#### Reference
|
||||
- http://marc.info/?l=bugtraq&m=107064830206816&w=2
|
||||
- http://www.redhat.com/support/errata/RHSA-2003-368.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/AnyMaster/EQGRP
|
||||
|
||||
@@ -11,6 +11,7 @@ Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.8
|
||||
|
||||
#### Reference
|
||||
- http://marc.info/?l=bugtraq&m=107513690306318&w=2
|
||||
- http://www.redhat.com/support/errata/RHSA-2004-032.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG prot
|
||||
|
||||
#### Reference
|
||||
- http://marc.info/?l=bugtraq&m=107513690306318&w=2
|
||||
- http://www.redhat.com/support/errata/RHSA-2004-032.html
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9906
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows
|
||||
|
||||
#### Reference
|
||||
- http://marc.info/?l=bugtraq&m=107513690306318&w=2
|
||||
- http://www.redhat.com/support/errata/RHSA-2004-032.html
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9469
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -12,6 +12,7 @@ The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier a
|
||||
#### Reference
|
||||
- http://marc.info/?l=bugtraq&m=107652610506968&w=2
|
||||
- http://monkeyd.sourceforge.net/
|
||||
- http://www.securityfocus.com/bid/9642
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2005-0862](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0862)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter to (1) poc_loginform.php or (2) phpbb/poc.php, the poc_root_path parameter to (3) phpbb/poc.php, (4) phpnuke/ENGLISH_poc.php, (5) phpnuke/poc.php, or (6) yabbse/poc.php, or (7) the sourcedir parameter to yabbse/poc.php.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.securityfocus.com/bid/12817
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,8 @@ Buffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as dist
|
||||
|
||||
#### Reference
|
||||
- http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=571608
|
||||
- http://www.securityfocus.com/bid/17370
|
||||
- http://www.securityfocus.com/data/vulnerabilities/exploits/xinelib_poc.pl
|
||||
- https://www.exploit-db.com/exploits/1641
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ SQL injection vulnerability in member.php in Blackorpheus ClanMemberSkript 1.0 a
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.securityfocus.com/bid/17558
|
||||
- https://www.exploit-db.com/exploits/1683
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2006-2853](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2853)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
SQL injection vulnerability in content.php in abarcar Realty Portal 5.1.5 allows remote attackers to execute arbitrary SQL commands via the cat parameter.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.securityfocus.com/bid/18218
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2006-2854](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2854)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
SQL injection vulnerability in index.php in iBWd Guestbook 1.0 allows remote attackers to execute arbitrary SQL commands via the offset parameter.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.securityfocus.com/bid/18256
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2006-3381](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3381)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
SturGeoN Upload allows remote attackers to execute arbitrary PHP code by uploading a file with a .php extension, then directly accessing the file. NOTE: It is uncertain whether this is a vulnerability or a feature of the product.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.securityfocus.com/bid/18764
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -13,6 +13,7 @@ Integer overflow in the loadChunk function in loaders/load_gt2.c in libmikmod in
|
||||
- http://aluigi.altervista.org/adv/lmmgt2ho-adv.txt
|
||||
- http://aluigi.org/poc/lmmgt2ho.zip
|
||||
- http://securityreason.com/securityalert/1288
|
||||
- http://www.securityfocus.com/bid/19134
|
||||
|
||||
#### Github
|
||||
- https://github.com/ARPSyndicate/cve-scores
|
||||
|
||||
@@ -12,6 +12,7 @@ BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of serv
|
||||
#### Reference
|
||||
- http://aluigi.altervista.org/adv/bcloneboom-adv.txt
|
||||
- http://aluigi.org/poc/bcloneboom.zip
|
||||
- http://www.securityfocus.com/bid/19255
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ The do_gameinfo function in BomberClone 0.11.6 and earlier, and possibly other f
|
||||
#### Reference
|
||||
- http://aluigi.altervista.org/adv/bcloneboom-adv.txt
|
||||
- http://aluigi.org/poc/bcloneboom.zip
|
||||
- http://www.securityfocus.com/bid/19255
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Tr Forum 2.0 allows remote attackers to bypass authentication and add an adminis
|
||||
|
||||
#### Reference
|
||||
- http://securityreason.com/securityalert/1508
|
||||
- http://www.securityfocus.com/bid/19834
|
||||
- https://www.exploit-db.com/exploits/2297
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote au
|
||||
|
||||
#### Reference
|
||||
- http://securityreason.com/securityalert/1508
|
||||
- http://www.securityfocus.com/bid/19834
|
||||
- https://www.exploit-db.com/exploits/2297
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ The admin panel in Tr Forum 2.0 accepts a username and password hash for authent
|
||||
|
||||
#### Reference
|
||||
- http://securityreason.com/securityalert/1508
|
||||
- http://www.securityfocus.com/bid/19834
|
||||
- https://www.exploit-db.com/exploits/2297
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ SQL injection vulnerability in index.php in Annuaire 1Two 2.2 allows remote atta
|
||||
|
||||
#### Reference
|
||||
- http://securityreason.com/securityalert/1496
|
||||
- http://www.securityfocus.com/bid/19817
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 all
|
||||
|
||||
#### Reference
|
||||
- http://securityreason.com/securityalert/1653
|
||||
- http://www.securityfocus.com/bid/20235
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ PHP remote file inclusion vulnerability in param_editor.php in Compteur 2 allows
|
||||
|
||||
#### Reference
|
||||
- http://marc.info/?l=bugtraq&m=116049484210942&w=2
|
||||
- http://www.securityfocus.com/bid/20432
|
||||
- https://www.exploit-db.com/exploits/2503
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ PowerPoint in Microsoft Office 2003 does not properly handle a container object
|
||||
|
||||
#### Reference
|
||||
- http://www.informationweek.com/management/showArticle.jhtml?articleID=193302553
|
||||
- http://www.securityfocus.com/bid/20495
|
||||
- https://www.exploit-db.com/exploits/2523
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta al
|
||||
|
||||
#### Reference
|
||||
- http://securityreason.com/securityalert/1734
|
||||
- http://www.securityfocus.com/bid/20443
|
||||
- https://www.exploit-db.com/exploits/2501
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ PHP remote file inclusion vulnerability in main.php in registroTL allows remote
|
||||
|
||||
#### Reference
|
||||
- http://securityreason.com/securityalert/1734
|
||||
- http://www.securityfocus.com/bid/20433
|
||||
- https://www.exploit-db.com/exploits/2502
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ PHP remote file inclusion vulnerability in index.php in eboli allows remote atta
|
||||
|
||||
#### Reference
|
||||
- http://securityreason.com/securityalert/1734
|
||||
- http://www.securityfocus.com/bid/20429
|
||||
- https://www.exploit-db.com/exploits/2504
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ PHP remote file inclusion vulnerability in index.php in Nayco JASmine (aka Jasmi
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.securityfocus.com/bid/20430
|
||||
- https://www.exploit-db.com/exploits/2505
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allo
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.securityfocus.com/bid/20441
|
||||
- https://www.exploit-db.com/exploits/2507
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ The kernel in FreeBSD 6.1 and OpenBSD 4.0 allows local users to cause a denial o
|
||||
|
||||
#### Reference
|
||||
- http://elegerov.blogspot.com/2006/10/here-is-lame-proof-of-concept-code-for.html
|
||||
- http://www.securityfocus.com/bid/20713
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (
|
||||
|
||||
#### Reference
|
||||
- http://www.kb.cert.org/vuls/id/589272
|
||||
- http://www.securityfocus.com/bid/20704
|
||||
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-009
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Mi
|
||||
|
||||
#### Reference
|
||||
- http://www.kb.cert.org/vuls/id/208769
|
||||
- http://www.securityfocus.com/bid/21247
|
||||
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-078
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ Cahier de texte 2.0 stores sensitive information under the web root, possibly wi
|
||||
|
||||
#### Reference
|
||||
- http://securityreason.com/securityalert/1961
|
||||
- http://www.securityfocus.com/bid/21283
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to
|
||||
|
||||
#### Reference
|
||||
- http://securityreason.com/securityalert/1961
|
||||
- http://www.securityfocus.com/bid/21283
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Multiple SQL injection vulnerabilities in Ixprim 1.2 allow remote attackers to e
|
||||
|
||||
#### Reference
|
||||
- http://securityreason.com/securityalert/2073
|
||||
- http://www.securityfocus.com/bid/21710
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and ea
|
||||
|
||||
#### Reference
|
||||
- http://securityreason.com/securityalert/2123
|
||||
- http://www.securityfocus.com/bid/21894
|
||||
- https://www.exploit-db.com/exploits/3085
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, wh
|
||||
|
||||
#### Reference
|
||||
- http://securityreason.com/securityalert/2135
|
||||
- http://www.securityfocus.com/bid/21926
|
||||
- https://www.exploit-db.com/exploits/3103
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ Directory traversal vulnerability in admin/skins.php for @lex Guestbook 4.0.2 an
|
||||
|
||||
#### Reference
|
||||
- http://securityreason.com/securityalert/2135
|
||||
- http://www.securityfocus.com/bid/21926
|
||||
- https://www.exploit-db.com/exploits/3103
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -13,6 +13,7 @@ Zoidcom 0.6.7 and earlier allows remote attackers to cause a denial of service (
|
||||
- http://aluigi.altervista.org/adv/zoidboom2-adv.txt
|
||||
- http://aluigi.org/poc/zoidboom2.zip
|
||||
- http://securityreason.com/securityalert/3014
|
||||
- http://www.securityfocus.com/bid/25326
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ Multiple buffer overflows in Image Space rFactor 1.250 and earlier allow remote
|
||||
#### Reference
|
||||
- http://aluigi.org/poc/rfactorx.zip
|
||||
- http://securityreason.com/securityalert/3037
|
||||
- http://www.securityfocus.com/bid/25358
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ Image Space rFactor 1.250 and earlier allows remote attackers to cause a denial
|
||||
#### Reference
|
||||
- http://aluigi.org/poc/rfactorx.zip
|
||||
- http://securityreason.com/securityalert/3037
|
||||
- http://www.securityfocus.com/bid/25358
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ Format string vulnerability in the server in Toribash 2.71 and earlier allows re
|
||||
#### Reference
|
||||
- http://aluigi.org/poc/toribashish.zip
|
||||
- http://securityreason.com/securityalert/3033
|
||||
- http://www.securityfocus.com/bid/25359
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remot
|
||||
#### Reference
|
||||
- http://aluigi.org/poc/toribashish.zip
|
||||
- http://securityreason.com/securityalert/3033
|
||||
- http://www.securityfocus.com/bid/25359
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ The server in Toribash 2.71 and earlier does not properly handle partially joine
|
||||
#### Reference
|
||||
- http://aluigi.org/poc/toribashish.zip
|
||||
- http://securityreason.com/securityalert/3033
|
||||
- http://www.securityfocus.com/bid/25359
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ The client in Toribash 2.71 and earlier allows remote attackers to cause a denia
|
||||
#### Reference
|
||||
- http://aluigi.org/poc/toribashish.zip
|
||||
- http://securityreason.com/securityalert/3033
|
||||
- http://www.securityfocus.com/bid/25359
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ The server in Toribash 2.71 and earlier does not properly handle long commands,
|
||||
#### Reference
|
||||
- http://aluigi.org/poc/toribashish.zip
|
||||
- http://securityreason.com/securityalert/3033
|
||||
- http://www.securityfocus.com/bid/25359
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ The server in Toribash 2.71 and earlier on Windows allows remote attackers to ca
|
||||
#### Reference
|
||||
- http://aluigi.org/poc/toribashish.zip
|
||||
- http://securityreason.com/securityalert/3033
|
||||
- http://www.securityfocus.com/bid/25359
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ The client in Toribash 2.71 and earlier allows remote attackers to cause a denia
|
||||
#### Reference
|
||||
- http://aluigi.org/poc/toribashish.zip
|
||||
- http://securityreason.com/securityalert/3033
|
||||
- http://www.securityfocus.com/bid/25359
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ Format string vulnerability in CellFactor Revolution 1.03 and earlier allows rem
|
||||
#### Reference
|
||||
- http://aluigi.altervista.org/adv/cellfucktor-adv.txt
|
||||
- http://securityreason.com/securityalert/3130
|
||||
- http://www.securityfocus.com/bid/25625
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -13,6 +13,7 @@ Multiple buffer overflows in CellFactor Revolution 1.03 and earlier allow remote
|
||||
- http://aluigi.altervista.org/adv/cellfucktor-adv.txt
|
||||
- http://aluigi.org/poc/cellfucktor.zip
|
||||
- http://securityreason.com/securityalert/3130
|
||||
- http://www.securityfocus.com/bid/25625
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Mozilla Firefox before Firefox 2.0.0.13, and SeaMonkey before 1.1.9, can automat
|
||||
|
||||
#### Reference
|
||||
- http://0x90.eu/ff_tls_poc.html
|
||||
- http://www.securityfocus.com/bid/28448
|
||||
- http://www.ubuntu.com/usn/usn-592-1
|
||||
- https://bugzilla.mozilla.org/show_bug.cgi?id=395399
|
||||
|
||||
|
||||
@@ -10,6 +10,7 @@ Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.securityfocus.com/bid/25715
|
||||
- https://www.exploit-db.com/exploits/4426
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.securityfocus.com/bid/25871
|
||||
- https://www.exploit-db.com/exploits/4478
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -12,6 +12,7 @@ Buffer overflow in the Sequencer::queueMessage function in sequencer.cpp in the
|
||||
#### Reference
|
||||
- http://aluigi.altervista.org/adv/rorbof-adv.txt
|
||||
- http://aluigi.org/poc/rorbof.zip
|
||||
- http://www.securityfocus.com/bid/26502
|
||||
|
||||
#### Github
|
||||
- https://github.com/ARPSyndicate/cve-scores
|
||||
|
||||
@@ -13,6 +13,7 @@ Stack-based buffer overflow in the zfile_gunzip function in zfile.c in WinUAE 1.
|
||||
- http://aluigi.altervista.org/adv/winuaebof-adv.txt
|
||||
- http://aluigi.org/poc/winuaebof.zip
|
||||
- http://securityreason.com/securityalert/3487
|
||||
- http://www.securityfocus.com/bid/26979
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -13,6 +13,7 @@ Multiple buffer overflows in LScube libnemesi 0.6.4-rc1 and earlier allow remote
|
||||
- http://aluigi.altervista.org/adv/libnemesibof-adv.txt
|
||||
- http://aluigi.org/poc/libnemesibof.zip
|
||||
- http://securityreason.com/securityalert/3513
|
||||
- http://www.securityfocus.com/bid/27048
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ Pragma FortressSSH 5.0 Build 4 Revision 293 and earlier handles long input to ss
|
||||
#### Reference
|
||||
- http://aluigi.altervista.org/adv/pragmassh-adv.txt
|
||||
- http://aluigi.org/poc/pragmassh.zip
|
||||
- http://www.securityfocus.com/bid/27141
|
||||
|
||||
#### Github
|
||||
- https://github.com/Live-Hack-CVE/CVE-2008-0132
|
||||
|
||||
@@ -12,6 +12,7 @@ Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote attackers to c
|
||||
#### Reference
|
||||
- http://aluigi.altervista.org/adv/ipsimene-adv.txt
|
||||
- http://securityreason.com/securityalert/3697
|
||||
- http://www.securityfocus.com/bid/27677
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -13,6 +13,7 @@ Format string vulnerability in the logging function in the IM Server (aka IMserv
|
||||
- http://aluigi.altervista.org/adv/ipsimene-adv.txt
|
||||
- http://aluigi.org/poc/ipsimene.zip
|
||||
- http://securityreason.com/securityalert/3697
|
||||
- http://www.securityfocus.com/bid/27677
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -13,6 +13,7 @@ Directory traversal vulnerability in the IM Server (aka IMserve or IMserver) in
|
||||
- http://aluigi.altervista.org/adv/ipsimene-adv.txt
|
||||
- http://aluigi.org/poc/ipsimene.zip
|
||||
- http://securityreason.com/securityalert/3697
|
||||
- http://www.securityfocus.com/bid/27677
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -13,6 +13,7 @@ Buffer overflow in Double-Take (aka HP StorageWorks Storage Mirroring) 4.5.0.162
|
||||
- http://aluigi.altervista.org/adv/doubletakedown-adv.txt
|
||||
- http://aluigi.org/poc/doubletakedown.zip
|
||||
- http://securityreason.com/securityalert/3698
|
||||
- http://www.securityfocus.com/bid/27951
|
||||
- http://www.vupen.com/english/advisories/2008/0666
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -13,6 +13,7 @@ Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storag
|
||||
- http://aluigi.altervista.org/adv/doubletakedown-adv.txt
|
||||
- http://aluigi.org/poc/doubletakedown.zip
|
||||
- http://securityreason.com/securityalert/3698
|
||||
- http://www.securityfocus.com/bid/27951
|
||||
- http://www.vupen.com/english/advisories/2008/0666
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -13,6 +13,7 @@ Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storag
|
||||
- http://aluigi.altervista.org/adv/doubletakedown-adv.txt
|
||||
- http://aluigi.org/poc/doubletakedown.zip
|
||||
- http://securityreason.com/securityalert/3698
|
||||
- http://www.securityfocus.com/bid/27951
|
||||
- http://www.vupen.com/english/advisories/2008/0666
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -13,6 +13,7 @@ Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storag
|
||||
- http://aluigi.altervista.org/adv/doubletakedown-adv.txt
|
||||
- http://aluigi.org/poc/doubletakedown.zip
|
||||
- http://securityreason.com/securityalert/3698
|
||||
- http://www.securityfocus.com/bid/27951
|
||||
- http://www.vupen.com/english/advisories/2008/0666
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -13,6 +13,7 @@ Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storag
|
||||
- http://aluigi.altervista.org/adv/doubletakedown-adv.txt
|
||||
- http://aluigi.org/poc/doubletakedown.zip
|
||||
- http://securityreason.com/securityalert/3698
|
||||
- http://www.securityfocus.com/bid/27951
|
||||
- http://www.vupen.com/english/advisories/2008/0666
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -13,6 +13,7 @@ Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storag
|
||||
- http://aluigi.altervista.org/adv/doubletakedown-adv.txt
|
||||
- http://aluigi.org/poc/doubletakedown.zip
|
||||
- http://securityreason.com/securityalert/3698
|
||||
- http://www.securityfocus.com/bid/27951
|
||||
- http://www.vupen.com/english/advisories/2008/0666
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -13,6 +13,7 @@ Stack consumption vulnerability in Double-Take 5.0.0.2865 and earlier, distribut
|
||||
- http://aluigi.altervista.org/adv/doubletakedown-adv.txt
|
||||
- http://aluigi.org/poc/doubletakedown.zip
|
||||
- http://securityreason.com/securityalert/3698
|
||||
- http://www.securityfocus.com/bid/27951
|
||||
- http://www.vupen.com/english/advisories/2008/0666
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.securityfocus.com/bid/28448
|
||||
- http://www.ubuntu.com/usn/usn-592-1
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.13, Thu
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.securityfocus.com/bid/28448
|
||||
- http://www.ubuntu.com/usn/usn-592-1
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9551
|
||||
|
||||
|
||||
@@ -10,6 +10,7 @@ Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.securityfocus.com/bid/28448
|
||||
- http://www.ubuntu.com/usn/usn-592-1
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunder
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.securityfocus.com/bid/28448
|
||||
- http://www.ubuntu.com/usn/usn-592-1
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunder
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.securityfocus.com/bid/28448
|
||||
- http://www.ubuntu.com/usn/usn-592-1
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9651
|
||||
|
||||
|
||||
@@ -10,6 +10,7 @@ Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.securityfocus.com/bid/28448
|
||||
- http://www.ubuntu.com/usn/usn-592-1
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9889
|
||||
|
||||
|
||||
@@ -10,6 +10,7 @@ LiveConnect in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 does n
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.securityfocus.com/bid/28448
|
||||
- http://www.ubuntu.com/usn/usn-592-1
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey befor
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.securityfocus.com/bid/28448
|
||||
- http://www.ubuntu.com/usn/usn-592-1
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -13,6 +13,7 @@ The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allo
|
||||
- http://aluigi.altervista.org/adv/perforces-adv.txt
|
||||
- http://aluigi.org/poc/perforces.zip
|
||||
- http://securityreason.com/securityalert/3735
|
||||
- http://www.securityfocus.com/bid/28108
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -13,6 +13,7 @@ The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allo
|
||||
- http://aluigi.altervista.org/adv/perforces-adv.txt
|
||||
- http://aluigi.org/poc/perforces.zip
|
||||
- http://securityreason.com/securityalert/3735
|
||||
- http://www.securityfocus.com/bid/28108
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -13,6 +13,7 @@ The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allo
|
||||
- http://aluigi.altervista.org/adv/perforces-adv.txt
|
||||
- http://aluigi.org/poc/perforces.zip
|
||||
- http://securityreason.com/securityalert/3735
|
||||
- http://www.securityfocus.com/bid/28108
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ Stack consumption vulnerability in WebContainer.exe 1.0.0.336 and earlier in SLM
|
||||
#### Reference
|
||||
- http://aluigi.altervista.org/adv/slmaildos-adv.txt
|
||||
- http://aluigi.org/poc/slmaildos.zip
|
||||
- http://www.securityfocus.com/bid/28505
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows
|
||||
|
||||
#### Reference
|
||||
- http://aluigi.org/poc/slmaildos.zip
|
||||
- http://www.securityfocus.com/bid/28505
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Unspecified vulnerability in SLMail.exe in SLMail Pro 6.3.1.0 and earlier allows
|
||||
|
||||
#### Reference
|
||||
- http://aluigi.altervista.org/adv/slmaildos-adv.txt
|
||||
- http://www.securityfocus.com/bid/28505
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ Format string vulnerability in the logging function in IBM solidDB 06.00.1018 an
|
||||
#### Reference
|
||||
- http://aluigi.altervista.org/adv/soliduro-adv.txt
|
||||
- http://aluigi.org/poc/soliduro.zip
|
||||
- http://www.securityfocus.com/bid/28468
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ Uncontrolled array index in IBM solidDB 06.00.1018 and earlier allows remote att
|
||||
#### Reference
|
||||
- http://aluigi.altervista.org/adv/soliduro-adv.txt
|
||||
- http://aluigi.org/poc/soliduro.zip
|
||||
- http://www.securityfocus.com/bid/28468
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ IBM solidDB 06.00.1018 and earlier allows remote attackers to cause a denial of
|
||||
#### Reference
|
||||
- http://aluigi.altervista.org/adv/soliduro-adv.txt
|
||||
- http://aluigi.org/poc/soliduro.zip
|
||||
- http://www.securityfocus.com/bid/28468
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ IBM solidDB 06.00.1018 and earlier does not validate a certain field that specif
|
||||
#### Reference
|
||||
- http://aluigi.altervista.org/adv/soliduro-adv.txt
|
||||
- http://aluigi.org/poc/soliduro.zip
|
||||
- http://www.securityfocus.com/bid/28468
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ Unreal Tournament 2004 (UT2004) 3369 and earlier allows remote attackers to caus
|
||||
#### Reference
|
||||
- http://aluigi.altervista.org/adv/ut2004null-adv.txt
|
||||
- http://aluigi.org/poc/ut2004null.zip
|
||||
- http://www.securityfocus.com/bid/30427
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -13,6 +13,7 @@ Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers t
|
||||
- http://aluigi.org/adv/wincomalpd-adv.txt
|
||||
- http://aluigi.org/poc/wincomalpd.zip
|
||||
- http://securityreason.com/securityalert/4610
|
||||
- http://www.securityfocus.com/bid/27614
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -13,6 +13,7 @@ Integer overflow in the remote administration protocol processing in Client Soft
|
||||
- http://aluigi.org/adv/wincomalpd-adv.txt
|
||||
- http://aluigi.org/poc/wincomalpd.zip
|
||||
- http://securityreason.com/securityalert/4610
|
||||
- http://www.securityfocus.com/bid/27614
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -13,6 +13,7 @@ Multiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earl
|
||||
- http://aluigi.org/adv/wincomalpd-adv.txt
|
||||
- http://aluigi.org/poc/wincomalpd.zip
|
||||
- http://securityreason.com/securityalert/4610
|
||||
- http://www.securityfocus.com/bid/27614
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ The Local ZIM Server (zcs.exe) in Zilab Chat and Instant Messaging (ZIM) Server
|
||||
#### Reference
|
||||
- http://aluigi.altervista.org/adv/zilabzcsx-adv.txt
|
||||
- http://aluigi.org/poc/zilabzcsx.zip
|
||||
- http://www.securityfocus.com/bid/27940
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ The Local ZIM Server in Zilab Chat and Instant Messaging (ZIM) Server 2.0 and 2.
|
||||
#### Reference
|
||||
- http://aluigi.altervista.org/adv/zilabzcsx-adv.txt
|
||||
- http://aluigi.org/poc/zilabzcsx.zip
|
||||
- http://www.securityfocus.com/bid/27940
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ Integer overflow in Vertex4 SunAge 1.08.1 and earlier allows remote attackers to
|
||||
#### Reference
|
||||
- http://aluigi.altervista.org/adv/sunagex-adv.txt
|
||||
- http://aluigi.org/poc/sunagex.zip
|
||||
- http://www.securityfocus.com/bid/29889
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of s
|
||||
#### Reference
|
||||
- http://aluigi.altervista.org/adv/sunagex-adv.txt
|
||||
- http://aluigi.org/poc/sunagex.zip
|
||||
- http://www.securityfocus.com/bid/29889
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of s
|
||||
#### Reference
|
||||
- http://aluigi.altervista.org/adv/sunagex-adv.txt
|
||||
- http://aluigi.org/poc/sunagex.zip
|
||||
- http://www.securityfocus.com/bid/29889
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Integer underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.2
|
||||
|
||||
#### Reference
|
||||
- http://evilfingers.com/advisory/google_chrome_poc.php
|
||||
- http://www.securityfocus.com/bid/30983
|
||||
- https://www.evilfingers.com/advisory/Google_Chrome_Browser_0.2.149.27_in_chrome_dll.php
|
||||
- https://www.exploit-db.com/exploits/6353
|
||||
|
||||
|
||||
@@ -11,6 +11,7 @@ SQL injection vulnerability in the user.authenticate method in the API in Zabbix
|
||||
|
||||
#### Reference
|
||||
- http://legalhackers.com/advisories/zabbix181api-sql.txt
|
||||
- http://www.securityfocus.com/bid/39148
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ The QSslSocketBackendPrivate::transmit function in src_network_ssl_qsslsocket_op
|
||||
#### Reference
|
||||
- http://aluigi.org/adv/qtsslame-adv.txt
|
||||
- http://aluigi.org/poc/qtsslame.zip
|
||||
- http://www.securityfocus.com/bid/41250
|
||||
|
||||
#### Github
|
||||
- https://github.com/ARPSyndicate/cve-scores
|
||||
|
||||
@@ -11,6 +11,7 @@ Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes h
|
||||
|
||||
#### Reference
|
||||
- http://www.ocert.org/advisories/ocert-2011-003.html
|
||||
- http://www.securityfocus.com/bid/51200
|
||||
- https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -15,6 +15,7 @@ PHP before 5.3.9 computes hash values for form parameters without restricting th
|
||||
- http://www.ocert.org/advisories/ocert-2011-003.html
|
||||
- http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2012-0019.html
|
||||
- http://www.securityfocus.com/bid/51193
|
||||
- https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -13,6 +13,7 @@ The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt,
|
||||
- http://security.stackexchange.com/questions/19911/crime-how-to-beat-the-beast-successor
|
||||
- http://threatpost.com/en_us/blogs/crime-attack-uses-compression-ratio-tls-requests-side-channel-hijack-secure-sessions-091312
|
||||
- http://threatpost.com/en_us/blogs/new-attack-uses-ssltls-information-leak-hijack-https-sessions-090512
|
||||
- http://www.securityfocus.com/bid/55704
|
||||
- http://www.theregister.co.uk/2012/09/14/crime_tls_attack/
|
||||
- http://www.ubuntu.com/usn/USN-1898-1
|
||||
- https://community.qualys.com/blogs/securitylabs/2012/09/14/crime-information-leakage-attack-against-ssltls
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2013-0183](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0183)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://groups.google.com/forum/#%21topic/rack-devel/7ZKPNAjgRSs
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -15,6 +15,7 @@ plugins/demux/libmkv_plugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly
|
||||
- http://seclists.org/fulldisclosure/2013/Jul/79
|
||||
- http://secunia.com/blog/372/
|
||||
- http://www.jbkempf.com/blog/post/2013/More-lies-from-Secunia
|
||||
- http://www.securityfocus.com/bid/61032
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
Loaded 100 of 482 files, more files were not shown because too many files have changed in this diff.
Show more
Reference in new issue
Block a user