RSS

The Exploit Database

The Exploit Database (EDB) – an ultimate archive of exploits and vulnerable software. A great resource for penetration testers, vulnerability researchers, and security addicts alike. Our aim is to collect exploits from submittals and mailing lists and concentrate them in one, easy to navigate database.

Remote Exploits

Date D A V   Description Plat. Author
2010-07-24 - Verified   IBM AIX 5l FTPd Remote DES Hash Exploit 1041 aix Kingcope
2010-07-23 Download Vulnerable Application Verified   Easy FTP Server v1.7.0.11 LIST Command Remote BoF Exploit (Post Auth) - (meta) 850 windows Muhamad Fadzil Ra.
2010-07-23 Download Vulnerable Application Verified   Multiple Web Browser Clickjacking Vulnerability (FF3.6.7/SM 2.0.6) 1749 windows Pouya Daneshmand
2010-07-20 - Waiting verification   SapGUI BI v7100.1.400.8 Heap Corruption Exploit 1326 windows Elazar Broad

Local Exploits

Date D A V   Description Plat. Author
2010-07-27 Download Vulnerable Application Waiting verification   QQPlayer smi File Buffer Overflow Exploit 434 windows Lufeng Li
2010-07-24 Download Vulnerable Application Verified   Mediacoder v0.7.3.4682 (.m3u) File Universal Buffer Overflow Exploit 436 windows hadji samir
2010-07-21 Download Vulnerable Application Verified   ZipCentral (.zip) Buffer Overflow (SEH) 821 windows Jiten Pathy
2010-07-21 Download Vulnerable Application Verified   QQPlayer cue File Buffer Overflow Exploit 1091 windows Lufeng Li
2010-07-21 Download Vulnerable Application Verified   QQPlayer asx File Processing Buffer Overflow Exploit 697 windows Li Qingshan

Web Applications

Date D A V   Description Plat. Author
2010-07-27 - Waiting verification   Joomla Component Appointinator 1.0.1 Multiple Remote Vulnerabilities 480 php Salvatore Fresta
2010-07-27 Download Vulnerable Application Verified   nuBuilder 10.04.20 Local File Inclusion Vulnerability 486 php John Leitch
2010-07-27 Download Vulnerable Application Verified   PunBB <= 1.3.4 and Pun_PM <= v1.2.6 Remote Blind SQL Injection Exploit 588 php Dante90

DoS/PoC

Date D A V   Description Plat. Author
2010-07-27 - Verified   IE6 / 7 Remote Dos vulnerability 1065 windows Richard Leahy
2010-07-26 - Verified   Media Player Classic Heap Overflow/DoS Vulnerability 430 windows Praveen Darshanam
2010-07-23 - Verified   Ubuntu 10.04 LTS - Lucid Lynx ftp Client v0.17-19build1 ACCT Buffer Overflow 821 linux d0lc3
2010-07-20 - Waiting verification   Lithtech Engine Memory Corruption Vulnerability 299 windows Luigi Auriemma
2010-07-20 - Verified   libpng <= 1.4.2 Denial of Service Vulnerability 497 multiple kripthor
2010-07-20 - Waiting verification   Unreal Tournament 3 2.1 'STEAMBLOB' Command Remote Denial of Service Vulnerability 400 windows Luigi Auriemma
2010-07-20 - Waiting verification   IE 7.0 - DoS Microsoft Clip Organizer Multiple Insecure ActiveX Control 797 windows Beenu Arora

Shellcode

Date D   Description Plat. Author
2010-07-11   Linux x86 netcat connect back port 8080 (76 bytes) 1759 lin/x86 Blake
2010-07-11   Linux x86 netcat bindshell port 8080 (75 bytes) 776 linux Blake
2010-07-09   Linux/x86-64 - execve("/sbin/iptables", ["/sbin/iptables", "-F"], NULL) - 49 bytes 668 linux 10n1z3d
2010-07-09   Write-to-file Shellcode (Win32) 1208 multiple Brett Gervasoni
2010-07-08   91 bytes Find all writeable folder in filesystem linux polymorphic shellcode 590 linux gunslinger_
2010-07-07   ARM Polymorphic execve("/bin/sh", ["/bin/sh"], NULL) Shellcode Generator 567 arm Jonathan Salwan
2010-07-05   125 bind port to 6778 XOR encoded polymorphic linux shellcode . 496 linux gunslinger_

Papers

Date D   Description Author
2010-07-26   SQL Injection Tutorial Prashant Uniyal
2010-07-24   Cisco VoIP Phones - A Hackers Perspective chap0
2010-07-24   [Indonesian] Linux Buffer Overflow Tutorial III gunslinger_
2010-07-20   [Indonesian] Simple Technique for SQLi Form Login Bypass haripinter
2010-07-12   SQL Injection Authentication Bypass novaca!ne
2010-07-10   HoneyPot: Explained s1ayer
2010-07-03   [Hebrew] Digital Whisper Security Magazine #9 cp77fk4r and Unde.