Web Wiz Forums 12.01 – ‘PF’ SQL Injection
# Exploit Title: Web Wiz Forums 12.01 - 'PF' SQL Injection
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 100
NSKeyedUnarchiver – Info Leak in Decoding SGBigUTF8String
There is an info leak when decoding the SGBigUTF8String class using [SGBigUTF8String initWithCoder:]. This class init...
Microsoft Windows Text Services Framework MSCTF – Multiple Vulnerabilities
The msctf subsystem is part of the Text Services Framework, The TSF manages things like input methods, keyboard layou...
Adobe Acrobat CoolType (AFDKO) – Memory Corruption in the Handling of Type 1 Font load/store Operators
-----=====[ Background ]=====-----
Adobe Acrobat CoolType (AFDKO) – Call from Uninitialized Memory due to Empty FDArray in Type 1 Fonts
-----=====[ Background ]=====-----
Microsoft Font Subsetting – DLL Returning a Dangling Pointer via MergeFontPackage
-----=====[ Background ]=====-----
Microsoft Font Subsetting – DLL Heap-Based Out-of-Bounds read in GetGlyphIdx
-----=====[ Background ]=====-----
Microsoft Font Subsetting – DLL Double Free in MergeFormat12Cmap / MakeFormat12MergedGlyphList
-----=====[ Background ]=====-----
Microsoft Font Subsetting – DLL Heap Corruption in FixSbitSubTables
-----=====[ Background ]=====-----
Microsoft Font Subsetting – DLL Heap Corruption in ReadTableIntoStructure
-----=====[ Background ]=====-----
Microsoft Font Subsetting – DLL Heap Corruption in ReadAllocFormat12CharGlyphMapList
-----=====[ Background ]=====-----
Microsoft Font Subsetting – DLL Heap-Based Out-of-Bounds read in WriteTableFromStructure
-----=====[ Background ]=====-----
Microsoft Font Subsetting – DLL Heap Corruption in MakeFormat12MergedGlyphList
-----=====[ Background ]=====-----
Microsoft Font Subsetting – DLL Heap-Based Out-of-Bounds read in FixSbitSubTableFormat1
-----=====[ Background ]=====-----
Adobe Acrobat Reader DC for Windows – Heap-Based Out-of-Bounds read due to Malformed JP2 Stream
We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...
Adobe Acrobat Reader DC for Windows – Use-After-Free due to Malformed JP2 Stream
We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...
Adobe Acrobat Reader DC for Windows – Heap-Based Buffer Overflow While Processing Malformed PDF
We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...
Adobe Acrobat Reader DC for Windows – Static Buffer Overflow due to Malformed Font Stream
We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...
Adobe Acrobat Reader DC for Windows – Heap-Based Buffer Overflow due to Malformed Font Stream
We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...
Adobe Acrobat Reader DC for Windows – Heap-Based Buffer Overflow in CoolType.dll
We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...
Adobe Acrobat Reader DC for Windows – Heap-Based Memory Corruption due to Malformed TTF Font
We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...
Adobe Acrobat Reader DC for Windows – Heap-Based Buffer Overflow due to Malformed JP2 Stream
We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...
Adobe Acrobat Reader DC for Windows – free() of Uninitialized Pointer due to Malformed JBIG2Globals Stream
We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...
Adobe Acrobat Reader DC for Windows – Double Free due to Malformed JP2 Stream
We have observed the following crash in the latest version of Adobe Acrobat Reader DC for Windows, when opening a mal...
SugarCRM Enterprise 9.0.0 – Cross-Site Scripting
# Exploit Title: 0Day UnauthenticatedXSS SugarCRM Enterprise
Joomla! Component JS Jobs (com_jsjobs) 1.2.5 – ‘customfields.php’ SQL Injection
#Exploit Title: Joomla! component com_jsjobs - 'customfields.php' SQL Injection
WordPress Plugin Download Manager 2.5 – Cross-Site Request Forgery
# Exploit Title: CSRF vulnerabilities in WordPress Download Manager Plugin 2.5
TortoiseSVN 1.12.1 – Remote Code Execution
Document Title:
Microsoft Windows 10 AppXSvc Deployment Service – Arbitrary File Deletion
# Author : Abdelhamid Naceri
ABC2MTEX 1.6.1 – Command Line Stack Overflow
Exploit Title: ABC2MTEX 1.6.1 - Command Line Stack Overflow
ManageEngine opManager 12.3.150 – Authenticated Code Execution
#!/usr/bin/env python3
Agent Tesla Botnet – Arbitrary Code Execution
import requests
AZORult Botnet – SQL Injection
import requests
BSI Advance Hotel Booking System 2.0 – ‘booking_details.php Persistent Cross-Site Scripting
# Exploit Title:BSI Advance Hotel Booking System Persistent XSS
Cisco Adaptive Security Appliance – Path Traversal (Metasploit)
require 'msf/core'
UNA 10.0.0 RC1 – ‘polyglot.php’ Persistent Cross-Site Scripting
# Exploit Title: [UNA - 10.0.0-RC1 stored XSS vuln.]
Joomla! Component JS Support Ticket (com_jssupportticket) 1.1.6 – ‘ticketreply.php’ SQL Injection
#Exploit Title: Joomla! component com_jssupportticket - Authenticated SQL Injection
Joomla! Component JS Support Ticket (com_jssupportticket) 1.1.6 – ‘ticket.php’ Arbitrary File Deletion
#Exploit Title: Joomla! component com_jssupportticket - Authenticated Arbitrary File Deletion
osTicket 1.12 – Persistent Cross-Site Scripting via File Upload
# Exploit Title: osTicket-v1.12 Stored XSS via File Upload
osTicket 1.12 – Formula Injection
# Exploit Title: osTicket-v1.12 Formula Injection
osTicket 1.12 – Persistent Cross-Site Scripting
# Exploit Title: osTicket-v1.12 Stored XSS
Joomla! Component JS Jobs (com_jsjobs) 1.2.5 – ‘cities.php’ SQL Injection
#Exploit Title: Joomla! component com_jsjobs - SQL Injection