Cisco Wireless Controller 3.6.10E – Cross-Site Request Forgery
# Product : Cisco Wireless Controller
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 102
WordPress Plugin Hybrid Composer 1.4.6 – Improper Access Restrictions
# Exploit Title: Wordpress Hybrid Composer
Trend Micro Deep Discovery Inspector IDS – Security Bypass
[+] Credits: John Page (aka hyp3rlinx)
Android 7 < 9 - Remote Code Execution
# Exploit Title: Android 7-9 - Remote Code Execution
Apple iMessage – DigitalTouch tap Message Processing Out-of-Bounds Read
The digital touch iMessage extension can read out of bounds if a malformed Tap message contains a color array that is...
Linux Kernel 4.10 < 5.1.17 - 'PTRACE_TRACEME' pkexec Local Privilege Escalation
// Linux 4.10 < 5.1.17 PTRACE_TRACEME local root (CVE-2019-13272)
BACnet Stack 0.8.6 – Denial of Service
# Exploit Title: BACnet Stack 0.8.6 - Denial of Service
Comtrend-AR-5310 – Restricted Shell Escape
# Exploit Title: Comtrend-AR-5310 - Restricted Shell Escape
Axway SecureTransport 5 – Unauthenticated XML Injection
# Title: Axway SecureTransport 5 - Unauthenticated XML Injection
MAPLE Computer WBT SNMP Administrator 2.0.195.15 – Remote Buffer Overflow (EggHunter)
# Exploit Title: MAPLE Computer WBT SNMP Administrator 2.0.195.15 - Remote Buffer Overflow (EggHunter)
fuel CMS 1.4.1 – Remote Code Execution (1)
# Exploit Title: fuel CMS 1.4.1 - Remote Code Execution (1)
Web Ofisi E-Ticaret 3 – ‘a’ SQL Injection
# Exploit Title: Web Ofisi E-Ticaret 3 - 'a' SQL Injection
Web Ofisi Platinum E-Ticaret 5 – ‘q’ SQL Injection
# Exploit Title: Web Ofisi Platinum E-Ticaret 5 - 'q' SQL Injection
Web Ofisi Emlak 2 – ‘ara’ SQL Injection
# Exploit Title: Web Ofisi Emlak 2 - 'ara' SQL Injection
Web Ofisi Emlak 3 – ’emlak_durumu’ SQL Injection
# Exploit Title: Web Ofisi Emlak 3 - 'emlak_durumu' SQL Injection
Web Ofisi Firma Rehberi 1 – ‘il’ SQL Injection
# Exploit Title: Web Ofisi Firma Rehberi 1 - 'il' SQL Injection
Web Ofisi Rent a Car 3 – ‘klima’ SQL Injection
# Exploit Title: Web Ofisi Rent a Car 3 - 'klima' SQL Injection
Web Ofisi Firma 13 – ‘oz’ SQL Injection
# Exploit Title: Web Ofisi Firma 13 - 'oz' SQL Injection
REDCap < 9.1.2 - Cross-Site Scripting
# Exploit Title: REDCap < 9.1.2 - Cross-Site Scripting
Docker – Container Escape
# On the host
Microsoft Windows 10 1903/1809 – RPCSS Activation Kernel Security Callback Privilege Escalation
Windows: RPCSS Activation Kernel Security Callback EoP
WordPress Plugin OneSignal 1.17.5 – ‘subdomain’ Persistent Cross-Site Scripting
# Exploit Title: WordPress Plugin OneSignal 1.17.5 - Persistent Cross-Site Scripting
MAPLE Computer WBT SNMP Administrator 2.0.195.15 – Remote Buffer Overflow
# Exploit Title: MAPLE Computer WBT SNMP Administrator 2.0.195.15 - Remote Buffer Overflow
WinMPG iPod Convert 3.0 – ‘Register’ Denial of Service
# Exploit Title: WinMPG iPod Convert 3.0 - 'Register' Denial of Service
Oracle Siebel CRM 19.0 – Persistent Cross-Site Scripting
# Exploit Title: Oracle Siebel CRM 19.0 - Persistent Cross-Site Scripting
R 3.4.4 (Windows 10 x64) – Buffer Overflow SEH (DEP/ASLR Bypass)
#!/usr/bin/python
CentOS Control Web Panel 0.9.8.836 – Authentication Bypass
# Exploit Title: CWP (CentOS Control Web Panel) < 0.9.8.847 Bypass Login
CentOS Control Web Panel 0.9.8.836 – Privilege Escalation
//====================================================================\\
CentOS Control Web Panel 0.9.8.838 – User Enumeration
# Exploit Title: CWP (CentOS Control Web Panel) < 0.9.8.848 User Enumeration via HTTP Response Message
DameWare Remote Support 12.0.0.509 – ‘Host’ Buffer Overflow (SEH)
#!/usr/bin/env python
Microsoft Compiled HTML Help / Uncompiled .chm File – XML External Entity Injection
[+] Credits: John Page (aka hyp3rlinx)
Streamripper 2.6 – ‘Song Pattern’ Buffer Overflow
#!/usr/bin/python
Netgear WiFi Router JWNR2010v5 / R6080 – Authentication Bypass
# Exploit Title: NETGEAR WiFi Router R6080 - Security Questions Answers Disclosure
CISCO Small Business 200 / 300 / 500 Switches – Multiple Vulnerabilities
# Exploit Title: CISCO Small Business 200, 300, 500 Switches Multiple Vulnerabilities.
Android 7 – 9 VideoPlayer – ‘ihevcd_parse_pps’ Out-of-Bounds Write
CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec ...
Microsoft Windows Remote Desktop – ‘BlueKeep’ Denial of Service (Metasploit)
# Exploit Title: Bluekeep Denial of Service (metasploit module)
FlightPath < 4.8.2 / < 5.0-rc2 - Local File Inclusion
# Exploit Title: FlightPath < 4.8.2 & < 5.0-rc2 - Local File Inclusion
Tenda D301 v2 Modem Router – Persistent Cross-Site Scripting
# Exploit Title: tenda D301 v2 modem router stored xss CVE-2019-13492
MyT Project Management 1.5.1 – User[username] Persistent Cross-Site Scripting
# Exploit Title: MyT Project Management - User[username] Stored Cross Site
Sahi Pro 8.0.0 – Remote Command Execution
# Exploit Title: Sahi Pro V8.0.0 - Unauthenticated Remote Command Execution
Jenkins Dependency Graph View Plugin 0.13 – Persistent Cross-Site Scripting
# Exploit Title: Persistent XSS - Dependency Graph View Plugin(v0.13)
Citrix SD-WAN Appliance 10.2.2 – Authentication Bypass / Remote Command Execution
# Exploit Title: Citrix SD-WAN Appliance 10.2.2 Auth Bypass and Remote Command Execution
Microsoft Font Subsetting – DLL Heap Corruption in ComputeFormat4CmapData
-----=====[ Background ]=====-----
SNMPc Enterprise Edition 9/10 – Mapping Filename Buffer Overflow
#!/usr/bin/python