Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 103

Sitecore 9.0 rev 171002 – Persistent Cross-Site Scripting

# Exploit Title: Stored Cross Site Scripting (XSS) in Sitecore 9.0 rev 171002

2019-07-11 Owais Mehtab webapps

FreeBSD 12.0 – ‘fd’ Local Privilege Escalation

#!/bin/sh

2019-07-10 gr4yf0x local

Siemens TIA Portal – Remote Command Execution

##

2019-07-10 Joseph Bingham remote

Microsoft Windows – Font Subsetting DLL Heap-Based Out-of-Bounds Read in MergeFonts

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Mozilla Spidermonkey – Unboxed Objects Uninitialized Memory Access

For constructors, Spidermonkey implements a "definite property analysis" [1] to compute which properties will definit...

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Stack Corruption in OpenType Font Handling due to Out-of-Bounds cubeStackDepth

----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Stack Corruption in OpenType Font Handling Due to Negative cubeStackDepth

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Stack Corruption in OpenType Font Handling Due to Negative nAxes

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Stack-Based Buffer Overflow in do_set_weight_vector_cube for Large nAxes

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Use of Uninitialized Memory While Freeing Resources in var_loadavar

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Interpreter Stack Underflow in OpenType Font Handling Due to Missing CHKUFLOW

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Stack Corruption in OpenType Font Handling Due to Incorrect Handling of blendArray

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Heap-Based Buffer Overflow in OpenType Font Handling in readEncoding

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Heap-Based Buffer Overflow in OpenType Font Handling in readFDSelect

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Heap-Based Buffer Overflow in OpenType Font Handling in readCharset

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Heap-Based Buffer Overflow Due to Integer Overflow in readTTCDirectory

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Heap-Based Out-of-Bounds Read/Write in OpenType Font Handling Due to Unbounded iFD

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Heap-Based Buffer Overflow in OpenType Font Handling in readStrings

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Stack Corruption in OpenType Font Handling While Processing CFF Blend DICT Operator

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Out-of-Bounds Read in OpenType Font Handling Due to Undefined FontName Index

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Multiple Bugs in OpenType Font Handling Related to the “post” Table

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – NULL Pointer Dereferences in OpenType Font Handling While Accessing Empty dynarrays

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Heap-Based Out-of-Bounds Read/Write in OpenType Font Handling Due to Empty ROS Strings

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Firefox 67.0.4 – Denial of Service

Loading please wait

2019-07-09 Tejas Ajay Naik dos

Karenderia Multiple Restaurant System 5.3 – SQL Injection

===========================================================================================

2019-07-08 Mehmet EMIROGLU webapps

WordPress Plugin Like Button 1.6.0 – Authentication Bypass

Exploit Title: WP Like Button 1.6.0 - Auth Bypass

2019-07-08 Benjamin Lim webapps

Apache mod_ssl < 2.8.7 OpenSSL - 'OpenFuckV2.c' Remote Buffer Overflow (2)

#include

2019-07-07 Brian Peters remote

Karenderia Multiple Restaurant System 5.3 – Local File Inclusion

===========================================================================================

2019-07-05 Mehmet EMIROGLU webapps

Microsoft Exchange 2003 – base64-MIME Remote Code Execution

# Python 2.7 (included with ImmunityDBG)

2019-07-05 Charles Truscott remote

Symantec DLP 15.5 MP1 – Cross-Site Scripting

# Exploit Title: Persistent XSS on Symantec DLP

2019-07-03 Chapman Schleiss webapps

Serv-U FTP Server – prepareinstallation Privilege Escalation (Metasploit)

##

2019-07-03 Metasploit local

Apache Tomcat – CGIServlet enableCmdLineArguments Remote Code Execution (Metasploit)

##

2019-07-03 Metasploit remote

Centreon 19.04 – Remote Code Execution

#!/usr/bin/python

2019-07-02 Askar webapps

Mac OS X TimeMachine – ‘tmdiagnose’ Command Injection Privilege Escalation (Metasploit)

##

2019-07-02 Metasploit local

WorkSuite PRM 2.4 – ‘password’ SQL Injection

===========================================================================================

2019-07-01 Mehmet EMIROGLU webapps

CiuisCRM 1.6 – ‘eventType’ SQL Injection

===========================================================================================

2019-07-01 Mehmet EMIROGLU webapps

Linux Mint 18.3-19.1 – ‘yelp’ Command Injection (Metasploit)

##

2019-07-01 b1ack0wl remote

Varient 1.6.1 – SQL Injection

===========================================================================================

2019-07-01 Mehmet EMIROGLU webapps

PowerPanel Business Edition – Cross-Site Scripting

# Exploit Title: PowerPanel Business Edition - Stored Cross Site Scripting (SNMP trap receivers)

2019-07-01 Joey Lane webapps

ZoneMinder 1.32.3 – Cross-Site Scripting

# Exploit Title: ZoneMinder 1.32.3 - Stored Cross Site Scripting (filters)

2019-07-01 Joey Lane webapps

SAP Crystal Reports – Information Disclosure

# Exploit Title: [Sensitive Information Disclosure in SAP Crystal Reports]

2019-07-01 Mohamed M.Fouad webapps

Sahi pro 8.x – Directory Traversal

# Exploit Title: Sahi pro (8.x) Directory traversal

2019-07-01 Operat0r webapps

CyberPanel 1.8.4 – Cross-Site Request Forgery

# Title: CyberPanel Administrator Account Takeover

2019-07-01 Bilgi Birikim Sistemleri webapps

FaceSentry Access Control System 6.4.8 – Remote Command Injection

FaceSentry Access Control System 6.4.8 Remote Command Injection

2019-07-01 LiquidWorm webapps

FaceSentry Access Control System 6.4.8 – Cross-Site Request Forgery

FaceSentry Access Control System 6.4.8 Cross-Site Request Forgery

2019-07-01 LiquidWorm webapps

FaceSentry Access Control System 6.4.8 – Remote Root Exploit

#!/usr/bin/env python

2019-07-01 LiquidWorm webapps

FaceSentry Access Control System 6.4.8 – Remote SSH Root

#!/usr/bin/env python

2019-07-01 LiquidWorm remote

LibreNMS 1.46 – ‘addhost’ Remote Code Execution

#!/usr/bin/python

2019-06-28 Askar webapps

Mozilla Spidermonkey – IonMonkey ‘Array.prototype.pop’ Type Confusion

The following program (found through fuzzing and manually modified) crashes Spidermonkey built from the current beta ...

2019-06-26 Google Security Research dos

Nagios XI 5.5.6 – Magpie_debug.php Root Remote Code Execution (Metasploit)

##

2019-06-26 Metasploit remote