Visual Voicemail for iPhone – IMAP NAMESPACE Processing Use-After-Free
Visual Voicemail (VVM) is a feature of mobile devices that allows voicemail to be read in an email-like format. Carri...
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 106
Microsoft Windows 10 (17763.379) – Install DLL
edit: Figure out how this works for yourself. I can't be bothered. It's a really hard race, doubt anyone will be able...
Microsoft Windows – AppX Deployment Service Local Privilege Escalation (2)
There is still a vuln in the code triggered by CVE-2019-0841
BlueStacks 4.80.0.1060 – Denial of Service (PoC)
# -*- coding: utf-8 -*-
Zoho ManageEngine ServiceDesk Plus < 10.5 - Improper Access Restrictions
# Exploit Title: Zoho ManageEngine ServiceDesk Plus < 10.5 Incorrect Access Control
Zoho ManageEngine ServiceDesk Plus 9.3 – Cross-Site Scripting
# Exploit Title: Zoho ManageEngine ServiceDesk Plus 9.3 Cross-Site Scripting
AUO Solar Data Recorder < 1.3.0 - 'addr' Cross-Site Scripting
# Exploit Title: AUO Solar Data Recorder - Stored XSS
Carel pCOWeb < B1.2.1 - Cross-Site Scripting
# Exploit Title: Carel pCOWeb - Stored XSS
Carel pCOWeb < B1.2.1 - Credentials Disclosure
# Exploit Title: Carel pCOWeb - Unprotected Storage of Credentials
RarmaRadio 2.72.3 – ‘Server’ Denial of Service (PoC)
#Exploit Title: RarmaRadio 2.72.3 - 'Server' Denial of Service (PoC)
RarmaRadio 2.72.3 – ‘Username’ Denial of Service (PoC)
#Exploit Title: RarmaRadio 2.72.3 - 'Username' Denial of Service (PoC)
TapinRadio 2.11.6 – ‘Address’ Denial of Service (PoC)
#Exploit Title: TapinRadio 2.11.6 - 'Address' Denial of Service (PoC)
TapinRadio 2.11.6 – ‘Uername’ Denial of Service (PoC)
#Exploit Title: TapinRadio 2.11.6 - 'Uername' Denial of Service (PoC)
Horde Webmail 5.2.22 – Multiple Vulnerabilities
# Title: Horde Webmail - XSS + CSRF to SQLi, RCE, Stealing Emails
Microsoft Windows (x86/x64) – ‘Error Reporting’ Discretionary Access Control List / Local Privilege Escalation
EDIT: Apparently this was patched earlier this month.. so whatever.
Microsoft Windows (x86) – Task Scheduler’ .job’ Import Arbitrary Discretionary Access Control List Write / Local Privilege Escalation
Task Scheduler .job import arbitrary DACL write
Microsoft Internet Explorer 11 – Sandbox Escape
Inject into IE11.
Moodle Jmol Filter 6.1 – Directory Traversal / Cross-Site Scripting
# Exploit Title: Moodle filter_jmol multiple vulnerabilities (Directory Traversal and XSS)
TP-LINK TL-WR840N v5 00000005 – Cross-Site Scripting
# Exploit Title: TL-WR840N v5 00000005
Deluge 1.3.15 – ‘URL’ Denial of Service (PoC)
#Exploit Title: Deluge 1.3.15 - 'URL' Denial of Service (PoC)
Deluge 1.3.15 – ‘Webseeds’ Denial of Service (PoC)
#Exploit Title: Deluge 1.3.15 - 'Webseeds' Denial of Service (PoC)
Oracle CTI Web Service – ‘EBS_ASSET_HISTORY_OPERATIONS’ XML Entity Injection
# Exploit Title: Oracle CTI Web Service XML Entity Exp.
WordPress Plugin WPGraphQL 0.2.3 – Multiple Vulnerabilities
#!/usr/bin/env python
Brocade Network Advisor 14.4.1 – Unauthenticated Remote Code Execution
Exploit Title: Brocade Network Advisor - Unauthenticated Remote Code Execution
Apple macOS < 10.14.5 / iOS < 12.3 DFG JIT Compiler - 'HasIndexedProperty' Use-After-Free
See also https://bugs.chromium.org/p/project-zero/issues/detail?id=1699 for a similar issue.
Apple macOS < 10.14.5 / iOS < 12.3 JavaScriptCore - Loop-Invariant Code Motion (LICM) in DFG JIT Leaves Stack Variable Uninitialized
While fuzzing JavaScriptCore, I encountered the following (modified and commented) JavaScript program which crashes j...
Apple macOS < 10.14.5 / iOS < 12.3 JavaScriptCore - AIR Optimization Incorrectly Removes Assignment to Register
While fuzzing JavaScriptCore, I encountered the following JavaScript program which crashes jsc from current HEAD (git...
Huawei eSpace Meeting 1.1.11.103 – ‘cenwpoll.dll’ SEH Buffer Overflow (Unicode)
#!/usr/bin/env python
Huawei eSpace 1.1.11.103 – DLL Hijacking
Huawei eSpace Desktop DLL Hijacking Vulnerability
Huawei eSpace 1.1.11.103 – Image File Format Handling Buffer Overflow
Huawei eSpace Meeting Image File Format Handling Buffer Overflow Vulnerability
Huawei eSpace 1.1.11.103 – ‘ContactsCtrl.dll’ / ‘eSpaceStatusCtrl.dll’ ActiveX Heap Overflow
Huawei eSpace Meeting ContactsCtrl.dll and eSpaceStatusCtrl.dll ActiveX Heap Overflow
eLabFTW 1.8.5 – Arbitrary File Upload / Remote Code Execution
# Exploit Title : eLabFTW 1.8.5 'EntityController' Arbitrary File Upload / RCE
Encrypt PDF 2.3 – Denial of Service (PoC)
# -*- coding: utf-8 -*-
PCL Converter 2.7 – Denial of Service (PoC)
# -*- coding: utf-8 -*-
docPrint Pro 8.0 – Denial of Service (PoC)
# -*- coding: utf-8 -*-
AbsoluteTelnet 10.16 – ‘License name’ Denial of Service (PoC)
#Exploit Title: AbsoluteTelnet 10.16 - 'License name' Denial of Service (PoC)
BulletProof FTP Server 2019.0.0.50 – ‘DNS Address’ Denial of Service (PoC)
#Exploit Title: BulletProof FTP Server 2019.0.0.50 - 'DNS Address' Denial of Service (PoC)
BulletProof FTP Server 2019.0.0.50 – ‘Storage-Path’ Denial of Service (PoC)
#Exploit Title: BulletProof FTP Server 2019.0.0.50 - 'Storage-Path' Denial of Service (PoC)
Sandboxie 5.30 – ‘Programs Alerts’ Denial of Service (PoC)
# -*- coding: utf-8 -*-
CEWE Photoshow 6.4.3 – ‘Password’ Denial of Service (PoC)
# -*- coding: utf-8 -*-
CEWE Photo Importer 6.4.3 – ‘.jpg’ Denial of Service (PoC)
# -*- coding: utf-8 -*-
Iperius Backup 6.1.0 – Privilege Escalation
Exploit Author: bzyo