JioFi 4G M2S 1.0.2 – ‘mask’ Cross-Site Scripting
# Exploit Title: cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST p...
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 109
JioFi 4G M2S 1.0.2 – Denial of Service
# Exploit Title: cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices allows a DoS (Hang) via the mask POST parameter
osTicket 1.11 – Cross-Site Scripting / Local File Inclusion
# Exploit Title: osTicket v1.11 - Cross-Site Scripting to Local File
AnMing MP3 CD Burner 2.0 – Denial of Service (PoC)
# Exploit Title: AnMing MP3 CD Burner 2.0 Local Dos Exploit
Lavavo CD Ripper 4.20 – ‘License Activation Name’ Buffer Overflow (SEH)
# Exploit Title: Lavavo CD Ripper 4.20 Local Seh Exploit
VirtualBox 6.0.4 r128413 – COM RPC Interface Code Injection Host Privilege Escalation
VirtualBox: COM RPC Interface Code Injection Host EoP
Google Chrome 72.0.3626.121 / 74.0.3725.0 – ‘NewFixedDoubleArray’ Integer Overflow
VULNERABILITY DETAILS
Ross Video DashBoard 8.5.1 – Insecure Permissions
Ross Video DashBoard 8.5.1 Insecure Permissions
Linux – Missing Locking in Siemens R3964 Line Discipline Race Condition
The Siemens R3964 line discipline code in drivers/tty/n_r3964.c has a few races
Linux – ‘page->_refcount’ Overflow via FUSE
Linux: page->_refcount overflow via FUSE with ~140GiB RAM usage
Ease Audio Converter 5.30 – ‘.mp4’ Denial of Service (PoC)
# Exploit Title: Ease Audio Converter 5.30 Audio Cutter Dos Exploit
WordPress Plugin Contact Form Builder 1.0.67 – Cross-Site Request Forgery / Local File Inclusion
# Exploit Title: Contact Form Builder [CSRF → LFI]
LabF nfsAxe 3.7 Ping Client – ‘Host IP’ Buffer Overflow (Direct Ret)
#!/usr/bin/python
74CMS 5.0.1 – Cross-Site Request Forgery (Add New Admin User)
# Exploit Title: 74CMS v5.0.1 has a CSRF vulnerability to add a new admin user
Msvod 10 – Cross-Site Request Forgery (Change User Information)
# Exploit Title: Msvod v10 has a CSRF vulnerability to change user information
UliCMS 2019.2 / 2019.1 – Multiple Cross-Site Scripting
# Exploit Title: UliCMS - 2019.2 , 2019.1 - Multiple Cross-Site Scripting
Oracle Business Intelligence 11.1.1.9.0 / 12.2.1.3.0 / 12.2.1.4.0 – Directory Traversal
# Exploit Title: Directory traversal in Oracle Business Intelligence
Oracle Business Intelligence / XML Publisher 11.1.1.9.0 / 12.2.1.3.0 / 12.2.1.4.0 – XML External Entity Injection
# Exploit Title: XXE in Oracle Business Intelligence and XML Publisher
Evernote 7.9 – Code Execution via Path Traversal
Exploit Title: Code execution via path traversal
Netwide Assembler (NASM) 2.14rc15 – NULL Pointer Dereference (PoC)
# Exploit Title: Netwide Assembler (NASM) 2.14rc15 NULL Pointer Dereference (PoC)
MailCarrier 2.51 – POP3 ‘RETR’ SEH Buffer Overflow
#!/usr/bin/python
ASUS HG100 – Denial of Service
# Exploit Title:ASUS HG100 devices denial of service(DOS) via IPv4 packets/SlowHTTPDOS
DHCP Server 2.5.2 – Denial of Service (PoC)
#Exploit Title: DHCP Server 2.5.2 - Denial of Service (PoC)
Oracle Java Runtime Environment – Heap Corruption During TTF font Rendering in sc_FindExtrema4
A heap corruption was observed in Oracle Java Runtime Environment version 8u202 (latest at the time of this writing) ...
Oracle Java Runtime Environment – Heap Corruption During TTF font Rendering in GlyphIterator::setCurrGlyphID
A heap corruption was observed in Oracle Java Runtime Environment version 8u202 (latest at the time of this writing) ...
Zyxel ZyWall 310 / ZyWall 110 / USG1900 / ATP500 / USG40 – Login Page Cross-Site Scripting
# Exploit Title: Reflected XSS on Zyxel login pages
Zoho ManageEngine ADManager Plus 6.6 (Build < 6659) - Privilege Escalation
# Exploit Title: Zoho ManageEngine ADManager Plus 6.6 (Build < 6659) Privilege Escalation
PCHelpWare V2 1.0.0.5 – ‘SC’ Denial of Service (PoC)
# -*- coding: utf-8 -*-
PCHelpWare V2 1.0.0.5 – ‘Group’ Denial of Service (PoC)
# -*- coding: utf-8 -*-
Joomla! Core 1.5.0 – 3.9.4 – Directory Traversal / Authenticated Arbitrary File Deletion
# Exploit Title: Joomla Core (1.5.0 through 3.9.4) - Directory Traversal && Authenticated Arbitrary File Deletion
AdminExpress 1.2.5 – ‘Folder Path’ Denial of Service (PoC)
# -*- coding: utf-8 -*-
Microsoft Windows 10 1809 / 1709 – CSRSS SxSSrv Cached Manifest Privilege Escalation
Windows: CSRSS SxSSrv Cached Manifest EoP
Microsoft Windows 10 1809 – LUAFV Delayed Virtualization MAXIMUM_ACCESS DesiredAccess Privilege Escalation
Windows: LUAFV Delayed Virtualization MAXIMUM_ACCESS DesiredAccess EoP
Microsoft Windows 10 1809 – LUAFV Delayed Virtualization Cross Process Handle Duplication Privilege Escalation
Windows: LUAFV Delayed Virtualization Cross Process Handle Duplication EoP
Microsoft Windows 10 1809 – LUAFV LuafvCopyShortName Arbitrary Short Name Privilege Escalation
Windows: LUAFV LuafvCopyShortName Arbitrary Short Name EoP
Microsoft Windows 10 1809 – LUAFV NtSetCachedSigningLevel Device Guard Bypass
Windows: LUAFV NtSetCachedSigningLevel Device Guard Bypass
Microsoft Windows 10 1809 – LUAFV Delayed Virtualization Cache Manager Poisoning Privilege Escalation
Windows: LUAFV Delayed Virtualization Cache Manager Poisoning EoP
Microsoft Windows 10 1809 – LUAFV PostLuafvPostReadWrite SECTION_OBJECT_POINTERS Race Condition Privilege Escalation
Windows: LUAFV PostLuafvPostReadWrite SECTION_OBJECT_POINTERS Race Condition EoP
DirectAdmin 1.561 – Multiple Vulnerabilities
# Title: DirectAdmin Multiple Vulnerabilities to Takeover the Server
MailCarrier 2.51 – ‘RCPT TO’ Buffer Overflow
#!/usr/bin/python
RemoteMouse 3.008 – Arbitrary Remote Command Execution
# Exploit Title: Remote Mouse 3.008 - Failure to Authenticate