ApowerManager 3.1.7 – Phone Manager Remote Denial of Service (PoC)
#!/usr/bin/python
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 116
snapd < 2.37 (Ubuntu) - 'dirty_sock' Local Privilege Escalation (1)
#!/usr/bin/env python3
snapd < 2.37 (Ubuntu) - 'dirty_sock' Local Privilege Escalation (2)
#!/usr/bin/env python3
Rukovoditel Project Management CRM 2.4.1 – Cross-Site Scripting
####################################################################
NetworkSleuth 3.0 – ‘Name’ Denial of Service (PoC)
# -*- coding: utf-8 -*-
PilusCart 1.4.1 – ‘send’ SQL Injection
####################################################################
runc < 1.0-rc6 (Docker < 18.09.2) - Container Breakout (2)
## CVE-2019-5736 ##
OPNsense < 19.1.1 - Cross-Site Scripting
#####################################################################################################################...
BlogEngine.NET 3.3.6 – Directory Traversal / Remote Code Execution
# Exploit Title: BlogEngine.NET
LayerBB 1.1.2 – Cross-Site Scripting
# Exploit Title: LayerBB 1.1.2 - Cross-Site Scripting
Android – binder Use-After-Free via fdget() Optimization
This bug report describes *two* different issues in different branches of the
Android – binder Use-After-Free of VMA via race Between reclaim and munmap
The following bug report solely looks at the situation on the upstream master
Smoothwall Express 3.1-SP4 – Cross-Site Scripting
#####################################################################################################################...
IP-Tools 2.5 – ‘Log to file’ Local Buffer Overflow (SEH) (Egghunter)
#!/usr/bin/env python
River Past Cam Do 3.7.6 – Local Buffer Overflow (SEH)
# Exploit Title: River Past CamDo SEH Local Exploit
Coship Wireless Router 4.0.0.x/5.0.0.x – WiFi Password Reset
# Exploit Title: Coship Wireless Router – Wireless SSID Unauthenticated Password Reset
AirDroid 4.2.1.6 – Denial of Service
#!/bin/bash
FutureDj Pro 1.7.2.0 – Denial of Service
# Exploit Title: FutureDj Pro Local Dos Exploit
NordVPN 6.19.6 – Denial of Service (PoC)
# -*- coding: utf-8 -*-
IPFire 2.21 – Cross-Site Scripting
#####################################################################################################################...
Avast Anti-Virus < 19.1.2360 - Local Credentials Disclosure
# Exploit Title: Avast Anti-Virus Local Credentials Disclosure < 19.1.2360
River Past Video Cleaner 7.6.3 – Local Buffer Overflow (SEH)
# Exploit Title: River Past Video Cleaner Buffer Overflow (SEH)
MyBB Bans List 1.0 – Cross-Site Scripting
# Exploit Title: MyBB Bans List - Cross Site Scripting
VA MAX 8.3.4 – (Authenticated) Remote Code Execution
root@nippur:/home/c/src/nippur# cat vamax3.py
CentOS Web Panel 0.9.8.763 – Persistent Cross-Site Scripting
# Exploit Title: CentOS Web Panel 0.9.8.763 - Stored Cross-Site Scripting Vulnerability
Webiness Inventory 2.3 – ’email’ SQL Injection
===========================================================================================
osCommerce 2.3.4.1 – ‘currency’ SQL Injection
####################################################################
osCommerce 2.3.4.1 – ‘products_id’ SQL Injection
####################################################################
osCommerce 2.3.4.1 – ‘reviews_id’ SQL Injection
####################################################################
River Past Audio Converter 7.7.16 – Buffer Overflow (SEH)
# Exploit Title: River_Past_Audio_Converter - Buffer Overflow (SEH)
Skia – Incorrect Convexity Assumptions Leading to Buffer Overflows
I was looking into the root cause of https://bugs.chromium.org/p/chromium/issues/detail?id=850350. In that bug, due t...
BEWARD N100 H.264 VGA IP Camera M2.1.6 – RTSP Stream Disclosure
BEWARD N100 H.264 VGA IP Camera M2.1.6 Unauthenticated RTSP Stream Disclosure
BEWARD N100 H.264 VGA IP Camera M2.1.6 – Cross-Site Request Forgery (Add Admin)
BEWARD N100 H.264 VGA IP Camera M2.1.6 CSRF Add Admin Exploit
BEWARD N100 H.264 VGA IP Camera M2.1.6 – Remote Code Execution
BEWARD N100 H.264 VGA IP Camera M2.1.6 Root Remote Code Execution
BEWARD N100 H.264 VGA IP Camera M2.1.6 – Arbitrary File Disclosure
BEWARD N100 H.264 VGA IP Camera M2.1.6 Arbitrary File Disclosure
Device Monitoring Studio 8.10.00.8925 – Denial of Service (PoC)
#Exploit Title: Device Monitoring Studio 8.10.00.8925 - Denial of Service (PoC)
River Past Audio Converter 7.7.16 – Denial of Service (PoC)
# Exploit Title: River_Past_Audio_Converter(DoS)
devolo dLAN 550 duo+ Starter Kit – Cross-Site Request Forgery
devolo dLAN 550 duo+ Starter Kit Cross-Site Request Forgery
devolo dLAN 550 duo+ Starter Kit – Remote Code Execution
devolo dLAN 550 duo+ Starter Kit Remote Code Execution
Zyxel VMG3312-B10B DSL-491HNU-B1B v2 Modem – Cross-Site Request Forgery
# Exploit Title: Zyxel VMG3312-B10B DSL-491HNU-B1B v2 modem CSRF Exploit
OpenMRS Platform < 2.24.0 - Insecure Object Deserialization
Insecure Object Deserialization on the OpenMRS Platform
ResourceSpace 8.6 – ‘watched_searches.php’ SQL Injection
# Exploit Title: ResourceSpace = 5.0.0