MyVideoConverter Pro 3.14 – Denial of Service
# Exploit Title: MyVideoConverter Pro 3.14 Denial of Service
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 117
SuiteCRM 7.10.7 – ‘parentTab’ SQL Injection
####################################################################
SuiteCRM 7.10.7 – ‘record’ SQL Injection
####################################################################
River Past Ringtone Converter 2.7.6.1601 – Denial of Service (PoC)
# Exploit Title: River Past Ringtone Converter v2.7.6.1601 - Denial of Service (PoC)
SpotAuditor 3.6.7 – ‘Base64 Encrypted Password’ Denial of Service (PoC)
# Exploit Title: SpotAuditor v3.6.7 - Denial of Service (PoC)
TaskInfo 8.2.0.280 – Denial of Service (PoC)
# Exploit Title: TaskInfo v8.2.0.280 - Denial of Service (PoC)
Nessus 8.2.1 – Cross-Site Scripting
#####################################################################################################################...
pfSense 2.4.4-p1 – Cross-Site Scripting
#####################################################################################################################...
PassFab Excel Password Recovery 8.3.1 – SEH Local Exploit
# Exploit Title: PassFab Excel Password Recovery SEH Local Exploit
Remote Process Explorer 1.0.0.16 – Buffer Overflow (PoC) (SEH Overwrite)
# Exploit Title: Remote Process Explorer v1.0.0.16 - Denial of Service (PoC) and SEH overwritten Crash PoC
SureMDM < 2018-11 Patch - Local / Remote File Inclusion
# Exploit Title: SureMDM LFI/RFI (Prior to 2018-11 Patch)
R 3.5.0 – Local Buffer Overflow (SEH)
#!/usr/bin/python
Anyburn 4.3 – ‘Convert image to file format’ Denial of Service
#!/usr/bin/python
UltraISO 9.7.1.3519 – ‘Output FileName’ Local Buffer Overflow (SEH)
#!/usr/bin/python
Advanced Host Monitor 11.90 Beta – ‘Registration number’ Denial of Service (PoC)
# Exploit Title: Advanced Host Monitor 11.90 Beta - 'Registration number' Denial of Service (PoC)
AMAC Address Change 5.4 – Denial of Service (PoC)
# Exploit Title: a-Mac Address Change v5.4 - Denial of Service (PoC)
ASPRunner Professional 6.0.766 – Denial of Service (PoC)
# Exploit Title: ASPRunner Professional v6.0.766 - Denial of Service (PoC)
FlexHEX 2.46 – Buffer Overflow (PoC) (SEH Overwrite)
# Exploit Title: FlexHEX v2.46 - Denial of Service (PoC) and SEH overwritten Crash PoC
LanHelper 1.74 – Denial of Service (PoC)
# Exploit Title: LanHelper v1.74 - Denial of Service (PoC)
macOS XNU – Copy-on-Write Behaviour Bypass via Partial-Page Truncation of File
XNU has various interfaces that permit creating copy-on-write copies of data
macOS < 10.14.3 / iOS < 12.1.3 - Arbitrary mach Port Name Deallocation in XPC Services due to Invalid mach Message Parsing in _xpc_serializer_unpack
_xpc_serializer_unpack in libxpc parses mach messages which contain xpc messages.
macOS < 10.14.3 / iOS < 12.1.3 - Sandbox Escapes due to Type Confusions and Memory Safety Issues in iohideventsystem
It's possible that this should be two separate issues but I'm filing it as one as I'm still understanding
macOS < 10.14.3 / iOS < 12.1.3 XNU - 'vm_map_copy' Optimization which Requires Atomicity isn't Atomic
vm_map_copyin_internal in vm_map.c converts a region of a vm_map into "copied in" form, constructing a vm_map_copy
macOS < 10.14.3 / iOS < 12.1.3 - Kernel Heap Overflow in PF_KEY due to Lack of Bounds Checking when Retrieving Statistics
Inspired by Ned Williamsons's fuzzer I took a look at the netkey code.
Rukovoditel Project Management CRM 2.4.1 – ‘lists_id’ SQL Injection
#################################################################
Advanced File Manager 3.4.1 – Denial of Service (PoC)
# Exploit Title: Advanced File Manager v3.4.1 - Denial of Service (PoC)
iOS/macOS 10.13.6 – ‘if_ports_used_update_wakeuuid()’ 16-byte Uninitialized Kernel Stack Disclosure
macOS 10.13.4 introduced the file bsd/net/if_ports_used.c, which defines sysctls for inspecting
IP-Tools 2.50 – Local Buffer Overflow (PoC)
# Exploit Title: IP TOOLS v2.50 - Denial of Service (PoC) and SEH overwritten Crash PoC
Necrosoft DIG 0.4 – Buffer Overflow (PoC) (SEH Overwrite)
# Exploit Title: Necrosoft DIG v0.4 - Denial of Service (PoC) SEH overwritten Crash PoC
PDF Signer 3.0 – Server-Side Template Injection leading to Remote Command Execution (via Cross-Site Request Forgery Cookie)
# Exploit Title: PDF Signer v3.0 - SSTI to RCE via CSRF Cookie
MiniUPnPd 2.1 – Out-of-Bounds Read
#!/usr/bin/python3
HTML5 Video Player 1.2.5 – Local Buffer Overflow (Non SEH)
#!/usr/bin/python
MySQL User-Defined (Linux) (x86) – ‘sys_exec’ Local Privilege Escalation
# Exploit Title: MySQL User-Defined (Linux) x32 / x86_64 sys_exec function local privilege escalation exploit
CloudMe Sync 1.11.2 Buffer Overflow – WoW64 (DEP Bypass)
# Exploit Title: CloudMe Sync v1.11.2 Buffer Overflow - WoW64 - (DEP Bypass)
Rundeck Community Edition < 3.0.13 - Persistent Cross-Site Scripting
# Exploit Title: Rundeck Community Edition before 3.0.13 Multiple Stored
WordPress Plugin Ad Manager WD 1.0.11 – Arbitrary File Download
Exploit Title: WordPress Plugin ad manager wd v1.0.11 - Arbitrary File
AirTies Air5341 Modem 1.0.0.12 – Cross-Site Request Forgery
# Exploit Title: AirTies Air5341 1.0.0.12 Modem CSRF Exploit & PoC
LogonBox Limited / Hypersocket Nervepoint Access Manager – (Unauthenticated) Insecure Direct Object Reference
# Exploit Title: Access Manager Unauthenticated Insecure Direct Object Reference (IDOR)
Easy Video to iPod Converter 1.6.20 – Buffer Overflow (SEH)
# Exploit Title: Easy Video to iPod Converter - Local Buffer Overflow (SEH)
CMSsite 1.0 – ‘cat_id’ SQL Injection
# Exploit Title: CMSsite 1.0 - SQL injection
CMSsite 1.0 – ‘search’ SQL Injection
# Exploit Title: CMSsite 1.0 - 'search' SQL injection
Sricam gSOAP 2.8 – Denial of Service
#!/bin/bash
Cisco RV300 / RV320 – Information Disclosure
# Exploit Title: 6coRV Exploit
Cisco Firepower Management Center 6.2.2.2 / 6.2.3 – Cross-Site Scripting
# Exploit Title: Cisco Firepower Management Center Cross-Site Scripting (XSS) Vulnerability
R 3.4.4 XP SP3 – Buffer Overflow (Non SEH)
#!/usr/bin/python
Newsbull Haber Script 1.0.0 – ‘search’ SQL Injection
####################################################################
BEWARD Intercom 2.3.1 – Credentials Disclosure
#!/usr/bin/env python
Care2x 2.7 (HIS) Hospital Information System – Multiple SQL Injection
# Exploit Title: Care2x 2.7 (HIS) Hospital Information system - Multiples SQL Injection
Faleemi Desktop Software 1.8 – Local Buffer Overflow (SEH) (DEP Bypass)
#!/usr/bin/python