SoftX FTP Client 3.3 – Denial of Service (PoC)
# Exploit Title: SoftX FTP Client 3.3 - Denial of Service (PoC)
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 133
Joomla! Component Auction Factory 4.5.5 – ‘filter_order’ SQL Injection
# Exploit Title: Joomla! Component Auction Factory 4.5.5 - 'filter_order' SQL Injection
Beyond Remote 2.2.5.3 – Denial of Service (PoC)
# Exploit Title: Beyond Remote 2.2.5.3 - Denial of Service (PoC)
RICOH MP C6003 Printer – Cross-Site Scripting
# Exploit Title: RICOH MP C6003 Printer - Cross-Site Scripting
WebRTC – VP9 Processing Use-After-Free
There is a use-after-free in VP9 processing in WebRTC. In the method RtpFrameReferenceFinder::ManageFrameVp9 the foll...
WebRTC – FEC Out-of-Bounds Read
There is an out-of-bounds read in FEC processing in WebRTC. If a very short RTP packet is received, FEC will assume t...
Collectric CMU 1.0 – ‘lang’ Hard-Coded Credentials / SQL injection
# Exploit Title: Collectric CMU 1.0 - 'lang' SQL injection
NICO-FTP 3.0.1.19 – Buffer Overflow (SEH)
# Exploit Title: NICO-FTP 3.0.1.19 - Buffer Overflow (SEH)
Microsoft Windows – ‘CiSetFileCache’ WDAC Security Feature Bypass TOCTOU
Windows: CiSetFileCache TOCTOU CVE-2017-11830 Variant WDAC Security Feature Bypass
Microsoft Windows – Double Dereference in NtEnumerateKey Elevation of Privilege
Windows: Double Dereference in NtEnumerateKey Elevation of Privilege
Roundcube rcfilters plugin 2.1.6 – Cross-Site Scripting
# Exploit Title: Roundcube rcfilters plugin 2.1.6 - Cross-Site Scripting
WordPress Plugin Wechat Broadcast 1.2.0 – Local File Inclusion
# Exploit Title: WordPress Plugin Wechat Broadcast 1.2.0 - Local File Inclusion
WordPress Plugin Localize My Post 1.0 – Local File Inclusion
# Exploit Title: WordPress Plugin Localize My Post 1.0 - Local File Inclusion
LG SuperSign EZ CMS 2.5 – Local File Inclusion
# Exploit Title: LG SuperSign EZ CMS 2.5 - Local File Inclusion
NUUO NVRMini2 3.8 – ‘cgi_system’ Buffer Overflow (Enable Telnet)
# Exploit Title: NUUO NVRMini2 3.8 - 'cgi_system' Buffer Overflow (Enable Telnet)
Ubisoft Uplay Desktop Client 63.0.5699.0 – Remote Code Execution
# Exploit Title: Ubisoft Uplay Desktop Client 63.0.5699.0 - Remote Code Execution
Microsoft Edge Chakra – ‘PathTypeHandlerBase::SetAttributesHelper’ Type Confusion
Here's a snippet of PathTypeHandlerBase::SetAttributesHelper.
Microsoft Edge Chakra JIT – ‘localeCompare’ Type Confusion
A call to the String.prototype.localeCompare method can be inlineed when it only takes one argument. There are two ve...
WordPress Plugin Arigato Autoresponder and Newsletter 2.5 – Blind SQL Injection / Reflected Cross-Site Scripting
Title: Blind SQL injection and multiple reflected XSS vulnerabilities in Wordpress Plugin Arigato Autoresponder and N...
XAMPP Control Panel 3.2.2 – Denial of Service (PoC)
# Exploit Title: XAMPP Control Panel 3.2.2 - Denial of Service (PoC)
Notebook Pro 2.0 – Denial Of Service (PoC)
# Exploit Title : Notebook Pro 2.0 - Denial Of Service (PoC)
Oracle VirtualBox Manager 5.2.18 r124319 – ‘Name Attribute’ Denial of Service (PoC)
# Exploit Title: Oracle VirtualBox Manager 5.2.18 r124319 - 'Name Attribute' Denial of Service (PoC)
Netis ADSL Router DL4322D RTK 2.1.1 – Cross-Site Scripting
# Exploit Title: Netis ADSL Router DL4322D RTK 2.1.1 - Cross-Site Scripting
Joomla! Component JCK Editor 6.4.4 – ‘parent’ SQL Injection
# Title: Joomla Component JCK Editor 6.4.4 - 'parent' SQL Injection
Netis ADSL Router DL4322D RTK 2.1.1 – Denial of Service (PoC)
# Exploit Title: Netis ADSL Router DL4322D RTK 2.1.1 - Denial of Service (PoC)
CA Release Automation NiMi 6.5 – Remote Command Execution
# Exploit Title: CA Release Automation NiMi 6.5 - Remote Command Execution
STOPzilla AntiMalware 6.5.2.59 – Privilege Escalation (2)
3y3t3m th!s - Ivan Ivanovic Ivanov Иван-дурак
CdBurnerXP 4.5.8.6795 – ‘File Name’ Denial of Service (PoC)
# Exploit Title: CdBurnerXP 4.5.8.6795 - 'File Name' Denial of Service (PoC)
WordPress Plugin Survey & Poll 1.5.7.3 – ‘sss_params’ SQL Injection
# Exploit Title: Wordpress Plugin Survey & Poll 1.5.7.3 - 'sss_params' SQL Injection
Free MP3 CD Ripper 2.6 – ‘.wma’ Local Buffer Overflow (SEH)
# Exploit Title: Free MP3 CD Ripper 2.6 - '.wma' Buffer Overflow (SEH)
InfraRecorder 0.53 – ‘.txt’ Denial of Service (PoC)
# Exploit Title: InfraRecorder 0.53 - '.txt' Denial of Service (PoC)
Faleemi Plus 1.0.2 – Denial of Service (PoC)
# Exploit Title: Faleemi Plus 1.0.2 - Denial of Service (PoC)
InduSoft Web Studio 8.1 SP1 – ‘Tag Name’ Buffer Overflow (SEH)
# Exploit Title: InduSoft Web Studio 8.1 SP1 - 'Tag Name' Buffer Overflow (SEH)
Apache Portals Pluto 3.0.0 – Remote Code Execution
# Exploit Title: Apache Portals Pluto 3.0.0 - Remote Code Execution
Clone2Go Video to iPod Converter 2.5.0 – Denial of Service (PoC)
# Exploit Title: Clone2Go Video to iPod Converter 2.5.0 - Denial of Service (PoC)
MediaTek Wirless Utility rt2870 – Denial of Service (PoC)
# Exploit Title: MediaTek Wirless Utility rt2870 - Denial of Service (PoC)
Apache Syncope 2.0.7 – Remote Code Execution
# Exploit Title: Apache Syncope 2.0.7 - Remote Code Execution
STOPzilla AntiMalware 6.5.2.59 – Privilege Escalation (1)
# Exploit Title: STOPzilla AntiMalware 6.5.2.59 - Privilege Escalation
Faleemi Desktop Software 1.8.2 – ‘SavePath for ScreenShots’ Buffer Overflow (SEH)
# Exploit Title: Faleemi Desktop Software 1.8.2 - 'SavePath for ScreenShots' Buffer Overflow (SEH)
Free MP3 CD Ripper 2.6 – ‘.mp3’ Buffer Overflow (SEH)
# Exploit Title: Free MP3 CD Ripper 2.6 - '.mp3' Buffer Overflow (SEH)
TeamViewer App 13.0.100.0 – Denial of Service (PoC)
# Exploit Title: TeamViewer App 13.0.100.0 - Denial of Service (PoC)
Linux 4.18 – Arbitrary Kernel Read into dmesg via Missing Address Check in segfault Handler
There is a missing address check in both show_opcodes() callers.
Socusoft Photo to Video Converter 8.07 – ‘Registration Name’ Buffer Overflow
# Exploit Title: Socusoft Photo to Video Converter 8.07 - 'Registration Name' Buffer Overflow
Chrome OS 10820.0.0 dev-channel – app->VM via garcon TCP Command Socket
======================= BUG DESCRIPTION =======================
jiNa OCR Image to Text 1.0 – Denial of Service (PoC)
# Exploit Title: jiNa OCR Image to Text 1.0 - Denial of Service (PoC)
PixGPS 1.1.8 – Denial of Service (PoC)
# Exploit Title: PixGPS 1.1.8 - Denial of Service (PoC)
RoboImport 1.2.0.72 – Denial of Service (PoC)
# Exploit Title: RoboImport 1.2.0.72 - Denial of Service (PoC)
PicaJet FX 2.6.5 – Denial of Service (PoC)
# Exploit Title: PicaJet FX 2.6.5 - Denial of Service (PoC)