Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 134

CirCarLife SCADA 4.3.0 – Credential Disclosure

# Exploit Title: CirCarLife SCADA 4.3.0 - Credential Disclosure

2018-09-12 SadFud webapps

Rubedo CMS 3.4.0 – Directory Traversal

# Exploit Title: Rubedo CMS 3.4.0 - Directory Traversal

2018-09-12 Marouene Boubakri webapps

SynaMan 4.0 build 1488 – (Authenticated) Cross-Site Scripting

# Exploit Author: bzyo

2018-09-12 bzyo webapps

SynaMan 4.0 build 1488 – SMTP Credential Disclosure

# Exploit Author: bzyo

2018-09-12 bzyo webapps

iCash 7.6.5 – Denial of Service (PoC)

# Exploit Title: iCash 7.6.5 - Denial of Service (PoC)

2018-09-12 Gionathan Reale dos

PDF Explorer 1.5.66.2 – Denial of Service (PoC)

# Exploit Title: PDF Explorer 1.5.66.2 - Denial of Service (PoC)

2018-09-12 Gionathan Reale dos

Infiltrator Network Security Scanner 4.6 – Denial of Service (PoC)

# Exploit Title: Infiltrator Network Security Scanner 4.6 - Denial of Service (PoC)

2018-09-12 Gionathan Reale dos

Apple macOS 10.13.4 – Denial of Service (PoC)

# Exploit Title: Apple MacOS 10.13.4 - Denial of Service (PoC)

2018-09-12 Sriram dos

IBM Identity Governance and Intelligence 5.2.3.2 / 5.2.4 – SQL Injection

# Exploit Title: [Unauthenticated Remote SQLi]

2018-09-12 Mohamed Sayed webapps

MyBB 1.8.17 – Cross-Site Scripting

# Exploit Title: MyBB 1.8.17 - Cross-Site Scripting

2018-09-12 0xB9 webapps

LG Smart IP Camera 1508190 – Backup File Download

# Exploit Title: LG Smart IP Camera 1508190 - Backup File Download

2018-09-12 Ege Balci webapps

Bayanno Hospital Management System 4.0 – Cross-Site Scripting

# Exploit Title: Bayanno Hospital Management System 4.0 - Cross-Site Scripting

2018-09-11 Gokhan Sagoglu webapps

HTML5 Video Player 1.2.5 – Denial of Service (PoC)

# Exploit Title: HTML5 Video Player 1.2.5 - Denial of Service (PoC)

2018-09-11 T3jv1l dos

InTouch Machine Edition 8.1 SP1 – ‘Nombre del Tag’ Buffer Overflow (SEH)

# Exploit Title: InTouch Machine Edition 8.1 SP1 - 'Nombre del Tag' Buffer Overflow (SEH)

2018-09-11 Luis Martínez local

Android – ‘zygote->init;’ Chain from USB Privilege Escalation

After reporting https://bugs.chromium.org/p/project-zero/issues/detail?id=1583

2018-09-11 Google Security Research local

SocuSoft iPod Photo Slideshow 8.05 – Buffer Overflow (SEH)

# Exploit Title: SocuSoft iPod Photo Slideshow 8.05 - Buffer Overflow (SEH)

2018-09-10 Shubham Singh local

LW-N605R 12.20.2.1486 – Remote Code Execution

# Title: LW-N605R 12.20.2.1486 - Remote Code Execution

2018-09-10 Nassim Asrir webapps

Socusoft 3GP Photo Slideshow 8.05 – Buffer Overflow (SEH)

# Exploit Title: Socusoft 3GP Photo Slideshow 8.05 - Buffer Overflow (SEH)

2018-09-10 Shubham Singh local

Photo To Video Converter Professional 8.07 – Buffer Overflow (SEH)

# Exploit Title: Photo To Video Converter Professional 8.07 - Buffer Overflow (SEH)

2018-09-10 Shubham Singh local

Microsoft Baseline Security Analyzer 2.3 – XML External Entity Injection

# Title: Microsoft Baseline Security Analyzer 2.3 - XML External Entity Injection

2018-09-10 hyp3rlinx local

Flash Slideshow Maker Professional 5.20 – Buffer Overflow (SEH)

# Exploit Title: Flash Slideshow Maker Professional 5.20 - Buffer Overflow (SEH)

2018-09-10 Shubham Singh local

Any Sound Recorder 2.93 – Denial of Service (PoC)

# Exploit Title: Any Sound Recorder 2.93 - Denial of Service (PoC)

2018-09-10 T3jv1l dos

Zenmap (Nmap) 7.70 – Denial of Service (PoC)

# Exploit Title: Nmap 7.70 - Denial of Service (PoC)

2018-09-10 Gionathan Reale dos

Apache Struts 2 – Namespace Redirect OGNL Injection (Metasploit)

##

2018-09-10 Metasploit remote

Ghostscript – Failed Restore Command Execution (Metasploit)

##

2018-09-10 Metasploit local

MedDream PACS Server Premium 6.7.1.1 – ’email’ SQL Injection

# Exploit Title: MedDream PACS Server Premium 6.7.1.1 - 'email' SQL Injection

2018-09-07 Carlos Avila webapps

Tenable WAS-Scanner 7.4.1708 – Remote Command Execution

# Exploit Title: Tenable WAS-Scanner 7.4.1708 - Remote Command Execution

2018-09-07 Sameer Goyal remote

DVD Photo Slideshow Professional 8.07 – Buffer Overflow (SEH)

# Exploit Title: DVD Photo Slideshow Professional 8.07 - Buffer Overflow (SEH)

2018-09-07 T3jv1l local

Softneta MedDream PACS Server Premium 6.7.1.1 – Directory Traversal

# Exploit Title: Softneta MedDream PACS Server Premium 6.7.1.1 - Directory Traversal

2018-09-07 Carlos Avila webapps

QNAP Photo Station 5.7.0 – Cross-Site Scripting

# Exploit Title: QNAP Photo Station 5.7.0 - Cross-Site Scripting

2018-09-07 Mitsuaki Shiraishi webapps

iSmartViewPro 1.5 – ‘SavePath for ScreenShots’ Local Buffer Overflow (SEH)

# Exploit Title: iSmartViewPro 1.5 - 'SavePath for ScreenShots' Buffer Overflow (SEH)

2018-09-07 Gionathan Reale local

NovaRad NovaPACS Diagnostics Viewer 8.5 – XML External Entity Injection (File Disclosure)

# Title: NovaRad NovaPACS Diagnostics Viewer 8.5 - XML External Entity Injection (File Disclosure)

2018-09-06 LiquidWorm webapps

Jorani Leave Management 0.6.5 – Cross-Site Scripting

# Exploit Title: Jorani Leave Management System 0.6.5 – Cross-Site Scripting

2018-09-06 Javier Olmedo webapps

Cisco Umbrella Roaming Client 2.0.168 – Local Privilege Escalation

# Exploit Title: Cisco Umbrella Roaming Client 2.0.168 - Privilege Escalation

2018-09-06 ParagonSec local

Jorani Leave Management 0.6.5 – (Authenticated) ‘startdate’ SQL Injection

# Exploit Title: Jorani Leave Management 0.6.5 – 'startdate' SQL Injection

2018-09-06 Javier Olmedo webapps

Apache Roller 5.0.3 – XML External Entity Injection (File Disclosure)

# Exploit Title: Apache Roller 5.0.3 - XML External Entity Injection (File Disclosure)

2018-09-06 Marko Jokic webapps

WirelessHART Fieldgate SWG70 3.0 – Directory Traversal

# Exploit Title: WirelessHART Fieldgate SWG70 3.0 - Directory Traversal

2018-09-06 Hamit CİBO webapps

D-Link Dir-600M N150 – Cross-Site Scripting

# Exploit Title: D-Link Dir-600M N150 - Cross-Site Scripting

2018-09-06 PUNIT DARJI webapps

FUJI XEROX DocuCentre-V 3065 Printer – Remote Command Execution

# Exploit Title: FUJI XEROX DocuCentre-V 3065 Printer - Remote Command Execution

2018-09-05 vr_system remote

Microsoft People 10.1807.2131.0 – Denial of service (PoC)

# Exploit Title: Microsoft people 10.1807.2131.0 - Denial of service (PoC)

2018-09-05 L0RD dos

Tenda ADSL Router D152 – Cross-Site Scripting

# Exploit Title: Tenda D152 ADSL Router - Cross-Site Scripting

2018-09-05 Sandip Dey webapps

iSmartViewPro 1.5 – ‘DDNS’ Buffer Overflow

# Exploit Title: iSmartViewPro 1.5 - 'DDNS/IP/DID' Buffer Overflow

2018-09-04 Luis Martínez local

Logicspice FAQ Script 2.9.7 – Remote Code Execution

# Exploit Title: Logicspice FAQ Script 2.9.7 - Remote Code Execution

2018-09-04 AkkuS webapps

PHP File Browser Script 1 – Directory Traversal

# Exploit Title: PHP File Browser Script 1 - Directory Traversal

2018-09-04 AkkuS webapps

Simple POS 4.0.24 – ‘columns[0][search][value]’ SQL Injection

# Exploit Title: Simple POS 4.0.24 - 'columns[0][search][value]' SQL Injection

2018-09-04 Renos Nikolaou webapps

mooSocial Store Plugin 2.6 – SQL Injection

# Exploit Title: mooSocial Store Plugin 2.6 - SQL Injection

2018-09-04 Andrea Bocchetti webapps

RPi Cam Control < 6.4.25 - 'preview.php' Remote Command Execution

#!/usr/bin/python

2018-09-04 Reigning Shells webapps

VSAXESS V2.6.2.70 build 20171226_053 – ‘Nickname’ Denial of Service (PoC)

# Exploit Title: VSAXESS V2.6.2.70 build20171226_053 - 'Nickname' Denial of Service (PoC)

2018-09-03 Diego Santamaria dos

Visual Ping 0.8.0.0 – ‘Host’ Denial of Service (PoC)

# Exploit Title: Visual Ping 0.8.0.0 - 'Host' Denial of Service (PoC)

2018-09-03 Uriel Corral Salinas dos

D-Link DIR-615 – Denial of Service (PoC)

# Exploit Title: D-Link DIR-615 - Denial of Service (PoC)

2018-09-03 Aniket Dinda dos