Apple macOS Kernel – Use-After-Free Due to Lack of Locking in nvidia GeForce Driver
nvDevice::SetAppSupportBits is external method 0x107 of the nvAccelerator IOService.
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 143
Apple macOS/iOS Kernel – Heap Overflow Due to Lack of Lower Size Check in getvolattrlist
getvolattrlist takes a user controlled bufferSize argument via the fgetattrlist syscall.
XNU Kernel – Heap Overflow Due to Bad Bounds Checking in MPTCP
mptcp_usr_connectx is the handler for the connectx syscall for the AP_MULTIPATH socket family.
Linux Kernel < 4.16.11 - 'ext4_read_inline_data()' Memory Corruption
ext4 can store data for small regular files as "inline data", meaning that the
MyBB Recent Threads Plugin 1.0 – Cross-Site Scripting
# Exploit Title: MyBB Recent Threads Plugin v1.0 - Cross-Site Scripting
Clone2GO Video converter 2.8.2 – Buffer Overflow
#!/usr/bin/python
Pagekit < 1.0.13 - Cross-Site Scripting Code Generator
# Title: Pagekit < 1.0.13 - Cross-Site Scripting Code Generator
10-Strike Network Inventory Explorer 8.54 – Local Buffer Overflow (SEH)
# Exploit Title : 10-Strike Network Inventory Explorer 8.54 - Local Buffer Overflow (SEH)
10-Strike Network Inventory Explorer 8.54 – ‘Registration Key’ Buffer Overflow (SEH)
# Exploit Title: 10-Strike Network Inventory Explorer 8.54 - 'Registration Key' Buffer Overflow (SEH)
10-Strike Network Scanner 3.0 – Local Buffer Overflow (SEH)
# Exploit Title: 10-Strike Network Scanner 3.0 - Local Buffer Overflow (SEH)
WebKitGTK+ < 2.21.3 - Crash (PoC)
# Title: WebKitGTK+ < 2.21.3 - Crash (PoC)
Jenkins Mailer Plugin < 1.20 - Cross-Site Request Forgery (Send Email)
# Exploit Title : Jenkins mailer plugin < 1.20 - Cross-Site Request Forgery
SearchBlox 8.6.7 – XML External Entity Injection
# Exploit Title: SearchBlox 8.6.7 Out-Of-Band XML eXternal Entity (OOB-XXE)
Zip-n-Go 4.9 – Buffer Overflow (SEH)
#!/usr/bin/python
CyberArk < 10 - Memory Disclosure
# Exploit Title: CyberArk < 10 - Memory Disclosure
EMS Master Calendar < 8.0.0.20180520 - Cross-Site Scripting
# Exploit Title: EMS Master Calendar < 8.0.0.20180520 - Reflected Cross-Site Scripting
Brother HL Series Printers 1.15 – Cross-Site Scripting
# Exploit Title: [ XSS at Brother HL series printers]
Smartshop 1 – ‘id’ SQL Injection
# Exploit Title: Smartshop 1 - SQL Injection
Smartshop 1 – Cross-Site Request Forgery
# Exploit Title: Smartshop 1 - Cross site request forgery
GreenCMS 2.3.0603 – Cross-Site Request Forgery / Remote Code Execution
# Exploit Title: GreenCMS v2.3.0603 CSRF vulnerability get webshell
GreenCMS 2.3.0603 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: GreenCMS v2.3.0603 CSRF vulnerability add admin
TAC Xenta 511/911 – Directory Traversal
# Exploit Title: TAC Xenta 511 and 911 Credentials Disclosure
New STAR 2.1 – SQL Injection / Cross-Site Scripting
# Exploit Title: New STAR 2.1 - SQL Injection / Cross-Site Scripting
PHP Dashboards NEW 5.5 – ’email’ SQL Injection
# Exploit Title: PHP Dashboards NEW v5.5 - 'Login' SQL Injection
CSV Import & Export 1.1.0 – SQL Injection / Cross-Site Scripting
# Exploit Title: CSV Import & Export v1.1.0 - SQL Injection / Cross-Site
Grid Pro Big Data 1.0 – SQL Injection
# Exploit Title: Grid Pro Big Data 1.0 - 'test.php' SQL Injection
Microsoft Edge Chakra – EntrySimpleObjectSlotGetter Type Confusion
function opt(w, arr) {
SearchBlox 8.6.6 – Cross-Site Request Forgery
# Exploit Title: CSRF Privilege Escalation (Creation of an administrator
Siemens SIMATIC S7-300 CPU – Remote Denial of Service
# Exploit Title: Siemens SIMATIC S7-300 CPU - Remote Denial Of Service
Yosoro 1.0.4 – Remote Code Execution
# Exploit title: Yosoro 1.0.4 - Remote Code Execution
MachForm < 4.2.3 - SQL Injection / Path Traversal / Upload Bypass
Vendor: Appnitro
Dolibarr ERP/CRM 7.0.0 – (Authenticated) SQL Injection
# [CVE-2018-10094] Dolibarr SQL Injection vulnerability
Procps-ng – Multiple Vulnerabilities
Qualys Security Advisory
IssueTrak 7.0 – SQL Injection
================
NUUO NVRmini2 / NVRsolo – Arbitrary File Upload
# Exploit Title: NUUO NVRmini2 / NVRsolo Arbitrary File Upload Vulnerability
MyBB ChangUonDyU Plugin 1.0.2 – Cross-Site Scripting
# Exploit Title: MyBB ChangUonDyU Advanced Statistics Plugin v1.0.2 - Cross-Site Scripting
GNU Barcode 0.99 – Buffer Overflow
# GNU Barcode 0.99 - Buffer Overflow
GNU Barcode 0.99 – Memory Leak
# GNU Barcode 0.99 - Memory Leak
Facebook Clone Script 1.0.5 – ‘search’ SQL Injection
# Exploit Title: Facebook Clone Script 1.0.5 - 'search' SQL Injection
Facebook Clone Script 1.0.5 – Cross-Site Request Forgery
# Exploit Title: Facebook Clone Script 1.0.5 - Cross-Site Request Forgery
TP-Link TL-WR840N/TL-WR841N – Authenticaton Bypass
Title: TP-Link Multiple Router(TL-WR840N and TL-WR841N) Unauthenticated
DomainMod 4.09.03 – ‘oid’ Cross-Site Scripting
# Exploit Title: DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter
DomainMod 4.09.03 – ‘sslpaid’ Cross-Site Scripting
# Exploit Title: DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter
CloudMe Sync < 1.11.0 - Buffer Overflow (SEH) (DEP Bypass)
# Exploit: CloudMe Sync < 1.11.0 - Buffer Overflow (SEH) (DEP Bypass)
WordPress Plugin Events Calendar – SQL Injection
# Exploit Title: Wordpress Plugin Events Calendar - SQL Injection
Joomla! Component Full Social 1.1.0 – ‘search_query’ SQL Injection
# Exploit Title: Joomla! extension Full Social 1.1.0 - 'search_query' SQL