WordPress Plugin Caldera Forms 1.5.9.1 – Cross-Site Scripting
# Exploit Title: CalderaForms 1.5.9.1 - multiple XSS
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 149
PDFunite 0.41.0 – ‘.pdf’ Local Buffer Overflow
# Exploit Title: PDFunite Malformed pdf buffer overflow
RSVG 2.40.13 / 2.42.2 – ‘.svg’ Buffer Overflow
# Exploit Title: Buffer-overflow in RSVG while converting a malformed svg
Joomla! Component JS Jobs 1.2.0 – Cross-Site Request Forgery
#######################################
Geist WatchDog Console 3.2.2 – Multiple Vulnerabilities
# Exploit Author: bzyo
VX Search 10.6.18 – ‘directory’ Local Buffer Overflow
#!/usr/bin/python
Joomla! Component jDownloads 3.2.58 – Cross Site Scripting
#######################################
Ultra MiniHTTPd 1.2 – ‘GET’ Remote Stack Buffer Overflow (PoC)
# Exploit Title: Ultra MiniHTTPd 1.2 - 'GET' Remote Stack Buffer Overflow
D-Link DIR-615 Wireless Router – Persistent Cross Site Scripting
######################################################################################
Brave Browser < 0.13.0 - 'long alert() argument' Denial of Service
# Exploit Title:Brave Browser < 0.13.0 Denial of Service (resource consumption) via a long alert() argument.
Brave Browser < 0.13.0 - 'window.close(self)' Denial of Service
# Exploit Title:Brave Browser < 0.13.0 Denial of Service (resource consumption) via a window.close(self) js code.
Reaper 5.78 – Local Buffer Overflow
# Exploit Title: Reaper 5.78 - Local Buffer Overflow
Cobub Razor 0.8.0 – SQL injection
# Exploit Title: Cobub Razor 0.8.0 SQL injection Vulnerability
SysGauge Pro 4.6.12 – Local Buffer Overflow (SEH)
#!/usr/bin/python
Barco ClickShare CSE-200 – Remote Denial of Service
#!/usr/bin/python
Microsoft Windows – ‘nt!NtQueryFullAttributesFile’ Kernel Stack Memory Disclosure
We have discovered that the nt!NtQueryFullAttributesFile system call invoked with paths of certain kernel objects dis...
Microsoft Windows – ‘nt!NtQueryAttributesFile’ Kernel Stack Memory Disclosure
We have discovered that the nt!NtQueryAttributesFile system call invoked with paths of certain kernel objects disclos...
Microsoft Windows – ‘nt!NtQueryVolumeInformationFile’ Kernel Stack Memory Disclosure
We have discovered that the nt!NtQueryVolumeInformationFile system call invoked against certain kernel objects disclo...
Microsoft Windows – ‘nt!NtQuerySystemInformation (SystemPageFileInformation(Ex))’ Kernel 64-bit Stack Memory Disclosure
We have discovered that the nt!NtQuerySystemInformation system call invoked with the SystemPageFileInformation (0x12)...
Microsoft Windows – ‘nt!NtQueryInformationTransactionManager (TransactionManagerRecoveryInformation)’ Kernel Pool Memory Disclosure
We have discovered that the nt!NtQueryInformationTransactionManager system call invoked with the TransactionManagerRe...
Microsoft Windows – ‘nt!NtQueryInformationProcess (ProcessImageFileName)’ Kernel 64-bit Pool/Stack Memory Disclosure
We have discovered that the nt!NtQueryInformationProcess system call invoked with the ProcessImageFileName (0x1B) inf...
Microsoft Windows – ‘nt!NtQueryVirtualMemory (Memory(Privileged)BasicInformation)’ Kernel 64-bit Stack Memory Disclosure
We have discovered that the nt!NtQueryVirtualMemory system call invoked with the MemoryBasicInformation (0x0) and Mem...
Microsoft Windows – ‘nt!NtQueryVirtualMemory (MemoryImageInformation)’ Kernel 64-bit Stack Memory Disclosure
We have discovered that the nt!NtQueryVirtualMemory system call invoked with the MemoryImageInformation (0x6) informa...
Microsoft Windows – ‘CiSetFileCache’ TOCTOU Incomplete Fix
Windows: CiSetFileCache TOCTOU CVE-2017-11830 Incomplete Fix
Microsoft Edge – ‘OpenProcess()’ ACG Bypass
Each Edge Content process (MicrosoftEdgeCP.exe) needs to call SetProcessMitigationPolicy() on itself to enable ACG. T...
Zortam MP3 Media Studio 23.45 – Local Buffer Overflow (SEH)
#!/usr/bin/python
Sophos Cyberoam UTM CR25iNG – 10.6.3 MR-5 – Direct Object Reference
# Exploit Title: Sophos Cyberoam UTM - Privilege Escalation
CloudMe Sync 1.11.0 – Local Buffer Overflow
#######################################################
AMD Plays.tv 1.27.5.0 – ‘plays_service.exe’ Arbitrary File Execution
########################################################################
MikroTik 6.41.4 – FTP daemon Denial of Service (PoC)
################
Joomla! Convert Forms version 2.0.3 – Formula Injection (CSV Injection)
# Exploit Title: Joomla Extension Convert Forms version 2.0.3 is vulnerable to Formula Injection (CSV Injection)
iScripts Easycreate 3.2.1 – Stored Cross-Site Scripting
# Exploit Title: iScripts Easycreate 3.2.1 - Stored Cross-Site Scripting
WordPress Plugin Activity Log 2.4.0 – Stored Cross-Site Scripting
# Exploit Title : Activity Log Wordpress Plugin Stored Cross Site Scripting (XSS)
DVD X Player Standard 5.5.3.9 – Buffer Overflow
######################################################
WUZHI CMS 4.1.0 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: WUZHI CMS 4.1.0 CSRF vulnerability add admin account
WUZHI CMS 4.1.0 – Cross-Site Request Forgery (Add User)
# Exploit Title: WUZHI CMS 4.1.0 CSRF vulnerability add user account
Dell EMC Avamar and Integrated Data Protection Appliance Installation Manager – Invalid Access Control
# Exploit Title: [Dell EMC Avamar and Integrated Data Protection Appliance Installation Manager Missing Access Contro...
Google Chrome V8 JIT – ‘LoadElimination::ReduceTransitionElementsKind’ Type Confusion
I think this commit has introduced the bug: https://chromium.googlesource.com/v8/v8.git/+/9884bc5dee488bf206655f07b8a...
WordPress Plugin File Upload 4.3.2 – Stored Cross-Site Scripting
# Exploit Title: WordPress Plugin WordPress File Upload 4.3.2 - Stored XSS
WordPress Plugin File Upload 4.3.3 – Stored Cross-Site Scripting (PoC)
# Exploit Title: WordPress Plugin WordPress File Upload 4.3.3 - Stored XSS
WordPress Plugin Background Takeover < 4.1.4 - Directory Traversal
# Exploit Title: WP Background Takeover, Directory Traversal
WolfCMS 0.8.3.1 – Cross-Site Request Forgery
#######################################
Cobub Razor 0.7.2 – Add New Superuser Account
# Exploit Title: [Cobub Razor 0.7.2 Add New Superuser User]
MyBB Plugin Recent Threads On Index – Cross-Site Scripting
# Exploit Title: MyBB Recent threads
WolfCMS 0.8.3.1 – Open Redirection
#######################################