Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 151
Allok AVI DivX MPEG to DVD Converter 2.6.1217 – Buffer Overflow (SEH)
#!/usr/bin/env python
Allok Video Joiner 4.6.1217 – Stack-Based Buffer Overflow
# SWAMI KARUPASAMI THUNAI
Allok WMV to AVI MPEG DVD WMV Converter 4.6.1217 – Buffer Overflow
# SWAMI KARUPASAMI THUNAI
WordPress Plugin Relevanssi 4.0.4 – Reflected Cross-Site Scripting
# Exploit Title : Relevanssi Wordpress Search Plugin Reflected Cross Site Scripting (XSS)
WordPress Plugin Contact Form 7 to Database Extension 2.10.32 – CSV Injection
# Exploit Title : Contact Form 7 to Database Extension Wordpress Plugin CSV Injection
Homematic CCU2 2.29.23 – Remote Command Execution
#!/usr/bin/ruby
Joomla! Component Acymailing Starter 5.9.5 – CSV Macro Injection
# Exploit Title: Joomla! Component Acymailing Starter 5.9.5 CSV Macro
Joomla! Component AcySMS 3.5.0 – CSV Macro Injection
# Exploit Title: Joomla! Component AcySMS 3.5.0 CSV Macro Injection
WordPress Plugin WP Security Audit Log 3.1.1 – Sensitive Information Disclosure
# Exploit Title: WP Security Audit Log Plugin, Sensitive Information Disclosure
SysGauge 4.5.18 – Local Denial of Service
#!/usr/bin/python
osCommerce 2.3.4.1 – Remote Code Execution
# Exploit Title: osCommerce 2.3.4.1 Remote Code Execution
Systematic SitAware – NVG Denial of Service
# Exploit Title: SitAware NVG Denial of Service
D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router – Authentication Bypass
# Exploit Title: D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Route Authentication Bypass
Cisco Smart Install – Crash (PoC)
# smi_ibc_init_discovery_BoF.py
TwonkyMedia Server 7.0.11-8.5 – Persistent Cross-Site Scripting
---------------------------------------------------------------------
Microsoft Windows Remote Assistance – XML External Entity Injection
# Exploit Title: Microsoft Windows Remote Assistance XXE
Open-AuditIT Professional 2.1 – Cross-Site Scripting
# Exploit Title: Open-AuditIT Professional 2.1 - Stored Cross site scripting (XSS)
TeamCity < 9.0.2 - Disabled Registration Bypass
var login = 'testuser'; //логин пользователя
DLINK DCS-5020L – Remote Code Execution (PoC)
“The DCS-5020L Wireless N Day & Night Pan/Tilt Cloud Camera is a day/night network camera that easily connects to you...
Fast AVI MPEG Splitter 1.2 – Stack-Based Buffer Overflow
# SWAMI KARUPASAMI THUNAI
LabF nfsAxe 3.7 – Privilege Escalation
Exploit Author: bzyo
Laravel Log Viewer < 0.13.0 - Local File Download
# Exploit Title: Laravel log viewer by rap2hpoutre local file download (LFD)
Acrolinx Server < 5.2.5 - Directory Traversal
# Exploit Title: Acrolinx Dashboard Directory Traversal
Hikvision IP Camera versions 5.2.0 – 5.3.9 (Builds 140721 < 170109) - Access Control Bypass
# Exploit Title: Hikvision IP Camera versions 5.2.0 - 5.3.9 (Builds: 140721 - 170109) Backdoor
Allok Quicktime to AVI MPEG DVD Converter 4.6.1217 – Stack-Based Buffer Overflow
# SWAMI KARUPASAMI THUNAI
Crashmail 1.6 – Stack-Based Buffer Overflow (ROP)
# Exploit author: Juan Sacco
WM Recorder 16.8.1 – Denial of Service
#!/usr/bin/python
TL-WR720N 150Mbps Wireless N Router – Cross-Site Request Forgery
Exploit Title: TL-WR720N 150Mbps Wireless N Router - CSRF
XenForo 2 – CSS Loader Denial of Service
# Exploit Title: XenForo CSS Loader DoS
Easy CD DVD Copy 1.3.24 – Local Buffer Overflow (SEH)
#!/usr/bin/python
Easy Avi Divx Xvid to DVD Burner 2.9.11 – ‘.avi’ Denial of Service
#!/usr/bin/python
MyBB Plugin Last User’s Threads in Profile Plugin 1.2 – Persistent Cross-Site Scripting
# Exploit Title: MyBB Last User's Threads in Profile Plugin v1.2 - Persistent XSS