Naukri Clone Script 3.0.3 – ‘indus’ SQL Injection
# Exploit Title: Naukri Clone Script 3.0.3 - 'indus' SQL Injection
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 156
Multi Language Olx Clone Script – Cross-Site Scripting
######################################################################################
LibreOffice < 6.0.1 - '=WEBSERVICE' Remote Arbitrary File Disclosure
# Vulnerability description
macOS Kernel – Use-After-Free Due to Lack of Locking in ‘AppleEmbeddedOSSupportHostClient::registerNotificationPort’
AppleEmbeddedOSSupportHost.kext is presumably involved in the communication with the OS running on the touch bar on n...
MalwareFox AntiMalware 2.74.0.150 – Privilege Escalation
Title: MalwareFox AntiMalware 2.74.0.150 - Local Privilege Escalation
Asterisk 13.17.2 – ‘chan_skinny’ Remote Memory Corruption
# Exploit Author: Juan Sacco - http://exploitpack.com
Adobe Coldfusion 11.0.03.292866 – BlazeDS Java Object Deserialization Remote Code Execution
# Exploit Title: Adobe Coldfusion BlazeDS Java Object Deserialization RCE
Online Test Script 2.0.7 – ‘cid’ SQL Injection
# Exploit Title: Online Test Script 2.0.7 - 'cid' SQL Injection
Entrepreneur Dating Script 2.0.2 – Authentication Bypass
# Exploit Title: Entrepreneur Dating Script 2.0.2 - Authentication Bypass
Android – ‘getpidcon’ Permission Bypass in KeyStore Service
The keystore binder service ("android.security.IKeystoreService") allows users to issue several commands related to k...
Wonder CMS 2.3.1 – Unrestricted File Upload
Affected Code:
Wonder CMS 2.3.1 – ‘Host’ Header Injection
# Exploit Title: Wonder CMS 2.3.1 Host Header Injection
Matrimonial Website Script 2.1.6 – ‘uid’ SQL Injection
# Exploit Title: Matrimonial Website Script 2.1.6 - 'uid' SQL Injection
Online Voting System – Authentication Bypass
# Exploit Title: Online Voting System - Authentication Bypass
WordPress Core – ‘load-scripts.php’ Denial of Service
# EDB Note: python doser.py -g 'http://localhost/wp-admin/load-scripts.php?c=1&load%5B%5D=eutil,common,wp-a11y,sack,q...
Claymore Dual GPU Miner 10.5 – Format String
Claymore’s Dual GPU Miner 10.5 and below is vulnerable to a format strings vulnerability. This allows an unauthentica...
MalwareFox AntiMalware 2.74.0.150 – Local Privilege Escalation
Title : MalwareFox AntiMalware 2.74.0.150 - Local Privilege Escalation
BOCHS 2.6-5 – Local Buffer Overflow
# Exploit Author: Juan Sacco - http://exploitpack.com
Student Profile Management System Script 2.0.6 – Authentication Bypass
# Exploit title: Student Profile Management System Script 2.0.6 - Admin
Netis WF2419 Router – Cross-Site Scripting
# Exploit Title: Netis-WF2419 HTML Injection
HPE iLO 4 < 2.53 - Add New Administrator User
#!/usr/bin/env python
Fancy Clone Script – ‘search_browse_product’ SQL Injection
# Exploit Title: Fancy Clone Script - 'search_browse_product' SQL Injection
Real Estate Custom Script – ‘route’ SQL Injection
# Exploit Title: Real Estate Custom Script - 'route' SQL Injection
Advance Loan Management System – ‘id’ SQL Injection
# Exploit Title: Advance Loan Management System - 'id' SQL Injection
IPSwitch MOVEit 8.1 < 9.4 - Cross-Site Scripting
# Exploit Title: IPSwitch MoveIt Stored Cross Site Scripting (XSS)
Event Manager 1.0 – SQL Injection
# # # # #
Oracle Hospitality Simphony (MICROS) 2.7 < 2.9 - Directory Traversal
# Exploit Title: Oracle Hospitality Simphony (MICROS) directory traversal
FiberHome AN5506 – Remote DNS Change
# FIBERHOME AN5506 Unauthenticated Remote DNS Change Vulnerability
Microsoft Windows Subsystem for Linux – ‘execve()’ Local Privilege Escalation
#define _GNU_SOURCE
Sync Breeze Enterprise 10.4.18 – Remote Buffer Overflow (SEH)
# Exploit Title: Sync Breeze Enterprise v10.4.18 Server - Unauthenticated Remote Buffer Overflow SEH