Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 159

OBS Studio 20.1.3 – Local Buffer Overflow

author = '''

2018-01-15 ScrR1pTK1dd13 dos

Flash Operator Panel 2.31.03 – Command Execution

Document Title:

2018-01-15 Vulnerability-Lab webapps

Synology Photo Station 6.8.2-3461 – ‘SYNOPHOTO_Flickr_MultiUpload’ Race Condition File Write Remote Code Execution

#!/usr/local/bin/python

2018-01-15 mr_me remote

D-Link DNS-343 ShareCenter < 1.05 - Command Injection

D-Link DNS-343 ShareCenter Remote Root

2018-01-15 GulfTech Security webapps

D-Link DNS-325 ShareCenter < 1.05B03 - Multiple Vulnerabilities

D-Link DNS-325 ShareCenter Multiple Vulnerabilities

2018-01-15 GulfTech Security webapps

DarkComet (C2 Server) – File Upload

#!/usr/bin/env python3

2018-01-15 Pseudo Laboratories webapps

GitStack – Remote Code Execution

## Vulnerability Summary

2018-01-15 SecuriTeam webapps

Xnami 1.0 – Cross-Site Scripting

# Exploit Title: Xnami Image Sharing - Persistent XSS Vulnerability

2018-01-12 Dennis Veninga webapps

Taxi Booking Script 1.0 – Cross-site Scripting

# # # # #

2018-01-12 Tauco webapps

Kentico CMS 11.0 – Buffer Overflow

Document Title:

2018-01-12 Vulnerability-Lab dos

PyroBatchFTP < 3.19 - Buffer Overflow

=============================================

2018-01-12 Manuel García Cárdenas dos

Android – Hardware Service Manager Arbitrary Service Replacement due to getpidcon

This bug is similar to Jann Horn's issue (https://bugs.chromium.org/p/project-zero/issues/detail?id=851) -- credit sh...

2018-01-11 Google Security Research dos

Microsoft Windows – NTFS Owner/Mandatory Label Privilege Bypass

Windows: NTFS Owner/Mandatory Label Privilege Bypass EoP

2018-01-11 Google Security Research dos

Microsoft Windows – NtImpersonateAnonymousToken AC to Non-AC Privilege Escalation

Windows: NtImpersonateAnonymousToken AC to Non-AC EoP

2018-01-11 Google Security Research dos

Microsoft Windows – NtImpersonateAnonymousToken LPAC to Non-LPAC Privilege Escalation

Windows: NtImpersonateAnonymousToken LPAC to Non-LPAC EoP

2018-01-11 Google Security Research dos

Microsoft Windows SMB Server (v1/v2) – Mount Point Arbitrary Device Open Privilege Escalation

Windows: SMB Server (v1 and v2) Mount Point Arbitrary Device Open EoP

2018-01-11 Google Security Research dos

LabF nfsAxe 3.7 FTP Client – Stack Buffer Overflow (Metasploit)

##

2018-01-11 Metasploit remote

phpCollab 2.5.1 – File Upload (Metasploit)

##

2018-01-11 Metasploit remote

macOS – ‘process_policy’ Stack Leak Through Uninitialized Field

The syscall

2018-01-11 Google Security Research dos

Microsoft Edge Chakra – ‘AppendLeftOverItemsFromEndSegment’ Out-of-Bounds Read

Here's a snippet of AppendLeftOverItemsFromEndSegment in JavascriptArray.inl.

2018-01-11 Google Security Research dos

ALLMediaServer 0.95 – Remote Buffer Overflow

#!/usr/bin/python

2018-01-11 Mario Kartone Ciccarelli remote

Seagate Personal Cloud – Multiple Vulnerabilities

# SSD Advisory – Seagate Personal Cloud Multiple Vulnerabilities

2018-01-11 SecuriTeam remote

Transmission – RPC DNS Rebinding

The transmission bittorrent client uses a client/server architecture, the user interface is the client and a daemon r...

2018-01-11 Google Security Research remote

Synology Photostation 6.7.2-3429 – Remote Code Execution (Metasploit)

##

2018-01-10 James Bercegay webapps

WordPress Plugin Service Finder Booking < 3.2 - Local File Disclosure

# Exploit Title: Worpress Plugin Service Finder Booking < 3.2 - Local File Disclosure

2018-01-10 telahdihapus webapps

Muviko 1.1 – SQL Injection

# Exploit Title: Muviko 1.1 - Multiple SQL Injection

2018-01-10 Ahmad Mahfouz webapps

DiskBoss Enterprise 8.8.16 – Remote Buffer Overflow

# Exploit Title: DiskBoss

2018-01-10 Arris Huijgen remote

WordPress Plugin Events Calendar – ‘event_id’ SQL Injection

# Exploit Title: Wichipi Events Calendar - SQL Injection

2018-01-10 Dennis Veninga webapps

WordPress Plugin Social Media Widget by Acurax 3.2.5 – Cross-Site Request Forgery

Description

2018-01-10 Panagiotis Vagenas webapps

WordPress Plugin CMS Tree Page View 1.4 – Cross-Site Request Forgery / Privilege Escalation

Description

2018-01-10 Panagiotis Vagenas webapps

WordPress Plugin Admin Menu Tree Page View 2.6.9 – Cross-Site Request Forgery / Privilege Escalation

Description

2018-01-10 Panagiotis Vagenas webapps

WordPress Plugin WordPress Download Manager 2.9.60 – Cross-Site Request Forgery

Description

2018-01-10 Panagiotis Vagenas webapps

Joomla! Component Easydiscuss < 4.0.21 - Cross-Site Scripting

# Exploit Title: Joomla Plugin Easydiscuss

2018-01-10 Mattia Furlani webapps

Multiple CPUs – Information Leak Using Speculative Execution

== INTRODUCTION ==

2018-01-10 Google Security Research dos

Microsoft Edge Chakra JIT – ‘Lowerer::LowerSetConcatStrMultiItem’ Missing Integer Overflow Check

The method "Lowerer::LowerSetConcatStrMultiItem" is used to generate machine code to concatenate strings.

2018-01-10 Google Security Research dos

HPE iMC – dbman ‘RestoreDBase’ Remote Command Execution (Metasploit)

##

2018-01-10 Metasploit remote

HPE iMC – dbman ‘RestartDB’ Remote Command Execution (Metasploit)

##

2018-01-10 Metasploit remote

Jungo Windriver 12.5.1 – Local Privilege Escalation

// ConsoleApplication1.cpp : Defines the entry point for the console application.

2018-01-10 Fidus InfoSecurity local

SAP NetWeaver J2EE Engine 7.40 – SQL Injection

#!/usr/bin/env python

2018-01-10 Vahagn Vardanyan webapps

D-Link Routers 110/412/615/815 < 1.03 - 'service.cgi' Arbitrary Code Execution

#!/usr/bin/python

2018-01-10 Cr0n1c webapps

Parity Browser < 1.6.10 - Bypass Same Origin Policy

VuNote

2018-01-10 tintinweb local

Microsoft Edge Chakra JIT – Op_MaxInAnArray and Op_MinInAnArray can Explicitly call User-Defined JavaScript Functions

1. Call patterns like "Math.max.apply(Math, [1, 2, 3, 4, 5])" and "Math.max.apply(Math, arr)" can be optimized to dir...

2018-01-09 Google Security Research dos

Microsoft Edge Chakra JIT – BackwardPass::RemoveEmptyLoopAfterMemOp Does not Insert Branches

The optimizations for memory operations may leave empty loops as follows:

2018-01-09 Google Security Research dos

Microsoft Edge Chakra – ‘asm.js’ Out-of-Bounds Read

Here's a snippet of AsmJSByteCodeGenerator::EmitAsmJsFunctionBody.

2018-01-09 Google Security Research dos

Microsoft Edge Chakra JIT – Escape Analysis Bug

Escape analysis: https://en.wikipedia.org/wiki/Escape_analysis

2018-01-09 Google Security Research dos

Microsoft Windows – ‘nt!NtQueryInformationProcess (information class 76, QueryProcessEnergyValues)’ Kernel Stack Memory Disclosure

We have discovered that the nt!NtQueryInformationProcess system call invoked with the 76 information class discloses ...

2018-01-09 Google Security Research dos

Microsoft Windows – ‘nt!NtQuerySystemInformation (information class 138, QueryMemoryTopologyInformation)’ Kernel Pool Memory Disclosure

We have discovered that the nt!NtQuerySystemInformation system call invoked with the 138 information class discloses ...

2018-01-09 Google Security Research dos