Disk Pulse Enterprise 10.1.18 – Denial of Service
# Exploit Title: Disk Pulse Enterprise Server v10.1.18 - DOS,
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 160
Sync Breeze Enterprise 10.1.16 – Denial of Service
# Exploit Title: Sync Breeze Enterprise Server v10.1.16 - Denial of Service
DiskBoss Enterprise 8.5.12 – Denial of Service
# Exploit Title: DiskBoss Enterprise Server 8.5.12 - Denial of Service
Synology DiskStation Manager (DSM) < 6.1.3-15152 - 'forget_passwd.cgi' User Enumeration
# Exploit Title: Synology DiskStation Manager (DSM) < 6.1.3-15152 - 'forget_passwd.cgi' User Enumeration
BarcodeWiz ActiveX Control < 6.7 - Buffer Overflow (PoC)
[+] Credits: John Page (aka hyp3rlinx)
Photos in Wifi 1.0.1 – Path Traversal
Document Title:
FiberHome LM53Q1 – Multiple Vulnerabilities
#!/usr/bin/python
WordPress Plugin LearnDash 2.5.3 – Arbitrary File Upload
# Exploit Title: WordPress LearnDash 2.5.3 Unauthenticated Arbitrary
Vanilla < 2.1.5 - Cross-Site Request Forgery
# Exploit Title: CSRF vulnerabilities in Vanilla Forums below 2.1.5-CVE-2017-1000432
Android – Inter-Process munmap due to Race Condition in ashmem
The MemoryIntArray class allows processes to share an in-memory array of integers backed by an "ashmem" file descript...
Microsoft Windows – Local XPS Print Spooler Sandbox Escape
Windows: Local XPS Print Spooler Sandbox Escape
Synology Photostation < 6.7.2-3429 - Multiple Vulnerabilities
Synology Photostation Multiple Vulnerabilities
gps-server.net GPS Tracking Software < 3.1 - Multiple Vulnerabilities
# Exploit Title: GPS-SERVER.NET SAAS CMS
GetGo Download Manager 5.3.0.2712 – ‘Proxy’ Buffer Overflow
# Exploit Title: Buffer overflow vulnerability in GetGo Download Manager proxy options 5.3.0.2712
Microsoft Windows win32k – Using SetClassLong to Switch Between CS_CLASSDC and CS_OWNDC Corrupts DC Cache
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1389&desc=6
Gespage 7.4.8 – SQL Injection
# [CVE-2017-7997] Gespage SQL Injection vulnerability
Cisco IOS – Remote Code Execution
#!/usr/bin/env python
WordPress Plugin Smart Google Code Inserter < 3.5 - Authentication Bypass / SQL Injection
Exploit Title: Smart Google Code Inserter < 3.5 - Auth Bypass/SQLi
EMC xPression 4.5SP1 Patch 13 – ‘model.jobHistoryId’ SQL Injection
Title: EMC xDashboard - SQL Injection Vulnerability
D-Link DNS-320 ShareCenter < 1.06 - Backdoor Access
DNS-320L ShareCenter Backdoor
WDMyCloud < 2.30.165 - Multiple Vulnerabilities
WDMyCloud Multiple Vulnerabilities
Oracle WebLogic < 10.3.6 - 'wls-wsat' Component Deserialisation Remote Command Execution
#!/usr/bin/env python
PHP Melody 2.7.1 – ‘playlist’ SQL Injection
# Exploit Title: PHP Melody v2.7.1 - SQL Injection
D3DGear 5.00 Build 2175 – Buffer Overflow (PoC)
#!/usr/bin/python
NetTransport 2.96L – Remote Buffer Overflow (DEP Bypass)
#!/usr/bin/python
ALLMediaServer 0.95 – Remote Buffer Overflow (Metasploit)
require 'msf/core'
Sony Playstation 4 (PS4) 4.05 – ‘Jailbreak’ WebKit / ‘NamedObj ‘ Kernel Loader
# PS4 4.05 Kernel Exploit
Xerox DC260 EFI Fiery Controller Webtools 2.0 – Arbitrary File Disclosure
Xerox DC260 EFI Fiery Controller Webtools 2.0 Arbitrary File Disclosure
Easy!Appointments 1.2.1 – Cross-Site Scripting
Easy!Appointments v1.2.1 Multiple Stored XSS Vulnerabilities
Telesquare SKT LTE Router SDT-CS3B1 – Cross-Site Request Forgery
Telesquare SKT LTE Router SDT-CS3B1 CSRF System Command Execution
Telesquare SKT LTE Router SDT-CS3B1 – Denial of Service
#!/usr/bin/env python
Telesquare SKT LTE Router SDT-CS3B1 – Information Disclosure
Telesquare SKT LTE Router SDT-CS3B1 Insecure Direct Object Reference Info Leak
SysGauge Server 3.6.18 – Denial of Service
# Exploit Title: SysGauge Server 3.6.18 - DOS
SAP BusinessObjects launch pad – Server-Side Request Forgery
# Exploit Title: SAP BusinessObjects launch pad SSRF
DotNetNuke DreamSlider 01.01.02 – Arbitrary File Download (Metasploit)
# Exploit Title: DotNetNuke DreamSlider Arbitrary File Download
ALLMediaServer 0.95 – Buffer Overflow (PoC)
# Exploit Title: Buffer overflow in ALLPlayer ALLMediaServer 0.95 and earlier
Ubiquiti UniFi Video 3.7.3 – Local Privilege Escalation
RCE Security Advisory
GetGo Download Manager 5.3.0.2712 – Buffer Overflow
# Exploit Title: Buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712