Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 162

Advantech WebAccess 8.2-2017.03.31 – Webvrpcs Service Opcode 80061 Stack Buffer Overflow (Metasploit)

##

2017-12-14 Metasploit webapps

pfSense 2.4.1 – Cross-Site Request Forgery Error Page Clickjacking (Metasploit)

##

2017-12-14 Metasploit remote

Palo Alto Networks Firewalls – Root Remote Code Execution

This is a public advisory for CVE-2017-15944 which is a remote root code

2017-12-14 Philip Pettersson remote

Linksys WVBR0 – ‘User-Agent’ Remote Command Injection

#!/usr/bin/python

2017-12-14 nixawk webapps

Multiple OEM – ‘nsd’ Remote Stack Format String (PoC)

[STX]

2017-12-14 bashis dos

Joomla! Component JEXTN Question And Answer 3.1.0 – SQL Injection

# # # # #

2017-12-13 Ihsan Sencan webapps

Joomla! Component JEXTN Video Gallery 3.0.5 – ‘id’ SQL Injection

# # # # #

2017-12-13 Ihsan Sencan webapps

GNU C Library Dynamic Loader glibc ld.so – Memory Leak / Buffer Overflow

Qualys Security Advisory

2017-12-13 Qualys Corporation local

Meinberg LANTIME Web Configuration Utility 6.16.008 – Arbitrary File Read

Title: Meinberg LANTIME Web Configuration Utility - Arbitrary File Read

2017-12-13 Jakub Palaczynski webapps

vBulletin 5.x – ‘routestring’ Remote Code Execution

# SSD Advisory – vBulletin routestring Unauthenticated Remote Code Execution

2017-12-13 SecuriTeam webapps

vBulletin 5.x – ‘cacheTemplates’ Remote Arbitrary File Deletion

# SSD Advisory – vBulletin cacheTemplates Unauthenticated Remote Arbitrary File Deletion

2017-12-13 SecuriTeam webapps

Joomla! Component JBuildozer 1.4.1 – ‘appid’ SQL Injection

# # # # #

2017-12-12 Ihsan Sencan webapps

Accesspress Anonymous Post Pro < 3.2.0 - Arbitrary File Upload

# Exploit Title: Unauthenticated Arbitrary File Upload

2017-12-12 Colette Chamberland webapps

Apple XNU Kernel – Memory Corruption due to Integer Overflow in __offsetof Usage in posix_spawn on 32-bit Platforms

posix_spawn is a complex syscall which takes a lot of arguments from userspace. The third argument

2017-12-12 Google Security Research dos

Apple macOS/iOS – Multiple Kernel Use-After-Frees due to Incorrect IOKit Object Lifetime Management in IOTimeSyncClockManagerUserClient

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1377

2017-12-12 Google Security Research dos

Apple macOS – Kernel Code Execution due to Lack of Bounds Checking in AppleIntelCapriController::GetLinkConfig

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1375

2017-12-12 Google Security Research dos

Apple macOS/iOS – Kernel Double Free due to Incorrect API Usage in Flow Divert Socket Option Handling

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1373

2017-12-12 Google Security Research dos

Vivotek IP Cameras – Remote Stack Overflow (PoC)

[STX]

2017-12-12 bashis remote