Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 163

Vanguard 1.4 – Arbitrary File Upload

# # # # #

2017-12-11 Ihsan Sencan webapps

Vanguard 1.4 – SQL Injection

# # # # #

2017-12-11 Ihsan Sencan webapps

MikroTik 6.40.5 ICMP – Denial of Service

#include

2017-12-11 FarazPajohan dos

Apple macOS – ‘necp_get_socket_attributes’ so_pcb Type Confusion

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1392&desc=2

2017-12-11 Google Security Research dos

Apple macOS – ‘getrusage’ Stack Leak Through struct Padding

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1405

2017-12-11 Google Security Research dos

Apple macOS/iOS – Kernel Double Free due to IOSurfaceRootUserClient not Respecting MIG Ownership Rules

I have previously detailed the lifetime management paradigms in MIG in the writeups for:

2017-12-11 Google Security Research dos

Apple macOS XNU Kernel – Memory Disclosure due to bug in Kernel API for Detecting Kernel Memory Disclosures

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1372

2017-12-11 Google Security Research dos

LibTIFF pal2rgb 4.0.9 – Heap Buffer Overflow

Source: http://bugzilla.maptools.org/show_bug.cgi?id=2750

2017-12-11 Jungun Baek dos

Linux Kernel 4.13 (Debian 9) – Local Privilege Escalation

#include

2017-12-11 anonymous local

Linux Kernel – ‘mincore()’ Heap Page Disclosure (PoC)

#define _GNU_SOURCE

2017-12-11 anonymous dos

Linux Kernel – ‘The Huge Dirty Cow’ Overwriting The Huge Zero Page (2)

#define _GNU_SOURCE

2017-12-11 anonymous dos

FS Linkedin Clone 1.0 – ‘grid’ / ‘fid’ / ‘id’ SQL Injection

# # # # #

2017-12-09 Ihsan Sencan webapps

FS Indiamart Clone 1.0 – ‘token’ / ‘id’ / ‘c’ SQL Injection

# # # # #

2017-12-09 Ihsan Sencan webapps

FS IMDB Clone 1.0 – ‘f’ / ‘s’ / ‘id’ SQL Injection

# # # # #

2017-12-09 Ihsan Sencan webapps

FS Grubhub Clone 1.0 – ‘keywords’ SQL Injection

Ver Ayari

2017-12-09 Ihsan Sencan webapps

FS Groupon Clone 1.0 – ‘id’ SQL Injection

# # # # #

2017-12-09 Ihsan Sencan webapps

FS Gigs Script 1.0 – ‘cat’ / ‘sc’ SQL Injection

# # # # #

2017-12-09 Ihsan Sencan webapps

FS Freelancer Clone 1.0 – ‘profile.php?u’ SQL Injection

# # # # #

2017-12-09 Ihsan Sencan webapps

FS Ebay Clone 1.0 – ‘id’ / ‘sub_category_id’ / ‘category_id’ SQL Injection

# # # # #

2017-12-09 Ihsan Sencan webapps

FS Crowdfunding Script 1.0 – ‘latest_news_details.php?id’ SQL Injection

# # # # #

2017-12-09 Ihsan Sencan webapps

FS Care Clone 1.0 – ‘jobFrequency’ / ‘jobType’ SQL Injection

# # # # #

2017-12-09 Ihsan Sencan webapps

FS Amazon Clone 1.0 – SQL Injection

# # # # #

2017-12-09 Ihsan Sencan webapps

FS Trademe Clone 1.0 – ‘search’ / ‘id’ SQL Injection

# # # # #

2017-12-09 Ihsan Sencan webapps

FS Expedia Clone 1.0 – ‘fl_orig’ / ‘fl_dest’ / ‘id’ SQL Injection

# # # # #

2017-12-09 Ihsan Sencan webapps

FS Foodpanda Clone 1.0 – SQL Injection

2017-12-09 Ihsan Sencan webapps

Advance B2B Script 2.1.3 – ‘show_id’ / ‘pid’ SQL Injection

# # # # #

2017-12-09 Ihsan Sencan webapps

Advance Online Learning Management Script 3.1 – ‘subcatid’ / ‘popcourseid’ SQL Injection

# # # # #

2017-12-09 Ihsan Sencan webapps

Affiliate MLM Script 1.0 – ‘product-category.php?key’ SQL Injection

# # # # #

2017-12-09 Ihsan Sencan webapps

Basic B2B Script 2.0.8 – ‘product_details.php?id’ SQL Injection

# # # # #

2017-12-09 Ihsan Sencan webapps

Beauty Parlour Booking Script 1.0 – ‘gender’ / ‘city’ SQL Injection

# # # # #

2017-12-09 Ihsan Sencan webapps