WordPress Plugin WooCommerce 2.0/3.0 – Directory Traversal
# Exploit Title: WordPress woocommerce directory traversal
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 165
Apple macOS 10.13.1 (High Sierra) – ‘Blank Root’ Local Privilege Escalation
## Source: https://twitter.com/lemiorhan/status/935578694541770752 & https://forums.developer.apple.com/thread/79235
Microsoft Edge Chakra JIT – ‘BailOutOnTaggedValue’ Bailouts Type Confusion
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1364
Microsoft Edge Chakra JIT – ‘Inline::InlineCallApplyTarget_Shared’ does not Return the return Instruction
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1366
Microsoft Edge Chakra JIT – Incorrect Function Declaration Scope
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1367
Microsoft Edge Chakra JIT – ‘GlobOpt::OptTagChecks’ Must Consider IsLoopPrePass Properly
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1365
Exim 4.89 – ‘BDAT’ Denial of Service
While parsing BDAT data header, exim still scans for '.' and consider it the end of mail.
Diving Log 6.0 – XML External Entity Injection
[+] Exploit Title: Diving Log 6.0 XXE Injection
ZTE ZXDSL 831CII – Improper Access Restrictions
# Exploit Title: ZTE ZXDSL 831 Unauthorized Configuration Access
ALLPlayer 7.5 – Denial of-Service (PoC)
#!/usr/bin/python
ALLPlayer 7.5 – Local Buffer Overflow (SEH Unicode)
#!/usr/bin/python
Linux Kernel – ‘mincore()’ Uninitialized Kernel Heap Page Disclosure
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1431
Linux Kernel (Ubuntu 17.04) – ‘XFRM’ Local Privilege Escalation
## Vulnerability Summary
WebKit – ‘WebCore::TreeScope::documentScope’ Use-After-Free
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1344
WebKit – ‘WebCore::InputType::element’ Use-After-Free (2)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1345
WebKit – ‘WebCore::PositionIterator::decrement’ Use-After-Free
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1346
WebKit – ‘WebCore::AXObjectCache::performDeferredCacheUpdate’ Use-After-Free
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1347
WebKit – ‘WebCore::RenderText::localCaretRect’ Out-of-Bounds Read
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1348
WebKit – ‘WebCore::SimpleLineLayout::RunResolver::runForPoint’ Out-of-Bounds Read
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1349
WebKit – ‘WebCore::SVGPatternElement::collectPatternAttributes’ Out-of-Bounds Read
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1350
KMPlayer 4.2.2.4 – Denial of Service
#!/usr/bin/perl
Winamp Pro 5.66.Build.3512 – Denial of Service
#!/usr/bin/perl
Vonage VDV-23 – Denial of Service
Overview
Microsoft Windows 10 – ‘nt!NtQueryDirectoryFile (luafv!LuafvCopyDirectoryEntry)’ Pool Memory Disclosure
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1361
DblTek – Multiple Vulnerabilities
## Vulnerabilities summary
iOS < 11.1 / tvOS < 11.1 / watchOS < 4.1 - Denial of Service
# Exploit Title: TpwnT - iOS Denail of Service POC
Microsoft Windows 10 – CiSetFileCache TOCTOU Security Feature Bypass
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1332
Microsoft Office – OLE Remote Code Execution
Source: https://github.com/embedi/CVE-2017-11882
Icon Time Systems RTC-1000 Firmware 2.5.7458 – Cross-Site Scripting
# Exploit Title: Icon Time Systems RTC-1000 (
TP-Link TL-WR740N – Cross-Site Scripting
# Exploit Title: XSS Vuln - TP-LINK TL-WR740N
LanSweeper 6.0.100.75 – Cross-Site Scripting
LanSweeper - Cross Site Scripting and HTMLi
Vonage VDV23 – Cross-Site Scripting
# Exploit Title: Vonage Home Router – Stored Xss
Microsoft Edge Chakra JIT – Type Confusion with switch Statements
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1341&desc=3
Microsoft Edge Chakra: JIT – ‘Lowerer::LowerBoundCheck’ Incorrect Integer Overflow Check
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1343
Microsoft Edge Chakra: JIT – ‘OP_Memset’ Type Confusion
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1357
Zeta Components Mail 1.8.1 – Remote Code Execution
Vendor: Zeta Components
VX Search 10.2.14 – ‘Proxy’ Local Buffer Overflow (SEH)
#!/usr/bin/env python
CommuniGatePro 6.1.16 – Cross-Site Scripting
# Exploit Title: CommuniGatePro webmails Multiple Stored XSS
PSFTPd Windows FTP Server 10.0.4 Build 729 – Log Injection / Use-After-Free
X41 D-Sec GmbH Security Advisory: X41-2017-006
Dup Scout Enterprise 10.0.18 – ‘Login’ Remote Buffer Overflow
# Tested on Windows 10 (x86)
D-Link DIR-605L < 2.08 - Denial of Service
# Exploit Title: D-Link DIR605L
Web Viewer 1.0.0.193 (Samsung SRN-1670D) – Unrestricted File Upload
# Exploit Title: Unrestricted file upload vulnerability - Web Viewer 1.0.0.193 on Samsung SRN-1670D
IKARUS anti.virus 2.16.7 – ‘ntguard_x64’ Local Privilege Escalation
Exploit Title - IKARUS anti.virus Arbitrary Write Privilege Escalation