Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 168

FS Amazon Clone – ‘category_id’ SQL Injection

# Exploit Title: FS Amazon Clone - SQL Injection

2017-10-23 8bitsec webapps

FS Book Store Script – ‘category’ SQL Injection

# Exploit Title: FS Book Store Script - SQL Injection

2017-10-23 8bitsec webapps

FS Ebay Clone – ‘pd_maincat_id’ SQL Injection

# Exploit Title: FS Ebay Clone - SQL Injection

2017-10-23 8bitsec webapps

FS Food Delivery Script – ‘keywords’ SQL Injection

# Exploit Title: FS Food Delivery Script - SQL Injection

2017-10-23 8bitsec webapps

FS Expedia Clone – ‘hid’ SQL Injection

# Exploit Title: FS Expedia Clone - SQL Injection

2017-10-23 8bitsec webapps

FS Freelancer Clone – ‘sk’ SQL Injection

# Exploit Title: FS Freelancer Clone - SQL Injection

2017-10-23 8bitsec webapps

FS Groupon Clone – ‘category’ SQL Injection

# Exploit Title: FS Groupon Clone - SQL Injection

2017-10-23 8bitsec webapps

FS Indiamart Clone – ‘keywords’ SQL Injection

# Exploit Title: FS Indiamart Clone - SQL Injection

2017-10-23 8bitsec webapps

FS Lynda Clone – ‘category’ SQL Injection

# Exploit Title: FS Lynda Clone - SQL Injection

2017-10-23 8bitsec webapps

FS OLX Clone – ‘catg_id’ SQL Injection

# Exploit Title: FS OLX Clone - SQL Injection

2017-10-23 8bitsec webapps

K7 Total Security 15.1.0.305 – Device Driver Arbitrary Memory Read

## Vulnerability Summary

2017-10-23 SecuriTeam dos

CometChat < 6.2.0 BETA 1 - Local File Inclusion

# Exploit Title: CometChat < v6.2.0 BETA 1 - Local File Inclusion

2017-10-22 Paradoxis webapps

Linux Kernel 4.14.0-rc4+ – ‘waitid()’ Local Privilege Escalation

#define _GNU_SOURCE

2017-10-22 @XeR_0x2A & @chaign_c local

WordPress Plugin Polls 1.2.4 – SQL Injection (PoC)

Exploit Title :WordPress Polls plugin(1.2.4) SQL Injection vulnerability

2017-10-22 Manish Tanwar remote

Ayukov NFTP FTP Client < 2.0 - Remote Buffer Overflow

#!/usr/bin/env python

2017-10-21 Berk Cem Göksel remote

ArGoSoft Mini Mail Server 1.0.0.2 – Denial of Service

#!/usr/bin/env python

2017-10-21 Berk Cem Göksel dos

Sync Breeze Enterprise 10.1.16 – ‘POST’ Remote Buffer Overflow

#!/usr/bin/python

2017-10-20 mschenk remote

Mozilla Firefox < 55 - Denial of Service

# Exploit Title: Mozilla Firefox < 55 - Forcibly make someone view a web content

2017-10-20 Amit Sangra dos

Axis SSI – Remote Command Execution / Read Files

[STX]

2017-10-20 bashis remote

Microsoft Game Definition File Editor 6.3.9600 – XML External Entity Injection

[+] Credits: John Page (aka hyp3rlinx)

2017-10-19 hyp3rlinx local

Linksys E Series – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20171018-1 >

2017-10-18 SEC Consult webapps

Xen – Pagetable De-typing Unbounded Recursion

Xen allows pagetables of the same level to map each other as readonly

2017-10-18 Google Security Research dos

Afian AB FileRun 2017.03.18 – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20171018-0 >

2017-10-18 SEC Consult webapps

Check_MK 1.2.8p25 – Information Disclosure

1. ADVISORY INFORMATION

2017-10-18 Julien Ahrens webapps

Squid Analysis Report Generator 2.3.10 – Remote Code Execution

# Exploit Title: RCE/Arbitrary file write in Squid Analysis Report Generator (SARG)

2017-10-17 Pavel Suprunyuk webapps

Apple iOS 10.2 (14C92) – Remote Code Execution

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1317#c3

2017-10-17 Google Security Research remote