Chrome 35.0.1916.153 – Sandbox Escape / Command Execution
Sandbox escape Chrome exploit. Allows the execution of local binaries, read/write functions and exfiltration of Chrom...
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 169
TYPO3 Extension Restler 1.7.0 – Local File Disclosure
# Exploit Title: Typo3 Restler Extension - Local File Disclosure
phpMyFAQ 2.9.8 – Cross-Site Scripting (2)
# Exploit Title: phpMyFAQ 2.9.8 Stored XSS
AlienVault Unified Security Management (USM) 5.4.2 – Cross-Site Request Forgery
1. ADVISORY INFORMATION
FiberHome – Directory Traversal
## Vulnerability Summary
OctoberCMS 1.0.425 (Build 425) – Cross-Site Scripting
# Exploit Title: OctoberCMS 1.0.425 (aka Build 425) Stored XSS
E-Sic Software livre CMS – ‘q’ SQL Injection
# Exploit Title: E-Sic Software livre CMS - Blind SQL Injection
E-Sic Software livre CMS – Autentication Bypass
# Exploit Title: E-Sic Software livre CMS - Autentication Bypass#
E-Sic Software livre CMS – ‘cpfcnpj’ SQL Injection
# Exploit Title: E-Sic Software livre CMS - Sql Injection
E-Sic Software livre CMS – ‘f’ SQL Injection
# Exploit Title: E-Sic Software livre CMS - Sql Injection
E-Sic Software livre CMS – Cross Site Scripting
# Exploit Title: E-Sic Software livre CMS - Cross Site Scripting#
Dreambox Plugin BouquetEditor – Cross-Site Scripting
# Exploit Title: Vulnerability XSS - Dreambox
TP-Link TL-MR3220 – Cross-Site Scripting
# Exploit Title: Vulnerability Xss - TP-LINK TL-MR3220
ASX to MP3 3.1.3.7 – ‘.m3u’ Local Buffer Overflow
# Exploit Title: Buffer Overflow via crafted malicious .m3u file
Trend Micro Data Loss Prevention Virtual Appliance 5.2 – Path Traversal
# Exploit Title: Trend Micro Data Loss Prevention Virtual Appliance 5.2 Web Path Traversal
Complain Management System – Hard-Coded Credentials / Blind SQL injection
# Exploit Title : Complain Management System Blind SQL Injection
binutils 2.29.51.20170921 – ‘read_1_byte’ Heap Buffer Overflow
Source: https://blogs.gentoo.org/ago/2017/09/26/binutils-heap-based-buffer-overflow-in-read_1_byte-dwarf2-c/
ClipShare 7.0 – SQL Injection
# Exploit Title: ClipShare v7.0 - SQL Injection
VX Search Enterprise 10.1.12 – Remote Buffer Overflow
#!/usr/bin/env python
PHP Melody 2.7.3 – Multiple Vulnerabilities
## Vulnerabilities Summary
QNAP HelpDesk < 1.1.12 - SQL Injection
## Vulnerability Summary
PyroBatchFTP 3.17 – Buffer Overflow (SEH)
#!/usr/bin/python
ClipBucket 2.8.3 – Remote Code Execution
# Exploit Title: ClipBucket PHP Script Remote Code Execution (RCE)
Fiberhome AN5506-04-F – Command Injection
# Exploit Title: Fiberhome an5506-04-f – -PING- COMMAND INJECTION
EPESI 1.8.2 rev20170830 – Cross-Site Scripting
# Exploit Title: Multiple Stored XSS in EPESI
DiskBoss Enterprise 8.4.16 – Local Buffer Overflow
#!/usr/bin/python
Webkit (Chome < 61) - 'MHTML' Universal Cross-site Scripting
MIME-Version: 1.0
Linux Kernel < 4.14.rc3 - Local Denial of Service
# Exploit Title: Linux Kernelnr_frags was overwritten by ev->iferror = err
NPM-V (Network Power Manager) 2.4.1 – Password Reset
NPM-V(Network Power Manager)
phpCollab 2.5.1 – Arbitrary File Upload
# [CVE-2017-6090] PhpCollab 2.5.1 Arbitrary File Upload (unauthenticated)
phpCollab 2.5.1 – SQL Injection
# [CVE-2017-6089] PhpCollab 2.5.1 Multiple SQL Injections (unauthenticated)
UCOPIA Wireless Appliance < 5.1.8 - Local Privilege Escalation
# [CVE-2017-11322] UCOPIA Wireless Appliance < 5.1.8 Privileges Escalation
UCOPIA Wireless Appliance < 5.1.8 - Restricted Shell Escape
# [CVE-2017-11321] UCOPIA Wireless Appliance < 5.1.8 Restricted Shell Escape
OpenText Document Sciences xPression 4.5SP1 Patch 13 – ‘jobRunId’ SQL Injection
Title: OpenText Document Sciences xPression (formerly EMC Document
OpenText Document Sciences xPression 4.5SP1 Patch 13 – ‘documentId’ SQL Injection
Title: OpenText Document Sciences xPression (formerly EMC Document