Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 170

Dnsmasq < 2.78 - Information Leak

'''

2017-10-02 Google Security Research dos

Dnsmasq < 2.78 - Lack of free() Denial of Service

'''

2017-10-02 Google Security Research dos

Dnsmasq < 2.78 - Integer Underflow

'''

2017-10-02 Google Security Research dos

UCOPIA Wireless Appliance < 5.1 (Captive Portal) - Root Remote Code Execution

# Exploit Title: Unauthenticated remote root code execution on captive

2017-10-02 agix remote

Sync Breeze Enterprise 10.0.28 – Remote Buffer Overflow

# Exploit Title: [SyncBreeze POST username overflow]

2017-09-30 Owais Mehtab remote

Microsoft Word 2007 (x86) – Information Disclosure

Title: MS Office Word Information Disclosure Vulnerability

2017-09-30 Eduardo Braun Prado local

Microsoft Excel – OLE Arbitrary Code Execution

Title: MS Office Excel (all versions) Arbitrary Code Execution Vulnerability

2017-09-30 Eduardo Braun Prado dos

Trend Micro OfficeScan 11.0/XG (12.0) – Memory Corruption

[+] Credits: John Page (aka hyp3rlinx)

2017-09-29 hyp3rlinx dos

Dup Scout Enterprise 10.0.18 – ‘Import Command’ Local Buffer Overflow

#!/usr/bin/python

2017-09-29 Touhid M.Shaikh local

FileRun < 2017.09.18 - SQL Injection

#!/usr/bin/env python

2017-09-29 SPARC webapps

WordPress Plugin WPHRM – SQL Injection

# # # # #

2017-09-29 Ihsan Sencan webapps

ConverTo Video Downloader & Converter 1.4.1 – Arbitrary File Download

# # # # #

2017-09-29 Ihsan Sencan webapps

Trend Micro OfficeScan 11.0/XG (12.0) – Private Key Disclosure

[+] Credits: John Page (aka hyp3rlinx)

2017-09-28 hyp3rlinx webapps

Trend Micro OfficeScan 11.0/XG (12.0) – Image File Execution Bypass

[+] Credits: John Page (aka hyp3rlinx)

2017-09-28 hyp3rlinx local

Trend Micro OfficeScan 11.0/XG (12.0) – Man In The Middle Remote Code Execution

[+] Credits: John Page (aka hyp3rlinx)

2017-09-28 hyp3rlinx remote

Trend Micro OfficeScan 11.0/XG (12.0) – Code Execution / Memory Corruption

[+] Credits: John Page (aka hyp3rlinx)

2017-09-28 hyp3rlinx webapps

Trend Micro OfficeScan 11.0/XG (12.0) – Information Disclosure

[+] Credits: John Page (aka hyp3rlinx)

2017-09-28 hyp3rlinx webapps

Trend Micro OfficeScan 11.0/XG (12.0) – Server Side Request Forgery

[+] Credits: John Page (aka hyp3rlinx)

2017-09-28 hyp3rlinx webapps

Trend Micro OfficeScan 11.0/XG (12.0) – ‘Host’ Header Injection

[+] Credits: John Page (aka hyp3rlinx)

2017-09-28 hyp3rlinx webapps

Roteador Wireless Intelbras WRN150 – Autentication Bypass

# Exploit Title: Autentication Bypass/Config file download - INTELBRAS WRN

2017-09-28 Elber Tavares webapps

DiskBoss Enterprise 8.4.16 – Local Buffer Overflow (PoC)

#!/usr/bin/python

2017-09-28 Touhid M.Shaikh dos

DiskBoss Enterprise 8.4.16 – ‘Import Command’ Local Buffer Overflow

#!/usr/bin/python

2017-09-28 Touhid M.Shaikh local

Easy Blog PHP Script 1.3a – ‘id’ SQL Injection

# Exploit Title: Easy Blog PHP Script v1.3a - SQL Injection

2017-09-28 8bitsec webapps

PHP Multi Vendor Script 1.02 – ‘sid’ SQL Injection

# Exploit Title: PHP Multi Vendor Script v1.02 - 'sid' Parameter SQL Injection

2017-09-28 8bitsec webapps

Real Estate MLM plan script 1.0 – ‘srch’ SQL Injection

# Exploit Title: Real Estate MLM plan script v1.0 - 'srch' Parameter SQL Injection

2017-09-28 8bitsec webapps

Microsoft Office Groove – ‘Workspace Shortcut’ Arbitrary Code Execution

Title: MS Office Groove 'Workspace Shortcut' Arbitrary Code Execution Vulnerability

2017-09-28 Eduardo Braun Prado dos

Oracle WebLogic Server 10.3.6.0 – Java Deserialization Remote Code Execution

# Exploit Title: [Oracle WebLogic Server Java Deserialization Remote Code Execution]

2017-09-27 SlidingWindow remote

LAquis SCADA 4.1.0.2385 – Directory Traversal (Metasploit)

require 'msf/core'

2017-09-27 James Fitts remote

Cisco Prime Collaboration Provisioning < 12.1 - Authentication Bypass / Remote Code Execution

# Exploit Title: Cisco Prime Collaboration Provisioning < 12.1 - ScriptMgr Servlet Authentication Bypass Remote Code ...

2017-09-27 Adam Brown remote

SmarterStats 11.3.6347 – Cross-Site Scripting

----------------------------

2017-09-27 sqlhacker webapps

Netgear ReadyNAS Surveillance 1.4.3-16 – Remote Command Execution

# Exploit Netgear ReadyNAS Surveillance 1.4.3-16 Unauthenticated RCE

2017-09-27 Kacper Szurek webapps

Sync Breeze Enterprise 10.0.28 – Denial of-Service (PoC)

#!/usr/bin/python

2017-09-27 Mr Bruce dos

Tiny HTTPd 0.1.0 – Directory Traversal

#======================================================================================

2017-09-26 Touhid M.Shaikh remote

NodeJS Debugger – Command Injection (Metasploit)

##

2017-09-26 Metasploit remote