Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 173

Carel PlantVisor 2.4.4 – Directory Traversal Information Disclosure (Metasploit)

require 'msf/core'

2017-09-13 James Fitts webapps

Alienvault OSSIM av-centerd – Util.pm sync_rserver Command Execution (Metasploit)

require 'msf/core'

2017-09-13 James Fitts remote

Alienvault OSSIM av-centerd 4.7.0 – ‘get_log_line’ Command Injection (Metasploit)

require 'msf/core'

2017-09-13 James Fitts remote

Microsoft Windows .NET Framework – Remote Code Execution

Source: https://github.com/Voulnet/CVE-2017-8759-Exploit-sample

2017-09-13 Voulnet remote

Astaro Security Gateway 7 – Remote Code Execution

#!/usr/bin/python

2017-09-13 Jakub Palaczynski remote

Foodspotting Clone 1.0 – SQL Injection

# Exploit Title: Foodspotting Clone v1.0 - SQL Injection/Reflected XSS

2017-09-13 8bitsec webapps

osTicket 1.10 – SQL Injection (PoC)

1. ADVISORY INFORMATION

2017-09-12 Mehmet Ince webapps

FoodStar 1.0 – SQL Injection

# # # # #

2017-09-12 Ihsan Sencan webapps

Gr8 Multiple Search Engine Script 1.0 – SQL Injection

# # # # #

2017-09-12 Ihsan Sencan webapps

inClick Cloud Server 5.0 – SQL Injection

# # # # #

2017-09-12 Ihsan Sencan webapps

Jungo DriverWizard WinDriver < 12.4.0 - Kernel Pool Overflow / Local Privilege Escalation (2)

# -*- coding: utf-8 -*-

2017-09-12 mr_me local

WebKit JSC – ‘BytecodeGenerator::emitGetByVal’ Incorrect Optimization (1)

Let's start with JS code.

2017-09-12 Google Security Research dos

XYZ Auto Classifieds 1.0 – SQL Injection

# Exploit Title: XYZ Auto Classifieds v1.0 - SQL Injection

2017-09-12 8bitsec webapps

Consumer Review Script 1.0 – SQL Injection

# Exploit Title: Consumer Review Script v1.0 - SQL Injection

2017-09-12 8bitsec webapps

D-Link DIR-8xx Routers – Leak Credentials

# phpcgi is responsible for processing requests to .php, .asp and .txt pages. Also, it checks whether a user is autho...

2017-09-12 embedi webapps

D-Link DIR-8xx Routers – Root Remote Code Execution

# Due to error in hnap protocol implementation we can overflow stack and execute any sh commands under root priviliges.

2017-09-12 embedi webapps

D-Link DIR-8xx Routers – Local Firmware Upload

#!/bin/bash

2017-09-12 embedi webapps

Nimble Professional 1.0 – Cross-Site Request Forgery (Update Admin)

Edit Profile:

2017-09-11 Ihsan Sencan webapps

Docker Daemon – Unprotected TCP Socket (Metasploit)

##

2017-09-11 Metasploit remote

WiseGiga NAS – Multiple Vulnerabilities

Source: https://blogs.securiteam.com/index.php/archives/3402

2017-09-11 Pierre Kim webapps

tcprewrite – Heap Buffer Overflow

################

2017-09-11 FarazPajohan dos

PHP Dashboards NEW 4.4 – Arbitrary File Read

# # # # #

2017-09-11 Ihsan Sencan webapps

PHP Dashboards NEW 4.4 – SQL Injection

# # # # #

2017-09-11 Ihsan Sencan webapps

JobStar Monster Clone Script 1.0 – SQL Injection

# Exploit Title: JobStar Monster Clone Script v1.0 - SQL Injection

2017-09-11 8bitsec webapps

iTech Book Store Script 2.02 – SQL Injection

# Exploit Title: iTech Book Store Script v2.02 - SQL Injection / Reflected XSS

2017-09-11 8bitsec webapps

iTech StockPhoto Script 2.02 – SQL Injection

# Exploit Title: iTech StockPhoto Script v2.02 - SQL Injection

2017-09-11 8bitsec webapps

EduStar Udemy Clone Script 1.0 – SQL Injection

# Exploit Title: EduStar Udemy Clone Script v1.0 - SQL Injection

2017-09-11 8bitsec webapps

AirStar Airbnb Clone Script 1.0 – SQL Injection

# Exploit Title: AirStar Airbnb Clone Script v1.0 - SQL Injection

2017-09-11 8bitsec webapps

Hanbanggaoke IP Camera – Arbitrary Password Change

## Vulnerability summary

2017-09-11 SecuriTeam webapps