Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 174

Pay Banner Text Link Ad 1.0.6.1 – Cross-Site Request Forgery (Update Admin)

# # # # #

2017-09-06 Ihsan Sencan webapps

Pay Banner Text Link Ad 1.0.6.1 – SQL Injection

# # # # #

2017-09-06 Ihsan Sencan webapps

Jungo DriverWizard WinDriver < 12.4.0 - Kernel Pool Overflow / Local Privilege Escalation (1)

# -*- coding: utf-8 -*-

2017-09-06 mr_me local

Jungo DriverWizard WinDriver < 12.4.0 - Kernel Out-of-Bounds Write Privilege Escalation

# -*- coding: utf-8 -*-

2017-09-06 mr_me local

Tor (Linux) – X11 Linux Sandbox Breakout

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1293&desc=2

2017-09-06 Google Security Research local

Apache Struts 2.5 < 2.5.12 - REST Plugin XStream Remote Code Execution

# Exploit Title: Struts 2.5 - 2.5.12 REST Plugin XStream RCE

2017-09-06 Warflop remote

A2billing 2.x – SQL Injection

# Title : A2billing 2.x , Sql injection vulnerability

2017-09-05 0x4148 webapps

The Car Project 1.0 – SQL Injection

# # # # #

2017-09-05 Ihsan Sencan webapps

Ultimate HR System < 1.2 - Directory Traversal / Cross-Site Scripting

# Exploit Title: HRM - Workable Zone : Ultimate HR System Last Name

2017-09-05 8bitsec webapps

FiberHome ADSL AN1020-25 – Improper Access Restrictions

Title:

2017-09-05 Ibad Shah webapps

Wireless Repeater BE126 – Remote Code Execution

# Exploit Title: WIFI Repeater BE126 – Remote Code Execution

2017-09-04 Hay Mizrachi webapps

CodeMeter 6.50 – Cross-Site Scripting

Document Title:

2017-09-04 Vulnerability-Lab webapps

RubyGems < 2.6.13 - Arbitrary File Overwrite

There is no check for name field in metadata.gz. By assigning a maliciously crafted string like ../../../../../any/wh...

2017-09-04 mame local

Dup Scout Enterprise 9.9.14 – ‘Input Directory’ Local Buffer Overflow

#!/usr/bin/python

2017-09-04 Touhid M.Shaikh local

Mongoose Web Server 6.5 – Cross-Site Request Forgery / Remote Code Execution

[+] Credits: John Page AKA hyp3rlinx

2017-09-04 hyp3rlinx remote

A2billing 2.x – Backup File Download / Remote Code Execution

# Title : A2billing 2.x , Unauthenticated Backup dump / RCE flaw

2017-09-04 0x4148 webapps

iGreeting Cards 1.0 – SQL Injection

# # # # #

2017-09-04 Ihsan Sencan webapps

Joomla! Component Survey Force Deluxe 3.2.4 – ‘invite’ SQL Injection

# # # # #

2017-09-03 Ihsan Sencan webapps

Joomla! Component CheckList 1.1.0 – SQL Injection

# # # # #

2017-09-03 Ihsan Sencan webapps

IBM Notes 8.5.x/9.0.x – Denial of Service

# Exploit Title: IBM Notes is affected by a denial of service vulnerability

2017-09-02 Dhiraj Mishra dos

Lotus Notes Diagnostic Tool 8.5/9.0 – Local Privilege Escalation

# Exploit Title: Lotus Notes Diagnostic Tool (nsd.exe) Privelege Escalation

2017-09-02 ParagonSec local

OpenJPEG – ‘mqc.c’ Heap Buffer Overflow

DESCRIPTION

2017-09-01 Ke Liu dos

Motorola Bootloader – Kernel Cmdline Injection Secure Boot and Device Locking Bypass

Sources:

2017-09-01 Roee Hay local

WordPress Plugin Participants Database < 1.7.5.10 - Cross-Site Scripting

# Exploit Title: Wordpress Plugin Participants Database < 1.7.5.10 - XSS

2017-09-01 Benjamin Lim webapps

Joomla! Component Huge-IT Video Gallery 1.0.9 – SQL Injection

# Exploit Title Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla

2017-08-31 Larry W. Cashdollar webapps

Joomla! Component Huge-IT Portfolio Gallery Plugin 1.0.6 – SQL Injection

# Exploit Title Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6

2017-08-31 Larry W. Cashdollar webapps

Joomla! Component Huge-IT Portfolio Gallery Plugin 1.0.7 – SQL Injection

# Exploit Title Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla

2017-08-31 Larry W. Cashdollar webapps

Git < 2.7.5 - Command Injection (Metasploit)

##

2017-08-31 Metasploit remote

IBM Notes 8.5.x/9.0.x – Denial of Service (2)

# Exploit Title: IBM Notes is affected by a denial of service vulnerability

2017-08-31 Dhiraj Mishra dos

Sitefinity CMS 9.2 – Cross-Site Scripting

# Exploit Title: Stored Cross Site Scripting (XSS) in Progress Sitefinity CMS 9.2

2017-08-31 Pralhad Chaskar webapps

IBM Notes 8.5.x/9.0.x – Denial of Service (Metasploit)

##

2017-08-31 Dhiraj Mishra dos

Joomla! Component Quiz Deluxe 3.7.4 – SQL Injection

# # # # #

2017-08-30 Ihsan Sencan webapps

Joomla! Component Joomanager 2.0.0 – ‘com_Joomanager’ Arbitrary File Download (PoC)

# # # # #

2017-08-30 Ihsan Sencan webapps

Invoice Manager 3.1 – Cross-Site Request Forgery (Add Admin)

# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #

2017-08-30 Ali BawazeEer webapps

PHP-SecureArea < 2.7 - Multiple Vulnerabilities

# Exploit Title: PHP-SecureArea

2017-08-30 Cryo webapps

Metasploit Web UI < 4.14.1-20170828 - Cross-Site Request Forgery

# Exploit Title: CSRF

2017-08-30 Dhiraj Mishra webapps

Oracle Java JDK/JRE < 1.8.0.131 / Apache Xerces 2.11.0 - 'PDF/Docx' Server Side Denial of Service

## Vulnerabilities Summary

2017-08-30 SecuriTeam dos

D-Link DIR-600 – Authentication Bypass

# Exploit Title: D-Link DIR-600 - Authentication Bypass (Absolute Path Traversal Attack)

2017-08-29 Jithin D Kurup webapps

User Login and Management – Multiple Vulnerabilities

-----------------------------------------------------------------------------------

2017-08-29 Ali BawazeEer webapps

QNAP Transcode Server – Command Execution (Metasploit)

##

2017-08-29 Metasploit remote

Brickcom IP Camera – Credentials Disclosure

1. Advisory Information

2017-08-29 Emiliano Ipar webapps

FineCMS 1.0 – Multiple Vulnerabilities

# # # # #

2017-08-29 sohaip-hackerDZ webapps

Easy WMV/ASF/ASX to DVD Burner 2.3.11 – Local Buffer Overflow (SEH)

#!/usr/bin/python

2017-08-28 Touhid M.Shaikh local

Easy RM RMVB to DVD Burner 1.8.11 – Local Buffer Overflow (SEH)

#!/usr/bin/python

2017-08-28 Touhid M.Shaikh local