Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 178

DNSTracer 1.9 – Local Buffer Overflow

# Exploit Title: DNSTracer 1.9 - Buffer Overflow

2017-08-03 j0lama local

VirtualBox 5.1.22 – Windows Process DLL Signature Bypass Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1257

2017-08-03 Google Security Research local

VirtualBox 5.1.22 – Windows Process DLL UNC Path Signature Bypass Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1296

2017-08-03 Google Security Research local

Technicolor TC7337 – ‘SSID’ Persistent Cross-Site Scripting

// Device : Technicolor TC7337

2017-08-03 Geolado giolado webapps

Tiandy IP Cameras 5.56.17.120 – Sensitive Information Disclosure

## Vulnerability Summary

2017-08-03 SecuriTeam webapps

Horde Groupware 5.2.21 – Unauthorized File Download

## Vulnerability Summary

2017-08-03 SecuriTeam webapps

Dashlane – DLL Hijacking

## Vulnerability Summary

2017-08-03 SecuriTeam local

Entrepreneur B2B Script – ‘pid’ SQL Injection

# Exploit Title: Entrepreneur B2B Script - 'pid' Parameter SQL Injection

2017-08-02 Meisam Monsef webapps

Joomla! Component SIMGenealogy 2.1.5 – SQL Injection

# # # # #

2017-08-02 Ihsan Sencan webapps

Joomla! Component PHP-Bridge 1.2.3 – SQL Injection

# # # # #

2017-08-02 Ihsan Sencan webapps

Joomla! Component LMS King Professional 3.2.4.0 – SQL Injection

# # # # #

2017-08-02 Ihsan Sencan webapps

Joomla! Component Event Registration Pro Calendar 4.1.3 – SQL Injection

# # # # #

2017-08-02 Ihsan Sencan webapps

Joomla! Component Ultimate Property Listing 1.0.2 – SQL Injection

# # # # #

2017-08-02 Ihsan Sencan webapps

Nitro Pro PDF Reader 11.0.3.173 – Javascript API Code Execution (Metasploit)

##

2017-08-02 Metasploit local

Premium Servers List Tracker 1.0 – SQL Injection

Exploit Title: Premium Servers List Tracker v1.0 – SQL Injection

2017-08-02 Kaan KAMIS webapps

EDUMOD Pro 1.3 – SQL Injection

Exploit Title: School Management System | EDUMOD Pro v1.3 – SQL Injection

2017-08-02 Kaan KAMIS webapps

Muviko 1.0 – ‘q’ SQL Injection

Exploit Title: Muviko - Video CMS v1.0 – 'q' Parameter SQL Injection

2017-08-02 Kaan KAMIS webapps

Apple macOS/iOS – ‘xpc_data’ Objects Sandbox Escape Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1247

2017-08-01 Google Security Research local

Advantech SUSIAccess < 3.0 - Directory Traversal / Information Disclosure (Metasploit)

require 'msf/core'

2017-08-01 James Fitts webapps

Advantech SUSIAccess < 3.0 - 'RecoveryMgmt' File Upload

#!/usr/bin/env ruby

2017-08-01 James Fitts webapps

VehicleWorkshop – Authentication Bypass

[*] Type: Admin or Customer login bypass via SQL injection

2017-08-01 Touhid M.Shaikh webapps

VehicleWorkshop – Arbitrary File Upload

# Exploit Title: VehicleWorkshop Unrestricted File Upload or Shell Upload

2017-08-01 Touhid M.Shaikh webapps

SOL.Connect ISET-mpp meter 1.2.4.2 – SQL Injection

Vulnerability type:

2017-08-01 Andy Tan webapps

libmad 0.15.1b – ‘mp3’ Memory Corruption

libmad memory corruption vulnerability

2017-08-01 qflb.wu dos

JoySale 2.2.1 – Arbitrary File Upload

JoySale Arbitrary File Upload

2017-08-01 Mutlu Benmutlu webapps

Solarwinds Kiwi Syslog 9.6.1.6 – Denial of Service

# Exploit Title: Solarwinds Kiwi Syslog 9.6.1.6 - Remote Denial of Service (Type Mismatch)

2017-08-01 Guillaume Kaddouch dos

DivFix++ 0.34 – Denial of Service

DivFix++ denial of service vulnerability

2017-07-31 qflb.wu dos

Vorbis Tools oggenc 1.4.0 – ‘.wav’ Denial of Service

vorbis-tools oggenc vulnerability

2017-07-31 qflb.wu dos

Sound eXchange (SoX) 14.4.2 – Multiple Vulnerabilities

Sound eXchange (SoX) multiple vulnerabilities

2017-07-31 qflb.wu dos

libvorbis 1.3.5 – Multiple Vulnerabilities

libvorbis multiple vulnerabilities

2017-07-31 qflb.wu dos

libao 1.2.0 – Denial of Service

libao memory corruption vulnerability

2017-07-31 qflb.wu dos

Jenkins < 1.650 - Java Deserialization

import random

2017-07-30 Janusz Piechówka remote

DiskBoss Enterprise 8.2.14 – Remote Buffer Overflow

#!/usr/bin/env python

2017-07-30 Ahmad Mahfouz remote

McAfee Security Scan Plus – Remote Command Execution

## Vulnerability Summary

2017-07-30 SecuriTeam remote

Fortinet FortiOS < 5.6.0 - Cross-Site Scripting

# Title: FortiOS

2017-07-28 patryk_bogdan webapps

SoundTouch 1.9.2 – Multiple Vulnerabilities

SoundTouch multiple vulnerabilities

2017-07-28 qflb.wu dos

LAME 3.99.5 – Multiple Vulnerabilities

LAME multiple vulnerabilities

2017-07-28 qflb.wu dos

libjpeg-turbo 1.5.1 – Denial of Service

libjpeg-turbo denial of service vulnerability

2017-07-28 qflb.wu dos

VehicleWorkshop – SQL Injection

# Exploit Title: VehicleWorkshop SQL Injection

2017-07-28 Shahab Shamsi webapps

GNU libiberty – Buffer Overflow

Source: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=69687

2017-07-27 Marcel Böhme dos

Joomla! Component CCNewsLetter 2.1.9 – ‘sbid’ SQL Injection

"Joomla Component ccnewsletter 2.1.9 - 'sbid' Parameter SQL Injection"

2017-07-27 Shahab Shamsi webapps

Friends in War Make or Break 1.7 – SQL Injection

# # # # #

2017-07-26 Ihsan Sencan webapps

Microsoft Windows – ‘.LNK’ Shortcut File Code Execution (Metasploit)

##

2017-07-26 Yorick Koster local

Friends in War Make or Break 1.7 – Cross-Site Request Forgery (Change Admin Password)

Friends in War Make or Break 1.7 - Unauthenticated admin password change

2017-07-26 shinnai webapps

AudioCoder 0.8.46 – Local Buffer Overflow (SEH)

#!/usr/bin/python

2017-07-26 Muhann4d local

WebKit JSC – ‘DFG::ByteCodeParser::flush(InlineStackEntry* inlineStackEntry)’ Incorrect Scope Register Handling

function f() {

2017-07-25 Google Security Research dos

WebKit JSC – ‘arrayProtoFuncSplice’ Uninitialized Memory Reference

function gc() {

2017-07-25 Google Security Research dos

WebKit JSC – ‘JSArray::appendMemcpy’ Uninitialized Memory Copy

function optNewArrayAndConcat() {

2017-07-25 Google Security Research dos

WebKit JSC – ‘ArgumentsEliminationPhase::transform’ Incorrect LoadVarargs Handling

const kArgsLength = 0x101;

2017-07-25 Google Security Research dos

WebKit JSC – ‘ObjectPatternNode::appendEntry’ Stack Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1256

2017-07-25 Google Security Research dos