Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 181

Kaspersky Anti-Virus File Server 8.0.3.297 – Multiple Vulnerabilities

1. *Advisory Information*

2017-06-28 Core Security webapps

Oracle Solaris 11.1/11.3 (RSH) – ‘Stack Clash’ Local Privilege Escalation

#include

2017-06-28 Qualys Corporation local

OpenBSD – ‘at Stack Clash’ Local Privilege Escalation

#include

2017-06-28 Qualys Corporation local

NetBSD – ‘Stack Clash’ (PoC)

#include

2017-06-28 Qualys Corporation dos

Linux Kernel – ‘offset2lib’ Stack Clash

#include

2017-06-28 Qualys Corporation local

Linux Kernel (Debian 7/8/9/10 / Fedora 23/24/25 / CentOS 5.3/5.11/6.0/6.8/7.2.1511) – ‘ldso_hwcap Stack Clash’ Local Privilege Escalation

cat > la.c la.so.h

2017-06-28 Qualys Corporation local

Linux Kernel (Debian 7.7/8.5/9.0 / Ubuntu 14.04.2/16.04.2/17.04 / Fedora 22/25 / CentOS 7.3.1611) – ‘ldso_hwcap_64 Stack Clash’ Local Privilege Escalation

cat > la.c la.so.h

2017-06-28 Qualys Corporation local

Linux Kernel (Debian 9/10 / Ubuntu 14.04.5/16.04.2/17.04 / Fedora 23/24/25) – ‘ldso_dynamic Stack Clash’ Local Privilege Escalation

#define _GNU_SOURCE

2017-06-28 Qualys Corporation local

FreeBSD – ‘FGPU’ Stack Clash (PoC)

#include

2017-06-28 Qualys Corporation dos

FreeBSD – ‘FGPE’ Stack Clash (PoC)

#include

2017-06-28 Qualys Corporation dos

FreeBSD – ‘setrlimit’ Stack Clash (PoC)

#include

2017-06-28 Qualys Corporation dos

Easy File Sharing Web Server 7.2 – GET ‘PassWD’ Remote Buffer Overflow (SEH)

#!/usr/bin/python

2017-06-27 clubjk remote

GLPI 0.90.4 – SQL Injection

# Exploit Title: Multiple SQL injection vulnerabilities in GLPI 0.90.4

2017-06-27 Eric CARTER webapps

WordPress Plugin Ultimate Product Catalogue 4.2.2 – SQL Injection

# Exploit Title: Ultimate Product Catalogue 4.2.2 Sql Injection – Plugin WordPress – Sql Injection

2017-06-27 Lenon Leite webapps

Microsoft MsMpEng – mpengine x86 Emulator Heap Corruption in VFS API

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1282&desc=2

2017-06-27 Google Security Research dos

Symantec Messaging Gateway 10.6.2-7 – Remote Code Execution (Metasploit)

##

2017-06-26 Mehmet Ince remote

Eltek SmartPack – Backdoor Account

Eltek SmartPack - Backdoor Account

2017-06-26 Saeed reza Zamanian webapps

NTFS 3.1 – Master File Table Denial of Service

Y0U HAVE BEEN EXPL0ITED!

2017-06-26 EagleWire dos

JAD Java Decompiler 1.5.8e – Local Buffer Overflow (NX Enabled)

#!/usr/bin/python

2017-06-26 Juan Sacco local

Netgear DGN2200 – ‘dnslookup.cgi’ Command Injection (Metasploit)

##

2017-06-26 Metasploit remote

LAME 3.99.5 – ‘II_step_one’ Buffer Overflow

Description:

2017-06-26 Agostino Sarubbo dos

LAME 3.99.5 – ‘III_dequantize_sample’ Stack Buffer Overflow

Description:

2017-06-26 Agostino Sarubbo dos

IBM DB2 9.7/10.1/10.5/11.1 – Command Line Processor Buffer Overflow

'''

2017-06-26 defensecode dos