Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 183
Logpoint < 5.6.4 - Root Remote Code Execution
# Exploit Title: Unauthenticated remote root code execution on logpoint < 5.6.4
Easy File Sharing Web Server 7.2 – Authentication Bypass
# Exploit Title: EFS Web Server 7.2 Authentication Bypass
DiskBoss 8.0.16 – ‘Input Directory’ Local Buffer Overflow
#!/usr/bin/python
Sync Breeze 9.7.26 – ‘Add Exclude Directory’ Local Buffer Overflow
#!/usr/bin/python
WordPress Plugin WP Jobs < 1.5 - SQL Injection
# Exploit Title: WordPress Plugin WP Jobs < 1.5 - SQL Injection
eCom Cart 1.3 – SQL Injection
# Exploit Title: eCom Cart 1.3 Exploit
VMware vSphere Data Protection 5.x/6.x – Java Deserialization
#!/usr/bin/env python
PaulShop – SQL Injection
# Exploit Title: [PaulShop CMS
Disk Sorter 9.7.14 – ‘Input Directory’ Local Buffer Overflow
#!/usr/bin/python
Mapscrn 2.03 – Local Buffer Overflow (PoC)
# Developed using Exploit Pack - http://exploitpack.com -
Apple macOS 10.12.3 / iOS < 10.3.2 - Userspace Entitlement Checking Race Condition
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1223
libcroco 0.6.12 – Denial of Service
libcroco multiple vulnerabilities
libquicktime 1.2.4 – Denial of Service
libquicktime multiple vulnerabilities
Uniview NVR – Password Disclosure
#Uniview NVR remote passwords disclosure
EFS Easy Chat Server 3.1 – Password Disclosure
# Exploit Title: Easy Chat Server Remote Password Disclosure
EFS Easy Chat Server 3.1 – Password Reset
# Exploit Title: Easy Chat Server Remote Password Reset
EFS Easy Chat Server 3.1 – Remote Buffer Overflow (SEH)
# Exploit Title: Easy Chat Server User Registeration Buffer Overflow (SEH)
Nuevomailer < 6.0 - SQL Injection
# Exploit Title: Nuevo mailer version
nuevoMailer 6.0 – SQL Injection
# Exploit Title: nuevoMailer version 6.0 and earlier time-based SQL Injection
VMware Workstation 12 Pro – Denial of Service
#include "windows.h"
Net Monitor for Employees Pro < 5.3.4 - Unquoted Service Path Privilege Escalation
# Exploit Title: Unquoted Service Path Privilege Escalation - Net Monitor for Employees Pro
Craft CMS 2.6 – Cross-Site Scripting
# Exploit Title: Craft CMS 2.6 - Cross-Site Scripting/Unrestricted File Upload
IDERA Uptime Monitor 7.8 – Multiple Vulnerabilities
## Vulnerabilities Summary
Grav CMS 1.4.2 Admin Plugin – Cross-Site Scripting
# Exploit Title: GravCMS Core (Admin Plugin) v1.4.2 - Persistent Cross-Site Scripting
Xavier 2.4 – SQL Injection
Document Title:
Robert 0.5 – Multiple Vulnerabilities
# Exploit Title: Robert 0.5 - Multiple Vulnerabilities XSS, CSRF, Directory
Linux Kernel – ‘ping’ Local Denial of Service
// Source: https://raw.githubusercontent.com/danieljiang0415/android_kernel_crash_poc/master/panic.c
Linux Kernel < 4.10.13 - 'keyctl_set_reqkey_keyring' Local Denial of Service
Source: https://bugzilla.novell.com/show_bug.cgi?id=1034862
PuTTY < 0.68 - 'ssh_agent_channel_data' Integer Overflow Heap Corruption
Source: https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-agent-fwd-overflow.html
Artifex MuPDF – Null Pointer Dereference
Source: https://bugs.ghostscript.com/show_bug.cgi?id=697500
WordPress Plugin Tribulant Newsletters 4.6.4.2 – File Disclosure / Cross-Site Scripting
DefenseCode WebScanner DAST Advisory
Peplink Balance Routers 7.0.0-build1904 – SQL Injection / Cross-Site Scripting / Information Disclosure
X41 D-Sec GmbH Security Advisory: X41-2017-005
DNSTracer 1.8.1 – Buffer Overflow (PoC)
################
Parallels Desktop – Virtual Machine Escape
#[+] Title: Parallels Desktop - Virtual Machine Escape
Subsonic 6.1.1 – Cross-Site Request Forgery
[+] Credits: John Page a.k.a hyp3rlinx
Subsonic 6.1.1 – Server-Side Request Forgery
[+] Credits: John Page a.k.a hyp3rlinx
Subsonic 6.1.1 – XML External Entity Injection
[+] Credits: John Page a.k.a hyp3rlinx
Subsonic 6.1.1 – Cross-Site Request Forgery / Cross-Site Scripting
[+] Credits: John Page a.k.a hyp3rlinx
BIND 9.10.5 – Unquoted Service Path Privilege Escalation
[+] Credits: John Page aka hyp3rlinx
Wireshark 2.2.6 – IPv6 Dissector Denial of Service
Build Information:
Wireshark 2.2.0 < 2.2.12 - ROS Dissector Denial of Service
Source: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13637
Kronos Telestaff < 2.92EU29 - SQL Injection
Software: Kronos Telestaff Web Application
EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 – Remote Code Execution
#!/usr/bin/env python