Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 184

WordPress Plugin Event List < 0.7.8 - SQL Injection

# Exploit Title: WordPress Plugin Event List

2017-06-04 Dimitrios Tsagkarakis webapps

Joomla! Component Payage 2.05 – ‘aid’ SQL Injection

# Exploit Title: Joomla Payage 2.05 - SQL Injection

2017-06-03 Persian Hack Team webapps

WordPress Plugin WP-Testimonials < 3.4.1 - SQL Injection

# Exploit Title: WP-Testimonials < 3.4.1 Union Based SQL Injection

2017-06-03 Dimitrios Tsagkarakis webapps

reiserfstune 3.6.25 – Local Buffer Overflow

+] Title: reiserfstune 3.6.25 – Local Buffer Overflow

2017-06-02 Nassim Asrir dos

Sungard eTRAKiT3 <= 3.2.1.17 - SQL Injection

Software: Sungard eTRAKiT3

2017-06-02 Goran Tuzovic webapps

Disk Sorter 9.7.14 – ‘Input Directory’ Local Buffer Overflow (PoC)

#!/usr/bin/python

2017-06-02 n3ckD_ dos

HPE Intelligent Management Center (iMC) 7.2 (E0403P10) – Code Execution

## Vulnerability Summary

2017-06-02 SecuriTeam remote

Riverbed SteelHead VCX 9.6.0a – Arbitrary File Read

# Exploit title : Arbitry file reading by authenticated users on Riverbed SteelHead VCX

2017-06-01 Gregory Draperi webapps

WebKit JSC – ‘JSObject::ensureLength’ ensureLengthSlow Check Failure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1165

2017-06-01 Google Security Research dos

WebKit JSC – Incorrect Check in emitPutDerivedConstructorToArrowFunctionContextScope

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1173

2017-06-01 Google Security Research dos

WebKit – CachedFrame does not Detach Openers Universal Cross-Site Scripting

Click anywhere.

2017-06-01 Google Security Research webapps

WebKit – ‘CachedFrameBase::restore’ Universal Cross-Site Scripting

Click anywhere...

2017-06-01 Google Security Research webapps

WebKit – ‘Document::prepareForDestruction’ / ‘CachedFrame’ Universal Cross-Site Scripting

Click anywhere.

2017-06-01 Google Security Research webapps

WebKit – ‘Element::setAttributeNodeNS’ Use-After-Free

2017-06-01 Google Security Research dos

CMS Web-Gooroo < 1.141 - Multiple Vulnerabilities

# Exploit Title: CMS Web-Gooroo

2017-06-01 Kaimi webapps

OV3 Online Administration 3.0 – Directory Traversal

OV3 Online Administration 3.0 Parameter Traversal Arbitrary File Access PoC Exploit

2017-05-31 LiquidWorm webapps

OV3 Online Administration 3.0 – Remote Code Execution

2017-05-31 LiquidWorm webapps

OV3 Online Administration 3.0 – SQL Injection

OV3 Online Administration 3.0 Multiple Unauthenticated SQL Injection Vulnerabilities

2017-05-31 LiquidWorm webapps

Piwigo Plugin Facetag 0.0.3 – Cross-Site Scripting

# Exploit Title: Piwigo plugin Facetag , Persistent XSS

2017-05-31 Touhid M.Shaikh webapps

uc-http Daemon – Local File Inclusion / Directory Traversal

'''

2017-05-30 Project Insecurity webapps

TiEmu 2.08 – Local Buffer Overflow

#!/usr/bin/python

2017-05-30 Juan Sacco local

Microsoft MsMpEng – Remote Use-After-Free Due to Design Issue in GC Engine

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1258

2017-05-30 Google Security Research dos

Trend Micro Deep Security 6.5 – XML External Entity Injection / Local Privilege Escalation / Remote Code Execution

The following advisory describes three (3) vulnerabilities found in Trend Micro Deep Security version 6.5.

2017-05-30 SecuriTeam webapps

KEMP LoadMaster 7.135.0.13245 – Persistent Cross-Site Scripting / Remote Code Execution

Vulnerability Summary

2017-05-30 SecuriTeam webapps

IBM Informix Dynamic Server / Informix Open Admin Tool – DLL Injection / Remote Code Execution / Heap Buffer Overflow

## Vulnerabilities Summary

2017-05-30 SecuriTeam webapps

Microsoft MsMpEng – Use-After-Free via Saved Callers

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1259

2017-05-30 Google Security Research dos

TerraMaster F2-420 NAS TOS 3.0.30 – Root Remote Code Execution

# Source: https://www.evilsocket.net/2017/05/30/Terramaster-NAS-Unauthenticated-RCE-as-root/

2017-05-30 Simone Margaritelli webapps

Piwigo Plugin Facetag 0.0.3 – SQL Injection

# Exploit Title: Facetag Extension in Piwigo, Multiple SQL injection

2017-05-30 Touhid M.Shaikh webapps

Microsoft MsMpEng – Multiple Crashes While Scanning Malformed Files

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1261

2017-05-29 Google Security Research dos

WordPress Plugin Huge-IT Video Gallery 2.0.4 – SQL Injection

DefenseCode ThunderScan SAST Advisory

2017-05-29 defensecode webapps

Octopus Deploy – (Authenticated) Code Execution (Metasploit)

##

2017-05-29 Metasploit remote

Samba 3.5.0 < 4.4.14/4.5.10/4.6.4 - 'is_known_pipename()' Arbitrary Module Load (Metasploit)

##

2017-05-29 Metasploit remote

CERIO DT-100G-N/DT-300N/CW-300N – Multiple Vulnerabilities

CERIO 11nbg 2.4Ghz High Power Wireless Router (pekcmd) Rootshell Backdoors

2017-05-28 LiquidWorm remote

QWR-1104 Wireless-N Router – Cross-Site Scripting

# Exploit Title: Aries QWR-1104 Wireless-N Router Execute JavaScript in Wireless Site Survey page.

2017-05-26 Touhid M.Shaikh webapps

JAD Java Decompiler 1.5.8e – Local Buffer Overflow

#!/usr/bin/python

2017-05-26 Juan Sacco local

Microsoft MsMpEng – Multiple Problems Handling ntdll!NtControlChannel Commands

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1260

2017-05-26 Google Security Research local

Google Chrome 60.0.3080.5 V8 JavaScript Engine – Out-of-Bounds Write

// Source: https://halbecaf.com/2017/05/24/exploiting-a-v8-oob-write/

2017-05-26 halbecaf remote

Home Web Server 1.9.1 (build 164) – Remote Code Execution

# Exploit Title: Home Web Server 1.9.1 build 164 - CGI Remote Code Execution

2017-05-26 Guillaume Kaddouch remote

Sophos Cyberoam – Cross-site scripting

# Exploit Title: Sophos Cyberoam – Cross-site scripting (XSS) vulnerability

2017-05-25 Bhadresh Patel webapps