Microsoft Windows 7 Kernel – Uninitialized Memory in the Default dacl Descriptor of System Processes Token
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1145
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 186
Microsoft Windows 10 Kernel – ‘nt!NtTraceControl (EtwpSetProviderTraits)’ Pool Memory Disclosure
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1161
Microsoft Windows 7 Kernel – ‘win32k!xxxClientLpkDrawTextEx’ Stack Memory Disclosure
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1182
Microsoft Windows 7 Kernel – Pool-Based Out-of-Bounds Reads Due to bind() Implementation Bugs in afd.sys / tcpip.sys
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1127
LabF nfsAxe 3.7 FTP Client – Remote Buffer Overflow (SEH)
#!/usr/bin/python
Halliburton LogView Pro 10.0.1 – Local Buffer Overflow (SEH)
#!/usr/bin/python
Larson VizEx Reader 9.7.5 – Local Buffer Overflow (SEH)
#!/usr/bin/python
PlaySMS 1.4 – ‘/sendfromfile.php’ Remote Code Execution / Unrestricted File Upload
# Exploit Title: PlaySMS 1.4 Code Execution using $filename and Unrestricted File Upload in sendfromfile.php
Dive Assistant Template Builder 8.0 – XML External Entity Injection
[+] Exploit Title: Dive Assistant - Template Builder XXE Injection
OpenVPN 2.4.0 – Denial of Service
#!/usr/bin/env python3
Linux Kernel 4.8.0-41-generic (Ubuntu) – Packet Socket Local Privilege Escalation
// A proof-of-concept local root exploit for CVE-2017-7308.
Vanilla Forums < 2.3 - Remote Code Execution
#!/bin/bash
Microsoft Windows Server 2008 R2 (x64) – ‘SrvOs2FeaToNt’ SMB Remote Code Execution (MS17-010)
# Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com
QNAP PhotoStation 5.2.4 / MusicStation 4.8.4 – Authentication Bypass
# Exploit QNAP PhotoStation 5.2.4 and MusicStation 4.8.4 Authentication Bypass
BanManager WebUI 1.5.8 – PHP Code Injection
BanManager WebUI 1.5.8 - PHP Code Injection & Stored XSS
Gongwalker API Manager 1.1 – Cross-Site Request Forgery
# Exploit Title: gongwalker API Manager v1.1 - CSRF(Add/Delete/Edit API)
CMS Made Simple 2.1.6 – Multiple Vulnerabilities
# Title: CMSMS 2.1.6 Multiple Vulnerabilities
Intel Active Management Technology – System Privileges
#!/usr/bin/python
Cisco DPC3928 Router – Arbitrary File Disclosure
## Vulnerability Summary
Microsoft Security Essentials / SCEP (Microsoft Windows 8/8.1/10 / Windows Server) – ‘MsMpEng’ Remote Type Confusion
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1252&desc=5
Oracle GoldenGate 12.1.2.0.0 – Remote Code Execution
#!/usr/bin/env python
I, Librarian 4.6/4.7 – Command Injection / Server Side Request Forgery / Directory Enumeration / Cross-Site Scripting
SEC Consult Vulnerability Lab Security Advisory < 20170509-0 >
LG G4 MRA58K – ‘liblg_parser_mkv.so’ Bad Allocation Calls
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1102
LG G4 MRA58K – ‘mkvparser::Tracks constructor’ Failure to Initialise Pointers
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1117
LG G4 MRA58K – ‘mkvparser::Block::Block’ Heap Buffer Overflow
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1124
wolfSSL 3.10.2 – x509 Certificate Text Parsing Off-by-One
TALOS-2017-0293
Personify360 7.5.2/7.6.1 – Improper Access Restrictions
# Exploit Title: Access and read and create vendor / API credentials in plaintext
Personify360 7.5.2/7.6.1 – Improper Database Schema Access Restrictions
# Exploit Title: Discover all tables and columns in database when creating new customer role
MediaCoder 0.8.48.5888 – Local Buffer Overflow (SEH)
#!/usr/bin/python
Gemalto SmartDiag Diagnosis Tool < 2.5 - Local Buffer Overflow (SEH)
# Exploit Title: Gemalto SmartDiag Diagnosis Tool
Xen 64bit PV Guest – pagetable use-after-type-change Breakout
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1231
RPCBind / libtirpc – Denial of Service
#!/usr/bin/ruby
CloudBees Jenkins 2.32.1 – Java Deserialization
Source: https://blogs.securiteam.com/index.php/archives/3171
WordPress Plugin WebDorado Gallery 1.3.29 – SQL Injection
Source: http://www.defensecode.com/advisories/DC-2017-02-011_WordPress_WebDorado_Gallery_Plugin_Advisory.pdf
ViMbAdmin 3.0.15 – Multiple Cross-Site Request Forgery Vulnerabilities
# [CVE-2017-6086] Multiple CSRF vulnerabilities in ViMbAdmin version 3.0.15
Technicolor DPC3928SL – SNMP Authentication Bypass
#!/usr/bin/python
Sitecore CMS 8.2 – Cross-Site Scripting / Arbitrary File Disclosure
Exploit title: Sitecore CMS v8.2 multiple vulnerabilities
Apple Safari 10.0.3 – ‘JSC::CachedCall’ Use-After-Free
click here for cute cat picz!
Microsoft Internet Explorer 11 – ‘CMarkup::DestroySplayTree’ Use-After-Free
IE11 MSHTML!CMarkup::DestroySplayTree Use-After-Free
Serviio PRO 1.8 DLNA Media Streaming Server – REST API Information Disclosure
#!/usr/bin/env python
Serviio PRO 1.8 DLNA Media Streaming Server – Local Privilege Escalation
Serviio PRO 1.8 DLNA Media Streaming Server Local Privilege Escalation
Serviio PRO 1.8 DLNA Media Streaming Server – REST API Arbitrary Password Change
#!/usr/bin/env python
Serviio PRO 1.8 DLNA Media Streaming Server – REST API Arbitrary Code Execution
#!/usr/bin/env python
WordPress Core 4.6 – Remote Code Execution
#!/bin/bash
WordPress Core < 4.7.4 - Unauthorized Password Reset
=============================================