Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 189

Calendar Template 2.0 – ‘editid1’ SQL Injection

# # # # #

2017-04-07 Ihsan Sencan webapps

Forum Template 1.0 – SQL Injection

# # # # #

2017-04-07 Ihsan Sencan webapps

Quiz Template 1.0 – ‘testid’ SQL Injection

# # # # #

2017-04-07 Ihsan Sencan webapps

Survey Template 1.1 – ‘masterkey1’ SQL Injection

# # # # #

2017-04-07 Ihsan Sencan webapps

My Gaming Ladder Combo System 7.5 – SQL Injection

# # # # #

2017-04-07 Ihsan Sencan webapps

Ladder System 6.0 – ‘faqid’ SQL Injection

# # # # #

2017-04-07 Ihsan Sencan webapps

D-Link DWR-116 / DWR-116A1 – Arbitrary File Download

# Title: D-Link DWR-116 Arbitrary File Download

2017-04-07 Patryk Bogdan webapps

WordPress Plugin Firewall 2 1.3 – Cross-Site Request Forgery / Cross-Site Scripting

\">

2017-04-07 dxw webapps

QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection

QNAP QTS multiple RCE vulnerabilities

2017-04-07 Harry Sintonen webapps

e107 CMS 2.1.4 – Cross-Site Request Forgery

2017-04-07 Zhiyang Zeng webapps

WordPress Plugin WHIZZ < 1.1.1 - Cross-Site Request Forgery

======

2017-04-07 Zhiyang Zeng webapps

WordPress Plugin CopySafe Web Protect < 2.6 - Cross-Site Request Forgery

2017-04-07 Zhiyang Zeng webapps

Adobe (Multiple Products) – XML Injection File Content Disclosure

#!/bin/bash

2017-04-07 Tess Sluyter webapps

Cesanta Mongoose OS – Use-After-Free

#############################################################

2017-04-06 Compass Security dos

Moodle 2.x/3.x – SQL Injection

# Exploit: Moodle SQL Injection via Object Injection Through User Preferences

2017-04-06 Marko Belzetski webapps

ImagePro Lazygirls Clone Script – SQL Injection

# # # # #

2017-04-05 Ihsan Sencan webapps

Airbnb Crashpadder Clone Script – SQL Injection

# # # # #

2017-04-05 Ihsan Sencan webapps

Premium Penny Auction Script – SQL Injection

# # # # #

2017-04-05 Ihsan Sencan webapps

Sweepstakes Pro Software – SQL Injection

# # # # #

2017-04-05 Ihsan Sencan webapps

Appointment Script – SQL Injection

# # # # #

2017-04-05 Ihsan Sencan webapps

D-Link DIR-615 – Cross-Site Request Forgery

Title:

2017-04-05 Pratik S. Shah webapps

HelpDEZK 1.1.1 – Cross-Site Request Forgery / Code Execution

# Exploit Title: Multiple CSRF Remote Code Execution Vulnerability on HelpDEZK 1.1.1

2017-04-05 rungga_reksya webapps

SpiceWorks 7.5 TFTP – Remote File Overwrite / Upload

[+] Credits: John Page AKA HYP3RLINX

2017-04-05 hyp3rlinx remote

Faveo Helpdesk Community 1.9.3 – Cross-Site Request Forgery

# Exploit Title: CSRF / Privilege Escalation (Manipulation of Role Agent to Admin) on Faveo version Community 1.9.3

2017-04-05 rungga_reksya webapps

Apache Tomcat 6/7/8/9 – Information Disclosure

# Exploit Title:Apache Tomcat CVE-2016-6816 Security Bypass Vulnerability

2017-04-04 justpentest remote

Maian Uploader 4.0 – ‘user’ SQL Injection

# # # # #

2017-04-04 Ihsan Sencan webapps

Maian Survey 1.1 – ‘survey’ SQL Injection

# # # # #

2017-04-04 Ihsan Sencan webapps

Maian Greetings 2.1 – ‘cat’ SQL Injection

# # # # #

2017-04-04 Ihsan Sencan webapps

Apple macOS Kernel 10.12.2 (16C67) – ‘AppleIntelCapriController::GetLinkConfig’ Code Execution Due to Lack of Bounds Checking

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1071

2017-04-04 Google Security Research dos

Apple macOS Kernel 10.12.3 (16D32) – Use-After-Free Due to Double-Release in posix_spawn

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1104

2017-04-04 Google Security Research dos

Apple macOS/iOS Kernel 10.12.3 (16D32) – SIOCSIFORDER Socket ioctl Memory Corruption Due to Bad Bounds Checking

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1108

2017-04-04 Google Security Research dos

Apple macOS/iOS Kernel 10.12.3 (16D32) – SIOCGIFORDER Socket ioctl Off-by-One Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1111

2017-04-04 Google Security Research dos

Apple macOS/iOS Kernel 10.12.3 (16D32) – Bad Locking in necp_open Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1116

2017-04-04 Google Security Research dos

Apple macOS/iOS Kernel 10.12.3 (16D32) – ‘bpf’ Heap Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1125

2017-04-04 Google Security Research dos

Apple macOS Kernel 10.12.3 (16D32) – ‘audit_pipe_open’ Off-by-One Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1126

2017-04-04 Google Security Research dos

Apple macOS Kernel 10.12.2 (16C67) – Memory Disclosure Due to Lack of Bounds Checking in AppleIntelCapriController::getDisplayPipeCapability

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1069

2017-04-04 Google Security Research dos

Apple WebKit 10.0.2(12602.3.12.0.1) – ‘Frame::setDocument (1)’ Universal Cross-Site Scripting

"use strict";

2017-04-04 Google Security Research webapps

Apple Webkit – ‘JSCallbackData’ Universal Cross-Site Scripting

"use strict";

2017-04-04 Google Security Research webapps

Apple Webkit – Universal Cross-Site Scripting by Accessing a Named Property from an Unloaded Window

"use strict";

2017-04-04 Google Security Research webapps

Apple WebKit 10.0.2 (12602.3.12.0.1) – ‘disconnectSubframes’ Universal Cross-Site Scripting

var d = document.body.appendChild(document.createElement("div"));

2017-04-04 Google Security Research webapps

Apple WebKit 10.0.2 (12602.3.12.0.1, r210800) – ‘constructJSReadableStreamDefaultReader’ Type Confusion

let rs = new ReadableStream();

2017-04-04 Google Security Research webapps

Apple macOS/iOS Kernel 10.12.3 (16D32) – Double-Free Due to Bad Locking in fsevents Device

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1129

2017-04-04 Google Security Research local

Broadcom Wi-Fi SoC – TDLS Teardown Request Remote Heap Overflow

Source:

2017-04-04 Google Security Research remote

Broadcom Wi-Fi SoC – Heap Overflow ‘wlc_tdls_cal_mic_chk’ Due to Large RSN IE in TDLS Setup Confirm Frame

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1047

2017-04-04 Google Security Research dos

Apple WebKit 10.0.2 – HTMLInputElement Use-After-Free

2017-04-04 Google Security Research dos

Broadcom Wi-Fi SoC – ‘dhd_handle_swc_evt’ Heap Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1061

2017-04-04 Google Security Research remote

Apple WebKit – ‘RenderLayer’ Use-After-Free

2017-04-04 Google Security Research dos

Apple WebKit – Negative-Size memmove in HTMLFormElement

aaaaaaaa

2017-04-04 Google Security Research dos

Apple WebKit – ‘FormSubmission::create’ Use-After-Free

a

2017-04-04 Google Security Research dos

Apple WebKit – ‘ComposedTreeIterator::traverseNextInShadowTree’ Use-After-Free

foo

2017-04-04 Google Security Research dos