Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 191

Fortinet FortiClient 5.2.3 (Windows 10 x64 Pre-Anniversary) – Local Privilege Escalation

Check this out:

2017-03-25 sickness local

Fortinet FortiClient 5.2.3 (Windows 10 x64 Post-Anniversary) – Local Privilege Escalation

Check these out:

2017-03-25 sickness local

Adult Tube Video Script – SQL Injection

# # # # #

2017-03-25 Ihsan Sencan webapps

Gr8 Tutorial Script – SQL Injection

# # # # #

2017-03-24 Ihsan Sencan webapps

Gr8 Gallery Script – SQL Injection

# # # # #

2017-03-24 Ihsan Sencan webapps

Miele Professional PG 8528 – Directory Traversal

Title:

2017-03-24 Jens Regel remote

Netgear WNR2000v5 – ‘hidden_lang_avi’ Remote Stack Overflow (Metasploit)

##

2017-03-24 Pedro Ribeiro remote

Logsign 4.4.2/4.4.137 – Remote Command Injection (Metasploit)

##

2017-03-24 Mehmet Ince remote

Flippa Clone – SQL Injection

# # # # #

2017-03-23 Ihsan Sencan webapps

wifirxpower – Local Buffer Overflow (PoC)

[+] Title: wifirxpower - Local Stack Based Buffer Overflow

2017-03-23 Nassim Asrir dos

Solare Datensysteme Solar-Log Devices 2.8.4-56/3.5.2-85 – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20170322-0 >

2017-03-22 SEC Consult webapps

GLink Word Link Script 1.2.3 – SQL Injection

# # # # #

2017-03-22 Ihsan Sencan webapps

Disk Sorter Enterprise 9.5.12 – ‘GET’ Remote Buffer Overflow (SEH)

#!/usr/bin/env python

2017-03-22 Daniel Teixeira remote

SpyCamLizard 1.230 – Denial of Service

import socket

2017-03-22 ScrR1pTK1dd13 dos

Joomla! Component Modern Booking 1.0 – ‘coupon’ SQL Injection

###############################################################################################

2017-03-22 Hamed Izadi webapps

Linux Kernel 3.11 < 4.8 0 - 'SO_SNDBUFFORCE' / 'SO_RCVBUFFORCE' Local Privilege Escalation

// CAP_NET_ADMIN -> root LPE exploit for CVE-2016-9793

2017-03-22 Andrey Konovalov local

Joomla! Component Extra Search 2.2.8 – ‘establename’ SQL Injection

# # # # #

2017-03-21 Ihsan Sencan webapps

ExtraPuTTY 0.29-RC2 – Denial of Service

[+] Credits: John Page AKA hyp3rlinx

2017-03-20 hyp3rlinx dos

Joomla! Component JooCart 2.x – ‘product_id’ SQL Injection

# # # # #

2017-03-20 Ihsan Sencan webapps

Joomla! Component jCart for OpenCart 2.0 – ‘product_id’ SQL Injection

# # # # #

2017-03-20 Ihsan Sencan webapps

Google Nest Cam 5.2.1 – Buffer Overflow Conditions Over Bluetooth LE

# Exploit Title: Google Nest Cam - Multiple Buffer Overflow Conditions Over Bluetooth LE

2017-03-20 Jason Doyle dos

phplist 3.2.6 – SQL Injection

1. Introduction

2017-03-20 Curesec Research Team webapps

Microsoft Windows Kernel – Registry Hive Loading Crashes in nt!nt!HvpGetBinMemAlloc / nt!ExpFindAndRemoveTagBigPages (MS17-017)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=993

2017-03-20 Google Security Research dos

Microsoft Windows – Uniscribe Font Processing Out-of-Bounds Read in usp10!otlChainRuleSetTable::rule (MS17-011)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1019

2017-03-20 Google Security Research dos

Microsoft Windows – ‘USP10!otlList::insertAt’ Uniscribe Font Processing Heap Buffer Overflow (MS17-011)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1022

2017-03-20 Google Security Research dos

Microsoft Windows – Uniscribe Font Processing Heap Out-of-Bounds Read/Write in ‘USP10!AssignGlyphTypes’ (MS17-011)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1023

2017-03-20 Google Security Research dos

Microsoft Windows – Uniscribe Font Processing Heap Memory Corruption in ‘USP10!otlCacheManager::GlyphsSubstituted’ (MS17-011)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1025

2017-03-20 Google Security Research dos

Microsoft Windows – Uniscribe Font Processing Heap Memory Corruption in ‘USP10!MergeLigRecords’ (MS17-011)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1026&desc=2

2017-03-20 Google Security Research dos

Microsoft Windows – Uniscribe Font Processing Heap Buffer Overflow in ‘USP10!ttoGetTableData’ (MS17-011)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1027

2017-03-20 Google Security Research dos

Microsoft Windows – Uniscribe Font Processing Heap Out-of-Bounds Write in ‘USP10!UpdateGlyphFlags’ (MS17-011)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1028

2017-03-20 Google Security Research dos

Microsoft Windows – Uniscribe Font Processing Heap Memory Corruption Around ‘USP10!BuildFSM’ (MS17-011)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1029

2017-03-20 Google Security Research dos

Microsoft Windows – Uniscribe Font Processing Buffer Overflow in ‘USP10!FillAlternatesList’ (MS17-011)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1030

2017-03-20 Google Security Research dos

Microsoft Windows – Uniscribe Font Processing Multiple Heap Out-of-Bounds and Wild Reads (MS17-011)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1031

2017-03-20 Google Security Research dos

Microsoft GDI+ – ‘gdiplus!GetRECTSForPlayback’ Out-of-Bounds Read (MS17-013)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1042

2017-03-20 Google Security Research dos

Microsoft Color Management Module ‘icm32.dll’ – ‘icm32!Fill_ushort_ELUTs_from_lut16Tag’ Out-of-Bounds Read (MS17-013)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1052

2017-03-20 Google Security Research dos

Microsoft Windows – Uniscribe Heap Out-of-Bounds Read in ‘USP10!ScriptApplyLogicalWidth’ Triggered via EMF (MS17-013)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1053

2017-03-20 Google Security Research dos

Microsoft Color Management Module ‘icm32.dll’ – ‘icm32!LHCalc3toX_Di16_Do16_Lut8_G32’ Out-of-Bounds Read (MS17-013)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1054

2017-03-20 Google Security Research dos

Mozilla Firefox – ‘table’ Use-After-Free

u~Z1Cqn`aA}SOkre=]{

2017-03-20 Google Security Research dos

Microsoft Internet Explorer 11 – ‘textarea.defaultValue’ Memory Disclosure (MS17-006)

aaaaaaaaaaaaaaaaaaaaaaaa

2017-03-20 Google Security Research dos

D-Link DGS-1510 – Multiple Vulnerabilities

================

2017-03-20 Varang Amin webapps

Secure Download Links – ‘dc’ SQL Injection

# # # # #

2017-03-19 Ihsan Sencan webapps

FTPShell Server 6.56 – ‘ChangePassword’ Buffer Overflow

print '''

2017-03-19 ScrR1pTK1dd13 dos

HttpServer 1.0 – Directory Traversal

# Exploit Title: HttpServer 1.0 DolinaySoft Directory Traversal

2017-03-19 malwrforensics remote

iFdate Social Dating Script 2.0 – SQL Injection

# # # # #

2017-03-18 Ihsan Sencan webapps

DIGISOL DG-HR1400 1.00.02 Wireless Router – Privilege Escalation

Title:

2017-03-18 Indrajith.A.N webapps

Omegle Clone – SQL Injection

# # # # #

2017-03-18 Ihsan Sencan webapps

AXIS Communications – Cross-Site Scripting / Content Injection

0RWELLL4BS

2017-03-17 Orwelllabs webapps

AXIS (Multiple Products) – Cross-Site Request Forgery

0RWELLL4BS

2017-03-17 Orwelllabs webapps

Departmental Store Management System 1.2 – SQL Injection

# # # # #

2017-03-17 Ihsan Sencan webapps

FTPShell Client 6.53 – ‘Session name’ Local Buffer Overflow

print '''

2017-03-17 ScrR1pTK1dd13 dos