Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 192

SolarWinds LEM 6.3.1 – Remote Code Execution (Metasploit)

##

2017-03-17 Mehmet Ince remote

Cisco IOS 12.2 < 12.4 / 15.0 < 15.6 - Security Association Negotiation Request Device Memory

#!/usr/bin/python

2017-03-17 nixawk remote

Oracle Knowledge Management 12.1.1 < 12.2.5 - XML External Entity Leading To Remote Code Execution

# SSD Advisory – Oracle Knowledge Management XXE Leading to a RCE

2017-03-17 SecuriTeam webapps

Microsoft Windows DVD Maker 6.1.7 – XML External Entity Injection

[+] Credits: John Page AKA hyp3rlinx

2017-03-16 hyp3rlinx local

Cerberus FTP Server 8.0.10.3 – ‘MLST’ Buffer Overflow (PoC)

[+] Title: Cerberus FTP Server 8.0.10.3 – 'MLST' Remote Buffer Overflow

2017-03-16 Nassim Asrir dos

WordPress Plugin Membership Simplified 1.58 – Arbitrary File Download

import requests

2017-03-16 The Martian webapps

Microsoft Edge 38.14393.0.0 – JavaScript Engine Use-After-Free

[crayon-6abaab8d2042d345941229/]

2017-03-16 Google Security Research dos

Cobbler 2.8.0 – (Authenticated) Remote Code Execution

#!/usr/bin/python

2017-03-16 Dolev Farhi webapps

CommVault Edge 11 SP6 – Stack Buffer Overflow (PoC)

import socket

2017-03-16 redr2e dos

Joomla! Component Vik Appointments 1.5 – SQL Injection

# # # # #

2017-03-15 Ihsan Sencan webapps

Joomla! Component Vik Rent Items 1.3 – SQL Injection

# # # # #

2017-03-15 Ihsan Sencan webapps

Joomla! Component Vik Rent Car 1.11 – SQL Injection

# # # # #

2017-03-15 Ihsan Sencan webapps

PCAUSA Rawether (ASUS PCE-AC56 WLAN Card Utilities Windows 10 x64) – Local Privilege Escalation

#Exploit Title: PCAUSA Rawether for Windows local privilege escalation

2017-03-15 ReWolf local

Microsoft Windows – COM Session Moniker Privilege Escalation (MS17-012)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1021

2017-03-15 Google Security Research local

Adobe Flash – Metadata Parsing Out-of-Bounds Read

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1005

2017-03-15 Google Security Research dos

Adobe Flash – MovieClip Attach init Object Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1006

2017-03-15 Google Security Research dos

Adobe Flash – ATF Thumbnailing Heap Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1015

2017-03-15 Google Security Research dos

Adobe Flash – ATF Planar Decompression Heap Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1016

2017-03-15 Google Security Research dos

Adobe Flash – AVC Header Slicing Heap Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1017

2017-03-15 Google Security Research dos

IBM WebSphere – RCE Java Deserialization (Metasploit)

##

2017-03-15 Metasploit remote

Apache Struts 2.3.5 < 2.3.31 / 2.5 < 2.5.10 - 'Jakarta' Multipart Parser OGNL Injection (Metasploit)

##

2017-03-15 Metasploit remote

Microsoft Windows – ‘LoadUvsTable()’ Heap Buffer Overflow

# Date: 15-03-2017

2017-03-15 Hossein Lotfi dos

GitHub Enterprise 2.8.0 < 2.8.6 - Remote Code Execution

#!/usr/bin/ruby

2017-03-15 iblue webapps

Sitecore CMS 8.1 Update-3 – Cross-Site Scripting

# Exploit Title: Stored Cross Site Scripting (XSS) in Sitecore Experience Platform 8.1 Update-3

2017-03-15 Pralhad Chaskar webapps

GitHub Enterprise < 2.8.7 - Remote Code Execution

#!/usr/bin/python

2017-03-15 orange webapps

Joomla! Component Simple Membership 3.3.3 – ‘userId’ SQL Injection

# # # # #

2017-03-14 Ihsan Sencan webapps

Joomla! Component Advertisement Board 3.0.4 – ‘id’ SQL Injection

# # # # #

2017-03-14 Ihsan Sencan webapps

APNGDis 2.8 – ‘chunk size descriptor’ Heap Buffer Overflow

# Exploit Title: APNGDis chunk size descriptor Buffer Overflow

2017-03-14 Alwin Peppels dos

APNGDis 2.8 – ‘image width / height chunk’ Heap Buffer Overflow

# Exploit Title: APNGDis image width / height Buffer Overflow

2017-03-14 Alwin Peppels dos

APNGDis 2.8 – ‘filename’ Stack Buffer Overflow (PoC)

# Exploit Title: APNGDis filename Buffer Overflow

2017-03-14 Alwin Peppels dos

Car Workshop System – SQL Injection

# # # # #

2017-03-13 Ihsan Sencan webapps

Cerberus FTP Server 8.0.10.1 – Denial of Service

# Exploit Title: Cerberus FTP server – Denial of Service

2017-03-13 Peter Baris dos

Oracle VM VirtualBox – Cooperating VMs can Escape from Shared Folder

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1037

2017-03-13 Google Security Research local

Netgear R7000 / R6400 – ‘cgi-bin’ Command Injection (Metasploit)

##

2017-03-13 Metasploit remote

Steam Profile Integration 2.0.11 – SQL injection

# Exploit Title: IPS Community Suite - Steam Profile Integration 2.0.11 and below SQL injection

2017-03-13 DrWhat webapps

Easy MOV Converter 1.4.24 – Local Buffer Overflow (SEH)

#!/usr/bin/python

2017-03-12 Muhann4d dos

Nintendo Switch – WebKit Code Execution (PoC)

CVE-2016-4657 Switch PoC

2017-03-12 qwertyoruiop dos