Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 197

Cisco ASA – WebVPN CIFS Handling Buffer Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=998

2017-02-15 Google Security Research dos

Coppermine Gallery < 1.5.44 - Directory Traversal

Coppermine Gallery

2017-02-15 Hacker Fantastic webapps

ShadeYouVPN Client 2.0.1.11 – Local Privilege Escalation

# Exploit ShadeYouVPN.com Client v2.0.1.11 for Windows Privilege Escalation

2017-02-14 Kacper Szurek local

LG G4 – lgdrmserver Binder Service Multiple Race Conditions

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=986

2017-02-14 Google Security Research dos

LG G4 – lghashstorageserver Directory Traversal

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=987

2017-02-14 Google Security Research dos

LG G4 – Touchscreen Driver write_log Kernel Read/Write

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=990

2017-02-14 Google Security Research dos

Google Android – Inter-process munmap in android.util.MemoryIntArray

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1001

2017-02-14 Google Security Research dos

Google Android – android.util.MemoryIntArray Ashmem Race Conditions

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1002

2017-02-14 Google Security Research dos

ntfs-3g – Unsanitized modprobe Environment Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1072

2017-02-14 Google Security Research local

Microsoft Edge – TypedArray.sort Use-After-Free (MS16-145)

2017-02-14 Google Security Research dos

Piwik 2.14.0/2.16.0/2.17.1/3.0.1 – Superuser Plugin Upload (Metasploit)

##

2017-02-14 Metasploit remote

F5 BIG-IP 11.6 SSL Virtual Server – ‘Ticketbleed’ Memory Disclosure

# -*- coding: utf-8 -*-

2017-02-14 @0x00string remote

PHP Marketplace Script – SQL Injection

# Exploit Title : PHP Marketplace Script - Multiple SQL Injection Vulnerabilities

2017-02-13 Th3GundY webapps

Joomla! Component JE Classify Ads 1.2 – ‘pro_id’ SQL Injection

# # # # #

2017-02-13 Ihsan Sencan webapps

Joomla! Component JE Gallery 1.3 – ‘photo_id’ SQL Injection

# # # # #

2017-02-13 Ihsan Sencan webapps

Joomla! Component JE Directory 1.7 – ‘ditemid’ SQL Injection

# # # # #

2017-02-13 Ihsan Sencan webapps

Joomla! Component JE QuoteForm – ‘Itemid’ SQL Injection

# # # # #

2017-02-13 Ihsan Sencan webapps

Joomla! Component JE Property Finder 1.6.3 – SQL Injection

# # # # #

2017-02-13 Ihsan Sencan webapps

Joomla! Component JE Tour 2.0 – SQL Injection

# # # # #

2017-02-13 Ihsan Sencan webapps

Joomla! Component JE Video Rate 1.0 – SQL Injection

# # # # #

2017-02-13 Ihsan Sencan webapps

Joomla! Component JE auction 1.6 – ‘eid’ SQL Injection

# # # # #

2017-02-13 Ihsan Sencan webapps

Joomla! Component JE Auto 1.5 – ‘d_itemid’ SQL Injection

# # # # #

2017-02-13 Ihsan Sencan webapps

Joomla! Component JE Awd Song 1.8 – SQL Injection

# # # # #

2017-02-13 Ihsan Sencan webapps

Joomla! Component Hbooking 1.9.9 – ‘h_id’ SQL Injection

# # # # #

2017-02-13 Ihsan Sencan webapps

Joomla! Component JE Quiz 2.3 – SQL Injection

# # # # #

2017-02-13 Ihsan Sencan webapps

Joomla! Component JE Grid Folio – ‘id’ SQL Injection

# # # # #

2017-02-13 Ihsan Sencan webapps

Joomla! Component JE K2 Multiple Form Story 1.3 – ‘Itemid’ SQL Injection

# # # # #

2017-02-13 Ihsan Sencan webapps

Joomla! Component JE Form Creator 1.8 – ‘Itemid’ SQL Injection

# # # # #

2017-02-13 Ihsan Sencan webapps

Joomla! Component JE Portfolio Creator 1.2 – ‘d_itemid’ SQL Injection

# # # # #

2017-02-13 Ihsan Sencan webapps

Joomla! Component JE Ticket System 1.2 – SQL Injection

# # # # #

2017-02-13 Ihsan Sencan webapps

Joomla! Component JE Messanger – SQL Injection

# # # # #

2017-02-13 Ihsan Sencan webapps

Domains & Hostings Manager PRO 3.0 – ‘entries’ SQL Injection

# # # # #

2017-02-12 Ihsan Sencan webapps

Cimetrics BACstac 6.2f – Local Privilege Escalation

Cimetrics BACstac Routing Service 6.2f Local Privilege Escalation

2017-02-12 LiquidWorm local

Cimetrics BACnet Explorer 4.0 – XML External Entity Injection

Cimetrics BACnet Explorer 4.0 XXE Vulnerability

2017-02-12 LiquidWorm local

Joomla! Component Soccer Bet 4.1.5 – ‘userid’ SQL Injection

# # # # #

2017-02-12 Ihsan Sencan webapps

Kodi 17.1 – Arbitrary File Disclosure

# Exploit Title: Kodi - Local File Inclusion

2017-02-12 Eric Flokstra webapps

WhizBiz 1.9 – SQL Injection

# # # # #

2017-02-12 Ihsan Sencan webapps

TI Online Examination System 2.0 – SQL Injection

# # # # #

2017-02-12 Ihsan Sencan webapps

Viavi Real Estate – SQL Injection

# # # # #

2017-02-12 Ihsan Sencan webapps

Viavi Movie Review – ‘id’ SQL Injection

# # # # #

2017-02-12 Ihsan Sencan webapps

Viavi Product Review – ‘id’ SQL Injection

# # # # #

2017-02-12 Ihsan Sencan webapps

Quadz School Management System 3.1 – ‘uisd’ SQL Injection

# # # # #

2017-02-12 Ihsan Sencan webapps

Linux Kernel 3.10.0 (CentOS 7) – Denial of Service

#####

2017-02-12 FarazPajohan dos

Itech B2B Script 4.29 – Multiple Vulnerabilities

Exploit Title : Itech scripts B2B Script v4.29 - Multiple Vulnerability

2017-02-12 Marc Castejon webapps

Joomla! Component onisPetitions 2.5 – ‘tag’ SQL Injection

# Exploit Title: Joomla Component onisPetitions 2.5 - SQL Injection

2017-02-11 Persian Hack Team webapps

Joomla! Component onisQuotes 2.5 – ‘tag’ SQL Injection

# Exploit Title: Joomla Component onisQuotes 2.5 - SQL Injection

2017-02-11 Persian Hack Team webapps

Joomla! Component onisMusic 2 – ‘tag’ SQL Injection

# Exploit Title: Joomla Component onisMusic 2 - SQL Injection

2017-02-11 Persian Hack Team webapps

Joomla! Component Sponsor Wall 7.0 – ‘wallid’ SQL Injection

# Exploit Title: Joomla Component Sponsor Wall 7.0 - SQL Injection

2017-02-11 Persian Hack Team webapps

Joomla! Component Vik Booking 1.7 – SQL Injection

# Exploit Title: Joomla Component Vik Booking 1.7 - SQL Injection

2017-02-11 Persian Hack Team webapps

Joomla! Component Soccer Bet 4.1.5 – ‘cat’ SQL Injection

# Exploit Title: Joomla Component Soccer Bet 4.1.5 - SQL Injection

2017-02-11 Persian Hack Team webapps