Itech Freelancer Script 5.13 – SQL Injection
Exploit Title: Itech Freelancer Script v5.13 – SQL Injection
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 200
Itech Multi Vendor Script 6.49 – ‘pl’ SQL Injection
Exploit Title: Itech Multi Vendor Script 6.49 – SQL Injection
Itech News Portal Script 6.28 – ‘inf’ SQL Injection
Exploit Title: Itech News Portal Script v6.28 – SQL Injection
Itech Real Estate Script 3.12 – SQL Injection
Exploit Title: Itech Real Estate Script v3.12 – SQL Injection
Itech Video Sharing Script 4.94 – ‘v’ SQL Injection
Exploit Title: Video Sharing Script 4.94 – SQL Injection
Netgear Routers – Password Disclosure
Trustwave SpiderLabs Security Advisory TWSL2017-003:
TrueConf Server 4.3.7 – Multiple Vulnerabilities
TrueConf Server v4.3.7 Multiple Remote Web Vulnerabilities
Joomla! Component JTAG Calendar 6.2.4 – ‘search’ SQL Injection
# Exploit Title: Joomla Component JTAG Calendar 6.2.4 - SQL Injection
My Photo Gallery 1.0 – SQL Injection
Introduction
Maian Weblog 4.0 – SQL Injection
Introduction
Radisys MRF – Command Injection
Title: MRF Web Panel OS Command Injection
WordPress Plugin WP Private Messages 1.0.1 – SQL Injection (2)
# Exploit Title: WP Email Users – 1.4.1 – Plugin WordPress – Sql Injection
Oracle VM VirtualBox < 5.0.32 / < 5.1.14 - Local Privilege Escalation
== [ Overview ] ===
Google Android – ‘pm_qos’ KASLR Bypass
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=971
PHP PEAR HTTP_Upload 1.0.0b3 – Arbitrary File Upload
[+]################################################################################################
Haraka < 2.8.9 - Remote Command Execution
#!/usr/bin/python
Apple macOS 10.12.1 / iOS 10.2 – Kernel Userspace Pointer Memory Corruption
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1004
Apple macOS 10.12.1 / iOS Kernel – ‘IOService::matchPassive’ Use-After-Free
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=973
Apple macOS 10.12.1 / iOS Kernel – ‘host_self_trap’ Use-After-Free
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1034
TM RG4332 Wireless Router – Arbitrary File Disclosure
# Exploit Title: TM RG4332 Wireless Router Traversal Arbitrary File Read
PHPBack < 1.3.1 - SQL Injection / Cross-Site Scripting
##################################################################################################
Polycom VVX Web Interface – Change Admin Password
# Exploit Title: Polycom VVX Web Interface - Change Admin Password as User
Palo Alto Networks Terminal Services Agent 7.0.3-13 – Integer Overflow
Exploit Title - Palo Alto Networks Terminal Services Agent Integer Overflow
OpenSSL 1.1.0 – Remote Client Denial of Service
// Source: https://guidovranken.wordpress.com/2017/01/26/cve-2017-3730-openssl-1-1-0-remote-client-denial-of-service-...
GNU Screen 4.5.0 – Local Privilege Escalation
#!/bin/bash
Movie Portal Script 7.36 – Multiple Vulnerabilities
Exploit Title : Movie Portal Script v7.36 - Multiple Vulnerability
WD My Cloud Mirror 2.11.153 – Authentication Bypass / Remote Code Execution
# Exploit Title: WD My Cloud Mirror 2.11.153 RCE and Authentication Bypass
Cisco WebEx – ‘nativeMessaging’ Remote Command Execution
Cisco WebEx Exploit
GNU Screen 4.5.0 – Local Privilege Escalation (PoC)
Commit f86a374 ("screen.c: adding permissions check for the logfile name",
Geutebrueck GCore 1.3.8.42/1.4.2.37 – Remote Code Execution (Metasploit)
# Exploit Title: Geutebrueck GCore X64 Full RCE Bufferoverflow for Metasploit
Systemd 228 (SUSE 12 SP2 / Ubuntu Touch 15.04) – Local Privilege Escalation
source: http://www.openwall.com/lists/oss-security/2017/01/24/4