Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 203

Itech Job Portal Script 9.11 – Authentication Bypass

# Vulnerability: Job Portal Script v9.11 Authentication bypass

2017-01-12 Dawid Morawski webapps

Online Food Delivery 2.04 – Authentication Bypass

# Vulnerability: Online Food Delivery v2.04 Authentication bypass

2017-01-12 Dawid Morawski webapps

aSc Timetables 2017 – Local Buffer Overflow

# Exploit Title: aSc Timetables 2017 input field buffer overflow and code execution

2017-01-12 Peter Baris local

Huawei Flybox B660 – Cross-Site Request Forgery (2)

Document Title:

2017-01-12 Vulnerability-Lab webapps

Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 SP2 – Multiple Vulnerabilities

# Exploit Title: [Trend Micro Interscan Web Security Virtual Appliance (IWSVA) 6.5.x Multiple Vulnerabilities]

2017-01-12 SlidingWindow webapps

Adobe Flash Player 24.0.0.186 – ‘ActionGetURL2’ Out-of-Bounds Memory Corruption (1)

Source: https://cosig.gouv.qc.ca/en/cosig-2017-01-en/

2017-01-11 COSIG dos

Starting Page 1.3 – ‘category’ SQL Injection

# Exploit Title: Starting Page 1.3 "Add a Link" - SQL Injection

2017-01-11 Ben Lee webapps

My Link Trader 1.1 – ‘id’ SQL Injection

# Vulnerability: My link trader - SQL Injection

2017-01-11 Dawid Morawski webapps

Adobe Flash Player 24.0.0.186 – ‘ActionGetURL2’ Out-of-Bounds Memory Corruption (2)

Source: https://cosig.gouv.qc.ca/en/cosig-2017-01-en/

2017-01-11 COSIG dos

Boxoft Wav 1.0 – Buffer Overflow

Document Title:

2017-01-11 Vulnerability-Lab dos

Itech Travel Portal Script 9.33 – SQL Injection

# # # # #

2017-01-11 Ihsan Sencan webapps

Itech Movie Portal Script 7.35 – SQL Injection

# # # # #

2017-01-11 Ihsan Sencan webapps

Dating Script 3.25 – SQL Injection

# Vulnerability: Dating Script v3.25 - SQL Injection

2017-01-11 Dawid Morawski webapps

iTechscripts Freelancer Script 5.11 – ‘sk’ SQL Injection

#!/usr/bin/perl -w

2017-01-11 v3n0m webapps

School Management Software 2.75 – SQL Injection

# # # # #

2017-01-11 Ihsan Sencan webapps

Airbnb Clone Script – Arbitrary File Upload

# # # # #

2017-01-11 Ihsan Sencan webapps

Penny Auction Script – Arbitrary File Upload

# # # # #

2017-01-11 Ihsan Sencan webapps

ECommerce-TIBSECART – Arbitrary File Upload

# # # # #

2017-01-11 Ihsan Sencan webapps

ECommerce-Multi-Vendor Software – Arbitrary File Upload

# # # # #

2017-01-11 Ihsan Sencan webapps

DiskBoss Enterprise 7.5.12 – ‘POST’ Remote Buffer Overflow (SEH)

#!/usr/bin/python

2017-01-10 Wyndell Bibera remote

Starting Page 1.3 – ‘linkid’ SQL Injection

# Vulnerability: Starting Page- SQL Injection

2017-01-10 JaMbA webapps

WordPress Plugin WP Support Plus Responsive Ticket System 7.1.3 – Privilege Escalation

# Exploit Title: WP Support Plus Responsive Ticket System 7.1.3 Privilege Escalation

2017-01-10 Kacper Szurek webapps

FMyLife Clone Script (Pro Edition) 1.1 – Cross-Site Request Forgery (Add Admin)

# # # # #

2017-01-10 Ihsan Sencan webapps

Huawei Flybox B660 – Cross-Site Request Forgery (1)

Document Title:

2017-01-10 Vulnerability-Lab webapps

D-Link DIR-615 – Multiple Vulnerabilities

# Title: D-Link DIR-615 Multiple Vulnerabilities

2017-01-10 Osanda Malith Jayathissa webapps

Apple OS X Yosemite – ‘flow_divert-heap-overflow’ Kernel Panic

#include

2017-01-10 Brandon Azad dos

My PHP Dating 2.0 – ‘path’ SQL Injection

# # # # #

2017-01-09 Ihsan Sencan webapps

My PHP Dating 2.0 – ‘id’ SQL Injection

# Vulnerability: My Php Dating 2.0 - SQL Injection

2017-01-09 Sniper Pex webapps

Friends in War Make or Break 1.7 – ‘imgid’ SQL Injection

# Exploit : Make or Break 1.7 (imgid) SQL Injection Vulnerability

2017-01-09 v3n0m webapps

Ansible 2.1.4/2.2.1 – Command Execution

########### Computest security advisory CT-2017-0109 #############

2017-01-09 Computest remote

Blackboard LMS 9.1 SP14 – Cross-Site Scripting

Document Title:

2017-01-09 Vulnerability-Lab webapps

Cemu 1.6.4b – Information Leak / Buffer Overflow (Emulator Breakout)

For those who only care about one thing: [the PoC is here.](https://rol.im/kpwned.zip)

2017-01-09 Wack0 local

Firejail – Local Privilege Escalation

# firejail advisory for TOCTOU in --get and --put (local root)

2017-01-09 Daniel Hodson local

Brave Browser 1.2.16/1.9.56 – Address Bar URL Spoofing

Brave Browser Suffers from Address Bar Spoofing Vulnerability. Address Bar

2017-01-08 Aaditya Purani dos

Advanced Desktop Locker 6.0.0 – Lock Screen Bypass

Exploit Title : Advanced Desktop Locker [ Locker Bypass ]

2017-01-08 Squnity local

DirectAdmin 1.50.1 – Denial of Service

#################################

2017-01-08 IeDb ir dos

Microsoft Windows Kernel – ‘win32k.sys NtSetWindowLongPtr’ Local Privilege Escalation (MS16-135) (2)

Source: https://ricklarabee.blogspot.com/2017/01/virtual-memory-page-tables-and-one-bit.html

2017-01-08 Rick Larabee local

ManagEnegine ADManager Plus 6.5.40 – Multiple Vulnerabilities

1. ADVISORY INFORMATION

2017-01-08 Mehmet Ince webapps

Splunk 6.1.1 – ‘Referer’ Header Cross-Site Scripting

# Exploit Title: Splunk 'Referer' Header Cross Site Scripting Vulnerability

2017-01-07 justpentest webapps

My Link Trader 1.1 – Authentication Bypass

# # # # #

2017-01-07 Ihsan Sencan webapps

Google Android max86902 Driver – ‘sysfs’ Interfaces Race Condition

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=963

2017-01-06 Google Security Research dos

Microsoft Edge (Windows 10) – ‘chakra.dll’ Information Leak / Type Confusion Remote Code Execution

Source: https://github.com/theori-io/chakra-2016-11

2017-01-05 Brian Pak remote

Kaspersky 17.0.0 – Local CA Root Incorrectly Protected

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=989

2017-01-04 Google Security Research local

Atlassian Confluence < 5.10.6 - Persistent Cross-Site Scripting

=====[ Tempest Security Intelligence - ADV-3/2016 CVE-2016-6283 ]==============

2017-01-04 Jodson Santos webapps

Firejail < 0.9.44.4 / < 0.9.38.8 LTS - Local Sandbox Escape

#define _POSIX_C_SOURCE 200212

2017-01-04 Sebastian Krahmer local

My Click Counter 1.0 – Authentication Bypass

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

2017-01-03 Adam webapps

Microsoft Windows 8.1 (x64) – ‘RGNOBJ’ Integer Overflow (MS16-098)

// Source: https://github.com/sensepost/ms16-098/tree/b85b8dfdd20a50fc7bc6c40337b8de99d6c4db80

2017-01-03 Saif local

Internet Download Accelerator 6.10.1.1527 – FTP Buffer Overflow (SEH)

#!/usr/bin/python

2017-01-02 Fady Mohammed Osman remote

QNAP NAS Devices – Heap Overflow

==================

2017-01-02 bashis dos

PHPMailer < 5.2.20 / SwiftMailer < 5.4.5-DEV / Zend Framework / zend-mail < 2.4.11 - 'AIO' 'PwnScriptum' Remote Code Execution

#!/usr/bin/python

2017-01-02 Dawid Golunski webapps