Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 209

SweetRice 1.5.1 – Cross-Site Request Forgery / PHP Code Execution

2016-11-03 Ashiyane Digital Security Team webapps

ETchat 3.7 – Cross-Site Request Forgery

# Exploit Title: ETchat(persian version) CMS Xsrf vulnerability

2016-11-03 Hesam Bazvand webapps

PCMan FTP Server 2.0.7 – ‘ACCT’ Remote Buffer Overflow

#!/usr/bin/env python

2016-11-03 Cybernetic remote

sNews 1.7.1 – Cross-Site Request Forgery

# Exploit Title : Snews CMS Cross Site Request Forgery

2016-11-03 Amir.ght webapps

sNews 1.7.1 – Arbitrary File Upload

# Exploit Title : Snews CMS upload sheller

2016-11-03 Amir.ght webapps

nodCMS – Cross-Site Request Forgery

# Exploit Title : nodcms Cross Site Request Forgery

2016-11-03 Amir.ght webapps

Redaxo 5.2.0 – Cross-Site Request Forgery

# Exploit Title : redaxo CMS CSRF(Add Admin)

2016-11-03 Amir.ght webapps

PCMan FTP Server 2.0.7 – ‘UMASK’ Remote Buffer Overflow

#!/usr/bin/env python

2016-11-02 Eagleblack remote

Freefloat FTP Server 1.0 – ‘DIR’ Remote Buffer Overflow

import socket

2016-11-02 ScrR1pTK1dd13 remote

Alienvault OSSIM/USM 5.3.1 – PHP Object Injection

Details

2016-11-02 Peter Lapp webapps

Alienvault OSSIM/USM 5.3.1 – Persistent Cross-Site Scripting

Details

2016-11-02 Peter Lapp webapps

Alienvault OSSIM/USM 5.3.1 – SQL Injection

Details

2016-11-02 Peter Lapp webapps

Microsoft Internet Explorer 9 – MSHTML CAttrArray Use-After-Free (MS14-056)

2016-11-02 Skylined dos

Citrix Receiver/Receiver Desktop Lock 4.5 – Authentication Bypass

# thel3l

2016-11-02 Rithwik Jayasimha local

SunellSecurity NVR / Camera – Denial of Service

# Exploit Title: SunellSecurity NVR / Cams - Buffer overflow in CGI

2016-11-02 qwsj dos

Linux Kernel (Ubuntu / Fedora / RedHat) – ‘Overlayfs’ Local Privilege Escalation (Metasploit)

##

2016-11-02 Metasploit local

Bassmaster 1.5.1 – Batch Arbitrary JavaScript Injection Remote Code Execution (Metasploit)

require 'msf/core'

2016-11-02 Metasploit remote

LifeSize Room 5.0.9 – Multiple Vulnerabilities

Source: https://github.com/XiphosResearch/exploits/tree/master/deathsize

2016-11-02 Xiphos Research Ltd webapps

Microsoft Internet Explorer 11 – MSHTML CView::CalculateImageImmunity Use-After-Free

2016-11-02 Skylined dos

SweetRice 1.5.1 – Cross-Site Request Forgery

2016-11-02 Ashiyane Digital Security Team webapps

Memcached 1.4.33 – ‘Add’ (PoC)

# Source: http://paper.seebug.org/95/

2016-11-01 p0wd3r / dawu dos

School Registration and Fee System – Authentication Bypass

# Exploit Title.............. School Registration and Fee System Auth Bypass

2016-11-01 opt1lc webapps

Freefloat FTP Server 1.0 – ‘RMD’ Remote Buffer Overflow

#!/usr/bin/env python

2016-11-01 Karri93 remote

Freefloat FTP Server 1.0 – ‘HOST’ Remote Buffer Overflow

#!/usr/bin/env python

2016-11-01 Cybernetic remote

Freefloat FTP Server 1.0 – ‘ABOR’ Remote Buffer Overflow

#!/usr/bin/env python

2016-11-01 Ger remote

KarjaSoft Sami FTP Server 2.0.2 – USER/PASS Remote Buffer Overflow (SEH)

#/usr/bin/python

2016-11-01 n30m1nd remote

My Little Forum 2.3.7 – Multiple Vulnerabilities

Title:

2016-11-01 Ashiyane Digital Security Team webapps

Freefloat FTP Server 1.0 – ‘RENAME’ Remote Buffer Overflow

#!/usr/bin/env python

2016-11-01 Eagleblack remote

MySQL / MariaDB / PerconaDB 5.5.x/5.6.x/5.7.x – ‘mysql’ System User Privilege Escalation / Race Condition

Source: https://legalhackers.com/advisories/MySQL-Maria-Percona-PrivEscRace-CVE-2016-6663-5616-Exploit.html // http:/...

2016-11-01 Dawid Golunski local

MySQL / MariaDB / PerconaDB 5.5.x/5.6.x/5.7.x – ‘root’ System User Privilege Escalation

#!/bin/bash -p

2016-11-01 Dawid Golunski local

Memcached 1.4.33 – ‘Crash’ (PoC)

# Source: http://paper.seebug.org/95/

2016-11-01 p0wd3r / dawu dos

Memcached 1.4.33 – ‘sasl’ (PoC)

# Source: http://paper.seebug.org/95/

2016-11-01 p0wd3r / dawu dos

freeFTPd 1.0.8 – ‘mkd’ Denial of Service

from ftplib import FTP

2016-10-31 ScrR1pTK1dd13 dos

Micro Focus Rumba 9.4 – Local Denial of Service

# Exploit Title: Micro Focus Rumba 9.4 Multiple Local Stack-overflow

2016-10-31 Umit Aksu dos

Micro Focus Rumba 9.3 – ActiveX Stack Buffer Overflow (PoC)

# Exploit Title: Micro Focus Rumba

2016-10-31 Umit Aksu dos

S9Y Serendipity 2.0.4 – Cross-Site Scripting

========================================

2016-10-31 Besim webapps

Rumba FTP Client 4.x – Remote Stack Buffer Overflow (SEH)

# Exploit Title: Rumba FTP 4.x Client Stackoverflow SEH

2016-10-31 Umit Aksu remote