Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 211
Microsoft Windows Edge/Internet Explorer – Isolated Private Namespace Insecure DACL Privilege Escalation (MS16-118)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=879
Microsoft Windows Edge/Internet Explorer – Isolated Private Namespace Insecure Boundary Descriptor Privilege Escalation (MS16-118)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=878
Microsoft Windows – NtLoadKeyEx Read Only Hive Arbitrary File Write Privilege Escalation (MS16-124)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=871
CNDSOFT 2.3 – Cross-Site Request Forgery / Arbitrary File Upload
# Exploit Title: CNDSOFT 2.3 - Arbitrary File Upload with CSRF (shell.php)
XhP CMS 0.5.1 – Cross-Site Request Forgery / Persistent Cross-Site Scripting
# Exploit Title: XhP CMS 0.5.1 - Cross-Site Request Forgery to Persistent Cross-Site Scripting
IObit Advanced SystemCare 10.0.2 – Unquoted Service Path Privilege Escalation
#########################################################################
HikVision Security Systems – Activex Buffer Overflow
#!/usr/bin/env python
Intel(R) Management Engine Components 8.0.1.1399 – Unquoted Service Path Privilege Escalation
# Exploit Title: Intel(R) Management Engine Components - Unquoted Service Path Privilege Escalation
Lenovo RapidBoot HDD Accelerator 1.00.0802 – Unquoted Service Path Privilege Escalation
# Exploit Title: Lenovo RapidBoot HDD Accelerator - Unquoted Service Path Privilege Escalation
Lenovo Slim USB Keyboard 1.09 – Unquoted Service Path Privilege Escalation
# Exploit Title: Lenovo Slim USB Keyboard - Unquoted Service Path Privilege Escalation
Vembu StoreGrid 4.0 – Unquoted Service Path Privilege Escalation
# Exploit Title: Vembu StoreGrid - Unquoted Service Path Privilege Escalation
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed 15.1.0.0096 – Unquoted Service Path Privilege Escalation
# Exploit Title: Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed - Unquoted Service Path Privilege Escalation
Intel(R) PROSet/Wireless WiFi Software 15.01.1000.0927 – Unquoted Service Path Privilege Escalation
# Exploit Title: Intel(R) PROSet/Wireless WiFi Software - Unquoted Service Path Privilege Escalation
Lenovo ThinkVantage Communications Utility 3.0.42.0 – Unquoted Service Path Privilege Escalation
# Exploit Title: Lenovo ThinkVantage Communications Utility - Unquoted Service Path Privilege Escalation
PDF Complete 4.1.12 Corporate Edition – Unquoted Service Path Privilege Escalation
# Exploit Title: PDF Complete Corporate Edition - Unquoted Service Path Privilege Escalation
Realtek High Definition Audio Driver 6.0.1.6730 – Unquoted Service Path Privilege Escalation
# Exploit Title: Realtek High Definition Audio Driver - Unquoted Service Path Privilege Escalation
Linux Kernel 2.6.22 < 3.9 - 'Dirty COW' /proc/self/mem Race Condition (Write Access Method)
####################### dirtyc0w.c #######################
Microsoft Windows (x86) – ‘afd.sys’ Local Privilege Escalation (MS11-046)
################################################################
Pluck CMS 4.7.3 – Cross-Site Request Forgery (Add Page)
# Exploit Title: Pluck CMS 4.7.3 - Add-Page Cross-Site Request Forgery
LanSpy 2.0.0.155 – Local Buffer Overflow
#!/usr/bin/python
ManageEngine ServiceDesk Plus 9.2 Build 9207 – Unauthorized Information Disclosure
Title: ManageEngine ServiceDesk Plus Low Privileged User View All Tickets
The Unarchiver 3.11.1 – ‘.tar.Z’ Crash (PoC)
# Exploit Title: The Unarchiver 3.11.1 '.tar.Z' Local Crash PoC
Cgiemail 1.6 – Source Code Disclosure
#!/usr/bin/env perl
Microsoft Windows – DFS Client Driver Arbitrary Drive Mapping Privilege Escalation (MS16-123)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=885
Microsoft Windows – DeviceApi CMApi PiCMOpenDeviceKey Arbitrary Registry Key Write Privilege Escalation (MS16-124)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=872
Microsoft Windows – DeviceApi CMApi User Hive Impersonation Privilege Escalation (MS16-124)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=875
Spy Emergency 23.0.205 – Unquoted Service Path Privilege Escalation
#########################################################################
Subrion CMS 4.0.5 – Cross-Site Request Forgery Bypass / Persistent Cross-Site Scripting
# Exploit Title: Subrion CMS 4.0.5 - CSRF Bypass to Persistent XSS and Add-Admin
PHP Business Directory – Multiple Vulnerabilities
# Exploit Title: PHP Business Directory - Multiple Vulnerabilities
Microsoft Windows Diagnostics Hub – DLL Load Privilege Escalation (MS16-125)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=887
PHP Telephone Directory – Multiple Vulnerabilities
# Exploit Title: PHP Telephone Directory - Multiple Vulnerabilities
PHP Image Database – Multiple Vulnerabilities
# Exploit Title: PHP Image Database - Multiple Vulnerabilities
PHP NEWS 1.3.0 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: PHP NEWS 1.3.0 - Cross-Site Request Forgery (Add Admin)
Linux Kernel < 4.5.1 - Off-By-One (PoC)
EDB Note ~ Download: http://cyseclabs.com/exploits/matreshka.c
NETGATE Registry Cleaner 16.0.205 – Unquoted Service Path Privilege Escalation
#########################################################################
NETGATE AMITI Antivirus 23.0.305 – Unquoted Service Path Privilege Escalation
#########################################################################
NETGATE Data Backup build 3.0.605 – Unquoted Service Path Privilege Escalation
#########################################################################
Simple Forum PHP 2.4 – SQL Injection
=====================================================
NO-IP DUC 4.1.1 – Unquoted Service Path Privilege Escalation
=====================================================
YouTube Automated CMS 1.0.7 – Cross-Site Request Forgery / Persistent Cross-Site Scripting
# Exploit Title: YouTube Automated CMS 1.0.1 / 1.0.7 - CSRF to Persistent XSS
Wondershare PDFelement 5.2.9 – Unquoted Service Path Privilege Escalation
#########################################################################
Graylog Collector 0.4.2 – Unquoted Service Path Privilege Escalation
# Exploit Title: Graylog Collector Service Path Privilege Escalation