Watchguard Firewalls – ‘ESCALATEPLOWMAN’ ifconfig Privilege Escalation
# Exploit Title: WatchGuard Firewalls - ifconfig Privilege Escalation (ESCALATEPLOWMAN)
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 217
Cisco ASA / PIX – ‘EPICBANANA’ Local Privilege Escalation
# Exploit Title: Cisco ASA / PIX - Privilege Escalation (EPICBANANA)
TOPSEC Firewalls – ‘ELIGIBLECONTESTANT’ Remote Code Execution
# Exploit Title: TOPSEC Firewalls - Remote Code Execution (ELIGIBLECONTESTANT)
TOPSEC Firewalls – ‘ELIGIBLECANDIDATE’ Remote Code Execution
# Exploit Title: TOPSEC Firewalls - Remote Code Execution (ELIGIBLECANDIDATE)
TOPSEC Firewalls – ‘ELIGIBLEBOMBSHELL’ Remote Code Execution
# Exploit Title: TOPSEC Firewalls - Remote Code Execution (ELIGIBLEBOMBSHELL)
TOPSEC Firewalls – ‘ELIGIBLEBACHELOR’ Remote Command Execution
# Exploit Title: TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
Fortigate Firewalls – ‘EGREGIOUSBLUNDER’ Remote Code Execution
# Exploit Title: Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
tcPbX – ‘tcpbx_lang’ Local File Inclusion
Vulnerable hardware : tcpbx voip distro
Cisco ASA 8.x – ‘EXTRABACON’ Authentication Bypass
# Exploit Title: Cisco ASA 8.X Authentication Bypass
Honeywell IP-Camera HICC-1100PT – Credentials Disclosure
1. Advisory Information
Linux Kernel – TCP Related Read Use-After-Free
// Source: https://marcograss.github.io/security/linux/2016/08/18/cve-2016-6828-linux-kernel-tcp-uaf.html
X-Cart < 4.1.3 - Arbitrary Variable Overwrite
X-Cart Arbitrary Variable Overwrite
SIEMENS IP-Camera CVMS2025-IR / CCMS2025 – Credentials Disclosure
1. Advisory Information
Microsoft Windows – GDI+ DecodeCompressedRLEBitmap Invalid Pointer Arithmetic Out-of-Bounds Write (MS16-097)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=824
Microsoft Windows – GDI+ ValidateBitmapInfo Invalid Pointer Arithmetic Out-of-Bounds Reads (MS16-097)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=826
Microsoft Windows – GDI+ EMR_EXTTEXTOUTA / EMR_POLYTEXTOUTA Heap Buffer Overflow (MS16-097)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=828
Microsoft Word 2013/2016 – sprmSdyaTop Denial of Service (MS16-099)
#####################################################################################
WSO2 Identity Server 5.1.0 – Multiple Vulnerabilities
[+] Credits: John Page aka HYP3RLINX
WSO2 Carbon 4.4.5 – Local File Inclusion
[+] Credits: John Page aka HYP3RLINX
WSO2 Carbon 4.4.5 – Persistent Cross-Site Scripting
[+] Credits: John Page aka HYP3RLINX
WSO2 Carbon 4.4.5 – Denial of Service / Cross-Site Request Forgery
[+] Credits: John Page aka HYP3RLINX
Lepton CMS 2.2.0/2.2.1 – Directory Traversal
[+] Credits: John Page (HYP3RLINX)
Lepton CMS 2.2.0/2.2.1 – PHP Code Injection
[+] Credits: John Page (HYP3RLINX)
Pi-Hole Web Interface 2.8.1 – Persistent Cross-Site Scripting in Whitelist/Blacklist
# Exploit Title: Pi-Hole Web Interface Stored XSS in White/Black list file
GitLab – ‘impersonate’ Feature Privilege Escalation
# Exploit Title: GitLab privilege escalation via "impersonate" feature
Zabbix 2.2.x/3.0.x – SQL Injection
==========================================
Samsung Smart Home Camera SNH-P-6410 – Command Injection
# E-DB Note: source ~ https://www.pentestpartners.com/blog/samsungs-smart-camera-a-tale-of-iot-network-security/
Claroline < 1.7.7 - Arbitrary File Inclusion
Claroline Arbitrary File Inclusion
FreePBX 13/14 – Remote Command Execution / Privilege Escalation
#!/usr/bin/env python
ColoradoFTP 1.3 Prime Edition (Build 8) – Directory Traversal
###################################################
SquirrelMail < 1.4.7 - Arbitrary Variable Overwrite
SquirrelMail Arbitrary Variable Overwrite
Nagios Network Analyzer 2.2.1 – Multiple Cross-Site Request Forgery Vulnerabilities
[+] Credits: John Page ( hyp3rlinx )
Microsoft Word 2007/2010/2013/2016 – Out-of-Bounds Read Code Execution (MS16-099)
#####################################################################################
EyeLock Myris 3.3.2 – SDK Service Unquoted Service Path Privilege Escalation
EyeLock Myris 3.3.2 SDK Service Unquoted Service Path Privilege Escalation
EyeLock nano NXT 3.5 – Local File Disclosure
EyeLock nano NXT 3.5 Local File Disclosure Vulnerability
EyeLock nano NXT 3.5 – Remote Code Execution
#!/usr/bin/env python
WebNMS Framework Server 5.2/5.2 SP1 – Multiple Vulnerabilities
>> Multiple vulnerabilities in WebNMS Framework Server 5.2 and 5.2 SP1
SAP SAPCAR – Multiple Vulnerabilities
1. Advisory Information
Xfinity Gateway (Technicolor DPC3941T) – Cross-Site Request Forgery
# Exploit Title: CSRF XFINITY Gateway product Technicolor(previously Cisco) DPC3941T
Navis Webaccess – SQL Injection
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
PHPCollab CMS 2.5 – ’emailusers.php’ SQL Injection
Document Title:
Microsoft Windows 7 (x86/x64) – Group Policy Privilege Escalation (MS16-072)
# Exploit Title: Group Policy Elevation of Privilege Vulnerability
WordPress Plugin Add From Server < 3.3.2 - Cross-Site Request Forgery (Arbitrary File Upload)
Cross-Site Request Forgery vulnerability in Add From Server WordPress Plugin