NUUO NVRmini 2 3.0.8 – Remote Code Execution
#!/usr/bin/env python
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 218
NUUO NVRmini 2 3.0.8 – Local File Disclosure
NUUO Local File Disclosure Vulnerability
NUUO NVRmini 2 3.0.8 – Multiple OS Command Injections
NUUO Multiple OS Command Injection Vulnerabilities
NUUO NVRmini 2 3.0.8 – Remote Command Injection (Shellshock)
NUUO NVRmini 2 NE-4160 ShellShock Remote Code Execution
NUUO NVRmini 2 3.0.8 – Arbitrary File Deletion
NUUO Arbitrary File Deletion Vulnerability
NUUO NVRmini 2 3.0.8 – ‘strong_user.php’ Backdoor Remote Shell Access
NUUO Backdoor (strong_user.php) Remote Shell Access
VMware Host Guest Client Redirector – DLL Side Loading (Metasploit)
require 'msf/core'
NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application – Multiple Vulnerabilities
>> Multiple vulnerabilities in NUUO NVRmini2 / NVRsolo / Crystal devices and NETGEAR ReadyNAS Surveillance application
ntop/nbox 2.3 < 2.5 - Multiple Vulnerabilities
E-DB Note: Source ~ http://carnal0wnage.attackresearch.com/2016/08/got-any-rces.html
Subrion CMS 4.0.5 – SQL Injection
Document Title:
zFTP Client 20061220 – ‘Connection Name’ Local Buffer Overflow
# Exploit developed using Exploit Pack v5.4
PHP Power Browse 1.2 – Directory Traversal
# Exploit Title: PHP Power Browse v1.2 - Path Traversal
Davolink DV-2051 – Multiple Vulnerabilities
===================================================================
WordPress Plugin Count Per Day 3.5.4 – Persistent Cross-Site Scripting
Stored Cross-Site Scripting vulnerability in Count per Day WordPress Plugin
NASdeluxe NDL-2400r 2.01.09 – OS Command Injection
-----BEGIN PGP SIGNED MESSAGE-----
Kodi Web Server 16.1 – Denial of Service
# Exploit Title: Kodi 16.1 Web Server Remote DoS
ntop-ng 2.5.160805 – Username Enumeration
# Exploit title: ntopng user enumeration
Wireshark 1.12.0 < 1.12.12 - NDS Dissector Denial of Service
Sample generated with AFL
Wireshark 1.12.0 < 1.12.12 / 2.0.0 < 2.0.4 - PacketBB Dissector Denial of Service
Sample generated by AFL
Wireshark 1.12.0 < 1.12.12 / 2.0.0 < 2.0.4 - WSP Dissector Denial of Service
Sample generated with AFL
Open Upload 0.4.2 – Cross-Site Request Forgery (Add Admin)
================================================================================================================
WordPress Plugin Booking Calendar 6.2 – SQL Injection
SQL injection vulnerability in Booking Calendar WordPress Plugin
WordPress Plugin WP Live Chat Support 6.2.03 – Persistent Cross-Site Scripting
Stored Cross-Site Scripting vulnerability in WP Live Chat Support WordPress Plugin
WordPress Plugin ALO EasyMail NewsLetter 2.9.2 – Cross-Site Request Forgery (Add/Import Arbitrary Subscribers)
Cross-Site Request Forgery in ALO EasyMail Newsletter WordPress Plugin
Halliburton LogView Pro 9.7.5 – ‘.cgm’ / ‘.tif’ / ‘.tiff’ / ‘.tifh’ Crash (PoC)
# Exploit Title: [Haliburton LogView Pro v9.7.5]
AXIS (Multiple Products) – ‘devtools ‘ (Authenticated) Remote Command Execution
_ _ _ _ _ _ _ _ _ _
VUPlayer 2.49 – ‘.pls’ File Stack Buffer Overflow (DEP Bypass)
#!/usr/bin/python
mySCADAPro 7 – Local Privilege Escalation
mySCADAProv7 Local Privilege Escalation
WordPress Plugin Ultimate Product Catalog 3.9.8 – do_shortcode via ajax Blind SQL Injection
# Exploit Title: Wordpress Ultimate-Product-Catalog get_results("SELECT * FROM $catalogue_items_table_name WHERE Cata...
Barracuda Web App Firewall 8.0.1.008/Load Balancer 5.4.0.004 – (Authenticated) Remote Command Execution (Metasploit) (3)
# Exploit Title: Barracuda Web App Firewall/Load Balancer Post Auth Remote Root Exploit (3)
Barracuda Web Application Firewall 8.0.1.008 – (Authenticated) Remote Command Execution (Metasploit)
# Exploit Title: Barracuda Web Application Firewall
Easy File Sharing Web Server 7.2 – Remote Overflow (Egghunter) (SEH)
#!/usr/bin/python
AppArmor securityfs < 4.8 - 'aa_fs_seq_hash_show' Reference Count Leak
There's a reference count leak in aa_fs_seq_hash_show that can be used to overflow the reference counter and trigger ...
Linux Kernel (ARM/ARM64) – ‘perf_event_open()’ Arbitrary Memory Read
perf_event_open() offers to collect various pieces of information when an event occurs, including a user stack backtr...
phpMyAdmin 4.6.2 – (Authenticated) Remote Code Execution
#!/usr/bin/env python
Barracuda Web App Firewall 8.0.1.007/Load Balancer 5.4.0.004 – (Authenticated) Remote Command Execution (Metasploit)
# Exploit Title: Barracuda Web App Firewall/Load Balancer Post Auth Remote Root Exploit (2)
PHP File Vault 0.9 – Directory Traversal
PHP File Vault version 0.9 , remote directory traversal and read file vulnerabilty
Iris ID IrisAccess ICU 7000-2 – Multiple Vulnerabilities
Iris ID IrisAccess ICU 7000-2 Multiple XSS and CSRF Vulnerabilities
Iris ID IrisAccess ICU 7000-2 – Remote Command Execution
Iris ID IrisAccess ICU 7000-2 Remote Root Command Execution
Iris ID IrisAccess iCAM4000/iCAM7000 – Hard-Coded Credentials Remote Shell Access
Iris ID IrisAccess iCAM4000/iCAM7000 Hardcoded Credentials Remote Shell Access
Rapid7 AppSpider 6.12 – Local Privilege Escalation
Rapid7 AppSpider 6.12 Web Application Vulnerability Scanner Elevation Of Privilege
Barracuda Web App Firewall 8.0.1.007/Load Balancer 5.4.0.004 – Remote Command Execution (Metasploit)
# Exploit Title: Barracuda Web App Firewall/Load Balancer Post Auth Remote Root Exploit