Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 220

Belkin AC1200 Router Firmware 1.00.27 – Authentication Bypass

'''

2016-07-11 Gregory Smiley webapps

WordPress Plugin All in One SEO Pack 2.3.6.1 – Persistent Cross-Site Scripting

Persistent Cross-Site Scripting in All in One SEO Pack WordPress Plugin

2016-07-11 David Vaartjes webapps

WordPress Plugin Activity Log 2.3.1 – Persistent Cross-Site Scripting

Persistent Cross-Site Scripting in WordPress Activity Log plugin

2016-07-11 Han Sahin webapps

IPS Community Suite 4.1.12.3 – PHP Code Injection

---------------------------------------------------------------------------

2016-07-11 Egidio Romano webapps

Microsoft Windows 7 SP1 – ‘mrxdav.sys’ WebDAV Privilege Escalation (MS16-016) (Metasploit)

##

2016-07-11 Metasploit local

Ruby on Rails ActionPack Inline ERB – Code Execution (Metasploit)

##

2016-07-11 Metasploit remote

Adobe Flash – ATF Processing Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=786

2016-07-11 Google Security Research dos

Adobe Flash – JXR Processing Double-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=788

2016-07-11 Google Security Research dos

Adobe Flash – LMZA Property Decoding Heap Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=790

2016-07-11 Google Security Research dos

Adobe Flash – ATF Image Packing Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=793

2016-07-11 Google Security Research dos

Tiki Wiki 15.1 – File Upload (Metasploit)

##

2016-07-11 Mehmet Ince webapps

Beauty Parlour & SPA Saloon Management System – Blind SQL Injection

####

2016-07-11 Yakir Wizman webapps

Clinic Management System – Blind SQL Injection

####

2016-07-11 Yakir Wizman webapps

WordPress Plugin Lazy Content Slider 3.4 – Cross-Site Request Forgery (Add Catetory)

######################

2016-07-08 Persian Hack Team webapps

Hide.Me VPN Client 1.2.4 – Local Privilege Escalation

Title: Hide.Me VPN Client - EoP: User to SYSTEM

2016-07-08 sh4d0wman local

InstantHMI 6.1 – Local Privilege Escalation

Title: InstantHMI - EoP: User to ADMIN

2016-07-08 sh4d0wman local

Microsoft Process Kill Utility (kill.exe) 6.3.9600.17298 – Crash (PoC)

'''

2016-07-08 hyp3rlinx dos

Microsoft WinDbg – ‘logviewer.exe’ Crash (PoC)

[+] Credits: HYP3RLINX

2016-07-08 hyp3rlinx dos

PHP Real Estate Script 3 – Arbitrary File Disclosure

# Exploit Title: php Real Estate Script Arbitrary File Disclosure

2016-07-08 Meisam Monsef webapps

CyberPower Systems PowerPanel 3.1.2 – XML External Entity Out-Of-Band Data Retrieval

CyberPower Systems PowerPanel 3.1.2 XXE Out-Of-Band Data Retrieval

2016-07-08 LiquidWorm webapps

Streamo Online Radio And TV Streaming CMS – SQL Injection

######################

2016-07-08 N4TuraL webapps

Tiki Wiki 15.1 – File Upload

#!/usr/bin/python

2016-07-07 Ivan Ivanovic webapps

OPAC KpwinSQL – Multiple Vulnerabilities

OPAC KpwinSQL LFI/XSS Vulnerabilities

2016-07-07 Yakir Wizman webapps

GE Proficy HMI/SCADA CIMPLICITY 8.2 – Local Privilege Escalation

# Exploit Title: GE Proficy HMI/SCADA CIMPLICITY 8.2 Local Privilege Escalation Exploit(0 day)

2016-07-07 Zhou Yu local

CIMA DocuClass ECM – Multiple Vulnerabilities

# Exploit Title: [CIMA DocuClass Enterprise Content Management - Multiple Vulnerabilities]

2016-07-06 Karn Ganeshen webapps

24online SMS_2500i 8.3.6 build 9.0 – SQL Injection

# Exploit Title: SQL Injection In 24 Online Billing API

2016-07-06 Rahul Raz webapps

Advanced Webhost Billing System (AWBS) 2.9.6 – Multiple Vulnerabilities

AWBS v2.9.6 Multiple Remote Vulnerabilities

2016-07-06 Bikramaditya Guha webapps

PaKnPost Pro 1.14 – Multiple Vulnerabilities

# Exploit Title: PaKnPost Pro Arbitrary File Upload & Remote Code Execution

2016-07-06 Edvin Rustemagic, Grega Preseren webapps

GNU Wget < 1.18 - Arbitrary File Upload / Remote Code Execution

=============================================

2016-07-06 Dawid Golunski remote

OpenFire 3.10.2 < 4.0.1 - Multiple Vulnerabilities

# Several vulnerabilities doscovered in OpenFire version 3.10.2 to 4.0.1

2016-07-06 Sysdream webapps

Samsung Android JACK – Local Privilege Escalation

Sources:

2016-07-06 Google Security Research local

Nagios XI Chained – Remote Code Execution (Metasploit)

##

2016-07-06 Metasploit remote

XpoLog Center 6 – Remote Command Execution / Cross-Site Request Forgery

XpoLog Center V6 CSRF Remote Command Execution

2016-07-04 LiquidWorm webapps

Ktools Photostore 4.7.5 – Multiple Vulnerabilities

#-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-#

2016-07-04 Yakir Wizman webapps

Exim 4 (Debian 8 / Ubuntu 16.04) – Spool Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE-----

2016-07-04 halfdog local

WordPress Plugin Real3D FlipBook – Multiple Vulnerabilities

#########################################################################

2016-07-04 Mukarram Khalid webapps

WebCalendar 1.2.7 – Multiple Vulnerabilities

[+] Credits: John Page aka HYP3RLINX

2016-07-04 hyp3rlinx webapps

eCardMAX 10.5 – Multiple Vulnerabilities

Advisory ID: ZSL-2016-5336

2016-07-04 Bikramaditya Guha webapps

Linux Kernel < 4.4.0-21 (Ubuntu 16.04 x64) - 'netfilter target_offset' Local Privilege Escalation

EDB Note: Download ~ https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/44300.zip

2016-07-04 Vitaly Nikolenko local

Linux Kernel 4.4.0-21 (Ubuntu 16.04 x64) – Netfilter ‘target_offset’ Out-of-Bounds Privilege Escalation

Exploit-DB Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40053.zip

2016-07-03 vnik local

Python smtplib 2.7.11 / 3.4.4 / 3.5.1 – Man In The Middle StartTLS Stripping

VuNote

2016-07-03 tintinweb local

Phoenix Exploit Kit – Remote Code Execution

# Exploit Title: Phoenix Exploit Kit - Remote Code Execution

2016-07-01 CrashBandicot webapps

Ktools Photostore 4.7.5 – Blind SQL Injection

Title : Ktools Photostore

2016-06-30 Gal Goldshtein & Viktor Minin webapps