Microsoft Windows 7 SP1 (x86) – Local Privilege Escalation (MS16-014)
# Exploit Title: Elevation of privilege on Windows 7 SP1 x86
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 221
Lenovo ThinkPad – System Management Mode Arbitrary Code Execution
Source: https://github.com/Cr4sh/ThinkPwn
Symantec Endpoint Protection Manager 12.1 – Multiple Vulnerabilities
[+] Credits: John Page aka HYP3RLINX
Cuckoo Sandbox Guest 2.0.1 – XMLRPC Privileged Remote Code Execution
# -*- coding: utf8 -*-
Concrete5 CMS 5.7.3.1 – ‘Application::dispatch’ Method Local File Inclusion
-------------------------------------------------------------------------------
Untangle NGFW 12.1.0 Beta – ‘execEvil()’ Command Injection
#!/usr/bin/python
iBilling 3.7.0 – Persistent Cross-Site Scripting / Reflected Cross-Site Scripting
iBilling v3.7.0 Multiple Stored and Reflected Cross Site Scripting Vulnerabilities
WordPress Plugin Ultimate Product Catalog 3.8.6 – Arbitrary File Upload
# Exploit Title: Wordpress Ultimate-Product-Catalog v3.8.6 Arbitrary file (RCE)
OPAC KpwinSQL – SQL Injection
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Magnet Networks Tesley CPVA 642 Router – Weak WPA-PSK Passphrase Algorithm
# Exploit Title: Magnet Networks – Weak WPA-PSK passphrases used in Tesley CPVA 642 Router
CodoForum 3.4 – Persistent Cross-Site Scripting
# Exploit Title: Codoforum v3.4 Stored Cross-Site Scripting (Stored XSS)
Option CloudGate CG0192-11897 – Multiple Vulnerabilities
Option CloudGate Insecure Direct Object References Authorization Bypass
Mediacoder 0.8.43.5830 – ‘.m3u’ Local Buffer Overflow (SEH)
#!/usr/bin/python
VUPlayer 2.49 (Windows 7) – ‘.m3u’ Local Buffer Overflow (DEP Bypass)
#!/usr/bin/env python
Kagao 3.0 – Multiple Vulnerabilities
######################
Panda Security (Multiple Products) – Local Privilege Escalation
# Exploit Title: Panda Security Privilege Escalation
My Little Forum 2.3.5 – PHP Command Injection
[+] Credits: hyp3rlinx
PInfo 0.6.9-5.1 – Local Buffer Overflow
# Exploit developed using Exploit Pack v5.4
BigTree CMS 4.2.11 – SQL Injection
1. ADVISORY INFORMATION
HNB 1.9.18-10 – Local Buffer Overflow
# Exploit developed using Exploit Pack v5.4
SugarCRM 6.5.18 – PHP Code Injection
---------------------------------------------------------
Alibaba Clone B2B Script – Arbitrary File Disclosure
# Exploit Title: Alibaba Clone B2B Script File Read Vulnerability
Getsimple CMS 3.3.10 – Arbitrary File Upload
# Exploit Title: Getsimple CMS
XuezhuLi FileSharing – Directory Traversal
# Exploit Title: XuezhuLi FileSharing - Path Traversal Vulnerability
FinderView – Multiple Vulnerabilities
# Exploit Title: FinderView - Multiple Vulnerability(Path Traversal/Reflected XSS)
Microsoft Internet Explorer 11 (Windows 10) – VBScript Memory Corruption (MS16-051)
Source: https://github.com/theori-io/cve-2016-0189
Joomla! Component com_publisher – SQL Injection
# Exploit Title: Joomla com_publisher component SQL Injection vulnerability
Microsoft Windows – ‘gdi32.dll’ Multiple DIB-Related EMF Record Handlers Heap Out-of-Bounds Reads/Memory Disclosure (MS16-074)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=757
Microsoft Windows Kernel – ‘ATMFD.dll’ NamedEscape 0x250C Pool Corruption (MS16-074)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=785
Linux Kernel – ‘ecryptfs’ ‘/proc/$pid/environ’ Local Privilege Escalation
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=836
Microsoft Windows – Custom Font Disable Policy Bypass
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=779
SAP NetWeaver AS JAVA 7.1 < 7.5 - 'ctcprotocol Servlet' XML External Entity
Application: SAP NetWeaver AS JAVA
SAP NetWeaver AS JAVA 7.1 < 7.5 - Directory Traversal
Application: SAP NetWeaver AS JAVA
Radiant CMS 1.1.3 – Multiple Persistent Cross-Site Scripting Vulnerabilities
# Exploit Title: Radiant CMS 1.1.3 - Mutiple Persistant XSS Vulnerabilities
YetiForce CRM < 3.1 - Persistent Cross-Site Scripting
# Exploit Title: YetiForce CRM < 3.1 - Persistant XSS Vulnerability
sNews CMS 1.7.1 – Multiple Vulnerabilities
[+] Credits: hyp3rlinx
Joomla! Component com_bt_media 1.0 – SQL Injection
######################