Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 222

Tomabo MP4 Player 3.11.6 – Local Stack Overflow (SEH) (Metasploit)

##

2016-06-20 s0nk3y local

Airia – Cross-Site Request Forgery (Add Content)

2016-06-20 HaHwul webapps

Airia – Arbitrary File Upload

# Exploit Title: Airia - Webshell Upload Vulnerability

2016-06-20 HaHwul webapps

Symphony CMS 2.6.7 – Session Fixation

[+] Credits: John Page aka hyp3rlinx

2016-06-20 hyp3rlinx webapps

ACROS Security 0patch 2016.05.19.539 – ‘0PatchServicex64.exe’ Unquoted Service Path Privilege Escalation

ACROS Security 0patch (0PatchServicex64.exe) Unquoted Service Path Privilege Escalation

2016-06-20 LiquidWorm local

WordPress Plugin Gravity Forms 1.8.19 – Arbitrary File Upload

2016-06-17 Abk Khan webapps

Vicidial 2.11 – Scripts Persistent Cross-Site Scripting

# Exploit Title: Vicidial 2.11 Scripts - Authenticated Stored XSS

2016-06-17 David Silveiro webapps

phpATM 1.32 (Windows) – Arbitrary File Upload / Remote Command Execution

2016-06-17 Paolo Massenio webapps

phpATM 1.32 – Multiple Vulnerabilities

2016-06-17 Paolo Massenio webapps

op5 7.1.9 – Configuration Command Execution (Metasploit)

##

2016-06-17 Metasploit remote

ATCOM PBX IP01 / IP08 / IP4 / IP2G4A – Authentication Bypass

# Title: ATCOM PBX system , auth bypass exploit

2016-06-16 i-Hmx webapps

Roxy Fileman 1.4.4 – Arbitrary File Upload

# Exploit Title: Roxy Fileman

2016-06-16 Tyrell Sassen webapps

SlimCMS 0.1 – Cross-Site Request Forgery (Change Admin Password)

2016-06-16 Avinash Thapa webapps

Tiki Wiki CMS Calendar 6.15/9.11 LTS/12.5 LTS/14.2 – Remote Code Execution

# Exploit Title: Tiki-Calendar-RCE

2016-06-16 Dany Ouellet webapps

Blat 3.2.14 – Stack Overflow

1. Vulnerable Product Version:

2016-06-16 Vishnu dos

SolarWinds Virtualization Manager – Local Privilege Escalation

Product: Solarwinds Virtualization Manager

2016-06-16 Nate Kettlewell local

Gemalto Sentinel License Manager 18.0.1.55505 – Directory Traversal

Gemalto Sentinel License Manager 18.0.1 Directory Traversal Vulnerability

2016-06-16 LiquidWorm webapps

Ultrabenosaurus ChatBoard – Persistent Cross-Site Scripting

# Exploit Title: Ultrabenosaurus ChatBoard - Stored XSS

2016-06-15 HaHwul webapps

Ultrabenosaurus ChatBoard – Cross-Site Request Forgery (Send Message)

2016-06-15 HaHwul webapps

w2wiki – Multiple Cross-Site Scripting Vulnerabilities

# Exploit Title: w2wiki - Multiple XSS(Stored/Reflected)

2016-06-15 HaHwul webapps

Hyperoptic (Tilgin) Router HG23xx – Multiple Vulnerabilities

Hyperoptic (Tilgin) Router HG23xx Multiple XSS And CSRF Vulnerabilities

2016-06-15 LiquidWorm webapps

Dokeos 2.2.1 – Blind SQL Injection

# Exploit Title: Dokeos Blind SQL Injection

2016-06-15 Mormoroth webapps

Joomla! Component com_enmasse 5.1 < 6.4 - SQL Injection

# Exploit Title: Joomla com_enmasse - SQL Injection

2016-06-15 Hamed Izadi webapps

AdobeUpdateService 3.6.0.248 – Unquoted Service Path Privilege Escalation

----------------------------------------------------------------------------------------------------------

2016-06-15 Cyril Vallicari local

BookingWizz Booking System < 5.5 - Multiple Vulnerabilities

1. ADVISORY INFORMATION

2016-06-15 Mehmet Ince webapps

jbFileManager – Directory Traversal

# Exploit Title: jbFileManager - Path Traversal(view/add/delete)

2016-06-15 HaHwul webapps

PHPLive 4.4.8 < 4.5.4 - Password Recovery SQL Injection

#!/bin/env python

2016-06-15 Tiago Carvalho webapps

Bomgar Remote Support – Code Execution (Metasploit)

##

2016-06-15 Markus Wulftange remote

Microsoft Windows 7 – win32k Bitmap Use-After-Free (MS16-062) (1)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=746

2016-06-15 Nils Sommer dos

Microsoft Windows 7 – win32k Bitmap Use-After-Free (MS16-062) (2)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=747

2016-06-15 Nils Sommer dos

Google Chrome – GPU Process MailboxManagerImpl Double-Read

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=780

2016-06-15 Google Security Research dos

Apache Continuum – Arbitrary Command Execution (Metasploit)

##

2016-06-14 Metasploit remote

WordPress Plugin Social Stream 1.5.15 – wp_options Overwrite

2016-06-14 wp0Day.com webapps

Oracle Orakill.exe 11.2.0 – Buffer Overflow (PoC)

'''

2016-06-14 hyp3rlinx dos

Grid Gallery 1.0 – Admin Panel Authentication Bypass

2016-06-13 Ali BawazeEer webapps

FRticket Ticket System – Persistent Cross-Site Scripting

# Exploit Title: FRticket - Ticket System - Stored XSS

2016-06-13 Hamit Abis webapps

Viart Shopping Cart 5.0 – Cross-Site Request Forgery / Arbitrary File Upload

2016-06-13 Ali Ghanbari webapps

Easy RM to MP3 Converter 2.7.3.700 – ‘.m3u’ File (Universal ASLR + DEP Bypass)

# Exploit Title: Easy RM to MP3 Converter 2.7.3.700 (.m3u) File BoF Exploit with Universal DEP+ASLR bypass

2016-06-13 Fitzl Csaba local

Dream Gallery 2.0 – Admin Panel Authentication Bypass

2016-06-13 Ali BawazeEer webapps

Joomla! Component com_payplans 3.3.6 – SQL Injection

######################

2016-06-13 Persian Hack Team webapps

Zabbix 2.2 < 3.0.3 - API JSON-RPC Remote Code Execution

#!/usr/bin/env python

2016-06-13 Alexander Gurin webapps

iSQL 1.0 – Command Injection

#!/bin/ruby

2016-06-13 HaHwul local

iSQL 1.0 – ‘isql_main.c’ Buffer Overflow (PoC)

#!/bin/ruby

2016-06-13 HaHwul dos