Dell OpenManage Server Administrator 8.3 – XML External Entity
#!/usr/bin/ruby
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
#!/usr/bin/ruby
# Exploit Title: phpMyFAQ 2.9.0 Stored XSS
# Exploit Title : Armadito antimalware - Backdoor/Bypass
------------------------------------------------------------------------------------
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=784
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=798
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=783
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=782
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=778
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=777
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=776
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=774
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=772
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=732
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=724
Source: https://twitter.com/halsten/status/740380171694280704
Drale DBTableViewer v100123 - Blind SQL Injection
# Exploit Title: League of Legends Screensaver Unquoted Service Paths
# Exploit Title: League of Legends Screensaver Insecure File Permissions
# Title: Cisco EPC 3928 Multiple Vulnerabilities
####################
# Exploit Title: Unauthenticated command injection - Apache Continuum
# Exploit Title: ShellShock On Sun Secure Global Desktop & Oracle Global desktop
# Exploit Title: Valve Steam 3.42.16.13 Local Privilege Escalation
# Exploit Title: Online examination system 1.0 - SQL Injection
#Exploit Title: WP Mobile Detector
# Exploit Title: Double Opt-In for Download 2.0.9 Sql Injection
Exploit Title: Notilus SQL injection
Advisory: Unauthenticated File Upload in Relay Ajax Directory Manager
CVE-2016-3670 Stored Cross Site Scripting in Liferay CE
Advisory: Websockify: Remote Code Execution via Buffer Overflow
[+] Credits: hyp3rlinx
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=803
FlatPress 1.0.3 CSRF Arbitrary File Upload RCE PoC
# AirOS NanoStation M2 v5.6-beta
######################################################################