Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 224

CCextractor 0.80 – Crash (PoC)

# Exploit Title: CCextractor 0.80 Access Violation Crash

2016-05-31 David Silveiro dos

HP Data Protector A.09.00 – Encrypted Communications Arbitrary Command Execution (Metasploit)

# Exploit Title: Data Protector Encrypted Communications

2016-05-31 Ian Lovering remote

TCPDump 4.5.1 – Crash (PoC)

# Exploit Title: tcpdump 4.5.1 Access Violation Crash

2016-05-31 David Silveiro dos

MySQL 5.5.45 – procedure analyse Function Denial of Service

#!/usr/bin/env python

2016-05-30 Osanda Malith Jayathissa dos

Open Source Real Estate Script 3.6.0 – SQL Injection

# Exploit Title: real-estate classified script Sql Injection

2016-05-30 Meisam Monsef webapps

FreeBSD Kernel (FreeBSD 10.2 < 10.3 x64) - 'SETFKEY' (PoC)

#include

2016-05-29 CTurt dos

FreeBSD Kernel (FreeBSD 10.2 x64) – ‘sendmsg’ Kernel Heap Overflow (PoC)

#include

2016-05-29 CTurt dos

PHP Realestate Script Script 4.9.0 – SQL Injection

# Exploit Title: Property Agent RealeState Script Sql Injection

2016-05-27 Meisam Monsef webapps

VideoLAN VLC Media Player 2.2.1 – ‘DecodeAdpcmImaQT’ Buffer Overflow

In modules/codec/adpcm.c, VLC can be made to perform an out-of-bounds

2016-05-27 Patrick Coleman dos

Real Estate Portal 4.1 – Multiple Vulnerabilities

Real Estate Portal v4.1 Remote Code Execution Vulnerability

2016-05-26 Bikramaditya Guha webapps

EduSec 4.2.5 – SQL Injection

EduSec 4.2.5 Multiple SQL Injection Vulnerabilities

2016-05-26 Bikramaditya Guha webapps

Micro Focus Rumba+ 9.4 – Multiple Stack Buffer Overflow Vulnerabilities

Micro Focus Rumba+ v9.4 Multiple Stack Buffer Overflow Vulnerabilities

2016-05-26 LiquidWorm dos

HP Data Protector A.09.00 – Arbitrary Command Execution

#!/usr/bin/python

2016-05-26 Ian Lovering remote

Graphite2 – GlyphCache::GlyphCache Heap Buffer Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=749

2016-05-26 Google Security Research dos

Graphite2 – GlyphCache::Loader Heap Overreads

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=751

2016-05-26 Google Security Research dos

Graphite2 – TtfUtil::CheckCmapSubtable12 Heap Overread

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=752

2016-05-26 Google Security Research dos

Graphite2 – TtfUtil::CmapSubtable4NextCodepoint Heap Overread

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=755

2016-05-26 Google Security Research dos

Graphite2 – NameTable::getName Multiple Heap Out-of-Bounds Reads

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=756

2016-05-26 Google Security Research dos

Oracle Application Testing Suite (ATS) – Arbitrary File Upload (Metasploit)

##

2016-05-25 Metasploit remote

Ubiquiti airOS – Arbitrary File Upload (Metasploit)

##

2016-05-25 Metasploit remote

PowerFolder Server 10.4.321 – Remote Code Execution

Mogwai Security Advisory MSA-2016-01

2016-05-25 Hans-Martin Muench remote

AfterLogic WebMail Pro ASP.NET 6.2.6 – Administrator Account Disclosure via XML External Entity Injection

1. ADVISORY INFORMATION

2016-05-24 Mehmet Ince webapps

Operation Technology ETAP 14.1.0 – Local Privilege Escalation

Operation Technology ETAP 14.1.0 Local Privilege Escalation

2016-05-23 LiquidWorm local

Operation Technology ETAP 14.1.0 – Multiple Stack Buffer Overrun Vulnerabilities

Operation Technology ETAP 14.1.0 Multiple Stack Buffer Overrun Vulnerabilities

2016-05-23 LiquidWorm dos

WordPress Plugin Job Script by Scubez – Remote Code Execution

#!C:/Python27/python.exe -u

2016-05-23 Bikramaditya Guha webapps

XenAPI 1.4.1 for XenForo – Multiple SQL Injections

[RCESEC-2016-002] XenAPI v1.4.1 for XenForo Multiple Unauthenticated SQL Injections

2016-05-23 Julien Ahrens webapps

Apple QuickTime – ‘.mov’ Parsing Memory Corruption

#####################################################################################

2016-05-19 Francis Provencher dos

SAP NetWeaver AS JAVA 7.1 < 7.5 - SQL Injection

Application: SAP NetWeaver AS JAVA

2016-05-19 ERPScan webapps

SAP NetWeaver AS JAVA 7.1 < 7.5 - Information Disclosure

Application:SAP NetWeaver AS JAVA

2016-05-19 ERPScan webapps

4digits 1.1.4 – Local Buffer Overflow (PoC)

4digits 1.1.4 Local Buffer Overflow Privilege Escalation ( if setuid/setgid )

2016-05-19 N_A dos

VirIT Explorer Lite & Pro 8.1.68 – Local Privilege Escalation

Full title: VirIT Explorer Lite & Pro v.8.1.68 Local Privilege Escalation (System)/Arbitrary Code Execution

2016-05-19 Paolo Stagno local

Magento < 2.0.6 - Arbitrary Unserialize / Arbitrary Write File

2016-05-18 agix webapps

Meteocontrol WEB’log – Admin Password Disclosure (Metasploit)

# Exploit Title: [Meteocontrol WEB'log - Extract Admin password]

2016-05-17 Karn Ganeshen webapps

Cisco ASA Software 8.x/9.x – IKEv1 / IKEv2 Buffer Overflow

#!/usr/bin/env python2.7

2016-05-17 Exodus Intelligence remote