eXtplorer 2.1.9 – ‘.ZIP’ Directory Traversal
[+] Credits: John Page aka hyp3rlinx
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 225
Web Interface for DNSmasq / Mikrotik – SQL Injection
[+] Credits: hyp3rlinx
Microsoft Excel 2010 – Crash (PoC) (2)
Microsoft Office is prone to a remote denial-of-service vulnerability.
Hex : Shard of Fate 1.0.1.026 – Unquoted Path Privilege Escalation
-----------------------------------------------------------------------------------------------------------------
Web2py 2.14.5 – Multiple Vulnerabilities
Title - Web2py 2.14.5 Multiple Vulnerabilities LFI,XSS,CSRF
NRSS Reader 0.3.9 – Local Stack Overflow
# Exploit developed using Exploit Pack v5.4
runAV mod_security – Arbitrary Command Execution
# Title : runAV mod_security Remote Command Execution
Wireshark – ‘AirPDcapDecryptWPABroadcastKey’ Heap Out-of-Bounds Read (2)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=740
Microsoft Windows Media Center – ‘.MCL’ File Processing Remote Code Execution (MS16-059)
Exploit Title: Microsoft Windows Media Center .MCL File Processing Remote Code Execution Vulnerability (MS16-059)
WordPress Plugin Q and A (Focus Plus) FAQ 1.3.9.7 – Multiple Vulnerabilities
# Exploit Title: WordPress Q and A (Focus Plus) FAQ Full Path Disclosure and SQL Injection
WordPress Plugin Huge-IT Image Gallery 1.8.9 – Multiple Vulnerabilities
# Exploit Title: WordPress plugin Image Gallery Full Path Disclosure and SQL Injection
Trend Micro – ‘CoreServiceShell.exe’ Multiple HTTP s
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=775
CIScan 1.00 – Hostname/IP Field Overwrite (SEH) (PoC)
#!/usr/bin/python
FileZilla FTP Client 3.17.0.0 – Unquoted Path Privilege Escalation
-----------------------------------
Intuit QuickBooks Desktop 2007 < 2016 - Arbitrary Code Execution
+ Credits: Maxim Tomashevich from Thegrideon Software
MediaInfo 0.7.61 – Crash (PoC)
#!/usr/bin/perl -w
Ipswitch WS_FTP LE 12.3 – Search field Overwrite (SEH) (PoC)
#!/usr/bin/python
Core FTP Server 32-bit Build 587 – Heap Overflow
# -*- coding: cp1252 -*-
Adobe Reader DC 15.010.20060 – Memory Corruption
########################################################################################
Ajaxel CMS 8.0 – Multiple Vulnerabilities
Ajaxel CMS 8.0 Multiple Vulnerabilities
i.FTP 2.21 – Host Address / URL Field (SEH)
#!/usr/bin/python
Dell SonicWALL Scrutinizer 11.0.1 – setUserSkin/deleteTab SQL Injection Remote Code Execution
#!/usr/local/bin/python
ZeewaysCMS – Multiple Vulnerabilities
ZeewaysCMS Multiple Vulnerabilities
ASUS Memory Mapping Driver (ASMMAP/ASMMAP64) – Physical Memory Read/Write
Source: http://rol.im/asux/
Certec EDV atvise SCADA Server 2.5.9 – Local Privilege Escalation
Certec EDV atvise SCADA server 2.5.9 Privilege Escalation Vulnerability
Microsoft Windows 7 – ‘WebDAV’ Local Privilege Escalation (MS16-016) (2)
# Exploit Title: WebDAV Elevation of Privilege Vulnerability (MS16)-2
RPCScan 2.03 – Hostname/IP Field Overwrite (SEH) (PoC)
#!/usr/bin/python
RPCScan 2.03 – Hostname/IP Field Crash (PoC)
#!/usr/bin/env python
CIScan 1.00 – Hostname/IP Field Crash (PoC)
#!/usr/bin/env python
DotNetNuke 07.04.00 – Administration Authentication Bypass
# Exploit Title: DotNetNuke 07.04.00 Administration Authentication Bypass
Adobe Flash (Multiple Scripts) – Use-After-Free When Rendering Displays (2)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=719
Adobe Flash – MovieClip.duplicateMovieClip Use-After-Free
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=759
ManageEngine Applications Manager Build 12700 – Multiple Vulnerabilities
[SPSA-2016-02/ManageEngine ApplicationsManager]------------------------------
Baidu Spark Browser 43.23.1000.476 – Address Bar URL Spoofing
Google Home Page
Alibaba Clone B2B Script – Admin Authentication Bypass
# Exploit Title: Alibaba Clone B2B Script Admin Authentication Bypass
CMS Made Simple < 1.12.1 / < 2.1.3 - Web Server Cache Poisoning
=============================================
TRN Threaded USENET News Reader 3.6-23 – Local Stack Overflow
# Exploit developed using Exploit Pack v5.4
IPFire < 2.19 Core Update 101 - Remote Command Execution
######################################################################################
Imagick 3.3.0 (PHP 5.4) – disable_functions Bypass
# Exploit Title: PHP Imagick disable_functions Bypass
ImageMagick 7.0.1-0 / 6.9.3-9 – ‘ImageTragick ‘ Multiple Vulnerabilities
Nikolay Ermishkin from the Mail.Ru Security Team discovered several
OpenSSL – Padding Oracle in AES-NI CBC MAC Check
Source: http://web-in-security.blogspot.ca/2016/05/curious-padding-oracle-in-openssl-cve.html
Zabbix Agent 3.0.1 – ‘mysql.size’ Shell Command Injection
CVE-2016-4338: Zabbix Agent 3.0.1 mysql.size shell command injection