Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 226

McAfee LiveSafe 14.0 – Relocations Processing Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=817

2016-05-04 Google Security Research dos

Linux Kernel (Ubuntu 14.04.3) – ‘perf_event_open()’ Can Race with execve() (Access /etc/shadow)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=807

2016-05-04 Google Security Research local

Linux Kernel 4.4.x (Ubuntu 16.04) – ‘double-fdput()’ bpf(BPF_PROG_LOAD) Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=808

2016-05-04 Google Security Research local

Linux Kernel (Ubuntu 16.04) – Reference Count Overflow Using BPF Maps

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=809

2016-05-04 Google Security Research dos

WordPress Plugin Ninja Forms 2.9.36 < 2.9.42 - File Upload (Metasploit)

##

2016-05-04 Metasploit webapps

WordPress Plugin Ghost 0.5.5 – Unrestricted Export Download

# Exploit Title: WordPress Export to Ghost Unrestricted Export Download

2016-05-02 Josh Brody webapps

Acunetix WVS 10 – Remote Command Execution

'''

2016-05-02 Daniele Linguaglossa remote

Apache Struts – Dynamic Method Invocation Remote Code Execution (Metasploit)

##

2016-05-02 Metasploit remote

QSEE – PRDiag* Commands Privilege Escalation

Sources:

2016-05-02 laginimaineb local

Observium 0.16.7533 – Cross-Site Request Forgery

Change admin password

2016-04-29 Dolev Farhi webapps

Observium 0.16.7533 – (Authenticated) Arbitrary Command Execution

# Exploit title: Observium Commercial - Authenticated RCE

2016-04-29 Dolev Farhi webapps

Merit Lilin IP Cameras – Multiple Vulnerabilities

_ _ _ _ _ _ _ _ _ _

2016-04-29 Orwelllabs webapps

Rough Auditing Tool for Security (RATS) 2.3 – Array Out of Block Crash

# Exploit Title: RATS 2.3 Array Out of Block Crash

2016-04-29 David Silveiro dos

Wireshark – dissect_2008_16_security_4 Stack Buffer Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=802

2016-04-29 Google Security Research dos

Wireshark – alloc_address_wmem Assertion Failure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=804

2016-04-29 Google Security Research dos

Wireshark – ett_zbee_zcl_pwr_prof_enphases Static Out-of-Bounds Read

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=806

2016-04-29 Google Security Research dos

GLPi 0.90.2 – SQL Injection

Advisory ID: HTB23301

2016-04-29 High-Tech Bridge SA webapps

PHP 7.0.5 – ZipArchive::getFrom* Integer Overflow

Details

2016-04-28 Hans Jerry Illikainen remote

Microsoft Windows Kernel – ‘win32k.sys’ TTF Processing EBLC / EBSC Tables Pool Corruption (MS16-039)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=684

2016-04-28 Google Security Research dos

EMC ViPR SRM – Cross-Site Request Forgery

2016-04-27 Han Sahin webapps

RomPager 4.34 (Multiple Router Vendors) – ‘Misfortune Cookie’ Authentication Bypass

# Title: Misfortune Cookie Exploit (RomPager

2016-04-27 Milad Doorbash webapps

Microsoft Windows – CSRSS BaseSrvCheckVDM Session 0 Process Creation Privilege Escalation (MS16-048)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=692

2016-04-27 Google Security Research dos

Mach Race OSX – Local Privilege Escalation

Source: https://github.com/gdbinit/mach_race

2016-04-27 fG! local

Sony Playstation 4 (PS4) 1.76 – ‘dlclose’ Linux Kernel Loader

Code written based on info available here http://cturt.github.io/dlclose-overflow.html

2016-04-27 Carlos Pizarro local

Yasr Screen Reader 0.6.9 – Local Buffer Overflow

'''

2016-04-26 Juan Sacco local

Advantech Webaccess Dashboard Viewer – Arbitrary File Upload (Metasploit)

##

2016-04-26 Metasploit remote

libgd 2.1.1 – Signedness Heap Overflow

Overview

2016-04-26 Hans Jerry Illikainen remote

ImpressCMS 1.3.9 – SQL Injection

=============================================

2016-04-26 Manuel García Cárdenas webapps

Totemomail 4.x/5.x – Persistent Cross-Site Scripting

Document Title:

2016-04-25 Vulnerability-Lab webapps

C/C++ Offline Compiler and C For OS – Persistent Cross-Site Scripting

Document Title:

2016-04-25 Vulnerability-Lab webapps

Gemtek CPE7000 – WLTCS-106 Administrator SID Retriever (Metasploit)

##

2016-04-25 Federico Scalco webapps

Gemtek CPE7000 – WLTCS-106 ‘sysconf.cgi’ Remote Command Execution (Metasploit)

##

2016-04-25 Federico Scalco webapps

CompuSource Systems Real Time Home Banking – Local Privilege Escalation

# Exploit Title: CompuSource Systems - Real Time Home Banking - Local

2016-04-25 Information Paradox local

PCMan FTP Server 2.0.7 – ‘RENAME’ Remote Buffer Overflow (Metasploit)

##

2016-04-25 Jonathan Smith remote

NationBuilder – Multiple Persistent Cross-Site Scripting Vulnerabilities

#1 Stored XSS in 'signup[note]' POST parameter

2016-04-25 LiquidWorm webapps

Rough Auditing Tool for Security (RATS) 2.3 – Crash (PoC)

# Exploit Title: RATS 2.3 Crash POC

2016-04-25 David Silveiro dos

Microsoft Windows 7 < 10 / 2008 < 2012 (x86/x64) - Local Privilege Escalation (MS16-032)

# Exploit Title: Microsoft Windows 7-10 & Server 2008-2012 - Local Privilege Escalation (x32/x64) (MS16-032) (C#)

2016-04-25 fdiskyou local

phpLiteAdmin 1.9.6 – Multiple Vulnerabilities

#####################################################################################################################...

2016-04-21 Ozer Goker webapps

Symantec Brightmail 10.6.0-7 – LDAP Credentials Disclosure (Metasploit)

# Exploit Title: Symantec Brightmail ldap credential Grabber

2016-04-21 Fakhir Karim Reda webapps

Gemtek CPE7000 / WLTCS-106 – Multiple Vulnerabilities

#!/usr/bin/python

2016-04-21 Federico Ramondino webapps

Microsoft Windows 7 < 10 / 2008 < 2012 R2 (x86/x64) - Local Privilege Escalation (MS16-032) (PowerShell)

function Invoke-MS16-032 {

2016-04-21 b33f local

Sony Playstation 4 (PS4) < 2.50 - WebKit Code Execution (PoC)

CVE 2014-1303 Proof Of Concept for PS4

2016-04-21 TJ Corley local

PHPBack 1.3.0 – SQL Injection

[+] Credits: hyp3rlinx

2016-04-20 hyp3rlinx webapps

Microsoft Windows Kernel – DrawMenuBarTemp Wild-Write (MS16-039)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=707

2016-04-20 Nils Sommer dos

Hyper-V – ‘vmswitch.sys’ VmsMpCommonPvtHandleMulticastOids Guest to Host Kernel-Pool Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=688

2016-04-20 Google Security Research dos

modified eCommerce Shopsoftware 2.0.0.0 rev 9678 – Blind SQL Injection

# Title: Blind Injection modified eCommerce 2.0.0.0 rev 9678

2016-04-19 Felix Maduakor webapps

WordPress Plugin leenk.me 2.5.0 – Cross-Site Request Forgery / Cross-Site Scripting

I would like to disclose CSRF and stored XSS vulnerability in Wordpress

2016-04-18 cor3sm4sh3r webapps

WordPress Plugin Kento Post View Counter 2.8 – Cross-Site Request Forgery / Cross-Site Scripting

I would like to disclose CSRF and stored XSS vulnerability in Kento post view counter plugin version 2.8 .

2016-04-18 cor3sm4sh3r webapps

TH692 Outdoor P2P HD Waterproof IP Camera – Hard-Coded Credentials

Exploit Title: TH692- Outdoor P2P HD Waterproof IP Camera hardcoded credentials

2016-04-18 DLY dos

Webutler CMS 3.2 – Cross-Site Request Forgery

Dear OffSec,

2016-04-18 Keerati T. webapps