Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 228

Google Android – ‘ih264d_process_intra_mb’ Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=523

2016-04-01 Google Security Research dos

Adobe Flash – Color.setTransform Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=451

2016-04-01 Google Security Research dos

PHP 5.5.33 – Invalid Memory Write

# Exploit Title: Invalid memory write in phar on filename with \0 in name

2016-04-01 vah_13 dos

MOBOTIX Video Security Cameras – Cross-Site Request Forgery (Add Admin)

Add admin user Testingus:

2016-03-31 LiquidWorm webapps

Apache OpenMeetings 1.9.x < 3.1.0 - '.ZIP' File Directory Traversal

Severity: Moderate

2016-03-31 Andreas Lindh webapps

Apache Jetspeed – Arbitrary File Upload (Metasploit)

##

2016-03-31 Metasploit remote

Wireshark – dissect_pktc_rekey Heap Out-of-Bounds Read

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=754

2016-03-31 Google Security Research dos

Apple QuickTime < 7.7.79.80.95 - '.FPX' Parsing Memory Corruption (1)

#####################################################################################

2016-03-30 Francis Provencher dos

Apple QuickTime < 7.7.79.80.95 - '.FPX' Parsing Memory Corruption (2)

#####################################################################################

2016-03-30 Francis Provencher dos

Apple QuickTime < 7.7.79.80.95 - '.PSD' Parsing Memory Corruption

#####################################################################################

2016-03-30 Francis Provencher dos

CubeCart 6.0.10 – Multiple Vulnerabilities

Advisory ID: HTB23298

2016-03-30 High-Tech Bridge SA webapps

Kamailio 4.3.4 – Heap Buffer Overflow

census ID: census-2016-0009

2016-03-30 Stelios Tsampas dos

ATutor 2.2.1 – Directory Traversal / Remote Code Execution (Metasploit)

##

2016-03-30 Metasploit remote

Google Android 5.0.1 – Metaphor Stagefright (ASLR Bypass)

Source: https://github.com/NorthBit/Metaphor

2016-03-30 NorthBit remote

Adobe Flash – Object.unwatch Use-After-Free

Sources:

2016-03-29 Google Security Research remote

Liferay Portal 5.1.2 – Persistent Cross-Site Scripting

#Exploit Title: Liferay Portal 5.1.2 - Persistent XSS

2016-03-28 Sarim Kiani webapps

TallSoft SNMP/TFTP Server 1.0.0 – Denial of Service

# Exploit Title: TallSoft SNMP TFTP Server 1.0.0 - DoS

2016-03-28 Charley Celice dos

FireEye – Malware Input Processor Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=670

2016-03-28 Google Security Research local

Android One – mt_wifi IOCTL_GET_STRUCT Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=678

2016-03-28 Google Security Research dos

Cogent Datahub 7.3.9 Gamma Script – Local Privilege Escalation

# Exploit Title: Cogent Datahub

2016-03-28 mr_me local

WordPress Plugin IMDb Profile Widget 1.0.8 – Local File Inclusion

# Exploit Title: Wordpress Plugin IMDb Profile Widget - Local File Inclusion

2016-03-27 CrashBandicot webapps

Trend Micro Deep Discovery Inspector 3.8/3.7 – Cross-Site Request Forgery

[+] Credits: John Page aka hyp3rlinx

2016-03-27 hyp3rlinx webapps

WordPress Plugin Photocart Link 1.6 – Local File Inclusion

# Exploit Title: Wordpress Plugin Photocart Link - Local File Inclusion

2016-03-27 CrashBandicot webapps

Apple Mac OSX / iOS – SUID Binary Logic Error Kernel Code Execution

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=676

2016-03-23 Google Security Research local

Multiple CCTV-DVR Vendors – Remote Code Execution

#!/usr/bin/python

2016-03-23 K1P0D remote

MiCollab 7.0 – SQL Injection

================

2016-03-23 Goran Tuzovic webapps

Comodo AntiVirus – Forwards Emulated API Calls to the Real API During Scans

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=769

2016-03-23 Google Security Research remote