Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 229
WordPress Plugin eBook Download 1.1 – Directory Traversal
# Exploit Title: Wordpress eBook Download 1.1 | Directory Traversal
WordPress Plugin Import CSV 1.0 – Directory Traversal
# Exploit Title: Wordpress Import CSV | Directory Traversal
WordPress Plugin Abtest – Local File Inclusion
# Exploit Title: Wordpress Plugin Abtest - Local File Inclusion
Internet Download Manager 6.25 Build 14 – ‘Find file’ Unicode (SEH)
#!/usr/bin/python
Disc ORGanizer (DORG) – Multiple Vulnerabilities
Exploit Title: DORG - Disc Organization System SQL Injection And Cross Site Scripting
D-Link DWR-932 Firmware 4.00 – Authentication Bypass
D-Link DWR-932 Firmware
XOOPS 2.5.7.2 – Directory Traversal Bypass
[+] Credits: John Page aka hyp3rlinx
WordPress Plugin Image Export 1.1.0 – Arbitrary File Disclosure
# Exploit Title: Wordpress image-export LFD
Sysax Multi Server 6.50 – HTTP File Share Overflow Remote Code Execution (SEH)
# Exploit Title: Sysax Multi Server 6.50 HTTP File Share SEH Overflow RCE Exploit
Dating Pro Genie 2015.7 – Cross-Site Request Forgery
Advisory ID: HTB23294
iTop 2.2.1 – Cross-Site Request Forgery
Advisory ID: HTB23293
Wildfly – ‘WEB-INF’ / ‘META-INF’ Information Disclosure via Filter Restriction Bypass
Exploit Title: Wildfly: WEB-INF and META-INF Information Disclosure via Filter Restriction Bypass
ZenPhoto 1.4.11 – Remote File Inclusion
Security Advisory - Curesec Research Team
PivotX 2.3.11 – Directory Traversal
Security Advisory - Curesec Research Team
AKIPS Network Monitor 15.37 through 16.5 – OS Command Injection
# Exploit Title: AKIPS Network Monitor 15.37-16.6 OS Command Injection
Netwrix Auditor 7.1.322.0 – ActiveX ‘sourceFile’ Stack Buffer Overflow
Netwrix Auditor 7.1.322.0 ActiveX (sourceFile) Stack Buffer Overflow Vulnerability
Monstra CMS 3.0.3 – Multiple Vulnerabilities
Exploit Title: Monstra CMS 3.0.3 - Privilege Escalation / Remote Password Change
Cisco UCS Manager 2.1(1b) – Remote Command Injection (Shellshock)
#!/usr/bin/python
FreeBSD 10.2 (x64) – ‘amd64_set_ldt’ Heap Overflow
1. Advisory Information
Linux Kernel 3.10.0-229.x (CentOS / RHEL 7.1) – ‘snd-usb-audio’ Crash (PoC)
OS-S Security Advisory 2016-17
Linux Kernel 3.10.0-229.x (CentOS / RHEL 7.1) – ‘iowarrior’ Driver Crash (PoC)
OS-S Security Advisory 2016-15
Zortam Mp3 Media Studio 20.15 – Overflow (PoC) (SEH)
#-*- coding: utf-8 -*-
WordPress Plugin Site Import 1.0.1 – Local/Remote File Inclusion
# Exploit Title: Wordpress Site Import 1.0.1 | Local and Remote file inclusion
TeamPass 2.1.24 – Multiple Vulnerabilities
Affected Product: TeamPass
Microsoft Windows Kernel – ‘ATMFD.dll’ OTF Font Processing Pool-Based Buffer Overflow (MS16-026)
Source: https://code.google.com/p/google-security-research/issues/detail?id=683
Microsoft Windows Kernel – ‘ATMFD.dll’ OTF Font Processing Stack Corruption (MS16-026)
Source: https://code.google.com/p/google-security-research/issues/detail?id=682
WordPress Plugin DZS Videogallery < 8.60 - Multiple Vulnerabilities
* Exploit Title: Wordpress DZS Videogallery Plugin - Multiple Vulnerabilities
Nitro Pro 10.5.7.32 / Nitro Reader 5.5.3.1 – Heap Memory Corruption
#####################################################################################
Exim < 4.86.2 - Local Privilege Escalation
=============================================
Putty pscp 0.66 – Stack Buffer Overwrite
Source: https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-2563
Adobe Digital Editions 4.5.0 – ‘.pdf’ Critical Memory Corruption
########################################################################################
Exim 4.84-3 – Local Privilege Escalation
#!/bin/sh
WordPress Theme SiteMile Project 2.0.9.5 – Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE-----
Linux Kernel 3.10.0 (CentOS / RHEL 7.1) – ‘digi_acceleport’ Nullpointer Dereference
OS-S Security Advisory 2016-12
Linux Kernel 3.10.0 (CentOS / RHEL 7.1) – ‘Wacom’ Multiple Nullpointer Dereferences
OS-S Security Advisory 2016-11
Linux Kernel 3.10.0 (CentOS / RHEL 7.1) – visor ‘treo_attach’ Nullpointer Dereference
OS-S Security Advisory 2016-10
Linux Kernel 3.10.0 (CentOS / RHEL 7.1) – visor clie_5_attach Nullpointer Dereference
OS-S Security Advisory 2016-09
Linux Kernel 3.10.0 (CentOS / RHEL 7.1) – ‘mct_u232’ Nullpointer Dereference
OS-S Security Advisory 2016-08