Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 230

Linux Kernel 3.10.0 (CentOS / RHEL 7.1) – ‘cypress_m8’ Nullpointer Dereference

OS-S Security Advisory 2016-07

2016-03-09 OpenSource Security dos

Linux Kernel 3.10.0 (CentOS / RHEL 7.1) – ‘cdc_acm’ Nullpointer Dereference

OS-S Security Advisory 2016-06

2016-03-09 OpenSource Security dos

Linux Kernel 3.10.0 (CentOS / RHEL 7.1) – ‘aiptek’ Nullpointer Dereference

OS-S Security Advisory 2016-05

2016-03-09 OpenSource Security dos

Linux Kernel 3.10/3.18 /4.4 – Netfilter IPT_SO_SET_REPLACE Memory Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=758

2016-03-09 Google Security Research dos

ATutor LMS – ‘/install_modules.php’ Cross-Site Request Forgery / Remote Code Execution

ATutor LMS

2016-03-07 mr_me webapps

Microsoft Windows 7 (x64) – ‘afd.sys’ Dangling Pointer Privilege Escalation (MS14-040)

# Exploit Title: MS14-040 - AFD.SYS Dangling Pointer

2016-03-07 Rick Larabee local

Cerberus Helpdesk (Cerb5) 5 < 6.7 - Password Hash Disclosure

#!/bin/bash

2016-03-07 asdizzle_ webapps

Wireshark – wtap_optionblock_free Use-After-Free

Source: https://code.google.com/p/google-security-research/issues/detail?id=739

2016-03-07 Google Security Research dos

Avast! – Authenticode Parsing Memory Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=668

2016-03-07 Google Security Research dos

McAfee VirusScan Enterprise 8.8 – Security Restrictions Bypass

Security Advisory @ Mediaservice.net Srl

2016-03-07 Maurizio Agazzini local

PHPLib < 7.4 - SQL Injection

PHPLib SQL Injection

2016-03-05 GulfTech Security webapps

WordPress Plugin Bulk Delete 5.5.3 – Privilege Escalation

'''

2016-03-03 Panagiotis Vagenas webapps

Schneider Electric SBO / AS – Multiple Vulnerabilities

# Discovered by: Karn Ganeshen

2016-03-03 Karn Ganeshen remote

AppLocker – Execution Prevention Bypass (Metasploit)

##

2016-03-03 Metasploit local

DropBearSSHD 2015.71 – Command Injection

VuNote

2016-03-03 tintinweb remote

Quick Tftp Server Pro 2.3 – Read Mode Denial of Service

# Exploit Title: Quick Tftp Server Pro 2.3 TFTP mode Remote Overflow (DoS)

2016-03-02 Guillaume Kaddouch dos

FreeProxy Internet Suite 4.10 – Denial of Service

# Exploit Title: Freeproxy Internet Suite 4.10 Remote DoS

2016-03-02 Guillaume Kaddouch dos

PictureTrails Photo Editor GE.exe 2.0.0 – ‘.bmp’ Crash (PoC)

# Exploit Title: PictureTrail Photo Editor GE.exe 2.00 - ./bmp Crash PoC

2016-03-02 redknight99 dos

Secret Net 7 and Secret Net Studio 8 – Local Privilege Escalation

Source: https://github.com/Cr4sh/secretnet_expl

2016-03-02 Cr4sh local

Gallery 2 < 2.0.2 - Multiple Vulnerabilities

Gallery 2 Multiple Vulnerabilities

2016-03-02 GulfTech Security webapps

Crouzet em4 soft 1.1.04 – ‘.pm4’ Integer Division By Zero

Crouzet em4 soft 1.1.04 Integer Division By Zero

2016-03-01 LiquidWorm dos

Crouzet em4 soft 1.1.04 / M3 soft 3.1.2.0 – Insecure File Permissions

Crouzet em4 soft 1.1.04 and M3 soft 3.1.2.0 Insecure File Permissions

2016-03-01 LiquidWorm local

Viscomsoft Calendar Active-X 2.0 – Multiple Crashes (PoC)

# Exploit Title: Viscomsoft Calendar Active-X 2.0 - Multiple Crash PoCs

2016-03-01 Shantanu Khandelwal dos

WordPress Plugin CP Polls 1.0.8 – Multiple Vulnerabilities

# Exploit Title: WordPress CP Polls 1.0.8 - CSRF - Update poll settings & Persistent XSS

2016-03-01 i0akiN SEC-LABORATORY webapps

ATutor 2.2.1 – SQL Injection / Remote Code Execution (Metasploit)

##

2016-03-01 Metasploit remote

Netgear NMS300 ProSafe Network Management System – Arbitrary File Upload (Metasploit)

##

2016-03-01 Metasploit remote

WordPress Plugin More Fields 2.1 – Cross-Site Request Forgery

# Exploit Title: Wordpress More Fields Plugin 2.1 Cross-Site Request Forgery

2016-02-29 Aatif Shahdad webapps

Comodo Anti-Virus – ‘SHFolder.dll’ Local Privilege Escalation

2016-02-29 Laughing_Mantis local

Infor CRM 8.2.0.1136 – Multiple HTML Script Injection Vulnerabilities

Infor CRM 8.2.0.1136 Multiple HTML Script Injection Vulnerabilities

2016-02-26 LiquidWorm webapps

WordPress Plugin Ocim MP3 – SQL Injection

========

2016-02-26 xevil & Blankon33 webapps

Proxmox VE 3/4 – Insecure Hostname Checking Remote Command Execution

=====================================================================

2016-02-26 Sysdream remote

Zimbra 8.0.9 GA – Cross-Site Request Forgery

======================================

2016-02-26 Sysdream webapps

Centreon 2.5.3 – Remote Command Execution

Unauthenticated Remote Command Execution in Centreon Web Interface

2016-02-26 Sysdream webapps

GpicView 0.2.5 – Crash (PoC)

#!/usr/bin/python

2016-02-26 David Silveiro dos

Wireshark – print_hex_data_buffer / print_packet Use-After-Free

Source: https://code.google.com/p/google-security-research/issues/detail?id=651

2016-02-26 Google Security Research dos

Qualcomm Adreno GPU MSM Driver – perfcounter Query Heap Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=734

2016-02-26 Google Security Research dos

Linux Kernel – io_submit L2TP sendmsg Integer Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=735

2016-02-26 Google Security Research dos

Joomla! Component com_poweradmin 2.3.0 – Multiple Vulnerabilities

---------------------------------------------------------

2016-02-26 RatioSec Research webapps

Microsoft Windows – ‘NetAPI32.dll’ Code Execution (Python) (MS08-067)

import struct

2016-02-26 ohnozzy remote

Microsoft Windows – ‘srv2.sys’ SMB Code Execution (Python) (MS09-050)

# EDB-Note: Source ~ https://raw.githubusercontent.com/ohnozzy/Exploit/master/MS09_050.py

2016-02-26 ohnozzy remote

phpRPC < 0.7 - Remote Code Execution

phpRPC Remote Code Execution

2016-02-26 GulfTech Security webapps

IBM Lotus Domino R8 – Password Hash Extraction

# Exploit Title: IBM Lotus Domino

2016-02-25 Jonathan Broche webapps

WordPress Plugin Extra User Details 0.4.2 – Privilege Escalation

"""

2016-02-24 Panagiotis Vagenas webapps