Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 231

libquicktime 1.2.4 – Integer Overflow

#!/usr/bin/env python

2016-02-23 Marco Romano dos

Ubiquiti Networks UniFi 3.2.10 – Cross-Site Request Forgery

RCE Security Advisory

2016-02-23 Julien Ahrens webapps

InstantCoder 1.0 iOS – Multiple Vulnerabilities

Document Title:

2016-02-22 Vulnerability-Lab webapps

Core FTP Server 1.2 – Local Buffer Overflow

#-*- coding: utf-8 -*-

2016-02-22 INSECT.B local

BlackBerry Enterprise Service < 12.4 (BES12) Self-Service - Multiple Vulnerabilities

( , ) (,

2016-02-22 Security-Assessment.com webapps

Wireshark – dissect_oml_attrs Static Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=656

2016-02-22 Google Security Research dos

Wireshark – add_ff_vht_compressed_beamforming_report Static Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=654

2016-02-22 Google Security Research dos

Wireshark – dissect_ber_set Static Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=648

2016-02-22 Google Security Research dos

Thru Managed File Transfer Portal 9.0.2 – SQL Injection

-----BEGIN PGP SIGNED MESSAGE-----

2016-02-22 SySS GmbH webapps

Ubuntu < 15.10 - PT Chown Arbitrary PTs Access Via User Namespace Privilege Escalation

Source: http://www.halfdog.net/Security/2015/PtChownArbitraryPtsAccessViaUserNamespace/

2016-02-22 halfdog local

Linux Kernel 3.x (Ubuntu 14.04 / Mint 17.3 / Fedora 22) – Double-free usb-midi SMEP Privilege Escalation

Source: https://xairy.github.io/blog/2016/cve-2016-2384

2016-02-22 Andrey Konovalov local

PEAR LiveUser < 0.16.8 - Arbitrary File Access

PEAR LiveUser Arbitrary File Access

2016-02-21 GulfTech Security webapps

SOLIDserver < 5.0.4 - Local File Inclusion

Title: SOLIDserver

2016-02-20 Saeed reza Zamanian webapps

XM Easy Personal FTP Server 5.8.0 – ‘HELP’ Remote Denial of Service

#!/usr/bin/python

2016-02-19 Pawan Lal dos

STIMS Buffer 1.1.20 – Buffer Overflow (PoC) (SEH Overwrite)

# Exploit Title: STIMS BUFFER OVERFLOW SEH OVERWRITE

2016-02-19 Shantanu Khandelwal dos

STIMS Cutter 1.1.3.20 – Buffer Overflow (Denial of Service) (PoC)

# Exploit Title: STIMS CUTTER OVERFLOW SEH OVERWRITE

2016-02-19 Shantanu Khandelwal dos

Chamilo LMS IDOR – ‘messageId’ Delete POST Injection

Document Title:

2016-02-19 Vulnerability-Lab webapps

Chamilo LMS – Persistent Cross-Site Scripting

Document Title:

2016-02-19 Vulnerability-Lab webapps

QuickHeal 16.00 – ‘webssx.sys’ Driver Denial of Service

# Exploit Title: QuickHeal webssx.sys driver DOS vulnerability

2016-02-19 Fitzl Csaba dos

Adobe Flash – SimpleButton Creation Type Confusion

Source: https://code.google.com/p/google-security-research/issues/detail?id=640

2016-02-19 Google Security Research dos

ManageEngine Firewall Analyzer 8.5 – Multiple Vulnerabilities

================================================================

2016-02-19 Sachin Wagh webapps

AUFS (Ubuntu 15.10) – ‘allow_userns’ Fuse/Xattr User Namespaces Privilege Escalation

Source: http://www.halfdog.net/Security/2016/AufsPrivilegeEscalationInUserNamespaces/

2016-02-19 halfdog local

Geeklog < 1.4.0 - Multiple Vulnerabilities

Geeklog Multiple Vulnerabilities

2016-02-19 GulfTech Security webapps

Vesta Control Panel 0.9.8-15 – Persistent Cross-Site Scripting

# Exploit Title :Vesta Control Panel

2016-02-18 Necmettin COSKUN webapps

DirectAdmin 1.491 – Cross-Site Request Forgery

=============================================================================

2016-02-18 Necmettin COSKUN webapps

ADOdb < 4.71 - Cross Site Scripting

ADOdb Cross Site Scripting

2016-02-18 GulfTech Security webapps

Inductive Automation Ignition 7.8.1 – Remote Leakage Of Shared Buffers

Inductive Automation Ignition 7.8.1 Remote Leakage Of Shared Buffers

2016-02-17 LiquidWorm remote

JMX2 Email Tester – ‘save_email.php’ Arbitrary File Upload

# Exploit Title: JMX2 Email Tester - Web Shell Upload(save_email.php)

2016-02-17 HaHwul webapps

OCS Inventory NG 2.2 – SQL Injection

# Exploit Title: OCS Inventory NG

2016-02-17 Ephreet webapps

Redaxo 5.0.0 – Multiple Vulnerabilities

=== LSE Leading Security Experts GmbH - Security Advisory 2016-01-18 ===

2016-02-17 LSE Leading Security Experts GmbH webapps