Network Scanner 4.0.0.0 – Crash (SEH) (PoC)
#-*- coding: utf-8 -*-
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 232
Tiny Tiny RSS – Blind SQL Injection
# Exploit Title: Tiny Tiny RSS Blind SQL Injection
Flash ActiveX 28.0.0.137 – Code Execution (2)
## CVE-2018-4878
File Replication Pro 7.2.0 – Multiple Vulnerabilities
Vantage Point Security Advisory 2016-001
Microsoft Windows 7 SP1 (x86) – ‘WebDAV’ Local Privilege Escalation (MS16-016) (1)
source: https://github.com/koczkatamas/CVE-2016-0051
Deepin Linux 15 – ‘lastore-daemon’ Local Privilege Escalation
#!/usr/bin/env python
Yeager CMS 1.2.1 – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20160210-0 >
Wieland wieplan 4.1 – Document Parsing Java Code Execution Using XMLDecoder
Wieland wieplan 4.1 Document Parsing Java Code Execution Using XMLDecoder
PotPlayer 1.6.5x – ‘.mp3’ Crash (PoC)
# Exploit Title: POTPLAYER 1.6.5x MP3 CRASH POC
Adobe Photoshop CC / Bridge CC – ‘.png’ Parsing Memory Corruption (1)
#####################################################################################
Adobe Photoshop CC / Bridge CC – ‘.png’ Parsing Memory Corruption (2)
#####################################################################################
Adobe Photoshop CC / Bridge CC – ‘.iff’ Parsing Memory Corruption
#####################################################################################
Solr 3.5.0 – Arbitrary Data Deletion
# Exploit Title: All Solr Data Can Be Delete
dotDefender Firewall 5.00.12865/5.13-13282 – Cross-Site Request Forgery
[+] Credits: hyp3rlinx
WordPress Plugin Booking Calendar Contact Form 1.0.23 – Multiple Vulnerabilities
# Exploit Title: Wordpress booking calendar contact form '',
Samsung Galaxy S6 – libQjpeg je_free Crash
Source: https://code.google.com/p/google-security-research/issues/detail?id=617
Samsung Galaxy S6 – ‘android.media.process’ ‘MdConvertLine’ Face Recognition Memory Corruption
Source: https://code.google.com/p/google-security-research/issues/detail?id=616
Adobe Flash – Processing AVC Causes Stack Corruption
Source: https://code.google.com/p/google-security-research/issues/detail?id=634
GE Industrial Solutions UPS SNMP Adapter < 4.8 - Multiple Vulnerabilities
# Exploit Title: [GE Industrial Solutions - UPS SNMP Adapter Command
D-Link DVGN5402SP – Multiple Vulnerabilities
# Exploit Title: [DLink DVGN5402SP Multiple Vulnerabilities]
Netgear NMS300 ProSafe Network Management System – Multiple Vulnerabilities
>> Remote code execution / arbitrary file download in NETGEAR ProSafe Network Management System NMS300
UliCMS v9.8.1 – SQL Injection
=============================================
OpenDocMan 1.3.4 – Cross-Site Request Forgery
Security Advisory - Curesec Research Team
ATutor 2.2 – Multiple Cross-Site Scripting Vulnerabilities
Security Advisory - Curesec Research Team
Symphony CMS 2.6.3 – Multiple SQL Injections
================================================================
FTPShell Client 5.24 – ‘Create NewFolder’ Local Buffer Overflow
#[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+]
Baumer VeriSens Application Suite 2.6.2 – Buffer Overflow (PoC)
#!/usr/bin/env python
TimeClock Software 0.995 – (Authenticated ) Multiple SQL Injections
#############################
yTree 1.94-1.1 – Local Buffer Overflow (PoC)
# Exploit Author: Juan Sacco - http://www.exploitpack.com -jsacco@exploitpack.com
Viprinet Multichannel VPN Router 300 – Persistent Cross-Site Scripting
Vulnerability title: Multiple Instances Of Cross-site Scripting In Viprinet Multichannel VPN Router 300
Manage Engine Network Configuration Manager Build 11000 – Cross-Site Request Forgery
=========================================================================================
Toshiba Viewer v2 p3console – Local Denial of Service
#!/usr/bin/perl
pdfium – opj_t2_read_packet_header ‘libopenjpeg’ Heap Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=613
eClinicalWorks (CCMR) – Multiple Vulnerabilities
# Title: eClinicalWorks (CCMR) - Multiple Vulnerabilities
iScripts EasyCreate 3.0 – Multiple Vulnerabilities
iScripts EasyCreate 3.0 Multiple Vulnerabilities
iScripts EasyCreate 3.0 – Remote Code Execution
#!C:/Python27/python.exe -u
Hippo CMS 10.1 – Multiple Vulnerabilities
Hippo CMS 10.1 XML External Entity Information Disclosure Vulnerability
Autonics DAQMaster 1.7.3 – DQP Parsing Buffer Overflow Code Execution (PoC)
Autonics DAQMaster 1.7.3 DQP Parsing Buffer Overflow Code Execution
ManageEngine EventLog Analyzer 4.0 < 10 - Privilege Escalation
-----BEGIN PGP SIGNED MESSAGE-----
WPS Office < 2016 - '.ppt' Heap Memory Corruption
#####################################################################################
WPS Office < 2016 - '.doc' OneTableDocumentStream Memory Corruption
#####################################################################################
WPS Office < 2016 - '.ppt' drawingContainer Memory Corruption
#####################################################################################