Foxit Reader 7.2.8.1124 – ‘.PDF’ Parsing Memory Corruption
#####################################################################################
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 234
FreeBSD SCTP ICMPv6 – Error Processing
#!/usr/bin/env python
WordPress Plugin Booking Calendar Contact Form 1.1.23 – SQL Injection
# Exploit Title: WordPress appointment-booking-calendar get_results( "SELECT * FROM ".CPABC_TDEAPP_CALENDAR_DATA_TABL...
Microsoft Windows – Sandboxed Mount Reparse Point Creation Mitigation Bypass Redux (MS16-008) (2)
Source: https://code.google.com/p/google-security-research/issues/detail?id=589
Microsoft Windows – Sandboxed Mount Reparse Point Creation Mitigation Bypass Redux (MS16-008) (1)
Source: https://code.google.com/p/google-security-research/issues/detail?id=573
Oracle – ‘HtmlConverter.exe’ Local Buffer Overflow
[+] Credits: hyp3rlinx
xWPE 1.5.30a-2.1 – Local Buffer Overflow
# Exploit Author: Juan Sacco - http://www.exploitpack.com <
NTP – Local Privilege Escalation
Source: http://www.halfdog.net/Security/2015/NtpCronjobUserNtpToRootPrivilegeEscalation/
CesarFTP 0.99g – XCWD Denial of Service
#!/usr/bin/env python
PDF-XChange Viewer 2.5.315.0 – Shading Type 7 Heap Memory Corruption
########################################################################################
Linux Kernel 4.4.1 – REFCOUNT Overflow Use-After-Free in Keyrings Local Privilege Escalation (1)
# Exploit Title: Linux kernel REFCOUNT overflow/Use-After-Free in keyrings
Linux Kernel 4.4.1 – REFCOUNT Overflow Use-After-Free in Keyrings Local Privilege Escalation (2)
# Exploit Title: Linux kernel REFCOUNT overflow/Use-After-Free in keyrings
WEG SuperDrive G2 12.0.0 – Insecure File Permissions
WEG SuperDrive G2 v12.0.0 Insecure File Permissions
Advanced Electron Forum 1.0.9 – Cross-Site Request Forgery
[+] Credits: hyp3rlinx
Advanced Electron Forum 1.0.9 – Persistent Cross-Site Scripting
[+] Credits: hyp3rlinx
Advanced Electron Forum 1.0.9 – Remote File Inclusion / Cross-Site Request Forgery
[+] Credits: hyp3rlinx
SeaWell Networks Spectrum – Multiple Vulnerabilities
# Exploit Title: [SeaWell Networks Spectrum - Multiple Vulnerabilities]
GlassFish Server – Arbitrary File Read
# Title: glassfish Arbitrary file read vulnerability
NetSchedScan 1.0 – Crash (PoC)
#!/usr/bin/env python
phpDolphin 2.0.5 – Multiple Vulnerabilities
# Exploit Title: phpDolphin http://target.com/index.php?a=search&q=teste&filter=m">XSS
Amanda 3.3.1 – ‘amstar’ Command Injection Privilege Escalation
AMANDA, the Advanced Maryland Automatic Network Disk Archiver, is a backup
Roundcube Webmail 1.1.3 – Directory Traversal
Advisory ID: HTB23283
mcart.xls Bitrix Module 6.5.2 – SQL Injection
Advisory ID: HTB23279
SevOne NMS 5.3.6.0 – Remote Command Execution
#!/usr/bin/env python
Manage Engine Applications Manager 12 – Multiple Vulnerabilities
Manage Engine Applications Manager 12 Multiple Vulnerabilities
Manage Engine Application Manager 12.5 – Arbitrary Command Execution
#!C:/Python27/python.exe -u
Microsoft Windows – devenum.dll!DeviceMoniker::Load() Heap Corruption Buffer Underflow (MS16-007)
Source: https://code.google.com/p/google-security-research/issues/detail?id=594
Microsoft Office / COM Object – ‘WMALFXGFXDSP.dll’ DLL Planting (MS16-007)
Source: https://code.google.com/p/google-security-research/issues/detail?id=555
Apple watchOS 2 – Crash (PoC)
#[+] Title: Apple watchOS - Remote Crash Exploit
SNScan 1.05 – Scan Hostname/IP Field Buffer Overflow Crash (PoC)
#!/usr/bin/env python
FingerTec Fingerprint Reader – Remote Access and Remote Enrolment
# Exploit Title: Default Root Password and Remote Enrollment on FingerTec Devices
Grassroots DICOM (GDCM) 2.6.0 and 2.6.1 – ImageRegionReader::ReadIntoBuffer Buffer Overflow
Grassroots DICOM (GDCM) is a C++ library for processing DICOM medical
Linux Kernel 4.3.3 – ‘overlayfs’ Local Privilege Escalation (2)
#define _GNU_SOURCE
Konica Minolta FTP Utility 1.00 – CWD Command Overflow (SEH)
# Title: Konica Minolta FTP Utility 1.00 Post Auth CWD Command SEH Overflow.
KeePass Password Safe Classic 1.29 – Crash (PoC)
# Title : KeePass Password Safe Classic 1.29 - Crash Proof Of Concept
Amanda 3.3.1 – Local Privilege Escalation
AMANDA, the Advanced Maryland Automatic Network Disk Archiver, is a backup
Trend Micro – node.js HTTP Server Listening on localhost Can Execute Commands
Trend Micro Maximum Security 10 Exploit
Adobe Flash BlurFilter Processing – Out-of-Bounds Memset
Source: https://code.google.com/p/google-security-research/issues/detail?id=627
Adobe Flash (Multiple Scripts) – Use-After-Free When Rendering Displays (1)
Source: https://code.google.com/p/google-security-research/issues/detail?id=628
Adobe Flash – Use-After-Free When Setting Stage
Source: https://code.google.com/p/google-security-research/issues/detail?id=629
SedSystems D3 Decimator – Multiple Vulnerabilities
SedSystems D3 Decimator Multiple Vulnerabilities
Fortinet FortiGate 4.x < 5.0.7 - SSH Backdoor Access
#!/usr/bin/env python
WordPress Plugin WP Symposium Pro Social Network Plugin 15.12 – Multiple Vulnerabilities
#Product : WP Symposium Pro Social Network plugin
OpenMRS Reporting Module 0.9.7 – Remote Code Execution
Title: Unauthenticated remote code execution in OpenMRS
AVM FRITZ!Box < 6.30 - Remote Buffer Overflow
Advisory: AVM FRITZ!Box: Remote Code Execution via Buffer Overflow