Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 235

MediaAccess TG788vn – File Disclosure

Vulnerable hardware : MediaAccess TG788vn with Cisco http firewall

2016-01-06 0x4148 webapps

Linux Kernel 4.3.3 (Ubuntu 14.04/15.10) – ‘overlayfs’ Local Privilege Escalation (1)

just another overlayfs exploit, works on kernels before 2015-12-26

2016-01-05 rebel local

Online Airline Booking System – Multiple Vulnerabilities

Exploit Title : Online Airline Booking System multiple vulnerabilities

2016-01-05 Manish Tanwar webapps

Simple PHP Polling System – Multiple Vulnerabilities

Exploit Title : Multiple Vulnerabilities in Simple PHP Polling System.

2016-01-05 WICS webapps

Ganeti – Multiple Vulnerabilities

=begin

2016-01-05 Pierre Kim dos

Atlassian Confluence 5.2/5.8.14/5.8.15 – Multiple Vulnerabilities

[Systems Affected]

2016-01-05 Sebastian Perez webapps

PHPIPAM 1.1.010 – Multiple Vulnerabilities

######################################################################

2016-01-05 Mickael Dorigny webapps

FTPShell Client 5.24 – ‘Add to Favorites’ Buffer Overflow

# Exploit Title: FTPShell Client 5.24 - Add to Favorites Buffer Overflow

2016-01-04 INSECT.B local

Rejetto HTTP File Server (HFS) 2.3.x – Remote Command Execution (2)

#!/usr/bin/python

2016-01-04 Avinash Thapa remote

pdfium – CPDF_DIBSource::DownSampleScanline32Bit Heap Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=625

2016-01-04 Google Security Research dos

pdfium – CPDF_TextObject::CalcPositionData Heap Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=623

2016-01-04 Google Security Research dos

pdfium IsFlagSet (v8 memory management) – SIGSEGV

Source: https://code.google.com/p/google-security-research/issues/detail?id=622

2016-01-04 Google Security Research dos

pdfium – CPDF_Function::Call Stack Buffer Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=612

2016-01-04 Google Security Research dos

Advanced Encryption Package – Buffer Overflow (Denial of Service) (PoC)

Dear List,

2016-01-03 Vishnu dos

Open Audit – SQL Injection

#Exploit Title : Open Audit SQL Injection Vulnerability

2016-01-02 Rahul Pratap Singh webapps

Microsoft Internet Explorer 11.0.9600.18124 EdUtil::GetCommonAncestorElement – Denial of Service

EdUtil::GetCommonAncestorElement Remote Crash

2015-12-31 Marcin Ressel dos

FTPShell Client 5.24 – Local Buffer Overflow

'''

2015-12-30 hyp3rlinx local

WordPress Plugin Simple Ads Manager 2.9.4.116 – SQL Injection

# Exploit Title: Simple Ads Manager 2.9.4.116 SQL Injection

2015-12-30 Kacper Szurek webapps

DeleGate 9.9.13 – Local Privilege Escalation

Title: Local root vulnerability in DeleGate v9.9.13

2015-12-30 Larry W. Cashdollar local

KiTTY Portable 0.65.0.2p (Windows XP/7/10) – Chat Remote Buffer Overflow (SEH)

# Exploit Title: KiTTY Portable (slice_size - 1):

2015-12-29 Guillaume Kaddouch remote

KiTTY Portable 0.65.1.1p – Local Saved Session Overflow (Egghunter XP / Denial of Service 7/8.1/10)

# Exploit Title: KiTTY Portable

2015-12-29 Guillaume Kaddouch local

KiTTY Portable 0.65.0.2p (Windows 7) – Local kitty.ini Overflow (Wow64 Egghunter)

# Exploit Title: KiTTY Portable

2015-12-29 Guillaume Kaddouch local

KiTTY Portable 0.65.0.2p (Windows 8.1/10) – Local kitty.ini Overflow

# Exploit Title: KiTTY Portable

2015-12-29 Guillaume Kaddouch local

EasyCafe Server 2.2.14 – Remote File Read

#!/usr/bin/python -w

2015-12-26 R-73eN remote

AccessDiver 4.301 – Buffer Overflow

[+] Credits: hyp3rlinx

2015-12-26 hyp3rlinx dos

Beezfud – Remote Code Execution

================================================================================

2015-12-24 Ashiyane Digital Security Team webapps

Rips Scanner 0.5 – ‘code.php’ Local File Inclusion

================================================================================

2015-12-24 Ashiyane Digital Security Team webapps

PHP 7.0.0 – Format String

Overview

2015-12-23 Andrew Kramer dos

Bigware Shop 2.3.01 – Multiple Local File Inclusions

# Title: Bigware Shop 2.3.01 Multiple Local File Inclusion Vulnerabilities

2015-12-23 bd0rk webapps

Grawlix 1.0.3 – Cross-Site Request Forgery

Security Advisory - Curesec Research Team

2015-12-23 Curesec Research Team webapps

Arastta 1.1.5 – SQL Injection

Security Advisory - Curesec Research Team

2015-12-23 Curesec Research Team webapps

PhpSocial 2.0.0304_20222226 – Cross-Site Request Forgery

Security Advisory - Curesec Research Team

2015-12-23 Curesec Research Team webapps

Wireshark – ‘infer_pkt_encap’ Heap Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=658

2015-12-22 Google Security Research dos

Wireshark – ‘AirPDcapDecryptWPABroadcastKey’ Heap Out-of-Bounds Read (1)

Source: https://code.google.com/p/google-security-research/issues/detail?id=657

2015-12-22 Google Security Research dos

Notepad++ NPPFtp Plugin 0.26.3 – Buffer Overflow

# Title : Notepad ++ NPPFtp Plugin Buffer Overflow

2015-12-21 R-73eN dos

Ovidentia online Module 2.8 – ‘GLOBALS[babAddonPhpPath]’ Remote File Inclusion

# Title: Ovidentia Module online 2.8 GLOBALS[babAddonPhpPath] Remote File Include Vulnerability

2015-12-21 bd0rk webapps

Ovidentia Widgets 1.0.61 – Remote Command Execution

# Title: Ovidentia Widgets 1.0.61 Remote Command Execution Exploit

2015-12-21 bd0rk webapps

Base64 Decoder 1.1.2 – Overwrite (SEH) (PoC)

# Exploit: b64dec SEH OverWrite.

2015-12-21 Un_N0n dos

Adobe Flash Sound.setTransform – Use-After-Free

Source: https://code.google.com/p/google-security-research/issues/detail?id=568

2015-12-21 Google Security Research dos

Joomla! 1.5 < 3.4.6 - Object Injection 'x-forwarded-for' Header Remote Code Execution

#!/usr/bin/env python

2015-12-18 Andrew McNicol webapps

Ovidentia maillist Module 4.0 – Remote File Inclusion

Not for kiddies!

2015-12-18 bd0rk webapps

Microsoft Windows 8.1 – ‘win32k’ Local Privilege Escalation (MS15-010)

# Exploit Title: MS15-010/CVE-2015-0057 win32k Local Privilege Escalation

2015-12-18 Jean-Jamil Khalife local

Apache 2.4.17 – Denial of Service

# Exploit Title: Apache 2.4.17 - Denial of Service

2015-12-18 rUnViRuS dos

pfSense 2.2.5 – Directory Traversal

# Title : PFSense

2015-12-18 R-73eN webapps