Siemens Simatic S7 1200 – CPU Command Module (Metasploit)
# Exploit Title: Simatic S7 1200 CPU command module
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 237
ECommerceMajor – ‘productdtl.php?prodid’ SQL Injection
#Exploit Title : ECommerceMajor SQL Injection Vulnerability
WordPress Plugin Admin Management Xtended 2.4.0 – Privilege escalation
# Exploit Title: Admin Management Xtended 2.4.0 Privilege escalation
Microsoft Office / COM Object – DLL Planting with ‘comsvcs.dll’ Delay Load of ‘mqrt.dll’ (MS15-132)
Source: https://code.google.com/p/google-security-research/issues/detail?id=556
Adobe Flash – Type Confusion in IExternalizable.readExternal When Performing Local Serialization
Source: https://code.google.com/p/google-security-research/issues/detail?id=548
Adobe Flash – Type Confusion in Serialization with ObjectEncoder.dynamicPropertyWriter
Source: https://code.google.com/p/google-security-research/issues/detail?id=545
Polycom VVX-Series Business Media Phones – Directory Traversal
Polycom VVX-Series Business Media Phones Path Traversal Vulnerability
Bitrix bitrix.mpbuilder Module 1.0.10 – Local File Inclusion
Advisory ID: HTB23281
Bitrix bitrix.xscan Module 1.0.3 – Directory Traversal
Advisory ID: HTB23278
GoAutoDial CE 3.3 – Multiple SQL Injections / Command Injection
# Title : GoAutoDial CE 3.3 Multiple SQL injections, Command Injection
iy10 Dizin Scripti – Multiple Vulnerabilities
.__ _____ _______
Gökhan Balbal Script 2.0 – Cross-Site Request Forgery
.__ _____ _______
Skybox Platform < 7.0.611 - Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20151210-0 >
Rar – CmdExtract::UnstoreFile Integer Truncation Memory Corruption
Source: https://code.google.com/p/google-security-research/issues/detail?id=550
Avast! – Out-of-Bounds Write Decrypting PEncrypt Packed executables
Source: https://code.google.com/p/google-security-research/issues/detail?id=554
Avast! – JetDb::Ised4x Performs Unbounded Search on Input
Source: https://code.google.com/p/google-security-research/issues/detail?id=551
Avast! – Heap Overflow Unpacking MoleBox Archives
Source: https://code.google.com/p/google-security-research/issues/detail?id=552
Avast! – Integer Overflow Verifying numFonts in TTC Header
Source: https://code.google.com/p/google-security-research/issues/detail?id=549
Microsoft Windows Media Center Library – Parsing Remote Code Execution aka ‘self-executing’ MCL File
Title: Microsoft Windows Media Center Library Parsing RCE Vuln aka "self-executing" MCL file (CVE-2015-6131)
Microsoft Windows Media Center – ‘.Link’ File Incorrectly Resolved Reference (MS15-134)
1. Advisory Information
WIMAX LX350P(WIXFMR-108) – Multiple Vulnerabilities
### Exploit Title: WIMAX LX350P(WIXFMR-108) - Multiple Vulnerabilities
WIMAX MT711x – Multiple Vulnerabilities
### Exploit Title: WIMAX MT711x - Multiple Vulnerabilities
WordPress Plugin WP Easy Poll 1.1.3 – Cross-Site Scripting / Cross-Site Request Forgery
Exploit Title: WP Easy Poll 1.1.3 XSS and CSRF
Microsoft Internet Explorer 11.0.9600.18097 – COmWindowProxy::SwitchMarkup NULL PTR
IE11 11.0.9600.18097 NULL PTR
Apple Mac OSX 10.11 – FTS Deep Structure of the FileSystem Buffer Overflow
MacOS X 10.11 FTS Deep structure of the file system Buffer Overflow
Microsoft Office / COM Object – ‘els.dll’ DLL Planting (MS15-134)
Source: https://code.google.com/p/google-security-research/issues/detail?id=514
SIMOGEO FileManager 2.3.0 – Multiple Vulnerabilities
# Exploit Title: SIMOGEO FileManager 2.3.0 - Path Traversal Vulnerability
OpenMRS 2.3 (1.11.4) – XML External Entity Processing
#!/usr/bin/env python
OpenMRS 2.3 (1.11.4) – Expression Language Injection
OpenMRS 2.3 (1.11.4) Expression Language Injection Vulnerability
OpenMRS 2.3 (1.11.4) – Multiple Cross-Site Scripting Vulnerabilities
OpenMRS 2.3 (1.11.4) Multiple Cross-Site Scripting Vulnerabilities
OpenMRS 2.3 (1.11.4) – Local File Disclosure
OpenMRS 2.3 (1.11.4) Local File Disclosure Vulnerability
PHP Utility Belt – Remote Code Execution
Exploit Title : PHP utility belt Remote Code Execution vulnerability
WordPress Plugin Polls Widget 1.0.7 – SQL Injection
Exploit Title : wordpress poll widget version 1.0.7 SQL Injection vulnerability
iniNet SpiderControl SCADA Web Server Service 2.02 – Insecure File Permissions
iniNet SpiderControl SCADA Web Server Service 2.02 Insecure File Permissions
iniNet SpiderControl PLC Editor Simatic 6.30.04 – Insecure File Permissions
iniNet SpiderControl PLC Editor Simatic 6.30.04 Insecure File Permissions
dotCMS 3.2.4 – Multiple Vulnerabilities
dotCMS 3.2.4 Multiple Vulnerabilities
Cyclope Employee Surveillance 8.6.1 – Insecure File Permissions
# Author: loneferret of Offensive Security
WinAsm Studio 5.1.8.8 – Buffer Overflow Crash (PoC)
# Exploit: WinAsm Studio 5.1.8.8 BOF.
WordPress Plugin Advanced uploader 2.10 – Multiple Vulnerabilities
###########################################
WordPress Plugin Sell Download 1.0.16 – Local File Disclosure
###########################################
WordPress Plugin TheCartPress 1.4.7 – Multiple Vulnerabilities
###########################################
Gnome Nautilus 3.16 – Denial of Service
Description