TECO AP-PCLINK 1.094 – ‘.tpc’ File Handling Buffer Overflow (PoC)
# TECO AP-PCLINK 1.094 TPC File Handling Buffer Overflow Vulnerability
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 239
Sam Spade 1.14 – Browse URL Buffer Overflow (PoC)
#!/usr/bin/env python
VideoLAN VLC Media Player Web Interface 2.2.1 – Metadata Title Cross-Site Scripting
##################################
D-Link DIR-816L Wireless Router – Cross-Site Request Forgery
----------------------------------------------------------------------------------------------
foobar2000 1.3.9 – ‘.pls’ / ‘.m3u’ / ‘.m3u8’ Local Crash (PoC)
# Exploit Title: foobar2000 1.3.9 (.pls; .m3u; .m3u8) Local Crash PoC
foobar2000 1.3.9 – ‘.asx’ Local Crash (PoC)
# Exploit Title: foobar2000 1.3.9 (.asx) Local Crash PoC
Microsoft Windows Kernel – ‘win32k.sys’ Malformed TrueType Program TTF Font Processing Pool-Based Buffer Overflow (MS15-115)
Source: https://code.google.com/p/google-security-research/issues/detail?id=507
Microsoft Windows Kernel – ‘win32k.sys’ Malformed OS/2 Table TTF Font Processing Pool-Based Buffer Overflow (MS15-115)
Source: https://code.google.com/p/google-security-research/issues/detail?id=506
D-Link DIR-815 / DIR-850L – SSDP Command Injection
## Advisory Information
D-Link DIR-890L/R – Multiple Buffer Overflow Vulnerabilities
## Advisory Information
D-Link DIR-866L – Multiple Buffer Overflow Vulnerabilities
## Advisory Information
D-Link DIR-825 (vC) – Multiple Vulnerabilities
## Advisory Information
D-Link DIR-818W – Multiple Vulnerabilities
## Advisory Information
D-Link DIR-817LW – Multiple Vulnerabilities
## Advisory Information
D-Link DIR-815 – Multiple Vulnerabilities
## Advisory Information
D-Link DIR-645 – Multiple UPNP Vulnerabilities
## Advisory Information
D-Link DIR-615 – Multiple Buffer Overflow Vulnerabilities
## Advisory Information
D-Link DIR-601 – Command Injection
## Advisory Information
D-Link DIR-880L – Multiple Buffer Overflow Vulnerabilities
## Advisory Information
D-Link DGL5500 – HNAP Buffer Overflow
## Advisory Information
AlegroCart 1.2.8 – Multiple SQL Injections
Security Advisory - Curesec Research Team
AlegroCart 1.2.8 – Local/Remote File Inclusion
Security Advisory - Curesec Research Team
ClipperCMS 1.3.0 – Multiple SQL Injections
Security Advisory - Curesec Research Team
ClipperCMS 1.3.0 – Code Execution
#!/usr/local/bin/python
XCart 5.2.6 – Code Execution
#!/usr/local/bin/python
Kaspersky AntiVirus – Certificate Handling Directory Traversal
Source: https://code.google.com/p/google-security-research/issues/detail?id=539
Kaspersky AntiVirus – ‘.DEX’ File Format Memory Corruption
Source: https://code.google.com/p/google-security-research/issues/detail?id=529
Kaspersky AntiVirus – ‘.ZIP’ File Format Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=521
b374k 3.2.3/2.8 (Web Shell) – Cross-Site Request Forgery / Command Injection
[+] Credits: hyp3rlinx
R-Scripts Vacation Rental Script 7R – Multiple Vulnerabilities
R-Scripts VRS 7R Multiple Stored XSS And CSRF Vulnerabilities
TACK 1.07 – Local Stack Buffer Overflow
# Exploit Author: Juan Sacco - http://www.exploitpack.com
Sam Spade 1.14 – S-Lang Command Field Overflow (SEH)
#!/usr/bin/env python
WordPress Plugin WP Fastest Cache 0.8.4.8 – Blind SQL Injection
# Exploit Title: WP Fastest Cache 0.8.4.8 Blind SQL Injection
FBZX 2.10 – Local Stack Buffer Overflow
# Exploit Author: Juan Sacco - http://www.exploitpack.com
Huawei HG630a / HG630a-50 – Default SSH Admin Password on ADSL Modems
# Exploit Title: Huawei HG630a and HG630a-50 Default SSH Admin Password on Adsl Modems
Jenkins 1.633 – Credential Recovery
# Exploit Title: Jenkins Unauthenticated Credential Recovery
YesWiki 0.2 – ‘template’ Directory Traversal
# Exploit Title: YESWIKI 0.2 - Path Traversal (template param)
Arris TG1682G Modem – Persistent Cross-Site Scripting
Unauth Stored CSRF/XSS - Xfinity Modem
TestLink 1.9.14 – Cross-Site Request Forgery
Information
FreeType 2.6.1 – TrueType tt_sbit_decoder_load_bit_aligned Heap Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=614
Google AdWords API PHP client library 6.2.0 – Arbitrary PHP Code Execution
# Date: 06.11.2015
QNap QVR Client 5.1.0.11290 – Crash (PoC)
#!/usr/bin/env python
eBay Magento CE 1.9.2.1 – Unrestricted Cron Script (Code Execution / Denial of Service)
# Exploit Title: eBay Magento CE
Google AdWords 6.2.0 API client libraries – XML eXternal Entity Injection
# Date: 06.11.2015