Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 242
TrueCrypt 7 / VeraCrypt 1.13 – Drive Letter Symbolic Link Creation Privilege Escalation
Source: https://code.google.com/p/google-security-research/issues/detail?id=538
FTGate 2009 Build 6.4.00 – Multiple Vulnerabilities
[+] Credits: hyp3rlinx
FTGate 7 – Cross-Site Request Forgery
[+] Credits: hyp3rlinx
WinRar < 5.30 Beta 4 - Settings Import Command Execution
#!/usr/bin/python -w
ElasticSearch 1.6.0 – Arbitrary File Download
# elasticpwn Script for ElasticSearch url path traversal vuln. CVE-2015-5531
Avast! AntiVirus – X.509 Error Rendering Command Execution
Source: https://code.google.com/p/google-security-research/issues/detail?id=546
Bosch Security Systems Dinion NBN-498 – Web Interface XML Injection
# Exploit Title: Bosch Security Systems - XML Injection - Dinion NBN-498 Web Interface
PIXORD Vehicle 3G Wi-Fi Router 3GR-431P – Multiple Vulnerabilities
# Exploit Title: [Vehicle 3G Wi-Fi Router - PIXORD - Multiple
Apple Mac OSX 10.9.5/10.10.5 – ‘rsh/libmalloc’ Local Privilege Escalation
# CVE-2015-5889: issetugid() + rsh + libmalloc osx local root
IconLover 5.42 – Local Buffer Overflow
# Exploit Title: IconLover v5.42 Buffer Overflow Exploit
Western Digital My Cloud 04.01.03-421/04.01.04-422 – Command Injection
# Exploit Title: Western Digital My Cloud Command Injection
Kaseya Virtual System Administrator (VSA) – Multiple Vulnerabilities (2)
Kaseya VSA is an IT management platform for small and medium corporates.
Apport 2.19 (Ubuntu 15.04) – Local Privilege Escalation
Source: http://www.halfdog.net/Security/2015/ApportKernelCrashdumpFileAccessVulnerabilities/
Telegram 3.2 – Input Length Handling Crash (PoC)
#[+] Title: Telegram - Input Length Handling Denial of Service Vulnerability
Mango Automation 2.6.0 – Multiple Vulnerabilities
Mango Automation 2.6.0 CSRF File Upload And Arbitrary JSP Code Execution
Centreon 2.6.1 – Multiple Vulnerabilities
Centreon 2.6.1 Command Injection Vulnerability
PCMan FTP Server 2.0.7 – Directory Traversal
#!/usr/bin/python
BisonWare BisonFTP Server 3.5 – Directory Traversal
#!/usr/bin/python
My.WiFi USB Drive 1.0 iOS – Local File Inclusion
Document Title:
Photos in Wifi 1.0.1 iOS – Arbitrary File Upload
Document Title:
Adobe Acrobat Reader – AFParseDate JavaScript API Restrictions Bypass
# Title: Adobe Acrobat Reader AFParseDate Javascript API Restrictions
vTiger CRM 6.3.0 – (Authenticated) Remote Code Execution
-----BEGIN PGP SIGNED MESSAGE-----
Adobe Flash – ‘uint’ Capacity Field
Source: https://code.google.com/p/google-security-research/issues/detail?id=504
BMC Track-It! 11.4 – Multiple Vulnerabilities
>> Multiple critical vulnerabilities in BMC Track-It! 11.4
FortiManager 5.2.2 – Persistent Cross-Site Scripting
[+] Credits: hyp3rlinx
FreshFTP 5.52 – ‘.qfl’ Crash (PoC)
# Exploit Title: FreshFTP .QFL Local DOS(While Parsing).
WinRar 5.21 – SFX OLE Command Execution
#!/usr/bin/python -w
X2Engine 4.2 – Cross-Site Request Forgery
Source: https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-5075/
X2Engine 4.2 – Arbitrary File Upload
Source: https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-5074/
SMF (Simple Machine Forum) 2.0.10 – Remote Memory Exfiltration
#!/usr/bin/python
Microsoft Windows Kernel – ‘NtGdiBitBlt’ Buffer Overflow (MS15-097)
Source: https://code.google.com/p/google-security-research/issues/detail?id=474
refbase 0.9.6 – Multiple Vulnerabilities
# Exploit Title: Refbase
Cisco AnyConnect 3.1.08009 – Local Privilege Escalation (via DMG Install Script)
Yorick Koster, July 2015
Kirby CMS 2.1.0 – Cross-Site Request Forgery / Content Upload / PHP Script Execution
=============================================
Kirby CMS 2.1.0 – Authentication Bypass
=============================================
h5ai < 0.25.0 - Unrestricted Arbitrary File Upload
#!/usr/bin/env python
Air Drive Plus 2.4 – Arbitrary File Upload
Document Title:
MASM32 11R – Crash (PoC)
# EXPLOIT TITLE: Masm32v11r Buffer Overflow(SEH overwrite) crash POC
Konica Minolta FTP Utility 1.0 – Directory Traversal
---------------------------------------------------------------------
SAP NetWeaver < 7.01 - XML External Entity Injection
Title: SAP Netwaver - XML External Entity Injection