Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 245
AutoCAD DWG and DXF To PDF Converter 2.2 – Local Buffer Overflow
#*************************************************************************************************************
Disconnect.me Mac OSX Client 2.0 – Local Privilege Escalation
Disconnect.me is the search engine entrusted by the Tor Browser.
FireEye Appliance – Unauthorized File Disclosure
Just one of many handfuls of FireEye / Mandiant 0day. Been sitting on this for more than 18 months with no fix from t...
HooToo Tripmate HT-TM01 2.000.022 – Cross-Site Request Forgery
# Exploit Title: HooToo Tripmate HT-TM01 Cross Site Request Forgery
Tenda N3 Wireless N150 Router – Authentication Bypass
# Exploit Title: Complete Authentication Bypass In Tenda N3 Wireless N150 Routers
Thomson Wireless VoIP Cable Modem TWG850-4B ST9C.05.08 – Authentication Bypass
###############################################################################
Mantis Bug Tracker 1.2.19 – Host Header
# Exploit Title: MantisBT 1.2.19 - Host header attack vulnerability
YesWiki 0.2 – ‘squelette’ Directory Traversal
# Exploit Title: YESWIKI 0.2 - Path Traversal
SphereFTP Server 2.0 – Crash (PoC)
#!/usr/bin/python
Cerb 7.0.3 – Cross-Site Request Forgery
Advisory ID: HTB23269
Bedita 3.5.1 – Cross-Site Scripting
########################################################################################
Ricoh DC (SR10) 1.1.0.8 – Denial of Service
# Exploit Title: Rocoh DC FTP (SR10) v1.1.0.8 DoS
Mpxplay MultiMedia Commander 2.00a – ‘.m3u’ Stack Buffer Overflow (PoC)
# Exploit Title: Mpxplay Multimedia Commander Stack-based BOF
SiS Windows VGA Display Manager 6.14.10.3930 – Write-What-Where (PoC)
KL-001-2015-003 : SiS Windows VGA Display Manager Multiple Privilege
XGI Windows VGA Display Manager 6.14.10.1090 – Arbitrary Write (PoC)
KL-001-2015-004 : XGI Windows VGA Display Manager Arbitrary Write
Edimax BR6228nS/BR6228nC – Multiple Vulnerabilities
# Title: Edimax BR6228nS/BR6228nC - Multiple vulnerabilities
PhpWiki 1.5.4 – Multiple Vulnerabilities
# Title: phpwiki 1.5.4 - Cross Site Scripting / Local File Inclusion
PFTP Server 8.0f Lite – textfield Local Buffer Overflow (SEH) (PoC)
#*************************************************************************************************************
Edimax PS-1206MF – Web Admin Authentication Bypass
# Title: Edimax PS-1206MF - Web Admin Auth Bypass
Microsoft Office 2007 – ‘msxml5.dll’ Crash (PoC)
#!/usr/bin/perl -w
Viber 4.2.0 – Non-Printable Characters Handling Denial of Service
#!/usr/bin/perl -w
Cyberoam Firewall CR500iNG-XP 10.6.2 MR-1 – Blind SQL Injection
# Exploit Title: Cyberoam : Blind SQL Injection
Boxoft WAV to MP3 Converter – ‘convert’ Local Buffer Overflow
#Exploit Title: Boxoft wav to mp3 converter SEH bypass technique tested on Win7x64
PCMan FTP Server 2.0.7 – ‘GET’ Remote Buffer Overflow
#!/usr/bin/python
Samsung SyncThruWeb 2.01.00.26 – SMB Hash Disclosure
# Exploit Title: Samsung SyncThruWeb SMB Hash Disclosure
PCMan FTP Server 2.0.7 – ‘RENAME’ Remote Buffer Overflow
#!/usr/bin/python
Photo Transfer (2) 1.0 iOS – Denial of Service
Document Title:
WordPress Plugin Responsive Thumbnail Slider 1.0 – Arbitrary File Upload
# Exploit Title: Wordpress Responsive Thumbnail Slider Arbitrary File Upload
Jenkins 1.626 – Cross-Site Request Forgery / Code Execution
# Title: Jenkins 1.626 - Cross Site Request Forgery / Code Execution
Wolf CMS – Arbitrary File Upload / Execution
# Exploit Title : Wolf CMS 0.8.2 Arbitrary File Upload To Command
Pluck CMS 4.7.3 – Multiple Vulnerabilities
# Title: Pluck 4.7.3 - Multiple vulnerabilities
FHFS – FTP/HTTP File Server 2.1.2 Remote Command Execution
#!/usr/bin/python
Xion Audio Player 1.5 build 155 – Stack Buffer Overflow
# Exploit Title: Xion Audio Player build 155 Stack Based BOF.
FENIX 0.92 – Local Buffer Overflow
# Exploit Author: Juan Sacco - http://www.exploitpack.com
BSIGN 0.4.5 – Local Buffer Overflow
# Exploit Author: Juan Sacco - http://www.exploitpack.com
Invision Power Board (IP.Board) 4.x – Persistent Cross-Site Scripting
# Exploit Title: IP.Board 4.X Stored XSS
QEMU – Programmable Interrupt Timer Controller Heap Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=419#c4
Oracle GlassFish Server 4.1 – Directory Traversal
Trustwave SpiderLabs Security Advisory TWSL2015-016:
ZSNES 1.51 – Local Buffer Overflow
# Exploit Author: Juan Sacco - http://www.exploitpack.comp
VideoLAN VLC Media Player 2.2.1 – m3u8/m3u Crash (PoC)
#!/usr/bin/python
Magento eCommerce – Remote Code Execution
##################################################################################################