Linux Kernel < 3.5.0-23 (Ubuntu 12.04.2 x64) - 'SOCK_DIAG' SMEP Bypass Local Privilege Escalation
EDB Note: Video ~ https://youtu.be/jHJd-5NvWlQ
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 246
Keeper IP Camera 3.2.2.10 – Authentication Bypass
# Exploit Title: Keeper IP Camera - Authentication Bypass
Microsoft Office 2007 – OneTableDocumentStream Invalid Object
Source: https://code.google.com/p/google-security-research/issues/detail?id=171&can=1
Microsoft Office 2007 – Malformed Document Stack Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=170&can=1
vBulletin 3.6.0 < 4.2.3 - 'ForumRunner' SQL Injection
##################################################################################################
Easy File Sharing Web Server 6.9 – USERID Remote Buffer Overflow
#!/usr/bin/python
Easy Address Book Web Server 1.6 – USERID Remote Buffer Overflow
#!/usr/bin/python
Mock SMTP Server 1.0 – Remote Crash (PoC)
#!/usr/bin/python
WordPress Theme GeoPlaces3 – Arbitrary File Upload
##################################################################################
GOM Audio 2.0.8 – ‘.gas’ Crash (PoC)
# Exploit Title: GOM Audio 2.0.8 Crash POC
Netsweeper 4.0.8 – Authentication Bypass (via New Profile Creation)
+-----------------------------------------------------------------+
WordPress Plugin Googmonify 0.8.1 – Cross-Site Scripting / Cross-Site Request Forgery
[+] Exploit Title : Wordpress Googmonify Plug-in XSS/CSRF
WordPress Plugin MDC Private Message 1.0.0 – Persistent Cross-Site Scripting
# Exploit Title: WordPress MDC Private Message Persistent XSS
Konica Minolta FTP Utility 1.0 – Remote Denial of Service (PoC)
#!/usr/bin/python
Microsoft Office 2007 – ‘wwlib.dll’ fcPlcfFldMom Uninitialized Heap Usage
Source: https://code.google.com/p/google-security-research/issues/detail?id=424&can=1
Microsoft Office 2007 – ‘wwlib.dll’ Type Confusion (MS15-081)
Source: https://code.google.com/p/google-security-research/issues/detail?id=423&can=1
Microsoft Office 2007 – ‘OGL.dll’ DpOutputSpanStretch::OutputSpan Out of Bounds Write (MS15-080)
Source: https://code.google.com/p/google-security-research/issues/detail?id=420&can=1
Microsoft Office 2007 – ‘mso.dll’ Arbitrary Free (MS15-081)
Source: https://code.google.com/p/google-security-research/issues/detail?id=417&can=1
Microsoft Office 2007 – ‘mso.dll’ Use-After-Free (MS15-081)
Source: https://code.google.com/p/google-security-research/issues/detail?id=414&can=1
Microsoft Windows – ‘win32k.sys’ TTF Font Processing win32k!fsc_BLTHoriz Out-of-Bounds Pool Write
Source: https://code.google.com/p/google-security-research/issues/detail?id=402&can=1
Microsoft Windows – ‘win32k.sys’ TTF Font Processing win32k!fsc_RemoveDups Out-of-Bounds Pool Memory Access
Source: https://code.google.com/p/google-security-research/issues/detail?id=401&can=1
Microsoft Windows – ‘ATMFD.DLL’ Out-of-Bounds Read Due to Malformed FDSelect Offset in the CFF Table
Source: https://code.google.com/p/google-security-research/issues/detail?id=392&can=1
Microsoft Windows – ‘ATMFD.DLL’ Out-of-Bounds Read Due to Malformed Name INDEX in the CFF Table
Source: https://code.google.com/p/google-security-research/issues/detail?id=386&can=1
Microsoft Windows – ‘win32k.sys’ TTF Font Processing win32k!scl_ApplyTranslation Pool-Based Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=370&can=1
Microsoft Windows – ‘win32k.sys’ TTF Font Processing IUP[] Program Instruction Pool-Based Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=368&can=1
Microsoft Windows – ‘ATMFD.DLL’ Write to Uninitialized Address Due to Malformed CFF Table
Source: https://code.google.com/p/google-security-research/issues/detail?id=385&can=1
Microsoft Windows – ‘ATMFD.dll’ CFF table (ATMFD+0x3440b / ATMFD+0x3440e) Invalid Memory Access
Source: https://code.google.com/p/google-security-research/issues/detail?id=384&can=1
Microsoft Windows – ‘ATMFD.DLL’ CFF table (ATMFD+0x34072 / ATMFD+0x3407b) Invalid Memory Access
Source: https://code.google.com/p/google-security-research/issues/detail?id=383&can=1
Microsoft Windows – ‘ATMFD.dll’ CharString Stream Out-of-Bounds Reads (MS15-021)
Source: https://code.google.com/p/google-security-research/issues/detail?id=382&can=1
Microsoft Office 2007 – MSPTLS Heap Index Integer Underflow (MS15-081)
Source: https://code.google.com/p/google-security-research/issues/detail?id=431&can=1
Mozilla – Maintenance Service Log File Overwrite Privilege Escalation
Source: https://code.google.com/p/google-security-research/issues/detail?id=427&can=1
Netsweeper 2.6.29.8 – SQL Injection
+-------------------------------------+
Netsweeper 4.0.4 – SQL Injection
+----------------------------------+
Netsweeper 4.0.8 – SQL Injection / Authentication Bypass
+----------------------------------------------------------------+
Netsweeper 4.0.8 – Authentication Bypass (via Disabling of IP Quarantine)
+-----------------------------------------------------------------------+
Netsweeper 4.0.9 – Arbitrary File Upload / Execution
+--------------------------------------------------------+
Netsweeper 3.0.6 – Authentication Bypass
+------------------------------------------------------------------------+
Netsweeper 4.0.8 – Arbitrary File Upload / Execution
+--------------------------------------------------------+
Multiple ChiefPDF Software 2.0 – Local Buffer Overflow
#!/usr/bin/python
Aruba Mobility Controller 6.4.2.8 – Multiple Vulnerabilities
# Title: Aruba Mobility Controller CSRF And XSS Vulnerabilities
Vifi Radio 1.0 – Cross-Site Request Forgery
.__ _____ _______
Pligg CMS 2.0.2 – Arbitrary Code Execution
{php}echo ' Hacked ';
Flash – PCRE Regex Compilation Zero-Length Assertion Arbitrary Bytecode Execution
Source: https://code.google.com/p/google-security-research/issues/detail?id=224&can=1&q=label%3AProduct-Flash%20modif...
Flash Broker-Based – Sandbox Escape via Forward Slash Instead of Backslash
Source: https://code.google.com/p/google-security-research/issues/detail?id=278&can=1&q=label%3AProduct-Flash%20modif...
Flash Broker-Based – Sandbox Escape via Unexpected Directory Lock
Source: https://code.google.com/p/google-security-research/issues/detail?id=279&can=1&q=label%3AProduct-Flash%20modif...
Flash Broker-Based – Sandbox Escape via Timing Attack Against File Moving
Source: https://code.google.com/p/google-security-research/issues/detail?id=280&can=1&q=label%3AProduct-Flash%20modif...
Flash Player – Integer Overflow in Function.apply
Source: https://code.google.com/p/google-security-research/issues/detail?id=302&can=1&q=label%3AProduct-Flash%20modif...