PHP News Script 4.0.0 – SQL Injection
# Exploit Title: PHP News Script 4.0.0 Sql Injection
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 249
Python IDLE 2.7.8 – Crash (PoC)
#!/usr/bin/env python
OSSEC WUI 0.8 – Denial of Service
###########################################################
FileZilla Client 2.2.x – Remote Buffer Overflow (SEH)
# Exploit Title: Filezilla client 2.2.X SEH buffer overflow exploit
Tomabo MP4 Player 3.11.3 – ‘.m3u’ Local Buffer Overflow (SEH)
#!/usr/bin/python
PCMan FTP Server 2.0.7 – ‘PUT’ Remote Buffer Overflow
#!/usr/bin/python
Microsoft Windows XP SP3 (x86) / 2003 SP2 (x86) – ‘NDProxy’ Local Privilege Escalation (MS14-002)
################################################################
Microweber 1.0.3 – Persistent Cross-Site Scripting / Cross-Site Request Forgery (Add Admin)
Microweber v1.0.3 Stored XSS And CSRF Add Admin Exploit
Microweber 1.0.3 – Arbitrary File Upload / Filter Bypass / PHP Remote Code Execution
Microweber v1.0.3 File Upload Filter Bypass Remote PHP Code Execution
WordPress Plugin Job Manager 0.7.22 – Persistent Cross-Site Scripting
Job Manager Persistent XSS
Linux Kernel – ‘espfix64’ Nested NMIs Interrupting Privilege Escalation
> +++++ CVE-2015-3290 +++++
ISC BIND 9 – TKEY Remote Denial of Service (PoC)
#!/usr/bin/env python
ISC BIND 9 – TKEY (PoC)
PoC for BIND9 TKEY assert Dos (CVE-2015-5477)
KMPlayer 3.9.x – ‘.srt’ Crash (PoC)
#!/usr/bin/perl -w
T-Mobile Internet Manager – Contact Name Crash (PoC)
#!/usr/bin/python
Acunetix Web Vulnerability Scanner 9.5 – Crash (PoC)
#!/usr/bin/env python
Netgear ReadyNAS LAN /dbbroker 6.2.4 – Credential Disclosure
#!/usr/bin/env python
phpFileManager 0.9.8 – Cross-Site Request Forgery
# Exploit Title: CSRF Remote Backdoor Shell
2Moons – Multiple Vulnerabilities
# Title: 2Moons - Multiple Vulnerabilities
JoomShopping – Blind SQL Injection
# Exploit Title: [JoomShopping Blind Sql injection]
Tendoo CMS 1.3 – Cross-Site Scripting
# Exploit Title: Tendoo CMS Stored And Reflected Xss Vulnerability
Heroes of Might and Magic III – Map Parsing Arbitrary Code Execution
# Exploit Title : Heroes of Might and Magic III - Map Parsing Arbitrary Code Execution
phpFileManager 0.9.8 – Remote Command Execution
# Exploit Title: Remote Command Execution
Sudo 1.8.14 (RHEL 5/6/7 / Ubuntu) – ‘Sudoedit’ Unauthorized Privilege Escalation
# Exploit Title: sudo -e - a.k.a. sudoedit - unauthorized privilege escalation
Classic FTP 2.36 – CWD Reconnection Denial of Service
#!/usr/bin/env python
Foxit Reader – ‘.png’ Conversion Parsing tEXt Chunk Arbitrary Code Execution
# Exploit Title: Foxit Reader PNG Conversion Parsing tEXt chunk - Arbitrary Code Execution
Hawkeye-G 3.0.1.4912 – Persistent Cross-Site Scripting / Information Leakage
# Exploit Title: Persistent XSS, Information Leakage IDS / IPS
WordPress Plugin Unite Gallery Lite 1.4.6 – Multiple Vulnerabilities
# Title: Cross-Site Request Forgery & SQL Injection Vulnerabilities in Unite Gallery Lite Wordpress Plugin v1.4.6
Libuser Library – Multiple Vulnerabilities
Qualys Security Advisory
WordPress Plugin Count Per Day 3.4 – SQL Injection
Advisory ID: HTB23267
Xceedium Xsuite – Multiple Vulnerabilities
See also: http://www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt
Hawkeye-G 3.0.1.4912 – Cross-Site Request Forgery
# Exploit Title: CSRF, Network Threat Appliance IDS / IPS
XPCOM – Race Condition
XPCOM Race Condition
Microsoft Word – Local Machine Zone Code Execution (MS15-022)
Exploit Title: Microsoft Word Local Machine Zone Remote Code Execution Vulnerability
phpVibe < 4.20 - Persistent Cross-Site Scripting
# phpVibe < 4.20 Stored XSS
Image Transfer IOS – Remote Crash (PoC)
#!/usr/bin/perl -w
AirDroid iOS / Android / Win 3.1.3 – Persistent
Document Title:
TcpDump – rpki_rtr_pdu_print Out-of-Bounds Denial of Service
# Exploit Title: TcpDump rpki_rtr_pdu_print Out-of-Bounds Denial of Service
WordPress Plugin Download Manager Free 2.7.94 & Pro 4 – (Authenticated) Persistent Cross-Site Scripting
# WordPress Download Manager Free 2.7.94 & Pro 4 Authenticated Stored XSS
15 TOTOLINK Router Models – Multiple Remote Code Execution Vulnerabilities
## Advisory Information
4 TOTOLINK Router Models – Cross-Site Request Forgery / Cross-Site Scripting
## Advisory Information