WordPress Plugin S3Bubble Cloud Video With Adverts & Analytics 0.7 – Arbitrary File Download
# Exploit Title: Wordpress S3Bubble Cloud Video With Adverts & Analytics - Arbitrary File Download
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 251
CuteNews 2.0.3 – Arbitrary File Upload
CuteNews 2.0.3 Remote File Upload Vulnerability
WordPress Plugin Albo Pretorio Online 3.2 – Multiple Vulnerabilities
# Exploit Title: Albo Pretorio Online 3.2 Multiple Vulnerabilities
PHPXMLRPC < 1.1 - Remote Code Execution
PHPXMLRPC Remote Code Execution
D-Link DSP-W w110 v1.05b01 – Multiple Vulnerabilities
# Exploit Title: D-Link DSP-W Arbitrary Arbitrary file upload
McAfee SiteAdvisor 3.7.2 – Firefox Use-After-Free (PoC)
McAfee SiteAdvisor 3.7.2 for firefox Use After Free Poc
PEAR XML_RPC < 1.3.0 - Remote Code Execution
PEAR XML_RPC Remote Code Execution
Novius 5.0.1 – Multiple Vulnerabilities
[+] Credits: John Page ( hyp3rlinx )
CollabNet Subversion Edge Management 4.0.11 – Local File Inclusion
# Vuln Title: Local file inclusion in CollabNet Subversion Edge Management
Fiyo CMS 2.0_1.9.1 – SQL Injection
# Exploit Title: Fiyo CMS multiple SQL vulnerability
C2Box 4.0.0(r19171) – Cross-Site Request Forgery
Title: Cross-Site Request Forgery (CSRF) Vulnerability in C2Box application Allows adding an Admin User or reset any...
Polycom RealPresence Resource Manager < 8.4 - Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE-----
DeDeCMS < 5.7-sp1 - Remote File Inclusion
==========================
Huawei Home Gateway UPnP/1.0 IGD/1.00 – Password Disclosure
#!/usr/bin/python
Huawei Home Gateway UPnP/1.0 IGD/1.00 – Password Change
#!/usr/bin/python
Endian Firewall < 3.0.0 - OS Command Injection
#!/usr/bin/env python
XOOPS < 2.0.11 - Multiple Vulnerabilities
XOOPS Multiple Vulnerabilities
Havij – OLE Automation Array Remote Code Execution
#!/usr/bin/php
Apple Mac OSX 10.10.3 (Yosemite) Safari 8.0.x – Crash (PoC)
#!/usr/bin/php
Koha 3.20.1 – Multiple SQL Injections
# Exploit Title: Koha Open Source ILS - Unauthenticated SQL Injection in OPAC
Koha 3.20.1 – Directory Traversal
# Exploit Title: Koha Open Source ILS - Path Traversal in STAFF client
Koha 3.20.1 – Multiple Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities
# Exploit Title: Koha Open Source ILS - Multiple XSS and XSRF Vulnerabilities
Thycotic Secret Server 8.8.000004 – Persistent Cross-Site Scripting
#############################################################
GeniXCMS 0.0.3 – Cross-Site Scripting
# Exploit Title: Persistent XSS
WordPress Plugin Huge-IT Slider 2.7.5 – Multiple Vulnerabilities
# Exploit Title: WordPress: wordpress huge-it-slider 2.7.5 & Persistent JS-HTML Code injection, Arbitrary slider dele...
GeniXCMS 0.0.3 – ‘register.php’ SQL Injection
# Exploit Title: Genixcms register.php multiple SQL vuln
Joomla! Component com_simpleimageupload – Arbitrary File Upload
# Exploit Title: Joomla Simple Image Upload - Arbitrary File Upload
Vesta Control Panel 0.9.8 – OS Command Injection
Advisory ID: HTB23261
Seagate Dashboard 4.0.21.0 – Crash (PoC)
#!/usr/bin/env python
KMPlayer 3.9.1.136 – Capture Unicode Buffer Overflow (ASLR Bypass)
#!/usr/bin/python
Paintshop Pro X7 – ‘.gif’ Conversion Heap Memory Corruption ‘LZWMinimumCodeSize’ (Denial of Service)
#####################################################################################
Photoshop CC2014 / Bridge CC 2014 – ‘.gif’ Parsing Memory Corruption
#####################################################################################
Photoshop CC2014 / Bridge CC 2014 – ‘.png’ Parsing Memory Corruption
#####################################################################################
CUPS < 2.0.3 - Multiple Vulnerabilities
Source: http://googleprojectzero.blogspot.se/2015/06/owning-internet-printing-case-study-in.html
Tango DropBox 3.1.5 + PRO – Activex HeapSpray
Tango DropBox Activex Heap Spray Exploit
Tango FTP 1.0 (Build 136) – Activex HeapSpray
Tango FTP Activex Heap Spray Exploit
ManageEngine SupportCenter Plus 7.90 – Multiple Vulnerabilities
Document Title:
ZTE ZXV10 W300 v3.1.0c_DR0 – UI Session Delete
Document Title:
Lively Cart – SQL Injection
##################################################################################################
WinylPlayer 3.0.3 – Memory Corruption (PoC)
#!/usr/bin/python
HansoPlayer 3.4.0 – Memory Corruption (PoC)
#!/usr/bin/python
BlackCat CMS 1.1.1 – Arbitrary File Download
# Exploit Title: BlackCat CMS v1.1.1 Arbitrary File Download Vulnerability
Linux Kernel 3.13.0 < 3.19 (Ubuntu 12.04/14.04/14.10/15.04) - 'overlayfs' Local Privilege Escalation
# Exploit Title: ofs.c - overlayfs local root in ubuntu