1 Click Extract Audio 2.3.6 – Activex Buffer Overflow
1 Click Extract Audio Activex Buffer Overflow
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 253
WordPress Plugin Nmedia WordPress Member Conversation 1.35.0 – ‘doupload.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/53790/info
Jildi FTP Client 1.5.6 – Local Buffer Overflow (SEH)
#!/usr/bin/python
ZTE AC 3633R USB Modem – Multiple Vulnerabilities
# Exploit Title: ZTE AC 3633R USB Modem Multiple Vulnerabilities
WordPress Plugin zM Ajax Login & Register 1.0.9 – Local File Inclusion
# Exploit Title: CVE-2015-4153 - WordPress zM Ajax Login & Register
Seagate Central 2014.0410.0026-F – Remote Command Execution
#!/usr/bin/python
Seagate Central 2014.0410.0026-F – Remote Facebook Access Token
#!/usr/bin/python
VFront 0.99.2 – Cross-Site Request Forgery / Persistent Cross-Site Scripting
# Exploit Title: CSRF & Persistent XSS
Jildi FTP Client – Buffer Overflow (PoC)
#!/usr/bin/python
WebDrive 12.2 (B4172) – Buffer Overflow (PoC)
Document Title:
WordPress Plugin LeagueManager 3.9.11 – SQL Injection
###################################################################################################
Linux Kernel (PonyOS 3.0) – TTY ‘ioctl()’ Local Privilege Escalation
# Exploit Title: PonyOS
WebDrive 12.2 (Build #4172) – Remote Buffer Overflow
#!/usr/bin/python
WordPress Plugin dzs-zoomsounds 2.0 – Arbitrary File Upload
###################################################################################################
Linux Kernel (PonyOS 3.0) – ELF Loader Local Privilege Escalation
# Exploit Title: PonyOS
Aruba ClearPass Policy Manager – Persistent Cross-Site Scripting
===============================================================================
TCPDF Library 5.9 – Arbitrary File Deletion
TCPDF library Universal POI Payload to Arbitrary File Deletion
JSPMyAdmin 1.1 – Multiple Vulnerabilities
# Exploit Title: JSPMyAdmin 1.1 SQL Injection, CSRF & XSS
Peercast < 0.1211 - Format String
Peercast Format String Vulnerability
WordPress Plugin Free Counter 1.1 – Persistent Cross-Site Scripting
# Exploit Title: WordPress Free Counter Plugin [Stored XSS]
WordPress Plugin Video Gallery 2.8 – Arbitrary Mail Relay
######################
WordPress Plugin NewStatPress 0.9.8 – Multiple Vulnerabilities
# Title: Multiple vulnerabilities in WordPress plugin "NewStatPress"
WordPress Plugin Landing Pages 1.8.4 – Multiple Vulnerabilities
# Title: Multiple vulnerabilities in WordPress plugin "WordPress Landing Pages"
WordPress Plugin GigPress 2.3.8 – SQL Injection
# Title: SQLi vulnerabilities in WordPress plugin "GigPress"
Apache JackRabbit – WebDAV XML External Entity
#!/usr/bin/env python
WordPress Plugin MailChimp Subscribe Forms 1.1 – Remote Code Execution
# Exploit Title: Wordpress MailChimp Subscribe Forms Remote Code Execution
WordPress Plugin church_admin 0.800 – Persistent Cross-Site Scripting
# Exploit Title: Wordpress church_admin Stored XSS
WordPress Plugin Simple Photo Gallery 1.7.8 – Blind SQL Injection
# Exploit Title: Wordpess Simple Photo Gallery Blind SQL Injection
Sendio ESP – Information Disclosure
1. Advisory Information
ClickHeat 1.13+ – Remote Command Execution
Clickheat 1.13+ Unauthenticated RCE
Acoustica Pianissimo 1.0 Build 12 – ‘Registration ID’ Buffer Overflow (PoC)
Acoustica Pianissimo 1.0 Build 12 (Registration ID) Buffer Overflow PoC
FTP Media Server 3.0 – Authentication Bypass / Denial of Service
#!/usr/bin/env python
Apport (Ubuntu 14.04/14.10/15.04) – Race Condition Privilege Escalation
# Exploit Title: apport/ubuntu local root race condition
Fuse 2.9.3-15 – Local Privilege Escalation
Source: https://gist.github.com/taviso/ecb70eb12d461dd85cba
WordPress Plugin WP Membership 1.2.3 – Multiple Vulnerabilities
# Exploit Title: WordPress WP Membership plugin [Multiple Vulnerabilities]
Forma LMS 1.3 – Multiple SQL Injections
Forma LMS 1.3 Multiple SQL Injections
WordPress Plugin WP Symposium 15.1 – ‘&show=’ SQL Injection
=======================================================================
Comodo GeekBuddy < 4.18.121 - Local Privilege Escalation
Comodo GeekBuddy Local Privilege Escalation (CVE-2014-7872)
Phoenix Contact ILC 150 ETH PLC – Remote Control Script
#!/usr/bin/env python
WordPress Plugin FeedWordPress 2015.0426 – SQL Injection
# Exploit Title: SQLi in FeedWordPress WordPress plugin