Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 254
Microsoft Internet Explorer 11 – Crash (PoC) (1)
# Exploit Title: Internet Explorer 11 - Crash PoC
Microsoft Windows 8.0/8.1 (x64) – ‘TrackPopupMenu’ Local Privilege Escalation (MS14-058)
# Windows 8.0 - 8.1 x64 TrackPopupMenu Privilege Escalation (MS14-058)
Microsoft Windows – Local Privilege Escalation (MS15-051)
# Source: https://github.com/hfiref0x/CVE-2015-1701
Chronosite 5.12 – SQL Injection
# Exploit Title: Chronosite 5.12 SQL Injection
Microsoft Windows – ‘CNG.SYS’ Kernel Security Feature Bypass (MS15-052)
// Source: http://www.binvul.com/viewthread.php?tid=508
QEMU – Floppy Disk Controller (FDC) (PoC)
// Source: https://marc.info/?l=oss-security&m=143155206320935&w=2
ElasticSearch < 1.4.5 / < 1.5.2 - Directory Traversal
#!/usr/bin/python
Forma LMS 1.3 – Multiple PHP Object Injection Vulnerabilities
Forma LMS 1.3 Multiple PHP Object Injection Vulnerabilities
BulletProof FTP Client 2010 – Local Buffer Overflow (DEP Bypass)
#-----------------------------------------------------------------------------#
Wireless Photo Transfer 3.0 iOS – Local File Inclusion
Document Title:
OYO File Manager 1.1 (iOS / Android) – Multiple Vulnerabilities
Document Title:
Burning Board < 2.3.1 - SQL Injection
Burning Board SQL Injection
iFTP 2.21 – Buffer Overflow Crash (PoC)
#!/usr/bin/python
WordPress Plugin Booking Calendar Contact Form 1.0.2 – Multiple Vulnerabilities
# Exploit Title: WordPress Booking Calendar Contact Form 1.0.2[Multiple
PHPCollab 2.5 – ‘deletetopics.php’ SQL Injection
# Exploit Title: PHPCollab 2.5 - SQL Injection
ZTE F660 – Remote Configuration Download
Exploit Title : ZTE remote configuration download
VideoCharge Express 3.16.3.04 – Local Buffer Overflow
#!/usr/bin/python
VideoCharge Vanilla 3.16.4.06 – Local Buffer Overflow
#!/usr/bin/python
i.FTP 2.21 – Time Field (SEH)
#!/usr/bin/python
Pluck CMS 4.7 – Directory Traversal
# Exploit Title: Pluck 4.7 Directory Traversal
eFront 3.6.15 – Multiple SQL Injections
eFront 3.6.15 Multiple SQL Injection Vulnerabilities
eFront 3.6.15 – Directory Traversal
eFront 3.6.15 Path Traversal Vulnerability
eFront 3.6.15 – PHP Object Injection
eFront 3.6.15 PHP Object Injection Vulnerability
Wing FTP Server Admin 4.4.5 – Cross-Site Request Forgery (Add User)
# Exploit Title: CSRF add arbitrary users
SQLBuddy 1.3.3 – Directory Traversal
# Exploit Title: Path traversal vulnerability
Xeams 4.5 Build 5755 – Multiple Vulnerabilities
# Exploit Title: Multiple vulnerabilities in Xeams 4.5 Build 5755 (CSRF/Stored XSS)
Syncrify Server 3.6 Build 833 – Multiple Vulnerabilities
# Exploit Title: Multiple vulnerabilities in Syncrify Server 3.6 Build 833 (CSRF/Stored XSS)
SynaMan 3.4 Build 1436 – Multiple Vulnerabilities
# Exploit Title: Multiple vulnerabilities in SynaMan 3.4 Build 1436 (CSRF/Stored XSS)
WordPress Plugin N-Media Website Contact Form with File Upload 1.5 – Local File Inclusion
# Exploit Title: website contact form with file upload 1.5 Exploit Local File Inclusion
SynTail 1.5 Build 566 – Multiple Vulnerabilities
# Exploit Title: Multiple vulnerabilities in SynTail 1.5 Build 566 (CSRF/Stored XSS)
MacKeeper – URL Handler Remote Code Execution
#!/usr/bin/python
WordPress Plugin Ultimate Profile Builder 2.3.3 – Cross-Site Request Forgery
================================================================
WordPress Plugin ClickBank Ads 1.7 – Cross-Site Request Forgery
================================================================
Manage Engine Asset Explorer 6.1.0 Build: 6110 – Cross-Site Request Forgery
===============================================================================
WordPress Plugin Ad Inserter 1.5.2 – Cross-Site Request Forgery
================================================================
WordPress Plugin Freshmail 1.5.8 – SQL Injection
# Exploit Title: Unauthenticated SQL Injection on Wordpress Freshmail (#1)