ClearSCADA – Remote Authentication Bypass
#!/usr/bin/python
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 261
D-Link DSL-2740R – Remote DNS Change
#!/bin/bash
Mangallam CMS – SQL Injection
Document Title:
Barracuda Networks Cloud Series – Filter Bypass
Document Title:
VideoLAN VLC Media Player 2.1.5 – DEP Access Violation
Title : VLC Player 2.1.5 DEP Access Violation Vulnerability
VideoLAN VLC Media Player 2.1.5 – Write Access Violation
Title : VLC Player 2.1.5 Write Access Violation Vulnerability
ManageEngine ServiceDesk Plus 9.0 < Build 9031 - User Privileges Management
================================================================================
Comodo Backup 4.4.0.0 – Null Pointer Dereference Privilege Escalation
Exploit Title - Comodo Backup Null Pointer Dereference Privilege Escalation
PHP Webquest 2.6 – SQL Injection
# Exploit Title: sql injection
SWFupload 2.5.0 – Cross Frame Scripting (XFS)
# Exploit Title: SWFupload All Version XSF Vulnerability
ManageEngine EventLog Analyzer 9.0 – Directory Traversal / Cross-Site Scripting
################################################################################################
jclassifiedsmanager – Multiple Vulnerabilities
# Exploit Title: jclassifiedsmanager Multiple Vulnerabilities
Android WiFi-Direct – Denial of Service
Core Security - Corelabs Advisory
Symantec Data Center Security – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20150122-0 >
NPDS CMS REvolution-13 – SQL Injection
Title - NPDS CMS Revolution-13 - SQL Injection Vulnerability
IceCream Ebook Reader 1.41 – Crash (PoC)
# Exploit Title: [Icecream Ebook Reader v1.41 (.mobi/.prc) Denial of Service]
Exif Pilot 4.7.2 – Buffer Overflow (SEH)
#!/usr/bin/env ruby
ecommerceMajor – SQL Injection / Authentication Bypass
##################################################################################################
Cisco Ironport Appliances – Privilege Escalation
Cisco Ironport Appliances Privilege Escalation Vulnerability
ManageEngine ServiceDesk Plus 9.0 – SQL Injection
================================================================================
ManageEngine ServiceDesk Plus 9.0 – User Enumeration
================================================================================
ArticleFR CMS 3.0.5 – SQL Injection
# Exploit Title: SQL injection vulnerability in articleFR CMS 3.0.5
ArticleFR CMS 3.0.5 – Arbitrary File Upload
# Exploit Title: Arbitrary File Upload in articleFR CMS 3.0.5
Zhone GPON 2520 R4.0.2.566b – Crash (PoC)
from httplib2 import Http
Crystal Player 1.99 – Memory Corruption
Document Title:
RedaxScript 2.1.0 – Privilege Escalation
# Exploit Title: Privilege Escalation in RedaxScript 2.1.0
Malwarebytes Anti-Exploit 1.03.1.1220/1.04.1.1012 – Out-of-Bounds Read Denial of Service
Exploit Title - MalwareBytes Anti-Exploit Out-of-bounds Read DoS
WordPress Plugin Pixarbay Images 2.3 – Multiple Vulnerabilities
Mogwai Security Advisory MSA-2015-01
Apple Mac OSX networkd – ‘effective_audit_token’ XPC Type Confusion Sandbox Escape
// Requires Lorgnette: https://github.com/rodionovd/liblorgnette
Apple Mac OSX 10.9.5 – IOKit IntelAccelerator Null Pointer Dereference
// clang -o ig_2_3_exploit ig_2_3_exploit.c -framework IOKit -framework CoreFoundation -m32 -D_FORTIFY_SOURCE=0
vBulletin vBSSO Single Sign-On 1.4.14 – SQL Injection
# Exploit Title: vBulletin vBSSO Single Sign-On –
WordPress Plugin Cforms 14.7 – Remote Code Execution
# Exploit Title: Remote Code Execution via Unauthorised File upload in Cforms 14.7
Microsoft Windows < 8.1 (x86/x64) - User Profile Service Privilege Escalation (MS15-003)
## Source: https://code.google.com/p/google-security-research/issues/detail?id=123
T-Mobile Internet Manager – Local Buffer Overflow (SEH)
#!/usr/bin/python
Congstar Internet Manager – Local Buffer Overflow (SEH)
#!/usr/bin/python
Lorex LH300 Series – ActiveX Buffer Overflow (PoC)
Disclosure: 09/01/2014 / Last updated: 18/01/2015
WordPress Plugin Pie Register 2.0.13 – Privilege Escalation
# Exploit Title: Pie Register 2.0.13 Privilege escalation
ManageEngine Desktop Central – Create Administrator
>> Administrator account creation in ManageEngine Desktop Central / Desktop Central MSP
Ansible Tower 2.0.2 – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20150113-1 >
Gecko CMS 2.3 – Multiple Vulnerabilities
Gecko CMS 2.3 Multiple Vulnerabilities