WebDisk+ 2.1 iOS – Code Execution
Document Title:
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 267
Folder Plus 2.5.1 iOS – Persistent Cross-Site Scripting
Document Title:
Magento Server MAGMI Plugin 0.7.17a – Remote File Inclusion
Exploit found date: 10/24/2014
Microsoft Windows – OLE Remote Code Execution ‘Sandworm’ (MS14-060)
# !/usr/bin/python
Dell EqualLogic Storage – Directory Traversal
# Exploit Title: Remote Directory Traversal exploit for Dell EqualLogic 6.0
OpenBSD 5.5 – Local Kernel Panic (Denial of Service)
printf("[*] hdr->e_phoff:\t0x%.4x\n", hdr->e_phoff);
Feng Office 1.7.4 – Arbitrary File Upload
import socket
Feng Office 1.7.4 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/47049/info
Dell SonicWALL Gms 7.2.x – Code Injection
Document Title:
iFunBox Free 1.1 iOS – Local File Inclusion
Document Title:
File Manager 4.2.10 iOS – Code Execution
Document Title:
DotNetNuke DNNspot Store 3.0.0 – Arbitrary File Upload (Metasploit)
# Exploit Title: DotNetNuke DNNspot Store (UploadifyHandler.ashx) windows/shell/reverse_tcp
iBackup 10.0.0.32 – Local Privilege Escalation
# Exploit Title: iBackup icacls "C:\Program Files\IBackupWindows\ib_service.exe"
Microsoft Windows – OLE Package Manager SandWorm
#!/usr/bin/env python
Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Add Admin User)
#!/usr/bin/python
SAP NetWeaver Enqueue Server – Denial of Service
Core Security - Corelabs Advisory
Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (PoC) (Reset Password) (1)
# Drupal 7.x SQL Injection SA-CORE-2014-005 https://www.drupal.org/SA-CORE-2014-005
Indeed Job Search 2.5 iOS API – Multiple Vulnerabilities
Document Title:
Bosch Security Systems DVR 630/650/670 Series – Multiple Vulnerabilities
:::::::-. ... ::::::. :::.
PayPal Inc BB #85 MB iOS 4.6 – Authentication Bypass
Document Title:
Croogo 2.0.0 – Arbitrary PHP Code Execution
#!/usr/bin/env python
Change CMS 3.6.8 – Multiple Cross-Site Request Forgery Vulnerabilities
# Exploit Title: RBS Change Complet Open Source multiple CSRF vulnerabilities POST and GET
Telefonica O2 Connection Manager 3.4 – Local Privilege Escalation
Telefonica O2 Connection Manager 3.4 Local Privilege Escalation Vulnerability
Telefonica O2 Connection Manager 8.7 – Service Trusted Path Privilege Escalation
Telefonica O2 Connection Manager 8.7 Service Trusted Path Privilege Escalation
YourMembers Plugin – Blind SQL Injection
Vulnerability title: Blind SQL Injection Vulnerability in YourMembers plugin
Tenda A32 Router – Cross-Site Request Forgery
# Exploit Title: Tenda A32 Router CSRF Vulnerability(reboot the Router)
SEO Control Panel 3.6.0 – (Authenticated) SQL Injection
# Exploit Title: Seo Control Panel 3.6.0 Authenticated Sql Injection
vBulletin 4.x/5.x – AdminCP/ApiLog via xmlrpc API (Authenticated) Persistent Cross-Site Scripting
CVE-2014-2021 - vBulletin 5.x/4.x - persistent XSS in AdminCP/ApiLog via xmlrpc API (post-auth)
vBulletin 4.x – breadcrumbs via xmlrpc API (Authenticated) SQL Injection
CVE-2014-2022 - vbulletin 4.x - SQLi in breadcrumbs via xmlrpc API (post-auth)
Pimcore CMS 1.4.9 <2.1.0 - Multiple Vulnerabilities
> Vulnerabilities in Pimcore 1.4.9 to 2.1.0 (inclusive)
GetSimple CMS 3.3.1 – Cross-Site Scripting
PoC for XSS bugs in the admin console of GetSimple CMS 3.3.1
CMS Made Simple 1.11.9 – Multiple Vulnerabilities
> Vulnerabilities in CMS Made Simple, version 1.11.9
Linux Kernel < 3.16.1 - 'Remount FUSE' Local Privilege Escalation
FUSE-based exploit for CVE-2014-5207
BMC Track-It! – Multiple Vulnerabilities
>> Multiple critical vulnerabilities in BMC Track-It!
DrayTek VigorACS SI 1.3.0 – Multiple Vulnerabilities
DrayTek VigorACS SI (