Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 282
webERP 4.11.3 – ‘SalesInquiry.php?SortBy’ SQL Injection
# ==============================================================
SpagoBI 4.0 – Privilege Escalation
###################################################
VCDGear 3.50 – ‘.cue’ Local Stack Buffer Overflow
#!/usr/bin/ruby
GDL 4.2 – Multiple Vulnerabilities
-> Title : GDL 4.2 Multiple Vulnerabilities
Bluetooth Photo Share Pro 2.0 iOS – Multiple Vulnerabilities
Document Title:
Music AlarmClock 2.1.0 – ‘.m3u’ Crash (PoC)
#------------------------------------------------------------------------------------#
Gold MP4 Player 3.3 – Buffer Overflow (PoC) (SEH)
#---------------------------------------------------------------------------------#
GoAhead Web Server 3.1.x – Denial of Service
#!/usr/bin/python
Piwigo 2.6.1 – Cross-Site Request Forgery
# Exploit Title: piwigo 2.6.1 - CSRF
POSH 3.1.x – ‘addtoapplication.php’ SQL Injection
source: https://www.securityfocus.com/bid/65817/info
Notepad++ CCompletion Plugin 1.19 – Local Stack Buffer Overflow
Application:Notepad++
Technicolor TC7200 – Credentials Disclosure
# Exploit Title: Technicolor TC7200: Authentication Bypass
WiFiles HD 1.3 iOS – Local File Inclusion
Document Title:
Sendy 1.1.8.4 – SQL Injection
# Exploit Title: Sendy SqlInject
VideoLAN VLC Media Player 2.1.3 – ‘.avs’ Crash (PoC)
# Exploit Title: VLC 2.1.3 WriteAV Vulnerability, Decoders
Private Camera Pro 5.0 iOS – Multiple Vulnerabilities
Document Title:
Ganib Project Management 2.3 – SQL Injection
# Exploit title: Ganib 2.x SQLi
Python – ‘socket.recvfrom_into()’ Remote Buffer Overflow
#!/usr/bin/env python
Ultra Mini HTTPd 1.21 – ‘POST’ Remote Stack Buffer Overflow (2)
#!/usr/bin/python
ILIAS 4.4.1 – Multiple Vulnerabilities
# ==============================================================
WordPress Plugin AdRotate 3.9.4 – ‘clicktracker.ph?track’ SQL Injection
Advisory ID: HTB23201
eshtery CMS – ‘FileManager.aspx’ Local File Disclosure
source: https://www.securityfocus.com/bid/65740/info
ATutor – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/65744/info
Jorjweb – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/66377/info
PCMan FTP Server 2.07 – Remote Buffer Overflow
# Exploit Title: PCMAN FTP 2.07 Long Command Buffer Overflow (unauthenticated)
Barracuda Firewall 6.1.0.016 – Multiple Vulnerabilities
Document Title:
Stark CRM 1.0 – Multiple Vulnerabilities
Stark CRM v1.0 Multiple Script Injection And Session Riding Vulnerabilities
WRT120N 1.0.0.7 – Remote Stack Overflow
#!/usr/bin/env python
Lotus Sametime 8.5.1 – Password Disclosure
# Exploit Title: Post Exploitation - Getting username and password in the Lotus Sametime 8.5.1
Embedthis Goahead WebServer 3.1.3-0 – Multiple Vulnerabilities
# Title: Embedthis Goahead Webserver multiple DoS vulnerabilities.
D-Link DIR-615 vE4 Firmware 5.10 – Cross-Site Request Forgery
####################################################################################
Barracuda Message Archiver 650 – Persistent Cross-Site Scripting
Document Title:
WordPress Plugin NextGEN Gallery – ‘jqueryFileTree.php’ Directory Traversal
source: https://www.securityfocus.com/bid/65637/info
Dassault Systemes Catia – Remote Stack Buffer Overflow
source: https://www.securityfocus.com/bid/65675/info
VideoCharge Studio – ‘CHTTPResponse::GetHttpResponse()’ Remote Stack Buffer Overflow
source: https://www.securityfocus.com/bid/65685/info
My PDF Creator & DE DM 1.4 iOS – Multiple Vulnerabilities
Document Title:
Pina CMS – Multiple Vulnerabilities
############################################################################
Concrete5 CMS 5.6.2.1 – ‘index.php?cID’ SQL Injection
# Exploit Title: Concrete5 sql injection