Ultra Mini HTTPd 1.21 – ‘POST’ Remote Stack Buffer Overflow (1)
# Exploit Title: Ultra Mini HTTPD stack buffer overflow POST request
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 283
MODx Evogallery Module – ‘Uploadify.php’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/65646/info
i-doit Pro – ‘objID’ SQL Injection
source: https://www.securityfocus.com/bid/65557/info
Joomla! Component com_wire_immogest – ‘index.php’ SQL Injection
source: https://www.securityfocus.com/bid/65606/info
Linksys E-series – Remote Code Execution
#!/usr/bin/php
Dexter (CasinoLoader) Panel – SQL Injection
# Exploit Title: Dexter (CasinoLoader) Panel SQLi
ImageMagick 6.8.8-4 – Local Buffer Overflow (SEH)
#!/usr/bin/perl
HP Data Protector – ‘EXEC_BAR’ Remote Command Execution
import argparse
Trendchip HG520 ADSL2+ Wireless Modem – Cross-Site Request Forgery
########################################################################
Office Assistant Pro 2.2.2 iOS – Local File Inclusion
Document Title:
mbDriveHD 1.0.7 iOS – Multiple Vulnerabilities
Document Title:
File Hub 1.9.1 iOS – Multiple Vulnerabilities
Document Title:
Eudora Qualcomm WorldMail 9.0.333.0 – IMAPd Service UID Buffer Overflow
#!/usr/bin/python
CA 2E Web Option 8.1.2 – Authentication Bypass
Vulnerability title: Unauthenticated Privilege Escalation in CA 2E Web Option
Apache Commons FileUpload and Apache Tomcat – Denial of Service
#################################################################################
Netgear DGN2200 N300 Wireless Router – Multiple Vulnerabilities
Title: Multiple vulnerabilities in NETGEAR N300 WIRELESS ADSL2+ MODEM ROUTER DGN2200
jDisk (stickto) 2.0.3 iOS – Multiple Vulnerabilities
Document Title:
MyBB 1.6.12 – ‘misc.php’ Remote Denial of Service
source: https://www.securityfocus.com/bid/65545/info
Rhino – Cross-Site Scripting / Password Reset
source: https://www.securityfocus.com/bid/65628/info
D-Link DSL-2750B ADSL Route’ – Cross-Site Request Forgery
# Exploit Title : D-Link DSL-2750B (ADSL Router) CSRF Vulnerability
WordPress Plugin Frontend Upload – Arbitrary File Upload
# Exploit Title: Frontend Upload Wordpress Plugin - File Arbitrary Upload
WiFi Camera Roll 1.2 iOS – Multiple Vulnerabilities
Document Title:
WordPress Plugin BuddyPress 1.9.1 – Privilege Escalation
# Exploit Title: Wordpress plugin Buddypress
Titan FTP Server 10.32 Build 1816 – Directory Traversal
"Titan FTP Server Directory Traversal Vulnerabilities"
Tableau Server < 8.0.7 / < 8.1.2 - Blind SQL Injection
Trustwave's SpiderLabs Security Advisory TWSL2014-003:
phpBB 3.0.8 – Remote Denial of Service
source: https://www.securityfocus.com/bid/65481/info
MyBB Extended Useradmininfo Plugin 1.2.1 – Cross-Site Scripting
# Exploit Title: Extended Useradmininfo MyBB Plugin 1.2.1 - Cross Site
ZTE ZXV10 W300 Router – Hard-Coded Credentials
# Exploit Title: ZTE ZXV10 W300 router contains hardcoded credentials
OneHTTPD 0.8 – Crash (PoC)
# Exploit Title: onehttpd 0.8 Crash PoC
Publish-It 3.6d – ‘.pui’ Local Buffer Overflow (SEH)
#!/usr/bin ruby env
osCommerce 2.3.3.4 – ‘geo_zones.php?zID’ SQL Injection
# Title: osCommerce v2.x SQL Injection Vulnerability
S9Y Serendipity 1.7.5 – ‘Backend’ Multiple Vulnerabilities
Advisory: Serendipity 1.7.5 (Backend) - Multiple security vulnerabilities
CTERA 3.2.29.0/3.2.42.0 – Persistent Cross-Site Scripting
# Exploit Title: [CTERA Project Folders - Stored XSS]
doorGets CMS 5.2 – SQL Injection
Advisory ID: HTB23197
AuraCMS 2.3 – Multiple Vulnerabilities
Advisory ID: HTB23196
WHMCompleteSolution (WHMCS) 5.12 – ‘cart.php’ Denial of Service
source: https://www.securityfocus.com/bid/65470/info
PHP Webcam Video Conference – Multiple Vulnerabilities
# Exploit: PHP Webcam Video Conference - LFI/XSS
Joomla! 3.2.1 – SQL Injection
# Exploit Title: Joomla 3.2.1 sql injection
Asseco SEE iBank FX Client 2.0.9.3 – Local Privilege Escalation
Asseco SEE iBank FX Client icacls RichClient.exe