Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 298
SocialEngine Timeline Plugin 4.2.5p9 – Arbitrary File Upload
# Exploit Title: Sending php file in the timeline plugin cover image of SocialEngine 4.5
TEC-IT TBarCode – OCX ActiveX Control (TBarCode4.ocx 4.1.0) Crash (PoC)
# Exploit Title: TEC-IT TBarCode OCX ActiveX Control (TBarCode4.ocx 4.1.0 ) dos poc
Ginkgo CMS – ‘index.php?rang’ SQL Injection
__ ___ ________ __ __ ____ __ __
FunGamez – Arbitrary File Upload
# FunGamez Remote File Upload Vulnerability
BigACE 2.7.8 – Cross-Site Request Forgery (Add Admin)
###########################################################################################
PCMan FTP Server 2.07 – ‘PASS’ Remote Buffer Overflow
#!/usr/bin/python2.7
vTiger CRM 5.4.0 SOAP – Multiple Vulnerabilities
---------------------------------------------------------------------------------
Telmanik CMS Press 1.01b – ‘pages.php?page_name’ SQL Injection
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Agnitum Outpost Security Suite 8.1 – Local Privilege Escalation
# Exploit Title: Agnitum Outpost security suite privilege escalation - 0Day
D-Link DIR-645 1.03B08 – Multiple Vulnerabilities
Multiple vulnerabilities on D-Link DIR-645 devices
INSTEON Hub 2242-222 – Lack of Web and API Authentication
Trustwave SpiderLabs Security Advisory TWSL2013-023:
Karotz Smart Rabbit 12.07.19.00 – Multiple Vulnerabilities
Trustwave SpiderLabs Security Advisory TWSL2013-021:
MiCasaVerde VeraLite 1.5.408 – Multiple Vulnerabilities
Trustwave SpiderLabs Security Advisory TWSL2013-019:
Cotonti 0.9.13 – SQL Injection
Advisory ID: HTB23164
Western Digital My Net Wireless Routers – Password Disclosure
Vulnerable Systems:
TP-Link TL-SC3171 IP Cameras – Multiple Vulnerabilities
Core Security - Corelabs Advisory
EchoVNC Viewer – Remote Denial of Service
#!/usr/bin/env python
Linux Kernel 3.7.6 (RedHat x86/x64) – ‘MSR’ Driver Privilege Escalation
// PoC exploit for /dev/cpu/*/msr, 32bit userland on a 64bit host
SilverStripe CMS – ‘MemberLoginForm.php’ Information Disclosure
source: https://www.securityfocus.com/bid/61578/info
Jahia xCM – ‘/engines/manager.jsp?site’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/61571/info
Jahia xCM – ‘/administration/’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/61571/info
Plone – ‘in_portal.py’ < 4.1.3 Session Hijacking
source: https://www.securityfocus.com/bid/61964/info
FluxBB 1.5.3 – Multiple Vulnerabilities
FluxBB 1.5.3 Multiple Remote Vulnerabilities
Novell Client 2 SP3 – ‘nicm.sys 3.1.11.0’ Local Privilege Escalation
# Novell Client 2 SP3 Privilege escalation exploit
TRENDnet TEW-812DRU – Cross-Site Request Forgery/Command Injection Root
TRENDnet TEW-812DRU CSRF - Command Injection > Shell Exploit.
Easy Blog by JM LLC – Multiple Vulnerabilities
Dear Offensive Security,
Windu CMS 2.2 – Multiple Vulnerabilities
Windu CMS 2.2 CSRF Add Admin Exploit
Basic Forum by JM LLC – Multiple Vulnerabilities
Dear Offensive Security,
Galil-RIO Modbus – Denial of Service
# Exploit Title: Galil RIO-47100
ASUS RT-AC66U – ‘acsd’ Remote Command Execution
#!/usr/bin/env python
Broadkam PJ871 – Authentication Bypass
#!/usr/bin/perl
Symantec Web Gateway 5.1.0.x – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20130726-0 >
xmonad XMonad.Hooks.DynamicLog Module – Multiple Remote Command Injection Vulnerabilities
source: https://www.securityfocus.com/bid/61491/info
Alienvault Open Source SIEM (OSSIM) – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/61456/info
FOSCAM IP-Cameras – Improper Access Restrictions
Core Security - Corelabs Advisory
Magnolia CMS – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/61423/info
WordPress Plugin Duplicator – Cross-Site Scripting
source: https://www.securityfocus.com/bid/61425/info
vBulletin 4.0.2 – ‘update_order’ SQL Injection
source: https://www.securityfocus.com/bid/61449/info