Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 87

XMLBlueprint 16.191112 – XML External Entity Injection

# Exploit Title: XMLBlueprint 16.191112 - XML External Entity Injection

2020-01-29 Javier Olmedo local

Microsoft Windows 10 – Theme API ‘ThemePack’ File Parsing

# Exploit Title: Microsoft Windows 10 - Theme API 'ThemePack' File Parsing

2020-01-29 Eduardo Braun Prado local

Satellian 1.12 – Remote Code Execution

# Exploit Title: Satellian 1.12 - Remote Code Execution

2020-01-29 Xh4H webapps

Centreon 19.10.5 – ‘Pollers’ Remote Command Execution

# Exploit Title: Centreon 19.10.5 - 'Pollers' Remote Command Execution

2020-01-29 Omri Baso webapps

Centreon 19.10.5 – ‘centreontrapd’ Remote Command Execution

# Exploit Title: Centreon 19.10.5 - 'centreontrapd' Remote Command Execution

2020-01-29 Fabien AUNAY webapps

Fifthplay S.A.M.I 2019.2_HP – Persistent Cross-Site Scripting

# Exploit Title: Fifthplay S.A.M.I 2019.2_HP - Persistent Cross-Site Scripting

2020-01-29 LiquidWorm webapps

Adive Framework 2.0.8 – Cross-Site Request Forgery (Change Admin Password)

# Exploit Title: Adive Framework 2.0.8 - Cross-Site Request Forgery (Change Admin Password)

2020-01-28 Sarthak Saini webapps

Octeth Oempro 4.8 – ‘CampaignID’ SQL Injection

# Exploit Title: Octeth Oempro 4.8 - 'CampaignID' SQL Injection

2020-01-28 Bruno de Barros Bulle webapps

Centreon 19.10.5 – Database Credentials Disclosure

# Exploit Title: Centreon 19.10.5 - Database Credentials Disclosure

2020-01-28 Fabien AUNAY webapps

Centreon 19.10.5 – Remote Command Execution

# Exploit Title: Centreon 19.10.5 - Remote Command Execution

2020-01-28 Fabien AUNAY webapps

macOS/iOS ImageIO – Heap Corruption when Processing Malformed TIFF Image

The attached tiff image causes a crash in ImageIO on the latest macOS and iOS. To reproduce the issue, the attached c...

2020-01-28 Google Security Research dos

Torrent 3GP Converter 1.51 – Stack Overflow (SEH)

# Exploit Title: Torrent 3GP Converter 1.51 - Stack Overflow (SEH)

2020-01-27 boku local

Microsoft Windows Kernel – Information Disclosure

# PoC for the SWAPGS attack ([CVE-2019-1125](https://nvd.nist.gov/vuln/detail/CVE-2019-1125))

2020-01-27 Bitdefender local

TP-Link TP-SG105E 1.0.0 – Unauthenticated Remote Reboot

# Exploit Title: TP-Link TP-SG105E 1.0.0 - Unauthenticated Remote Reboot

2020-01-24 PCEumel webapps

Webtareas 2.0 – ‘id’ SQL Injection

# Exploit Title: Webtareas 2.0 - 'id' SQL Injection

2020-01-24 Greg.Priest webapps

OLK Web Store 2020 – Cross-Site Request Forgery

# Exploit Title: OLK Web Store 2020 - Cross-Site Request Forgery

2020-01-24 Joel Aviad Ossi webapps

Genexis Platinum-4410 2.1 – Authentication Bypass

# Exploit Title: Genexis Platinum-4410 2.1 - Authentication Bypass

2020-01-24 Husinul Sanub webapps

qdPM 9.1 – Remote Code Execution

# Exploit Title: qdPM 9.1 - Remote Code Execution

2020-01-23 Rishal Dwivedi webapps

BOOTP Turbo 2.0 – Denial of Service (SEH)(PoC)

# Exploit Title: BOOTP Turbo 2.0 - Denial of Service (SEH)(PoC)

2020-01-23 boku dos

Pachev FTP Server 1.0 – Path Traversal

# Exploit Title: Pachev FTP Server 1.0 - Path Traversal

2020-01-23 1F98D remote

Reliable Datagram Sockets (RDS) – rds_atomic_free_op NULL pointer dereference Privilege Escalation (Metasploit)

##

2020-01-23 Metasploit local

Remote Desktop Gateway – ‘BlueGate’ Denial of Service (PoC)

#include "BlueGate.h"

2020-01-23 ollypwn dos

Remote Desktop Gateway – ‘BlueGate’ Denial of Service (PoC)

#include "BlueGate.h"

2020-01-23 ollypwn dos

Citrix XenMobile Server 10.8 – XML External Entity Injection

# Exploit Title: Citrix XenMobile Server 10.8 - XML External Entity Injection

2020-01-22 Jonas Lejon webapps

KeePass 2.44 – Denial of Service (PoC)

# Exploit Title : KeePass 2.44 - Denial of Service (PoC)

2020-01-22 Mustafa Emre Gül dos

Ricoh Printer Drivers – Local Privilege Escalation

This proof of concept code monitors file changes on Ricoh's driver DLL files and overwrites

2020-01-22 pentagrid local

ManageEngine Network Configuration Manager 12.2 – ‘apiKey’ SQL Injection

# Exploit Title: ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection

2020-01-21 Ertebat Gostar Co webapps

NEOWISE CARBONFTP 1.4 – Weak Password Encryption

# Exploit Title: NEOWISE CARBONFTP 1.4 - Weak Password Encryption

2020-01-21 hyp3rlinx local

Microsoft SharePoint – Deserialization Remote Code Execution

#!/usr/bin/env python3

2020-01-21 Voulnet remote

Easy XML Editor 1.7.8 – XML External Entity Injection

# Exploit Title: Easy XML Editor 1.7.8 - XML External Entity Injection

2020-01-20 Javier Olmedo local

Adive Framework 2.0.8 – Persistent Cross-Site Scripting

# Exploit Title: Adive Framework 2.0.8 - Persistent Cross-Site Scripting

2020-01-20 Sarthak Saini webapps

Sysax Multi Server 5.50 – Denial of Service (PoC)

# Exploit Title: Sysax Multi Server 5.50 - Denial of Service (PoC)

2020-01-20 Shailesh Kumavat dos

Centreon 19.04 – Authenticated Remote Code Execution (Metasploit)

####################################################################

2020-01-20 TheCyberGeek webapps

APKF Product Key Finder 2.5.8.0 – ‘Name’ Denial of Service (PoC)

# Exploit Title: APKF Product Key Finder 2.5.8.0 - 'Name' Denial of Service (PoC)

2020-01-17 Ismail Tasdelen dos

Torrent FLV Converter 1.51 Build 117 – Stack Oveflow (SEH partial overwrite)

# Exploit Title: Torrent FLV Converter 1.51 Build 117 - Stack Oveflow (SEH partial overwrite)

2020-01-17 antonio local

WordPress Plugin InfiniteWP Client 1.9.4.5 – Authentication Bypass

# Exploit Title: Wordpress Plugin InfiniteWP Client 1.9.4.5 - Authentication Bypass

2020-01-17 Raphael Karger webapps

Trend Micro Maximum Security 2019 – Arbitrary Code Execution

# Exploit Title: Trend Micro Maximum Security 2019 - Arbitrary Code Execution

2020-01-17 hyp3rlinx local

WordPress Plugin Time Capsule 1.21.16 – Authentication Bypass

# Exploit Title: Wordpress Time Capsule Plugin 1.21.16 - Authentication Bypass

2020-01-17 B. Canavate webapps

GTalk Password Finder 2.2.1 – ‘Key’ Denial of Service (PoC)

# Exploit Title: GTalk Password Finder 2.2.1 - 'Key' Denial of Service (PoC)

2020-01-17 Ismail Tasdelen dos

Trend Micro Maximum Security 2019 – Privilege Escalation

# Exploit Title: Trend Micro Maximum Security 2019 - Privilege Escalation

2020-01-17 hyp3rlinx local

Plantronics Hub 3.13.2 – SpokesUpdateService Privilege Escalation (Metasploit)

##

2020-01-17 Metasploit local

WordPress Plugin Postie 1.9.40 – Persistent Cross-Site Scripting

# Exploit Title: WordPress Plugin Postie 1.9.40 - Persistent Cross-Site Scripting

2020-01-16 V1n1v131r4 webapps

Rukovoditel Project Management CRM 2.5.2 – ‘reports_id’ SQL Injection

# Exploit Title: Rukovoditel Project Management CRM 2.5.2 - 'reports_id' SQL Injection

2020-01-16 Fatih Çelik webapps

Jenkins Gitlab Hook Plugin 1.4.2 – Reflected Cross-Site Scripting

# Exploit Title: Jenkins Gitlab Hook Plugin 1.4.2 - Reflected Cross-Site Scripting

2020-01-16 Ai Ho webapps

Online Book Store 1.0 – Arbitrary File Upload

# Exploit Title: Online Book Store 1.0 - Arbitrary File Upload

2020-01-16 Or4nG.M4N webapps

Tautulli 2.1.9 – Denial of Service (Metasploit)

##

2020-01-16 Ismail Tasdelen dos

Citrix Application Delivery Controller (ADC) and Gateway 13.0 – Path Traversal

# Exploit Title: Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path Traversal

2020-01-16 Dhiraj Mishra webapps

Rukovoditel Project Management CRM 2.5.2 – ‘entities_id’ SQL Injection

# Exploit Title: Rukovoditel Project Management CRM 2.5.2 - 'entities_id' SQL Injection

2020-01-16 Fatih Çelik webapps

SunOS 5.10 Generic_147148-26 – Local Privilege Escalation

# Exploit: SunOS 5.10 Generic_147148-26 - Local Privilege Escalation

2020-01-16 Marco Ivaldi local

Rukovoditel Project Management CRM 2.5.2 – ‘filters’ SQL Injection

# Exploit Title: Rukovoditel Project Management CRM 2.5.2 - 'filters' SQL Injection

2020-01-16 Fatih Çelik webapps