Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 88

Online Book Store 1.0 – ‘bookisbn’ SQL Injection

# Exploit Title: Online Book Store 1.0 - 'bookisbn' SQL Injection

2020-01-15 Ertebat Gostar Co webapps

Huawei HG255 – Directory Traversal (Metasploit)

##

2020-01-15 Ismail Tasdelen webapps

Barco WePresent – file_transfer.cgi Command Injection (Metasploit)

##

2020-01-15 Metasploit remote

Microsoft Windows – CryptoAPI (Crypt32.dll) Elliptic Curve Cryptography (ECC) Spoof Code-Signing Certificate

# EDB Note ~ Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/47933.zip

2020-01-15 Oliver Lyak local

Sagemcom F@ST 3890 (50_10_19-T1) Cable Modem – ‘Cable Haunt’ Remote Code Execution

// EDB Note: Download ~ https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/47936.zip

2020-01-15 Lyrebirds remote

VPN unlimited 6.1 – Unquoted Service Path

# Exploit Title: VPN unlimited 6.1 - Unquoted Service Path

2020-01-14 Amin Rawah local

IBM RICOH InfoPrint 6500 Printer – HTML Injection

# Exploit Title: IBM RICOH InfoPrint 6500 Printer - HTML Injection

2020-01-14 Ismail Tasdelen webapps

IBM RICOH 6400 Printer – HTML Injection

# Exploit Title: IBM RICOH 6400 Printer - HTML Injection

2020-01-14 Ismail Tasdelen webapps

Redir 3.3 – Denial of Service (PoC)

# Exploit Title: Redir 3.3 - Denial of Service (PoC)

2020-01-14 hieubl dos

WeChat – Memory Corruption in CAudioJBM::InputAudioFrameToJBM

There is a memory corruption vulnerability in audio processing during a voice call in WeChat. When an RTP packet is p...

2020-01-14 Google Security Research dos

Android – ashmem Readonly Bypasses via remap_file_pages() and ASHMEM_UNPIN

This bug report describes two ways in which an attacker can modify the contents

2020-01-14 Google Security Research dos

Chevereto 3.13.4 Core – Remote Code Execution

# Exploit Title: Chevereto 3.13.4 Core - Remote Code Execution

2020-01-13 Jinny Ramsmark webapps

SpotDialup 1.6.7 – ‘Name’ Denial of Service (PoC)

# Exploit Title: SpotDialup 1.6.7 - 'Name' Denial of Service (PoC)

2020-01-13 Ismail Tasdelen dos

Advanced System Repair Pro 1.9.1.7 – Insecure File Permissions

# Exploit Title: Advanced System Repair Pro 1.9.1.7 - Insecure File Permissions

2020-01-13 ZwX local

SpotOutlook 1.2.6 – ‘Name’ Denial of Service (PoC)

# Exploit Title: SpotOutlook 1.2.6 - 'Name' Denial of Service (PoC)

2020-01-13 Ismail Tasdelen dos

Top Password Software Dialup Password Recovery 1.30 – Denial of Service (PoC)

# Exploit Title: Top Password Software Dialup Password Recovery 1.30 - Denial of Service (PoC)

2020-01-13 antonio dos

Allok Video Converter 4.6.1217 – Stack Overflow (SEH)

# Exploit Title: Allok Video Converter 4.6.1217 - Stack Overflow (SEH)

2020-01-13 antonio local

Backup Key Recovery 2.2.5 – ‘Name’ Denial of Service (PoC)

# Exploit Title: Backup Key Recovery 2.2.5 - 'Name' Denial of Service (PoC)

2020-01-13 Ismail Tasdelen dos

Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 – Stack Overflow (SEH)

# Exploit Title: Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 - Stack Overflow (SEH)

2020-01-13 antonio local

TaskCanvas 1.4.0 – ‘Registration’ Denial Of Service

# Exploit Title: TaskCanvas 1.4.0 - 'Registration' Denial Of Service

2020-01-13 Ismail Tasdelen dos

Top Password Firefox Password Recovery 2.8 – Denial of Service (PoC)

# Exploit Title: Top Password Firefox Password Recovery 2.8 - Denial of Service (PoC)

2020-01-13 antonio dos

Citrix Application Delivery Controller and Gateway 10.5 – Remote Code Execution (Metasploit)

##

2020-01-13 mekhalleh webapps

Digi AnywhereUSB 14 – Reflective Cross-Site Scripting

# Exploit Title: Digi AnywhereUSB 14 - Reflective Cross-Site Scripting

2020-01-13 Raspina Net Pars Group webapps

Microsoft Windows 10 build 1809 – Local Privilege Escalation (UAC Bypass)

# Exploit Title: Microsoft Windows 10 - Local Privilege Escalation (UAC Bypass)

2020-01-13 Nassim Asrir local

Citrix Application Delivery Controller and Citrix Gateway – Remote Code Execution (PoC)

#!/bin/bash

2020-01-11 Project Zero India webapps

Citrix Application Delivery Controller and Citrix Gateway – Remote Code Execution

#!/usr/bin/python3

2020-01-11 TrustedSec webapps

TotalAV 2020 4.14.31 – Privilege Escalation

# Exploit Title: TotalAV 2020 4.14.31 - Privilege Escalation

2020-01-10 Kusol Watchara-Apanukorn local

Pandora 7.0NG – Remote Code Execution

# Exploit Title: Pandora 7.0NG - Remote Code Execution

2020-01-10 Askar webapps

PixelStor 5000 K:4.0.1580-20150629 – Remote Code Execution

# Exploit Title: PixelStor 5000 - Remote Code Execution

2020-01-10 .:UND3R:. webapps

ASTPP 4.0.1 VoIP Billing – Database Backup Download

# Exploit Title: ASTPP 4.0.1 VoIP Billing - Database Backup Download

2020-01-10 Fabien AUNAY webapps

ZIP Password Recovery 2.30 – ‘ZIP File’ Denial of Service (PoC)

# Exploit Title: ZIP Password Recovery 2.30 - 'ZIP File' Denial of Service (PoC)

2020-01-09 ZwX dos

Oracle Weblogic 10.3.6.0.0 – Remote Command Execution

# Exploit Title: Oracle Weblogic 10.3.6.0.0 - Remote Command Execution

2020-01-09 james webapps

MSN Password Recovery 1.30 – XML External Entity Injection

# Exploit Title: MSN Password Recovery 1.30 - XML External Entity Injection

2020-01-09 ZwX local

Cisco DCNM JBoss 10.4 – Credential Leakage

# Exploit Title: Cisco DCNM JBoss 10.4 - Credential Leakage

2020-01-08 hantwister remote

Codoforum 4.8.3 – ‘input_txt’ Persistent Cross-Site Scripting

# Exploit Title: Codoforum 4.8.3 - Persistent Cross-Site Scripting

2020-01-08 Vyshnav nk webapps

Online Book Store 1.0 – Unauthenticated Remote Code Execution

# Exploit Title: Online Book Store 1.0 - Unauthenticated Remote Code Execution

2020-01-08 Tib3rius webapps

EBBISLAND EBBSHAVE 6100-09-04-1441 – Remote Buffer Overflow

# Exploit Title: EBBISLAND EBBSHAVE 6100-09-04-1441 - Remote Buffer Overflow

2020-01-08 hantwister remote

ASTPP VoIP 4.0.1 – Remote Code Execution

# Exploit Title: ASTPP VoIP 4.0.1 - Remote Code Execution

2020-01-08 Fabien AUNAY remote

JetBrains TeamCity 2018.2.4 – Remote Code Execution

# Exploit Title: JetBrains TeamCity 2018.2.4 - Remote Code Execution

2020-01-08 hantwister remote

Tomcat proprietaryEvaluate 9.0.0.M1 – Sandbox Escape

# Exploit Title: Tomcat proprietaryEvaluate 9.0.0.M1 - Sandbox Escape

2020-01-08 hantwister webapps

Job Portal 1.0 – Remote Code Execution

# Exploit Title: Job Portal 1.0 - Remote Code Execution

2020-01-07 Tib3rius webapps

piSignage 2.6.4 – Directory Traversal

# Exploit Title: piSignage 2.6.4 - Directory Traversal

2020-01-07 JunYeong Ko webapps

AnyDesk 5.4.0 – Unquoted Service Path

# Exploit Title: AnyDesk 5.4.0 - Unquoted Service Path

2020-01-07 SajjadBnd local

Complaint Management System 4.0 – Remote Code Execution

# Exploit Title: Complaint Management System 4.0 - Remote Code Execution

2020-01-07 Metin Yunus Kandemir webapps

Microsoft Windows 10 (19H1 1901 x64) – ‘ws2ifsl.sys’ Use After Free Local Privilege Escalation (kASLR kCFG SMEP)

The exploit works on 19H1.

2020-01-07 bluefrostsec local

Dairy Farm Shop Management System 1.0 – ‘username’ SQL Injection

# Exploit Title: Dairy Farm Shop Management System 1.0 - 'username' SQL Injection

2020-01-06 Chris Inzinga webapps

Complaint Management System 4.0 – ‘cid’ SQL injection

# Exploit Title: Complaint Management System 4.0 - 'cid' SQL injection

2020-01-06 FULLSHADE webapps

NetShareWatcher 1.5.8.0 – ‘Name’ Denial Of Service

# Exploit Title: NetShareWatcher 1.5.8.0 - 'Name' Denial Of Service

2020-01-06 Ismail Tasdelen dos

SpotFTP FTP Password Recovery 3.0.0.0 – ‘Key’ Denial of Service (PoC)

# Exploit Title: SpotFTP FTP Password Recovery 3.0.0.0 - 'Key' Denial of Service (PoC)

2020-01-06 Ismail Tasdelen dos

IBM RICOH Infoprint 1532 Printer – Persistent Cross-Site Scripting

# Exploit Title: IBM RICOH Infoprint 1532 Printer - Persistent Cross-Site Scripting

2020-01-06 Ismail Tasdelen webapps