AVS Audio Converter 9.1.2.600 – Stack Overflow (PoC)
# Exploit Title: AVS Audio Converter 9.1.2.600 - Stack Overflow (PoC)
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 90
elearning-script 1.0 – Authentication Bypass
# Exploit Title: elearning-script 1.0 - Authentication Bypass
FTP Navigator 8.03 – Stack Overflow (SEH)
# Exploit Title: FTP Navigator 8.03 - Stack Overflow (SEH)
XEROX WorkCentre 6655 Printer – Cross-Site Request Forgery (Add Admin)
# Exploit Title: XEROX WorkCentre 6655 Printer - Cross-Site Request Forgery (Add Admin)
Thrive Smart Home 1.1 – Authentication Bypass
# Exploit: Thrive Smart Home 1.1 - Authentication Bypass
XEROX WorkCentre 7855 Printer – Cross-Site Request Forgery (Add Admin)
# Exploit Title: XEROX WorkCentre 7855 Printer - Cross-Site Request Forgery (Add Admin)
XEROX WorkCentre 7830 Printer – Cross-Site Request Forgery (Add Admin)
# Exploit Title: XEROX WorkCentre 7830 Printer - Cross-Site Request Forgery (Add Admin)
WEMS BEMS 21.3.1 – Undocumented Backdoor Account
# Exploit: WEMS BEMS 21.3.1 - Undocumented Backdoor Account
Wing FTP Server 6.0.7 – Unquoted Service Path
# Exploit Title: Wing FTP Server 6.0.7 - Unquoted Service Path
AVE DOMINAplus 1.10.x – Credential Disclosure
# Exploit: AVE DOMINAplus 1.10.x - Credential Disclosure
AVE DOMINAplus 1.10.x – Unauthenticated Remote Reboot
# Exploit: AVE DOMINAplus 1.10.x - Unauthenticated Remote Reboot
AVE DOMINAplus 1.10.x – Cross-Site Request Forgery (enable/disable alarm)
# Exploit: AVE DOMINAplus 1.10.x - Cross-Site Request Forgery (enable/disable alarm)
AVE DOMINAplus 1.10.x – Authentication Bypass
# Exploit: AVE DOMINAplus 1.10.x - Authentication Bypass
Heatmiser Netmonitor 3.03 – Hardcoded Credentials
# Exploit Title: Heatmiser Netmonitor 3.03 - Hardcoded Credentials
MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 – Information Disclosure
# Exploit: MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 - Information Disclosure
Domain Quester Pro 6.02 – Stack Overflow (SEH)
# Exploit Title: Domain Quester Pro 6.02 - Stack Overflow (SEH)
RICOH SP 4510SF Printer – HTML Injection
# Exploit Title: RICOH SP 4510SF Printer - HTML Injection
RICOH Web Image Monitor 1.09 – HTML Injection
# Exploit Title: RICOH Web Image Monitor 1.09 - HTML Injection
Heatmiser Netmonitor 3.03 – HTML Injection
# Exploit Title: Heatmiser Netmonitor 3.03 - HTML Injection
FreeBSD-SA-19:02.fd – Privilege Escalation
# Exploit: FreeBSD-SA-19:02.fd - Privilege Escalation
FreeBSD-SA-19:15.mqueuefs – Privilege Escalation
# Exploit: FreeBSD-SA-19:15.mqueuefs - Privilege Escalation
Django < 3.0 < 2.2 < 1.11 - Account Hijack
EDB Note ~ Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/47879.zip
XnConvert 1.82 – Denial of Service (PoC)
# Exploit Title: XnConvert 1.82 - Denial of Service (PoC)
Prime95 Version 29.8 build 6 – Buffer Overflow (SEH)
# Exploit Title: Prime95 Version 29.8 build 6 - Buffer Overflow (SEH)
Microsoft Windows 10 BasicRender.sys – Denial of Service (PoC)
# Exploit Title: Microsoft Windows 10 BasicRender.sys - Denial of Service (PoC)
phpMyChat-Plus 1.98 – ‘pmc_username’ Reflected Cross-Site Scripting
# Exploit Title: phpMyChat-Plus 1.98 - 'pmc_username' Reflected Cross-Site Scripting
FreeSWITCH 1.10.1 – Command Execution
# Exploit Title: FreeSWITCH 1.10.1 - Command Execution
FTP Navigator 8.03 – ‘Custom Command’ Denial of Service (SEH)
# Exploit Title: FTP Navigator 8.03 - 'Custom Command' Denial of Service (SEH)
SurfOffline Professional 2.2.0.103 – ‘Project Name’ Denial of Service (SEH)
# Exploit Title: SurfOffline Professional 2.2.0.103 - 'Project Name' Denial of Service (SEH)
Deutsche Bahn Ticket Vending Machine Local Kiosk – Privilege Escalation
# Exploit Title: Deutsche Bahn Ticket Vending Machine Local Kiosk - Privilege Escalation
Tautulli 2.1.9 – Cross-Site Request Forgery (ShutDown)
# Exploit Title: Tautulli 2.1.9 - Cross-Site Request Forgery (ShutDown)
XnView 2.49.1 – ‘Research’ Denial of Service (PoC)
# Exploit Title: XnView 2.49.1 - 'Research' Denial of Service (PoC)
Xerox AltaLink C8035 Printer – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Xerox AltaLink C8035 Printer - Cross-Site Request Forgery (Add Admin)
AVS Audio Converter 9.1 – ‘Exit folder’ Buffer Overflow
# Exploit Title: AVS Audio Converter 9.1 - 'Exit folder' Buffer Overflow
Rumpus FTP Web File Manager 8.2.9.1 – Reflected Cross-Site Scripting
# Exploit Title: Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting
macOS 10.14.6 (18G87) – Kernel Use-After-Free due to Race Condition in wait_for_namespace_event()
The XNU function wait_for_namespace_event() in bsd/vfs/vfs_syscalls.c releases a file descriptor for use by userspace...
Telerik UI – Remote Code Execution via Insecure Deserialization
See the full write-up at Bishop Fox, CVE-2019-18935: https://know.bishopfox.com/research/cve-2019-18935-remote-code-e...
Zendesk App SweetHawk Survey 1.6 – Persistent Cross-Site Scripting
# Exploit Title: Zendesk App SweetHawk Survey 1.6 - Persistent Cross-Site Scripting
Netgear R6400 – Remote Code Execution
# Exploit Title: Netgear R6400 - Remote Code Execution
NopCommerce 4.2.0 – Privilege Escalation
# Vulnerability Title: NopCommerce 4.2.0 - Privilege Escalation
WordPress Core < 5.3.x - 'xmlrpc.php' Denial of Service
#!/usr/bin/env python
D-Link DIR-615 Wireless Router – Persistent Cross-Site Scripting
# Exploit Title: D-Link DIR-615 Wireless Router - Persistent Cross-Site Scripting
Roxy Fileman 1.4.5 – Directory Traversal
# Exploit Title: Roxy Fileman 1.4.5 - Directory Traversal
D-Link DIR-615 – Privilege Escalation
# Exploit Title: D-Link DIR-615 - Privilege Escalation
Linux 5.3 – Privilege Escalation via io_uring Offload of sendmsg() onto Kernel Thread with Kernel Creds
Since commit 0fa03c624d8f ("io_uring: add support for sendmsg()", first in v5.3),
OpenBSD 6.x – Dynamic Loader Privilege Escalation
Qualys Security Advisory
NVMS 1000 – Directory Traversal
# Title: NVMS-1000 - Directory Traversal
FTP Commander Pro 8.03 – Local Stack Overflow
# Exploit Title: FTP Commander Pro 8.03 - Local Stack Overflow
Lenovo Power Management Driver 1.67.17.48 – ‘pmdrvs.sys’ Denial of Service (PoC)
# Exploit Title: Lenovo Power Management Driver 1.67.17.48 - 'pmdrvs.sys' Denial of Service (PoC)