Google SLO-Generator 2.0.0 – Code Execution
# Exploit Title: Google SLO-Generator 2.0.0 - Code Execution
linux
linux 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Apache James Server 2.3.2 – Remote Command Execution (RCE) (Authenticated) (2)
# Exploit Title: Apache James Server 2.3.2 - Remote Command Execution (RCE) (Authenticated) (2)
MySQL User-Defined (Linux) x32 / x86_64 – ‘sys_exec’ Local Privilege Escalation (2)
# Exploit Title: MySQL User-Defined (Linux) x32 / x86_64 - 'sys_exec' Local Privilege Escalation (2)
Usermin 1.820 – Remote Code Execution (RCE) (Authenticated)
# Title: Usermin 1.820 - Remote Code Execution (RCE) (Authenticated)
crossfire-server 1.9.0 – ‘SetUp()’ Remote Buffer Overflow
# Exploit Title: crossfire-server 1.9.0 - 'SetUp()' Remote Buffer Overflow
CentOS Web Panel 0.9.8.1081 – Stored Cross-Site Scripting (XSS)
# Exploit Title: CentOS Web Panel 0.9.8.1081 - Stored Cross-Site Scripting (XSS)
Webmin 1.973 – ‘run.cgi’ Cross-Site Request Forgery (CSRF)
# Exploit Title: Webmin 1.973 - 'run.cgi' Cross-Site Request Forgery (CSRF)
Linux Kernel 2.6.19 < 5.9 - 'Netfilter Local Privilege Escalation
// clang-format off
Webmin 1.973 – ‘save_user.cgi’ Cross-Site Request Forgery (CSRF)
# Exploit Title: Webmin 1.973 - 'save_user.cgi' Cross-Site Request Forgery (CSRF)
Rocket.Chat 3.12.1 – NoSQL Injection to RCE (Unauthenticated) (2)
# Title: Rocket.Chat 3.12.1 - NoSQL Injection to RCE (Unauthenticated) (2)
Polkit 0.105-26 0.117-2 – Local Privilege Escalation
# Exploit Title: Polkit 0.105-26 0.117-2 - Local Privilege Escalation
Rocket.Chat 3.12.1 – NoSQL Injection (Unauthenticated)
# Title: Rocket.Chat 3.12.1 - NoSQL Injection to RCE (Unauthenticated)
Selenium 3.141.59 – Remote Code Execution (Firefox/geckodriver)
# Exploit Title: Selenium 3.141.59 - Remote Code Execution (Firefox/geckodriver)
ProFTPd 1.3.5 – ‘mod_copy’ Remote Command Execution (2)
# Exploit Title: ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution (2)
ZeroShell 3.9.0 – Remote Command Execution
# Exploit Title: ZeroShell 3.9.0 - Remote Command Execution
GNU Wget < 1.18 - Arbitrary File Upload (2)
# Exploit Title: GNU Wget < 1.18 - Arbitrary File Upload / Remote Code Execution (2)
MariaDB 10.2 – ‘wsrep_provider’ OS Command Execution
# Exploit Title: MariaDB 10.2 /MySQL - 'wsrep_provider' OS Command Execution
Linux Kernel 5.4 – ‘BleedingTooth’ Bluetooth Zero-Click Remote Code Execution
# Exploit Title: Linux Kernel 5.4 - 'BleedingTooth' Bluetooth Zero-Click Remote Code Execution
ScadaBR 1.0 – Arbitrary File Upload (Authenticated) (2)
# Exploit Title: ScadaBR 1.0 - Arbitrary File Upload (Authenticated) (2)
AnyDesk 5.5.2 – Remote Code Execution
# Exploit Title: AnyDesk 5.5.2 - Remote Code Execution
Apport 2.20 – Local Privilege Escalation
# Exploit Title: Apport 2.20 - Local Privilege Escalation
Cassandra Web 0.5.0 – Remote File Read
# Exploit Title: Cassandra Web 0.5.0 - Remote File Read
Zoom Meeting Connector 4.6.239.20200613 – Remote Root Exploit (Authenticated)
# Exploit Title: Zoom Meeting Connector 4.6.239.20200613 - Remote Root Exploit (Authenticated)
TerraMaster TOS 4.2.06 – RCE (Unauthenticated)
# Exploit Title: TerraMaster TOS 4.2.06 - RCE (Unauthenticated)
Raysync 3.3.3.8 – RCE
# Exploit Title: Raysync 3.3.3.8 - RCE
libbabl 0.1.62 – Broken Double Free Detection (PoC)
# Exploit Title: libbabl 0.1.62 - Broken Double Free Detection (PoC)
Mitel mitel-cs018 – Call Data Information Disclosure
# Exploit Title: Mitel mitel-cs018 - Call Data Information Disclosure
libupnp 1.6.18 – Stack-based buffer overflow (DoS)
# Exploit Title: libupnp 1.6.18 - Stack-based buffer overflow (DoS)
Oracle Business Intelligence Enterprise Edition 5.5.0.0.0 / 12.2.1.3.0 / 12.2.1.4.0 – ‘getPreviewImage’ Directory Traversal/Local File Inclusion
# Exploit Title: Oracle Business Intelligence Enterprise Edition 5.5.0.0.0 / 12.2.1.3.0 / 12.2.1.4.0 - 'getPreviewIma...
Blueman < 2.1.4 - Local Privilege Escalation
# Exploit Title: Local Privilege Escalation in Blueman < 2.1.4
aptdaemon < 1.1.1 - File Existence Disclosure
# Exploit Title: File Existence Disclosure in aptdaemon
PackageKit < 1.1.13 - File Existence Disclosure
# Exploit Title: File Existence Disclosure in PackageKit < 1.1.13-2ubuntu1
Gnome Fonts Viewer 3.34.0 – Heap Corruption
#!/usr/bin/env python3
Aruba ClearPass Policy Manager 6.7.0 – Unauthenticated Remote Command Execution
# Exploit Title: Aruba ClearPass Policy Manager 6.7.0 - Unauthenticated Remote Command Execution
Grafana 7.0.1 – Denial of Service (PoC)
# Exploit Title: Grafana 7.0.1 - Denial of Service (PoC)
vCloud Director 9.7.0.15498291 – Remote Code Execution
#!/usr/bin/python
Pi-hole 4.4.0 – Remote Code Execution (Authenticated)
# Exploit Title: Pi-hole 4.4.0 - Remote Code Execution (Authenticated)
Pi-hole < 4.4 - Authenticated Remote Code Execution / Privileges Escalation
#!/usr/bin/env python3
Pi-hole < 4.4 - Authenticated Remote Code Execution
#!/usr/bin/env python3
Mahara 19.10.2 CMS – Persistent Cross-Site Scripting
# Title: Mahara 19.10.2 CMS - Persistent Cross-Site Scripting
dnsmasq-utils 2.79-1 – ‘dhcp_release’ Denial of Service (PoC)
# Exploit Title: dnsmasq-utils 2.79-1 - 'dhcp_release' Denial of Service (PoC)