multiple

multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Oracle WebLogic – wls-wsat Component Deserialization Remote Code Execution (Metasploit)

##

2018-01-29 Metasploit remote

Nexpose < 6.4.66 - Cross-Site Request Forgery

# Exploit Title: [Cross Site Request Forgery at Nexpose Automated Actions]

2018-01-28 Shwetabh Vishnoi webapps

Werkzeug – ‘Debug Shell’ Command Execution

#!/usr/bin/env python

2018-01-28 Ali BawazeEer remote

Artifex MuJS 1.0.2 – Integer Overflow

# Exploit Title: DoS caused by the interactive call between two functions

2018-01-28 Andrea Sindoni dos

Artifex MuJS 1.0.2 – Denial of Service

Hello,

2018-01-28 Andrea Sindoni dos

BMC BladeLogic 8.3.00.64 – Remote Command Execution

# Exploit Title: BMC BladeLogic RSCD agent remote exec - XMLRPC version

2018-01-26 Paul Taylor remote

Oracle VirtualBox < 5.1.30 / < 5.2-rc1 - Guest to Host Escape

# SSD Advisory – Oracle VirtualBox Multiple Guest to Host Escape Vulnerabilities

2018-01-24 SecuriTeam local

GoAhead Web Server 2.5 < 3.6.5 - HTTPd 'LD_PRELOAD' Arbitrary Module Load (Metasploit)

##

2018-01-24 Metasploit remote

NEC Univerge SV9100/SV8100 WebPro 10.0 – Configuration Download

NEC Univerge SV9100/SV8100 WebPro 10.0 Remote Configuration Download

2018-01-23 LiquidWorm webapps

DarkComet (C2 Server) – File Upload

#!/usr/bin/env python3

2018-01-15 Pseudo Laboratories webapps

Transmission – RPC DNS Rebinding

The transmission bittorrent client uses a client/server architecture, the user interface is the client and a daemon r...

2018-01-11 Google Security Research remote

Parity Browser < 1.6.10 - Bypass Same Origin Policy

VuNote

2018-01-10 tintinweb local

SAP NetWeaver J2EE Engine 7.40 – SQL Injection

#!/usr/bin/env python

2018-01-10 Vahagn Vardanyan webapps

Oracle WebLogic < 10.3.6 - 'wls-wsat' Component Deserialisation Remote Command Execution

#!/usr/bin/env python

2018-01-03 Kevin Kirsche remote

Multiple CPUs – ‘Spectre’ Information Disclosure

EDB Note:

2018-01-03 Multiple local

EMC xPression 4.5SP1 Patch 13 – ‘model.jobHistoryId’ SQL Injection

Title: EMC xDashboard - SQL Injection Vulnerability

2018-01-03 Pawel Gocyla webapps

SAP BusinessObjects launch pad – Server-Side Request Forgery

# Exploit Title: SAP BusinessObjects launch pad SSRF

2017-12-27 Ahmad Mahfouz webapps

Oracle WebLogic Server 10.3.6.0.0 / 12.x – Remote Command Execution

import requests

2017-12-26 1337g remote

Vitek – Remote Command Execution / Information Disclosure (PoC)

[STX]

2017-12-22 bashis remote

Ability Mail Server 3.3.2 – Cross-Site Scripting

# Exploit Title: Ability Mail Server 3.3.2 Persistent Cross Site Scripting (XSS)

2017-12-20 Aloyce J. Makalanga webapps

Conarc iChannel – Improper Access Restrictions

# Exploit Title: Conarc iChannel - Unauthenticated Access/Default Webserver Misconfiguration allows for compromise of...

2017-12-20 Information Paradox webapps

Trend Micro Smart Protection Server – Session Hijacking / Log File Disclosure / Remote Command Execution / Cron Job Injection / Local File Inclusion / Stored Cross-Site Scripting / Improper Access Control

# Trend Micro Smart Protection Server Multiple Vulnerabilities

2017-12-19 CoreLabs remote

Jenkins – XStream Groovy classpath Deserialization (Metasploit)

##

2017-12-19 Metasploit remote

Multiple OEM – ‘nsd’ Remote Stack Format String (PoC)

[STX]

2017-12-14 bashis dos

vBulletin 5.x – ‘cacheTemplates’ Remote Arbitrary File Deletion

# SSD Advisory – vBulletin cacheTemplates Unauthenticated Remote Arbitrary File Deletion

2017-12-13 SecuriTeam webapps

vBulletin 5.x – ‘routestring’ Remote Code Execution

# SSD Advisory – vBulletin routestring Unauthenticated Remote Code Execution

2017-12-13 SecuriTeam webapps

Vivotek IP Cameras – Remote Stack Overflow (PoC)

[STX]

2017-12-12 bashis remote

Apple macOS/iOS – Kernel Double Free due to Incorrect API Usage in Flow Divert Socket Option Handling

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1373

2017-12-12 Google Security Research dos

Apple macOS/iOS – Multiple Kernel Use-After-Frees due to Incorrect IOKit Object Lifetime Management in IOTimeSyncClockManagerUserClient

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1377

2017-12-12 Google Security Research dos

Apple XNU Kernel – Memory Corruption due to Integer Overflow in __offsetof Usage in posix_spawn on 32-bit Platforms

posix_spawn is a complex syscall which takes a lot of arguments from userspace. The third argument

2017-12-12 Google Security Research dos

Apple macOS/iOS – Kernel Double Free due to IOSurfaceRootUserClient not Respecting MIG Ownership Rules

I have previously detailed the lifetime management paradigms in MIG in the writeups for:

2017-12-11 Google Security Research dos

Wireshark 2.4.0 < 2.4.2 / 2.2.0 < 2.2.10 - CIP Safety Dissector Crash

Summary

2017-12-07 Wireshark dos

MistServer 2.12 – Cross-Site Scripting

[+] Credits: John Page (aka Hyp3rlinX)

2017-12-01 hyp3rlinx webapps

Axis Communications MPQT/PACS – Heap Overflow / Information Leakage

[STX]

2017-11-30 bashis remote

Exim 4.89 – ‘BDAT’ Denial of Service

While parsing BDAT data header, exim still scans for '.' and consider it the end of mail.

2017-11-27 meh dos