unix

unix 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

vsftpd 2.3.4 – Backdoor Command Execution

# Exploit Title: vsftpd 2.3.4 - Backdoor Command Execution

2021-04-12 HerculesRD remote

Xorg X11 Server – Local Privilege Escalation (Metasploit)

##

2019-11-20 Metasploit local

Cisco UCS Director – default scpuser password (Metasploit)

##

2019-09-03 Metasploit remote

Schneider Electric Pelco Endura NET55XX Encoder – Authentication Bypass (Metasploit)

##

2019-07-29 Metasploit remote

Apache mod_ssl < 2.8.7 OpenSSL - 'OpenFuckV2.c' Remote Buffer Overflow (2)

#include

2019-07-07 Brian Peters remote

Emacs – movemail Privilege Escalation (Metasploit)

##

2018-12-04 Metasploit local

Morris Worm – sendmail Debug Mode Shell Escape (Metasploit)

##

2018-11-06 Metasploit remote

HP Jetdirect – Path Traversal Arbitrary Code Execution (Metasploit)

##

2018-08-27 Metasploit remote

IBM QRadar SIEM – Remote Code Execution (Metasploit)

##

2018-07-11 Metasploit remote

Quest KACE Systems Management – Command Injection (Metasploit)

##

2018-06-27 Metasploit remote

Palo Alto Networks – ‘readSessionVarsFromFile()’ Session Corruption (Metasploit)

##

2018-05-08 Metasploit remote

Cambium ePMP1000 – ‘ping’ Shell via Command Injection (Metasploit)

##

2018-01-01 Metasploit remote

Polycom Shell HDX Series – Traceroute Command Execution (Metasploit)

##

2017-12-07 Metasploit remote

pfSense – (Authenticated) Group Member Remote Command Execution (Metasploit)

##

2017-11-29 Metasploit remote

tnftp – ‘savefile’ Arbitrary Command Execution (Metasploit)

##

2017-11-03 Metasploit remote

Polycom – Command Shell Authorization Bypass (Metasploit)

##

2017-10-23 Metasploit remote

VICIdial 2.9 RC 1 < 2.13 RC1 - 'user_authorization' Command Execution (Metasploit)

##

2017-07-24 Metasploit remote

GoAutoDial CE 3.3 – Authentication Bypass / Command Injection (Metasploit)

##

2017-07-05 Metasploit remote

SunOS 5.11 ICMP – Denial of Service

#include

2017-01-22 Todor Donev dos

Ubiquiti airOS – Arbitrary File Upload (Metasploit)

##

2016-05-25 Metasploit remote

Dell KACE K1000 – Arbitrary File Upload (Metasploit)

##

2016-04-13 Metasploit remote

SixApart MovableType – Storable Perl Code Execution (Metasploit)

##

2015-05-12 Metasploit remote

ActualAnalyzer – ‘ant’ Cookie Command Execution (Metasploit)

##

2014-12-16 Metasploit remote

Centreon – SQL Injection / Command Injection (Metasploit)

##

2014-10-27 Metasploit remote

F5 iControl – Remote Command Execution (Metasploit)

##

2014-10-09 Metasploit remote

Unitrends Enterprise Backup 7.3.0 – Root Remote Code Execution (Metasploit)

Unitrends Enterprise Backup 7.3.0

2014-04-15 Brandon Perry remote

Sophos Web Protection Appliance Interface – (Authenticated) Arbitrary Command Execution (Metasploit)

##

2014-04-10 Metasploit remote

FreePBX – ‘config.php’ Remote Code Execution (Metasploit)

##

2014-03-25 Metasploit remote

Quantum vmPRO – Backdoor Command (Metasploit)

##

2014-03-19 Metasploit remote

Loadbalancer.org Enterprise VA 7.5.2 – Static SSH Key

-----------

2014-03-19 xistence remote

Quantum DXi V1000 2.2.1 – Static SSH Key

-----------

2014-03-19 xistence remote

Kloxo – SQL Injection / Remote Code Execution (Metasploit)

##

2014-02-11 Metasploit remote

HP SiteScope issueSiebelCmd – Remote Code Execution (Metasploit)

##

2013-12-24 Metasploit remote

Synology DiskStation Manager – SLICEUPLOAD Remote Command Execution (Metasploit)

##

2013-12-24 Metasploit remote

WebTester 5.x – Command Execution (Metasploit)

##

2013-10-22 Metasploit remote

Zabbix 2.0.8 – SQL Injection / Remote Code Execution (Metasploit)

##

2013-10-15 Jason Kratzer webapps

GestioIP – Remote Command Execution (Metasploit)

##

2013-10-08 Metasploit remote

D-Link Devices – UPnP SOAP TelnetD Command Execution (Metasploit)

##

2013-09-17 Metasploit remote

Graphite Web – Unsafe Pickle Handling (Metasploit)

##

2013-08-21 Metasploit remote

PineApp Mail-SeCure – ‘livelog.html’ Arbitrary Command Execution (Metasploit)

##

2013-08-02 Metasploit remote

Portable UPnP SDK – ‘unique_service_name()’ Remote Code Execution (Metasploit)

##

2013-02-05 Metasploit remote

ZoneMinder Video Server – packageControl Command Execution (Metasploit)

##

2013-01-24 Metasploit remote

Ettercap 0.7.5.1 – Stack Overflow

Title: Ettercap Stack overflow (CWE-121)

2013-01-07 Sajjad Pourali dos

TWiki MAKETEXT – Remote Command Execution (Metasploit)

##

2012-12-23 Metasploit remote

Foswiki MAKETEXT – Remote Command Execution (Metasploit)

##

2012-12-23 Metasploit remote

Nagios XI Network Monitor Graph Explorer Component – Command Injection (Metasploit)

##

2012-12-09 Metasploit remote

(SSH.com Communications) SSH Tectia – USERAUTH Change Request Password Reset (Metasploit)

##

2012-12-05 Metasploit remote

QNX QCONN – Remote Command Execution (Metasploit)

##

2012-10-10 Metasploit remote

Webmin 1.580 – ‘/file/show.cgi’ Remote Command Execution (Metasploit)

##

2012-10-10 Metasploit remote

ZEN Load Balancer Filelog – Command Execution (Metasploit)

##

2012-10-10 Metasploit remote