TripSpark VEO Transportation – Blind SQL Injection
# Exploit Title: TripSpark VEO Transportation - 'editOEN' Blind SQL Injection
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
NoteBurner 2.35 – Denial Of Service (DoS) (PoC)
# Exploit Title: NoteBurner 2.35 - Denial Of Service (DoS) (PoC)
Leawo Prof. Media 11.0.0.1 – Denial of Service (DoS) (PoC)
# Exploit Title: Leawo Prof. Media 11.0.0.1 - Denial of Service (DoS) (PoC)
Argus Surveillance DVR 4.0 – Weak Password Encryption
# Exploit Title: Argus Surveillance DVR 4.0 - Weak Password Encryption
WinWaste.NET 1.0.6183.16475 – Privilege Escalation due Incorrect Access Control
# Exploit Title: WinWaste.NET 1.0.6183.16475 - Privilege Escalation due Incorrect Access Control
SAPSprint 7.60 – ‘SAPSprint’ Unquoted Service Path
# Exploit Title: SAPSprint 7.60 - 'SAPSprint' Unquoted Service Path
Remote Mouse GUI 3.008 – Local Privilege Escalation
# Exploit Title: Remote Mouse GUI 3.008 - Local Privilege Escalation
Lexmark Printer Software G2 Installation Package 1.8.0.0 – ‘LM__bdsvc’ Unquoted Service Path
# Exploit Title: Lexmark Printer Software G2 Installation Package 1.8.0.0 - 'LM__bdsvc' Unquoted Service Path
iFunbox 4.2 – ‘Apple Mobile Device Service’ Unquoted Service Path
# Exploit Title: iFunbox 4.2 - 'Apple Mobile Device Service' Unquoted Service Path
Wise Care 365 5.6.7.568 – ‘WiseBootAssistant’ Unquoted Service Path
# Exploit Title: Wise Care 365 5.6.7.568 - 'WiseBootAssistant' Unquoted Service Path
Workspace ONE Intelligent Hub 20.3.8.0 – ‘VMware Hub Health Monitoring Service’ Unquoted Service Path
# Exploit Title: Workspace ONE Intelligent Hub 20.3.8.0 - 'VMware Hub Health Monitoring Service' Unquoted Service Path
VX Search 13.5.28 – ‘Multiple’ Unquoted Service Path
# Exploit Title: VX Search 13.5.28 - 'Multiple' Unquoted Service Path
Dup Scout 13.5.28 – ‘Multiple’ Unquoted Service Path
# Exploit Title: Dup Scout 13.5.28 - 'Multiple' Unquoted Service Path
Disk Savvy 13.6.14 – ‘Multiple’ Unquoted Service Path
# Exploit Title: Disk Savvy 13.6.14 - 'Multiple' Unquoted Service Path
Sync Breeze 13.6.18 – ‘Multiple’ Unquoted Service Path
# Exploit Title: Sync Breeze 13.6.18 - 'Multiple' Unquoted Service Path
Disk Sorter Enterprise 13.6.12 – ‘Disk Sorter Enterprise’ Unquoted Service Path
# Exploit Title: Disk Sorter Enterprise 13.6.12 - 'Disk Sorter Enterprise' Unquoted Service Path
Disk Sorter Server 13.6.12 – ‘Disk Sorter Server’ Unquoted Service Path
# Exploit Title: Disk Sorter Server 13.6.12 - 'Disk Sorter Server' Unquoted Service Path
DiskPulse 13.6.14 – ‘Multiple’ Unquoted Service Path
# Exploit Title: DiskPulse 13.6.14 - 'Multiple' Unquoted Service Path
Brother BRAgent 1.38 – ‘WBA_Agent_Client’ Unquoted Service Path
# Exploit Title: Brother BRAgent 1.38 - 'WBA_Agent_Client' Unquoted Service Path
SysGauge 7.9.18 – ‘ SysGauge Server’ Unquoted Service Path
# Exploit Title: SysGauge 7.9.18 - ' SysGauge Server' Unquoted Service Path
Brother BRPrint Auditor – ‘Multiple’ Unquoted Service Path
# Exploit Title: Brother BRPrint Auditor 3.0.7 - 'Multiple' Unquoted Service Path
Tftpd64 4.64 – ‘Tftpd32_svc’ Unquoted Service Path
# Exploit Title: Tftpd64 4.64 - 'Tftpd32_svc' Unquoted Service Path
WibuKey Runtime 6.51 – ‘WkSvW32.exe’ Unquoted Service Path
# Exploit Title: WibuKey Runtime 6.51 - 'WkSvW32.exe' Unquoted Service Path
Spy Emergency 25.0.650 – ‘Multiple’ Unquoted Service Path
# Exploit Title: Spy Emergency 25.0.650 - Unquoted Service Path
Microsoft SharePoint Server 16.0.10372.20060 – ‘GetXmlDataFromDataSource’ Server-Side Request Forgery (SSRF)
# Exploit Title: Microsoft SharePoint Server 16.0.10372.20060 - 'GetXmlDataFromDataSource' Server-Side Request Forger...
Backup Key Recovery 2.2.7 – Denial of Service (PoC)
# Exploit Title: Backup Key Recovery 2.2.7 - Denial of Service (PoC)
Nsauditor 3.2.3 – Denial of Service (PoC)
# Exploit Title: Nsauditor 3.2.3 - Denial of Service (PoC)
NBMonitor 1.6.8 – Denial of Service (PoC)
# Exploit Title: NBMonitor 1.6.8 - Denial of Service (PoC)
IcoFX 2.6 – ‘.ico’ Buffer Overflow SEH + DEP Bypass using JOP
# Exploit Title: IcoFX 2.6 - '.ico' Buffer Overflow SEH + DEP Bypass using JOP
Intel(R) Audio Service x64 01.00.1080.0 – ‘IntelAudioService’ Unquoted Service Path
# Exploit Title: Intel(R) Audio Service x64 01.00.1080.0 - 'IntelAudioService' Unquoted Service Path
Veyon 4.4.1 – ‘VeyonService’ Unquoted Service Path
# Exploit Title: Veyon 4.4.1 - 'VeyonService' Unquoted Service Path
DupTerminator 1.4.5639.37199 – Denial of Service (PoC)
# Exploit Title: DupTerminator 1.4.5639.37199 - Denial of Service (PoC)
RarmaRadio 2.72.8 – Denial of Service (PoC)
# Exploit Title: RarmaRadio 2.72.8 - Denial of Service (PoC)
ePowerSvc 6.0.3008.0 – ‘ePowerSvc.exe’ Unquoted Service Path
# Exploit Title: ePowerSvc 6.0.3008.0 - 'ePowerSvc.exe' Unquoted Service Path
DiskBoss Service 12.2.18 – ‘diskbsa.exe’ Unquoted Service Path
# Exploit Title: DiskBoss Service 12.2.18 - 'diskbsa.exe' Unquoted Service Path
iDailyDiary 4.30 – Denial of Service (PoC)
# Exploit Title: iDailyDiary 4.30 - Denial of Service (PoC)
Microsoft Exchange 2019 – Unauthenticated Email Download (Metasploit)
# Exploit Title: Microsoft Exchange 2019 - Unauthenticated Email Download (Metasploit)
DELL dbutil_2_3.sys 2.3 – Arbitrary Write to Local Privilege Escalation (LPE)
# Exploit Title: DELL dbutil_2_3.sys 2.3 - Arbitrary Write to Local Privilege Escalation (LPE)
Mozilla Firefox 88.0.1 – File Extension Execution of Arbitrary Code
# Exploit Title: Mozilla Firefox 88.0.1 - File Extension Execution of Arbitrary Code
Acer Updater Service 1.2.3500.0 – ‘UpdaterService.exe’ Unquoted Service Path
# Exploit Title: Acer Updater Service 1.2.3500.0 - 'UpdaterService.exe' Unquoted Service Path
Backup Manager Module 3.0.0.99 – ‘IScheduleSvc.exe’ Unquoted Service Path
# Exploit Title: Acer Backup Manager Module 3.0.0.99 - 'IScheduleSvc.exe' Unquoted Service Path
ASUS HID Access Service 1.0.94.0 – ‘AsHidSrv.exe’ Unquoted Service Path
# Exploit Title: ASUS HID Access Service 1.0.94.0 - 'AsHidSrv.exe' Unquoted Service Path
Visual Studio Code 1.47.1 – Denial of Service (PoC)
# Exploit Tittle: Visual Studio Code 1.47.1 - Denial of Service (Poc)
Microsoft Exchange 2019 – Unauthenticated Email Download
# Exploit Title: Microsoft Exchange 2019 - Unauthenticated Email Download
Microsoft Internet Explorer 8 – ‘SetMouseCapture ‘ Use After Free
# Exploit Title: Microsoft Internet Explorer 8 - 'SetMouseCapture ' Use After Free
Odoo 12.0.20190101 – ‘nssm.exe’ Unquoted Service Path
# Exploit Title: Odoo 12.0.20190101 - 'nssm.exe' Unquoted Service Path
TFTP Broadband 4.3.0.1465 – ‘tftpt.exe’ Unquoted Service Path
# Exploit Title: TFTP Broadband 4.3.0.1465 - 'tftpt.exe' Unquoted Service Path
BOOTP Turbo 2.0.0.1253 – ‘bootpt.exe’ Unquoted Service Path
# Exploit Title: BOOTP Turbo 2.0.0.1253 - 'bootpt.exe' Unquoted Service Path
DHCP Broadband 4.1.0.1503 – ‘dhcpt.exe’ Unquoted Service Path
# Exploit Title: DHCP Broadband 4.1.0.1503 - 'dhcpt.exe' Unquoted Service Path
Epic Games Rocket League 1.95 – Stack Buffer Overrun
# Exploit Title: Epic Games Rocket League 1.95 - Stack Buffer Overrun