CloudMe Sync < 1.11.0 - Buffer Overflow (SEH) (DEP Bypass)
# Exploit: CloudMe Sync < 1.11.0 - Buffer Overflow (SEH) (DEP Bypass)
remote
remote 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Bitmain Antminer D3/L3+/S9 – Remote Command Execution
# Exploit Title: Bitmain Antminer D3, L3+, and S9 devices allow Remote Command Execution
HPE iMC 7.3 – Remote Code Execution (Metasploit)
# Exploit Title: HPE iMC EL Injection Unauthenticated RCE
Nanopool Claymore Dual Miner 7.3 – Remote Code Execution
# Exploit Title: Nanopool Claymore Dual Miner >= 7.3 Remote Code Execution
Microsoft Windows 2003 SP2 – ‘RRAS’ SMB Remote Code Execution
#!/usr/bin/env python
FTPShell Client 6.7 – Buffer Overflow
# -*- coding: utf-8 -*-
Google Chrome V8 – Object Allocation Size Integer Overflow
There's an integer overflow in computing the required allocation size when instantiating a new javascript object.
Call of Duty Modern Warefare 2 – Buffer Overflow
A few years ago, I became aware of a security issue in most Call of Duty games.
TBK DVR4104 / DVR4216 – Credentials Leak
# -*- coding: utf-8 -*-
Norton Core Secure WiFi Router – ‘BLE’ Command Injection (PoC)
# PoC command injection in BLE service of Norton Core Secure WiFi Router (CVE-2018-5234)
Exim < 4.90.1 - 'base64d' Remote Code Execution
#!/usr/bin/python
Easy File Sharing Web Server 7.2 – ‘UserID’ Remote Buffer Overflow (DEP Bypass)
#!/usr/bin/env python
Easy File Sharing Web Server 7.2 – Stack Buffer Overflow
# Exploit Title: Easy File Sharing Web Server 7.2 stack buffer overflow
D-Link DIR-615 Wireless Router – Persistent Cross Site Scripting
######################################################################################
LineageOS 14.1 Blueborne – Remote Code Execution
# Exploit Title: LineageOS 14.1 (Android 7.1.2) Blueborne RCE CVE-2017-0781
Adobe Flash < 28.0.0.161 - Use-After-Free
#!/usr/bin/env python
TeamCity < 9.0.2 - Disabled Registration Bypass
var login = 'testuser'; //логин пользователя
Acrolinx Server < 5.2.5 - Directory Traversal
# Exploit Title: Acrolinx Dashboard Directory Traversal
OpenSSH < 6.6 SFTP - Command Execution
# OpenSSH 8 else 32
Unitrends UEB 10.0 – Root Remote Code Execution
# Exploit Title: Unauthenticated root RCE for Unitrends UEB 10.0
Firefox 44.0.2 – ASM.JS JIT-Spray Remote Code Execution
CVE-2016-1960 and ASM.JS JIT-Spray
Firefox 46.0.1 – ASM.JS JIT-Spray Remote Code Execution
CVE-2016-2819 and ASM.JS JIT-Spray
MikroTik RouterOS < 6.41.3/6.42rc27 - SMB Buffer Overflow
#!/usr/bin/env python
SAP NetWeaver AS JAVA CRM – Log injection Remote Command Execution
#!/usr/bin/env python
MikroTik RouterOS < 6.38.4 (x86) - 'Chimay Red' Stack Clash Remote Code Execution
#!/usr/bin/env python2
MikroTik RouterOS < 6.38.4 (MIPSBE) - 'Chimay Red' Stack Clash Remote Code Execution
#!/usr/bin/env python3
DEWESoft X3 SP1 (x64) – Remote Command Execution
[+] Credits: John Page (aka hyp3rlinx)
TestLink Open Source Test Management < 1.9.16 - Remote Code Execution
# Title: TestLink Open Source Test Management( comment out skip-networking as well as bind-address (if any present i...
Sony Playstation 4 (PS4) 4.55 – ‘Jailbreak’ ‘setAttributeNodeNS’ WebKit 5.02 / ‘bpf’ Kernel Loader 4.55
# PS4 4.55 Kernel Exploit