Ayukov NFTP FTP Client < 2.0 - Remote Buffer Overflow
#!/usr/bin/env python
remote
remote 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Sync Breeze Enterprise 10.1.16 – ‘POST’ Remote Buffer Overflow
#!/usr/bin/python
Apple iOS 10.2 (14C92) – Remote Code Execution
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1317#c3
Ikraus Anti Virus 2.16.7 – Remote Code Execution
## Vulnerability summary
VX Search Enterprise 10.1.12 – Remote Buffer Overflow
#!/usr/bin/env python
UCOPIA Wireless Appliance < 5.1 (Captive Portal) - Root Remote Code Execution
# Exploit Title: Unauthenticated remote root code execution on captive
Sync Breeze Enterprise 10.0.28 – Remote Buffer Overflow
# Exploit Title: [SyncBreeze POST username overflow]
Trend Micro OfficeScan 11.0/XG (12.0) – Man In The Middle Remote Code Execution
[+] Credits: John Page (aka hyp3rlinx)
Cisco Prime Collaboration Provisioning < 12.1 - Authentication Bypass / Remote Code Execution
# Exploit Title: Cisco Prime Collaboration Provisioning < 12.1 - ScriptMgr Servlet Authentication Bypass Remote Code ...
LAquis SCADA 4.1.0.2385 – Directory Traversal (Metasploit)
require 'msf/core'
Oracle WebLogic Server 10.3.6.0 – Java Deserialization Remote Code Execution
# Exploit Title: [Oracle WebLogic Server Java Deserialization Remote Code Execution]
Tiny HTTPd 0.1.0 – Directory Traversal
#======================================================================================
FLIR Thermal Camera F/FC/PT/D – SSH Backdoor Access
FLIR Systems FLIR Thermal Camera F/FC/PT/D Hard-Coded SSH Credentials
Oracle 9i XDB 9.2.0.1 – HTTP PASS Buffer Overflow
#Exploit Title:Oracle 9i XDB HTTP PASS Buffer Overflow
Disk Pulse Enterprise 10.0.12 – GET Buffer Overflow (SEH)
# Tested on Windows XP SP3 (x86)
Apple iOS 10.2 – Broadcom Out-of-Bounds Write when Handling 802.11k Neighbor Report Response
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1289
ERS Data System 1.8.1 – Java Deserialization
# Exploit Title: ERS Data System 1.8.1 Deserialize Vulnerability
Android Bluetooth – ‘Blueborne’ Information Leak (2)
from pwn import *
HPE < 7.2 - Java Deserialization
#!/usr/bin/env python
Cloudview NMS 2.00b – Writable Directory Traversal Execution (Metasploit)
require 'msf/core'
haneWIN DNS Server 1.5.3 – Remote Buffer Overflow (Metasploit)
require 'msf/core'
Lockstep Backup for Workgroups 4.0.3 – Remote Buffer Overflow (Metasploit)
require 'msf/core'
EMC AlphaStor Device Manager – Opcode 0x72 Buffer Overflow (Metasploit)
require 'msf/core'
KingScada AlarmServer 3.1.2.13 – Remote Stack Buffer Overflow (Metasploit)
require 'msf/core'
Astaro Security Gateway 7 – Remote Code Execution
#!/usr/bin/python
Microsoft Windows .NET Framework – Remote Code Execution
Source: https://github.com/Voulnet/CVE-2017-8759-Exploit-sample
Cloudview NMS < 2.00b - Arbitrary File Upload (Metasploit)
require 'msf/core'
EMC CMCNE 11.2.1 – FileUploadController Remote Code Execution (Metasploit)
require 'msf/core'
Infinite Automation Mango Automation – Command Injection (Metasploit)
require 'msf/core'
Motorola Netopia Netoctopus SDCS – Remote Stack Buffer Overflow (Metasploit)
require 'msf/core'
Sielco Sistemi Winlog 2.07.16 – Remote Buffer Overflow (Metasploit)
require 'msf/core'
Viap Automation WinPLC7 5.0.45.5921 – Recv Buffer Overflow (Metasploit)
require 'msf/core'
ZScada Modbus Buffer 2.0 – Stack Buffer Overflow (Metasploit)
require 'msf/core'