remote

remote 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Quest Privilege Manager 6.0.0 – Arbitrary File Write

#!/usr/bin/env python2

2017-04-10 m0t remote

Moxa MX AOPC-Server 1.5 – XML External Entity Injection

[+] Credits: John Page AKA HYP3RLINX

2017-04-10 hyp3rlinx remote

Moxa MXview 2.8 – Private Key Disclosure

[+] Credits: John Page AKA HYP3RLINX

2017-04-10 hyp3rlinx remote

SpiceWorks 7.5 TFTP – Remote File Overwrite / Upload

[+] Credits: John Page AKA HYP3RLINX

2017-04-05 hyp3rlinx remote

Broadcom Wi-Fi SoC – ‘dhd_handle_swc_evt’ Heap Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1061

2017-04-04 Google Security Research remote

Broadcom Wi-Fi SoC – TDLS Teardown Request Remote Heap Overflow

Source:

2017-04-04 Google Security Research remote

Apache Tomcat 6/7/8/9 – Information Disclosure

# Exploit Title:Apache Tomcat CVE-2016-6816 Security Bypass Vulnerability

2017-04-04 justpentest remote

Moxa AWK-3131A 1.4 < 1.7 - 'Username' OS Command Injection

#!/usr/bin/env python2

2017-04-03 Talos remote

Bluecoat ASG 6.6/CAS 1.3 – OS Command Injection (Metasploit)

# Exploit Title: OS Command Injection Vulnerability in BlueCoat ASG and CAS

2017-04-03 Chris Hebert remote

Sync Breeze Enterprise 9.5.16 – ‘GET’ Remote Buffer Overflow (SEH)

#!/usr/bin/env python

2017-03-29 Daniel Teixeira remote

DzSoft PHP Editor 4.2.7 – File Enumeration

[+] Credits: John Page AKA hyp3rlinx

2017-03-28 hyp3rlinx remote

Github Enterprise – Default Session Secret and Deserialization (Metasploit)

##

2017-03-27 Metasploit remote

Samba 4.5.2 – Symlink Race Permits Opening Files Outside Share Directory

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1039

2017-03-27 Google Security Research remote

Microsoft IIS 6.0 – WebDAV ‘ScStoragePathFromUrl’ Remote Buffer Overflow

'''

2017-03-27 Zhiniang Peng & Chen Wu remote

Logsign 4.4.2/4.4.137 – Remote Command Injection (Metasploit)

##

2017-03-24 Mehmet Ince remote

Netgear WNR2000v5 – ‘hidden_lang_avi’ Remote Stack Overflow (Metasploit)

##

2017-03-24 Pedro Ribeiro remote

Miele Professional PG 8528 – Directory Traversal

Title:

2017-03-24 Jens Regel remote

Disk Sorter Enterprise 9.5.12 – ‘GET’ Remote Buffer Overflow (SEH)

#!/usr/bin/env python

2017-03-22 Daniel Teixeira remote

HttpServer 1.0 – Directory Traversal

# Exploit Title: HttpServer 1.0 DolinaySoft Directory Traversal

2017-03-19 malwrforensics remote

Cisco IOS 12.2 < 12.4 / 15.0 < 15.6 - Security Association Negotiation Request Device Memory

#!/usr/bin/python

2017-03-17 nixawk remote

SolarWinds LEM 6.3.1 – Remote Code Execution (Metasploit)

##

2017-03-17 Mehmet Ince remote

Apache Struts 2.3.5 < 2.3.31 / 2.5 < 2.5.10 - 'Jakarta' Multipart Parser OGNL Injection (Metasploit)

##

2017-03-15 Metasploit remote

IBM WebSphere – RCE Java Deserialization (Metasploit)

##

2017-03-15 Metasploit remote

Netgear R7000 / R6400 – ‘cgi-bin’ Command Injection (Metasploit)

##

2017-03-13 Metasploit remote

MobaXterm Personal Edition 9.4 – Directory Traversal

[+] Credits: John Page AKA hyp3rlinx

2017-03-11 hyp3rlinx remote

Wireless IP Camera (P2P) WIFICAM – Remote Code Execution

// Exploit-DB Note ~ Source: https://pierrekim.github.io/advisories/expl-goahead-camera.c

2017-03-08 PierreKimSec remote

Azure Data Expert Ultimate 2.2.16 – Remote Buffer Overflow

# Exploit Title: Azure Data Expert Ultimate 2.2.16 – buffer overflow

2017-03-07 Peter Baris remote

FTPShell Client 6.53 – Remote Buffer Overflow

# Exploit Title: FTPShell Client 6.53 buffer overflow on making initial connection

2017-03-04 Peter Baris remote

SysGauge 1.5.18 – SMTP Validation Buffer Overflow (Metasploit)

#

2017-02-28 Metasploit remote

SysGauge 1.5.18 – Remote Buffer Overflow

# Exploit Title: SysGauge 1.5.18 – buffer overflow in SMTP connection verification function leads to code execution

2017-02-28 Peter Baris remote

WePresent WiPG-1500 – Backdoor Account

# Exploit Title: CVE-2017-6351 - WePresent undocumented privileged manufacturer backdoor account

2017-02-27 Quentin Olagne remote

MVPower DVR TV-7104HE 1.8.4 115215B9 – Shell Command Execution (Metasploit)

##

2017-02-27 Metasploit remote

Apple macOS HelpViewer 10.12.1 – XSS Leads to Arbitrary File Execution / Arbitrary File Read

2017-02-23 Google Security Research remote

Disk Savvy Enterprise 9.4.18 – Remote Buffer Overflow (SEH)

# Exploit Title: DiskSavvy Enterprise 9.4.18 - Remote buffer overflow - SEH overwrite with WoW64 egghunters

2017-02-22 Peter Baris remote

OpenText Documentum D2 – Remote Code Execution

CVE Identifier: CVE-2017-5586

2017-02-15 Andrey B. Panfilov remote

F5 BIG-IP 11.6 SSL Virtual Server – ‘Ticketbleed’ Memory Disclosure

# -*- coding: utf-8 -*-

2017-02-14 @0x00string remote

Piwik 2.14.0/2.16.0/2.17.1/3.0.1 – Superuser Plugin Upload (Metasploit)

##

2017-02-14 Metasploit remote

F5 BIG-IP SSL Virtual Server – ‘Ticketbleed’ Memory Disclosure

# Exploit Title: [Ticketbleed (CVE-2016-9244) F5 BIG-IP SSL virtual server Memory Leakage]

2017-02-10 Ege Balci remote

HP Smart Storage Administrator 2.30.6.0 – Remote Command Injection (Metasploit)

##

2017-02-10 MaKyOtOx remote

Node.JS – ‘node-serialize’ Remote Code Execution

var serialize = require('node-serialize');

2017-02-08 OpSecX remote

Posnic Stock Management System – SQL Injection

2017-02-03 Manish Tanwar remote

Netwave IP Camera – Password Disclosure

#!/usr/bin/python2.7

2017-02-03 spiritnull remote

CUPS < 2.0.3 - Remote Command Execution

#!/usr/bin/python

2017-02-03 @0x00string remote

Haraka < 2.8.9 - Remote Command Execution

#!/usr/bin/python

2017-01-26 Xychix remote

Geutebrueck GCore 1.3.8.42/1.4.2.37 – Remote Code Execution (Metasploit)

# Exploit Title: Geutebrueck GCore X64 Full RCE Bufferoverflow for Metasploit

2017-01-24 Maurice Popp remote

Mozilla Firefox < 50.0.2 - 'nsSMILTimeContainer::NotifyTimeChange()' Remote Code Execution (Metasploit)

##

2017-01-24 Metasploit remote

Cisco WebEx – ‘nativeMessaging’ Remote Command Execution

Cisco WebEx Exploit

2017-01-24 Google Security Research remote

Disk Savvy Enterprise – GET Buffer Overflow (Metasploit)

##

2017-01-23 Metasploit remote

DiskBoss Enterprise – GET Buffer Overflow (Metasploit)

##

2017-01-16 Metasploit remote

WinaXe Plus 8.7 – Remote Buffer Overflow

# Exploit Title: WinaXe Plus 8.7 - lpr remote buffer overflow

2017-01-16 Peter Baris remote