Rapid PHP Editor 14.1 – Remote Command Execution
[+] Credits: John Page aka hyp3rlinx
remote
remote 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WinaXe 7.7 ‘FTP client’ – Remote Buffer Overflow
[+] Credits: John Page aka hyp3rlinx
Freefloat FTP Server 1.0 – ‘DIR’ Remote Buffer Overflow
import socket
PCMan FTP Server 2.0.7 – ‘UMASK’ Remote Buffer Overflow
#!/usr/bin/env python
Freefloat FTP Server 1.0 – ‘RENAME’ Remote Buffer Overflow
#!/usr/bin/env python
Freefloat FTP Server 1.0 – ‘ABOR’ Remote Buffer Overflow
#!/usr/bin/env python
Freefloat FTP Server 1.0 – ‘HOST’ Remote Buffer Overflow
#!/usr/bin/env python
Freefloat FTP Server 1.0 – ‘RMD’ Remote Buffer Overflow
#!/usr/bin/env python
PCMan FTP Server 2.0.7 – ‘DELETE’ Remote Buffer Overflow
from ftplib import FTP
Rumba FTP Client 4.x – Remote Stack Buffer Overflow (SEH)
# Exploit Title: Rumba FTP 4.x Client Stackoverflow SEH
InfraPower PPS-02-S Q213V1 – Hard-Coded Credentials
InfraPower PPS-02-S Q213V1 Hard-coded Credentials Remote Root Access
Komfy Switch with Camera DKZ-201S/W – WiFi Password Disclosure
#!/usr/bin/python
MiCasaVerde VeraLite – Remote Code Execution
# Exploit Title: MiCasa VeraLite Remote Code Execution
Subversion 1.6.6/1.6.12 – Code Execution
# This is an exploit for the subversion vulnerability published as CVE-2013-2088.
HP Client 9.1/9.0/8.1/7.9 – Command Injection
# Exploit Title: [HP Client - Automation Command Injection]
Exagate WEBPack Management System – Multiple Vulnerabilities
Document Title:
Billion 7700NR4 Router – Remote Command Execution
# Title : Billion Router 7700NR4 Remote Root Command Execution
Disk Savvy Enterprise 9.0.32 – ‘Login’ Remote Buffer Overflow
#!/usr/bin/python
Disk Sorter Enterprise 9.0.24 – ‘Login’ Remote Buffer Overflow
#!/usr/bin/python
Dup Scout Enterprise 9.0.28 – ‘Login’ Remote Buffer Overflow
#!/usr/bin/python
Sync Breeze Enterprise 8.9.24 – ‘Login’ Remote Buffer Overflow
#!/usr/bin/python
VX Search Enterprise 9.0.26 – ‘Login’ Remote Buffer Overflow
#!/usr/bin/python
Disk Pulse Enterprise 9.0.34 – ‘Login’ Remote Buffer Overflow
#!/usr/bin/python
DWebPro 8.4.2 – Multiple Vulnerabilities
# Exploit Title: DWebPro 8.4.2 Remote Binary Execution
Grandsteam GXV3611_HD – SQL Injection
# Exploit Title: Grandstream GXV3611_HD Telnet SQL Injection and backdoor command
FreePBX < 13.0.188 - Remote Command Execution (Metasploit)
#Title : Freepbx < 13.0.188 , Remote root exploit
NetMan 204 – Backdoor Account
NetMan 204 - Backdoor Account
Apache Mina 2.0.13 – Remote Command Execution
Source: https://remoteawesomethoughts.blogspot.com/2016/09/apache-mina-2013-remote-command.html
LamaHub 0.0.6.2 – Remote Buffer Overflow
# Exploit Title: LamaHub-0.0.6.2 BufferOverflow
Google Android – libutils UTF16 to UTF8 Conversion Heap Buffer Overflow
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=840
glibc – ‘getaddrinfo’ Remote Stack Buffer Overflow
add by SpeeDr00t@Blackfalcon (jang kyoung chip)
TOPSEC Firewalls – ‘ELIGIBLEBACHELOR’ Remote Command Execution
# Exploit Title: TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
Cisco ASA 8.x – ‘EXTRABACON’ Authentication Bypass
# Exploit Title: Cisco ASA 8.X Authentication Bypass
Samsung Smart Home Camera SNH-P-6410 – Command Injection
# E-DB Note: source ~ https://www.pentestpartners.com/blog/samsungs-smart-camera-a-tale-of-iot-network-security/
FreePBX 13/14 – Remote Command Execution / Privilege Escalation
#!/usr/bin/env python
ntop/nbox 2.3 < 2.5 - Multiple Vulnerabilities
E-DB Note: Source ~ http://carnal0wnage.attackresearch.com/2016/08/got-any-rces.html
NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application – Multiple Vulnerabilities
>> Multiple vulnerabilities in NUUO NVRmini2 / NVRsolo / Crystal devices and NETGEAR ReadyNAS Surveillance application
Easy File Sharing Web Server 7.2 – Remote Overflow (Egghunter) (SEH)
#!/usr/bin/python