Solaris SunSSH 11.0 x86 – libpam Remote Root (2)
# Exploit Title: Solaris SunSSH 11.0 x86 - libpam Remote Root (2)
remote
remote 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
GNU Wget < 1.18 - Arbitrary File Upload (2)
# Exploit Title: GNU Wget < 1.18 - Arbitrary File Upload / Remote Code Execution (2)
Tenda D151 & D301 – Configuration Download (Unauthenticated)
# Exploit Title: Tenda D151 & D301 - Configuration Download (Unauthenticated)
vsftpd 2.3.4 – Backdoor Command Execution
# Exploit Title: vsftpd 2.3.4 - Backdoor Command Execution
Linux Kernel 5.4 – ‘BleedingTooth’ Bluetooth Zero-Click Remote Code Execution
# Exploit Title: Linux Kernel 5.4 - 'BleedingTooth' Bluetooth Zero-Click Remote Code Execution
Google Chrome 81.0.4044 V8 – Remote Code Execution
# Exploit Title: Google Chrome 81.0.4044 V8 - Remote Code Execution
Google Chrome 86.0.4240 V8 – Remote Code Execution
# Exploit Title: Google Chrome 86.0.4240 V8 - Remote Code Execution
vsftpd 3.0.3 – Remote Denial of Service
# Exploit Title: vsftpd 3.0.3 - Remote Denial of Service
KZTech T3500V 4G LTE CPE 2.0.1 – Weak Default WiFi Password Algorithm
# Exploit Title: KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Weak Default WiFi Password Algorithm
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 – Hard coded Credentials Shell Access
# Exploit Title: KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Hard coded Credentials Shell Access
Microsoft Exchange 2019 – Server-Side Request Forgery
import requests
Golden FTP Server 4.70 – ‘PASS’ Buffer Overflow (2)
# Golden FTP Server 4.70 - 'PASS' Buffer Overflow (2)
CatDV 9.2 – RMI Authentication Bypass
# Exploit Title: CatDV 9.2 - RMI Authentication Bypass
AnyDesk 5.5.2 – Remote Code Execution
# Exploit Title: AnyDesk 5.5.2 - Remote Code Execution
WiFi Mouse 1.7.8.5 – Remote Code Execution
# Exploit Title: WiFi Mouse 1.7.8.5 - Remote Code Execution
Remote Desktop Web Access – Authentication Timing Attack (Metasploit Module)
#!/usr/bin/env python3
ASUS Remote Link 1.1.2.13 – Remote Code Execution
# Exploit: ASUS Remote Link 1.1.2.13 - Remote Code Execution
Unified Remote 3.9.0.2463 – Remote Code Execution
# Exploit Title: Unified Remote 3.9.0.2463 - Remote Code Execution
python jsonpickle 2.0.0 – Remote Code Execution
# Exploit Title: python jsonpickle 2.0.0 - Remote Code Execution
HFS (HTTP File Server) 2.3.x – Remote Command Execution (3)
# Exploit Title: HFS (HTTP File Server) 2.3.x - Remote Command Execution (3)
Erlang Cookie – Remote Code Execution
# Exploit Title: Erlang Cookie - Remote Code Execution
FRITZ!Box 7.20 – DNS Rebinding Protection Bypass
# Exploit Title: FRITZ!Box 7.20 - DNS Rebinding Protection Bypass
Solaris SunSSH 11.0 x86 – libpam Remote Root
# Exploit Title: Solaris SunSSH 11.0 x86 - libpam Remote Root
Huawei HedEx Lite 200R006C00SPC005 – Path Traversal
# Exploit Title: Huawei HedEx Lite 200R006C00SPC005 - Path Traversal
Dup Scout Enterprise 10.0.18 – ‘sid’ Remote Buffer Overflow (SEH)
# Exploit Title: Dup Scout Enterprise 10.0.18 - 'sid' Remote Buffer Overflow (SEH)
SmarterMail Build 6985 – Remote Code Execution
# Exploit Title: SmarterMail Build 6985 - Remote Code Execution
Dup Scout Enterprise 10.0.18 – ‘online_registration’ Remote Buffer Overflow
# Dup Scout Enterprise 10.0.18 - 'online_registration' Remote Buffer Overflow
Mitel mitel-cs018 – Call Data Information Disclosure
# Exploit Title: Mitel mitel-cs018 - Call Data Information Disclosure
Ksix Zigbee Devices – Playback Protection Bypass (PoC)
# Exploit Title: Ksix Zigbee Devices - Playback Protection Bypass (PoC)
YATinyWinFTP – Denial of Service (PoC)
# Exploit Title: YATinyWinFTP - Denial of Service (PoC)
Razer Chroma SDK Server 3.16.02 – Race Condition Remote File Execution
Exploit Title: Razer Chroma SDK Server 3.16.02 - Race Condition Remote File Execution
Genexis Platinum 4410 Router 2.1 – UPnP Credential Exposure
# Exploit Title: Genexis Platinum 4410 Router 2.1 - UPnP Credential Exposure
ZeroLogon – Netlogon Elevation of Privilege
# Exploit Title: ZeroLogon - Netlogon Elevation of Privilege
Apache Struts 2.5.20 – Double OGNL evaluation
# Exploit Title: Apache Struts 2.5.20 - Double OGNL evaluation
Aerospike Database 5.1.0.3 – OS Command Execution
# Exploit Title: Aerospike Database 5.1.0.3 - OS Command Execution
Cisco 7937G – DoS/Privilege Escalation
# Exploit Title: Cisco 7937G 1-4-5-7 - DoS/Privilege Escalation
TP-Link WDR4300 – Remote Code Execution (Authenticated)
# Exploit Title: TP-Link WDR4300 - Remote Code Execution (Authenticated)
GoAhead Web Server 5.1.1 – Digest Authentication Capture Replay Nonce Reuse
# Exploit Title: GoAhead Web Server 5.1.1 - Digest Authentication Capture Replay Nonce Reuse
Adtec Digital Multiple Products – Default Hardcoded Credentials Remote Root
# Exploit Title: Adtec Digital Multiple Products - Default Hardcoded Credentials Remote Root
Sony IPELA Network Camera 1.82.01 – ‘ftpclient.cgi’ Remote Stack Buffer Overflow
# Exploit Title: Sony IPELA Network Camera 1.82.01 - 'ftpclient.cgi' Remote Stack Buffer Overflow
Microsoft SQL Server Reporting Services 2016 – Remote Code Execution
# Exploit Title: Microsoft SQL Server Reporting Services 2016 - Remote Code Execution
Aruba ClearPass Policy Manager 6.7.0 – Unauthenticated Remote Command Execution
# Exploit Title: Aruba ClearPass Policy Manager 6.7.0 - Unauthenticated Remote Command Execution
CompleteFTP Professional 12.1.3 – Remote Code Execution
# Exploit Title: CompleteFTP Professional < 12.1.3 - Remote Code Execution
Qmail SMTP 1.03 – Bash Environment Variable Injection
# Exploit Title: Qmail SMTP 1.03 - Bash Environment Variable Injection
Microsoft Windows mshta.exe 2019 – XML External Entity Injection
# Exploit Title: Microsoft Windows mshta.exe 2019 - XML External Entity Injection
mySCADA myPRO 7 – Hardcoded Credentials
# Exploit Title: mySCADA myPRO v7 Hardcoded Credentials
SOS JobScheduler 1.13.3 – Stored Password Decryption
# Exploit Title: SOS JobScheduler 1.13.3 - Stored Password Decryption
HFS Http File Server 2.3m Build 300 – Buffer Overflow (PoC)
# Exploit Title: HFS Http File Server 2.3m Build 300 - Buffer Overflow (PoC)
vCloud Director 9.7.0.15498291 – Remote Code Execution
#!/usr/bin/python
Microsoft Windows – ‘SMBGhost’ Remote Code Execution
#!/usr/bin/env python