المساعد الشخصي الرقمي

مشاهدة النسخة كاملة : exploit database


الصفحات : 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 [31] 32 33 34 35 36 37 38 39 40 41 42

  1. [local] - RedStar 3.0 Desktop - Privilege Escalation (Enable sudo)
  2. [local] - OS X 10.9.x - sysmond XPC Privilege Escalation
  3. [local] - Ntpdc 4.2.6p3 - Local Buffer Overflow
  4. [remote] - Pandora v3.1 Auth Bypass and Arbitrary File Upload Vulnerability
  5. [webapps] - WordPress Shopping Cart 3.0.4 - Unrestricted File Upload
  6. [webapps] - Sefrengo CMS 1.6.0 - SQL Injection
  7. [webapps] - Pirelli ADSL2/2+ Wireless Router P.DGA4001N - Information Disclosure
  8. [webapps] - Microweber CMS 0.95 - SQL Injection
  9. [local] - BulletProof FTP Client BPS Buffer Overflow
  10. [webapps] - AdaptCMS 3.0.3 - Multiple Vulnerabilities
  11. [remote] - SkinCrafter3 vs2005 3.8.1.0 - Multiple ActiveX Buffer Overflows
  12. [webapps] - Crea8Social 2.0 - XSS Change Interface
  13. [remote] - ASUSWRT 3.0.0.4.376_1071 - LAN Backdoor Command Execution
  14. [webapps] - e107 2 Bootstrap CMS - XSS Vulnerability
  15. [webapps] - PHPads
  16. [local] - i-FTP Schedule Buffer Overflow
  17. [webapps] - Absolut Engine 1.73 - Multiple Vulnerabilities
  18. [papers] - [Hebrew] Digital Whisper Security Magazine #57
  19. [local] - Windows 8.1 (32/64 bit) - Privilege Escalation (ahcache.sys/NtApphelpCacheC
  20. [remote] - ProjectSend Arbitrary File Upload
  21. [webapps] - Social Microblogging PRO 1.5 Stored XSS Vulnerability
  22. [webapps] - Easy File Sharing Webserver
  23. [webapps] - GQ File Manager 0.2.5 - Multiple Vulnerabilities
  24. [shellcode] - Linux x86 rmdir - 37 bytes Stack shellcode
  25. [remote] - Liferay Portal 7.0.x
  26. [papers] - Anatomy of Exploit - World of Shellcode
  27. [shellcode] - x64 Linux reverse TCP connect shellcode (77 to 85 bytes, 90 to 98 with
  28. [shellcode] - x64 Linux bind TCP port shellcode (81 bytes, 96 with password)
  29. [remote] - WhatsApp
  30. [webapps] - PMB
  31. [webapps] - PHPLIST 3.0.6 & 3.0.10 - SQL Injection Vulnerability
  32. [webapps] - Pimcore 3.0 & 2.3.0 CMS - SQL Injection Vulnerability
  33. [dos] - Wickr Desktop 2.2.1 Windows - Denial of Service Vulnerability
  34. [webapps] - Lazarus Guestbook 1.22 - Multiple Vulnerabilities
  35. [local] - GParted 0.14.1 - OS Command Execution
  36. [webapps] - NetIQ Access Manager 4.0 SP1 - Multiple Vulnerabilities
  37. [webapps] - SysAid Server Arbitrary File Disclosure
  38. [local] - BitRaider Streaming Client 1.3.3.4098 Local Privilege Escalation Vulnerabil
  39. [dos] - jetAudio 8.1.3 Basic (mp3) - Crash POC
  40. [remote] - Lotus Mail Encryption Server (Protector for Mail) LFI to RCE
  41. [remote] - Varnish Cache CLI Interface Remote Code Execution
  42. [dos] - Ettercap 0.8.0-0.8.1 - Multiple Denial of Service Vulnerabilities
  43. [webapps] - miniBB 3.1 - Blind SQL Injection
  44. [webapps] - Cacti Superlinks Plugin 1.4-2 RCE(LFI) via SQL Injection Exploit
  45. [webapps] - CIK Telecom VoIP router SVG6000RW - Privilege Escalation and Command Exec
  46. [webapps] - SQL Buddy 1.3.3 - Remote Code Execution
  47. [webapps] - ProjectSend r-561 - Arbitrary File Upload
  48. [webapps] - CMS Papoo 6.0.0 Rev. 4701 - Stored XSS
  49. [remote] - ActualAnalyzer 'ant' Cookie Command Execution
  50. [papers] - [Turkish] Codesys SEH Exploit Tutorial Paper
  51. [remote] - Tuleap PHP Unserialize Code Execution
  52. [webapps] - Wordpress Download Manager 2.7.4 - Remote Code Execution Vulnerability
  53. [papers] - Socket Learning
  54. [webapps] - Wordpress Wp Symposium 14.11 - Unauthenticated Shell Upload Exploit
  55. [local] - CodeMeter 4.50.906.503 - Service Trusted Path Privilege Escalation
  56. [webapps] - ResourceSpace 6.4.5976 - XSS / SQL Injection / Insecure Cookie Handling
  57. [dos] - phpMyAdmin 4.0.x, 4.1.x, 4.2.x - DoS
  58. [papers] - Backdooring with netcat shellcode
  59. [local] - Avira 14.0.7.342 - (avguard.exe) Service Trusted Path Privilege Escalation
  60. [local] - HTCSyncManager 3.1.33.0 - Service Trusted Path Privilege Escalation
  61. [local] - jaangle 0.98i.977 - Denial of Service Vulnerability
  62. [local] - Mediacoder 0.8.33 build 5680 - SEH Buffer Overflow Exploit Dos (.lst)
  63. [webapps] - Flat Calendar 1.1 - HTML Injection Exploit
  64. [webapps] - OpenEMR 4.1.2(7) - Multiple SQL Injection Vulnerabilities
  65. [webapps] - Wordpress Ajax Store Locator 1.2 - Arbitrary File Download
  66. [webapps] - IceHrm 7.1 - Multiple Vulnerabilities
  67. [local] - Mobilis 3G mobiconnect 3G++ ZDServer 1.0.1.2 - (ZTE CORPORATION) Service Tr
  68. [webapps] - Humhub
  69. [webapps] - Humhub
  70. [local] - Advantech AdamView 4.30.003 - (.gni) SEH Buffer Overflow
  71. [local] - VFU 4.10-1.1 - Buffer Overflow
  72. [local] - BulletProof FTP Client 2010 - Buffer Overflow (SEH) Exploit
  73. [remote] - JourneyMap 5.0.0RC2 Ultimate Edition - DoS (Resource Consumption)
  74. [remote] - Tiny Server 1.1.9 - Arbitrary File Disclosure Exploit
  75. [remote] - Windows Kerberos - Elevation of Privilege (MS14-068)
  76. [webapps] - PBBoard CMS 3.0.1 - SQL Injection
  77. [local] - Offset2lib: Bypassing Full ASLR On 64bit Linux
  78. [papers] - [Hebrew] Digital Whisper Security Magazine #56
  79. [webapps] - Advertise With Pleasure! (AWP) 6.6 - SQL Injection Vulnerability
  80. [webapps] - Technicolor DT5130 V2.05.C29GV - Multiple Vulnerabilities
  81. [local] - Thomson Reuters Fixed Assets CS
  82. [webapps] - Cart66 Lite WordPress Ecommerce 1.5.1.17 - Blind SQL Injection
  83. [papers] - [Turkish] How to Bypass SafeSEH and Stack Cookie Protection
  84. [webapps] - Google Document Embedder 2.5.16 - mysql_real_escpae_string bypass SQL Inj
  85. [papers] - NMAP - Port-Scanning: A Practical Approach Modified for better
  86. [local] - Microsoft Windows Win32k.sys - Denial of Service
  87. [webapps] - Wordpress CM Download Manager Plugin 2.0.0 - Code Injection
  88. [webapps] - TYPO3 ke DomPDF Extension - Remote Code Execution
  89. [webapps] - EntryPass N5200 - Credentials Exposure
  90. [remote] - Tincd Post-Authentication Remote TCP Stack Buffer Overflow
  91. [local] - Mac OS X IOKit Keyboard Driver Root Privilege Escalation
  92. [webapps] - Wordpress Nextend Facebook Connect Plugin 1.4.59 - XSS Vulnerability
  93. [webapps] - IPUX CS7522/CS2330/CS2030 IP Camera - (UltraHVCamX.ocx) ActiveX Stack Buf
  94. [webapps] - IPUX CL5452/CL5132 IP Camera - (UltraSVCamX.ocx) ActiveX Stack Buffer Ove
  95. [webapps] - IPUX Cube Type CS303C IP Camera - (UltraMJCamX.ocx) ActiveX Stack Buffer
  96. [webapps] - Prolink PRN2001 - Multiple Vulnerabilities
  97. [webapps] - Drupal < 7.34 - Denial of Service
  98. [webapps] - Wordpress < 4.0.1 - Denial of Service
  99. [webapps] - WordPress
  100. [local] - CCH Wolters Kluwer PFX Engagement
  101. [papers] - PoC || GTFO 0x05
  102. [papers] - PoC || GTFO 0x06
  103. [webapps] - WordPress HTML 5 MP3 Player with Playlist Plugin - Full Path Disclosure
  104. [webapps] - RobotStats 1.0 - (robot param) SQL Injection Vulnerability
  105. [dos] - RobotStats 1.0 - HTML Injection Vulnerability
  106. [webapps] - Slider Revolution/Showbiz Pro Shell Upload Exploit
  107. [webapps] - Device42 WAN Emulator 2.3 Ping Command Injection
  108. [webapps] - Device42 WAN Emulator 2.3 Traceroute Command Injection
  109. [dos] - Android WAPPushManager - SQL Injection
  110. [remote] - Pandora FMS SQLi Remote Code Execution
  111. [webapps] - xEpan 1.0.1 - CSRF Vulnerability
  112. [dos] - Elipse E3 HTTP Denial of Service
  113. [local] - Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 (.wax) SEH Buffer Overflow
  114. [webapps] - Arris VAP2500 Authentication Bypass
  115. [webapps] - Wordpress Google Document Embedder 2.5.14 - SQL Injection
  116. [local] - Linux Kernel libfutex Local Root for RHEL/CentOS 7.0.1406
  117. [papers] - [Turkish] Embedded Device Security & Zollard Botnet Analysis
  118. [webapps] - crea8social 1.3 - Stored XSS Vulnerability
  119. [webapps] - phpMyRecipes 1.2.2 (dosearch.php, words_exact param) - SQL Injection
  120. [dos] - TRENDnet SecurView Wireless Network Camera TV-IP422WN (UltraCamX.ocx) Stack B
  121. [webapps] - DukaPress 2.5.2 - Path Traversal
  122. [webapps] - Wordpress wpDataTables Plugin 1.5.3 - Unauthenticated Shell Upload Vulner
  123. [webapps] - Wordpress wpDataTables Plugin 1.5.3 - SQL Injection Vulnerability
  124. [dos] - tcpdump 4.6.2 Geonet Decoder Denial of Service
  125. [dos] - PHP 5.5.12 Locale::parseLocale Memory Corruption
  126. [webapps] - Advantech EKI-6340 Command Injection
  127. [remote] - Hikvision DVR RTSP Request Remote Code Execution
  128. [papers] - Deep Dive into ROP Payload Analysis
  129. [webapps] - TP-Link TL-WR740N - Denial Of Service
  130. [webapps] - Netgear Wireless Router WNR500 - Parameter Traversal Arbitrary File Acces
  131. [webapps] - MyBB
  132. [local] - Privacyware Privatefirewall 7.0 - Unquoted Service Path Privilege Escalatio
  133. [webapps] - Supr Shopsystem 5.1.0 - Persistent UI Vulnerability
  134. [webapps] - Maarch LetterBox 2.8 - Insecure Cookies (Login Bypass)
  135. [remote] - Internet Explorer < 11 - OLE Automation Array Remote Code Execution (#2)
  136. [webapps] - Paid Memberships Pro 1.7.14.2 Path Traversal
  137. [dos] - MINIX 3.3.0 Remote TCP/IP Stack DoS
  138. [webapps] - Snowfox CMS 1.0 - CSRF Add Admin Exploit
  139. [remote] - MantisBT XmlImportExport Plugin PHP Code Injection Vulnerability
  140. [remote] - Samsung Galaxy KNOX Android Browser RCE
  141. [remote] - Internet Explorer OLE Automation Array Remote Code Execution
  142. [remote] - .NET Remoting Services Remote Command Execution
  143. [dos] - Safari 8.0 / OS X 10.10 - Crash PoC
  144. [webapps] - Zoph 0.9.1 - Multiple Vulnerabilities
  145. [webapps] - WebsiteBaker 2.8.3 - Multiple Vulnerabilities
  146. [webapps] - ZTE ZXHN H108L - Authentication Bypass
  147. [webapps] - Proticaret E-Commerce Script 3.0 - SQL Injection
  148. [webapps] - PHPFox - Stored XSS Vulnerability
  149. [webapps] - ZTE ZXHN H108L - Authentication Bypass
  150. [webapps] - clientResponse Client Management 4.1 - XSS Vulnerability
  151. [webapps] - Joomla HD FLV Player < 2.1.0.1 - Arbitrary File Download Vulnerability
  152. [webapps] - Joomla HD FLV Player < 2.1.0.1 - SQL Injection Vulnerability
  153. [webapps] - Proticaret E-Commerce Script 3.0 - SQL Injection
  154. [webapps] - Barracuda - Multiple Anauthentificated Logfile Download
  155. [dos] - Internet Explorer 11 - Denial Of Service
  156. [webapps] - MyBB Forums 1.8.2 - Stored XSS Vulnerability
  157. [webapps] - Modx CMS 2.2.14 - CSRF Bypass, Reflected XSS, Stored XSS Vulnerability
  158. [webapps] - PHP 5.x - Bypass Disable Functions (via Shellshock)
  159. [webapps] - Subex FMS 7.4 - Unauthenticated SQLi
  160. [webapps] - Rejetto HTTP File Server (HFS) 2.3.x - Remote Command Execution (MSF)
  161. [webapps] - Gogs (users and repos q pararm) - SQL Injection Vulnerabilities
  162. [webapps] - Gogs (label pararm) - SQL Injection
  163. [local] - MS14-064 Microsoft Windows OLE Package Manager Code Execution
  164. [local] - MS14-064 Microsoft Windows OLE Package Manager Code Execution Through Pytho
  165. [local] - OSSEC 2.8 Insecure Temporary File Creation Vulnerability Privilege Escalati
  166. [remote] - Internet Explorer OLE Automation Array Remote Code Execution (msf)
  167. [remote] - Internet Explorer OLE Automation Array Remote Code Execution
  168. [webapps] - MyBB 1.8.X - Multiple Vulnerabilities
  169. [webapps] - Digi Online Examination System 2.0 - Unrestricted File Upload
  170. [webapps] - F5 BIG-IP 10.1.0 - Directory Traversal Vulnerability
  171. [webapps] - Piwigo 2.6.0 (picture.php, rate param) - SQL Injection
  172. [webapps] - Esotalk CMS 1.0.0g4 - XSS Vulnerability
  173. [webapps] - WordPress SupportEzzy Ticket System Plugin 1.2.5 - Stored XSS Vulnerabili
  174. [dos] - CorelDRAW X7 CDR File (CdrTxt.dll) Off-By-One Stack Corruption Vulnerability
  175. [local] - MS Office 2007 and 2010 - OLE Arbitrary Command Execution
  176. [webapps] - phpSound Music Sharing Platform 1.0.5 - Multiple XSS Vulnerabilities
  177. [webapps] - Serenity Client Management Portal 1.0.1 - Multiple Vulnerabilities
  178. [webapps] - Mouse Media Script 1.6 0 - Stored XSS Vulnerability
  179. [webapps] - Who's Who Script - CSRF Exploit (Add Admin Account)
  180. [remote] - Internet Explorer 8 MS14-035 Use-After-Free Exploit
  181. [webapps] - Another Wordpress Classifieds Plugin - SQL Injection
  182. [webapps] - Password Manager Pro / Pro MSP - Blind SQL Injection
  183. [remote] - Visual Mining NetCharts Server Remote Code Execution
  184. [webapps] - XCloner Wordpress/Joomla! Plugin - Multiple Vulnerabilities
  185. [webapps] - ManageEngine OpManager, Social IT Plus and IT360 - Multiple Vulnerabiliti
  186. [webapps] - Progress OpenEdge 11.2 - Directory Traversal
  187. [webapps] - PHP-Fusion 7.02.07 - SQL Injection
  188. [shellcode] - Position independent & Alphanumeric 64-bit execve("/bin/sh\0",NULL,NULL
  189. [webapps] - ZTE ZXDSL 831CII - Insecure Direct Object Reference
  190. [webapps] - Progress OpenEdge 11.2 - Directory Traversal
  191. [remote] - Belkin n750 jump login Parameter Buffer Overflow
  192. [remote] - X7 Chat 2.0.5 lib/message.php preg_replace() PHP Code Execution
  193. [dos] - VMware Workstations 10.0.0.40273 vmx86.sys Arbitrary Kernel Read
  194. [webapps] - Symantec Endpoint Protection 12.1.4023.4080 - Multiple Vulnerabilities
  195. [remote] - Citrix NetScaler SOAP Handler Remote Code Execution
  196. [dos] - i.Mage 1.11 - Local Crash PoC
  197. [dos] - i.Hex 0.98 - Local Crash PoC
  198. [local] - i-FTP 2.20 - Buffer Overflow SEH Exploit
  199. [papers] - [Hebrew] Digital Whisper Security Magazine #55
  200. [papers] - [Hebrew] Digital Whisper Security Magazine #54
  201. [papers] - [Hebrew] Digital Whisper Security Magazine #53
  202. [dos] - MINIX 3.3.0 Local Denial of Service PoC
  203. [local] - Linux Local Root => 2.6.39 (32-bit & 64-bit) - Mempodipper #2
  204. [shellcode] - Linux/x86 Add map in /etc/hosts file
  205. [dos] - Mac OS X Mavericks IOBluetoothHCIUserClient Privilege Escalation
  206. [papers] - Exploiting CVE-2014-4113 on Windows 8.1
  207. [remote] - Xerox Multifunction Printers (MFP) "Patch" DLM Vulnerability
  208. [webapps] - Drupal 7.32 Pre Auth SQL Injection
  209. [webapps] - ZTE Modem ZXDSL 531BIIV7.3.0f_D09_IN - Stored XSS Vulnerability
  210. [remote] - CUPS Filter Bash Environment Variable Code Injection
  211. [webapps] - MAARCH 1.4 - SQL Injection
  212. [webapps] - MAARCH 1.4 - Arbitrary File Upload
  213. [local] - IBM Tivoli Monitoring 6.2.2 kbbacf1 - Privilege Escalation
  214. [remote] - Konke Smart Plug K - Authentication Bypass Vulnerability
  215. [webapps] - vBulletin Tapatalk - Blind SQL Injection
  216. [local] - Windows TrackPopupMenu Win32k NULL Pointer Dereference
  217. [webapps] - Enalean Tuleap 7.4.99.5 - Remote Command Execution
  218. [webapps] - Enalean Tuleap 7.2 - XXE File Disclosure
  219. [webapps] - Enalean Tuleap 7.4.99.5 - Blind SQL Injection
  220. [local] - Filemaker Pro 13.03 & Advanced 12.04 - Login Bypass and Privilege Escala
  221. [webapps] - Folder Plus 2.5.1 iOS - Persistent XSS Vulnerability
  222. [webapps] - WebDisk+ 2.1 iOS - Code Execution Vulnerability
  223. [dos] - Binary File Descriptor Library (libbfd) - Out-of-Bounds Crash
  224. [webapps] - Incredible PBX 2.0.6.5.0 - Remote Command Execution
  225. [webapps] - Mulesoft ESB Runtime 3.5.1 - Privilege Escalation Vulnerability
  226. [remote] - Centreon SQL and Command Injection
  227. [webapps] - HP Operations Agent Remote XSS iFrame Injection
  228. [webapps] - CBN CH6640E/CG6640E Wireless Gateway Series Multiple Vulnerabilities
  229. [local] - Free WMA MP3 Converter 1.8 (.wav) - Buffer Overflow
  230. [webapps] - Wordpress CP Multi View Event Calendar 1.01 - SQL Injection
  231. [webapps] - Dell SonicWall GMS 7.2.x - Code Injection
  232. [webapps] - Axway Secure Transport 5.1 SP2 - Arbitary File Upload via CSRF
  233. [webapps] - Change CMS 3.6.8 - Multiple CSRF Vulnerabilities
  234. [webapps] - HttpCombiner ASP.NET - Remote File Disclosure Vulnerability
  235. [webapps] - vBulletin 4.x Verify Email Before Registration Plugin - SQL Injection
  236. [webapps] - Parallels Plesk Sitebuilder 9.5 - Multiple Vulnerabilities
  237. [remote] - Ammyy Admin 3.5 - RCE
  238. [webapps] - File Manager 4.2.10 iOS - Code Execution Vulnerability
  239. [dos] - OpenBSD
  240. [webapps] - Creative Contact Form (Wordpress 0.9.7 and Joomla 2.0.0) - Shell Upload V
  241. [webapps] - Dell EqualLogic Storage - Remote File Inclusion
  242. [remote] - Windows OLE - Remote Code Execution "Sandworm" Exploit (MS14-060)
  243. [webapps] - Magento Server MAGMI Plugin - Remote File Inclusion (RFI)
  244. [webapps] - Feng Office 1.7.4 - Cross Site Scripting Vulnerabilities
  245. [webapps] - Feng Office 1.7.4 - Arbitrary File Upload
  246. [webapps] - Creative Contact Form - Arbitrary File Upload
  247. [webapps] - DotNetNuke DNNspot Store 3.0.0 Arbitary File Upload
  248. [local] - iBackup 10.0.0.32 - Local Privilege Escalation
  249. [webapps] - File Manager 4.2.10 iOS - Code Execution Vulnerability
  250. [webapps] - iFunBox Free 1.1 iOS - File Inclusion Vulnerability