المساعد الشخصي الرقمي

مشاهدة النسخة كاملة : exploit database


الصفحات : 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 [32] 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48

  1. [remote] - TrendMicro node.js HTTP Server Listening on localhost Can Execute Commands
  2. [local] - Amanda
  3. [dos] - KeePass Password Safe Classic 1.29 - Crash PoC
  4. [shellcode] - Linux x86 - Egg-hunter (13 bytes)
  5. [shellcode] - x86_64 Linux Egghunter - 18 bytes
  6. [webapps] - WP Symposium Pro Social Network Plugin 15.12 - Multiple Vulnerabilities
  7. [shellcode] - Linux/x86 execve "/bin/sh" - shellcode 24 byte
  8. [webapps] - AVM FRITZ!Box < 6.30 - Buffer Overflow
  9. [webapps] - OpenMRS Reporting Module 0.9.7 - Remote Code Execution
  10. [webapps] - D-Link DCS-931L File Upload
  11. [shellcode] - TCP Reverse Shell with Password Prompt - 151 bytes
  12. [webapps] - MediaAccess TG788vn - Unauthenticated File Disclosure
  13. [webapps] - Open Audit SQL Injection Vulnerability
  14. [webapps] - PHPIPAM 1.1.010 - Multiple Vulnerabilities
  15. [webapps] - Atlassian Confluence 5.2 / 5.8.14 / 5.8.15 - Multiple Vulnerabilities
  16. [dos] - Ganeti - Multiple Vulnerabilities
  17. [webapps] - Simple PHP Polling System - Multiple Vulnerabilities
  18. [webapps] - Online Airline Booking System - Multiple Vulnerabilities
  19. [local] - Ubuntu 14.04 LTS, 15.10 overlayfs - Local Root Exploit
  20. [dos] - pdfium CPDF_Function::Call - Stack-Based Buffer Overflow
  21. [dos] - pdfium IsFlagSet (v8 memory management) - SIGSEGV
  22. [dos] - pdfium CPDF_TextObject::CalcPositionData - Heap-Based Out-of-Bounds Read
  23. [dos] - pdfium CPDF_DIBSource::DownSampleScanline32Bit - Heap-Based Out-of-Bounds Rea
  24. [remote] - Rejetto HTTP File Server (HFS) 2.3.x - Remote Command Execution
  25. [shellcode] - tcp bindshell with password prompt in 162 bytes
  26. [shellcode] - x86_64 Linux bind TCP port shellcode
  27. [local] - KiTTY Portable
  28. [papers] - KiTTY Portable
  29. [local] - KiTTY Portable
  30. [remote] - KiTTY Portable
  31. [local] - DeleGate 9.9.13 - Local Root Vulnerability
  32. [webapps] - Simple Ads Manager 2.9.4.116 - SQL Injection
  33. [local] - FTPShell Client 5.24 - Buffer Overflow
  34. [papers] - [Turkish] Back To BackDoor
  35. [dos] - AccessDiver 4.301 - Buffer Overflow
  36. [webapps] - Beezfud - Remote Code Execution
  37. [local] - EasyCafe Server
  38. [webapps] - Rips Scanner 0.5 - (code.php) Local File Inclusion
  39. [webapps] - PhpSocial 2.0.0304_20222226 - CSRF Vulnerability
  40. [webapps] - Arastta 1.1.5 - SQL Injection Vulnerabilities
  41. [webapps] - Grawlix 1.0.3 - CSRF Vulnerability
  42. [webapps] - Bigware Shop 2.3.01 - Multiple Local File Inclusion Vulnerabilities
  43. [dos] - PHP 7.0.0 - Format String Vulnerability
  44. [dos] - Wireshark AirPDcapDecryptWPABroadcastKey - Heap-Based Out-of-Bounds Read
  45. [dos] - Wireshark infer_pkt_encap - Heap-Based Out-of-Bounds Read
  46. [dos] - Adobe Flash Sound.setTransform - Use-After-Free
  47. [papers] - [Portuguese] Introduçao a exploraçao de Structured Excpetion Handlers
  48. [dos] - Base64 Decoder 1.1.2 - SEH OverWrite PoC
  49. [webapps] - Ovidentia Widgets 1.0.61 - Remote Command Execution Exploit
  50. [webapps] - Ovidentia online Module 2.8 - GLOBALS[babAddonPhpPath] Remote File Inclus
  51. [dos] - Notepad++ NPPFtp Plugin 0.26.3 - Buffer Overflow
  52. [dos] - Apache 2.4.17 - Denial of Service
  53. [dos] - Adobe Flash MovieClip.localToGlobal - Use-After-Free
  54. [dos] - Adobe Flash MovieClip.attachMovie - Use-After-Free
  55. [dos] - Adobe Flash TextField.tabIndex Setter - Use-After-Free
  56. [dos] - Adobe Flash TextField.text Setter - Use-After-Free
  57. [dos] - Adobe Flash TextField.type Setter - Use-After-Free
  58. [dos] - Adobe Flash TextField.htmlText Setter - Use-After-Free
  59. [dos] - Adobe Flash TextField.variable Setter - Use-After-Free
  60. [dos] - Adobe Flash TextField Variable - Use-After Free
  61. [dos] - Adobe Flash TextField.replaceText - Use-After-Free
  62. [dos] - Adobe Flash TextField.replaceSel - Use-After-Free
  63. [webapps] - PFSense
  64. [local] - Microsoft Windows win32k Local Privilege Escalation (MS15-010)
  65. [webapps] - Ovidentia maillist Module 4.0 - Remote File Inclusion Exploit
  66. [remote] - Joomla 1.5 - 3.4.5 - Object Injection RCE X-Forwarded-For Header
  67. [dos] - win32k Clipboard Bitmap - Use-After-Free Vulnerability
  68. [dos] - win32k Desktop and Clipboard - Null Pointer Derefence
  69. [dos] - Windows Kernel win32k!OffsetChildren - Null Pointer Dereference
  70. [dos] - Samsung Galaxy S6 Samsung Gallery - Bitmap Decoding Crash
  71. [dos] - Samsung Galaxy S6 Samsung Gallery - GIF Parsing Crash
  72. [dos] - Adobe Flash GradientFill - Use-After-Frees
  73. [dos] - Adobe Flash MovieClip.lineStyle - Use-After-Frees
  74. [dos] - Adobe Flash TextField.gridFitType Setter - Use-After-Free
  75. [dos] - Adobe Flash TextField.antiAliasType Setter - Use-After-Free
  76. [webapps] - Zen Cart 1.5.4 - Local File Inclusion
  77. [local] - Gentoo Local Priv Escalation in QEMU
  78. [remote] - Easy File Sharing Web Server 7.2 - HEAD HTTP Request SEH Buffer Overflow
  79. [remote] - Easy File Sharing Web Server 7.2 - GET HTTP Request SEH Buffer Overflow
  80. [remote] - FireEye Wormable Remote Code Execution in MIP JAR Analysis
  81. [dos] - Wireshark - getRate Stack-Based Out-of-Bounds Read
  82. [dos] - Wireshark - AirPDcapPacketProcess Stack-Based Buffer Overflow
  83. [dos] - Wireshark - find_signature Stack-Based Out-of-Bounds Read
  84. [dos] - Wireshark - dissect_diameter_base_framed_ipv6_prefix Stack-Based Buffer Overf
  85. [dos] - Wireshark - addresses_equal (dissect_rsvp_common) Use-After-Free
  86. [dos] - Wireshark - ascend_seek Static Out-of-Bounds Read
  87. [dos] - Wireshark - my_dgt_tbcd_unpack Static Buffer Overflow
  88. [dos] - Wireshark - dissect_nbap_MACdPDU_Size SIGSEGV
  89. [dos] - Wireshark - memcpy (get_value / dissect_btatt) SIGSEGV
  90. [webapps] - Ovidentia bulletindoc Module 2.9 - Multiple Remote File Inclusion Vulnera
  91. [remote] - Jenkins CLI RMI Java Deserialization Vulnerability
  92. [remote] - ManageEngine Desktop Central 9 FileUploadServlet ConnectionId Vulnerabilit
  93. [webapps] - Ovidentia absences Module 2.64 - Remote File Inclusion
  94. [dos] - IBM Tivoli Storage Manager FastBack Server 5.5.4.2 - _FXCLI_GetConfFileChunk
  95. [dos] - IBM Tivoli Storage Manager FastBack Server 5.5.4.2 - _FXCLI_SetConfFileChunk
  96. [dos] - IBM Tivoli Storage Manager FastBack Server 5.5.4.2 - Invalid Pointer Derefere
  97. [remote] - Joomla 1.5 - 3.4.5 - Object Injection Remote Command Execution
  98. [dos] - Adobe Flash Type Confusion in Serialization with ObjectEncoder.dynamicPropert
  99. [dos] - Adobe Flash Type Confusion in IExternalizable.readExternal When Performing Lo
  100. [remote] - Microsoft Office / COM Object DLL Planting with comsvcs.dll Delay Load of
  101. [webapps] - Bitrix bitrix.xscan Module 1.0.3 - Directory Traversal
  102. [webapps] - Bitrix bitrix.mpbuilder Module 1.0.10 - Local File Inclusion
  103. [remote] - Xdh / LinuxNet Perlbot / fBot IRC Bot Remote Code Execution
  104. [remote] - Legend Perl IRC Bot Remote Code Execution
  105. [dos] - Internet Explorer 11 MSHTML!CObjectElement Use-After-Free Vulnerability (MS15
  106. [webapps] - Polycom VVX-Series Business Media Phones - Path Traversal Vulnerability
  107. [remote] - Siemens Simatic S7 1200 CPU Command Module (MSF)
  108. [papers] - [Persian] Bypass PowerShell Execution Policy
  109. [papers] - [Persian] Exposing the WiFi Password Using C and PowerShell
  110. [papers] - [Persian] Windows Hacking And Security Only in Physical Access
  111. [webapps] - WordPress Admin Management Xtended Plugin 2.4.0 - Privilege escalation
  112. [webapps] - ECommerceMajor - (productdtl.php, prodid param) SQL Injection Vulnerabili
  113. [shellcode] - Windows XP-10 - Null-Free WinExec Shellcode (Python)
  114. [dos] - Avast Integer Overflow Verifying numFonts in TTC Header
  115. [dos] - Avast Heap Overflow Unpacking MoleBox Archives
  116. [dos] - Avast JetDb::IsExploited4x - Performs Unbounded Search on Input
  117. [dos] - Avast OOB Write Decrypting PEncrypt Packed Executables
  118. [dos] - Rar CmdExtract::UnstoreFile Integer Truncation Memory Corruption
  119. [webapps] - Skybox Platform
  120. [webapps] - Gokhan Balbal Script 2.0 - CSRF Vulnerability
  121. [webapps] - iy10 Dizin Scripti - Multiple Vulnerabilities
  122. [papers] - [Persian] Image File Execution Vulnerability
  123. [papers] - [Persian] Advanced NTFS Alternate Data Stream in Windows 8 and 10
  124. [remote] - Microsoft Office / COM Object els.dll DLL Planting (MS15-134)
  125. [dos] - MacOS X 10.11 FTS Deep Structure of the File System Buffer Overflow
  126. [dos] - IE 11.0.9600.18097 COmWindowProxy::SwitchMarkup NULL PTR
  127. [webapps] - Wordpress Plugin WP Easy Poll 1.1.3 - XSS and CSRF
  128. [webapps] - WIMAX MT711x - Multiple Vulnerabilities
  129. [webapps] - WIMAX LX350P(WIXFMR-108) - Multiple Vulnerabilities
  130. [remote] - Microsoft Windows Media Center Link File Incorrectly Resolved Reference
  131. [remote] - Microsoft Windows Media Center Library Parsing RCE Vulnerability aka "self
  132. [webapps] - dotCMS 3.2.4 - Multiple Vulnerabilities
  133. [remote] - Atlassian HipChat for Jira Plugin Velocity Template Injection
  134. [local] - iniNet SpiderControl PLC Editor Simatic 6.30.04 - Insecure File Permissions
  135. [local] - iniNet SpiderControl SCADA Web Server Service 2.02 - Insecure File Permissi
  136. [webapps] - WordPress Polls Widget Plugin 1.0.7 - SQL Injection Vulnerability
  137. [webapps] - PHP Utility Belt - Remote Code Execution
  138. [remote] - phpFileManager 0.9.8 Remote Code Execution
  139. [webapps] - OpenMRS 2.3 (1.11.4) - Local File Disclosure Vulnerability
  140. [webapps] - OpenMRS 2.3 (1.11.4) - Multiple Cross-Site Scripting Vulnerabilities
  141. [webapps] - OpenMRS 2.3 (1.11.4) - Expression Language Injection Vulnerability
  142. [webapps] - OpenMRS 2.3 (1.11.4) - XML External Entity (XXE) Processing Exploit
  143. [webapps] - SIMOGEO FileManager 2.3.0 - Multiple Vulnerabilities
  144. [papers] - [Persian] Change Powershell Command Line Job
  145. [papers] - [Turkish] Beurk Rootkit Password Cracking and Injection (Gizliligin Anatom
  146. [dos] - WinAsm Studio 5.1.8.8 - Buffer Overflow Crash PoC
  147. [local] - Cyclope Employee Surveillance
  148. [webapps] - Wordpress Plugin TheCartPress v1.4.7 - Multiple Vulnerabilities
  149. [webapps] - Wordpress Plugin Sell Download v1.0.16 - Local File Disclosure
  150. [webapps] - Wordpress Plugin Advanced uploader v2.10 - Multiple Vulnerabilities
  151. [webapps] - WordPress Gwolle Guestbook Plugin 1.5.3 - Remote File Inclusion
  152. [remote] - Oracle BeeHive 2 voice-servlet prepareAudioToPlay() Arbitrary File Upload
  153. [remote] - Oracle BeeHive 2 voice-servlet processEvaluation() Vulnerability
  154. [dos] - Malwarebytes Antivirus 2.2.0 - DoS PoC
  155. [dos] - Gnome Nautilus 3.16 - Denial of Service
  156. [webapps] - WordPress Users Ultra Plugin 1.5.50 - Persistent XSS
  157. [webapps] - WordPress Users Ultra Plugin 1.5.50 - Blind SQL injection
  158. [webapps] - IP.Board 4.1.4.x - Persistent XSS Vulnerability
  159. [webapps] - Sysaid Helpdesk Software 14.4.32 b25 - SQL Injection
  160. [remote] - Advantech Switch Bash Environment Variable Code Injection (Shellshock)
  161. [local] - Acunetix WVS 10 - Local Privilege escalation
  162. [webapps] - Zenphoto 1.4.10 - Local File Inclusion
  163. [webapps] - ntop-ng
  164. [webapps] - Belkin N150 Wireless Home Router F9K1009 v1 - Multiple Vulnerabilities
  165. [papers] - [Hebrew] Digital Whisper Security Magazine #66
  166. [papers] - [Hebrew] Digital Whisper Security Magazine #67
  167. [local] - Centos 7.1/Fedora 22 - abrt Local Root
  168. [webapps] - Kodi 15 - Arbitrary File Aaccess (Web Interface)
  169. [local] - RHEL 7.0/7.1 - abrt/sosreport Local Root
  170. [webapps] - HumHub 0.11.2 and 0.20.0-beta.2 - SQL Injection
  171. [remote] - Easy File Sharing Web Server 7.2 - Remote SEH Buffer Overflow (DEP Bypass
  172. [shellcode] - Linux x86_64 Polymorphic execve Shellcode - 31 bytes
  173. [remote] - SAP Sybase Adaptive Server Enterprise XML External Entity Information Disc
  174. [webapps] - WP-Client 3.8.7 - Stored XSS Vulnerability
  175. [remote] - Joomla Content History SQLi Remote Code Execution
  176. [dos] - Windows Kernel Device Contexts and NtGdiSelectBitmap Use-After-Free (MS15-115
  177. [dos] - Windows Race Condition DestroySMWP Use-After-Free (MS15-115)
  178. [dos] - Windows Cursor Object Potential Memory Leak (MS15-115)
  179. [dos] - Windows ndis.sys IOCTL 0x170034 (ndis!ndisNsiGetIfNameForIfIndex) - Pool Buff
  180. [local] - NVIDIA Stereoscopic 3D Driver Service 7.17.13.5382 - Arbitrary Run Key Crea
  181. [dos] - Audacious 3.7 - ID3 Local Crash PoC
  182. [webapps] - vBulletin 5.x - Remote Code Execution Exploit
  183. [dos] - Oracle Outside In PDF 8.5.2 - Parsing Memory Corruption Vulnerability 2
  184. [dos] - Oracle Outside In PDF 8.5.2 - Parsing Memory Corruption Vulnerability
  185. [dos] - Acrobat Reader DC 15.008.20082.15957 - PDF Parsing Memory Corruption Vulnerab
  186. [webapps] - Cambium ePMP 1000 - Multiple Vulnerabilities
  187. [local] - Chkrootkit Local Privilege Escalation
  188. [webapps] - ZTE ZXHN H108N R1A, ZXV10 W300 Routers - Multiple Vulnerabilities
  189. [webapps] - ZTE ADSL ZXV10 W300 Modems - Multiple Vulnerabilities
  190. [webapps] - Horde Groupware 5.2.10 - CSRF Vulnerability
  191. [remote] - F5 iControl iCall::Script Root Command Execution
  192. [dos] - Chrome - open-vcdiff OOB Read in Browser Process Integer Overflow
  193. [webapps] - Netwin SurgeFTP Sever 23d6 - Stored Cross Site Scripting Vulnerabilities.
  194. [dos] - Sam Spade 1.14 - Decode URL Buffer Overflow Crash PoC
  195. [dos] - SuperScan 4.1 - Windows Enumeration Hostname/IP/URL Field SEH Overflow
  196. [dos] - SuperScan 4.1 - Tools Hostname/IP/URL Field Buffer Overflow
  197. [dos] - SuperScan 4.1 - Scan Hostname/IP Field Buffer Overflow
  198. [local] - IBM i Access 7.1 - Buffer Overflow Code Execution
  199. [webapps] - WordPress Users Ultra Plugin 1.5.50 - Unrestricted File Upload
  200. [papers] - [Portuguese] Ataques Avancados contra CPL (Control Panel Applets)
  201. [dos] - Kaspersky Antivirus - ZIP File Format Use-After-Free Vulnerability
  202. [dos] - Kaspersky Antivirus - DEX File Format Memory Corruption
  203. [dos] - foobar2000 1.3.9 - (.asx) Local Crash PoC
  204. [dos] - Kaspersky Antivirus - Certificate Handling Path Traversal
  205. [remote] - Idera Up.Time Monitoring Station 7.4 post2file.php Arbitrary File Upload
  206. [remote] - Idera Up.Time Monitoring Station 7.0 post2file.php Arbitrary File Upload
  207. [remote] - XCart 5.2.6 - Code Execution Vulnerability
  208. [remote] - ClipperCMS 1.3.0 - Code Execution Vulnerability
  209. [webapps] - ClipperCMS 1.3.0 - Multiple SQL Injection Vulnerabilities
  210. [webapps] - AlegroCart 1.2.8 - LFI/RFI Vulnerability
  211. [webapps] - AlegroCart 1.2.8 - Multiple SQL Injection Vulnerabilities
  212. [remote] - D-Link DGL5500 - HNAP Buffer Overflow Vulnerability
  213. [remote] - D-Link DIR-880L - Multiple Buffer Overflow Vulnerabilities
  214. [shellcode] - x64 Linux egghunter in 24 bytes
  215. [webapps] - D-link Wireless Router DIR-816L – CSRF Vulnerability
  216. [webapps] - VLC Web Interface 2.2.1 - Metadata Title XSS Vulnerability
  217. [dos] - TECO AP-PCLINK 1.094 - .tpc File Handling Buffer Overflow Vulnerability
  218. [dos] - TECO TP3-PCLINK 2.1 - .tpc File Handling Buffer Overflow Vulnerability
  219. [dos] - TECO SG2 FBD Client 3.51 - .gfb SEH Overwrite Buffer Overflow Vulnerability
  220. [dos] - Sam Spade 1.14 - Browse URL Buffer Overflow PoC
  221. [local] - TECO JN5 L510-DriveLink 1.482 - .lf5 SEH Overwrite Buffer Overflow Exploit
  222. [local] - TECO SG2 LAD Client 3.51 - .gen SEH Overwrite Buffer Overflow Exploit
  223. [webapps] - CF Image Host 1.65 - PHP Command Injection
  224. [webapps] - CF Image Host 1.65 - CSRF Vulnerability
  225. [webapps] - b374k Web Shell - CSRF Command Injection
  226. [dos] - Sam Spade 1.14 - S-Lang Command Field SEH Overflow
  227. [local] - TUDU 0.82 - Local Stack-Based Buffer Overflow
  228. [local] - TACK 1.07 - Local Stack-Based Buffer Overflow
  229. [webapps] - R-Scripts Vacation Rental Script 7R - Multiple Vulnerabilities
  230. [local] - FBZX 2.10 - Local Stack-Based Buffer Overflow
  231. [webapps] - WordPress WP Fastest Cache Plugin 0.8.4.8 - Blind SQL Injection
  232. [webapps] - YESWIKI 0.2 - Path Traversal Vulnerability
  233. [webapps] - Jenkins 1.633 - Unauthenticated Credential Recovery
  234. [remote] - Huawei HG630a and HG630a-50 - Default SSH Admin Password on ADSL Modems
  235. [webapps] - Google AdWords
  236. [webapps] - eBay Magento CE
  237. [webapps] - Google AdWords API PHP client library
  238. [dos] - PHPMyLicense 3.0.0 - 3.1.4 - DoS
  239. [dos] - FreeType 2.6.1 TrueType tt_sbit_decoder_load_bit_aligned Heap-Based Out-of-Bo
  240. [webapps] - TestLink 1.9.14 - CSRF Vulnerability
  241. [remote] - Wordpress Ajax Load More PHP Upload Vulnerability
  242. [dos] - POP Peeper 4.0.1 - SEH Over-Write
  243. [webapps] - Arris TG1682G Modem - Stored XSS Vulnerability
  244. [dos] - QNap QVR Client 5.1.0.11290 - Crash PoC
  245. [papers] - Win32_bind Shellcode Review
  246. [webapps] - NXFilter 3.0.3 - Multiple XSS Vulnerabilities
  247. [webapps] - NXFilter 3.0.3 - CSRF Vulnerabilities
  248. [remote] - Solarwinds Log and Event Manager/Trigeo SIM 6.1.0 - Remote Command Executi
  249. [webapps] - OpenSSL Alternative Chains Certificate Forgery
  250. [webapps] - JSSE SKIP-TLS Exploit