المساعد الشخصي الرقمي

مشاهدة النسخة كاملة : exploit database

الصفحات : 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 [39] 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59
  1. [shellcode] - Windows x86 - MessageBoxA Shellcode (242 bytes)
  2. [papers] - [Turkish] Drupal Coder Vulnerability Analysis & MSF Module Dev
  3. [dos] - Google Chrome 26.0.1410.43 (Webkit) - OBJECT Element Use After Free PoC
  4. [webapps] - WSO2 Carbon 4.4.5 - (Denial of Service) CSRF
  5. [webapps] - WSO2 Carbon 4.4.5 - Stored XSS
  6. [webapps] - WSO2 Carbon 4.4.5 - Local File Inclusion
  7. [webapps] - WSO2 Identity Server 5.1.0 - Multiple Vulnerabilities
  8. [dos] - Microsoft Office Word 2013,2016 - sprmSdyaTop Denial of Service (MS16-099)
  9. [webapps] - Zabbix 2.2.x, 3.0.x - SQL Injection
  10. [webapps] - GitLab - "impersonate" Feature Privilege Escalation
  11. [remote] - Samsung Smart Home Camera SNH-P-6410 - Command Injection
  12. [remote] - Easy FTP Server - "APPE" Command Buffer Overflow Remote Exploit
  13. [remote] - Apache + PHP < 5.3.12 / < 5.4.2 - Remote Code Execution (Multithreaded Sca
  14. [webapps] - FreePBX 13 / 14 - Remote Code Execution
  15. [webapps] - ColoradoFTP 1.3 Prime Edition (Build 8) - Directory Traversal
  16. [local] - EyeLock Myris 3.3.2 - SDK Service Unquoted Service Path Privilege Escalatio
  17. [webapps] - vBulletin 5.2.2 - Preauth Server Side Request Forgery (SSRF)
  18. [webapps] - EyeLock nano NXT 3.5 - Local File Disclosure
  19. [webapps] - EyeLock nano NXT 3.5 - Remote Root Exploit
  20. [dos] - SAP SAPCAR - Multiple Vulnerabilities
  21. [webapps] - WebNMS Framework Server 5.2 and 5.2 SP1 - Multiple Vulnerabilities
  22. [dos] - Microsoft Office Word 2007,2010,2013,2016 - Out-of-Bounds Read Remote Code Ex
  23. [webapps] - Nagios Network Analyzer 2.2.1 - Multiple CSRF
  24. [shellcode] - Linux/x86 - zsh TCP Bind Shell Port 9090 (96 bytes)
  25. [shellcode] - Linux/x86 - zsh Reverse TCP Shellcode port 9090 (80 bytes)
  26. [webapps] - WordPress Add From Server Plugin < 3.3.2 - (File Upload) CSRF
  27. [webapps] - phpCollab CMS 2.5 - (emailusers.php) SQL Injection
  28. [local] - Microsoft Windows Group Policy - Privilege Escalation (MS16-072)
  29. [webapps] - Navis WebAccess - SQL Injection
  30. [remote] - Drupal Module Coder < 7.x-1.3 / 7.x-2.6 - Remote Code Execution Exploit (S
  31. [webapps] - NUUO NVRmini 2 3.0.8 - (strong_user.php) Backdoor Remote Shell Access
  32. [webapps] - NUUO NVRmini 2 3.0.8 - Arbitrary File Deletion
  33. [webapps] - NUUO NVRmini 2 3.0.8 - ShellShock Remote Code Execution
  34. [webapps] - NUUO NVRmini 2 3.0.8 - Multiple OS Command Injection
  35. [webapps] - NUUO NVRmini 2 3.0.8 - Local File Disclosure
  36. [webapps] - NUUO NVRmini 2 3.0.8 - (Add Admin) CSRF
  37. [webapps] - NUUO NVRmini 2 3.0.8 - Remote Root Exploit
  38. [dos] - Kodi Web Server 16.1 - Denial of Service
  39. [webapps] - PHP Power Browse 1.2 - Directory Traversal
  40. [local] - zFTP Client 20061220 - (Connection Name) Local Buffer Overflow
  41. [webapps] - Subrion CMS 4.0.5 - SQL Injection
  42. [webapps] - NASdeluxe NDL-2400r 2.01.09 - OS Command Injection
  43. [webapps] - WordPress Count per Day Plugin 3.5.4 - Stored Cross-Site Scripting
  44. [webapps] - Davolink DV-2051 - Multiple Vulnerabilities
  45. [remote] - ntop 2.3
  46. [remote] - NUUO NVRmini2 / NVRsolo / Crystal Devices and NETGEAR ReadyNAS Surveillanc
  47. [dos] - Wireshark 2.0.0 to 2.0.4, 1.12.0 to 1.12.12 - RLC Dissector Denial of Service
  48. [dos] - Wireshark 2.0.0 to 2.0.4, 1.12.0 to 1.12.12 - WSP Dissector Denial of Service
  49. [dos] - Wireshark 2.0.0 to 2.0.4, 1.12.0 to 1.12.12 - PacketBB Dissector Denial of Se
  50. [dos] - Wireshark 2.0.0 to 2.0.4 - CORBA IDL Dissectors Denial of Service
  51. [dos] - Wireshark 2.0.0 to 2.0.4 - MMSE, WAP, WBXML, and WSP Dissectors Denial of Ser
  52. [dos] - Wireshark 1.12.0 to 1.12.12 - NDS Dissector Denial of Service
  53. [webapps] - Open Upload 0.4.2 - (Add Admin) CSRF
  54. [dos] - Halliburton LogView Pro 9.7.5 - (.cgm/.tif/.tiff/.tifh) Crash PoC
  55. [webapps] - WordPress WP Live Chat Support Plugin 6.2.03 - Stored XSS
  56. [webapps] - WordPress ALO EasyMail Newsletter Plugin 2.9.2 - (Add/Import Arbitrary Su
  57. [webapps] - WordPress Booking Calendar Plugin 6.2 - SQL Injection
  58. [papers] - [Hebrew] Digital Whisper Security Magazine #74
  59. [webapps] - PhpMyAdmin 4.6.2 - Post-Auth Remote Code Execution
  60. [dos] - WebKit - TypedArray.copyWithin Memory Corruption
  61. [webapps] - Trend Micro Deep Discovery 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) - hotf
  62. [shellcode] - Linux/x86 - NetCat Bind Shell with Port (44, 52 bytes)
  63. [remote] - Easy File Sharing Web Server 7.2 - SEH Overflow (Egghunter)
  64. [remote] - Barracuda Web Application Firewall 8.0.1.008 - Post Auth Remote Root Explo
  65. [remote] - Barracuda Web App Firewall 8.0.1.008/Load Balancer 5.4.0.004 - Post Auth R
  66. [shellcode] - Windows x86 - localhost Port Scanner Shellcode (556 bytes)
  67. [webapps] - Wordpress Ultimate Product Catalog 3.9.8 - (do_shortcode via ajax) Blind
  68. [local] - mySCADAPro 7 - Local Privilege Escalation
  69. [local] - VUPlayer 2.49 - (.pls) Stack Buffer Overflow (DEP Bypass)
  70. [webapps] - AXIS Multiple Products - Authenticated Remote Command Execution via devto
  71. [remote] - Centreon 2.5.3 - Web Useralias Command Execution (Metasploit)
  72. [local] - VMware - Setuid vmware-mount Popen lsb_release Privilege Escalation (VMSA-2
  73. [remote] - Iris ID IrisAccess iCAM4000/iCAM7000 - Hardcoded Credentials Remote Shell
  74. [webapps] - Iris ID IrisAccess ICU 7000-2 - Remote Root Command Execution
  75. [webapps] - Iris ID IrisAccess ICU 7000-2 - Multiple Vulnerabilities
  76. [webapps] - PHP File Vault 0.9 - Directory Traversal
  77. [remote] - Barracuda Web App Firewall 8.0.1.007/Load Balancer 5.4.0.004 - Post Auth R
  78. [webapps] - Micro Focus Filr 2 2.0.0.421, Filr 1.2 1.2.0.846 - Multiple Vulnerabiliti
  79. [webapps] - Bellini/Supercook Wi-Fi Yumi SC200 - Multiple Vulnerabilities
  80. [webapps] - PHP gettext (gettext.php) 1.0.12 - Unauthenticated Code Execution
  81. [local] - CoolPlayer+ Portable 2.19.6 - .m3u Stack Overflow (Egghunter+ASLR bypass)
  82. [papers] - Cryptshare 3.10.1.2 - Stored XSS
  83. [webapps] - GRR Système de Gestion et de Réservations de Ressources 3.0.0-RC1 - Arbit
  84. [dos] - PHP 7.0.8, 5.6.23 and 5.5.37 - bzread() Out-of-Bounds Write
  85. [webapps] - Ubee EVW3226 Modem/Router 1.0.20 - Multiple Vulnerabilities
  86. [webapps] - Technicolor TC7200 Modem/Router STD6.02.11 - Multiple Vulnerabilities
  87. [webapps] - Hitron CGNV4 Modem/Router 4.3.9.9-SIP-UPC - Multiple Vulnerabilities
  88. [webapps] - Compal CH7465LG-LC Modem/Router CH7465LG-NCIP-4.50.18.13-NOSH - Multiple
  89. [webapps] - CodoForum 3.2.1 - SQL Injection
  90. [local] - Rapid7 AppSpider 6.12 - Local Privilege Escalation
  91. [remote] - Barracuda Web App Firewall 8.0.1.007/Load Balancer 5.4.0.004 - Remote Comm
  92. [remote] - Barracuda Spam & Virus Firewall 5.1.3.007 - Remote Command Execution (Meta
  93. [local] - MediaCoder 0.8.43.5852 - .m3u SEH Exploit
  94. [webapps] - Drupal CODER Module 2.5 - Remote Command Execution (Metasploit)
  95. [local] - mail.local(8) (NetBSD) - Local Root Exploit (NetBSD-SA2016-006)
  96. [remote] - Apache 2.4.7 & PHP
  97. [papers] - Novel contributions to the field - How I broke MySQL's codebase
  98. [remote] - TFTP Server 1.4 - WRQ Buffer Overflow Exploit (Egghunter)
  99. [shellcode] - Linux/x86-64 - Subtle Probing Reverse Shell, Timer, Burst, Password, Mu
  100. [webapps] - TeamPass Passwords Management System 2.1.26 - Arbitrary File Download
  101. [local] - Wowza Streaming Engine 4.5.0 - Local Privilege Escalation
  102. [webapps] - Wowza Streaming Engine 4.5.0 - Remote Privilege Escalation
  103. [webapps] - Wowza Streaming Engine 4.5.0 - Add Advanced Admin CSRF
  104. [remote] - OpenSSHD
  105. [webapps] - Wowza Streaming Engine 4.5.0 - Multiple XSS
  106. [webapps] - WordPress Video Player Plugin 1.5.16 - SQL Injection
  107. [shellcode] - Linux/CRISv32 - Axis Communication Connect Back Shellcode (189 bytes)
  108. [webapps] - Django CMS 3.3.0 - (Editor Snippet) Persistent XSS
  109. [remote] - Drupal RESTWS Module 7.x - Remote PHP Code Execution (Metasploit)
  110. [shellcode] - Linux/x86 - execve /bin/sh Shellcode (19 bytes)
  111. [webapps] - newsp.eu PHP Calendar Script 1.0 - User Credentials Disclosure
  112. [webapps] - NewsP Free News Script 1.4.7 - User Credentials Disclosure
  113. [papers] - Exploiting Apache James Server 2.3.2
  114. [remote] - Axis Communications MPQT/PACS 5.20.x - Server Side Include (SSI) Daemon Re
  115. [shellcode] - Linux/x86-64 - Syscall Persistent Bind Shell + (Multi-terminal) + Passw
  116. [remote] - Meinberg NTP Time Server ELX800/GPS M4x V5.30p - Remote Command Execution
  117. [WebApps] - vBulletin 5.x/4.x - Persistent XSS in AdminCP/ApiLog via xmlrpc API (Post
  118. [WebApps] - vBulletin 4.x - SQLi in breadcrumbs via xmlrpc API (Post-Auth)
  119. [Local] - Internet Explorer 11 (on Windows 10) - VBScript Memory Corruption Proof-of-
  120. [Remote] - DropBearSSHD
  121. [remote] - OpenSSHD
  122. [webapps] - Clear Voyager Hotspot IMW-C910W - Arbitrary File Disclosure
  123. [webapps] - Joomla Guru Pro (com_guru) Component - SQL Injection
  124. [shellcode] - Linux x86 Reverse Shell using Xterm ///usr/bin/xterm -display 127.1.1.
  125. [webapps] - Apache Archiva 1.3.9 - Multiple CSRF Vulnerabilities
  126. [remote] - Riverbed SteelCentral NetProfiler/NetExpress Remote Code Execution
  127. [local] - MS16-032 Secondary Logon Handle Privilege Escalation
  128. [dos] - Adobe Flash Player 22.0.0.192 - DefineSprite Memory Corruption
  129. [dos] - Adobe Flash Player 22.0.0.192 - DefineBitsJPEG2 Memory Corruption
  130. [webapps] - GSX Analyzer 10.12 and 11 - Main.swf Hardcoded Superadmin Credentials
  131. [shellcode] - Windows x86 URLDownloadToFileA()+SetFileAttributesA()+WinExec( )+ExitPro
  132. [dos] - Adobe Flash Player 22.0.0.192 - SceneAndFrameData Memory Corruption
  133. [dos] - Adobe Flash Player 22.0.0.192 - TAG Memory Corruption
  134. [webapps] - Clinic Management System - Blind SQL Injection
  135. [webapps] - Beauty Parlour & SPA Saloon Management System - Blind SQL Injection
  136. [webapps] - WordPress All in One SEO Pack Plugin 2.3.6.1 - Persistent XSS
  137. [webapps] - Belkin Router AC1200 Firmware 1.00.27 - Authentication Bypass
  138. [remote] - Ruby on Rails ActionPack Inline ERB Code Execution
  139. [local] - MS16-016 mrxdav.sys WebDav Local Privilege Escalation
  140. [remote] - Tiki Wiki 15.1 - Unauthenticated File Upload Vulnerability (msf)
  141. [dos] - Adobe Flash - ATF Image Packing Overflow
  142. [webapps] - Tiki Wiki CMS 15.0 - Arbitrary File Download
  143. [shellcode] - Linux x86-64 Continuously-Probing Reverse Shell via Socket + Port-range
  144. [webapps] - Streamo Online Radio And TV Streaming CMS - SQL Injection
  145. [webapps] - CyberPower Systems PowerPanel 3.1.2 - XXE Out-Of-Band Data Retrieval
  146. [webapps] - php Real Estate Script 3 - Arbitrary File Disclosure
  147. [shellcode] - Linux x86 TCP Reverse Shellcode - 75 bytes
  148. [dos] - Microsoft WinDbg logviewer.exe - Crash PoC
  149. [dos] - Microsoft Process Kill Utility (kill.exe) 6.3.9600.17298 - Crash PoC
  150. [local] - InstantHMI 6.1 - Privilege Escalation
  151. [local] - Hide.Me VPN Client 1.2.4 - Privilege Escalation
  152. [webapps] - WordPress Lazy Content Slider Plugin 3.4 - (Add Catetory) CSRF
  153. [local] - GE Proficy HMI/SCADA CIMPLICITY 8.2 - Local Privilege Escalation
  154. [webapps] - OPAC KpwinSQL - Multiple Vulnerabilities
  155. [dos] - Core FTP LE 2.2 - Path Field Local Buffer Overflow
  156. [local] - VUPlayer 2.49 - .m3u Buffer Overflow Exploit (Win 7 DEP Bypass)
  157. [remote] - Nagios XI Chained Remote Code Execution
  158. [local] - Samsung Android JACK - Privilege Escalation
  159. [webapps] - OpenFire 3.10.2 - 4.0.1 - Multiple Vulnerabilities
  160. [remote] - GNU Wget < 1.18 - Arbitrary File Upload/Remote Code Execution
  161. [webapps] - PaKnPost Pro 1.14 - Multiple Vulnerabilities
  162. [webapps] - Advanced Webhost Billing System (AWBS) 2.9.6 - Multiple Vulnerabilities
  163. [shellcode] - Linux 64bit Ncat Shellcode (SSL, MultiChannel, Persistant, Fork, IPv4/6
  164. [webapps] - 24online SMS_2500i 8.3.6 build 9.0 - SQL Injection
  165. [webapps] - CIMA DocuClass ECM - Multiple Vulnerabilities
  166. [shellcode] - Linux x86 TCP Bind Shell Port 4444 - 98 bytes
  167. [webapps] - eCardMAX 10.5 - Multiple Vulnerabilities
  168. [webapps] - WebCalendar 1.2.7 - Multiple Vulnerabilities
  169. [webapps] - WordPress Real3D FlipBook Plugin - Multiple Vulnerabilities
  170. [local] - Debian Exim - Spool Local Root Privilege Escalation
  171. [local] - Ubuntu 16.04 Kernel 4.4.0-21-generic - netfilter target_offset Local root E
  172. [shellcode] - Linux 64bit NetCat Bind Shell Shellcode - 64 bytes
  173. [webapps] - Ktools Photostore 4.7.5 - Multiple Vulnerabilities
  174. [webapps] - XpoLog Center 6 - Remote Command Execution CSRF
  175. [local] - Ubuntu 16.04 local root exploit - netfilter target_offset OOB
  176. [webapps] - Phoenix Exploit Kit - Remote Code Execution
  177. [webapps] - Ktools Photostore 4.7.5 - Blind SQL Injection
  178. [webapps] - Concrete5 5.7.3.1 - (Application::dispatch) Local File Inclusion
  179. [webapps] - Ubiquiti Administration Portal - CSRF to Remote Command Execution
  180. [local] - Cuckoo Sandbox Guest 2.0.1 - XMLRPC Privileged Remote Code Execution
  181. [webapps] - WordPress Ultimate Membership Pro Plugin 3.3 - SQL Injection
  182. [local] - Lenovo ThinkPad - System Management Mode Arbitrary Code Execution Exploit
  183. [local] - Windows 7 SP1 x86 - Privilege Escalation (MS16-014)
  184. [webapps] - Symantec Endpoint Protection Manager 12.1 - Multiple Vulnerabilities
  185. [dos] - Symantec Antivirus - PowerPoint Misaligned Stream-cache Remote Stack Buffer O
  186. [dos] - Symantec Antivirus - Missing Bounds Checks in dec2zip ALPkOldFormatDecompress
  187. [dos] - Symantec Antivirus - Integer Overflow in TNEF Decoder
  188. [dos] - Symantec Antivirus - Heap Overflow Modifying MIME Messages
  189. [dos] - Symantec Antivirus - Remote Stack Buffer Overflow in dec2lha Library
  190. [dos] - Symantec Antivirus - Multiple Remote Memory Corruption Unpacking RAR
  191. [webapps] - Untangle NGFW 12.1.0 beta - execEvil() Command Injection
  192. [shellcode] - Linux x86_64 /etc/passwd File Sender Shellcode
  193. [webapps] - Riverbed SteelCentral NetProfiler & NetExpress 10.8.7 - Multiple Vulnerab
  194. [webapps] - SugarCRM 6.5.18 - PHP Code Injection
  195. [shellcode] - Linux x86 /bin/sh Shellcode + ASLR Bruteforce
  196. [local] - HNB 1.9.18-10 - Local Buffer Overflow
  197. [webapps] - BigTree CMS 4.2.11 - SQL Injection
  198. [local] - PInfo 0.6.9-5.1 - Local Buffer Overflow
  199. [webapps] - iBilling 3.7.0 - Stored and Reflected XSS
  200. [webapps] - MyLittleForum 2.3.5 - PHP Command Injection
  201. [local] - Panda Security Multiple Products - Privilege Escalation
  202. [webapps] - Kagao 3.0 - Multiple Vulnerabilities
  203. [webapps] - Option CloudGate CG0192-11897 - Multiple Vulnerabilities
  204. [dos] - Magnet Networks Tesley CPVA 642 Router – Weak WPA-PSK Passphrase Algorithm
  205. [webapps] - XuezhuLi FileSharing - Directory Traversal
  206. [webapps] - XuezhuLi FileSharing - (Add User) CSRF
  207. [webapps] - FinderView - Multiple Vulnerabilities
  208. [shellcode] - Linux Netcat Reverse Shell - 32bit - 77 bytes
  209. [webapps] - Getsimple CMS 3.3.10 - Arbitrary File Upload
  210. [webapps] - Alibaba Clone B2B Script - Arbitrary File Disclosure
  211. [papers] - [Hebrew] Digital Whisper Security Magazine #73
  212. [local] - Linux Kernel
  213. [remote] - PCMAN FTP 2.0.7 - ls Command Buffer Overflow (Metasploit)
  214. [papers] - [Hebrew] Digital Whisper Security Magazine #71
  215. [papers] - [Hebrew] Digital Whisper Security Magazine #72
  216. [remote] - Wolf CMS 0.8.2 - Arbitrary File Upload Exploit (Metasploit)
  217. [shellcode] - Windows x86 ShellExecuteA(NULL,NULL,"cmd.exe",NULL,NULL,1) Shellcode
  218. [webapps] - Radiant CMS 1.1.3 - Mutiple Persistent XSS Vulnerabilities
  219. [webapps] - YetiForce CRM < 3.1 - Persistent XSS
  220. [webapps] - SAP NetWeaver AS JAVA 7.1 - 7.5 - Directory Traversal
  221. [webapps] - SAP NetWeaver AS JAVA 7.1 - 7.5 - ctcprotocol Servlet XXE
  222. [dos] - Windows - Custom Font Disable Policy Bypass
  223. [local] - Linux - ecryptfs and /proc/$pid/environ Privilege Escalation
  224. [dos] - Windows Kernel - ATMFD.DLL NamedEscape 0x250C Pool Corruption (MS16-074)
  225. [dos] - Windows - gdi32.dll Multiple DIB-Related EMF Record Handlers Heap-Based Out-o
  226. [dos] - Internet Explorer 11 - Garbage Collector Attribute Type Confusion (MS16-063)
  227. [webapps] - Joomla Publisher Pro (com_publisher) Component - SQL Injection
  228. [webapps] - Yona CMS - (Add Admin) CSRF
  229. [webapps] - IonizeCMS 1.0.8 - (Add Admin) CSRF
  230. [dos] - Banshee 2.6.2 - .mp3 Crash PoC
  231. [remote] - DarkComet Server Remote File Download Exploit (msf)
  232. [local] - ACROS Security 0patch 2016.05.19.539 - (0PatchServicex64.exe) Unquoted Serv
  233. [webapps] - Symphony CMS 2.6.7 - Session Fixation
  234. [webapps] - Airia - Webshell Upload Exploit
  235. [webapps] - Airia - (Add content) CSRF
  236. [local] - Tomabo MP4 Player 3.11.6 - SEH Based Stack Overflow (msf)
  237. [shellcode] - Windows XP - 10 - Download & Execute Shellcode
  238. [webapps] - Premium SEO Pack 1.9.1.3 - wp_options Overwrite
  239. [webapps] - Joomla BT Media (com_bt_media) Component - SQL Injection
  240. [webapps] - sNews CMS 1.7.1 - Multiple Vulnerabilities
  241. [shellcode] - Linux x86_64 execve Shellcode - 15 bytes
  242. [webapps] - WordPress Ultimate Product Catalog Plugin 3.8.1 - Privilege Escalation
  243. [remote] - op5 v7.1.9 Configuration Command Execution
  244. [webapps] - phpATM 1.32 - Multiple Vulnerabilities
  245. [webapps] - phpATM 1.32 - Remote Command Execution (Shell Upload) on Windows Servers
  246. [webapps] - Vicidial 2.11 - Scripts Stored XSS
  247. [webapps] - WordPress Gravity Forms Plugin 1.8.19 - Arbitrary File Upload
  248. [dos] - Blat 3.2.14 - Stack Overflow
  249. [local] - Solarwinds Virtualization Manager - Privilege Escalation
  250. [webapps] - Tiki-Wiki CMS Calendar 14.2, 12.5 LTS, 9.11 LTS, and 6.15 - Remote Code E