المساعد الشخصي الرقمي

مشاهدة النسخة كاملة : exploit database


الصفحات : 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 [45] 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66

  1. [shellcode] - Linux/x86-64 - NetCat Reverse Shell Shellcode (72 bytes)
  2. [shellcode] - Linux/x86-64 - Polymorphic NetCat Reverse Shell Shellcode (106 bytes)
  3. [webapps] - EPSON TMNet WebConfig 1.00 - Cross-Site Scripting
  4. [shellcode] - Linux/x86-64 - Polymorphic Flush IPTables Shellcode (47 bytes)
  5. [webapps] - pfSense 2.3.2 - Cross-Site Scripting / Cross-Site Request Forgery
  6. [webapps] - Joomla! Component Coupon 3.5 - SQL Injection
  7. [webapps] - Wordpress < 4.7.1 - Username Enumeration
  8. [shellcode] - Linux/x86-64 - Polymorphic Setuid(0) & Execve(/bin/sh) Shellcode (31 by
  9. [webapps] - Joomla! Component Abstract 2.1 - SQL Injection
  10. [webapps] - Joomla! Component StreetGuessr Game 1.0 - SQL Injection
  11. [webapps] - Joomla! Component Guesser 1.0.4 - 'type' Parameter SQL Injection
  12. [webapps] - Joomla! Component Recipe Manager 2.2 - 'id' Parameter SQL Injection
  13. [webapps] - Php Classified OLX Clone Script - 'category' Parameter SQL Injection
  14. [webapps] - SchoolDir - SQL Injection
  15. [shellcode] - Windows x86 - Reverse TCP Staged Alphanumeric Shellcode (332 Bytes)
  16. [webapps] - Aruba AirWave 8.2.3 - XML External Entity Injection / Cross-Site Scriptin
  17. [webapps] - WordPress Plugin Contact Form Manager - Cross-Site Request Forgery / Cros
  18. [webapps] - WordPress Plugin User Login Log 2.2.1 - Cross-Site Scripting
  19. [webapps] - WordPress Plugin Popup by Supsystic 1.7.6 - Cross-Site Request Forgery
  20. [webapps] - WordPress Plugin NewStatPress 1.2.4 - Cross-Site Scripting
  21. [webapps] - WordPress Plugin Global Content Blocks 2.1.5 - Cross-Site Request Forgery
  22. [webapps] - WordPress Plugin File Manager 3.0.1 - Cross-Site Request Forgery
  23. [webapps] - DLink DSL-2730U Wireless N 150 - Cross-Site Request Forgery
  24. [remote] - SysGauge 1.5.18 - Buffer Overflow
  25. [shellcode] - Linux/x86-64 - Reverse Shell Shellcode (84 bytes)
  26. [dos] - BlueIris 4.5.1.4 - Denial of Service
  27. [dos] - Synchronet BBS 3.16c - Denial of Service
  28. [local] - Cisco AnyConnect Secure Mobility Client 4.3.04027 - Privilege Escalation
  29. [webapps] - NETGEAR DGN2200v1/v2/v3/v4 - Cross-Site Request Forgery
  30. [remote] - MVPower DVR TV-7104HE 1.8.4 115215B9 - Shell Unauthenticated Command Execu
  31. [papers] - RSA Asymmetric Polymorphic Shellcode
  32. [webapps] - Joomla! Component OneVote! 1.0 - SQL Injection
  33. [shellcode] - Linux/x86_64 - Random Listener Shellcode (54 bytes)
  34. [shellcode] - Windows x86 - Executable Directory Search Shellcode (130 bytes)
  35. [webapps] - NETGEAR DGN2200v1/v2/v3/v4 - 'dnslookup.cgi' Remote Command Execution
  36. [webapps] - Joomla! Component Gnosis 1.1.2 - 'id' Parameter SQL Injection
  37. [webapps] - Joomla! Component My MSG 3.2.1 - SQL Injection
  38. [webapps] - Joomla! Component Spinner 360 1.3.0 - SQL Injection
  39. [webapps] - Joomla! Component JomSocial - SQL Injection
  40. [dos] - Linux Kernel 4.4.0 (Ubuntu) - DCCP Double-Free PoC
  41. [local] - Linux Kernel 4.4.0 (Ubuntu) - DCCP Double-Free Privilege Escalation
  42. [webapps] - Joomla! Component Intranet Attendance Track 2.6.5 - SQL Injection
  43. [webapps] - Joomla! Component JooDatabase 3.1.0 - SQL Injection
  44. [webapps] - Joomla! Component JO Facebook Gallery 4.5 - SQL Injection
  45. [webapps] - Joomla! Component AJAX Search for K2 2.2 - SQL Injection
  46. [webapps] - Joomla! Component Community Surveys 4.3 - SQL Injection
  47. [webapps] - Joomla! Component Community Polls 4.5.0 - SQL Injection
  48. [webapps] - Joomla! Component GPS Tools 4.0.1 - SQL Injection
  49. [webapps] - Joomla! Component Community Quiz 4.3.5 - SQL Injection
  50. [webapps] - Apple WebKit 10.0.2 - 'FrameLoader::clear' Universal Cross-Site Scripting
  51. [webapps] - Apple WebKit 10.0.2 - Cross-Origin or Sandboxed IFRAME Pop-up Blocker Byp
  52. [webapps] - Apple WebKit 10.0.2 - 'Frame::setDocument' Universal Cross-Site Scripting
  53. [dos] - Microsoft Edge and Internet Explorer - 'HandleColumnBreakOnColumnSpanningElem
  54. [remote] - macOS HelpViewer 10.12.1 - XSS Leads to Arbitrary File Execution and Arbit
  55. [shellcode] - Linux/x86-64 - Egghunter Shellcode (38 bytes)
  56. [webapps] - Joomla! Component Store for K2 3.8.2 - SQL Injection
  57. [webapps] - Joomla! Component UserExtranet 1.3.1 - SQL Injection
  58. [webapps] - Joomla! Component MultiTier 3.1 - SQL Injection
  59. [remote] - Disk Savvy Enterprise 9.4.18 - Buffer Overflow (SEH)
  60. [webapps] - Teradici Management Console 2.2.0 - Privilege Escalation
  61. [dos] - Google Chrome - 'layout' Out-of-Bounds Read
  62. [dos] - EasyCom For PHP 4.0.0 - Buffer Overflow (PoC)
  63. [dos] - EasyCom For PHP 4.0.0 - Denial of Service
  64. [webapps] - Joomla! Component ContentMap 1.3.8 - 'contentid' Parameter SQL Injection
  65. [webapps] - Joomla! Component VehicleManager 3.9 - SQL Injection
  66. [webapps] - Joomla! Component RealEstateManager 3.9 - SQL Injection
  67. [webapps] - Joomla! Component BookLibrary 3.6.1 - SQL Injection
  68. [webapps] - Joomla! Component MediaLibrary Basic 3.5 - SQL Injection
  69. [webapps] - Joomla! Component J-HotelPortal 6.0.2 - 'review_id' Parameter SQL Injecti
  70. [webapps] - Joomla! Component J-CruiseReservation Standard 3.0 - 'city' Parameter SQL
  71. [webapps] - Joomla! Component Eventix Events Calendar 1.0 - SQL Injection
  72. [webapps] - Joomla! Component J-MultipleHotelReservation Standard 6.0.2 - 'review_id'
  73. [webapps] - Joomla! Component Directorix Directory Manager 1.1.1 - SQL Injection
  74. [webapps] - Joomla! Component Magic Deals Web 1.2.0 - SQL Injection
  75. [webapps] - Joomla! Component J-BusinessDirectory 4.6.8 - SQL Injection
  76. [webapps] - DIGISOL DG-HR1400 Wireless Router - Cross-Site Request Forgery
  77. [shellcode] - Linux/x86 - SELinux Permissive Mode Switcher Shellcode (45 bytes)
  78. [webapps] - Album Lock 4.0 iOS - Directory Traversal
  79. [webapps] - Joomla! Component MaQma Helpdesk 4.2.7 - 'id' Parameter SQL Injection
  80. [webapps] - Joomla! Component PayPal IPN for DOCman 3.1 - 'id' Parameter SQL Injectio
  81. [papers] - Injecting SQLite Database Based Applications
  82. [webapps] - PHPShell 2.4 - Session Fixation
  83. [shellcode] - Linux - Reverse Shell Shellcode (66 bytes)
  84. [webapps] - Joomla! Component Joomloc-CAT 4.1.3 - 'ville' Parameter SQL Injection
  85. [webapps] - Joomla! Component Joomloc-Lite 1.3.2 - 'site_id' Parameter SQL Injection
  86. [webapps] - Joomla! Component JomWALL 4.0 - 'wuid' Parameter SQL Injection
  87. [webapps] - Joomla! Component OS Property 3.0.8 - SQL Injection
  88. [webapps] - Joomla! Component EShop 2.5.1 - 'id' Parameter SQL Injection
  89. [webapps] - Joomla! Component OS Services Booking 2.5.1 - SQL Injection
  90. [webapps] - Joomla! Component Room Management 1.0 - SQL Injection
  91. [shellcode] - Windows x86 - Protect Process Shellcode (229 bytes)
  92. [webapps] - Joomla! Component WMT Content Timeline 1.0 - 'id' Parameter SQL Injection
  93. [webapps] - Joomla! Component Team Display 1.2.1 - 'filter_category' Parameter SQL In
  94. [webapps] - Joomla! Component Groovy Gallery 1.0.0 - SQL Injection
  95. [webapps] - Joomla! Component JEmbedAll 1.4 - SQL Injection
  96. [webapps] - Joomla! Component Spider Calendar Lite 3.2.16 - SQL Injection
  97. [webapps] - Joomla! Component Spider Catalog Lite 1.8.10 - SQL Injection
  98. [webapps] - Joomla! Component Spider Facebook 1.6.1 - SQL Injection
  99. [webapps] - Joomla! Component Spider FAQ Lite 1.3.1 - SQL Injection
  100. [shellcode] - Linux - Dual/Multi mode Bind Shell Shellcode (156 bytes)
  101. [webapps] - WordPress Plugin Corner Ad 1.0.7 - Cross-Site Scripting
  102. [webapps] - dotCMS 3.6.1 - Blind Boolean SQL Injection
  103. [dos] - Cisco ASA - WebVPN CIFS Handling Buffer Overflow
  104. [webapps] - Joomla! Component JSP Store Locator 2.2 - 'id' Parameter SQL Injection
  105. [dos] - Microsoft Windows gdi32.dll - EMR_SETDIBITSTODEVICE Heap-Based Out-of-Bounds
  106. [dos] - NVIDIA Driver 375.70 - DxgkDdiEscape 0x100008b Out-of-Bounds Read/Write
  107. [dos] - NVIDIA Driver 375.70 - Buffer Overflow in Command Buffer Submission
  108. [remote] - OpenText Documentum D2 - Remote Code Execution
  109. [dos] - GOM Player 2.3.10.5266 - '.fpx' Denial of Service
  110. [webapps] - Joomla! Component JoomBlog 1.3.1 - SQL Injection
  111. [webapps] - Geutebruck 5.02024 G-Cam/EFD-2250 - Remote Command Execution (Metasploit)
  112. [dos] - LG G4 - lgdrmserver Binder Service Multiple Race Conditions
  113. [dos] - LG G4 - lghashstorageserver Directory Traversal
  114. [dos] - LG G4 - Touchscreen Driver write_log Kernel Read/Write
  115. [dos] - Google Android - Inter-process munmap in android.util.MemoryIntArray
  116. [dos] - Google Android - android.util.MemoryIntArray Ashmem Race Conditions
  117. [local] - ntfs-3g - Unsanitized modprobe Environment Privilege Escalation
  118. [dos] - Microsoft Edge - TypedArray.sort Use-After-Free (MS16-145)
  119. [remote] - Piwik 2.14.0 / 2.16.0 / 2.17.1 / 3.0.1 - Superuser Plugin Upload (Metasplo
  120. [local] - ShadeYouVPN Client 2.0.1.11 - Privilege Escalation
  121. [webapps] - Joomla! Component JE Classify Ads 1.2 - 'pro_id' Parameter SQL Injection
  122. [webapps] - Joomla! Component JE Gallery 1.3 - 'photo_id' Parameter SQL Injection
  123. [webapps] - Joomla! Component JE Directory 1.7 - 'ditemid' Parameter SQL Injection
  124. [webapps] - Joomla! Component JE QuoteForm - 'Itemid' Parameter SQL Injection
  125. [webapps] - Joomla! Component JE Property Finder 1.6.3 - SQL Injection
  126. [webapps] - Joomla! Component JE Tour 2.0 - SQL Injection
  127. [webapps] - Joomla! Component JE Video Rate 1.0 - SQL Injection
  128. [webapps] - Joomla! Component JE auction 1.6 - 'eid' Parameter SQL Injection
  129. [webapps] - Joomla! Component JE Auto 1.5 - 'd_itemid' Parameter SQL Injection
  130. [webapps] - PHP Marketplace Script - SQL Injection
  131. [webapps] - Joomla! Component Soccer Bet 4.1.5 - 'userid' Parameter SQL Injection
  132. [webapps] - WhizBiz 1.9 - SQL Injection
  133. [webapps] - TI Online Examination System 2.0 - SQL Injection
  134. [webapps] - Viavi Real Estate - SQL Injection
  135. [webapps] - Viavi Movie Review - 'id' Parameter SQL Injection
  136. [webapps] - Viavi Product Review - 'id' Parameter SQL Injection
  137. [webapps] - Quadz School Management System 3.1 - 'uisd' Parameter SQL Injection
  138. [webapps] - Domains & Hostings Manager PRO 3.0 - 'entries' Parameter SQL Injection
  139. [local] - Cimetrics BACstac 6.2f - Privilege Escalation
  140. [local] - Cimetrics BACnet Explorer 4.0 - XML External Entity Injection
  141. [webapps] - Kodi 17.1 - Arbitrary File Disclosure
  142. [webapps] - SonicDICOM PACS 2.3.2 - Cross-Site Scripting
  143. [webapps] - SonicDICOM PACS 2.3.2 - Cross-Site Request Forgery (Add Admin)
  144. [webapps] - SonicDICOM PACS 2.3.2 - Privilege Escalation
  145. [webapps] - Multilanguage Estate Agency Pro 1.2 - SQL Injection
  146. [remote] - F5 BIG-IP SSL Virtual Server - Memory Disclosure
  147. [webapps] - D-link DIR-600M - Cross-Site Request Forgery
  148. [remote] - HP Smart Storage Administrator 2.30.6.0 - Remote Command Injection (Metasp
  149. [webapps] - CMS Lite 1.3.1 - SQL Injection
  150. [webapps] - Tiger Post 3.0.1 - SQL Injection
  151. [webapps] - Gram Post 1.0 - SQL Injection
  152. [webapps] - Youtube Analytics Multi Channel 3.0 - SQL Injection
  153. [webapps] - Collabo - Arbitrary File Download
  154. [webapps] - Takas Classified 1.1 - SQL Injection
  155. [webapps] - Zigaform - SQL Injection
  156. [papers] - Exploiting Node.js deserialization bug for Remote Code Execution
  157. [webapps] - Mobiketa 3.5 - SQL Injection
  158. [webapps] - Sendroid 5.2 - SQL Injection
  159. [webapps] - Fome SMS Portal 2.0 - SQL Injection
  160. [webapps] - SOA School Management - SQL Injection
  161. [webapps] - Client Expert 1.0.1 - SQL Injection
  162. [webapps] - EXAMPLO - SQL Injection
  163. [shellcode] - Linux/x86 - Reverse TCP Alphanumeric Staged Shellcode (103 bytes)
  164. [webapps] - Muviko Video CMS - SQL Injection
  165. [webapps] - Multi Outlets POS 3.1 - 'id' Parameter SQL Injection
  166. [papers] - MySQL Injection in Update, Insert, and Delete
  167. [webapps] - Fully Featured News CMS 1.0 - 'id' Parameter SQL Injection
  168. [webapps] - MySQL File Uploader 1.0 - 'id' Parameter SQL Injection
  169. [webapps] - Easy Support Tools 1.0 - 'stt' Parameter SQL Injection
  170. [webapps] - Easy Web Search 3 - 'id' Parameter SQL Injection
  171. [webapps] - FTP Made Easy PRO 1.2 - Arbitrary File Download
  172. [webapps] - Easy File Uploader 1.2 - Arbitrary File Download
  173. [webapps] - Responsive Filemanger
  174. [papers] - MySQL Out-of-Band Hacking
  175. [papers] - Alternative for Information_Schema.Tables in MySQL
  176. [webapps] - Viral Fun Facts Sharing Script 1.1.0 - 'id' Parameter SQL Injection
  177. [webapps] - Web Inspiration Gallery Script 1.0.0 - 'id' Parameter SQL Injection
  178. [webapps] - ThisIsWhyImBroke Clone Script 4.0 - 'id' Parameter SQL Injection
  179. [webapps] - Upworthy Clone Script 1.1.0 - 'id' Parameter SQL Injection
  180. [webapps] - Ultimate Viral Media Script 1.0 - 'id' Parameter SQL Injection
  181. [webapps] - Visual Link Sharing Websites Builder Script 2.1.0 - SQL Injection
  182. [webapps] - ThisIsWhyImBroke Clone Script 4.0.0 - 'id' Parameter SQL Injection
  183. [webapps] - Funny Image and Video Script 2.0.0 - 'id' Parameter SQL Injection
  184. [webapps] - Clone Script Directory Script 1.1.0 - 'cid' Parameter SQL Injection
  185. [webapps] - Viral Pictures and Video Script 2.0.0 - 'id' Parameter SQL Injection
  186. [webapps] - NewsBee CMS - SQL Injection
  187. [webapps] - Alstrasoft Template Seller Pro 3.25e - 'tempid' Parameter SQL Injection
  188. [webapps] - Itech Job Portal Script 9.13 - Multiple Vulnerabilities
  189. [webapps] - iScripts AutoHoster 3.0 - 'siteid' Parameter SQL Injection
  190. [webapps] - Alstrasoft EPay Enterprise 5.17 - SQL Injection
  191. [webapps] - Alstrasoft ProTaxi Enterprise 3.5 - Arbitrary File Upload
  192. [webapps] - Alstrasoft e-Friends 5.12 - SQL Injection
  193. [webapps] - Alstrasoft Video Share Enterprise 4.72 - SQL Injection
  194. [webapps] - Alstrasoft Flippa Clone MarketPlace Script 4.10 - Cross-Site Request Forg
  195. [webapps] - Alstrasoft FMyLife Pro 1.02 - Cross-Site Request Forgery (Add Admin)
  196. [webapps] - Alstrasoft Forum Pay Per Post Exchange Script 2.01 - SQL Injection
  197. [local] - Debian 9 ntfs-3g - Privilege Escalation
  198. [webapps] - Zoneminder 1.29 / 1.30 - Cross-Site Scripting / SQL Injection / Session F
  199. [webapps] - Itech Multi Vendor Script 6.49 - SQL Injection
  200. [remote] - Netwave IP Camera - Password Disclosure
  201. [remote] - CUPS < 2.0.3 - Remote Command Execution
  202. [webapps] - SlimarUSER Management 1.0 - 'id' Parameter SQL Injection
  203. [webapps] - Itech Travel Portal Script 9.35 - SQL Injection
  204. [webapps] - Property Listing Script - 'propid' Parameter Blind SQL Injection
  205. [webapps] - Itech Inventory Management Software 3.77 - SQL Injection
  206. [webapps] - Itech Movie Portal Script 7.37 - SQL Injection
  207. [webapps] - Itech News Portal Script 6.28 - 'sc' Parameter SQL Injection
  208. [webapps] - Itech Auction Script 6.49 - 'pid' Parameter SQL Injection
  209. [shellcode] - Linux - Multi/Dual mode Reverse Shell Shellcode (129 bytes)
  210. [local] - Ghostscript 9.20 - 'Filename' Command Execution
  211. [webapps] - WordPress 4.7.0/4.7.1 - Unauthenticated Content Injection (PoC)
  212. [webapps] - WordPress 4.7.0/4.7.1 - Unauthenticated Content Injection Arbitrary Code
  213. [dos] - Google Android - 'cfp_ropp_new_key_reenc' and 'cfp_ropp_new_key' RKP Memory C
  214. [dos] - Google Android - Unprotected MSRs in EL1 RKP Privilege Escalation
  215. [local] - Google Android - RKP EL1 Code Loading Bypass
  216. [dos] - Google Android - RKP Information Disclosure via s2-remapping Physical Ranges
  217. [dos] - QNAP NVR/NAS - Buffer Overflow
  218. [dos] - Apple WebKit - 'HTMLFormElement::reset()' Use-After Free
  219. [dos] - Google Chrome - 'HTMLKeygenElement::shadowSelect()' Type Confusion
  220. [dos] - Apple WebKit - 'HTMLKeygenElement' Type Confusion
  221. [dos] - Apple WebKit - Type Confusion in RenderBox with Accessibility Enabled
  222. [webapps] - LogoStore - SQL Injection
  223. [webapps] - Netman 204 - Backdoor Account / Password Reset
  224. [local] - Viscosity 1.6.7 - Privilege Escalation
  225. [webapps] - Itech Multi Vendor Script 6.49 - SQL Injection
  226. [webapps] - Itech News Portal Script 6.28 - SQL Injection
  227. [webapps] - Itech Real Estate Script 3.12 - SQL Injection
  228. [webapps] - Caregiver Script 2.57 - SQL Injection
  229. [webapps] - Auction Script 6.49 - SQL Injection
  230. [webapps] - Itech B2B Script 4.28 - SQL Injection
  231. [webapps] - Itech Classifieds Script 7.27 - SQL Injection
  232. [webapps] - Itech Dating Script 3.26 - SQL Injection
  233. [webapps] - Itech Freelancer Script 5.13 - SQL Injection
  234. [webapps] - PEAR Base System 1.10.1 - Arbitrary File Download
  235. [webapps] - TrueConf Server 4.3.7 - Multiple Vulnerabilities
  236. [shellcode] - Linux - Multi/Dual mode execve("/bin/sh", NULL, 0) Shellcode (37 bytes)
  237. [webapps] - WordPress Plugin WP Private Messages 1.0.1 - SQL Injection
  238. [webapps] - Online Hotel Booking System Pro 1.2 - SQL Injection
  239. [webapps] - WordPress Plugin Online Hotel Booking System Pro 1.0 - SQL Injection
  240. [webapps] - My Photo Gallery 1.0 - SQL Injection
  241. [webapps] - Maian Weblog 4.0 - SQL Injection
  242. [dos] - Google Android - 'pm_qos' KASLR Bypass
  243. [remote] - Haraka
  244. [dos] - macOS 10.12.1 / iOS Kernel - 'IOService::matchPassive' Use-After-Free
  245. [dos] - macOS 10.12.1 / iOS Kernel - 'host_self_trap' Use-After-Free
  246. [webapps] - KB Affiliate Referral Script 1.0 - Authentication Bypass
  247. [webapps] - KB Login Authentication Script 1.1 - Authentication Bypass
  248. [webapps] - KB Messages PHP Script 1.0 - Authentication Bypass
  249. [remote] - Autodesk Backburner Manager 3 < 2016.0.0.2150 - Null Dereference Denial of
  250. [webapps] - Pear HTTP_Upload 1.0.0b3 - Arbitrary File Upload