المساعد الشخصي الرقمي

مشاهدة النسخة كاملة : exploit database


الصفحات : 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 [44] 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67

  1. [webapps] Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 SP2 - Mult
  2. [webapps] Sophos Web Appliance 4.3.1.1 - Session Fixation
  3. [remote] LabF nfsAxe 3.7 FTP Client - Buffer Overflow (SEH)
  4. [dos] Microsoft Windows 7 Kernel - Pool-Based Out-of-Bounds Reads Due to bind() Imple
  5. [remote] Quest Privilege Manager - pmmasterd Buffer Overflow (Metasploit)
  6. [dos] Microsoft Windows 7 Kernel - 'win32k!xxxClientLpkDrawTextEx' Stack Memory Discl
  7. [dos] Microsoft Windows 7 Kernel - Uninitialized Memory in the Default dacl Descripto
  8. [dos] Microsoft Windows 10 Kernel - nt!NtTraceControl (EtwpSetProviderTraits) Pool Me
  9. [dos] Larson VizEx Reader 9.7.5 - Local Buffer Overflow (SEH)
  10. [dos] Halliburton LogView Pro 10.0.1 - Local Buffer Overflow (SEH)
  11. [webapps] PlaySms 1.4 - Remote Code Execution
  12. [webapps] Mailcow 0.14 - Cross-Site Request Forgery
  13. [webapps] Admidio 3.2.8 - Cross-Site Request Forgery
  14. [local] Linux Kernel 3.x (Ubuntu 14.04 / Mint 17.3 / Fedora 22) - Double-free usb-mid
  15. [local] Linux Kernel 3.11 < 4.8 0 - 'SO_SNDBUFFORCE' & 'SO_RCVBUFFORCE' Local Privile
  16. [remote] Vanilla Forums < 2.3 - Remote Code Execution
  17. [webapps] CMS Made Simple 2.1.6 - Multiple Vulnerabilities
  18. [local] Linux Kernel 4.8.0 - Packet Socket Local root Privilege Escalation
  19. [dos] OpenVPN 2.4.0 - Unauthenticated Denial of Service
  20. [remote] Microsoft IIS WebDav - ScStoragePathFromUrl Overflow (Metasploit)
  21. [dos] SAP SAPCAR 721.510 - Heap-Based Buffer Overflow
  22. [webapps] Gongwalker API Manager 1.1 - Cross-Site Request Forgery
  23. [remote] Microsoft Windows - SrvOs2FeaToNt SMB Remote Code Execution (MS17-010)
  24. [webapps] BanManager WebUI 1.5.8 - PHP Code Injection
  25. [webapps] QNAP PhotoStation 5.2.4 / MusicStation 4.8.4 - Authentication Bypass
  26. [webapps] LogRhythm Network Monitor - Authentication Bypass / Command Injection
  27. [dos] wolfSSL 3.10.2 - x509 Certificate Text Parsing Off-by-One
  28. [dos] LG G4 MRA58K - 'mkvparser::Block::Block' Heap Buffer Overflows
  29. [dos] LG G4 MRA58K - 'liblg_parser_mkv.so' Bad Allocation Calls
  30. [remote] Crypttech CryptoLog - Remote Code Execution (Metasploit)
  31. [webapps] I, Librarian 4.6 / 4.7 - Command Injection / Server Side Request Forgery /
  32. [remote] Oracle GoldenGate 12.1.2.0.0 - Unauthenticated Remote Code Execution
  33. [remote] Microsoft Windows 8 / 8.1 / 10 / Windows Server / SCEP, Microsoft Security E
  34. [local] Gemalto SmartDiag Diagnosis Tool < 2.5 - Buffer Overflow (SEH)
  35. [local] Xen 64bit PV Guest - pagetable use-after-type-change Breakout
  36. [dos] RPCBind / libtirpc - Denial of Service
  37. [shellcode] Linux/x86 - Disable ASLR Shellcode (80 bytes)
  38. [shellcode] Linux/x86-64 - Reverse Shell Shellcode (IPv6) (113 bytes)
  39. [webapps] ViMbAdmin 3.0.15 - Multiple Cross-Site Request Forgery
  40. [webapps] WordPress Plugin WebDorado Gallery 1.3.29 - SQL Injection
  41. [dos] CloudBees Jenkins 2.32.1 - Java Deserialization
  42. [remote] Safari 10.0.3 - 'JSC::CachedCall' Use-After-Free
  43. [webapps] WordPress < 4.7.4 - Unauthorized Password Reset
  44. [webapps] WordPress 4.6 - Unauthenticated Remote Code Execution
  45. [webapps] Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Code Execu
  46. [webapps] Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Password C
  47. [webapps] Serviio PRO 1.8 DLNA Media Streaming Server - REST API Information Disclosu
  48. [local] Serviio PRO 1.8 DLNA Media Streaming Server - Local Privilege Escalation
  49. [dos] Internet Explorer 11 - CMarkup::DestroySplayTree Use-After-Free
  50. [papers] BluedIoT: When a mature and immature technology mixes, becomes an “idiot” si
  51. [local] Ghostscript 9.21 - Type Confusion Arbitrary Command Execution (Metasploit)
  52. [webapps] Tuleap Project Wiki 8.3
  53. [local] HideMyAss Pro VPN Client for macOS 3.x - Privilege Escalation
  54. [local] HideMyAss Pro VPN Client for OS X 2.2.7.0 - Privilege Escalation
  55. [webapps] Alerton Webtalk 2.5 / 3.3 - Multiple Vulnerabilities
  56. [dos] MySQL
  57. [dos] IrfanView 4.44 - Denial of Service
  58. [dos] Panda Free Antivirus - 'PSKMAD.sys' Denial of Service
  59. [webapps] Emby MediaServer 3.2.5 - Password Reset
  60. [webapps] Emby MediaServer 3.2.5 - SQL Injection
  61. [webapps] Emby MediaServer 3.2.5 - Directory Traversal
  62. [webapps] Easy File Uploader - Arbitrary File Upload
  63. [webapps] Simple File Uploader - Arbitrary File Download
  64. [dos] Microsoft Internet Explorer 11.576.14393.0 - 'CStyleSheetArray::BuildListOfMatc
  65. [remote] Mercurial - Custom hg-ssh Wrapper Remote Code Exec (Metasploit)
  66. [webapps] TYPO3 News Module - SQL Injection
  67. [webapps] Revive Ad Server 4.0.1 - Cross-Site Scripting / Cross-Site Request Forgery
  68. [papers] Local File Disclosure using SQL Injection
  69. [papers] HackBack - A DIY Guide (Spanish)
  70. [papers] HackBack - A DIY Guide for those without the patience to wait for whistleblo
  71. [papers] HackBack - A DIY Guide
  72. [webapps] October CMS 1.0.412 - Multiple Vulnerabilities
  73. [local] Realtek Audio Driver 6.0.1.7898 (Windows 10) - Dolby Audio X2 Service Privile
  74. [webapps] OpenText Documentum Content Server - dm_bp_transition.ebs docbase Method Ar
  75. [remote] Microsoft Windows 2003 SP2 - SMB Remote Code Execution (ERRATICGOPHER)
  76. [dos] Apple Safari - Array concat Memory Corruption
  77. [webapps] Joomla Component Myportfolio 3.0.2 - 'pid' Parameter SQL Injection
  78. [dos] Oracle VirtualBox Guest Additions 5.1.18 - Unprivileged Windows User-Mode Gues
  79. [remote] WePresent WiPG-1000 - Command Injection (Metasploit)
  80. [remote] Microsoft Office Word - Malicious Hta Execution (Metasploit)
  81. [webapps] HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote Fi
  82. [webapps] FlySpray 1.0-rc4 - Cross-Site Scripting / Cross-Site Request Forgery
  83. [webapps] WordPress Plugin Car Rental System 2.5 - SQL Injection
  84. [webapps] WordPress Plugin KittyCatfish 2.2 - SQL Injection
  85. [webapps] WordPress Plugin Wow Viral Signups 2.1 - SQL Injection
  86. [webapps] Oracle E-Business Suite 12.2.3 - 'IESFOOTPRINT' SQL Injection
  87. [webapps] WordPress Plugin Wow Forms 2.1 - SQL Injection
  88. [local] Ubuntu 16.10 / 16.04 LTS - LightDM Guest Account Local Privilege Escalation
  89. [papers] nt!_SEP_TOKEN_PRIVILEGES - Single Write EoP Protect
  90. [webapps] Oracle PeopleSoft - 'PeopleSoftServiceListeningConnector' XML External Enti
  91. [dos] - PrivateTunnel Client 2.8 - Local Buffer Overflow (SEH)
  92. [local] - Dell Customer Connect 1.3.28.0 - Privilege Escalation
  93. [papers] - Flexispy
  94. [remote] - SquirrelMail < 1.4.22 - Remote Code Execution
  95. [shellcode] - Linux/x86 - Egg-hunter Shellcode (18 bytes)
  96. [local] - VirtualBox 5.0.32 r112930 x64 - Windows Process COM Injection Privilege Esc
  97. [local] - VirtualBox 5.1.14 r112924 - Unprivileged Host User to Host Kernel Privilege
  98. [dos] - VirtualBox - Environment and ioctl Unprivileged Host User to Host Kernel Priv
  99. [dos] - VirtualBox - 'virtio-net' Guest-to-Host Out-of-Bounds Write
  100. [local] - VirtualBox - Guest-to-Host Privilege Escalation via Broken Length Handling
  101. [remote] - Microsoft Windows - ManagementObject Arbitrary .NET Serialization Remote C
  102. [local] - Microsoft Windows 10 - Runtime Broker ClipboardBroker Privilege Escalation
  103. [local] - Microsoft Windows 10 10586 - IEETWCollector Arbitrary Directory/File Deleti
  104. [webapps] - Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'operationSpreadGeneric' U
  105. [webapps] - Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'PrototypeMap::createEmpty
  106. [papers] - [Spanish] How to Exploit ETERNALBLUE and DOUBLEPULSAR on Windows 7/2008
  107. [papers] - How to Exploit ETERNALBLUE and DOUBLEPULSAR on Windows 7/2008
  108. [remote] - Huawei HG532n - Command Injection (Metasploit)
  109. [remote] - Microsoft Word - .RTF Remote Code Execution
  110. [dos] - pinfo 0.6.9 - Local Buffer Overflow
  111. [remote] - Tenable Appliance < 4.5 - Unauthenticated Remote Root Code Execution
  112. [dos] - Microsoft Windows - Uncredentialed SMB RCE (MS17-010) (Metasploit)
  113. [dos] - WinSCP 5.9.4 - 'LIST' Denial of Service (Metasploit)
  114. [webapps] - Mantis Bug Tracker 1.3.0/2.3.0 - Password Reset
  115. [papers] - Web Services Penetration Testing
  116. [local] - VirusChaser 8.0 - Buffer Overflow (SEH)
  117. [local] - Linux Kernel 4.8.0 UDEV < 232 - Privilege Escalation
  118. [webapps] - Concrete5 8.1.0 - 'Host' Header Injection
  119. [shellcode] - Linux/x86-64 - execve("/bin/sh") Shellcode (31 bytes)
  120. [webapps] - Alienvault OSSIM/USM 5.3.4/5.3.5 - Remote Command Execution (Metasploit)
  121. [webapps] - agorum core Pro 7.8.1.4-251 - Persistent Cross-Site Scripting
  122. [webapps] - agorum core Pro 7.8.1.4-251 - Cross-Site Request Forgery
  123. [dos] - Microsoft Windows Kernel win32k.sys - Multiple Bugs in the NtGdiGetDIBitsInte
  124. [dos] - Microsoft Windows Kernel - 'win32kfull!SfnINLPUAHDRAWMENUITEM' Stack Memory D
  125. [local] - Adobe Creative Cloud Desktop Application
  126. [remote] - Cisco Catalyst 2960 IOS 12.2(55)SE1 - 'ROCEM' Remote Code Execution
  127. [local] - GNS3 Mac OS-X 1.5.2 - 'ubridge' Privilege Escalation
  128. [local] - Solaris 7 - 11 (x86 & SPARC) - 'EXTREMEPARR' dtappgather Privilege Escalati
  129. [remote] - Cisco Catalyst 2960 IOS 12.2(55)SE11 - 'ROCEM' Remote Code Execution
  130. [webapps] - MyClassifiedScript 5.1 - SQL Injection
  131. [webapps] - Social Directory Script 2.0 - SQL Injection
  132. [webapps] - FAQ Script 3.1.3 - 'category_id' Parameter SQL Injection
  133. [webapps] - WordPress Plugin Spider Event Calendar 1.5.51 - Blind SQL Injection
  134. [webapps] - MyBB smilie Module < 1.8.11 - 'pathfolder' Directory Traversal
  135. [webapps] - MyBB < 1.8.11 - 'email' MyCode Cross-Site Scripting
  136. [webapps] - Brother MFC-J6520DW - Authentication Bypass / Password Change
  137. [webapps] - Horde Groupware Webmail 3 / 4 / 5 - Multiple Remote Code Execution
  138. [local] - Proxifier for Mac 2.18 - Multiple Vulnerabilities
  139. [local] - Proxifier for Mac 2.17 / 2.18 - Privesc Escalation
  140. [remote] - Moxa MX AOPC-Server 1.5 - XML External Entity Injection
  141. [dos] - Moxa MXview 2.8 - Denial of Service
  142. [remote] - Moxa MXview 2.8 - Private Key Disclosure
  143. [webapps] - Jobscript4Web 4.5 - Authentication Bypass
  144. [webapps] - Ladder System 6.0 - 'faqid' Parameter SQL Injection
  145. [webapps] - My Gaming Ladder Combo System 7.5 - SQL Injection
  146. [webapps] - Intellinet NFC-30IR Camera - Multiple Vulnerabilities
  147. [webapps] - Survey Template 1.1 - 'masterkey1' Parameter SQL Injection
  148. [webapps] - Forum Template 1.0 - SQL Injection
  149. [webapps] - Quiz Template 1.0 - 'testid' Parameter SQL Injection
  150. [webapps] - Calendar Template 2.0 - 'editid1' Parameter SQL Injection
  151. [webapps] - Document Management Template - 'hash' Parameter SQL Injection
  152. [webapps] - Shopping Cart Template - 'item' Parameter SQL Injection
  153. [webapps] - Invoice Template - 'hash' Parameter SQL Injection
  154. [shellcode] - Windows 10 x64 - Egghunter Shellcode (45 bytes)
  155. [dos] - Cesanta Mongoose OS - Use-After-Free
  156. [webapps] - Moodle 2.x/3.x - SQL Injection
  157. [remote] - SpiceWorks 7.5 TFTP - Remote File Overwrite / Upload
  158. [webapps] - HelpDEZK 1.1.1 - Cross-Site Request Forgery / Code Execution
  159. [webapps] - Airbnb Crashpadder Clone Script - SQL Injection
  160. [webapps] - ImagePro Lazygirls Clone Script - SQL Injection
  161. [webapps] - D-Link DIR-615 - Cross-Site Request Forgery
  162. [webapps] - Sweepstakes Pro Software - SQL Injection
  163. [webapps] - Premium Penny Auction Script - SQL Injection
  164. [webapps] - Apple WebKit 10.0.2(12602.3.12.0.1, r210800) - 'constructJSReadableStream
  165. [local] - macOS/iOS Kernel 10.12.3 (16D32) - Double-Free Due to Bad Locking in fseven
  166. [webapps] - Apple WebKit 10.0.2(12602.3.12.0.1) - 'disconnectSubframes' Universal Cro
  167. [webapps] - Apple Webkit - Universal Cross-Site Scripting by Accessing a Named Proper
  168. [dos] - macOS Kernel 10.12.2 (16C67) - Memory Disclosure Due to Lack of Bounds Checki
  169. [webapps] - Apple Webkit - 'JSCallbackData' Universal Cross-Site Scripting
  170. [dos] - macOS/iOS Kernel 10.12.3 (16D32) - 'bpf' Heap Overflow
  171. [webapps] - Apple WebKit 10.0.2(12602.3.12.0.1) - 'Frame::setDocument (1)' Universal
  172. [webapps] - Maian Survey 1.1 - 'survey' Parameter SQL Injection
  173. [dos] - macOS Kernel 10.12.2 (16C67) - 'AppleIntelCapriController::GetLinkConfig' Cod
  174. [dos] - macOS/iOS Kernel 10.12.3 (16D32) - Bad Locking in necp_open Use-After-Free
  175. [dos] - macOS Kernel 10.12.3 (16D32) - Use-After-Free Due to Double-Release in posix_
  176. [dos] - macOS/iOS Kernel 10.12.3 (16D32) - SIOCSIFORDER Socket ioctl Memory Corruptio
  177. [dos] - macOS/iOS Kernel 10.12.3 (16D32) - SIOCGIFORDER Socket ioctl Off-by-One Memor
  178. [webapps] - Maian Greetings 2.1 - 'cat' Parameter SQL Injection
  179. [webapps] - Maian Uploader 4.0 - 'user' Parameter SQL Injection
  180. [webapps] - Pixie 1.0.4 - Arbitrary File Upload
  181. [local] - Bluecoat ASG 6.6/CAS 1.3 - Privilege Escalation (Metasploit)
  182. [remote] - Bluecoat ASG 6.6/CAS 1.3 - OS Command Injection (Metasploit)
  183. [remote] - Apache Tomcat 6/7/8/9 - Information Disclosure
  184. [webapps] - Zyxel, EMG2926 < V1.00(AAQT.4)b8 - OS Command Injection
  185. [dos] - BackBox OS - Denial of Service
  186. [webapps] - Splunk Enterprise - Information Disclosure
  187. [webapps] - Membership Formula - 'order' Parameter SQL Injection
  188. [dos] - Apple macOS/IOS 10.12.2(16C67) - mach_msg Heap Overflow
  189. [webapps] - EyesOfNetwork (EON) 5.1 - SQL Injection
  190. [remote] - Sync Breeze Enterprise 9.5.16 - 'GET' Buffer Overflow (SEH)
  191. [local] - Disk Sorter Enterprise 9.5.12 - 'Import Command' Buffer Overflow
  192. [local] - DiskBoss Enterprise 7.8.16 - 'Import Command' Buffer Overflow
  193. [local] - Sync Breeze Enterprise 9.5.16 - 'Import Command' Buffer Overflow
  194. [shellcode] - Linux/x86 - execve(/bin/sh") Shellcode (19 bytes)
  195. [webapps] - Opensource Classified Ads Script - 'keyword' Parameter SQL Injection
  196. [dos] - MikroTik RouterBoard 6.38.5 - Denial of Service
  197. [dos] - Microsoft Outlook - HTML Email Denial of Service
  198. [local] - Intermec PM43 Industrial Printer - Privilege Escalation
  199. [dos] - VX Search Enterprise 9.5.12 - 'Verify Email' Buffer Overflow
  200. [shellcode] - Linux/x86-64 - execve("/bin/sh") Shellcode (21 Bytes)
  201. [remote] - DzSoft PHP Editor 4.2.7 - File Enumeration
  202. [remote] - Samba 4.5.2 - Symlink Race Permits Opening Files Outside Share Directory
  203. [dos] - Apple Safari - 'DateTimeFormat.format' Type Confusion
  204. [dos] - Apple Safari - Builtin JavaScript Allows Function.caller to be Used in Strict
  205. [dos] - Apple Safari - Out-of-Bounds Read when Calling Bound Function
  206. [remote] - Github Enterprise - Default Session Secret And Deserialization (Metasploit
  207. [local] - QNAP QTS < 4.2.4 - Domain Privilege Escalation
  208. [dos] - Disk Sorter Enterprise 9.5.12 - Local Buffer Overflow
  209. [remote] - Internet Information Services (IIS) 6.0 WebDAV - 'ScStoragePathFromUrl' Bu
  210. [webapps] - Professional Bus Booking Script - 'hid_Busid' Parameter SQL Injection
  211. [webapps] - CouponPHP CMS 3.1 - 'code' Parameter SQL Injection
  212. [webapps] - Just Another Video Script 1.4.3 - SQL Injection
  213. [webapps] - Alibaba Clone Script - SQL Injection
  214. [webapps] - B2B Marketplace Script 2.0 - SQL Injection
  215. [webapps] - Php Real Estate Property Script - SQL Injection
  216. [webapps] - Courier Tracking Software 6.0 - SQL Injection
  217. [webapps] - Parcel Delivery Booking Script 1.0 - SQL Injection
  218. [webapps] - Delux Same Day Delivery Script 1.0 - SQL Injection
  219. [webapps] - Hotel Booking Script 1.0 - SQL Injection
  220. [webapps] - Tour Package Booking 1.0 - SQL Injection
  221. [shellcode] - Linux/x86 - Reverse /bin/bash Shellcode (110 bytes)
  222. [local] - Forticlient 5.2.3 Windows 10 x64 (Pre Anniversary) - Privilege Escalation
  223. [local] - Forticlient 5.2.3 Windows 10 x64 (Post Anniversary) - Privilege Escalation
  224. [remote] - NETGEAR WNR2000v5 - (Un)authenticated hidden_lang_avi Stack Overflow (Meta
  225. [remote] - Logsign 4.4.2 / 4.4.137 - Remote Command Injection (Metasploit)
  226. [webapps] - Gr8 Tutorial Script - SQL Injection
  227. [webapps] - Gr8 Gallery Script - SQL Injection
  228. [remote] - Miele Professional PG 8528 - Directory Traversal
  229. [dos] - wifirxpower - Local Buffer Overflow
  230. [webapps] - Flippa Clone - SQL Injection
  231. [webapps] - Joomla! Component Modern Booking 1.0 - 'coupon' Parameter SQL Injection
  232. [webapps] - Solare Datensysteme Solar-Log Devices 2.8.4-56 / 3.5.2-85 - Multiple Vuln
  233. [remote] - SysGauge 1.5.18 - SMTP Validation Buffer Overflow (Metasploit)
  234. [dos] - SpyCamLizard 1.230 - Denial of Service
  235. [webapps] - GLink Word Link Script 1.2.3 - SQL Injection
  236. [remote] - Disk Sorter Enterprise 9.5.12 - 'GET' Buffer Overflow (SEH)
  237. [papers] - PoC || GTFO 0x14
  238. [webapps] - Joomla! Component Extra Search 2.2.8 - 'establename' Parameter SQL Inject
  239. [dos] - Google Nest Cam 5.2.1? - Buffer Overflow Conditions Over Bluetooth LE
  240. [webapps] - phplist 3.2.6 - SQL Injection
  241. [dos] - Microsoft Windows Kernel - Registry Hive Loading Crashes in nt!nt!HvpGetBinMe
  242. [dos] - Microsoft Windows - Uniscribe Font Processing Out-of-Bounds Read in usp10!otl
  243. [dos] - Microsoft Windows - 'USP10!otlList::insertAt' Uniscribe Font Processing Heap-
  244. [dos] - Microsoft Windows - Uniscribe Font Processing Heap-Based Out-of-Bounds Read/W
  245. [webapps] - Joomla! Component JooCart 2.x - 'product_id' Parameter SQL Injection
  246. [webapps] - Joomla! Component jCart for OpenCart 2.0 - 'product_id' Parameter SQL Inj
  247. [dos] - ExtraPuTTY 0.29-RC2 - Denial of Service
  248. [papers] - Art of Anti Detection - Shellcode Alchemy
  249. [dos] - FTPShell Server 6.56 - 'ChangePassword' Buffer Overflow
  250. [remote] - HttpServer 1.0 - Directory Traversal