安全文章 / 文章资料 / Exploits

首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛

热门关键字：　shell 　88888 　art 　vitter 　linux

		当前位置：主页>安全文章>文章资料>Exploits>列表


	Synology Photo Station 6.8.2-3461 - 'SYNOPHOTO_Flickr_MultiUpload' Race Conditio
	日期：2018-01-16 15:35:28 点击：147 评论：0
#!/usr/local/bin/python Synology Photo Station = 6.8.2-3461 (latest) SYNOPHOTO_Flickr_MultiUpload Race Condition File Write Remote Code Execution Vulnerability Found by: mr_me Tested: 6.8.2-3461 (latest at the time) Vendor Advisory: https://www.synol


	OBS studio 20.1.3 - Local Buffer Overflow
	日期：2018-01-16 15:34:44 点击：41 评论：0
author = ''' ############################################## # Created: ScrR1pTK1dd13 # # Name: Greg Priest # # Mail: ScR1pTK1dd13.slammer@gmail.com # ############################################## # Exploit Title: OBS-Studio-20.1.3 Local Buffer Overf


	Adminer 4.3.1 - Server-Side Request Forgery
	日期：2018-01-16 15:32:31 点击：33 评论：0
[+] Credits: John Page (aka hyp3rlinx) [+] Website: hyp3rlinx.altervista.org [+] Source: http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt [+] ISR: apparition security Vendor: ============== www.admine


	Disk Pulse Enterprise 10.1.18 - Buffer Overflow
	日期：2018-01-16 15:30:51 点击：26 评论：0
# Exploit Title: Disk Pulse Enterprise Server v10.1.18 - Buffer Overflow # Exploit Author: Ahmad Mahfouz # Description: Disk Pule Enterprise Server Unauthenticated Remote Buffer Overflow SEH # Contact: http://twitter.com/eln1x # Date: 12/01/2018 # CV


	SysGauge Server 3.6.18 - Buffer Overflow
	日期：2018-01-16 15:27:10 点击：29 评论：0
# Exploit Title: SysGauge Server 3.6.18 - Buffer Overflow # Exploit Author: Ahmad Mahfouz # Description: Sysgauge Server Unauthenticated Remote Buffer Overflow SEH # Contact: http://twitter.com/eln1x # Date: 12/01/2018 # CVE: CVE-2018-5359 # Version:


	pfSense < 2.1.4 - 'status_rrd_graph_img.php' Command Injection
	日期：2018-01-16 15:25:52 点击：30 评论：0
#!/usr/bin/env python3 # Exploit Title: pfSense = 2.1.3 status_rrd_graph_img.php Command Injection. # Date: 2018-01-12 # Exploit Author: absolomb # Vendor Homepage: https://www.pfsense.org/ # Software Link: https://atxfiles.pfsense.org/mirror/downloa


	PyroBatchFTP < 3.19 - Buffer Overflow
	日期：2018-01-15 13:29:11 点击：17 评论：0
============================================= MGC ALERT 2018-001 - Original release date: December 22, 2017 - Last revised: January 12, 2018 - Discovered by: Manuel Garca Crdenas - Severity: 7,5/10 (CVSS Base Score) ==================================


	ZyXEL P-660HW UDP Denial Of Service
	日期：2018-01-15 13:27:28 点击：24 评论：0
#################Exploit Title: ZyXEL P-660HW UDP fragmentation Denial of ServiceCVE: CVE-2018-5330#CWE: CWE-400#Exploit Author: Hosein Askari #Vendor HomePage: https://www.zyxel.com/#Version : v3#Tested on: ZyXEL P-660HW#Category: Network Appliance


	eBPF 4.9-stable Verifier Bug Backported
	日期：2018-01-15 13:23:59 点击：32 评论：0
eBPF 4.9-stable Verifier Bug Backported


	Microsoft Edge Chakra - 'AppendLeftOverItemsFromEndSegment' Out-of-Bounds Read
	日期：2018-01-12 15:28:17 点击：31 评论：0
/* Here's a snippet of AppendLeftOverItemsFromEndSegment in JavascriptArray.inl. growby = endSeg-length; current = current-GrowByMin(recycler, growby); CopyArray(current-elements + endIndex + 1, endSeg-length, ((Js::SparseArraySegmentT*)endSeg)-eleme


	macOS - 'process_policy' Stack Leak Through Uninitialized Field
	日期：2018-01-12 15:26:48 点击：21 评论：0
/* The syscall process_policy(scope=PROC_POLICY_SCOPE_PROCESS, action=PROC_POLICY_ACTION_GET, policy=PROC_POLICY_RESOURCE_USAGE, policy_subtype=PROC_POLICY_RUSAGE_CPU, attrp=userbuf, target_pid=0, target_threadid=ignored) causes 4 bytes of uninitiali


	Microsoft Windows - NTFS Owner/Mandatory Label Privilege Bypass
	日期：2018-01-12 15:25:47 点击：31 评论：0
/* Windows: NTFS Owner/Mandatory Label Privilege Bypass EoP Platform: Windows 10 1709 not tested 8.1 Update 2 or Windows 7 Class: Elevation of Privilege Summary: When creating a new file on an NTFS drive its possible to circumvent security checks for


	Parity Browser < 1.6.10 - Bypass Same Origin Policy
	日期：2018-01-12 15:23:30 点击：72 评论：0
VuNote ====== Author: github.com/tintinweb Ref: https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-18016 Version: 0.3 Date: Jun 16th, 2017 Tag: parity same origin policy bypass webproxy token reuse Overview -------- Name: parity Vendor: parit


	D-Link Routers 110/412/615/815 < 1.03 - 'service.cgi' Arbitrary Code Execution
	日期：2018-01-12 15:22:29 点击：55 评论：0
#!/usr/bin/python # Exploit Title: D-Link WAP 615/645/815 1.03 service.cgi RCE # Exploit Author: Cr0n1c # Vendor Homepage: us.dlink.com # Software Link: https://github.com/Cr0n1c/dlink_shell_poc/blob/master/dlink_auth_rce # Version: 1.03 # Tested on:


	SAP NetWeaver J2EE Engine 7.40 - SQL Injection
	日期：2018-01-12 15:21:14 点击：79 评论：0
#!/usr/bin/env python # coding=utf-8 Author: Vahagn Vardanyan https://twitter.com/vah_13 Bugs: CVE-2016-2386 SQL injection CVE-2016-2388 Information disclosure CVE-2016-1910 Crypto issue Follow HTTP request is a simple PoC for anon time-based SQL inj


	ALLMediaServer 0.95 Stack Buffer Overflow
	日期：2018-01-12 15:12:51 点击：46 评论：0
#!/usr/bin/python# Exploit Title: Stack Buffer Overflow in ALLMediaServer 0.95# Exploit Author: Mario Kartone Ciccarelli# Contact: https://twitter.com/Kartone# CVE: CVE-2017-17932# Date: 09-01-2018# Thanks to PoC: https://www.exploit-db.com/exploits


	LabF nfsAxe 3.7 FTP Client Stack Buffer Overflow
	日期：2018-01-11 15:21:58 点击：45 评论：0
### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework##class MetasploitModule Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::TcpServer include Ms


	Samsung SRN-1670D Web Viewer 1.0.0.193 Arbitrary File Read / Upload
	日期：2018-01-11 15:21:01 点击：37 评论：0
### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework##require 'digest'class MetasploitModule Msf::Exploit::Remote Rank = GoodRanking include Msf::Exploit::Remote::HttpCl


	phpCollab 2.5.1 Unauthenticated File Upload
	日期：2018-01-11 15:19:56 点击：110 评论：0
### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework##class MetasploitModule Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient includ


	TP-Link Remote Command Injection
	日期：2018-01-11 15:18:33 点击：211 评论：0
Introduction:================The WVR-, WAR- and ER- products are the SOHO/WIFI routers of TP-Link.These issues allow remote authenticated administrators to execute arbitrary commands via command injection through different variables of different lua

共637页/12733条记录首页上一页 [45] [46] [47] 48 [49] [50] [51] 下一页末页

本月热点文章

本月推荐文章

相关分类

Exploits

CopyRight © 2002-2022 VFocuS.Net All Rights Reserved