exploit-db-mirror/exploits/osx/local
Offensive Security 6cbe6ebbb6 DB: 2021-09-03
395 changes to exploits/shellcodes

EO Video 1.36 - Local Heap Overflow Denial of Service / (PoC)

Electronics Workbench - '.ewb' Local Stack Overflow (PoC)

BulletProof FTP Client 2.63 - Local Heap Overflow (PoC)

Easy Web Password 1.2 - Local Heap Memory Consumption (PoC)

Compface 1.5.2 - '.xbm' Local Buffer Overflow (PoC)

eEye Retina WiFi Security Scanner 1.0 - '.rws Parsing' Buffer Overflow (PoC)

Zortam MP3 Media Studio 9.40 - Multiple Memory Corruption Vulnerabilities

ImTOO MPEG Encoder 3.1.53 - '.cue' / '.m3u' Local Buffer Overflow (PoC)

ZoIPer 2.22 - Call-Info Remote Denial of Service
PHP < 5.3.1 - 'MultiPart/form-data' Denial of Service
PHP - MultiPart Form-Data Denial of Service (PoC)
PHP < 5.3.1 - 'MultiPart/form-data' Denial of Service
PHP - MultiPart Form-Data Denial of Service (PoC)

Nuked KLan 1.7.7 & SP4 - Denial of Service

AIC Audio Player 1.4.1.587 - Local Crash (PoC)

Xerox 4595 - Denial of Service

WinMerge 2.12.4 - Project File Handling Stack Overflow

Acoustica Mixcraft 1.00 - Local Crash

SopCast 3.4.7 - 'sop://' URI Handling Remote Stack Buffer Overflow (PoC)

Oreans WinLicense 2.1.8.0 - XML File Handling Memory Corruption

Spotify 0.8.2.610 - search func Memory Exhaustion

Apple iTunes 10.6.1.7 - '.m3u' Walking Heap Buffer Overflow (PoC)

WaveSurfer 1.8.8p4 - Memory Corruption (PoC)
DIMIN Viewer 5.4.0 - Crash (PoC)
FreeVimager 4.1.0 - Crash (PoC)
DIMIN Viewer 5.4.0 - Crash (PoC)
FreeVimager 4.1.0 - Crash (PoC)

CoolPlayer+ Portable 2.19.4 - Local Buffer Overflow

Light Audio Player 1.0.14 - Memory Corruption (PoC)

Image Transfer IOS - Remote Crash (PoC)

Larson VizEx Reader 9.7.5 - Local Buffer Overflow (SEH)

VUPlayer 2.49 - '.cue' Universal Buffer Overflow

Apple Mac OSX xnu 1228.x - 'hfs-fcntl' Kernel Privilege Escalation

IBM AIX 5.3 - 'libc' MALLOCDEBUG File Overwrite

Hex Workshop 4.23/5.1/6.0 - '.hex' Universal Local Buffer Overflow (SEH)

Soritong MP3 Player 1.0 - '.m3u' / UI.txt Universal Local Buffer Overflow

Adobe Acrobat/Reader < 7.1.1/8.1.3/9.1 - Collab getIcon Universal

Millenium MP3 Studio - '.pls' / '.mpf' / '.m3u' Universal Local Buffer Overflow (SEH)

Alleycode HTML Editor 2.2.1 - Local Buffer Overflow

GPG2/Kleopatra 2.0.11 - Malformed Certificate

Free WMA MP3 Converter 1.1 - '.wav' Local Buffer Overflow

OtsTurntables Free 1.00.047 - '.olf' Universal Buffer Overflow

Watermark Master 2.2.23 - '.wstyle' Local Buffer Overflow (SEH)

Dropbox < 3.3.x - OSX FinderLoadBundle Privilege Escalation

MySQL / MariaDB / PerconaDB 5.5.51/5.6.32/5.7.14 - Code Execution / Privilege Escalation
eIQnetworks License Manager - Remote Buffer Overflow (Metasploit) (1)
eIQnetworks License Manager - Remote Buffer Overflow (Metasploit) (2)
eIQnetworks License Manager - Remote Buffer Overflow (Metasploit) (1)
eIQnetworks License Manager - Remote Buffer Overflow (Metasploit) (2)

eIQnetworks License Manager - Remote Buffer Overflow (Metasploit) (3)

QK SMTP 3.01 - 'RCPT TO' Remote Buffer Overflow (2)

CA BrightStor ARCserve - 'msgeng.exe' Remote Stack Overflow

quickshare file share 1.2.1 - Directory Traversal (1)

SPlayer 3.7 (build 2055) - Remote Buffer Overflow

Acunetix 8 build 20120704 - Remote Stack Overflow

Omeka 2.2.1 - Remote Code Execution

D-Link DSL-2740R - Remote DNS Change
D-Link DSL-2730U/2750U/2750E ADSL Router - Remote File Disclosure
Netgear JNR1010 ADSL Router - (Authenticated) Remote File Disclosure
D-Link DSL-2730U/2750U/2750E ADSL Router - Remote File Disclosure
Netgear JNR1010 ADSL Router - (Authenticated) Remote File Disclosure

Websphere/JBoss/OpenNMS/Symantec Endpoint Protection Manager - Java Deserialization Remote Code Execution

TorrentTrader 1.0 RC2 - SQL Injection

WEBInsta CMS 0.3.1 - 'templates_dir' Remote File Inclusion

MiniPort@l 0.1.5 Beta - 'skiny' Remote File Inclusion

PHP DocWriter 0.3 - 'script' Remote File Inclusion

phpBB Journals System Mod 1.0.2 RC2 - Remote File Inclusion

phpBB SpamBlocker Mod 1.0.2 - Remote File Inclusion
RSSonate - 'xml2rss.php' Remote File Inclusion
CASTOR 1.1.1 - '/lib/rs.php' Remote File Inclusion
RSSonate - 'xml2rss.php' Remote File Inclusion
CASTOR 1.1.1 - '/lib/rs.php' Remote File Inclusion

QnECMS 2.5.6 - 'adminfolderpath' Remote File Inclusion

BrewBlogger 1.3.1 - 'printLog.php' SQL Injection

e-Ark 1.0 - '/src/ark_inc.php' Remote File Inclusion

awrate.com Message Board 1.0 - 'search.php' Remote File Inclusion

Tucows Client Code Suite (CSS) 1.2.1015 - Remote File Inclusion

Gizzar 03162002 - 'index.php' Remote File Inclusion

SH-News 0.93 - 'misc.php' Remote File Inclusion

JSBoard 2.0.10 - 'login.php?table' Local File Inclusion

XOOPS Module WF-Links 1.03 - 'cid' SQL Injection

Scorp Book 1.0 - 'smilies.php?config' Remote File Inclusion

WEBInsta FM 0.1.4 - 'login.php' absolute_path Remote File Inclusion

mxBB Module FAQ & RULES 2.0.0 - Remote File Inclusion

EQdkp 1.3.2 - 'listmembers.php' SQL Injection

FlashBB 1.1.8 - 'sendmsg.php' Remote File Inclusion

SimpleBlog 3.0 - 'comments_get.asp?id' SQL Injection

Pakupaku CMS 0.4 - Arbitrary File Upload / Local File Inclusion

CCMS 3.1 Demo - SQL Injection

MoinMoin 1.5.x - 'MOIND_ID' Cookie Login Bypass

BlogPHP 2 - 'id' Cross-Site Scripting / SQL Injection

AuraCMS 1.62 - Multiple SQL Injections

sCssBoard (Multiple Versions) - 'pwnpack' Remote s

EasyNews 40tr - SQL Injection / Cross-Site Scripting / Local File Inclusion

RevokeBB 1.0 RC11 - 'Search' SQL Injection

Galatolo Web Manager 1.0 - Cross-Site Scripting / Local File Inclusion

CaupoShop Classic 1.3 - 'saArticle[ID]' SQL Injection

PHPortal 1.2 - Multiple Remote File Inclusions

Libera CMS 1.12 - 'cookie' SQL Injection

Zanfi CMS lite 2.1 / Jaw Portal free - 'FCKeditor' Arbitrary File Upload

WCMS 1.0b - Arbitrary Add Admin

FOSS Gallery Admin 1.0 - Arbitrary File Upload

MemHT Portal 4.0.1 - SQL Injection / Code Execution

Mediatheka 4.2 - Blind SQL Injection

Pligg 9.9.5b - Arbitrary File Upload / SQL Injection

XOOPS 2.3.2 - 'mydirname' PHP Remote Code Execution

Joomla! Component Casino 0.3.1 - Multiple SQL Injections s

ZeusCart 2.3 - 'maincatid' SQL Injection

ASP Football Pool 2.3 - Remote Database Disclosure

LightNEasy sql/no-db 2.2.x - System Configuration Disclosure

Zen Cart 1.3.8 - Remote Code Execution

Joomla! Component com_pinboard - 'task' SQL Injection

Joomla! Component com_bookflip - 'book_id' SQL Injection

Messages Library 2.0 - Arbitrary Delete Message

Arab Portal 2.2 - Blind Cookie Authentication Bypass

Joomla! Plugin JD-WordPress 2.0 RC2 - Remote File Inclusion

REZERVI 3.0.2 - Remote Command Execution

Joomla! Component BF Quiz 1.0 - SQL Injection (2)

E-Xoopport Samsara 3.1 (eCal Module) - Blind SQL Injection

AJ Matrix DNA - SQL Injection

Joomla! Component JE Story Submit - Local File Inclusion

CF Image Hosting Script 1.3.82 - File Disclosure

hastymail2 webmail 1.1 rc2 - Persistent Cross-Site Scripting

CMSLogik 1.2.1 - Multiple Vulnerabilities

C.P.Sub 4.5 - Authentication Bypass

WordPress Plugin Slideshow Gallery 1.4.6 - Arbitrary File Upload

Joomla! Component com_hdflvplayer < 2.1.0.1 - SQL Injection

WordPress Plugin WP Symposium 14.11 - Arbitrary File Upload

PHPMailer < 5.2.20 - Remote Code Execution

phpIPAM 1.4 - SQL Injection

Joomla! 3.9.0 < 3.9.7 - CSV Injection
2021-09-03 14:58:20 +00:00
..
15.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
367.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
680.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
758.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
766.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
793.pl DB: 2021-09-03 2021-09-03 13:39:06 +00:00
795.pl DB: 2021-09-03 2021-09-03 13:39:06 +00:00
896.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
1043.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
1185.pl DB: 2021-09-03 2021-09-03 13:39:06 +00:00
1186.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
1545.pl DB: 2021-09-03 2021-09-03 13:39:06 +00:00
1962.pl DB: 2021-09-03 2021-09-03 13:39:06 +00:00
1973.pl DB: 2021-09-03 2021-09-03 13:39:06 +00:00
2106.pl DB: 2021-09-03 2021-09-03 13:39:06 +00:00
2107.pl DB: 2021-09-03 2021-09-03 13:39:06 +00:00
2108.sh DB: 2021-09-03 2021-09-03 13:39:06 +00:00
2111.pl DB: 2021-09-03 2021-09-03 13:39:06 +00:00
2463.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
2464.pl DB: 2021-09-03 2021-09-03 13:39:06 +00:00
2565.pl DB: 2021-09-03 2021-09-03 13:39:06 +00:00
2580.pl DB: 2021-09-03 2021-09-03 13:39:06 +00:00
2737.pl DB: 2021-09-03 2021-09-03 13:39:06 +00:00
2738.pl DB: 2021-09-03 2021-09-03 13:39:06 +00:00
2788.pl DB: 2021-09-03 2021-09-03 13:39:06 +00:00
3070.pl DB: 2021-09-03 2021-09-03 13:39:06 +00:00
3087.rb DB: 2021-09-03 2021-09-03 13:39:06 +00:00
3088.rb DB: 2021-09-03 2021-09-03 13:39:06 +00:00
3102.rb DB: 2021-09-03 2021-09-03 13:39:06 +00:00
3156.rb DB: 2021-09-03 2021-09-03 13:39:06 +00:00
3173.rb DB: 2021-09-03 2021-09-03 13:39:06 +00:00
3181.rb DB: 2021-09-03 2021-09-03 13:39:06 +00:00
3219.rb DB: 2021-09-03 2021-09-03 13:39:06 +00:00
3386.pl DB: 2021-09-03 2021-09-03 13:39:06 +00:00
3460.php DB: 2021-09-03 2021-09-03 13:39:06 +00:00
3517.php DB: 2021-09-03 2021-09-03 13:39:06 +00:00
3985.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
4013.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
4759.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
8108.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
8266.sh DB: 2021-09-03 2021-09-03 14:58:20 +00:00
8896.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
10076.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
18749.py DB: 2021-09-03 2021-09-03 13:39:06 +00:00
19244.sh DB: 2021-09-03 2021-09-03 13:39:06 +00:00
19417.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
19427.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
19434.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
19437.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
19438.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
19439.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
20417.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
20443.sh DB: 2021-09-03 2021-09-03 13:39:06 +00:00
20485.sh DB: 2021-09-03 2021-09-03 13:39:06 +00:00
21070.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
21076.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
21815.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
24578.rb DB: 2021-09-03 2021-09-03 13:39:06 +00:00
24579.rb DB: 2021-09-03 2021-09-03 13:39:06 +00:00
24608.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
24609.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
25055.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
25256.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
26185.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
27944.rb DB: 2021-09-03 2021-09-03 13:39:06 +00:00
27965.py DB: 2021-09-03 2021-09-03 13:39:06 +00:00
28576.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
29190.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
29194.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
29201.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
29950.js DB: 2021-09-03 2021-09-03 13:39:06 +00:00
30096.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
31940.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
32813.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
35440.rb DB: 2021-09-03 2021-09-03 13:39:06 +00:00
35488.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
35742.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
35847.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
35848.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
35934.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
36143.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
36692.py DB: 2021-09-03 2021-09-03 13:39:06 +00:00
36739.m DB: 2021-09-03 2021-09-03 13:39:06 +00:00
36745.rb DB: 2021-09-03 2021-09-03 13:39:06 +00:00
37670.sh DB: 2021-09-03 2021-09-03 13:39:06 +00:00
37825.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
38036.rb DB: 2021-09-03 2021-09-03 13:39:06 +00:00
38089.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
38136.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
38137.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
38138.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
38303.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
38360.sh DB: 2021-09-03 2021-09-03 14:58:20 +00:00
38371.py DB: 2021-09-03 2021-09-03 13:39:06 +00:00
38540.rb DB: 2021-09-03 2021-09-03 13:39:06 +00:00
39147.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
39675.c DB: 2021-09-03 2021-09-03 13:39:06 +00:00
39741.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
40653.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
41149.md DB: 2021-09-03 2021-09-03 13:39:06 +00:00
41873.sh DB: 2021-09-03 2021-09-03 13:39:06 +00:00
41951.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
42460.py DB: 2021-09-03 2021-09-03 13:39:06 +00:00
42948.txt DB: 2021-09-03 2021-09-03 13:39:06 +00:00
44239.md DB: 2021-09-03 2021-09-03 13:39:06 +00:00