bpmcdevitt/exploit-db-mirror
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
exploit-db-mirror/exploits/ios/webapps
History
Offensive Security a250e82458 DB: 2021-10-12 
176 changes to exploits/shellcodes

Yenkee Hornet Gaming Mouse - 'GM312Fltr.sys' Denial-Of-Service (PoC)

Product Key Explorer 4.2.7 - 'multiple' Denial of Service (PoC)

jQuery UI 1.12.1 - Denial of Service (DoS)
AgataSoft PingMaster Pro 2.1 - Denial of Service (PoC)
Nsauditor 3.2.2.0 - 'Event Description' Denial of Service (PoC)
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Device Reboot (Unauthenticated)
ProFTPD 1.3.7a - Remote Denial of Service
glFTPd 2.11a - Remote Denial of Service
Hasura GraphQL 1.3.3 - Denial of Service
WordPress Plugin WPGraphQL 1.3.5 - Denial of Service
Telegram Desktop 2.9.2 - Denial of Service (PoC)
SmartFTP Client 10.0.2909.0 - 'Multiple' Denial of Service
Redragon Gaming Mouse - 'REDRAGON_MOUSE.sys' Denial-Of-Service (PoC)
GeoGebra Graphing Calculato‪r‬ 6.0.631.0 - Denial Of Service (PoC)
GeoGebra Classic 5.0.631.0-d - Denial of Service (PoC)
GeoGebra CAS Calculato‪r‬ 6.0.631.0 - Denial of Service (PoC)

Microsoft Internet Explorer 8/11 and WPAD service 'Jscript.dll' - Use-After-Free

MySQL User-Defined (Linux) x32 / x86_64 - 'sys_exec' Local Privilege Escalation (2)

Cyberfox Web Browser 52.9.1 - Denial-of-Service (PoC)

Cmder Console Emulator 1.3.18 - 'Cmder.exe' Denial-of-Service (PoC)
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Hard coded Credentials Shell Access
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Weak Default WiFi Password Algorithm
vsftpd 3.0.3 - Remote Denial of Service

GNU Wget < 1.18 - Arbitrary File Upload / Remote Code Execution (2)

PEEL Shopping 9.3.0 - 'Comments/Special Instructions' Stored Cross-Site Scripting

Arteco Web Client DVR/NVR - 'SessionId' Brute Force

Resumes Management and Job Application Website 1.0 - Multiple Stored XSS

Library System 1.0 - Authentication Bypass Via SQL Injection

MyBB Timeline Plugin 1.0 - Cross-Site Scripting / CSRF

SonicWall SSL-VPN 8.0.0.0 - 'shellshock/visualdoor' Remote Code Execution (Unauthenticated)

Web Based Quiz System 1.0 - 'MCQ options' Persistent/Stored Cross-Site Scripting

Web Based Quiz System 1.0 - 'name' Persistent/Stored Cross-Site Scripting

Online Ordering System 1.0 - Arbitrary File Upload to Remote Code Execution

MagpieRSS 0.72 - 'url' Command Injection and Server Side Request Forgery
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Command Injection (Authenticated)
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Authentication Bypass
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Remote Code Execution
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Factory Reset (Unauthenticated)
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Config Download (Unauthenticated)
GetSimple CMS Custom JS Plugin 0.1 - CSRF to Persistent XSS
Regis Inventory And Monitoring System 1.0 - 'Item List' Stored XSS

rConfig 3.9.6 - Arbitrary File Upload to Remote Code Execution (Authenticated) (1)

Mini Mouse 9.3.0 - Local File inclusion / Path Traversal

GetSimple CMS My SMTP Contact Plugin 1.1.1 - CSRF to RCE

Discourse 2.7.0 - Rate Limit Bypass leads to 2FA Bypass

rconfig 3.9.6 - Arbitrary File Upload to Remote Code Execution (Authenticated) (2)

GravCMS 1.10.7 - Unauthenticated Arbitrary YAML Write/Update (Metasploit)

GetSimple CMS My SMTP Contact Plugin 1.1.2 - CSRF to Stored XSS to RCE

Sipwise C5 NGCP CSC - 'Multiple' Stored/Reflected Cross-Site Scripting (XSS)

Cacti 1.2.12 - 'filter' SQL Injection / Remote Code Execution

Zenario CMS 8.8.52729 - 'cID' Blind & Error based SQL injection (Authenticated)

OpenEMR 5.0.1.3 - '/portal/account/register.php' Authentication Bypass

VMware vCenter Server RCE 6.5 / 6.7 / 7.0 - Remote Code Execution (RCE) (Unauthenticated)

Scratch Desktop 3.17 - Cross-Site Scripting/Remote Code Execution (XSS/RCE)

Church Management System 1.0 - Unrestricted File Upload to Remote Code Execution (Authenticated)

Zoo Management System 1.0 - 'Multiple' Stored Cross-Site-Scripting (XSS)

WordPress Plugin Current Book 1.0.1 - 'Book Title and Author field' Stored Cross-Site Scripting (XSS)

KevinLAB BEMS 1.0 - Unauthenticated SQL Injection / Authentication Bypass

Event Registration System with QR Code 1.0 - Authentication Bypass & RCE

CloverDX 5.9.0 - Cross-Site Request Forgery (CSRF) to Remote Code Execution (RCE)

Panasonic Sanyo CCTV Network Camera 2.03-0x - 'Disable Authentication / Change Password' CSRF

ApacheOfBiz 17.12.01 - Remote Command Execution (RCE) via Unsafe Deserialization of XMLRPC arguments

WordPress Plugin LifterLMS 4.21.1 - Access Other Student Grades/Answers via IDOR

GeoVision Geowebserver 5.3.3 - LFI / XSS / HHI / RCE

Umbraco CMS 8.9.1 - Path traversal and Arbitrary File Write (Authenticated)

Traffic Offense Management System 1.0 - SQLi to Remote Code Execution (RCE) (Unauthenticated)

Compro Technology IP Camera - 'killps.cgi' Denial-of-Service (DoS)

OpenSIS 8.0 'modname' - Directory/Path Traversal

Patient Appointment Scheduler System 1.0 - Persistent/Stored XSS

Apartment Visitor Management System (AVMS) 1.0 - SQLi to RCE

FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - 'Add Admin' Cross-Site Request Forgery (CSRF)

Wordpress Plugin JS Jobs Manager 1.1.7 - Unauthenticated Plugin Install/Activation

PlaceOS 1.2109.1 - Open Redirection

Blood Bank System 1.0 - SQL Injection / Authentication Bypass

Lodging Reservation Management System 1.0 - SQL Injection / Authentication Bypass

Atlassian Jira Server/Data Center 8.16.0 - Arbitrary File Read

Linux/x64 - Reverse (127.1.1.1:4444/TCP) Shell (/bin/sh) Shellcode (123 Bytes)
Linux/x86 - Bind Socat (0.0.0.0:1000/TCP) Shell (Bash) Shellcode (113 bytes)
Linux/x86 - Bind (0.0.0.0:13377/TCP) Shell (/bin/sh) Shellcode (65 bytes)
Windows/x86 - Download File (http://10.10.10.5:8080/2NWyfQ9T.hta) Via mshta + Execute + Stager Shellcode (143 bytes)
Linux/x64 - Bind_tcp (0.0.0.0:4444) + Password (12345678) + Shell (/bin/sh) Shellcode (142 bytes)
Linux/x64 - execve _cat /etc/shadow_ Shellcode (66 bytes)
Windows/x86 - Add User Alfred to Administrators/Remote Desktop Users Group Shellcode (240 bytes)
Windows/x64 - Dynamic Null-Free WinExec PopCalc Shellcode (205 Bytes)
Windows/x64 - Dynamic NoNull Add RDP Admin (BOKU:SP3C1ALM0V3) Shellcode (387 Bytes)

Linux/x86 - execve /bin/sh Shellcode (fstenv eip GetPC technique) (70 bytes_ xor encoded)
Windows/x86 - WinExec PopCalc PEB & Export Directory Table NullFree Dynamic Shellcode (178 bytes)
Windows/x86 - Bind TCP shellcode / Dynamic PEB & EDT method null-free Shellcode (415 bytes)
2021-10-12 05:02:16 +00:00
..
24543.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
24603.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
25412.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
25414.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
25415.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
25417.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
26888.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
26890.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
26952.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
26953.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
26954.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
27042.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
27188.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
27189.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
27376.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
27655.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
27656.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
28236.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
28975.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
28976.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
28977.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
28978.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
29633.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
30000.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
30031.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
30055.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
30145.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
30146.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
30215.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
30311.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
30375.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
30476.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
31258.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
31573.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
31618.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
31691.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
31692.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
31693.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
31733.txt DB: 2021-09-03 2021-09-03 21:04:54 +00:00
31896.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
31900.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
31962.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
32374.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
32557.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
32558.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
32559.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
32560.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
32569.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
32619.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
32620.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
32664.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
32703.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
32866.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
33026.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
33627.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
33628.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
33629.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
33630.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
33631.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
33632.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
33996.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
34196.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
34240.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
34243.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
34263.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
34264.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
34303.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
34305.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
34626.txt DB: 2021-09-03 2021-09-03 21:04:54 +00:00
34627.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
34664.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
34682.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
34816.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
34957.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
34981.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
35037.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
35038.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
35082.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
35083.txt DB: 2021-09-03 2021-09-03 21:04:54 +00:00
35775.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
36795.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
36796.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
36797.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
36798.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
36904.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
36922.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
36924.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
36943.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
37057.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
37213.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
37492.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
37761.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
38258.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
38342.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
38343.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
39335.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
39479.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
39721.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
41401.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
41432.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
43457.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
48321.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
48322.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
48327.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
48340.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
48375.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
48395.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
48405.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00
48406.txt DB: 2021-09-03 2021-09-03 20:19:21 +00:00