المساعد الشخصي الرقمي

مشاهدة النسخة كاملة : قسم الثغرات

الصفحات : 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 [60] 61 62
  1. [papers] Rootkit analysis - Use case on HideDRV
  2. [webapps] Spring Data REST < 2.6.9 (Ingalls SR9), 3.0.1 (Kay SR1) - PATCH Request Rem
  3. [webapps] WordPress Plugin Duplicator 1.2.32 - Cross-Site Scripting
  4. [remote] MikroTik RouterOS < 6.41.3/6.42rc27 - SMB Buffer Overflow
  5. [remote] SAP NetWeaver AS JAVA CRM - Log injection Remote Command Execution
  6. [dos] Android DRM Services - Buffer Overflow
  7. [remote] Firefox 44.0.2 - ASM.JS JIT-Spray Remote Code Execution
  8. [remote] Firefox 46.0.1 - ASM.JS JIT-Spray Remote Code Execution
  9. [webapps] Contec Smart Home 4.15 - Unauthorized Password Reset
  10. [papers] Analyze & Attack SSH Protocol
  11. [local] Huawei Mate 7 - '/dev/hifi_misc' Privilege Escalation
  12. [dos] Linux Kernel - 'The Huge Dirty Cow' Overwriting The Huge Zero Page (2)
  13. [dos] Linux Kernel - 'mincore()' Heap Page Disclosure (PoC)
  14. [local] Linux Kernel 4.13 (Debian 9) - Local Privilege Escalation
  15. [local] Linux Kernel < 3.16.39 (Debian 8 x64) - 'inotfiy' Local Privilege Escalation
  16. [dos] Linux Kernel < 4.5.1 - Off-By-One (PoC)
  17. [local] Linux Kernel < 4.4.0-21 (Ubuntu 16.04 x64) - 'netfilter target_offset' Local
  18. [local] Linux Kernel < 3.5.0-23 (Ubuntu 12.04.2 x64) - 'SOCK_DIAG' SMEP Bypass Local
  19. [local] Linux Kernel < 4.4.0-116 (Ubuntu 16.04.4) - Local Privilege Escalation
  20. [papers] Analyze & Attack SSH Protocol
  21. [dos] Microsoft Windows Kernel - 'NtQueryVirtualMemory(MemoryMappedFilenameInformat io
  22. [local] Google Software Updater macOS - Unsafe use of Distributed Objects Privilege E
  23. [dos] Kamailio 5.1.1 / 5.1.0 / 5.0.0 - Off-by-One Heap Overflow
  24. [local] Microsoft Windows - Desktop Bridge Virtual Registry NtLoadKey Arbitrary File
  25. [local] Microsoft Windows - Desktop Bridge Virtual Registry Arbitrary File Read/Write
  26. [local] Microsoft Windows - Desktop Bridge VFS Privilege Escalation
  27. [dos] Internet Explorer - 'RegExp.lastMatch' Memory Disclosure
  28. [dos] Microsoft Windows Kernel - 'nt!NtWaitForDebugEvent' 64-bit Stack Memory Disclos
  29. [dos] Microsoft Windows Kernel - 'nt!KiDispatchException' 64-bit Stack Memory Disclos
  30. [dos] Microsoft Windows Kernel - 'NtQueryInformationThread(ThreadBasicInformation)' 6
  31. [webapps] Intelbras Telefone IP TIP200 LITE - Local File Disclosure
  32. [webapps] Vehicle Sales Management System - Multiple Vulnerabilities
  33. [shellcode] Linux/x86 - execve(/bin/sh) Shellcode (18 bytes)
  34. [papers] Web Application Security Testing
  35. [webapps] Cisco node-jos < 0.11.0 - Re-sign Tokens
  36. [papers] Windows Kernel Exploitation Tutorial Part 7: Uninitialized Heap Variable
  37. [papers] Windows Kernel Exploitation Tutorial Part 6: Uninitialized Stack Variable
  38. [local] Linux Kernel < 4.15.4 - 'show_floppy' KASLR Address Leak
  39. [dos] Android Bluetooth - BNEP BNEP_SETUP_CONNECTION_REQUEST_MSG Out-of-Bounds Read
  40. [dos] Android Bluetooth - BNEP bnep_data_ind() Remote Heap Disclosure
  41. [webapps] Hikvision IP Camera versions 5.2.0 - 5.3.9 (Builds 140721 - 170109) - Acces
  42. [shellcode] Linux/x86 - EggHunter Shellcode (11 Bytes)
  43. [dos] WM Recorder 16.8.1 - Denial of Service
  44. [dos] Dell EMC NetWorker - Denial of Service
  45. [local] Crashmail 1.6 - Stack-Based Buffer Overflow ( ROP execve )
  46. [local] Allok Quicktime to AVI MPEG DVD Converter 4.6.1217 - Stack-Based Buffer Overf
  47. [webapps] 3CX Phone System < 12.5 - Remote Code Execution
  48. [webapps] Wordpress Plugin Site Editor 1.1.1 - Local File Inclusion
  49. [webapps] MyBB Plugin Last User's Threads in Profile Plugin 1.2 - Persistent Cross-Si
  50. [dos] Easy Avi Divx Xvid to DVD Burner 2.9.11 - '.avi' Denial of Service
  51. [local] Easy CD DVD Copy 1.3.24 - Local Buffer Overflow (SEH)
  52. [webapps] XenForo 2 - CSS Loader Denial of Service
  53. [webapps] TL-WR720N 150Mbps Wireless N Router - Cross-Site Request Forgery
  54. [local] LabF nfsAxe 3.7 - Privilege Escalation
  55. [webapps] Laravel Log Viewer < 0.13.0 - Local File Download
  56. [local] Fast AVI MPEG Splitter 1.2 - Stack-Based Buffer Overflow
  57. [papers] Cross Site Scripting in a Nutshell
  58. [remote] Acrolinx Server < 5.2.5 - Directory Traversal
  59. [webapps] ClipBucket - beats_uploader Unauthenticated Arbitrary File Upload (Metasplo
  60. [remote] TestLink Open Source Test Management < 1.9.16 - Remote Code Execution (PoC)
  61. [papers] Error based SQL Injection in "Order By" clause (MSSQL)
  62. [papers] DOSfuscation: Exploring the Depths of Cmd.exe Obfuscation and Detection Tech
  63. [webapps] Open-AuditIT Professional 2.1 - Cross-Site Scripting
  64. [webapps] Tenda N11 Wireless Router 5.07.43_en_NEX01 - Remote DNS Change
  65. [webapps] Microsoft Windows Remote Assistance - XML External Entity Injection
  66. [webapps] TwonkyMedia Server 7.0.11-8.5 - Persistent Cross-Site Scripting
  67. [webapps] TwonkyMedia Server 7.0.11-8.5 - Directory Traversal
  68. [papers] Error based SQL Injection in "Order By" clause (MSSQL)
  69. [papers] DOSfuscation: Exploring the Depths of Cmd.exe Obfuscation and Detection Tech
  70. [webapps] Joomla Component Fields - SQLi Remote Code Execution (Metasploit)
  71. [remote] Exodus Wallet (ElectronJS Framework) - Remote Code Execution (Metasploit)
  72. [remote] GitStack - Unsanitized Argument Remote Code Execution (Metasploit)
  73. [webapps] Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Admin Session)
  74. [papers] Sony Playstation 4 (PS4) - PS4 4.55 BPF Race Condition Kernel Exploit Writeu
  75. [webapps] MiniCMS 1.10 - Cross-Site Request Forgery
  76. [webapps] Homematic CCU2 2.29.23 - Arbitrary File Write
  77. [webapps] Open-AuditIT Professional 2.1 - Cross-Site Request Forgery
  78. [webapps] Wordpress Plugin Contact Form 7 to Database Extension 2.10.32 - CSV Injecti
  79. [webapps] Wordpress Plugin Relevanssi 4.0.4 - Reflected Cross-Site Scripting
  80. [local] Allok WMV to AVI MPEG DVD WMV Converter 4.6.1217 - Buffer Overflow
  81. [local] Allok Video Joiner 4.6.1217 - Stack-Based Buffer Overflow
  82. [local] Allok AVI DivX MPEG to DVD Converter 2.6.1217 - Buffer Overflow (SEH)
  83. [webapps] WordPress Plugin WP Security Audit Log 3.1.1 - Sensitive Information Disclo
  84. [webapps] Joomla! Component AcySMS 3.5.0 - CSV Macro Injection
  85. [webapps] Joomla! Component Acymailing Starter 5.9.5 - CSV Macro Injection
  86. [webapps] Homematic CCU2 2.29.23 - Remote Command Execution
  87. [webapps] Tenda W308R v2 Wireless Router 5.07.48 - Cookie Session Weakness Remote DNS
  88. [dos] SysGauge 4.5.18 - Local Denial of Service
  89. [webapps] D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router - Authentica
  90. [webapps] Tenda W316R Wireless Router 5.07.50 - Remote DNS Change (PoC)
  91. [remote] Advantech WebAccess < 8.1 - webvrpcs DrawSrv.dll Path BwBuildPath Stack-Base
  92. [dos] Systematic SitAware - NVG Denial of Service
  93. [webapps] osCommerce 2.3.4.1 - Remote Code Execution
  94. [local] Faleemi Windows Desktop Software - (DDNS/IP) Local Buffer Overflow
  95. [webapps] Tenda FH303/A300 Firmware V5.07.68_EN - Remote DNS Change
  96. [webapps] Tenda W3002R/A302/w309r Wireless Router V5.07.64_en - Remote DNS Change (Po
  97. [webapps] Vtiger CRM 6.3.0 - Authenticated Arbitrary File Upload (Metasploit)
  98. [webapps] WampServer 3.1.1 - Cross-Site Scripting / Cross-Site Request Forgery
  99. [webapps] Frog CMS 0.9.5 - Cross-Site Request Forgery (Add User)
  100. [webapps] DLink DIR-601 - Admin Password Disclosure
  101. [webapps] VideoFlow Digital Video Protection (DVP) 2.10 - Hard-Coded Credentials
  102. [webapps] VideoFlow Digital Video Protection (DVP) 2.10 - Directory Traversal
  103. [webapps] WampServer 3.1.2 - Cross-Site Request Forgery
  104. [local] WebLog Expert Enterprise 9.4 - Privilege Escalation
  105. [webapps] OpenCMS 10.5.3 - Cross-Site Request Forgery
  106. [webapps] Secutech RiS-11/RiS-22/RiS-33 - Remote DNS Change
  107. [webapps] OpenCMS 10.5.3 - Cross-Site Scripting
  108. [dos] Microsoft Edge Chakra JIT - Stack-to-Heap Copy (Incomplete Fix 2)
  109. [dos] Microsoft Edge Chakra JIT - Stack-to-Heap Copy (Incomplete Fix)
  110. [dos] Google Chrome V8 - 'Genesis::InitializeGlobal' Out-of-Bounds Read/Write
  111. [dos] Google Chrome V8 - 'ElementsAccessorBase::CollectValuesOrEntriesImpl' Type Conf
  112. [remote] Moxa AWK-3131A 1.4 < 1.7 - 'Username' OS Command Injection
  113. [webapps] ProcessMaker - Plugin Upload (Metasploit)
  114. [webapps] Joomla! Component JS Jobs 1.2.0 - Cross-Site Scripting
  115. [webapps] MyBB Plugin Downloads 2.0.3 - Cross-Site Scripting
  116. [dos] Microsoft Windows - Multiple Use-After-Free Issues in jscript Array Methods
  117. [dos] Microsoft Windows Defender - 'mpengine.dll' Memory Corruption
  118. [webapps] Z-Blog 1.5.1.1740 - Full Path Disclosure
  119. [webapps] Z-Blog 1.5.1.1740 - Cross-Site Scripting
  120. [webapps] YzmCMS 3.6 - Cross-Site Scripting
  121. [webapps] WebRTC - Private IP Leakage (Metasploit)
  122. [webapps] GetSimple CMS 3.3.13 - Cross-Site Scripting
  123. [local] Sophos Endpoint Protection 10.7 - Tamper-Protection Bypass
  124. [local] Sophos Endpoint Protection Control Panel 10.7 - Weak Password Encryption
  125. [remote] LineageOS 14.1 Blueborne - RCE
  126. [webapps] DotNetNuke DNNarticle Module 11 - Directory Traversal
  127. [webapps] FiberHome VDSL2 Modem HG 150-UB - Authentication Bypass
  128. [webapps] Cobub Razor 0.7.2 - Cross Site Request Forgery
  129. [webapps] Flowise 1.6.5 - Authentication Bypass
  130. [webapps] Laravel Framework 11 - Credential Leakage
  131. [webapps] SofaWiki 3.9.2 - Remote Command Execution (RCE) (Authenticated)
  132. [webapps] Wordpress Plugin Background Image Cropper v1.2 - Remote Code Execution
  133. [webapps] FlatPress v1.3 - Remote Command Execution
  134. [remote] Palo Alto PAN-OS < v11.1.2-h3 - Command Injection and Arbitrary File Creat
  135. [webapps] OpenClinic GA 5.247.01 - Path Traversal (Authenticated)
  136. [webapps] OpenClinic GA 5.247.01 - Information Disclosure
  137. [webapps] Jenkins 2.441 - Local File Inclusion
  138. [webapps] djangorestframework-simplejwt 5.3.1 - Information Disclosure
  139. [webapps] BMC Compuware iStrobe Web - 20.13 - Pre-auth RCE
  140. [webapps] Stock Management System v1.0 - Unauthenticated SQL Injection
  141. [webapps] Online Fire Reporting System OFRS - SQL Injection Authentication Bypass
  142. [webapps] Savsoft Quiz v6.0 Enterprise - Stored XSS
  143. [webapps] Wordpress Plugin WP Video Playlist 1.1.1 - Stored Cross-Site Scripting (XSS
  144. [webapps] WBCE CMS Version 1.6.1 - Remote Command Execution (Authenticated)
  145. [webapps] WBCE 1.6.0 - Unauthenticated SQL injection
  146. [webapps] Moodle 3.10.1 - Authenticated Blind Time-Based SQL Injection - "sort" param
  147. [local] PrusaSlicer 2.6.1 - Arbitrary code execution
  148. [webapps] PopojiCMS Version 2.0.1 - Remote Command Execution
  149. [webapps] Wordpress Plugin Playlist for Youtube 1.32 - Stored Cross-Site Scripting (X
  150. [webapps] HTMLy Version v2.9.6 - Stored XSS
  151. [webapps] Ray OS v2.6.3 - Command Injection RCE(Unauthorized)
  152. [local] Terratec dmx_6fire USB - Unquoted Service Path
  153. [remote] MinIO < 2024-01-31T20-20-33Z - Privilege Escalation
  154. [webapps] GUnet OpenEclass E-learning platform 3.15 - 'certbadge.php' Unrestricted Fi
  155. [webapps] Open Source Medicine Ordering System v1.0 - SQLi
  156. [webapps] Daily Expense Manager 1.0 - 'term' SQLi
  157. [webapps] Best Student Result Management System v1.0 - Multiple SQLi
  158. [webapps] Human Resource Management System v1.0 - Multiple SQLi
  159. [remote] Positron Broadcast Signal Processor TRA7005 v1.20 - Authentication Bypass
  160. [webapps] Wordpress Theme Travelscape v1.0.3 - Arbitrary File Upload
  161. [local] AnyDesk 7.0.15 - Unquoted Service Path
  162. [webapps] Wordpress Plugin Alemha Watermarker 1.3.1 - Stored Cross-Site Scripting (XS
  163. [webapps] Computer Laboratory Management System v1.0 - Multiple-SQLi
  164. [local] ESET NOD32 Antivirus 17.0.16.0 - Unquoted Service Path
  165. [webapps] Axigen < 10.5.7 - Persistent Cross-Site Scripting
  166. [webapps] Gibbon LMS v26.0.00 - SSTI vulnerability
  167. [webapps] Casdoor < v1.331.0 - '/api/set-password' CSRF
  168. [local] Microsoft Windows Defender - Detection Mitigation Bypass TrojanWin32Powessere
  169. [webapps] Wordpress Plugin - Membership For WooCommerce < v2.1.7 - Arbitrary File Upl
  170. [webapps] Smart School 6.4.1 - SQL Injection
  171. [webapps] CE Phoenix v1.0.8.20 - Remote Code Execution
  172. [webapps] Elementor Website Builder < 3.12.2 - Admin+ SQLi
  173. [webapps] Blood Bank v1.0 - Stored Cross Site Scripting (XSS)
  174. [webapps] Daily Habit Tracker 1.0 - Broken Access Control
  175. [webapps] Daily Habit Tracker 1.0 - SQL Injection
  176. [webapps] Daily Habit Tracker 1.0 - Stored Cross-Site Scripting (XSS)
  177. [webapps] Employee Management System 1.0 - `txtusername` and `txtpassword` SQL Inject
  178. [webapps] Employee Management System 1.0 - `txtfullname` and `txtphone` SQL Injection
  179. [webapps] Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link - Device Config Disclos
  180. [webapps] Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link - Authentication Bypass
  181. [webapps] Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 - Device Config Discl
  182. [webapps] Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 - Authentication Bypa
  183. [webapps] Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 - Device Config Disclosu
  184. [webapps] Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 - Authentication Bypass
  185. [webapps] iboss Secure Web Gateway - Stored Cross-Site Scripting (XSS)
  186. [webapps] Clinic Queuing System 1.0 - RCE
  187. [local] Plantronics Hub 3.25.1 - Arbitrary File Read
  188. [webapps] Apache mod_proxy_cluster - Stored XSS
  189. [webapps] Prison Management System - SQL Injection Authentication Bypass
  190. [webapps] PyroCMS v3.0.1 - Stored XSS
  191. [webapps] CE Phoenix Version 1.0.8.20 - Stored XSS
  192. [webapps] Leafpub 1.1.9 - Stored Cross-Site Scripting (XSS)
  193. [webapps] Chyrp 2.5.2 - Stored Cross-Site Scripting (XSS)
  194. [remote] CrushFTP < 11.1.0 - Directory Traversal
  195. [webapps] htmlLawed 1.2.5 - Remote Code Execution (RCE)
  196. [webapps] PopojiCMS 2.0.1 - Remote Command Execution (RCE)
  197. [webapps] Backdrop CMS 1.27.1 - Remote Command Execution (RCE)
  198. [webapps] Apache OFBiz 18.12.12 - Directory Traversal
  199. [webapps] Wordpress Theme XStore 9.3.8 - SQLi
  200. [webapps] Rocket LMS 1.9 - Persistent Cross Site Scripting (XSS)
  201. [webapps] Aquatronica Control System 5.1.6 - Information Disclosure
  202. [webapps] changedetection < 0.45.20 - Remote Code Execution (RCE)
  203. [webapps] ElkArte Forum 1.1.9 - Remote Code Execution (RCE) (Authenticated)
  204. [webapps] iMLog < 1.307 - Persistent Cross Site Scripting (XSS)
  205. [webapps] BWL Advanced FAQ Manager 2.0.3 - Authenticated SQL Injection
  206. [webapps] Check Point Security Gateway - Information Disclosure (Unauthenticated)
  207. [remote] ASUS ASMB8 iKVM 1.14.51 - Remote Code Execution (RCE) & SSH Access
  208. [remote] Wipro Holmes Orchestrator 20.4.1 - Log File Disclosure
  209. [webapps] FreePBX 16 - Remote Code Execution (RCE) (Authenticated)
  210. [webapps] Akaunting 3.1.8 - Server-Side Template Injection (SSTI)
  211. [webapps] Craft CMS Logs Plugin 3.0.3 - Path Traversal (Authenticated)
  212. [webapps] Serendipity 2.5.0 - Remote Code Execution (RCE)
  213. [webapps] Sitefinity 15.0 - Cross-Site Scripting (XSS)
  214. [webapps] appRain CMF 4.0.5 - Remote Code Execution (RCE) (Authenticated)
  215. [webapps] CMSimple 5.15 - Remote Code Execution (RCE) (Authenticated)
  216. [webapps] WBCE CMS v1.6.2 - Remote Code Execution (RCE)
  217. [webapps] Monstra CMS 3.0.4 - Remote Code Execution (RCE)
  218. [webapps] Dotclear 2.29 - Remote Code Execution (RCE)
  219. [webapps] Boelter Blue System Management 1.3 - SQL Injection
  220. [webapps] Rebar3 3.13.2 - Command Injection
  221. [webapps] ZwiiCMS 12.2.04 - Remote Code Execution (Authenticated)
  222. [remote] Zyxel IKE Packet Decoder - Unauthenticated Remote Code Execution (Metasploit
  223. [webapps] WP-UserOnline 2.88.0 - Stored Cross Site Scripting (XSS) (Authenticated)
  224. [webapps] PHP < 8.3.8 - Remote Code Execution (Unauthenticated) (Windows)
  225. [webapps] AEGON LIFE v1.0 Life Insurance Management System - SQL injection vulnerabil
  226. [webapps] AEGON LIFE v1.0 Life Insurance Management System - Unauthenticated Remote C
  227. [webapps] XMB 1.9.12.06 - Stored XSS
  228. [webapps] Carbon Forum 5.9.0 - Stored XSS
  229. [webapps] AEGON LIFE v1.0 Life Insurance Management System - Stored cross-site script
  230. [webapps] Automad 2.0.0-alpha.4 - Stored Cross-Site Scripting (XSS)
  231. [webapps] SolarWinds Platform 2024.1 SR1 - Race Condition
  232. [webapps] Flatboard 3.2 - Stored Cross-Site Scripting (XSS) (Authenticated)
  233. [webapps] Poultry Farm Management System v1.0 - Remote Code Execution (RCE)
  234. [webapps] Xhibiter NFT Marketplace 1.10.2 - SQL Injection
  235. [webapps] Azon Dominator Affiliate Marketing Script - SQL Injection
  236. [webapps] Microweber 2.0.15 - Stored XSS
  237. [webapps] Customer Support System 1.0 - Stored XSS
  238. [local] Bonjour Service 'mDNSResponder.exe' - Unquoted Service Path Privilege Escalat
  239. [webapps] Devika v1 - Path Traversal via 'snapshot_path'
  240. [local] Genexus Protection Server 9.7.2.10 - 'protsrvservice' Unquoted Service Path
  241. [local] SolarWinds Kiwi Syslog Server 9.6.7.1 - Unquoted Service Path
  242. [local] Oracle Database 12c Release 1 - Unquoted Service Path
  243. [webapps] Ivanti vADC 9.9 - Authentication Bypass
  244. [webapps] Helpdeskz v2.0.2 - Stored XSS
  245. [webapps] Calibre-web 0.6.21 - Stored XSS
  246. [webapps] HughesNet HT2000W Satellite Modem - Password Reset
  247. [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Device Config Disclosure
  248. [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
  249. [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
  250. [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass