Turkhackteam.org/net - Cyber Security Platform > Turkhackteam Under Ground > Exploitler

Sayfa : [1] 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17

1. LeapWare LeapFTP 2.7.x - Remote Buffer Overflow
2. Samba 2.2.8 - Brute Force Method Remote Command Execution
3. Microsoft Windows Media Services - 'nsiislog.dll' Remote Overflow
4. Solaris 2.6/7/8 - 'TTYPROMPT in.telnet' Remote Authentication Bypass
5. Citadel/UX BBS 6.07 - Remote Overflow
6. Cisco IOS - IPv4 Packets Denial of Service
7. Cisco IOS - 'cisco-bug-44020.c' IPv4 Packet Denial of Service
8. Microsoft Windows Server 2000 - RPC DCOM Interface Denial of Service
9. Cisco IOS - using hping Remote Denial of Service
10. miniSQL (mSQL) 1.3 - GID Remote Code Execution
11. Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal
12. rConfig 3.9.4 - 'searchField' Unauthenticated Root Remote Code Execution
13. Odin Secure FTP Expert 7.6.3 - 'Site Info' Denial of Service (PoC)
14. Joomla! com_fabrik 3.9.11 - Directory Traversal
15. 10-Strike Network Inventory Explorer 9.03 - 'Read from File' Buffer Overflow (SEH)(ROP)
16. FlashFXP 4.2.0 Build 1730 - Denial of Service (PoC)
17. Multiple DrayTek Products - Pre-authentication Remote Root Code Execution
18. Zen Load Balancer 3.10.1 - Remote Code Execution
19. Pandora FMS 7.0NG - 'net_tools.php' Remote Code Execution
20. AIDA64 Engineer 6.20.5300 - 'Report File' filename Buffer Overflow (SEH)
21. Multiple DrayTek Products - Pre-authentication Remote Root Code Execution
22. Grandstream UCM6200 Series CTI Interface - 'user_password' SQL Injection
23. Grandstream UCM6200 Series WebSocket 1.0.20.20 - 'user_password' SQL Injection
24. Redis - Replication Code Execution (****sploit)
25. IBM TM1 / Planning Analytics - Unauthenticated Remote Code Execution (****sploit)
26. DLINK DWL-2600 - Authenticated Remote Command Injection (****sploit)
27. SharePoint Workflows - XOML Injection (****sploit)
28. DiskBoss 7.7.14 - Denial of Service (PoC)
29. 10Strike LANState 9.32 - 'Force Check' Buffer Overflow (SEH)
30. DiskBoss 7.7.14 - 'Input Directory' Local Buffer Overflow (PoC)
31. Alps HID Monitor Service 8.1.0.10 - 'ApHidMonitorService' Unquote Service Path
32. XML Notepad 2.8.0.4 - XML External Entity Injection
33. iOS IOUSBDeviceFamily 12.4.1 - 'IOInterruptEventSource' Heap Corruption (PoC
34. iMessage - Decoding NSSharedKeyDictionary can read ObjC Object at Attacker Controlled Address
35. Adobe Acrobat Reader DC for Windows - Use of Uninitialized Pointer due to Malformed JBIG2Globals Stream
36. Adobe Acrobat Reader DC for Windows - Use of Uninitialized Pointer due to Malformed OTF Font (CFF Table
37. Adrenalin Core HCM 5.4.0 - 'strAction' Reflected Cross-Site Scripting
38. Prima FlexAir Access Control 2.3.38 - Remote Code Execution
39. Adrenalin Core HCM 5.4.0 - 'prntDDLCntrlName' Reflected Cross-Site Scripting
40. Computrols CBAS-Web 19.0.0 - 'username' Reflected Cross-Site Scripting
41. VMware Fusion 11.5.2 - Privilege Escalation
42. ProficySCADA for iOS 5.0.25920 - 'Password' Denial of Service (PoC)
43. Google Chrome 80.0.3987.87 - Heap-Corruption Remote Denial of Service (PoC)
44. CyberArk PSMP 10.9.1 - Policy Restriction Bypass
45. FIBARO System Home Center 5.021 - Remote File Include
46. rConfig 3.9.4 - 'search.crud.php' Remote Command Injection
47. Joomla! com_hdwplayer 4.2 - 'search.php' SQL Injection
48. UliCMS 2020.1 - Persistent Cross-Site Scripting
49. Wordpress Plugin WPForms 1.5.9 - Persistent Cross-Site Scripting
50. Veyon 4.3.4 - 'VeyonService' Unquoted Service Path
51. UCM6202 1.0.18.13 - Remote Command Injection
52. Adive Framework 2.0.7 - Privilege Escalation
53. Android Janus - APK Signature Bypass (****sploit)
54. rConfig - install Command Execution (****sploit)
55. Nextcloud 17 - Cross-Site Request Forgery
56. _GCafé 3.0 - 'gbClienService' Unquoted Service Path
57. Alps HID Monitor Service 8.1.0.10 - 'ApHidMonitorService' Unquote Service Path
58. XML Notepad 2.8.0.4 - XML External Entity Injection
59. iOS IOUSBDeviceFamily 12.4.1 - 'IOInterruptEventSource' Heap Corruption (PoC)
60. Exagate Sysguard 6001 - Cross-Site Request Forgery (Add Admin)
61. VMware Fusion 11.5.2 - Privilege Escalation
62. Open Proficy HMI-SCADA 5.0.0.25920 - 'Password' Denial of Service (PoC)
63. Crystal Live HTTP Server 6.01 - Directory Traversal
64. MobileGo 8.5.0 - Insecure File Permissions
65. NCP_Secure_Entry_Client 9.2 - Unquoted Service Paths
66. Centova Cast 3.2.11 - Arbitrary File Download
67. TemaTres 3.0 - Cross-Site Request Forgery (Add Admin)
68. Foscam Video Management System 1.1.4.9 - 'Username' Denial of Service (PoC)
69. TemaTres 3.0 - 'value' Persistent Cross-site Scripting
70. nipper-ng 0.11.10 - Remote Buffer Overflow (PoC)
71. ipPulse 1.92 - 'Enter Key' Denial of Service (PoC)
72. Microsoft IIS 5.0 - WebDAV Remote
73. Linux Kernel 2.2.x/2.4.x (RedHat) - 'ptrace/kmod' Local Privilege Escalation
74. Sun SUNWlldap Library Hostname - Local Buffer Overflow
75. ManageEngine Desktop Central - Java Deserialization (****sploit)
76. Netlink GPON Router 1.0.11 - Remote Code Execution
77. NetBackup 7.0 - 'NetBackup INET Daemon' Unquoted Service Path
78. Microtik SSH Daemon 6.44.3 - Denial of Service (PoC)
79. Microsoft VSCode Python Extension - Code Execution
80. VMWare Fusion - Local Privilege Escalation
81. Drobo 5N2 4.1.1 - Remote Command Injection
82. Horde Groupware Webmail Edition 5.2.22 - Remote Code Execution
83. Microsoft Windows 10 (1903/1909) - 'SMBGhost' SMB3.1.1 'SMB2_COMPRESSION_CAPABILITIES' Buffer Overflow (PoC)
84. Enhanced Multimedia Router 3.0.4.27 - Cross-Site Request Forgery (Add Admin)
85. MiladWorkShop VIP System 1.0 - 'lang' SQL Injection
86. PHPKB Multi-Language 9 - Authenticated Remote Code Execution
87. PHPKB Multi-Language 9 - Authenticated Directory Traversal
88. PHPKB Multi-Language 9 - 'image-upload.php' Authenticated Remote Code Execution
89. WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure
90. Wordpress Plugin Appointment Booking Calendar 1.3.34 - CSV Injection
91. HRSALE 1.1.8 - Cross-Site Request Forgery (Add Admin)
92. ASUS AAHM 1.00.22 - 'asHmComSvc' Unquoted Service Path
93. rConfig 3.93 - 'ajaxAddTemplate.php' Authenticated Remote Code Execution
94. rConfig 3.9 - 'searchColumn' SQL Injection
95. Horde Groupware Webmail Edition 5.2.22 - PHP File Inclusion
96. Horde Groupware Webmail Edition 5.2.22 - PHAR Loading
97. Microsoft UPnP - Local Privilege Elevation (****sploit)
98. FreeBSD-SA-19:15.mqueuefs - Privilege Escalation
99. Google Chrome 72 and 73 - Array.map Out-of-Bounds Write (****sploit)
100. Google Chrome 67, 68 and 69 - Object.create Type Confusion (****sploit)

vBulletin v3.8.9, Copyright ©2006-2020, Jelsoft Enterprises Ltd.