Bitcoin Core Wallet version 0.14.2 proof of concept crash exploit discovered while fuzzing.
38651d8c18a430e9febe00800a5f7136Apache Struts 2.3.x Showcase remote code execution proof of concept exploit.
b127e7bfe5e4cb4867bb2f3d6c8b1d64FreeBSD setrlimit stack clash proof of concept exploit.
6eba2939821ab24edba2b623a0df6a80FreeBSD FGPE stack clash proof of concept exploit.
a5bf5e251c7b1182eb8d9d86a7cba5ecFreeBSD FGPU stack clash proof of concept exploit.
4df3d0a41e548c26a0c180b85a467afbNetBSD stack clash proof of concept exploit.
f78861cc6c2ae85e792c15a03ab7d4a6This proof of concept code shows how manager functionality can be abused in ModX CMS to upload a shell.
4a9e82ae99c6a9dbf9554d110145a1a4This proof of concept code shows how administrator functionality can be abused in Joomla to upload a shell.
5342f1f41088abee2af959b87cbce235This proof of concept code shows how administrative functionality can be abused in DokuWiki to upload a shell.
729d40f68a98bc4c5c3dc2afec215396This proof of concept code shows how functionality can be abused in Concrete5 to upload a shell.
9745e0705ed0168941e97981a8f2ab5bOpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to execute arbitrary code with super-user privileges by leveraging the availability of the dm_bp_transition docbase method with a user-created dm_procedure object, as demonstrated by use of a backspace character in an injected string. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2513. This code is a proof of concept exploit.
ed0b1a8a36df7ddba8be8a3ed4dee545OpenText Documentum Content Server suffers from a privilege evaluation issue using crafted RPC save commands. Two proof of concepts included.
26b6a71c9dc0176316872546a0152528Microsoft RTF CVE-2017-0199 proof of concept exploit.
11916c46b31efd35dcb2b963e50c23caThis article documents practical exploitation of CVE-2017-0199 and includes a proof of concept.
b03e34017c4b989f9ac59f7b459a5cfeMicrosoft Word RTF remote code execution proof of concept exploit.
f937dc70e4f902d07449912a173ea332Easy MOV Converter version 1.4.24 Enter User Name field SEH overwrite proof of concept denial of service exploit.
9f56ccd31bb6f69142c7f6a5f7db7227Struts S2-045 remote command execution proof of concept exploit.
de49204b909920bd9a5ae5c2b8b75d1eSimple PHP proof of concept exploit that demonstrates username enumeration in WordPress versions prior to 4.7.1.
c466685d3f06c12ee2ebd82a5c061d89Linux kernel version 4.4.0 (Ubuntu) DCCP double-free crash denial of service proof of concept exploit.
64869a56d09161f6df97f86638c06fe9Oracle VM VirtualBox version 5.1.10 local export mode crash proof of concept exploit.
0b0cc9224e0a5f2250eb012ca48c0b4cProof of concept code demonstrating a WebGL integer overflow from 2012 in Mozilla Firefox versions prior to 17 and ESR 10.x versions before 10.0.11.
ed7e400f7ce8dcc1757df75b4c06bd6dWordPress versions 4.7.0 and 4.7.1 proof of concept code injection exploit.
c22675ffde6a30a912936b70eaa3cde3WordPress wp-json API content injection exploit proof of concept.
fa42f8c002a21ad5018cfc312ecd960fWordPress versions 4.7.0 and 4.7.1 unauthenticated content injection proof of concept exploit.
03139864fb5787e9961aca601390dcc2Microsoft Windows 10 SMBv3 tree connect proof of concept exploit.
9c6a3b717fefb0568bc92f9e4261b766
© 2016 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed