0day.today - أكبر قاعدة بيانات للثغرات في العالم.
Things you should know about it:
We use one main domain DOMAIN_LINK
If you want to purchase the exploit or pay for service, you need to buy Gold. We don't want you to use our site as a tool for hacking purposes, so any kind of action that could affect illegaly other users or websites that you don't have right to access will be banned and your account including your data will be destroyed.
Administration of this site uses the official contacts. Beware of impostors!
We use one main domain DOMAIN_LINK
If you want to purchase the exploit or pay for service, you need to buy Gold. We don't want you to use our site as a tool for hacking purposes, so any kind of action that could affect illegaly other users or websites that you don't have right to access will be banned and your account including your data will be destroyed.
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!
Please, beware of scammers!
Please, beware of scammers!
- Read the [ agreement ]
- Read the [ أرسل ] rules
- Visit the [ الأسئلة الشائعة ] page
- [ Register ] profile
- Get [ الذهب ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ [email protected] ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
يمكنكم الاتصال بنا من خلال:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
[ local exploits ]
Local exploits and vulnerabilities category
A "local exploit" requires prior access to the vulnerable system and usually increases the privileges of the person running the exploit past those granted by the system administrator. Exploits against client applications also exist, usually consisting of modified servers that send an exploit if accessed with client application.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
Google Software Updater macOS - Unsafe use of Distributed Objects Privilege Escalation Exploit
التعليقات:
0
4 029
Security Risk High
D
Download
C
CVE-2018-6084
Verified by
مجاني
You can open this exploit for free
Google Security Research
الثغرات:
1019
BusinessLevel:
56
Microsoft Windows - Desktop Bridge Virtual Registry NtLoadKey Arbitrary File Read/Write Privilege Es
التعليقات:
0
3 327
Security Risk High
D
Download
C
CVE-2018-0882
Verified by
مجاني
You can open this exploit for free
Google Security Research
الثغرات:
1019
BusinessLevel:
56
Microsoft Windows - Desktop Bridge Virtual Registry Arbitrary File Read/Write Privilege Escalation E
التعليقات:
0
3 244
Security Risk High
D
Download
C
CVE-2018-0880
Verified by
مجاني
You can open this exploit for free
Google Security Research
الثغرات:
1019
BusinessLevel:
56
3 355
Security Risk High
D
Download
C
CVE-2018-0877
Verified by
مجاني
You can open this exploit for free
Google Security Research
الثغرات:
1019
BusinessLevel:
56
2 952
Security Risk High
D
Download
C
CVE-2015-8088
Verified by
مجاني
You can open this exploit for free
pray3r
الثغرات:
1
BusinessLevel:
3
5 285
Security Risk High
D
Download
C
CVE-2017-16994
Verified by
مجاني
You can open this exploit for free
anonymous
الثغرات:
25
BusinessLevel:
8
4 661
Security Risk High
D
Download
C
CVE-2017-7533
Verified by
مجاني
You can open this exploit for free
Jeremy Huang
الثغرات:
1
BusinessLevel:
3
IBM Spectrum LSF Privilege Escalation Vulnerability
التعليقات:
0
4 229
Security Risk High
D
Download
C
CVE-2017-1205
Verified by
مجاني
You can open this exploit for free
John Fitzpatrick
الثغرات:
6
BusinessLevel:
5
[ web applications ]
Webapplication (webapps) exploits and vulnerabilities category
This category is full with vulnerabilities, which was found in web projects and web applications.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
3 591
Security Risk High
D
Download
C
CVE-2017-10004
Verified by
مجاني
You can open this exploit for free
Sing
الثغرات:
1
BusinessLevel:
3
2 989
Security Risk Medium
D
Download
-
Verified by
مجاني
You can open this exploit for free
anhax0r
الثغرات:
1
BusinessLevel:
3
Cisco node-jos < 0.11.0 - Re-sign Tokens Exploit
التعليقات:
0
3 048
Security Risk High
D
Download
C
CVE-2018-0114
Verified by
مجاني
You can open this exploit for free
zioBlack
الثغرات:
1
BusinessLevel:
3
3 358
Security Risk Medium
D
Download
C
CVE-2018-7422
Verified by
مجاني
You can open this exploit for free
Nicolas Buzy-Debat
الثغرات:
6
BusinessLevel:
4
Grav CMS 1.2.4 Cross Site Scripting Vulnerability
التعليقات:
0
3 041
Security Risk Medium
D
Download
C
CVE-2018-5233
Verified by
مجاني
You can open this exploit for free
Kevin Locati
الثغرات:
1
BusinessLevel:
3
[ dos / poc ]
DOS exploits and vulnerabilities category
PoC DoS (denial of service exploit) it exploits remote steps to check the resistance on the affected server or software denial of service vulnerability. The purpose of these attacks is to check the server or the software for resistance.
PoC (Proof Of Concept exploit) An attack against a computer or network that is performed only to prove that it can be done. It generally does not cause any harm, but shows how a hacker can take advantage of a vulnerability in the software or possibly the hardware.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
3 139
Security Risk Medium
D
Download
C
CVE-2018-0891
Verified by
مجاني
You can open this exploit for free
Google Security Research
الثغرات:
1019
BusinessLevel:
56
Microsoft Windows Kernel - nt!NtWaitForDebugEvent 64-bit Stack Memory Disclosure Exploit
التعليقات:
0
3 313
Security Risk Medium
D
Download
C
CVE-2018-0901
Verified by
مجاني
You can open this exploit for free
Google Security Research
الثغرات:
1019
BusinessLevel:
56
Microsoft Windows Kernel - nt!KiDispatchException 64-bit Stack Memory Disclosure Exploit
التعليقات:
0
3 296
Security Risk Medium
D
Download
C
CVE-2018-0897
Verified by
مجاني
You can open this exploit for free
Google Security Research
الثغرات:
1019
BusinessLevel:
56
Microsoft Windows Kernel - NtQueryInformationThread(ThreadBasicInformation) 64-bit Stack Memory Disc
التعليقات:
0
3 306
Security Risk Medium
D
Download
C
CVE-2018-0895
Verified by
مجاني
You can open this exploit for free
Google Security Research
الثغرات:
1019
BusinessLevel:
56
Microsoft Windows Kernel - NtQueryVirtualMemory(MemoryMappedFilenameInformation) 64-bit Pool Memory
التعليقات:
0
3 312
Security Risk Medium
D
Download
C
CVE-2018-0894
Verified by
مجاني
You can open this exploit for free
Google Security Research
الثغرات:
1019
BusinessLevel:
56
3 035
Security Risk Medium
D
Download
-
Verified by
مجاني
You can open this exploit for free
EnableSecurity
الثغرات:
1
BusinessLevel:
10
4 462
Security Risk Medium
D
Download
C
CVE-2017-10004
Verified by
مجاني
You can open this exploit for free
anonymous
الثغرات:
25
BusinessLevel:
8
4 213
Security Risk Medium
D
Download
C
CVE-2017-16994
Verified by
مجاني
You can open this exploit for free
anonymous
الثغرات:
25
BusinessLevel:
8
Linux Kernel < 4.5.1 - Off-By-One (PoC) Exploit
التعليقات:
0
3 633
Security Risk Medium
D
Download
C
CVE-2016-6187
Verified by
مجاني
You can open this exploit for free
Vitaly Nikolenko
الثغرات:
6
BusinessLevel:
5
Dell EMC NetWorker Buffer Overflow Vulnerability
التعليقات:
0
3 247
Security Risk High
D
Download
C
CVE-2018-1218
Verified by
مجاني
You can open this exploit for free
Marek Cybul
الثغرات:
3
BusinessLevel:
3
[ shellcode ]
Shellcode category
In computer security, a shellcode is a small piece of code used as the payload in the exploitation of a software vulnerability. It is called "shellcode" because it typically starts a command shell from which the attacker can control the compromised machine, but any piece of code that performs a similar task can be called shellcode. Because the function of a payload is not limited to merely spawning a shell, some have suggested that the name shellcode is insufficient. Shellcode is commonly written in machine code.
Classification:
There are several methods of classifying exploits. The most common is by how the exploit contacts the vulnerable software. A remote exploit works over a network and exploits the security vulnerability without any prior access to the vulnerable system. A local exploit requires prior access to the vulnerable system and usually increases the privileges of the person running the exploit past those granted by the system administrator. Exploits against client applications also exist, usually consisting of modified servers that send an exploit if accessed with a client application. Exploits against client applications may also require some interaction with the user and thus may be used in combination with the social engineering method. Another classification is by the action against the vulnerable system; unauthorized data access, arbitrary code execution, and denial of service are examples. Many exploits are designed to provide superuser-level access to a computer system. However, it is also possible to use several exploits, first to gain low-level access, then to escalate privileges repeatedly until one reaches root. Normally a single exploit can only take advantage of a specific software vulnerability. Often, when an exploit is published, the vulnerability is fixed through a patch and the exploit becomes obsolete until newer versions of the software become available Shellcodes any types.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
Linux/x86 execve /bin/sh Shellcode (18 bytes)
التعليقات:
0
13 927
Security Risk Medium
D
Download
-
Verified by
مجاني
You can open this exploit for free
Anurag Srivastava
الثغرات:
22
BusinessLevel:
4
Linux/x86 exit(0) Shellcode (5 bytes)
التعليقات:
0
13 858
Security Risk Medium
D
Download
-
Verified by
مجاني
You can open this exploit for free
Anurag Srivastava
الثغرات:
22
BusinessLevel:
4