Exploits Database by Offensive Security

This exploit category includes exploits for remote services or applications, including client side exploits.

Date	A	Title	Platform	Author
2016-01-12	-	FingerTec Fingerprint Reader - Remote Access and Remote Enrollment	hardware	Daniel Lawson
2016-01-12	-	FortiGate OS Version 4.x - 5.0.7 - SSH Backdoor	hardware	operator8203
2016-01-11	-	TrendMicro node.js HTTP Server Listening on localhost Can Execute Commands	windows	Google Securit.
2016-01-04		Rejetto HTTP File Server (HFS) 2.3.x - Remote Command Execution	windows	Avinash Thapa
2015-12-29		KiTTY Portable <= 0.65.0.2p Chat Remote Buffer Overflow (SEH WinXP/Win7/Win10)	windows	Guillaume Kadd.
2015-12-16		Easy File Sharing Web Server 7.2 - GET HTTP Request SEH Buffer Overflow	windows	ArminCyber
2015-12-16		Easy File Sharing Web Server 7.2 - HEAD HTTP Request SEH Buffer Overflow	windows	ArminCyber

Web Application Exploits

This exploit category includes exploits for web applications.

Date	A	Title	Platform	Author
2016-01-08		WP Symposium Pro Social Network Plugin 15.12 - Multiple Vulnerabilities	php	Rahul Pratap S.
2016-01-07	-	D-Link DCS-931L File Upload	hardware	metasploit
2016-01-07	-	OpenMRS Reporting Module 0.9.7 - Remote Code Execution	java	Brian D. Hysel.
2016-01-07	-	AVM FRITZ!Box < 6.30 - Buffer Overflow	hardware	RedTeam Pentes.
2016-01-02	-	Open Audit SQL Injection Vulnerability	php	Rahul Pratap S.
2016-01-06	-	MediaAccess TG788vn - Unauthenticated File Disclosure	hardware	0x4148
2016-01-05		Online Airline Booking System - Multiple Vulnerabilities	php	Manish Tanwar

This exploit category includes local exploits or privilege escalation exploits.

Date	A	Title	Platform	Author
2016-01-12	-	Linux Kernel overlayfs - Local Privilege Escalation	linux	halfdog
2016-01-11		Amanda <= 3.3.1 - Local Root Exploit	linux	Hacker Fantast.
2016-01-05	-	Ubuntu 14.04 LTS, 15.10 overlayfs - Local Root Exploit	linux	rebel
2016-01-04		FTPShell Client 5.24 - Add to Favorites Buffer Overflow	windows	INSECT.B
2015-12-29		KiTTY Portable <= 0.65.1.1p Local Saved Session Overflow (Egghunter XP, DoS 7/8.1/10)	windows	Guillaume Kadd.
2015-12-29		KiTTY Portable <= 0.65.0.2p Local kitty.ini Overflow (Wow64 Egghunter Win7)	windows	Guillaume Kadd.
2015-12-29		KiTTY Portable <= 0.65.0.2p Local kitty.ini Overflow (Win8.1/Win10)	windows	Guillaume Kadd.

This exploit category includes proof of concept code or code that results in a denial of service or application crash.

Date	A	Title	Platform	Author
2016-01-12	-	Apple watchOS 2 - Crash PoC	hardware	Mohammad Reza .
2016-01-12	-	Grassroots DICOM (GDCM) 2.6.0 and 2.6.1 - ImageRegionReader::ReadIntoBuffer Buffer Overflow	linux	Stelios Tsampa.
2016-01-11		KeePass Password Safe Classic 1.29 - Crash PoC	windows	Mohammad Reza .
2016-01-11	-	Adobe Flash BlurFilter Processing - Out-of-Bounds Memset	multiple	Google Securit.
2016-01-11	-	Adobe Flash - Use-After-Free When Rendering Displays From Multiple Scripts	windows	Google Securit.
2016-01-11	-	Adobe Flash - Use-After-Free When Setting Stage	win64	Google Securit.
2016-01-05	-	Ganeti - Multiple Vulnerabilities	multiple	Pierre Kim

This category includes archived shellcode.

Date	Title	Platform	Author
2016-01-04	Linux/x86 execve "/bin/sh" - shellcode 24 byte	lin_x86	Dennis 'dhn' H.
2016-01-08	x86_64 Linux Egghunter - 18 bytes	lin_x86-64	Sathish kumar
2016-01-08	Linux x86 - Egg-hunter (13 bytes)	lin_x86	Dennis 'dhn' H.
2016-01-06	TCP Reverse Shell with Password Prompt - 151 bytes	lin_x86-64	Sathish kumar
2016-01-02	x86_64 Linux bind TCP port shellcode	lin_x86-64	Scorpion_
2016-01-02	TCP Bindshell with Password Prompt - 162 bytes	linux	Sathish kumar
2015-12-13	Windows XP-10 - Null-Free WinExec Shellcode (Python)	generator	B3mB4m

Archived security papers in all languages.

Date	Title	Author
2016-01-12	Bypassing McAfee’s Application Whitelisting for Critical Infrastructure Systems	SEC Consult
2015-12-29	[Turkish] Back To BackDoor	Exit Stars
2015-12-21	[Portuguese] Introdução a exploração de Structured Excpetion Handlers	Brenno Rodrigu.
2015-12-14	[Persian] Windows Hacking And Security Only in Physical Access	moslem haghigh.
2015-12-14	[Persian] Exposing the WiFi Password Using C and PowerShell	moslem haghigh.
2015-12-14	[Persian] Bypass PowerShell Execution Policy	moslem haghigh.
2015-12-10	[Persian] Advanced NTFS Alternate Data Stream in Windows 8 and 10	moslem haghigh.