CVE-2016-20000 to CVE-2016-20999

79 CVEs with public proof-of-concept exploits.

• CVE-2016-200091 PoCA DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only…
• CVE-2016-200123 PoCsOpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH…
• CVE-2016-200162 PoCsMVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE, contain a web shell that is accessible via a /shell URI. A…
• CVE-2016-200172 PoCsKEVD-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the…
• CVE-2016-200181 PoCKnex Knex.js through 2.3.0 has a limited SQL injection vulnerability that can be exploited to ignore the WHERE clause of a SQL query.
• CVE-2016-200242 PoCsZKTeco ZKTime.Net 3.0.1.6 Insecure File Permissions Privilege Escalation
• CVE-2016-200252 PoCsZKTeco ZKAccess Professional 3.5.3 Privilege Escalation via Insecure Permissions
• CVE-2016-200262 PoCsZKTeco ZKBioSecurity 3.0 Hardcoded Credentials Remote Code Execution
• CVE-2016-200271 PoCZKTeco ZKBioSecurity 3.0 Multiple Reflected XSS Vulnerabilities
• CVE-2016-200282 PoCsZKTeco ZKBioSecurity 3.0 Cross-Site Request Forgery Superadmin
• CVE-2016-200292 PoCsZKTeco ZKBioSecurity 3.0 File Path Manipulation Vulnerability
• CVE-2016-200301 PoCZKTeco ZKBioSecurity 3.0 User Enumeration via authLoginAction
• CVE-2016-200312 PoCsZKTeco ZKBioSecurity 3.0 Local Authorization Bypass via visLogin.jsp
• CVE-2016-200322 PoCsZKTeco ZKAccess Security System 5.3.1 Stored XSS
• CVE-2016-200331 PoCWowza Streaming Engine 4.5.0 Local Privilege Escalation via nssm_x64.exe
• CVE-2016-200341 PoCWowza Streaming Engine 4.5.0 Privilege Escalation via user edit
• CVE-2016-200351 PoCWowza Streaming Engine 4.5.0 CSRF via user edit endpoint
• CVE-2016-200361 PoCWowza Streaming Engine 4.5.0 Multiple Cross-Site Scripting Vulnerabilities
• CVE-2016-200371 PoCxwpe 1.5.30a-2.1 Stack-based Buffer Overflow
• CVE-2016-200381 PoCyTree 1.94-1.1 Stack-Based Buffer Overflow
• CVE-2016-200391 PoCMulti Emulator Super System 0.154-3.1 Buffer Overflow
• CVE-2016-200401 PoCTiEmu 3.03-nogdb+dfsg-3 Buffer Overflow via ROM Parameter
• CVE-2016-200411 PoCYasr 0.6.9-5 Buffer Overflow via Command-line Parameter
• CVE-2016-200421 PoCTRN 3.6-23 Stack Buffer Overflow Local Code Execution
• CVE-2016-200431 PoCNRSS RSS Reader 0.3.9-1 Stack Buffer Overflow
• CVE-2016-200441 PoCPInfo 0.6.9-5.1 Local Buffer Overflow via -m Parameter
• CVE-2016-200451 PoCHNB Organizer 1.9.18-10 Local Buffer Overflow via -rc Parameter
• CVE-2016-200461 PoCzFTP Client 20061220+dfsg3-4.1 Local Buffer Overflow
• CVE-2016-200471 PoCEKG Gadu 1.9 Local Buffer Overflow via Username Parameter
• CVE-2016-200481 PoCiSelect 1.4.0-2+b1 Local Buffer Overflow via key parameter
• CVE-2016-200491 PoCJAD 1.5.8e-1kali1 Stack-Based Buffer Overflow Remote Code Execution
• CVE-2016-200501 PoCNetSchedScan 1.0 Buffer Overflow Denial of Service
• CVE-2016-200511 PoCSnews CMS 1.7 Cross-Site Request Forgery via changeup
• CVE-2016-200521 PoCSnews CMS 1.7 Unrestricted File Upload via snews_files
• CVE-2016-200531 PoCRedaxo CMS 5.2 Cross-Site Request Forgery via users endpoint
• CVE-2016-200541 PoCNodcms Cross Site Request Forgery via admin endpoints
• CVE-2016-200551 PoCIObit Advanced SystemCare 10.0.2 Unquoted Service Path Privilege Escalation
• CVE-2016-200561 PoCSpy Emergency build 23.0.205 Unquoted Service Path Privilege Escalation
• CVE-2016-200571 PoCNETGATE Registry Cleaner build 16.0.205 Unquoted Service Path Privilege Escalation
• CVE-2016-200581 PoCNetgate AMITI Antivirus build 23.0.305 Unquoted Service Path Privilege Escalation
• CVE-2016-200591 PoCIObit Malware Fighter 4.3.1 Unquoted Service Path Privilege Escalation
• CVE-2016-200601 PoCHotspot Shield 6.0.3 Unquoted Service Path Privilege Escalation
• CVE-2016-200611 PoCsheed AntiVirus 2.3 Unquoted Service Path Privilege Escalation
• CVE-2016-200621 PoCSimply Poll 1.4.1 Plugin for WordPress SQL Injection
• CVE-2016-200631 PoCSingle Personal Message 1.0.3 WordPress Plugin SQL Injection
• CVE-2016-200641 PoCWP Vault 0.8.6.6 Local File Inclusion via wpv-image Parameter
• CVE-2016-200651 PoCProduct Catalog 8 1.2 Plugin WordPress SQL Injection
• CVE-2016-200661 PoCWordPress CP Polls 1.0.8 Persistent Cross-Site Scripting
• CVE-2016-200671 PoCWordPress CP Polls 1.0.8 Cross-Site Request Forgery
• CVE-2016-200681 PoCWordPress Booking Calendar Contact Form 1.0.23 SQL Injection
• CVE-2016-200691 PoCWordPress Booking Calendar Contact Form 1.0.23 SQL Injection
• CVE-2016-200701 PoCWordPress Booking Calendar Contact Form 1.0.23 Privilege Escalation Stored XSS
• CVE-2016-200711 PoCWordPress 404 Redirection Manager Plugin 1.0 SQL Injection
• CVE-2016-200721 PoCBBS e-Franchise 1.1.1 WordPress Plugin SQL Injection via uid
• CVE-2016-200731 PoCAnswer My Question 1.3 Plugin WordPress SQL Injection via modal.php
• CVE-2016-200741 PoCWordPress Lazy Content Slider Plugin 3.4 CSRF
• CVE-2016-200751 PoCWordPress Ultimate Product Catalog 3.8.6 Arbitrary File Upload RCE
• CVE-2016-200761 PoCWordPress Simple-Backup 2.7.11 Arbitrary File Deletion and Download
• CVE-2016-200771 PoCWordPress Plugin Photocart Link 1.6 Local File Inclusion via decode.php
• CVE-2016-200781 PoCWordPress IMDb Profile Widget 1.0.8 Local File Inclusion via pic.php
• CVE-2016-200791 PoCWordPress Dharma Booking 2.28.3 Local File Inclusion via proccess.php
• CVE-2016-200801 PoCWordPress Brandfolder Plugin 3.0 Local File Inclusion via callback.php
• CVE-2016-200811 PoCWordPress Plugin HB Audio Gallery Lite 1.0.0 Path Traversal File Download
• CVE-2016-200821 PoCWordPress Plugin Abtest Local File Inclusion via abtest_admin.php
• CVE-2016-200831 PoCWordPress More Fields Plugin 2.1 Cross-Site Request Forgery
• CVE-2016-200841 PoCWordPress appointment-booking-calendar 1.1.24 Privilege Escalation XSS
• CVE-2016-200851 PoCRealtek High Definition Audio Driver 6.0.1.6730 Privilege Escalation
• CVE-2016-200861 PoCVembu StoreGrid 4.0 Unquoted Service Path Privilege Escalation
• CVE-2016-200871 PoCFortitude HTTP 1.0.4.0 Unquoted Service Path Elevation of Privilege
• CVE-2016-200881 PoCComodo Chromodo Browser 52.15.25.664 Unquoted Service Path Privilege Escalation
• CVE-2016-200891 PoCIperius Remote 1.7.0 Unquoted Service Path Elevation of Privilege
• CVE-2016-200901 PoCComodo Dragon Browser 52.15.25.663 Privilege Escalation via Unquoted Service Path
• CVE-2016-200911 PoCWindows Firewall Control 4.8.6.0 Unquoted Service Path Privilege Escalation
• CVE-2016-200921 PoCNetDrive 2.6.12 Unquoted Service Path Elevation of Privilege
• CVE-2016-200931 PoCWise Care 365 4.27 and Wise Disk Cleaner 9.29 Unquoted Service Path Privilege Escalation
• CVE-2016-200941 PoCAnyDesk 2.5.0 Unquoted Service Path Elevation of Privilege
• CVE-2016-200951 PoCMatrix42 Remote Control Host 3.20.0031 Unquoted Path Privilege Escalation
• CVE-2016-200962 PoCsLinknat VOS3000/VOS2009 2.1.2.0 SQL Injection via login.jsp
• CVE-2016-200971 PoCWeaver E-cology 8.0 SQL Injection File Read via SignatureDownLoad