strongSwan 5.9.13 – DoS
# Exploit Title: strongSwan 5.9.13 - DoS
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 1
CubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)
# Exploit Title: CubeCart < 6.7.0 - Reflected Cross-Site Scripting
Wing FTP Server 8.1.3 – Authenticated Remote Code Execution
# Exploit Title: Wing FTP Server 8.1.3 - Authenticated Remote Code Execution
MixPHP Framework 2.2.17 – Unsafe Deserialization Remote Code Execution
# Exploit Title: MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution
Linux Kernel – Local Privilege Escalation
# Titles:** Linux Kernel Local Privilege Escalation (CVE-2026-43284 /
ZTE H298A / H108N – Unauthenticated Credential Exposure
# Exploit Title: ZTE H298A / H108N - Unauthenticated Credential Exposure
ZTE ZXHN H188A V6 – Authentication Bypass
# Exploit Title: ZTE ZXHN H188A V6 - Authentication Bypass
ZTE Routers – Unauthenticated Denial of Service
# Exploit Title: ZTE Routers - Unauthenticated Denial of Service
ImageMagick – Infinite Loop in the MIFF decoder can lead to CPU exhaustion
# Exploit Title: ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion
Quick Playground for WordPress 1.3.1 – Unauthenticated Remote Code Execution
# Exploit Title: Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution
Langflow 1.3.0 – Remote Code Execution
# Exploit Title: Langflow 1.3.0 - Remote Code Execution
Prodigy Commerce 3.3.0 – Local File Inclusion
# Exploit Title: Prodigy Commerce 3.3.0 - Local File Inclusion
MikroORM 7.0.13 – SQL Injection
# Exploit Title: MikroORM 7.0.13 - SQL Injection
Microsoft – NTLMv2 Hash Capture
# Titles: Microsoft - NTLMv2 Hash Capture
OpenCATS 0.9.7.4 – SQL Injection
# Exploit Title: OpenCATS 0.9.7.4 - SQL Injection
Realtek rtl819x – Local Privilege
#include
MeiG Smart FORGE_SLT711 – OS Command Injection
# Exploit Title: MeiG Smart FORGE_SLT711 - OS Command Injection
scramble – Remote Code Execution
# Exploit Title: scramble - Remote Code Execution
EspoCRM 9.3.3 – SSRF
# Exploit Title: EspoCRM 9.3.3 - Authenticated SSRF via Alternative IPv4 Notation
Casdoor 3.54.1 – Arbitrary File Write via Path Traversal
# Exploit Title: Casdoor 3.54.1 - Arbitrary File Write via Path Traversal
Linux Kernel – Local Privilege Escalation
# Titles:** Linux Kernel Local Privilege Escalation (CVE-2026-43284 /
Linux Kernel 6.8 – Local Privilege Escalation
use std::{env, fs, io};
cPanel – CRLF Injection
# ExploitTitle: cPanel 11.40 - CRLF Injection
WordPress Temporary Login Plugin 1.0.0 – ‘temp-login-token’ Authentication Bypass to Account Takeover
# Exploit Title: Wordpress Temporary Login Plugin 1.0.0 - 'temp-login-token' Authentication Bypass to Account Takeover
D-Link DSL2600U – ‘rom-0’ Admin Password Disclosure
# Exploit Title: D-Link DSL2600U - 'rom-0' Admin Password Disclosure
Apache HTTP Server 2.4.66 – ‘mod_http2’ Double-Free Denial of Service
# Exploit Title: Apache HTTP Server 2.4.66 - 'mod_http2' Double-Free Denial of Service
Grav CMS 2.0.0-beta.2 – Remote Code Execution
# Exploit Title: Grav CMS < 2.0.0-beta.2 - Remote Code Execution (RCE)
FUXA 1.2.9 – RCE
# Exploit Title: FUXA 1.2.9 - RCE
solaredge – (CSRF-OOB-Injection)
# Titles: solaredge - (CSRF-OOB-Injection)
Lenovo LegionSpace 1.7.11.2 – ‘DAService’ Unquoted Service Path
# Exploit Title: Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path
BookStack 25.12.1 – Denial of Service
# Exploit Title: BookStack 25.12.1 - Denial of Service
Cockpit 359 – RCE
# Exploit Title: Cockpit 359 - RCE
Remote Sunrise Helper for Windows 2026.14 – Remote Code Execution
# Exploit Title: Remote Sunrise Helper for Windows 2026.14 -
Remote Sunrise Helper for Windows 2026.14 – Unauthenticated File/Directory Listing
#!/usr/bin/env python3
Windows Snipping Tool – NTLMv2 Hash Hijack
# Exploit Title: Windows Snipping Tool - NTLMv2 Hash Hijack
PJPROJECT 2.16 – Heap Bufferoverflow
# Exploit Title: PJPROJECT 2.16 - Heap Bufferoverflow
ePati Antikor NGFW 2.0.1301 – Authentication Bypass
# Exploit Title: ePati Antikor NGFW 2.0.1301 - Authentication Bypass
Apache HertzBeat 1.8.0 – Remote Code Execution
# Exploit Title: Apache HertzBeat 1.8.0 - Remote Code Execution
WordPress Plugin Supsystic Contact Form 1.7.36 – SSTI
# Exploit Title: WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI
Flowise < 3.0.5 - Missing Authentication for Critical Function
# Exploit Title: Flowise < 3.0.5 - Missing Authentication for Critical Function
coreruleset 4.21.0 – Firewall Bypass
# Exploit Title: coreruleset 4.21.0 - Firewall Bypass
glances 4.5.2 – command injection
#!/usr/bin/env python3
Ninja Forms Uploads – Unauthenticated PHP File Upload
# Exploit Title: Ninja Forms Uploads - Unauthenticated PHP File Upload
ThingsBoard IoT Platform 4.2.0 – Server-Side Request Forgery (SSRF)
# Exploit Title: ThingsBoard IoT Platform 4.2.0 - Server-Side Request Forgery (SSRF)
NocoBase 2.0.27 – VM Sandbox Escape
# Exploit Title: NocoBase 2.0.27 - VM Sandbox Escape
Bludit CMS 3.18.4 – RCE
# Exploit Title: Bludit CMS 3.18.4 - RCE
LuaJIT 2.1.1774638290 – Arbitrary Code Execution
-- Exploit Title: LuaJIT 2.1.1774638290 - Arbitrary Code Execution
Ghost CMS 6.19.0 – SQLi
# Exploit Title: Ghost CMS 6.19.0 - SQLi
telnetd 2.7 – Buffer Overflow
# Exploit Title: telnetd 2.7 - Buffer Overflow