SuperDoctor5 – ‘NRPE’ Remote Code Execution
# SuperMicro implemented a Remote Command Execution plugin in their implementation of
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 104
SAPIDO RB-1732 – Remote Command Execution
# Exploit Title: SAPIDO RB-1732 command line execution
Fortinet FCM-MB40 – Cross-Site Request Forgery / Remote Command Execution
# Exploit Title: FCM-MB40 Remote Command Execution as Root via CSRF
AZADMIN CMS 1.0 – SQL Injection
[+] Sql Injection on AZADMIN CMS of HIDEA v1.0
BlogEngine.NET 3.3.6/3.3.7 – ‘path’ Directory Traversal
# Exploit Title: Directory Traversal on BlogEngine.NET
WordPress Plugin iLive 1.0.4 – Cross-Site Scripting
# Exploit Title: iLive - Intelligent WordPress Live Chat Support
WordPress Plugin Live Chat Unlimited 2.8.3 – Cross-Site Scripting
# Exploit Title: Live Chat Unlimited v2.8.3 Stored XSS Injection
dotProject 2.1.9 – SQL Injection
# Exploit Title: dotProject 2.1.9 - Multiple Sql Injection (Poc)
SeedDMS versions < 5.1.11 - Remote Command Execution
# Exploit Title: [Remote Command Execution through Unvalidated File Upload in SeedDMS versions
SeedDMS < 5.1.11 - 'out.UsrMgr.php' Cross-Site Scripting
# Exploit Title: [Persistent Cross-Site Scripting or Stored XSS in out/out.UsrMgr.php in SeedDMS before 5.1.11]
SeedDMS < 5.1.11 - 'out.GroupMgr.php' Cross-Site Scripting
# Exploit Title: [Persistent Cross-Site Scripting or Stored XSS in out/out.GroupMgr.php in SeedDMS before 5.1.11]
GSearch 1.0.1.0 – Denial of Service (PoC)
# Exploit Title: GSearch v1.0.1.0 - Denial of Service (PoC)
GrandNode 4.40 – Path Traversal / Arbitrary File Download
# Exploit Title: GrandNode Path Traversal & Arbitrary File Download (Unauthenticated)
Microsoft Windows – ‘CmpAddRemoveContainerToCLFSLog’ Arbitrary File/Directory Creation
Windows: CmpAddRemoveContainerToCLFSLog Arbitrary File/Directory Creation EoP
Microsoft Windows Font Cache Service – Insecure Sections Privilege Escalation
Windows: Windows Font Cache Service Insecure Sections EoP
EA Origin < 10.5.38 - Remote Code Execution
# Exploit Title: EA Origin
Tuneclone 2.20 – Local SEH Buffer Overflow
# Exploit Title: TuneClone Local Seh Exploit
WebERP 4.15 – SQL injection
# Exploit Title: Blind SQL injection in WebERP.
BlogEngine.NET 3.3.6/3.3.7 – XML External Entity Injection
# Exploit Title: Out-of-band XML External Entity Injection on BlogEngine.NET
Linux – Use-After-Free via race Between modify_ldt() and #BR Exception
When a #BR exception is raised because of an MPX bounds violation, Linux parses
BlogEngine.NET 3.3.6/3.3.7 – ‘dirPath’ Directory Traversal / Remote Code Execution
# Exploit Title: Directory Traversal + RCE on BlogEngine.NET
BlogEngine.NET 3.3.6/3.3.7 – ‘theme Cookie’ Directory Traversal / Remote Code Execution
# Exploit Title: Directory Traversal + RCE on BlogEngine.NET
Sahi pro 7.x/8.x – Directory Traversal
# Exploit Title: Sahi pro (
Sahi pro 8.x – SQL Injection
# Exploit Title: Sahi pro (
Sahi pro 8.x – Cross-Site Scripting
# Exploit Title: Sahi pro (
Serv-U FTP Server < 15.1.7 - Local Privilege Escalation (1)
CVE-2019-12181 Serv-U 15.1.6 Privilege Escalation
RedwoodHQ 2.5.5 – Authentication Bypass
# -*- encoding: utf-8 -*-
CleverDog Smart Camera DOG-2W / DOG-2W-V4 – Multiple Vulnerabilities
1. Advisory Information
HC10 HC.Server Service 10.14 – Remote Invalid Pointer Write
[+] Credits: John Page (aka hyp3rlinx)
Exim 4.87 – 4.91 – Local Privilege Escalation
#!/bin/bash
Netperf 2.6.0 – Stack-Based Buffer Overflow
# Exploit Author: Juan Sacco - http://exploitpack.com
Spring Security OAuth – Open Redirector
# Exploit Title: Open Redirector in spring-security-oauth2
Thunderbird ESR < 60.7.XXX - Type Confusion
-----BEGIN PGP SIGNED MESSAGE-----
Thunderbird ESR < 60.7.XXX - 'icalmemorystrdupanddequote' Heap-Based Buffer Overflow
X41 D-Sec GmbH Security Advisory: X41-2019-001
Thunderbird ESR < 60.7.XXX - 'parser_get_next_char' Heap-Based Buffer Overflow
X41 D-Sec GmbH Security Advisory: X41-2019-002
Thunderbird ESR < 60.7.XXX - 'icalrecur_add_bydayrules' Stack-Based Buffer Overflow
X41 D-Sec GmbH Security Advisory: X41-2019-003
CentOS 7.6 – ‘ptrace_scope’ Privilege Escalation
#!/usr/bin/env bash
Aida64 6.00.5100 – ‘Log to CSV File’ Local SEH Buffer Overflow
#!/usr/bin/python
Sitecore 8.x – Deserialization Remote Code Execution
# Exploit Title: Sitecore v 8.x Deserialization RCE
FusionPBX 4.4.3 – Remote Command Execution
# Exploit Title: FusionPBX
ProShow 9.0.3797 – Local Privilege Escalation
#!/usr/bin/python
WordPress Plugin Insert or Embed Articulate Content into WordPress – Remote Code Execution
# Exploit Title: Authenticated code execution in `insert-or-embed-articulate-content-into-wordpress` Wordpress plugin
phpMyAdmin 4.8 – Cross-Site Request Forgery
# Exploit Title: Cross Site Request Forgery (CSRF)
Liferay Portal 7.1 CE GA=3 / SimpleCaptcha API – Cross-Site Scripting
# Exploit Title: Liferay Portal < 7.1 CE GA4 / SimpleCaptcha API XSS