Loaded Commerce 6.6 – Client-Side Template Injection(CSTI)
# Exploit Title: Loaded Commerce 6.6 Client-Side Template Injection(CSTI)
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 11
Extensive VC Addons for WPBakery page builder 1.9.0 – Remote Code Execution (RCE)
# Exploit Title: Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE
TranzAxis 3.2.41.10.26 – Stored Cross-Site Scripting (XSS) (Authenticated)
Exploit Title: TranzAxis 3.2.41.10.26 - Stored Cross-Site Scripting (XSS) (Authenticated)
Gitea 1.24.0 – HTML Injection
# Exploit Title: Gitea 1.24.0 - HTML Injection
VeeVPN 1.6.1 – Unquoted Service Path
# Exploit Title: VeeVPN 1.6.1 - 'VeePNService' Unquoted Service Path
Chamilo LMS 1.11.24 – Remote Code Execution (RCE)
# Exploit Title: Chamilo LMS 1.11.24 - Remote Code Execution (RCE)
SOPlanning 1.52.01 (Simple Online Planning Tool) – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: SOPlanning 1.52.01 (Simple Online Planning Tool) - Remote Code Execution (RCE) (Authenticated)
dizqueTV 1.5.3 – Remote Code Execution (RCE)
# Exploit Title: dizqueTV 1.5.3 - Remote Code Execution (RCE)
openSIS 9.1 – SQLi (Authenticated)
# Exploit Title: openSIS 9.1 - SQLi (Authenticated)
reNgine 2.2.0 – Command Injection (Authenticated)
# Exploit Title: reNgine 2.2.0 - Command Injection (Authenticated)
Windows TCP/IP – RCE Checker and Denial of Service
#!/usr/bin/env python3
Invesalius3 – Remote Code Execution
# Exploit Title: Invesalius 3.1 - Remote Code Execution (RCE)
Gitea 1.22.0 – Stored XSS
# Exploit Title: Stored XSS in Gitea
NoteMark < 0.13.0 - Stored XSS
# Exploit Title: Stored XSS in NoteMark
Elber ESE DVB-S/S2 Satellite Receiver 1.5.x – Authentication Bypass
Elber ESE DVB-S/S2 Satellite Receiver 1.5.x Authentication Bypass
Elber ESE DVB-S/S2 Satellite Receiver 1.5.x – Device Config
Elber ESE DVB-S/S2 Satellite Receiver 1.5.x Device Config
Elber Wayber Analog/Digital Audio STL 4.00 – Authentication Bypass
Elber Wayber Analog/Digital Audio STL 4.00 Authentication Bypass
Elber Wayber Analog/Digital Audio STL 4.00 – Device Config Disclosure
Elber Wayber Analog/Digital Audio STL 4.00 Device Config
HughesNet HT2000W Satellite Modem – Password Reset
# Exploit Title: HughesNet HT2000W Satellite Modem (Arcadyan httpd 1.0) - Password Reset
Aurba 501 – Authenticated RCE
# Exploit Title: Remote Command Execution | Aurba 501
Calibre-web 0.6.21 – Stored XSS
# Exploit Title: Stored XSS in Calibre-web
Helpdeskz v2.0.2 – Stored XSS
# Exploit Title: Stored XSS Vulnerability via File Name
Ivanti vADC 9.9 – Authentication Bypass
# Exploit Title: Ivanti vADC 9.9 - Authentication Bypass
Oracle Database 12c Release 1 – Unquoted Service Path
# Exploit Title: Oracle Database 12c Release 1 - Unquoted Service Path
SolarWinds Kiwi Syslog Server 9.6.7.1 – Unquoted Service Path
# Exploit Title: SolarWinds Kiwi Syslog Server 9.6.7.1 - Unquoted Service Path
Genexus Protection Server 9.7.2.10 – ‘protsrvservice’ Unquoted Service Path
#Exploit Title: Genexus Protection Server 9.7.2.10 - 'protsrvservice' Unquoted Service Path Service Path
Devika v1 – Path Traversal via ‘snapshot_path’
# Exploit Title: Devika v1 - Path Traversal via 'snapshot_path' Parameter
Bonjour Service ‘mDNSResponder.exe’ – Unquoted Service Path Privilege Escalation
# Exploit Title: Bonjour Service - 'mDNSResponder.exe' Unquoted Service
Customer Support System 1.0 – Stored XSS
# Exploit Title: Customer Support System 1.0 - (XSS) Cross-Site
Microweber 2.0.15 – Stored XSS
# Exploit Title: Stored XSS in Microweber
Azon Dominator Affiliate Marketing Script – SQL Injection
# Exploit Title: Azon Dominator - Affiliate Marketing Script - SQL Injection
Xhibiter NFT Marketplace 1.10.2 – SQL Injection
# Exploit Title: xhibiter nft marketplace SQLI
Poultry Farm Management System v1.0 – Remote Code Execution (RCE)
# Exploit Title: Poultry Farm Management System v1.0 - Remote Code Execution (RCE)
Flatboard 3.2 – Stored Cross-Site Scripting (XSS) (Authenticated)
# Exploit Title: Flatboard 3.2 - Stored Cross-Site Scripting (XSS) (Authenticated)
SolarWinds Platform 2024.1 SR1 – Race Condition
# Exploit Title: SolarWinds Platform 2024.1 SR1 - Race Condition
Automad 2.0.0-alpha.4 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Automad 2.0.0-alpha.4 - Stored Cross-Site Scripting (XSS)
AEGON LIFE v1.0 Life Insurance Management System – Stored cross-site scripting (XSS)
# Exploit Title: Life Insurance Management Stored System- cross-site scripting (XSS)
Carbon Forum 5.9.0 – Stored XSS
# Exploit Title: Persistent XSS in Carbon Forum 5.9.0 (Stored)
XMB 1.9.12.06 – Stored XSS
# Exploit Title: Persistent XSS in XMB 1.9.12.06
AEGON LIFE v1.0 Life Insurance Management System – SQL injection vulnerability.
# Exploit Title: Life Insurance Management System- SQL injection vulnerability.
PHP < 8.3.8 - Remote Code Execution (Unauthenticated) (Windows)
# Exploit Title: PHP Windows Remote Code Execution (Unauthenticated)
WP-UserOnline 2.88.0 – Stored Cross Site Scripting (XSS) (Authenticated)
# Exploit Title: WP-UserOnline 2.88.0 - Stored Cross Site Scripting (XSS) (Authenticated)
Boelter Blue System Management 1.3 – SQL Injection
# Exploit Title: SQL Injection Vulnerability in Boelter Blue System Management (version 1.3)
Sitefinity 15.0 – Cross-Site Scripting (XSS)
# Exploit Title: Sitefinity 15.0 - Cross-Site Scripting (XSS)
Serendipity 2.5.0 – Remote Code Execution (RCE)
# Exploit Title: Serendipity 2.5.0 - Remote Code Execution (RCE)
Dotclear 2.29 – Remote Code Execution (RCE)
# Exploit Title: Dotclear 2.29 - Remote Code Execution (RCE)
Monstra CMS 3.0.4 – Remote Code Execution (RCE)
# Exploit Title: Monstra CMS 3.0.4 - Remote Code Execution (RCE)
WBCE CMS v1.6.2 – Remote Code Execution (RCE)
# Exploit Title: WBCE CMS v1.6.2 - Remote Code Execution (RCE)
CMSimple 5.15 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: CMSimple 5.15 - Remote Command Execution
appRain CMF 4.0.5 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: appRain CMF 4.0.5 - Remote Code Execution (RCE) (Authenticated)