Teameyo Project Management System 1.0 – SQL Injection
# Exploit Title: Teameyo - Project Management System 1.0 - SQL Injection
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 118
Mess Management System 1.0 – SQL Injection
# Exploit Title: Mess Management System 1.0 - SQL Injection
Smart VPN 1.1.3.0 – Denial of Service (PoC)
# Exploit Title: Smart VPN 1.1.3.0 - Denial of Service (PoC)
MyBB IP History Logs Plugin 1.0.2 – Cross-Site Scripting
# Exploit Title: MyBB IP History Logs Plugin 1.0.2 - Cross-Site Scripting
ResourceSpace 8.6 – ‘collection_edit.php’ SQL Injection
# Exploit Title: ResourceSpace = 5.1 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (EXTRACTVALUE)
Cisco RV320 Dual Gigabit WAN VPN Router 1.4.2.15 – Command Injection
RedTeam Pentesting discovered a command injection vulnerability in the
GreenCMS 2.x – SQL Injection
# Exploit Title: Green CMS 2.x - SQL Injection
GreenCMS 2.x – Arbitrary File Download
# Exploit Title: Green CMS 2.x - Arbitrary File & Directory Download
Lua 5.3.5 – ‘debug.upvaluejoin’ Use After Free
# Exploit Title: Lua 5.3.5
WordPress Plugin Wisechat 2.6.3 – Reverse Tabnabbing
# Exploit Title: Wordpress Plugin Wisechat
Joomla! Component J-CruisePortal 6.0.4 – SQL Injection
# Exploit Title: Joomla! Component J-CruisePortal 6.0.4 - SQL Injection
Joomla! Component JHotelReservation 6.0.7 – SQL Injection
# Exploit Title: Joomla! Component JHotelReservation 6.0.7 - SQL Injection
SimplePress CMS 1.0.7 – SQL Injection
# Exploit Title: SimplePress CMS 1.0.7 - SQL Injection
Microsoft Remote Desktop 10.2.4(134) – Denial of Service (PoC)
# Exploit Title: Microsoft Remote Desktop 10.2.4(134) - Denial of Service (PoC)
SirsiDynix e-Library 3.5.x – Cross-Site Scripting
# Exploit Title: SirsiDynix e-Library
ImpressCMS 1.3.11 – ‘bid’ SQL Injection
# Title: ImpressCMS 1.3.11 - 'bid' SQL Injection
Zyxel NBG-418N v2 Modem 1.00(AAXM.6)C0 – Cross-Site Request Forgery
NBG-418N v2 Modem CSRF Exploit & PoC
Ghostscript 9.26 – Pseudo-Operator Remote Code Execution
I noticed ghostscript 9.26 was released, so had a quick look and spotted some errors. For background, this is how you...
Nagios XI 5.5.6 – Remote Code Execution / Privilege Escalation
# Exploit Title: Nagios XI 5.5.6 Remote Code Execution and Privilege Escalation
Microsoft Windows CONTACT – HTML Injection / Remote Code Execution
[+] Credits: John Page (aka hyp3rlinx)
Joomla! Component vBizz 1.0.7 – SQL Injection
# Exploit Title: Joomla! Component vBizz 1.0.7 - SQL Injection
Joomla! Component vBizz 1.0.7 – Remote Code Execution
# Exploit Title: Joomla! Component vBizz 1.0.7 - Remote Code Execution
Joomla! Component vWishlist 1.0.1 – SQL Injection
# Exploit Title: Joomla! Component vWishlist 1.0.1 - SQL Injection
Joomla! Component vAccount 2.0.2 – ‘vid’ SQL Injection
# Exploit Title: Joomla! Component vAccount 2.0.2 - SQL Injection
Joomla! Component vReview 1.9.11 – SQL Injection
# Exploit Title: Joomla! Component vReview 1.9.11 - SQL Injection
Joomla! Component vRestaurant 1.9.4 – SQL Injection
# Exploit Title: Joomla! Component vRestaurant 1.9.4 - SQL Injection
Joomla! Component VMap 1.9.6 – SQL Injection
# Exploit Title: Joomla! Component VMap 1.9.6 - SQL Injection
Joomla! Component J-BusinessDirectory 4.9.7 – ‘type’ SQL Injection
# Exploit Title: Joomla! Component J-BusinessDirectory 4.9.7 - SQL Injection
Joomla! Component J-ClassifiedsManager 3.0.5 – SQL Injection
# Exploit Title: Joomla! Component J-ClassifiedsManager 3.0.5 - SQL Injection
Joomla! Component JMultipleHotelReservation 6.0.7 – SQL Injection
# Exploit Title: Joomla! Component J-MultipleHotelReservation 6.0.7 - SQL Injection
CloudMe Sync 1.11.2 – Buffer Overflow + Egghunt
#######################################################
Joomla! Component Easy Shop 1.2.3 – Local File Inclusion
# Exploit Title: Joomla! Component Easy Shop 1.2.3 - Local File Inclusion
Microsoft Windows VCF or Contact’ File – URL Manipulation-Spoof Arbitrary Code Execution
# Exploit Title: Microsoft Windows 'VCF' or 'Contact' File URL Manipulation-Spoof Arbitrary Code Execution Vulnerabi...
Kepler Wallpaper Script 1.1 – SQL Injection
# Exploit Title: Kepler Wallpaper Script 1.1 - SQL Injection
Linux Kernel 4.13 – ‘compat_get_timex()’ Leak Kernel Pointer
#define _GNU_SOURCE
Coman 1.0 – ‘id’ SQL Injection
# Exploit Title: Coman - Company Management System 1.0 - SQL Injection
Reservic 1.0 – ‘id’ SQL Injection
# Exploit Title: Reservic - Reserves Management System 1.0 - SQL Injection
MoneyFlux 1.0 – ‘id’ SQL Injection
# Exploit Title: MoneyFlux - Cashflow Management System 1.0 - SQL Injection
PHP Dashboards NEW 5.8 – ‘dashID’ SQL Injection
# Exploit Title: PHP Dashboards NEW 5.8 - SQL Injection
PHP Dashboards NEW 5.8 – Local File Inclusion
# Exploit Title: PHP Dashboards NEW 5.8 - Local File Inclusion
PHP Uber-style GeoTracking 1.1 – SQL Injection
# Exploit Title: PHP Uber-style GeoTracking 1.1 - SQL Injection
GattLib 0.2 – Stack Buffer Overflow
Exploit Title: stack-based overflow
Echo Mirage 3.1 – Buffer Overflow (PoC)
#!/usr/bin/python
Adianti Framework 5.5.0 – SQL Injection
# Exploit Title: [SQL Injection in Adianti Framework]
SeoToaster Ecommerce / CRM / CMS 3.0.0 – Local File Inclusion
# Exploit Title: SeoToaster Ecommerce 3.0.0 - Local File Inclusion
phpTransformer 2016.9 – SQL Injection
# Exploit Title: phpTransformer 2016.9 - SQL Injection
phpTransformer 2016.9 – Directory Traversal
# Exploit Title: phpTransformer 2016.9 - Directory Traversal