VMware Cloud Director 10.5 – Bypass identity verification
# Exploit Title: [VMware Cloud Director | Bypass identity verification]
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 15
SnipeIT 6.2.1 – Stored Cross Site Scripting
Exploit Title: SnipeIT 6.2.1 - Stored Cross Site Scripting
Microsoft Windows Defender / Trojan.Win32/Powessere.G – Detection Mitigation Bypass
[+] Credits: John Page (aka hyp3rlinx)
WordPress Plugin Duplicator < 1.5.7.1 - Unauthenticated Sensitive Data Exposure to Account Takeover
# Exploit Title: WordPress Plugin Duplicator < 1.5.7.1 -
Adobe ColdFusion versions 2018,15 (and earlier) and 2021,5 and earlier – Arbitrary File Read
# Exploit Title: File Read Arbitrary Exploit for CVE-2023-26360
Sitecore – Remote Code Execution v8.2
#!/usr/bin/env python3
TP-Link TL-WR740N – Buffer Overflow ‘DOS’
# Exploit Title: TP-Link TL-WR740N - Buffer Overflow 'DOS'
Numbas < v7.3 - Remote Code Execution
# Exploit Title: Numbas < v7.3 - Remote Code Execution
DataCube3 v1.0 – Unrestricted file upload ‘RCE’
# Exploit Title: DataCube3 v1.0 - Unrestricted file upload 'RCE'
Ladder v0.0.21 – Server-side request forgery (SSRF)
# Exploit Title: Ladder v0.0.21 - Server-side request forgery (SSRF)
Akaunting < 3.1.3 - RCE
# Exploit Title: Akaunting < 3.1.3 - RCE
Hide My WP < 6.2.9 - Unauthenticated SQLi
# Exploit Title: Wordpress Plugin Hide My WP < 6.2.9 - Unauthenticated SQLi
Lot Reservation Management System – Unauthenticated File Upload and Remote Code Execution
# Exploit Title: Lot Reservation Management System Unauthenticated File Upload and Remote Code Execution
Lot Reservation Management System – Unauthenticated File Disclosure
# Exploit Title: Lot Reservation Management System Unauthenticated File Disclosure Vulnerability
CVE-2023-50071 – Multiple SQL Injection
# Exploit Title: Customer Support System 1.0 - Multiple SQL injection
CSZ CMS Version 1.3.0 – Authenticated Remote Command Execution
# Exploit Title: CSZ CMS Version 1.3.0 Remote Command Execution
elFinder Web file manager Version – 2.1.53 Remote Command Execution
# Exploit Title: elFinder Web file manager Version: 2.1.53 Remote Command Execution
GLiNet – Router Authentication Bypass
DZONERZY Security Research
Solar-Log 200 PM+ 3.6.0 Build 99 – 15.10.2019 – Stored XSS
# Exploit Title: Stored XSS in Solar-Log 200 3.6.0 web panel
Neontext WordPress Plugin – Stored XSS
# Exploit Title: Wordpress Plugin Neon Text
kk Star Ratings < 5.4.6 - Rating Tampering via Race Condition
# Exploit Title: kk Star Ratings < 5.4.6 - Rating Tampering via Race
Petrol Pump Management Software v1.0 – ‘Address’ Stored Cross Site Scripting
# Exploit Title: Petrol Pump Management Software v1.0 - 'Address' Stored Cross Site Scripting
Petrol Pump Management Software v.1.0 – Stored Cross Site Scripting via SVG file
# Exploit Title: Petrol Pump Management Software v.1.0 - Stored Cross Site Scripting via SVG file
Petrol Pump Management Software v.1.0 – SQL Injection
# Exploit Title: Petrol Pump Management Software v.1.0 - SQL Injection
Petrol Pump Management Software v1.0 – Remote Code Execution via File Upload
# Exploit Title: Petrol Pump Management Software v1.0 - Remote Code Execution via File Upload
Real Estate Management System v1.0 – Remote Code Execution via File Upload
# Exploit Title: Real Estate Management System v1.0 - Remote Code Execution via File Upload
Simple Student Attendance System v1.0 – Time Based Blind SQL Injection
# Exploit Title: Simple Student Attendance System - Time Based Blind SQL Injection
Simple Student Attendance System v1.0 – ‘classid’ Time Based Blind & Union Based SQL Injection
# Exploit Title: Simple Student Attendance System v1.0 - 'classid' Time Based Blind & Union Based SQL Injection
Windows PowerShell – Event Log Bypass Single Quote Code Execution
[+] Credits: John Page (aka hyp3rlinx)
AC Repair and Services System v1.0 – Multiple SQL Injection
# Exploit Title: AC Repair and Services System v1.0 - Multiple SQL Injection
Enrollment System v1.0 – SQL Injection
# Exploit Title: Enrollment System v1.0 - SQL Injection
Magento ver. 2.4.6 – XSLT Server Side Injection
# Exploit Title: Magento ver. 2.4.6 - XSLT Server Side Injection
Boss Mini 1.4.0 – local file inclusion
# Exploit Title: Boss Mini 1.4.0 - local file inclusion
A-PDF All to MP3 Converter 2.0.0 – DEP Bypass via HeapCreate + HeapAlloc
#!/usr/bin/python
Maxima Max Pro Power – BLE Traffic Replay (Unauthenticated)
# Exploit Title: Maxima Max Pro Power - BLE Traffic Replay (Unauthenticated)
GL.iNet AR300M v4.3.7 Arbitrary File Read – CVE-2023-46455 Exploit
#!/usr/bin/env python3
GL.iNet AR300M v4.3.7 Remote Code Execution – CVE-2023-46454 Exploit
#!/usr/bin/env python3
TitanNit Web Control 2.01 / Atemio 7600 – Root Remote Code Execution
#!/usr/bin/env python
GL.iNet AR300M v3.216 Remote Code Execution – CVE-2023-46456 Exploit
#!/usr/bin/env python3
R Radio Network FM Transmitter 1.07 system.cgi – Password Disclosure
R Radio Network FM Transmitter 1.07 system.cgi Password Disclosure
Easywall 0.3.1 – Authenticated Remote Command Execution
# Exploit Title: Easywall 0.3.1 - Authenticated Remote Command Execution
WP Rocket < 2.10.3 - Local File Inclusion (LFI)
Paulos Yibelo discovered and reported this Local File Inclusion vulnerability in WordPress WP Rocket Plugin. This cou...
WordPress Plugin Admin Bar & Dashboard Access Control Version: 1.2.8 – “Dashboard Redirect” field Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Admin Bar & Dashboard Access Control Version: 1.2.8 - "Dashboard Redirect" field ...
Saflok – Key Derication Function Exploit
// Exploit Title: Saflok KDF
Blood Bank v1.0 – Multiple SQL Injection
# Exploit Title: Blood Bank v1.0 SQL Injection Vulnerability
(shellcode) Linux-x64 – create a shell with execve() sending argument using XOR (/bin//sh) [55 bytes]
# Exploit Title: Linux-x64 - create a shell with execve() sending argument using XOR (/bin//sh) [55 bytes]
WP Fastest Cache 1.2.2 – Unauthenticated SQL Injection
# Exploit Title: Unauthenticated SQL Injection in WP Fastest Cache 1.2.2
dawa-pharma 1.0-2022 – Multiple-SQLi
## Title: dawa-pharma-1.0-2022 Multiple-SQLi