Exploits

Zoo Management System 1.0 – Unauthenticated RCE

# Exploit Title: Zoo Management System 1.0 - Unauthenticated RCE

Moodle 4.3 – Insecure Direct Object Reference

# Exploit Title: Moodle 4.3 'id' Insecure Direct Object Reference (IDOR)

SuperStoreFinder – Multiple Vulnerabilities

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

Automatic-Systems SOC FL9600 FastLine – Directory Transversal

# Exploit Title: Automatic-Systems SOC FL9600 FastLine - Directory Transversal

Automatic-Systems SOC FL9600 FastLine – The device contains hardcoded login and password for super admin

# Exploit Title: Automatic-Systems SOC FL9600 FastLine - The device contains hardcoded login and password for super a...

Executables Created with perl2exe < V30.10C - Arbitrary Code Execution

# Exploit Title: Executables Created with perl2exe malicious.pl

WordPress Plugin Canto < 3.0.5 - Remote File Inclusion (RFI) and Remote Code Execution (RCE)

# Exploit Title: Wordpress Plugin Canto < 3.0.5 - Remote File Inclusion (RFI) and Remote Code Execution (RCE)

TEM Opera Plus FM Family Transmitter 35.45 – Remote Code Execution

TEM Opera Plus FM Family Transmitter 35.45 Remote Code Execution

TEM Opera Plus FM Family Transmitter 35.45 – XSRF

CSRF Change Forward Power:

Atlassian Confluence Data Center and Server – Authentication Bypass (Metasploit)

##

Simple Inventory Management System v1.0 – ’email’ SQL Injection

# Exploit Title: Simple Inventory Management System v1.0 - 'email' SQL Injection

comments-like-dislike < 1.2.0 - Authenticated (Subscriber+) Plugin Setting Reset

# Exploit Title: POC-CVE-2023-3244

taskhub 2.8.7 – SQL Injection

# Exploit Title: taskhub 2.8.7 - SQL Injection

Online Shopping System Advanced – Sql Injection

# Exploit Title: Online Shopping System Advanced

Flashcard Quiz App v1.0 – ‘card’ SQL Injection

# Exploit Title: Flashcard Quiz App v1.0 - 'card' SQL Injection

FAQ Management System v1.0 – ‘faq’ SQL Injection

# Exploit Title: FAQ Management System v1.0 - 'faq' SQL Injection

Wyrestorm Apollo VX20 < 1.3.58 - Account Enumeration

[+] Credits: John Page (aka hyp3rlinx)

Wyrestorm Apollo VX20 < 1.3.58 - Incorrect Access Control 'DoS'

[+] Credits: John Page (aka hyp3rlinx)

Wyrestorm Apollo VX20 < 1.3.58 - Incorrect Access Control 'Credentials Disclosure'

[+] Credits: John Page (aka hyp3rlinx)

IBM i Access Client Solutions v1.1.2 – 1.1.4, v1.1.4.3 – 1.1.9.4 – Remote Credential Theft

[+] Credits: John Page (aka hyp3rlinx)

WEBIGniter v28.7.23 – Stored Cross Site Scripting (XSS)

# Exploit Title: WEBIGniter v28.7.23 Stored Cross Site Scripting (XSS)

phpFox < 4.8.13 - (redirect) PHP Object Injection Exploit

XAMPP – Buffer Overflow POC

# Exploit Title: XAMPP v3.3.0 — '.ini' Buffer Overflow (Unicode + SEH)

Microsoft Windows Defender Bypass – Detection Mitigation Bypass

[+] Credits: John Page (aka hyp3rlinx)

Microsoft Windows Defender – VBScript Detection Bypass

[+] Credits: John Page (aka hyp3rlinx)

Employee Management System v1 – ’email’ SQL Injection

# Exploit Title: Employee Management System v1 - 'email' SQL Injection

SureMDM On-premise < 6.31 - CAPTCHA Bypass User Enumeration

# Exploit Title: SureMDM On-premise < 6.31 - CAPTCHA Bypass User Enumeration

Wondercms 4.3.2 – XSS to RCE

# Author: prodigiousMind

JFrog Artifactory < 7.25.4 - Blind SQL Injection

# Exploit Title: artifactory low-privileged blind sql injection

SISQUALWFM 7.1.319.103 – Host Header Injection

# Exploit Title: SISQUALWFM 7.1.319.103 Host Header Injection

Metabase 0.46.6 – Pre-Auth Remote Code Execution

# Exploit Title: metabase 0.46.6 - Pre-Auth Remote Code Execution

DS Wireless Communication – Remote Code Execution

# Exploit Title: DS Wireless Communication Remote Code Execution

Splunk 9.0.4 – Information Disclosure

# Exploit Title: Splunk 9.0.4 - Information Disclosure

VIMESA VHF/FM Transmitter Blue Plus 9.7.1 (doreboot) – Remote Denial Of Service

VIMESA VHF/FM Transmitter Blue Plus 9.7.1 (doreboot) Remote Denial Of Service

ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure

# Exploit Title: ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure

Lost and Found Information System v1.0 – ( IDOR ) leads to Account Take over

# Exploit Title: Lost and Found Information System v1.0 - idor leads to Account Take over

Advanced Page Visit Counter 1.0 – Admin+ Stored Cross-Site Scripting (XSS) (Authenticated)

# Exploit Title: Advanced Page Visit Counter 1.0 - Admin+ Stored Cross-Site

Zyxel zysh – Format string

#!/usr/bin/expect -f

Elasticsearch – StackOverflow DoS

# Exploit Author: TOUHAMI KASBAOUI

WordPress Augmented-Reality – Remote Code Execution Unauthenticated

# Exploit Title: Wordpress Augmented-Reality - Remote Code Execution Unauthenticated

WordPress Seotheme – Remote Code Execution Unauthenticated

# Exploit Title: Wordpress Seotheme - Remote Code Execution Unauthenticated

Rail Pass Management System 1.0 – Time-Based SQL Injection

# Exploit Title: Rail Pass Management System - 'searchdata' Time-Based SQL Injection

Online Nurse Hiring System 1.0 – Time-Based SQL Injection

# Exploit Title: Online Nurse Hiring System 1.0 - 'bookid' Time-Based SQL Injection

GYM MS – GYM Management System – Cross Site Scripting (Stored)

# Exploit Title: GYM MS - GYM Management System - Cross Site Scripting (Stored)

Curfew e-Pass Management System 1.0 – FromDate SQL Injection

# Exploit Title: Curfew e-Pass Management System 1.0 - FromDate SQL

Clinic’s Patient Management System 1.0 – Unauthenticated RCE

# Exploit Title: Clinic's Patient Management System 1.0 - Unauthenticated RCE

MISP 2.4.171 – Stored XSS

# Exploit Title: MISP 2.4.171 Stored XSS [CVE-2023-37307] (Authenticated)

WhatsUp Gold 2022 (22.1.0 Build 39) – XSS

# Exploit Title: WhatsUpGold 22.1.0 - Stored Cross-Site Scripting (XSS)

Milesight Routers UR5X, UR32L, UR32, UR35, UR41 – Credential Leakage Through Unprotected System Logs and Weak Password Encryption

#!/usr/bin/env python3

WebCatalog 48.4 – Arbitrary Protocol Execution

# Exploit Title: WebCatalog 48.4 - Arbitrary Protocol Execution