Kirby CMS < 2.5.7 - Cross-Site Scripting
# Exploit Title: KirbyCMS
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 166
Ulterius Server < 1.9.5.0 - Directory Traversal
# Exploit Title: Ulterius Server < 1.9.5.0 Directory Traversal Arbitrary File Access
MyBB 1.8.13 – Remote Code Execution
# Exploit Title: RCE in MyBB up to 1.8.13 via installer
MyBB 1.8.13 – Cross-Site Scripting
# Exploit Title: XSS in MyBB up to 1.8.13 via installer
osCommerce 2.3.4.1 – Arbitrary File Upload
# Exploit Title: osCommerce 2.3.4.1 Authenticated Arbitrary File Upload
Symantec Endpoint Protection 12.1 – Tamper-Protection Bypass
[+] Credits: John Page a.k.a hyp3rlinx
PHP 7.1.8 – Heap Buffer Overflow
Description:
pfSense 2.3.1_1 – Command Execution
# Exploit Title: pfSense Groups) in the handling of the members[] parameter. This allows an authenticated WebGUI use...
ManageEngine Applications Manager 13 – SQL Injection
ManageEngine Applications Manager version 13 suffers from multiple post-authentication SQL injection vulnerabilities.
Xlight FTP Server 3.8.8.5 – Buffer Overflow (PoC)
#!/usr/bin/python
Ametys CMS 4.0.2 – Password Reset
## Vulnerability Summary
Linux Kernel 4.13 (Ubuntu 17.10) – ‘waitid()’ SMEP/SMAP/Chrome Sandbox Privilege Escalation
// Proof of concept exploit for waitid bug introduced in Linux Kernel 4.13
Avaya IP Office (IPO) < 10.1 - ActiveX Buffer Overflow
[+] Credits: John Page (aka hyp3rlinx)
Avaya IP Office (IPO) < 10.1 - 'SoftConsole' Remote Buffer Overflow (SEH)
[+] Credits: John Page (aka hyp3rlinx)
SMPlayer 17.11.0 – ‘.m3u’ Buffer Overflow (PoC)
#!/usr/bin/python
WordPress Plugin Userpro < 4.9.17.1 - Authentication Bypass
# Exploit Title: Userpro – WordPress Plugin – Authentication Bypass
Actiontec C1000A Modem – Backdoor Account
# Exploit Title: Actiontec C1000A backdoor account
WordPress Plugin JTRT Responsive Tables 4.1 – SQL Injection
# Exploit Title: JTRT Responsive Tables 4.1 – WordPress Plugin – Sql Injection
GraphicsMagick – Memory Disclosure / Heap Overflow
'''Vulnerabilities summary
Ladon Framework for Python 0.9.40 – XML External Entity Expansion
Advisory: XML External Entity Expansion in Ladon Webservice
Ipswitch WS_FTP Professional < 12.6.0.3 - Local Buffer Overflow (SEH)
#!/usr/bin/python
Jnes 1.0.2 – Stack Buffer Overflow
#!/usr/bin/env python
Logitech Media Server 7.9.0 – ‘favorites’ Cross-Site Scripting
# Exploit Title: Logitech Media Server : Persistent Cross Site Scripting(XSS)
Logitech Media Server 7.9.0 – ‘Radio URL’ Cross-Site Scripting
# Exploit Title: Logitech Media Server : HTML code injection and execution.
Debut Embedded HTTPd 1.20 – Denial of Service
# Exploit Title: Remote un-authenticated DoS in Debut embedded httpd server in Brother printers
OctoberCMS 1.0.426 (Build 426) – Cross-Site Request Forgery
# Exploit Title: OctoberCMS 1.0.426 - CSRF to Admin Account Takover
WhatsApp 2.17.52 – Memory Corruption
#!/usr/bin/env python
Ingenious School Management System 2.3.0 – ‘friend_index’ SQL injection
# Exploit Title: Ingenious School Management System 2.3.0 - SQL injection
Vir.IT eXplorer Anti-Virus 8.5.39 – ‘VIAGLT64.SYS’ Local Privilege Escalation
Exploit Title - Vir.IT eXplorer Anti-Virus Arbitrary Write Privilege Escalation
Cisco UCS Platform Emulator 3.1(2ePE1) – Remote Code Execution
## Vulnerabilities Summary
ZyXEL PK5001Z Modem – Backdoor Account
# Exploit Title: ZyXEL PK5001Z Modem - CenturyLink Hardcoded admin and root Telnet Password.
News 1.0 – SQL Injection
# # # # #
WordPress Plugin Ultimate Product Catalog 4.2.24 – PHP Object Injection
# Exploit Title: [WP Plugin Ultimate Product Catalog 4.2.24 PHP Object Injection]
Php Inventory – Arbitrary File Upload
# # # # #
Basic B2B Script – SQL Injection
# # # # #
CmsLite 1.4 – ‘S’ SQL Injection
# # # # #
MyMagazine 1.0 – ‘id’ SQL Injection
# # # # #
Newspaper 1.0 – SQL Injection
# # # # #
Shareet – ‘photo’ SQL Injection
# # # # #