PCMan FTP Server 2.0 – ‘pwd’ Remote Buffer Overflow
# Exploit Title: PCMan FTP Server 2.0 - 'pwd' Remote Buffer Overflow
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 17
TP-Link TL-WR740N – UnAuthenticated Directory Transversal
# Exploit Title: TP-Link TL-WR740N UnAuthenticated Directory Transversal
TP-LINK TL-WR740N – Multiple HTML Injection
# Exploit Title: TP-LINK TL-WR740N - Multiple HTML Injection Vulnerabilities
Electrolink FM/DAB/TV Transmitter (login.htm/mail.htm) – Credentials Disclosure
Electrolink FM/DAB/TV Transmitter (login.htm/mail.htm) Credentials Disclosure
Electrolink FM/DAB/TV Transmitter (controlloLogin.js) – Credentials Disclosure
Electrolink FM/DAB/TV Transmitter (controlloLogin.js) Credentials Disclosure
Electrolink FM/DAB/TV Transmitter (Login Cookie) – Authentication Bypass
Electrolink FM/DAB/TV Transmitter (Login Cookie) Authentication Bypass
Electrolink FM/DAB/TV Transmitter – Remote Authentication Removal
#!/usr/bin/env python
Electrolink FM/DAB/TV Transmitter – Unauthenticated Remote DoS
Electrolink FM/DAB/TV Transmitter Unauthenticated Remote DoS
Electrolink FM/DAB/TV Transmitter – Pre-Auth MPFS Image Remote Code Execution
Electrolink FM/DAB/TV Transmitter Pre-Auth MPFS Image Remote Code Execution
Juniper-SRX-Firewalls&EX-switches – (PreAuth-RCE) (PoC)
# ***************************************************************************************************
Academy LMS 6.2 – SQL Injection
# Exploit Title: Academy LMS 6.2 - SQL Injection
101 News 1.0 – Multiple-SQLi
## Title: 101 News-1.0 Multiple-SQLi
Grocy <=4.0.2 - CSRF
# Exploit Title: Grocy
GoAhead Web Server 2.5 – ‘goform/formTest’ Multiple HTML Injection Vulnerabilities
# Exploit Title: GoAhead Web Server 2.5 - 'goform/formTest' Multiple HTML Injection Vulnerabilities
Proxmox VE – TOTP Brute Force
# Exploit Title: Proxmox VE TOTP Brute Force
RoyalTSX 6.0.1 – RTSZ File Handling Heap Memory Corruption PoC
RoyalTSX 6.0.1 RTSZ File Handling Heap Memory Corruption PoC
7 Sticky Notes v1.9 – OS Command Injection
# Exploit Title: 7 Sticky Notes v1.9 - OS Command Injection
Equipment Rental Script-1.0 – SQLi
## Title: Equipment Rental Script-1.0 - SQLi
Blood Bank & Donor Management System using v2.2 – Stored XSS
# Exploit Title: Blood Bank & Donor Management System using v2.2 - Stored XSS
Bank Locker Management System – SQL Injection
# Exploit Title: Bank Locker Management System - SQL Injection
Typora v1.7.4 – OS Command Injection
# Exploit Title: Typora v1.7.4 - OS Command Injection
Fundraising Script 1.0 – SQLi
## Title: Fundraising Script-1.0 SQLi
PHP Shopping Cart 4.2 – Multiple-SQLi
## Title: PHP Shopping Cart-4.2 Multiple-SQLi
Ricoh Printer – Directory and File Exposure
#Exploit Title: Ricoh Printer Directory and File Exposure
GLPI GZIP(Py3) 9.4.5 – RCE
#!/usr/bin/env python3
Ruijie Reyee Mesh Router – MITM Remote Code Execution (RCE)
# Exploit Title: Ruijie Reyee Wireless Router firmware version B11P204 - MITM Remote Code Execution (RCE)
Online ID Generator 1.0 – Remote Code Execution (RCE)
## Title: Online ID Generator 1.0 - Remote Code Execution (RCE)
Clcknshop 1.0.0 – SQL Injection
# Exploit Title: Clcknshop 1.0.0 - SQL Injection
Tinycontrol LAN Controller v3 (LK3) 1.58a – Remote Denial Of Service
Exploit Title: Tinycontrol LAN Controller v3 (LK3) 1.58a - Remote Denial Of Service
Tinycontrol LAN Controller v3 (LK3) 1.58a – Remote Credentials Extraction
#!/usr/bin/env python
Microsoft Windows 11 – ‘apds.dll’ DLL hijacking (Forced)
#---------------------------------------------------------
Minio 2022-07-29T19-40-48Z – Path traversal
# Exploit Title: Minio 2022-07-29T19-40-48Z - Path traversal
WordPress Plugin Masterstudy LMS – 3.0.17 – Unauthenticated Instructor Account Creation
# Exploit Title: Wordpress Plugin Masterstudy LMS - 3.0.17 - Unauthenticated Instructor Account Creation
WEBIGniter v28.7.23 File Upload – Remote Code Execution
## Title: WEBIGniter v28.7.23 File Upload - Remote Code Execution
Media Library Assistant WordPress Plugin – RCE and LFI
# Exploit Title: Media Library Assistant Wordpress Plugin - RCE and LFI
Coppermine Gallery 1.6.25 – RCE
Exploit Title: coppermine-gallery 1.6.25 RCE
WordPress Sonaar Music Plugin 4.7 – Stored XSS
# Exploit Title: Wordpress Sonaar Music Plugin 4.7 - Stored XSS
Cacti 1.2.24 – Authenticated command injection when using SNMP options
# Exploit Title: Cacti 1.2.24 - Authenticated command injection when using SNMP options
BoidCMS v2.0.0 – authenticated file upload vulnerability
#!/usr/bin/python3
Atcom 2.7.x.x – Authenticated Command Injection
# Exploit Title: Atcom 2.7.x.x - Authenticated Command Injection
Webedition CMS v2.9.8.8 – Blind SSRF
Exploit Title: Webedition CMS v2.9.8.8 - Blind SSRF
Limo Booking Software v1.0 – CORS
## Title: Limo Booking Software v1.0 - CORS
Shuttle-Booking-Software v1.0 – Multiple-SQLi
## Title: Shuttle-Booking-Software v1.0 - Multiple-SQLi
OpenPLC WebServer 3 – Denial of Service
# Exploit Title: OpenPLC WebServer 3 - Denial of Service
Splunk 9.0.5 – admin account take over
#!/usr/bin/env python3
SPA-Cart eCommerce CMS 1.9.0.3 – SQL Injection
# Exploit Title: SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection
Jorani v1.0.3-(c)2014-2023 – XSS Reflected & Information Disclosure
## Title: Jorani v1.0.3-(c)2014-2023 - XSS Reflected & Information Disclosure
WordPress Plugin Elementor 3.5.5 – Iframe Injection
# Exploit Title: Wordpress Plugin Elementor < 3.5.5 - Iframe Injection
Wp2Fac – OS Command Injection
# Exploit Title: Wp2Fac v1.0 - OS Command Injection