Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 194

PHP Classifieds Rental Script 3.6.0 – ‘scatid’ SQL Injection

# # # # #

2017-03-06 Ihsan Sencan webapps

Entrepreneur B2B Script 2.0.4 – ‘id’ SQL Injection

# # # # #

2017-03-06 Ihsan Sencan webapps

PHP Matrimonial Script 3.0 – SQL Injection

# # # # #

2017-03-06 Ihsan Sencan webapps

MLM Binary Plan Script 2.0.5 – SQL Injection

# # # # #

2017-03-06 Ihsan Sencan webapps

MLM Forced Matrix 2.0.7 – SQL Injection

# # # # #

2017-03-06 Ihsan Sencan webapps

MLM Forex Market Plan Script 2.0.1 – SQL Injection

# # # # #

2017-03-06 Ihsan Sencan webapps

MLM Membership Plan Script 2.0.5 – SQL Injection

# # # # #

2017-03-06 Ihsan Sencan webapps

Multireligion Responsive Matrimonial Script 4.7.1 – SQL Injection

# # # # #

2017-03-06 Ihsan Sencan webapps

Network Community Script 3.0.2 – SQL Injection

# # # # #

2017-03-06 Ihsan Sencan webapps

PHP B2B Script 3.05 – SQL Injection

# # # # #

2017-03-06 Ihsan Sencan webapps

Responsive Matrimonial Script 4.0.1 – SQL Injection

# # # # #

2017-03-06 Ihsan Sencan webapps

Schools Alert Management Script 2.01 – ‘list_id’ SQL Injection

# # # # #

2017-03-06 Ihsan Sencan webapps

Select Your College Script 2.01 – SQL Injection

# # # # #

2017-03-06 Ihsan Sencan webapps

Social Network Script 3.01 – ‘id’ SQL Injection

# # # # #

2017-03-06 Ihsan Sencan webapps

CyberGhost 6.0.4.2205 – Local Privilege Escalation

# Exploit CyberGhost 6.0.4.2205 Privilege Escalation

2017-03-06 Kacper Szurek local

Website Broker Script 3.02 – ‘view’ SQL Injection

# # # # #

2017-03-06 Ihsan Sencan webapps

Deluge Web UI 1.3.13 – Cross-Site Request Forgery

Stop sending requests

2017-03-06 Kyle Neideck webapps

MikroTik Router – ARP Table OverFlow Denial Of Service

#Exploit Title: MikroTik Router Denial Of Service | ARP Table OverFlow

2017-03-05 FarazPajohan dos

Joomla! Component JUX EventOn 1.0.1 – ‘id’ SQL Injection

# # # # #

2017-03-04 Ihsan Sencan webapps

Joomla! Component Monthly Archive 3.6.4 – ‘author_form’ SQL Injection

# # # # #

2017-03-04 Ihsan Sencan webapps

Joomla! Component AYS Quiz 1.0 – ‘id’ SQL Injection

# # # # #

2017-03-04 Ihsan Sencan webapps

Joomla! Component Content ConstructionKit 1.1 – SQL Injection

# # # # #

2017-03-04 Ihsan Sencan webapps

Joomla! Component AltaUserPoints 1.1 – ‘userid’ SQL Injection

# # # # #

2017-03-04 Ihsan Sencan webapps

FTPShell Client 6.53 – Remote Buffer Overflow

# Exploit Title: FTPShell Client 6.53 buffer overflow on making initial connection

2017-03-04 Peter Baris remote

WordPress Core < 4.7.1 - Username Enumeration

#!usr/bin/php

2017-03-03 Dctor webapps

Joomla! Component Coupon 3.5 – SQL Injection

# # # # #

2017-03-03 Ihsan Sencan webapps

pfSense 2.3.2 – Cross-Site Scripting / Cross-Site Request Forgery

######################################################################

2017-03-03 Yann CAM webapps

EPSON TMNet WebConfig 1.00 – Cross-Site Scripting

# Exploit Title: Persistent XSS in EPSON TMNet WebConfig Ver. 1.00

2017-03-03 Michael Benich webapps

Multiple WordPress Plugins – Arbitrary File Upload

import requests

2017-03-03 The Martian webapps

Php Classified OLX Clone Script – ‘category’ SQL Injection

# # # # #

2017-03-02 Ihsan Sencan webapps

Joomla! Component Abstract 2.1 – SQL Injection

# # # # #

2017-03-02 Ihsan Sencan webapps

Joomla! Component StreetGuessr Game 1.0 – SQL Injection

# # # # #

2017-03-02 Ihsan Sencan webapps

Joomla! Component Guesser 1.0.4 – ‘type’ SQL Injection

# # # # #

2017-03-02 Ihsan Sencan webapps

Joomla! Component Recipe Manager 2.2 – ‘id’ SQL Injection

# # # # #

2017-03-02 Ihsan Sencan webapps

Conext ComBox 865-1058 – Denial of Service

#Exploit Title: Conext ComBox - Denial of Service (HTTP-POST)

2017-03-02 Mark Liapustin & Arik Kublanov dos

MDwiki < 0.6.2 - Cross-Site Scripting

Originally thought that only a problem with Tencent's site implementation, the black brother reminded me to look at t...

2017-03-02 evi1m0 webapps

D-Link DSL-2730U Wireless N 150 – Cross-Site Request Forgery

Author : B GOVIND

2017-03-01 B GOVIND webapps

Aruba AirWave 8.2.3 – XML External Entity Injection / Cross-Site Scripting

SEC Consult Vulnerability Lab Security Advisory < 20170301-0 >

2017-03-01 SEC Consult webapps

WordPress Plugin Contact Form Manager – Cross-Site Request Forgery / Cross-Site Scripting

xyz_cfm_SmtpAuthentication

2017-03-01 Edwin Molenaar webapps

WordPress Plugin User Login Log 2.2.1 – Cross-Site Scripting

Source: https://sumofpwn.nl/advisory/2016/stored_cross_site_scripting_vulnerability_in_user_login_log_wordpress_plugi...

2017-03-01 Axel Koolhaas webapps

WordPress Plugin Popup by Supsystic 1.7.6 – Cross-Site Request Forgery

2017-03-01 Radjnies Bhansingh webapps

WordPress Plugin NewStatPress 1.2.4 – Cross-Site Scripting

Source: https://sumofpwn.nl/advisory/2016/persistent_cross_site_scripting_in_the_wordpress_newstatpress_plugin.html

2017-03-01 Han Sahin webapps

WordPress Plugin Global Content Blocks 2.1.5 – Cross-Site Request Forgery

2017-03-01 Yorick Koster webapps

WordPress Plugin File Manager 3.0.1 – Cross-Site Request Forgery

POST /wp-admin/admin-ajax.php HTTP/1.1

2017-03-01 David Vaartjes webapps

SchoolDir – SQL Injection

# # # # #

2017-03-01 Ihsan Sencan webapps

Rage Faces Script 1.3 – SQL Injection

# # # # #

2017-03-01 Ihsan Sencan webapps

Meme Maker Script 2.1 – ‘user’ SQL Injection

# # # # #

2017-03-01 Ihsan Sencan webapps

Netgear DGN2200v1/v2/v3/v4 – Cross-Site Request Forgery

# Exploit Title: NETGEAR Firmware DGN2200v1/v2/v3/v4 CSRF which leads to RCE through CVE-2017-6334

2017-02-28 SivertPL webapps

BlueIris 4.5.1.4 – Denial of Service

import socket

2017-02-28 Peter Baris dos

Synchronet BBS 3.16c – Denial of Service

# Exploit Title: Synchronet BBS 3.16c for Windows – Multiple vulnerabilities

2017-02-28 Peter Baris dos