Traccar GPS Tracking System 6.11.1 – Cross-Site WebSocket Hijacking (CSWSH)
# Exploit Title: Traccar GPS Tracking System 6.11.1 - Cross-Site WebSocket Hijacking (CSWSH)
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 2
Windows 11 24H2 – Local Privilege Escalation
# Exploit Title: Windows 11 24H2 - Local Privilege Escalation
MindsDB 25.9.1.1 – Path Traversal
# Exploit Title: MindsDB 25.9.1.1 - Path Traversal
Linksys E1200 2.0.04 – Authenticated Stack Buffer Overflow (RCE)
# Exploit Title: Linksys E1200 2.0.04 - Authenticated Stack Buffer Overflow (RCE)
Linux nf_tables 6.19.3 – Local Privilege Escalation
#define _GNU_SOURCE
Linux Kernel proc_readdir_de() 6.18-rc5 – Local Privilege Escalation
#define _GNU_SOURCE
SUSE Manager 4.3.15 – Code Execution
# Exploit Title: SUSE Manager 4.3.15 - Code Execution
deephas 1.0.7 – Prototype Pollution
# Exploit Title: deephas 1.0.7 - Prototype Pollution
Erugo 0.2.14 – Remote Code Execution (RCE)
# Exploit Title: Erugo <= 0.2.14 - Authenticated Remote Code Execution (RCE)
Cybersecurity AI (CAI) Framework 0.5.10 – Command Injection
# Exploit Title: Cybersecurity AI (CAI) Framework 0.5.10 - Command Injection
Camaleon CMS v2.9.0 – Path Traversal
# Exploit Title: Camaleon CMS v2.9.0 - Path Traversal
Js2Py 0.74 – RCE
Exploit Title: Js2Py 0.74 - RCE
Frigate NVR 0.16.3 – Remote Code Execution
# Exploit Title: Frigate NVR 0.16.3 - Remote Code Execution
NiceGUI 3.6.1 – Path Traversal
# Exploit Title: NiceGUI 3.6.1 - Path Traversal
SumatraPDF 3.5.2 – Remote Code Execution
# Exploit Title: SumatraPDF 3.5.2 - Remote Code Execution
JUNG Smart Visu Server 1.1.1050 – Dos
# Exploit Title: JUNG Smart Visu Server 1.1.1050- Dos
Windows 11 25H2 – Heap Overflow
# Exploit Title: Windows 11 25H2 - Heap Overflow
BusyBox 1.37.0 – Path Traversal
# Exploit Title: BusyBox 1.37.0 - Path Traversal
HUSTOJ Zip-Slip v26.01.24 – RCE
# Exploit Title: HUSTOJ Zip-Slip v26.01.24 - RCE
Repetier-Server 1.4.10 – Path Traversal
# Exploit Title: Repetier-Server 1.4.10 - Path Traversal
Windows 11 23H2 – Denial of Service (DoS)
# Exploit Title: Windows 11 23H2 - Denial of Service (DoS)
Google Chrome 145.0.7632.75 – CSSFontFeatureValuesMap
# Exploit Title: Google Chrome 145.0.7632.75 - CSSFontFeatureValuesMap
Python-Multipart 0.0.22 – Path Traversal
# Exploit Title: Python-Multipart 0.0.22 - Path Traversal
FUXA 1.2.8 – Authentication Bypass + RCE Exploit
# Exploit Title: FUXA 1.2.8 - Authentication Bypass + RCE Exploit
Atlona ATOMERX21 – Authenticated Command Injection
// Exploit Title: Atlona AT-OME-RX21 Authenticated Command Injection
LangChain Core 1.2.4 – SSTI/RCE
# Exploit Title: LangChain Core - SSTI/RCE
Fedora – Local Privilege Escalation
Exploit Title: Fedora Local Privilege Escalation via ABRT
Xibo CMS 4.3.0 – RCE via SSTI
# Exploit Title: Xibo CMS - Authenticated Remote Code Execution via SSTI
FacturaScripts 2025.43 – XSS
# Exploit Title: FacturaScripts 2025.43 - XSS
JuzaWeb CMS 3.4.2 – Authenticated Remote Code Execution
# Exploit Title: JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution
GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)
# Exploit Title: GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)
OpenKM 6.3.12 – Multiple
# Exploit Title: OpenKM Multiple Critical Zero-Day
OpenWrt 23.05 – Authenticated Remote Code Execution (RCE)
# Exploit Title: OpenWrt 23.05 - Authenticated Remote Code Execution (RCE)
GeographicLib v2.5.1 – stack buffer overflow
Exploit title: GeographicLib v2.5.1 - stack buffer overflow
phpMyFAQ 4.0.16 – Improper Authorization
# Exploit Title: phpMyFAQ <= 4.0.16 - Improper Authorization
GNU InetUtils 2.6 – Telnetd Remote Privilege Escalation
# Exploit Title: GNU InetUtils telnetd - Remote Privilege Escalation
Craft CMS 5.6.16 – RCE
# Exploit Title: Craft CMS 5.6.16 - RCE
HAX CMS 24.x – Stored Cross-Site Scripting (XSS)
# Exploit Title: HAX CMS 24.x - Stored Cross-Site Scripting (XSS)
AVAST Antivirus 25.11 – Unquoted Service Path
# Exploit Title: AVAST Antivirus 25.11 - Unquoted Service Path
WordPress Plugin 5.2.0 – Broken Access Control
# Exploit Title: WordPress Plugin 5.2.0 - Broken Access Control
Throttlestop Kernel Driver – Kernel Out-of-Bounds Write Privilege Escalation
# Exploit Title: Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation
D-Link DIR-650IN – Authenticated Command Injection
# Exploit Title: D-Link DIR-650IN - Authenticated Command Injection
NetBT e-Fatura – Privilege Escalation
# Exploit Title: NetBT e-Fatura - Privilege Escalation
ZSH 5.9 – RCE
# Exploit ZSH 5.9 - RCE
Jumbo Website Manager – Remote Code Execution
#Exploit Title: Jumbo Website Manager - Remote Code Execution
RomM 4.4.0 – XSS_CSRF Chain
# Exploit Title: RomM < 4.4.1 - XSS_CSRF Chain
React Server 19.2.0 – Remote Code Execution
# Exploit Title: React Server 19.2.0 - Remote Code Execution
Horilla v1.3 – RCE
# Exploit Title: Horilla v1.3 - RCE
Microsoft MMC MSC EvilTwin – Local Admin Creation
#!/usr/bin/env python3
SQLite 3.50.1 – Heap Overflow
# Exploit Title: SQLite 3.50.1 - Heap Overflow