Student Information System (SIS) 0.1 – Authentication Bypass
# Exploit Title............... Student Information System (SIS) Auth Bypass
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 212
Web Based Alumni Tracking System 0.1 – SQL Injection
# Exploit Title.............. Web Based Alumni Tracking System Multiple Vulnerability
Simple Dynamic Web 0.1 – SQL Injection
# Exploit Title.............. Simple Dynamic Web SQL Injection
Learning Management System 0.1 – Authentication Bypass
# Exploit Title.............. Learning Management System Auth Bypass
Fashion Shopping Cart 0.1 – SQL Injection
# Exploit Title.............. Fashion Shopping Cart SQL Injection
Health Record System 0.1 – Authentication Bypass
# Exploit Title.............. Health Record System Auth Bypass
Simple Shopping Cart Application 0.1 – SQL Injection
# Exploit Title.............. Simple Shopping Cart Application SQL Injection
School Full CBT 0.1 – SQL Injection
# Exploit Title.............. School Full CBT SQL Injection
Simple Blog PHP 2.0 – Multiple Vulnerabilities
=====================================================
Simple Blog PHP 2.0 – SQL Injection
=====================================================
ASLDRService ATK Hotkey 1.0.69.0 – Unquoted Service Path Privilege Escalation
----------------------------------------------------------------------------------------------------------
Thatware 0.4.6 – SQL Injection
# Exploit Title :----------------- : Thatware 0.4.6 - (friend.php) - SQL Injection
InsOnSrv Asus InstantOn 2.3.1.1 – Unquoted Service Path Privilege Escalation
# Exploit Title: InsOnSrv Asus InstantOn- Privilege Escalation Unquoted Service Path vulnerability
ATKGFNEXSrv ATKGFNEX 1.0.11.1 – Unquoted Service Path Privilege Escalation
# Exploit Title: ATKGFNEXSrv ATKGFNEX- Privilege Escalation Unquoted Service Path vulnerability
VOX Music Player 2.8.8 – ‘.pls’ Denial of Service
# Exploit Title: VOX Music Player 2.8.8 '.pls' Local Crash PoC
IObit Malware Fighter 4.3.1 – Unquoted Service Path Privilege Escalation
#########################################################################
Colorful Blog – Persistent Cross-Site Scripting
# Exploit Title : ----------- : Colorful Blog - Stored Cross Site Scripting
Colorful Blog – Cross-Site Request Forgery (Change Admin Password)
# Exploit Title :----------- : Colorful Blog - Cross-Site Request Forgery (Change Admin Pass)
Hotspot Shield 6.0.3 – Unquoted Service Path Privilege Escalation
#########################################################################
RSS News AutoPilot Script 1.0.1/3.1.0 – Admin Panel Authentication Bypass
# Exploit Title: RSS News AutoPilot Script - Admin Panel Authentication Bypass
JonhCMS 4.5.1 – SQL Injection
# Exploit Title :----------------- : JonhCMS 4.5.1 - (go.php?id) - SQL Injection
Subversion 1.6.6/1.6.12 – Code Execution
# This is an exploit for the subversion vulnerability published as CVE-2013-2088.
Cisco Webex Player T29.10 – ‘.WRF’ Use-After-Free Memory Corruption
#####################################################################################
Cisco Webex Player T29.10 – ‘.ARF’ Out-of-Bounds Memory Corruption
#####################################################################################
Adobe Flash Player 23.0.0.162 – ‘.SWF’ ConstantPool Critical Memory Corruption
#####################################################################################
Categorizator 0.3.1 – SQL Injection
# Exploit Title: Categorizator 0.3.1 | SQL Injection
NetBilletterie 2.8 – Multiple Vulnerabilities
# Exploit Title: NetBilletterie 2.8 | Multiple Vulnerabilities
OpenCimetiere 3.0.0-a5 – Blind SQL Injection
# Exploit Title: OpenCimetiere v3.0.0-a5 | Blind SQL Injection
Google Android – Binder Generic ASLR Leak
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=889
ApPHP MicroCMS 3.9.5 – Persistent Cross-Site Scripting
# Exploit Title :----------------- : ApPHP MicroCMS 3.9.5 - Stored Cross Site Scripting
ApPHP MicroCMS 3.9.5 – Cross-Site Request Forgery (Add Admin)
# Exploit Title :----------------- : ApPHP MicroCMS 3.9.5 - Cross-Site Request Forgery (Add Admin (Main))
Minecraft Launcher 1.6.61 – Insecure File Permissions Privilege Escalation
Minecraft Launcher: https://minecraft.net
Sheed AntiVirus 2.3 – Unquoted Service Path Privilege Escalation
#########################################################################
RSA Enterprise Compromise Assessment Tool 4.1.0.1 – XML External Entity Injection
SEC Consult Vulnerability Lab Security Advisory < 20161011-0 >
ApPHP MicroBlog 1.0.2 – Persistent Cross-Site Scripting
# Exploit Title : ApPHP MicroBlog 1.0.2 - Stored Cross
ApPHP MicroBlog 1.0.2 – Cross-Site Request Forgery (Add New Author)
# Exploit Title : ApPHP MicroBlog 1.0.2 - Cross-Site Request Forgery (Add New Author)
Apache Tomcat 8/7/6 (RedHat Based Distros) – Local Privilege Escalation
=============================================
Linux Kernel 4.6.2 (Ubuntu 16.04.1) – ‘IP6T_SO_SET_REPLACE’ Local Privilege Escalation
# Exploit Title: Linux kernel
Zend Studio IDE 13.5.1 – Insecure File Permissions Privilege Escalation
[+] Credits: John Page aka hyp3rlinx
HP Client 9.1/9.0/8.1/7.9 – Command Injection
# Exploit Title: [HP Client - Automation Command Injection]
Maian Weblog 4.0 – Cross-Site Request Forgery (Add New Post)
# Exploit Title : Maian Weblog 4.0 - Cross-Site Request
Spacemarc News – Cross-Site Request Forgery (Add New Post)
# Exploit Title : Spacemarc News - Cross-Site Request
miniblog 1.0.1 – Cross-Site Request Forgery (Add New Post)
# Exploit Title : miniblog 1.0.1 - Cross-Site Request Forgery (Add New Post)
Fitbit Connect Service – Unquoted Service Path Privilege Escalation
Fitbit Connect Service: https://www.fitbit.com/