Online Computer and Laptop Store 1.0 – Remote Code Execution (RCE)
#!/usr/bin/env python3
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 25
Microsoft Edge (Chromium-based) Webview2 1.0.1661.34 – Spoofing
## Title: Microsoft-Edge-(Chromium-based)-Webview2-1.0.1661.34-Spoofing-Vulnerability
Altenergy Power Control Software C1.2.5 – OS command injection
# Exploit Title: Altenergy Power Control Software C1.2.5 - OS command injection
FortiRecorder 6.4.3 – Denial of Service
# Exploit Title: FortiRecorder 6.4.3 - Denial of Service
Adobe Connect 11.4.5 – Local File Disclosure
# Title: Adobe Connect 11.4.5 - Local File Disclosure
Microsoft Excel 365 MSO (Version 2302 Build 16.0.16130.20186) 64-bit – Remote Code Execution (RCE)
## Exploit Title: Microsoft Excel 365 MSO (Version 2302 Build 16.0.16130.20186) 64-bit - Remote Code Execution (RCE)
Icinga Web 2.10 – Arbitrary File Disclosure
#!/usr/bin/env python3
Restaurant Management System 1.0 – SQL Injection
# Exploit Title: Restaurant Management System 1.0 - SQL Injection
Google Chrome 109.0.5414.74 – Code Execution via missing lib file (Ubuntu)
#Exploit Title: Google Chrome 109.0.5414.74 - Code Execution via missing lib file (Ubuntu)
ActFax 10.10 – Unquoted Path Services
# Exploit Title: ActFax 10.10 - Unquoted Path Services
Lucee Scheduled Job v1.0 – Command Execution
# Exploit Title: Lucee Scheduled Job v1.0 - Command Execution
Joomla! v4.2.8 – Unauthenticated information disclosure
#!/usr/bin/env ruby
ENTAB ERP 1.0 – Username PII leak
Exploit Title: ENTAB ERP 1.0 - Username PII leak
RSA NetWitness Platform 12.2 – Incorrect Access Control / Code Execution
# Exploit Title: RSA NetWitness Platform 12.2 - Incorrect Access Control / Code Execution
Online Appointment System V1.0 – Cross-Site Scripting (XSS)
# Exploit Title: Online Appointment System V1.0 - Cross-Site Scripting (XSS)
Medicine Tracker System v1.0 – Sql Injection
# Exploit Title: Medicine Tracker System v1.0 - Sql Injection
Goanywhere Encryption helper 7.1.1 – Remote Code Execution (RCE)
// Exploit Title: Goanywhere Encryption helper 7.1.1 - Remote Code Execution (RCE)
Suprema BioStar 2 v2.8.16 – SQL Injection
# Exploit Title: Suprema BioStar 2 v2.8.16 - SQL Injection
Stonesoft VPN Client 6.2.0 / 6.8.0 – Local Privilege Escalation
# Exploit Title: Stonesoft VPN Client 6.2.0 / 6.8.0 - Local Privilege Escalation
Symantec Messaging Gateway 10.7.4 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Symantec Messaging Gateway 10.7.4 - Stored Cross-Site Scripting (XSS)
Palo Alto Cortex XSOAR 6.5.0 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Palo Alto Cortex XSOAR 6.5.0 - Stored Cross-Site Scripting (XSS)
Online-Pizza-Ordering -1.0 – Remote Code Execution (RCE)
## Exploit Title: Online-Pizza-Ordering -1.0 - Remote Code Execution (RCE)
X2CRM v6.6/6.9 – Stored Cross-Site Scripting (XSS) (Authenticated)
# Exploit Title: X2CRM v6.6/6.9 - Stored Cross-Site Scripting (XSS) (Authenticated)
X2CRM v6.6/6.9 – Reflected Cross-Site Scripting (XSS) (Authenticated)
# Exploit Title: X2CRM v6.6/6.9 - Reflected Cross-Site Scripting (XSS) (Authenticated)
ZCBS/ZBBS/ZPBS v4.14k – Reflected Cross-Site Scripting (XSS)
# Exploit Title: ZCBS/ZBBS/ZPBS v4.14k - Reflected Cross-Site Scripting (XSS)
WebsiteBaker v2.13.3 – Cross-Site Scripting (XSS)
Exploit Title: WebsiteBaker v2.13.3 - Cross-Site Scripting (XSS)
Pentaho BA Server EE 9.3.0.0-428 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: Pentaho BA Server EE 9.3.0.0-428 - Remote Code Execution (RCE) (Unauthenticated)
ESET Service 16.0.26.0 – ‘Service ekrn’ Unquoted Service Path
# Exploit Title: ESET Service 16.0.26.0 - 'Service ekrn' Unquoted Service Path
pfsenseCE v2.6.0 – Anti-brute force protection bypass
#!/usr/bin/python3
dotclear 2.25.3 – Remote Code Execution (RCE) (Authenticated)
Exploit Title: dotclear 2.25.3 - Remote Code Execution (RCE) (Authenticated)
Docker based datastores for IBM Instana 241-2 243-0 – No Authentication
# Exploit Title: Docker based datastores for IBM Instana 241-2 243-0 - No Authentication
MAC 1200R – Directory Traversal
# Exploit Title: MAC 1200R - Directory Traversal
IBM Aspera Faspex 4.4.1 – YAML deserialization (RCE)
# Exploit Title: IBM Aspera Faspex 4.4.1 - YAML deserialization (RCE)
Tenda N300 F3 12.01.01.48 – Malformed HTTP Request Header Processing
#!/usr/bin/python3
NotrinosERP 0.7 – Authenticated Blind SQL Injection
# Exploit Title: NotrinosERP 0.7 - Authenticated Blind SQL Injection
ChurchCRM 4.5.1 – Authenticated SQL Injection
# Exploit Title: ChurchCRM 4.5.1 - Authenticated SQL Injection
Schneider Electric v1.0 – Directory traversal & Broken Authentication
# Exploit Title: Schneider Electric v1.0 - Directory traversal & Broken Authentication
Franklin Fueling Systems TS-550 – Exploit and Default Password
# Exploit Title: Franklin Fueling Systems TS-550 - Exploit and Default Password
Rukovoditel 3.3.1 – Remote Code Execution (RCE)
Exploit Title: Rukovoditel 3.3.1 - Remote Code Execution (RCE)
Snitz Forum v1.0 – Blind SQL Injection
# Exploit Title: Snitz Forum v1.0 - Blind SQL Injection
Wondershare Dr Fone 12.9.6 – Privilege Escalation
# Exploit Title: Wondershare Dr Fone 12.9.6 - Privilege Escalation
EasyNas 1.1.0 – OS Command Injection
# Exploit Title: EasyNas 1.1.0 - OS Command Injection
FileZilla Client 3.63.1 – ‘TextShaping.dl’ DLL Hijacking
#---------------------------------------------------------
TitanFTP 2.0.1.2102 – Path traversal to Remote Code Execution (RCE)
# Exploit Title: TitanFTP 2.0.1.2102 - Path traversal to Remote Code Execution (RCE)
Arris Router Firmware 9.1.103 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Arris Router Firmware 9.1.103 - Remote Code Execution (RCE) (Authenticated)
Dompdf 1.2.1 – Remote Code Execution (RCE)
#!/usr/bin/python3
atrocore 1.5.25 User interaction – Unauthenticated File upload – RCE
## Exploit Title: atrocore 1.5.25 User interaction - Unauthenticated File upload - RCE
Art Gallery Management System Project in PHP v 1.0 – SQL injection
# Exploit Title: Art Gallery Management System Project in PHP v 1.0 - SQL injection
Simple Task Managing System v1.0 – SQL Injection (Unauthenticated)
# Exploit Title: Simple Task Managing System v1.0 - SQL Injection (Unauthenticated)
Intern Record System v1.0 – SQL Injection (Unauthenticated)
# Exploit Title: Intern Record System v1.0 - SQL Injection (Unauthenticated)