LDAP Tool Box Self Service Password v1.5.2 – Account takeover
# Exploit Title: LDAP Tool Box Self Service Password v1.5.2 - Account takeover
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 26
modoboa 2.0.4 – Admin TakeOver
# Description: Authentication Bypass by Primary Weakness
POLR URL 2.3.0 – Shortener Admin Takeover
# Exploit Title: POLR URL 2.3.0 - Shortener Admin Takeover
Kimai-1.30.10 – SameSite Cookie-Vulnerability session hijacking
## Exploit Title: Kimai-1.30.10 - SameSite Cookie-Vulnerability session hijacking
Best pos Management System v1.0 – SQL Injection
# Exploit Title: Best pos Management System v1.0 - SQL Injection
Best pos Management System v1.0 – Remote Code Execution (RCE) on File Upload
# Exploit Title: Best pos Management System v1.0 - Remote Code Execution (RCE) on File Upload
Auto Dealer Management System 1.0 – Broken Access Control Exploit
# Exploit Title: Auto Dealer Management System 1.0 - Broken Access Control Exploit
Auto Dealer Management System v1.0 – SQL Injection
# Exploit Title: Auto Dealer Management System v1.0 - SQL Injection
Auto Dealer Management System v1.0 – SQL Injection in sell_vehicle.php
# Exploit Title: Auto Dealer Management System v1.0 - SQL Injection in sell_vehicle.php
Auto Dealer Management System v1.0 – SQL Injection on manage_user.php
# Exploit Title: Auto Dealer Management System v1.0 - SQL Injection on manage_user.php
Employee Task Management System v1.0 – Broken Authentication
# Exploit Title: Employee Task Management System v1.0 - Broken Authentication
Employee Task Management System v1.0 – SQL Injection on (task-details.php?task_id=?)
# Exploit Title: Employee Task Management System v1.0 - SQL Injection on (task-details.php?task_id=?)
Employee Task Management System v1.0 – SQL Injection on edit-task.php
# Exploit Title: Employee Task Management System v1.0 - SQL Injection on edit-task.php
Music Gallery Site v1.0 – SQL Injection on music_list.php
# Exploit Title: Music Gallery Site v1.0 - SQL Injection on music_list.php
Music Gallery Site v1.0 – Broken Access Control
# Exploit Title: Music Gallery Site v1.0 - Broken Access Control
Music Gallery Site v1.0 – SQL Injection on page view_music_details.php
# Exploit Title: Music Gallery Site v1.0 - SQL Injection on page view_music_details.php
Music Gallery Site v1.0 – SQL Injection on page Master.php
# Exploit Title: Music Gallery Site v1.0 - SQL Injection on page Master.php
Simple Food Ordering System v1.0 – Cross-Site Scripting (XSS)
# Exploit Title: Simple Food Ordering System v1.0 - Cross-Site Scripting (XSS)
pdfkit v0.8.7.2 – Command Injection
#!/usr/bin/env python3
ABUS Security Camera TVIP 20000-21150 – LFI, RCE and SSH Root Access
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
flatnux 2021-03.25 – Remote Code Execution (Authenticated)
# Exploit Title: flatnux-2021-03.25 - Remote Code Execution (Authenticated)
ChurchCRM v4.5.3-121fcc1 – SQL Injection
## Exploit Title: ChurchCRM v4.5.3-121fcc1 - SQL Injection
Osprey Pump Controller 1.0.1 – Predictable Session Token / Session Hijack
# Exploit Title: Osprey Pump Controller 1.0.1 - Predictable Session Token / Session Hijack
Osprey Pump Controller 1.0.1 – Unauthenticated File Disclosure
# Exploit Title: Osprey Pump Controller 1.0.1 - Unauthenticated File Disclosure
Osprey Pump Controller 1.0.1 – Administrator Backdoor Access
# Exploit Title: Osprey Pump Controller 1.0.1 - Administrator Backdoor Access
Osprey Pump Controller 1.0.1 – (pseudonym) Semi-blind Command Injection
# Exploit Title: Osprey Pump Controller 1.0.1 - (pseudonym) Semi-blind Command Injection
Osprey Pump Controller 1.0.1 – (userName) Blind Command Injection
# Exploit Title: Osprey Pump Controller 1.0.1 - (userName) Blind Command Injection
Osprey Pump Controller v1.0.1 – Unauthenticated Reflected XSS
# Exploit Title: Osprey Pump Controller v1.0.1 - Unauthenticated Reflected XSS
Osprey Pump Controller 1.0.1 – Authentication Bypass Credentials Modification
#!/usr/bin/env python
Osprey Pump Controller 1.0.1 – Cross-Site Request Forgery
CSRF Add User:
Osprey Pump Controller 1.0.1 – Unauthenticated Remote Code Execution Exploit
#!/usr/bin/env python
Osprey Pump Controller 1.0.1 – (eventFileSelected) Command Injection
# Exploit Title: Osprey Pump Controller 1.0.1 - (eventFileSelected) Command Injection
Agilebio Lab Collector Electronic Lab Notebook v4.234 – Remote Code Execution (RCE)
# Exploit Title: Agilebio Lab Collector Electronic Lab Notebook v4.234 - Remote Code Execution (RCE)
Mitel MiCollab AWV 8.1.2.4 and 9.1.3 – Directory Traversal and LFI
# Exploit Title: Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversal and LFI
Unified Remote 3.13.0 – Remote Code Execution (RCE)
# Exploit Title: Unified Remote 3.13.0 - Remote Code Execution (RCE)
HospitalRun 1.0.0-beta – Local Root Exploit for macOS
# Exploit Title: HospitalRun 1.0.0-beta - Local Root Exploit for macOS
WIMAX SWC-5100W Firmware V(1.11.0.1 :1.9.9.4) – Authenticated RCE
# Exploit Title: WIMAX SWC-5100W Firmware V(1.11.0.1 :1.9.9.4) - Authenticated RCE
Purchase Order Management-1.0 – Local File Inclusion
## Title: Purchase Order Management-1.0 - Local File Inclusion
craftercms 4.x.x – CORS
## Exploit Title: craftercms 4.x.x - CORS
PhotoShow 3.0 – Remote Code Execution
# Exploit Title: PhotoShow 3.0 - Remote Code Execution
Secure Web Gateway 10.2.11 – Cross-Site Scripting (XSS)
Exploit Title: Secure Web Gateway 10.2.11 - Cross-Site Scripting (XSS)
projectSend r1605 – Remote Code Exectution RCE
Exploit Title: projectSend r1605 - Remote Code Exectution RCE
Kardex Mlog MCC 5.7.12 – RCE (Remote Code Execution)
#!/usr/bin/env python3
zstore 6.6.0 – Cross-Site Scripting (XSS)
## Exploit Title: zstore 6.6.0 - Cross-Site Scripting (XSS)
Calendar Event Multi View 1.4.07 – Unauthenticated Arbitrary Event Creation to Cross-Site Scripting (XSS)
# Exploit Title: Calendar Event Multi View 1.4.07 - Unauthenticated Arbitrary Event Creation to Cross-Site Scripting...
Bus Pass Management System 1.0 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Bus Pass Management System 1.0 - Stored Cross-Site Scripting (XSS)
D-Link DIR-846 – Remote Command Execution (RCE) vulnerability
# Exploit Title: D-Link DIR-846 - Remote Command Execution (RCE) vulnerability
Liferay Portal 6.2.5 – Insecure Permissions
# Exploit Title: Liferay Portal 6.2.5 - Insecure Permissions
bgERP v22.31 (Orlovets) – Cookie Session vulnerability & Cross-Site Scripting (XSS)
## Title: bgERP v22.31 (Orlovets) - Cookie Session vulnerability & Cross-Site Scripting (XSS)
Online Eyewear Shop 1.0 – SQL Injection (Unauthenticated)
# Exploit Title: Online Eyewear Shop 1.0 - SQL Injection (Unauthenticated)