PostgreSQL 9.6.1 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: PostgreSQL 9.6.1 - Remote Code Execution (RCE) (Authenticated)
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 27
Dell EMC Networking PC5500 firmware versions 4.1.0.22 and Cisco Sx / SMB – Information Disclosure
# Exploit Title: Dell EMC Networking PC5500 firmware versions 4.1.0.22 and Cisco Sx / SMB - Information Disclosure
Binwalk v2.3.2 – Remote Command Execution (RCE)
# Exploit Title: Binwalk v2.3.2 - Remote Command Execution (RCE)
Control Web Panel 7 (CWP7) v0.9.8.1147 – Remote Code Execution (RCE)
// Exploit Title: Control Web Panel 7 (CWP7) v0.9.8.1147 - Remote Code Execution (RCE)
Responsive FileManager 9.9.5 – Remote Code Execution (RCE)
# Exploit Title: Responsive FileManager 9.9.5 - Remote Code Execution (RCE)
GNU screen v4.9.0 – Privilege Escalation
# Exploit Title: GNU screen v4.9.0 - Privilege Escalation
itech TrainSmart r1044 – SQL injection
# Exploit Title: itech TrainSmart r1044 - SQL injection
BTCPay Server v1.7.4 – HTML Injection
# Exploit Title: BTCPay Server v1.7.4 - HTML Injection
ERPNext 12.29 – Cross-Site Scripting (XSS)
# Exploit Title: ERPNext 12.29 - Cross-Site Scripting (XSS)
ImageMagick 7.1.0-49 – DoS
## Exploit Title: ImageMagick 7.1.0-49 - DoS
Answerdev 1.0.3 – Account Takeover
# Exploit Title: Answerdev 1.0.3 - Account Takeover
SOUND4 LinkAndShare Transmitter 1.1.2 – Format String Stack Buffer Overflow
# Exploit Title: SOUND4 LinkAndShare Transmitter 1.1.2 - Format String Stack Buffer Overflow
CKEditor 5 35.4.0 – Cross-Site Scripting (XSS)
# Exploit Title: CKEditor 5 35.4.0 - Cross-Site Scripting (XSS)
ImageMagick 7.1.0-49 – Arbitrary File Read
# Exploit Title: ImageMagick 7.1.0-49 - Arbitrary File Read
Apache Tomcat 10.1 – Denial Of Service
# Exploit Title: Apache Tomcat 10.1 - Denial Of Service
Froxlor 2.0.3 Stable – Remote Code Execution (RCE)
#!/usr/bin/python3
Provide Server v.14.4 XSS – CSRF & Remote Code Execution (RCE)
# Exploit Title: Provide Server v.14.4 XSS - CSRF & Remote Code Execution (RCE)
XWorm Trojan 2.1 – Null Pointer Derefernce DoS
#Exploit Author: XWorm Trojan 2.1 - Null Pointer Derefernce DoS
pimCore v5.4.18-skeleton – Sensitive Cookie with Improper SameSite Attribute
## Exploit Title: pimCore v5.4.18-skeleton - Sensitive Cookie with Improper SameSite Attribute
ChiKoi v1.0 – SQL Injection
## Title: ChiKoi-1.0 SQLi
Windows 11 10.0.22000 – Backup service Privilege Escalation
## Title: Windows 11 10.0.22000 - Backup service Privilege Escalation
Metform Elementor Contact Form Builder v3.1.2 – Unauthenticated Stored Cross-Site Scripting (XSS)
# Exploit Title: Metform Elementor Contact Form Builder v3.1.2 - Unauthenticated Stored Cross-Site Scripting (XSS)
Nacos 2.0.3 – Access Control vulnerability
# Exploit Title: Nacos 2.0.3 - Access Control vulnerability
HotKey Clipboard 2.1.0.6 – Privilege Escalation Unquoted Service Path
# Exploit Title: HotKey Clipboard 2.1.0.6 - Privilege Escalation Unquoted Service Path
Zstore 6.5.4 – Reflected Cross-Site Scripting (XSS)
## Exploit Title: Zstore 6.5.4 - Reflected Cross-Site Scripting (XSS)
Solaris 10 libXm – Buffer overflow Local privilege escalation
fprintf(stderr, "usage: %s xserver:display [safe_addr]\n\n",
Chromacam 4.0.3.0 – PsyFrameGrabberService Unquoted Service Path
# Exploit Title: Chromacam 4.0.3.0 - PsyFrameGrabberService Unquoted Service Path
SLIMSV 9.5.2 – Cross-Site Scripting (XSS)
## Exploit Title: SLIMSV 9.5.2 - Cross-Site Scripting (XSS)
Microsoft Exchange Active Directory Topology 15.02.1118.007 – ‘Service MSExchangeADTopology’ Unquoted Service Path
# Exploit Title: Microsoft Exchange Active Directory Topology 15.02.1118.007 - 'Service MSExchangeADTopology' Unquote...
MyBB 1.8.32 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: MyBB 1.8.32 - Chained LFI Remote Code Execution (RCE) (Authenticated)
Art Gallery Management System Project v1.0 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: Art Gallery Management System Project v1.0 - Reflected Cross-Site Scripting (XSS)
Art Gallery Management System Project v1.0 – SQL Injection (cid) Unauthenticated
# Exploit Title: Art Gallery Management System Project v1.0 - SQL Injection (cid) Unauthenticated
Art Gallery Management System Project v1.0 – SQL Injection (editid) authenticated
# Exploit Title: Art Gallery Management System Project v1.0 - SQL Injection (editid) authenticated
sudo 1.8.0 to 1.9.12p1 – Privilege Escalation
#!/usr/bin/env bash
SQL Monitor 12.1.31.893 – Cross-Site Scripting (XSS)
# Exploit Title: SQL Monitor 12.1.31.893 - Cross-Site Scripting (XSS)
AmazCart CMS 3.4 – Cross-Site-Scripting (XSS)
# Exploit Title: AmazCart CMS 3.4 - Cross-Site-Scripting (XSS)
ERPGo SaaS 3.9 – CSV Injection
# Exploit Title: ERPGo SaaS 3.9 - CSV Injection
Active eCommerce CMS 6.5.0 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Active eCommerce CMS 6.5.0 - Stored Cross-Site Scripting (XSS)
ManageEngin AMP 4.3.0 – File-path-traversal
## Exploit Title: ManageEngine Access Manager Plus 4.3.0 - File-path-traversal
Grand Theft Auto III/Vice City Skin File v1.1 – Buffer Overflow
# Exploit Title: Grand Theft Auto III/Vice City Skin File v1.1 - Buffer Overflow
sleuthkit 4.11.1 – Command Injection
# Exploit Title: sleuthkit 4.11.1 - Command Injection
Roxy WI v6.1.0.0 – Improper Authentication Control
# Exploit Title: Roxy WI v6.1.0.0 - Improper Authentication Control
Roxy WI v6.1.0.0 – Unauthenticated Remote Code Execution (RCE)
# ADVISORY INFORMATION
Roxy WI v6.1.1.0 – Unauthenticated Remote Code Execution (RCE) via ssl_cert Upload
# ADVISORY INFORMATION
GLPI 4.0.2 – Unauthenticated Local File Inclusion on Manageentities plugin
# ADVISORY INFORMATION
GLPI Glpiinventory v1.0.1 – Unauthenticated Local File Inclusion
# ADVISORY INFORMATION
GLPI Activity v3.1.0 – Authenticated Local File Inclusion on Activity plugin
# Exploit Title: GLPI Activity v3.1.0 - Authenticated Local File Inclusion on Activity plugin
GLPI v10.0.2 – SQL Injection (Authentication Depends on Configuration)
# ADVISORY INFORMATION
GLPI Cartography Plugin v6.0.0 – Unauthenticated Remote Code Execution (RCE)
# Exploit Title: GLPI Cartography Plugin v6.0.0 - Unauthenticated Remote Code Execution (RCE)