Paid Memberships Pro v2.9.8 (WordPress Plugin) – Unauthenticated SQL Injection
#!/usr/bin/env python
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 28
GeoVision Camera GV-ADR2701 – Authentication Bypass
# Exploit Title: GeoVision Camera GV-ADR2701 - Authentication Bypass
Enlightenment v0.25.3 – Privilege escalation
## Exploit Title: Enlightenment v0.25.3 - Privilege escalation
GitLab v15.3 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: GitLab v15.3 - Remote Code Execution (RCE) (Authenticated)
Splashtop 8.71.12001.0 – Unquoted Service Path
# Exploit Title: Splashtop 8.71.12001.0 - Unquoted Service Path
AD Manager Plus 7122 – Remote Code Execution (RCE)
# Exploit Title: AD Manager Plus 7122 - Remote Code Execution (RCE)
XCMS v1.83 – Remote Command Execution (RCE)
Exploit Title: XCMS v1.83 - Remote Command Execution (RCE)
Prizm Content Connect v10.5.1030.8315 – XXE
# Exploit Title: Prizm Content Connect v10.5.1030.8315 - XXE
perfSONAR v4.4.5 – Partial Blind CSRF
Exploit Title: perfSONAR v4.4.5 - Partial Blind CSRF
SugarCRM 12.2.0 – Remote Code Execution (RCE)
#!/usr/bin/env python
Reprise Software RLM v14.2BL4 – Cross-Site Scripting (XSS)
# Exploit Title: Reprise Software RLM v14.2BL4 - Cross-Site Scripting (XSS)
Hughes Satellite Router HX200 v8.3.1.14 – Remote File Inclusion
Exploit Title: Hughes Satellite Router HX200 v8.3.1.14 - Remote File Inclusion
Apache 2.4.x – Buffer Overflow
# Exploit Title: Apache 2.4.x - Buffer Overflow
Centos Web Panel 7 v0.9.8.1147 – Unauthenticated Remote Code Execution (RCE)
[+] Exploit Title: Centos Web Panel 7 v0.9.8.1147 - Unauthenticated Remote Code Execution (RCE)
Nexxt Router Firmware 42.103.1.5095 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Nexxt Router Firmware 42.103.1.5095 - Remote Code Executio=
AimOne Video Converter V2.04 Build 103 – Buffer Overflow (DoS)
## Title: AimOne Video Converter V2.04 Build 103 - Buffer Overflow (DoS)
PMB 7.4.6 – SQL Injection
# Exploit Title: PMB 7.4.6 - SQL Injection
Yahoo User Interface library (YUI2) TreeView v2.8.2 – Multiple Reflected Cross Site Scripting (XSS)
# Exploit Title: Yahoo User Interface library (YUI2) TreeView v2.8.2 - Multiple Reflected Cross Site Scripting (XSS)
NetIQ/Microfocus Performance Endpoint v5.1 – remote root/SYSTEM exploit
# Exploit Title: NetIQ/Microfocus Performance Endpoint v5.1 - remote root/SYSTEM exploit
ELSI Smart Floor V3.3.3 – Stored Cross-Site Scripting (XSS)
# Exploit Title: ELSI Smart Floor V3.3.3 - Stored Cross-Site Scripting (XSS)
EQ Enterprise management system v2.2.0 – SQL Injection
Exploit Title: EQ Enterprise management system v2.2.0 - SQL Injection
ASKEY RTF3505VW-N1 – Privilege Escalation
# Exploit Title: ASKEY RTF3505VW-N1 - Privilege escalation
WooCommerce v7.1.0 – Remote Code Execution(RCE)
# Title: Wordpress Plugin WooCommerce v7.1.0 - Remote Code Execution(RCE)
qubes-mirage-firewall v0.8.3 – Denial Of Service (DoS)
# Exploit Title: qubes-mirage-firewall v0.8.3 - Denial Of Service (DoS)
ProLink PRS1841 PLDT Home fiber – Default Password
# Exploit Title: Router backdoor - ProLink PRS1841 PLDT Home fiber
CoolerMaster MasterPlus 1.8.5 – ‘MPService’ Unquoted Service Path
# Exploit Title: CoolerMaster MasterPlus 1.8.5 - 'MPService' Unquoted Service Path
Bludit 3-14-1 Plugin ‘UploadPlugin’ – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Bludit 3-14-1 Plugin 'UploadPlugin' - Remote Code Execution (RCE) (Authenticated)
Senayan Library Management System v9.0.0 – SQL Injection
## Exploit Title: Senayan Library Management System v9.0.0 - SQL Injection
Spitfire CMS 1.0.475 – PHP Object Injection
# Exploit Title: Spitfire CMS 1.0.475 - PHP Object Injection
rconfig 3.9.7 – Sql Injection (Authenticated)
# Exploit Title: rconfig 3.9.7 - Sql Injection (Authenticated)
Judging Management System v1.0 – Remote Code Execution (RCE)
# Exploit Title: Judging Management System v1.0 - Remote Code Execution (RCE)
Judging Management System v1.0 – Authentication Bypass
# Exploit Title: Judging Management System v1.0 - Authentication Bypass
Cacti v1.2.22 – Remote Command Execution (RCE)
# Exploit Title: Cacti v1.2.22 - Remote Command Execution (RCE)
SOUND4 Server Service 4.1.102 – Local Privilege Escalation
# Exploit Title: SOUND4 Server Service 4.1.102 - Local Privilege Escalation
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Cross-Site Request Forgery
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Cross-Site Request Forgery
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Authorization Bypass (IDOR)
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Authorization Bypass (IDOR)
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Denial Of Service (DoS)
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Denial Of Service (DoS)
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Authentication Bypass
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Authentication Bypass
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Directory Traversal File Write Exploit
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Directory Traversal File Write Exploit
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Remote Command Execution (RCE)
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Remote Command Execution (RCE)
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Unauthenticated Factory Reset
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Unauthenticated Factory Reset
Bangresto 1.0 – SQL Injection
## Exploit Title: Bangresto 1.0 - SQL Injection
Textpattern 4.8.8 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Textpattern 4.8.8 - Remote Code Execution (RCE) (Authenticated)
Dreamer CMS v4.0.0 – SQL Injection
# Exploit Title: Dreamer CMS v4.0.0 - SQL Injection
ClicShopping v3.402 – Cross-Site Scripting (XSS)
## Title: ClicShopping v3.402 - Cross-Site Scripting (XSS)
myBB forums 1.8.26 – Stored Cross-Site Scripting (XSS)
# Exploit Title: myBB forums 1.8.26 - Stored Cross-Site Scripting (XSS)
Router ZTE-H108NS – Stack Buffer Overflow (DoS)
# Exploit Title: ZTE-H108NS - Stack Buffer Overflow (DoS)
Router ZTE-H108NS – Authentication Bypass
# Exploit Title: Router ZTE-H108NS - Authentication Bypass
Boa Web Server v0.94.14 – Authentication Bypass
# Exploit Title: Boa Web Server v0.94.14 - Authentication Bypass