xibocms 3.3.4 – RCE
# Exploit Title: XiboCMS 3.3.4- Remote Code Execution
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 3
7-Zip 24.00 – Directory Traversal
# Exploit Title: 7-Zip < 25.00 - Directory Traversal to RCE via Malicious ZIP
FortiWeb 8.0.2 – Remote Code Execution
# Exploit Title: FortiWeb 8.0.2 - Remote Code Execution
WordPress Madara – Local File Inclusion
# Exploit Title: WordPress Madara Local File Inclusion
RiteCMS 3.1.0 – Authenticated Remote Code Execution
# Exploit Title: RiteCMS 3.1.0 - Authenticated Remote Code Execution
WBCE CMS 1.6.4 – Remote Code Execution
# Exploit Title: WBCE CMS 1.6.4 - Remote Code Execution
Zhiyuan OA – arbitrary file upload leading
# Exploit Title: Zhiyuan OA - arbitrary file upload leading
Grafana 11.6.0 – SSRF
# Exploit Title: Grafana 11.6.0 - SSRF
ASP.net 8.0.10 – Bypass
# Exploit Title: ASP.net 8.0.10 - Bypass
Desktop Window Manager Core Library 10.0.10240.0 – Privilege Escalation
# Title: Desktop Window Manager Core Library 10.0.10240.0 — Privilege Escalation
Windows Kernel – Elevation of Privilege
# Exploit Title : Windows Kernel - Elevation of Privilege ...
Fortinet FortiWeb v8.0.1 – Auth Bypass
# Titles:Fortinet FortiWeb v8.0.1 - Auth Bypass
is-localhost-ip 2.0.0 – SSRF
# Titles: is-localhost-ip 2.0.0 - SSRF
Boss Mini v1.4.0 – Local File Inclusion (LFI)
# Exploit Title: Boss Mini v1.4.0 - Local File Inclusion (LFI)
WeGIA 3.5.0 – SQL Injection
# Exploit Title: WeGIA 3.5.0 - SQL Injection
Easy File Sharing Web Server v7.2 – Buffer Overflow
# Exploit title: Easy File Sharing Web Server v7.2 - Buffer Overflow
mailcow 2025-01a – Host Header Password Reset Poisoning
# Exploit Title: mailcow 2025-01a - Host Header Password Reset Poisoning
WordPress Backup Migration 1.3.7 – Remote Command Execution
# Exploit Title: WordPress Backup Migration 1.3.7 - Remote Command Execution
glibc 2.38 – Buffer Overflow
# Exploit Title: glibc 2.38 - Buffer Overflow
Windows 10.0.17763.7009 – spoofing vulnerability
# Exploit Title: Windows 10.0.17763.7009 - spoofing vulnerability
motionEye 0.43.1b4 – RCE
# Exploit Title: motionEye 0.43.1b4 - RCE
Docker Desktop 4.44.3 – Unauthenticated API Exposure
# Exploit Title: Docker Desktop 4.44.3 - Unauthenticated API Exposure
FortiWeb Fabric Connector 7.6.x – SQL Injection to Remote Code Execution
# Exploit Title: FortiWeb Fabric Connector 7.6.x - Pre-authentication SQL
aiohttp 3.9.1 – directory traversal PoC
# Exploit Title: Python aiohttp directory traversal PoC (CVE-2024-23334)
Ingress-NGINX Admission Controller v1.11.1 – FD Injection to RCE
# Exploit Title: Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE
OctoPrint 1.11.2 – File Upload
# Exploit Title: OctoPrint 1.11.2 - File Upload
Redis 8.0.2 – RCE
# Exploit Title: Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE
windows 10/11 – NTLM Hash Disclosure Spoofing
# Exploit Title: windows 10/11 - NTLM Hash Disclosure Spoofing
D-Link DIR-825 Rev.B 2.10 – Stack Buffer Overflow (DoS)
# Exploit Title: D-Link DIR-825 Rev.B 2.10 - Stack Buffer Overflow (DoS)
RPi-Jukebox-RFID 2.8.0 – Stored Cross-Site Scripting (XSS)
# Exploit Title: RPi-Jukebox-RFID 2.8.0 - Stored XSS (CVE-2025-10370)
Piranha CMS 12.0 – Stored XSS in Text Block
# Exploit Title: Piranha CMS 12.0 - Stored Cross Site Scripting
Siklu EtherHaul Series EH-8010 – Remote Command Execution
# Exploit Title:Siklu EtherHaul Series EH-8010 - Remote Command Execution
Siklu EtherHaul Series EH-8010 – Arbitrary File Upload
# Exploit Title: Siklu EtherHaul Series - Unauthenticated Arbitrary File Upload
RPi-Jukebox-RFID 2.8.0 – Remote Command Execution
# Exploit Title: RPi-Jukebox-RFID 2.8.0 - Remote Code Execution
FreeBSD rtsold 15.x – Remote Code Execution via DNSSL
# Exploit Title: FreeBSD rtsold 15.x - Remote Code Execution via DNSSL
Chained Quiz 1.3.5 – Unauthenticated Insecure Direct Object Reference via Cookie
# Exploit Title: Chained Quiz 1.3.5 - Unauthenticated Insecure Direct Object Reference via Cookie
WordPress Quiz Maker 6.7.0.56 – SQL Injection
# Exploit Title: WordPress Quiz Maker 6.7.0.56 - SQL Injection
esm-dev 136 – Path Traversal
# Exploit Title: esm-dev 136 - Path Traversal
Summar Employee Portal 3.98.0 – Authenticated SQL Injection
# Exploit Title: Summar Employee Portal 3.98.0 - Authenticated SQL Injection
Pluck 4.7.7-dev2 – PHP Code Execution
# Exploit Title: Pluck 4.7.7-dev2 - PHP Code Execution
openSIS Community Edition 8.0 – SQL Injection
# Exploit Title: openSIS Community Edition 8.0 - SQL Injection
PluckCMS 4.7.10 – Unrestricted File Upload
# Exploit Title: PluckCMS 4.7.10 - Unrestricted File Upload
RosarioSIS 6.7.2 – Cross-Site Scripting (XSS)
# Exploit Title: RosarioSIS 6.7.2 - Cross-Site Scripting (XSS)
RosarioSIS 6.7.2 – Cross Site Scripting (XSS)
# Exploit Title: RosarioSIS 6.7.2 - Cross Site Scripting (XSS)
phpMyAdmin 5.0.0 – SQL Injection
# Exploit Title: phpMyAdmin 5.0.0 - SQL Injection
OpenRepeater 2.1 – OS Command Injection
# Exploit Title: OpenRepeater 2.1 - OS Command Injection
phpIPAM 1.4 – SQL-Injection
# Exploit Title: phpIPAM 1.4 - SQL Injection
MobileDetect 2.8.31 – Cross-Site Scripting (XSS)
# Exploit Title: MobileDetect 2.8.31 - Cross-Site Scripting (XSS)
phpMyFaq 2.9.8 – Cross Site Request Forgery (CSRF)
# Exploit Title: phpMyFaq 2.9.8 - Cross Site Request Forgery (CSRF)
Django 5.1.13 – SQL Injection
# Exploit Title: Django 5.1.13 - SQL Injection