SimpleMachinesForum v2.1.1 – Authenticated Remote Code Execution
# Exploit Title: SimpleMachinesForum v2.1.1 - Authenticated Remote Code Execution
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 31
Abantecart v1.3.2 – Authenticated Remote Code Execution
# Exploit Title: Abantecart v1.3.2 - Authenticated Remote Code Execution
MODX Revolution v2.8.3-pl – Authenticated Remote Code Execution
# Exploit Title: MODX Revolution v2.8.3-pl - Authenticated Remote Code Execution
Composr-CMS Version <=10.0.39 - Authenticated Remote Code Execution
# Exploit Title: Composr-CMS Version Commandr
PHPGurukul Online Birth Certificate System V 1.2 – Blind XSS
Exploit Title: PHPGurukul Online Birth Certificate System V 1.2 - Blind XSS
Owlfiles File Manager 12.0.1 – Multiple Vulnerabilities
# Exploit Title: Owlfiles File Manager 12.0.1 - Multiple Vulnerabilities
MAN-EAM-0003 V3.2.4 – XXE
# Exploit Title: MAN-EAM-0003 V3.2.4 - XXE
WorkOrder CMS 0.1.0 – SQL Injection
# Exploit Title: WorkOrder CMS 0.1.0 - SQL Injection
wkhtmltopdf 0.12.6 – Server Side Request Forgery
# Exploit Title: wkhtmltopdf 0.12.6 - Server Side Request Forgery
Bitbucket v7.0.0 – RCE
# Exploit Title: Bitbucket v7.0.0 - RCE
VIAVIWEB Wallpaper Admin 1.0 – Multiple Vulnerabilities
# Exploit Title: VIAVIWEB Wallpaper Admin 1.0 - Multiple Vulnerabilities
SoX 14.4.2 – Denial Of Service
# Exploit Title: SoX 14.4.2 - Denial Of Service
Linksys AX3200 V1.1.00 – Command Injection
# Exploit Title: Linksys AX3200 V1.1.00 - Command Injection
pfBlockerNG 2.1.4_26 – Remote Code Execution (RCE)
# Exploit Title: pfBlockerNG 2.1.4_26 - Remote Code Execution (RCE)
Open Web Analytics 1.7.3 – Remote Code Execution
# Exploit Title: Open Web Analytics 1.7.3 - Remote Code Execution (RCE)
MSNSwitch Firmware MNT.2408 – Remote Code Execution
Exploit Title: MSNSwitch Firmware MNT.2408 - Remote Code Exectuion (RCE)
AVEVA InTouch Access Anywhere Secure Gateway 2020 R2 – Path Traversal
Exploit Title: AVEVA InTouch Access Anywhere Secure Gateway 2020 R2 - Path Traversal
IOTransfer V4 – Unquoted Service Path
# Exploit Title: IOTransfer V4 - Unquoted Service Path
CVAT 2.0 – Server Side Request Forgery
#Exploit Title: CVAT 2.0 - SSRF (Server Side Request Forgery)
SmartRG Router SR510n 2.6.13 – Remote Code Execution
# Exploit Title: SmartRG Router SR510n 2.6.13 - RCE (Remote Code Execution)
WordPress Plugin ImageMagick-Engine 1.7.4 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Wordpress Plugin ImageMagick-Engine 1.7.4 - Remote Code Execution (RCE) (Authenticated)
WordPress Plugin Zephyr Project Manager 3.2.42 – Multiple SQLi
# Exploit Title: Wordpress Plugin Zephyr Project Manager 3.2.42 - Multiple SQLi
TP-Link Tapo c200 1.1.15 – Remote Code Execution (RCE)
# Exploit Title: TP-Link Tapo c200 1.1.15 - Remote Code Execution (RCE)
Feehi CMS 2.1.1 – Remote Code Execution (Authenticated)
# Exploit Title: Feehi CMS 2.1.1 - Remote Code Execution (RCE) (Authenticated)
Teleport v10.1.1 – Remote Code Execution (RCE)
# Exploit Title: Teleport v10.1.1 - Remote Code Execution (RCE)
WordPress Plugin WP-UserOnline 2.88.0 – Stored Cross Site Scripting (XSS)
# Exploit Title: Wordpress Plugin WP-UserOnline 2.88.0 - Stored Cross Site Scripting (XSS)
WordPress Plugin 3dady real-time web stats 1.0 – Stored Cross Site Scripting (XSS)
# Exploit Title: Wordpress Plugin 3dady real-time web stats 1.0 - Stored Cross Site Scripting (XSS)
Aero CMS v0.0.1 – SQLi
# Title: Aero CMS v0.0.1 - SQLi
Testa 3.5.1 Online Test Management System – Reflected Cross-Site Scripting (XSS)
# Exploit Title: Testa 3.5.1 Online Test Management System - Reflected Cross-Site Scripting (XSS)
Wifi HD Wireless Disk Drive 11 – Local File Inclusion
# Exploit Title: Wifi HD Wireless Disk Drive 11 - Local File Inclusion
WiFiMouse 1.8.3.4 – Remote Code Execution (RCE)
# Exploit Title: WiFiMouse 1.8.3.4 - Remote Code Execution (RCE)
Mobile Mouse 3.6.0.4 – Remote Code Execution (RCE)
# Exploit Title: Mobile Mouse 3.6.0.4 - Remote Code Execution (RCE)
Airspan AirSpot 5410 version 0.3.4.1 – Remote Code Execution (RCE)
# Exploit Title: Airspan AirSpot 5410 version 0.3.4.1 - Remote Code Execution (RCE)
Buffalo TeraStation Network Attached Storage (NAS) 1.66 – Authentication Bypass
# Exploit Title: Buffalo TeraStation Network Attached Storage (NAS) 1.66 - Authentication Bypass
Bookwyrm v0.4.3 – Authentication Bypass
# Exploit Title: Bookwyrm v0.4.3 - Authentication Bypass
Blink1Control2 2.2.7 – Weak Password Encryption
// Exploit Title: Blink1Control2 2.2.7 - Weak Password Encryption
Gitea 1.16.6 – Remote Code Execution (RCE) (Metasploit)
# Exploit Title: Gitea Git Fetch Remote Code Execution
Sophos XG115w Firewall 17.0.10 MR-10 – Authentication Bypass
# Exploit Title: Sophos XG115w Firewall 17.0.10 MR-10 - Authentication Bypass
WordPress Plugin Testimonial Slider and Showcase 2.2.6 – Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Testimonial Slider and Showcase 2.2.6 - Stored Cross-Site Scripting (XSS)
WordPress Plugin Netroics Blog Posts Grid 1.0 – Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Netroics Blog Posts Grid 1.0 - Stored Cross-Site Scripting (XSS)
Prestashop blockwishlist module 2.1.0 – SQLi
# Exploit Title: Prestashop blockwishlist module 2.1.0 - SQLi
Feehi CMS 2.1.1 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Feehi CMS 2.1.1 - Stored Cross-Site Scripting (XSS)
ThingsBoard 3.3.1 ‘name’ – Stored Cross-Site Scripting (XSS)
# Exploit Title: ThingsBoard 3.3.1 'name' - Stored Cross-Site Scripting (XSS)
ThingsBoard 3.3.1 ‘description’ – Stored Cross-Site Scripting (XSS)
# Exploit Title: ThingsBoard 3.3.1 'description' - Stored Cross-Site Scripting (XSS)
PAN-OS 10.0 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: PAN-OS 10.0 - Remote Code Execution (RCE) (Authenticated)
uftpd 2.10 – Directory Traversal (Authenticated)
# Exploit Title: uftpd 2.10 - Directory Traversal (Authenticated)
Wavlink WN533A8 – Cross-Site Scripting (XSS)
# Exploit Title: Wavlink WN533A8 - Cross-Site Scripting (XSS)
Wavlink WN533A8 – Password Disclosure
# Exploit Title: Wavlink WN533A8 - Password Disclosure
Wavlink WN530HG4 – Password Disclosure
# Exploit Title: Wavlink WN530HG4 - Password Disclosure
WordPress Plugin Duplicator 1.4.6 – Unauthenticated Backup Download
# Exploit Title: WordPress Plugin Duplicator 1.4.6 - Unauthenticated Backup Download