WordPress Plugin Duplicator 1.4.7 – Information Disclosure
# Exploit Title: WordPress Plugin Duplicator 1.4.7 - Information Disclosure
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 32
CuteEditor for PHP 6.6 – Directory Traversal
# Exploit Title: CuteEditor for PHP 6.6 - Directory Traversal
mPDF 7.0 – Local File Inclusion
# Exploit Title: mPDF 7.0 - Local File Inclusion
Omnia MPX 1.5.0+r1 – Path Traversal
# Exploit Title: Omnia MPX 1.5.0+r1 - Path Traversal
NanoCMS v0.4 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: NanoCMS v0.4 - Remote Code Execution (RCE) (Authenticated)
Webmin 1.996 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Webmin 1.996 - Remote Code Execution (RCE) (Authenticated)
Easy Chat Server 3.1 – Remote Stack Buffer Overflow (SEH)
# Exploit Title: Easy Chat Server 3.1 - Remote Stack Buffer Overflow (SEH)
Geonetwork 4.2.0 – XML External Entity (XXE)
# Exploit Title: Geonetwork 4.2.0 - XML External Entity (XXE)
rpc.py 0.6.0 – Remote Code Execution (RCE)
# Exploit Title: rpc.py 0.6.0 - Remote Code Execution (RCE)
Dingtian-DT-R002 3.1.276A – Authentication Bypass
# Exploit Title: Dingtian-DT-R002 3.1.276A - Authentication Bypass
Asus GameSDK v1.0.0.4 – ‘GameSDK.exe’ Unquoted Service Path
# Exploit Title: Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path
Carel pCOWeb HVAC BACnet Gateway 2.1.0 – Directory Traversal
# Exploit Title: Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Directory Traversal
Schneider Electric SpaceLogic C-Bus Home Controller (5200WHC2) – Remote Code Execution
# Exploit Title: Schneider Electric SpaceLogic C-Bus Home Controller (5200WHC2) - Remote Code Execution
WordPress Plugin WP-UserOnline 2.87.6 – Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin WP-UserOnline 2.87.6 - Stored Cross-Site Scripting (XSS)
WordPress Plugin Visual Slide Box Builder 3.2.9 – SQLi
# Title: WordPress Plugin Visual Slide Box Builder 3.2.9 - SQLi
IOTransfer 4.0 – Remote Code Execution (RCE)
# Exploit Title: IOTransfer V4 – Remote Code Execution (RCE)
Kite 1.2021.610.0 – Unquoted Service Path
# Exploit Title: Kite 1.2021.610.0 - Unquoted Service Path
Magnolia CMS 6.2.19 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Magnolia CMS 6.2.19 - Stored Cross-Site Scripting (XSS)
Dr. Fone 4.0.8 – ‘net_updater32.exe’ Unquoted Service Path
# Exploit Title: Dr. Fone v4.0.8- 'net_updater32.exe' Unquoted Service Path
CodoForum v5.1 – Remote Code Execution (RCE)
# Exploit Title: CodoForum v5.1 - Remote Code Execution (RCE)
OctoBot WebInterface 0.4.3 – Remote Code Execution (RCE)
# Exploit Title: OctoBot WebInterface 0.4.3 - Remote Code Execution (RCE)
Nginx 1.20.0 – Denial of Service (DOS)
# Exploit Title: Nginx 1.20.0 - Denial of Service (DOS)
WiFi Mouse 1.7.8.5 – Remote Code Execution(v2)
# Exploit Title: WiFi Mouse 1.7.8.5 - Remote Code Execution
WordPress Plugin Weblizar 8.9 – Backdoor
# Exploit Title: WordPress Plugin Weblizar 8.9 - Backdoor
WSO2 Management Console (Multiple Products) – Unauthenticated Reflected Cross-Site Scripting (XSS)
# Exploit Title: WSO2 Management Console (Multiple Products) - Unauthenticated Reflected Cross-Site Scripting (XSS)
Mailhog 1.0.1 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Mailhog 1.0.1 - Stored Cross-Site Scripting (XSS)
Real Player v.20.0.8.310 G2 Control – ‘DoGoToURL()’ Remote Code Execution (RCE)
# Exploit Title: Real Player v.20.0.8.310 G2 Control - 'DoGoToURL()' Remote Code Execution (RCE)
Real Player 16.0.3.51 – ‘external::Import()’ Directory Traversal to Remote Code Execution (RCE)
# Exploit Title: Real Player 16.0.3.51 - 'external::Import()' Directory Traversal to Remote Code Execution (RCE)
Avantune Genialcloud ProJ 10 – Cross-Site Scripting (XSS)
# Exploit Title: Avantune Genialcloud ProJ 10 - Cross-Site Scripting (XSS)
Marval MSM v14.19.0.12476 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Marval MSM v14.19.0.12476 - Remote Code Execution (RCE) (Authenticated)
Marval MSM v14.19.0.12476 – Cross-Site Request Forgery (CSRF)
# Exploit Title: Marval MSM v14.19.0.12476 - Cross-Site Request Forgery (CSRF)
Virtua Software Cobranca 12S – SQLi
# Exploit Title: Virtua Software Cobranca 12S - SQLi
HP LaserJet Professional M1210 MFP Series Receive Fax Service – Unquoted Service Path
# Exploit Title: HP LaserJet Professional M1210 MFP Series Receive Fax Service - Unquoted Service Path
Algo 8028 Control Panel – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Algo 8028 Control Panel - Remote Code Execution (RCE) (Authenticated)
Pandora FMS v7.0NG.742 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Pandora FMS v7.0NG.742 - Remote Code Execution (RCE) (Authenticated)
TP-Link Router AX50 firmware 210730 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: TP-Link Router AX50 firmware 210730 - Remote Code Execution (RCE) (Authenticated)
phpIPAM 1.4.5 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: phpIPAM 1.4.5 - Remote Code Execution (RCE) (Authenticated)
Sourcegraph Gitserver 3.36.3 – Remote Code Execution (RCE)
# Exploit Title: Sourcegraph Gitserver 3.36.3 - Remote Code Execution (RCE)
ChurchCRM 4.4.5 – SQLi
# Exploit Title: ChurchCRM 4.4.5 - SQLi
Old Age Home Management System 1.0 – SQLi Authentication Bypass
# Exploit Title: Old Age Home Management System 1.0 - SQLi Authentication Bypass
SolarView Compact 6.00 – ‘time_begin’ Cross-Site Scripting (XSS)
# Exploit Title: SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting (XSS)
SolarView Compact 6.00 – ‘pow’ Cross-Site Scripting (XSS)
# Exploit Title: SolarView Compact 6.00 - 'pow' Cross-Site Scripting (XSS)
WordPress Plugin Motopress Hotel Booking Lite 4.2.4 – Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Motopress Hotel Booking Lite 4.2.4 - Stored Cross-Site Scripting (XSS)
Confluence Data Center 7.18.0 – Remote Code Execution (RCE)
# Exploit Title: Confluence Data Center 7.18.0 - Remote Code Execution (RCE)
Contao 4.13.2 – Cross-Site Scripting (XSS)
# Exploit Title: Contao 4.13.2 - Cross-Site Scripting (XSS)
Zyxel USG FLEX 5.21 – OS Command Injection
# Exploit Title: Zyxel USG FLEX 5.21 - OS Command Injection
Microweber CMS 1.2.15 – Account Takeover
# Exploit Title: Microweber CMS 1.2.15 - Account Takeover
Telesquare SDT-CW3B1 1.1.0 – OS Command Injection
#!/usr/bin/python3
Schneider Electric C-Bus Automation Controller (5500SHAC) 1.10 – Remote Code Execution (RCE)
# Exploit Title: Schneider Electric C-Bus Automation Controller (5500SHAC) 1.10 - Remote Code Execution (RCE)
SolarView Compact 6.00 – Directory Traversal
# Exploit Title: SolarView Compact 6.00 - Directory Traversal