WordPress Plugin stafflist 3.1.2 – SQLi (Authenticated)
# Exploit Title: WordPress Plugin stafflist 3.1.2 - SQLi (Authenticated)
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 34
Ruijie Reyee Mesh Router – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Ruijie Reyee Mesh Router - Remote Code Execution (RCE) (Authenticated)
TLR-2005KSH – Arbitrary File Upload
# Exploit Title: TLR-2005KSH - Arbitrary File Upload
Gitlab 14.9 – Authentication Bypass
# Exploit Title: Gitlab 14.9 - Authentication Bypass
GitLab 14.9 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Gitlab Stored XSS
Microsoft Exchange Mailbox Assistants 15.0.847.40 – ‘Service MSExchangeMailboxAssistants’ Unquoted Service Path
# Exploit Title: Microsoft Exchange Mailbox Assistants 15.0.847.40 - 'Service MSExchangeMailboxAssistants' Unquoted ...
Microsoft Exchange Active Directory Topology 15.0.847.40 – ‘Service MSExchangeADTopology’ Unquoted Service Path
# Exploit Title: Microsoft Exchange Active Directory Topology 15.0.847.40 - 'Service MSExchangeADTopology' Unquoted S...
WordPress Plugin Motopress Hotel Booking Lite 4.2.4 – SQL Injection
# Exploit Title: WordPress Plugin Motopress Hotel Booking Lite 4.2.4 - SQL Injection
Zyxel NWA-1100-NH – Command Injection
# Exploit Title: Zyxel NWA-1100-NH - Command Injection
Easy Appointments 1.4.2 – Information Disclosure
# Exploit Title: Easy Appointments 1.4.2 - Information Disclosure
Scriptcase 9.7 – Remote Code Execution (RCE)
# Exploit Title: Scriptcasr 9.7 arbitrary file upload getshell
ManageEngine ADSelfService Plus 6.1 – User Enumeration
# Exploit Title: ManageEngine ADSelfService Plus 6.1 - User Enumeration
WordPress Plugin Videos sync PDF 1.7.4 – Stored Cross Site Scripting (XSS)
# Exploit Title: WordPress Plugin Videos sync PDF 1.7.4 - Stored Cross Site Scripting (XSS)
Verizon 4G LTE Network Extender – Weak Credentials Algorithm
Exploit Title: Verizon 4G LTE Network Extender - Weak Credentials Algorithm
WordPress Plugin Popup Maker 1.16.5 – Stored Cross-Site Scripting (Authenticated)
# Exploit Title: WordPress Plugin Popup Maker Add New Cookie > Add > Cookie Time (overwrite the default '1 month' w...
REDCap 11.3.9 – Stored Cross Site Scripting
# Exploit Title: REDCap 11.3.9 - Stored Cross-Site Scripting
Delta Controls enteliTOUCH 3.40.3935 – Cross-Site Request Forgery (CSRF)
# Exploit Tile: Delta Controls enteliTOUCH 3.40.3935 - Cross-Site Request Forgery (CSRF)
Delta Controls enteliTOUCH 3.40.3935 – Cross-Site Scripting (XSS)
# Exploit Title: Delta Controls enteliTOUCH 3.40.3935 - Cross-Site Scripting (XSS)
Delta Controls enteliTOUCH 3.40.3935 – Cookie User Password Disclosure
Exploit Title: Delta Controls enteliTOUCH 3.40.3935 - Cookie User Password Disclosure
PKP Open Journals System 3.3 – Cross-Site Scripting (XSS)
# Exploit Title: PKP Open Journals System 3.3 - Cross-Site Scripting (XSS)
WordPress Plugin Elementor 3.6.2 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: WordPress Plugin Elementor 3.6.2 - Remote Code Execution (RCE) (Authenticated)
Fuel CMS 1.5.0 – Cross-Site Request Forgery (CSRF)
# Exploit Title: Fuel CMS 1.5.0 - Cross-Site Request Forgery (CSRF)# Google Dork: NA
PTPublisher v2.3.4 – Unquoted Service Path
# Exploit Title: PTPublisher v2.3.4 - Unquoted Service Path
EaseUS Data Recovery – ‘ensserver.exe’ Unquoted Service Path
# Exploit Title: EaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path
MiniTool Partition Wizard – Unquoted Service Path
# Exploit Title: MiniTool Partition Wizard - Unquoted Service Path
SAM SUNNY TRIPOWER 5.0 – Insecure Direct Object Reference (IDOR)
# Exploit Title: SAM SUNNY TRIPOWER 5.0 - Insecure Direct Object Reference (IDOR)
Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 – Local File Inclusion (LFI)
# Exploit Title: Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion (LFI)
Telesquare TLR-2855KS6 – Arbitrary File Creation
# Exploit Title: Telesquare TLR-2855KS6 - Arbitrary File Creation
Telesquare TLR-2855KS6 – Arbitrary File Deletion
# Exploit Title: Telesquare TLR-2855KS6 - Arbitrary File Deletion
Razer Sila – Local File Inclusion (LFI)
# Exploit Title: Razer Sila - Local File Inclusion (LFI)
Razer Sila – Command Injection
# Exploit Title: Razer Sila - Command Injection
Zenario CMS 9.0.54156 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Zenario CMS 9.0.54156 - Remote Code Execution (RCE) (Authenticated)
KLiK Social Media Website 1.0 – ‘Multiple’ SQLi
# Exploit Title: KLiK Social Media Website 1.0 - 'Multiple' SQLi
Sherpa Connector Service v2020.2.20328.2050 – Unquoted Service Path
# Exploit Title: Sherpa Connector Service v2020.2.20328.2050 - Unquoted Service Path
minewebcms 1.15.2 – Cross-site Scripting (XSS)
# Exploit Title: minewebcms 1.15.2 - Cross-site Scripting (XSS)
qdPM 9.2 – Cross-site Request Forgery (CSRF)
# Exploit Title: qdPM 9.2 - Cross-site Request Forgery (CSRF)
ICEHRM 31.0.0.0S – Cross-site Request Forgery (CSRF) to Account Deletion
# Exploit Title: ICEHRM 31.0.0.0S - Cross-site Request Forgery (CSRF) to Account Deletion
Kramer VIAware – Remote Code Execution (RCE) (Root)
# Exploit Title: Remote Code Execution as Root on KRAMER VIAware
Opmon 9.11 – Cross-site Scripting
# Exploit Title: Opmon 9.11 - Cross-site Scripting
binutils 2.37 – Objdump Segmentation Fault
# Exploit Title: binutils 2.37 - Objdump Segmentation Fault
ImpressCMS 1.4.2 – Remote Code Execution (RCE)
# Exploit Title: ImpressCMS 1.4.2 - Remote Code Execution (RCE)
Atom CMS 2.0 – Remote Code Execution (RCE)
# Exploit Title: Atom CMS 2.0 - Remote Code Execution (RCE)
Drupal avatar_uploader v7.x-1.0-beta8 – Cross Site Scripting (XSS)
# Exploit Title: Drupal avatar_uploader v7.x-1.0-beta8 - Cross Site Scripting (XSS)
WordPress Plugin Curtain 1.0.2 – Cross-site Request Forgery (CSRF)
# Exploit Title: WordPress Plugin Curtain 1.0.2 - Cross-site Request Forgery (CSRF)
WordPress Plugin cab-fare-calculator 1.0.3 – Local File Inclusion
# Exploit Title: WordPress Plugin cab-fare-calculator 1.0.3 - Local File Inclusion
WordPress Plugin video-synchro-pdf 1.7.4 – Local File Inclusion
# Exploit Title: WordPress Plugin video-synchro-pdf 1.7.4 - Local File Inclusion
WordPress Plugin admin-word-count-column 2.2 – Local File Read
# Exploit Title: WordPress Plugin admin-word-count-column 2.2 - Local File Read
CSZ CMS 1.2.9 – ‘Multiple’ Blind SQLi(Authenticated)
# Exploit Title: CSZ CMS 1.2.9 - 'Multiple' Blind SQLi(Authenticated)
PostgreSQL 9.3-11.7 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: PostgreSQL 9.3-11.7 - Remote Code Execution (RCE) (Authenticated)
Kramer VIAware 2.5.0719.1034 – Remote Code Execution (RCE)
# Exploit Title: Kramer VIAware 2.5.0719.1034 - Remote Code Execution (RCE)