Wondershare MirrorGo 2.0.11.346 – Insecure File Permissions
# Exploit Title: Wondershare MirrorGo 2.0.11.346 - Insecure File Permissions
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 36
Simple Real Estate Portal System 1.0 – ‘id’ SQLi
# Exploit Title: Simple Real Estate Portal System 1.0 - 'id' SQL Injection
Air Cargo Management System v1.0 – SQLi
# Title: Air Cargo Management System v1.0 - SQLi
aaPanel 6.8.21 – Directory Traversal (Authenticated)
# Exploit Title: aaPanel 6.8.21 - Directory Traversal (Authenticated)
Adobe ColdFusion 11 – LDAP Java Object Deserialization Remode Code Execution (RCE)
# Exploit Title: Adobe ColdFusion 11 - LDAP Java Object Deserialization Remode Code Execution (RCE)
Student Record System 1.0 – ‘cid’ SQLi (Authenticated)
# Exploit Title: Student Record System 1.0 - 'cid' SQLi (Authenticated)
ICL ScadaFlex II SCADA Controllers SC-1/SC-2 1.03.07 – Remote File CRUD
# Exploit Title: CL ScadaFlex II SCADA Controllers SC-1/SC-2 1.03.07 Remote File CRUD
WebHMI 4.1.1 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: WebHMI 4.1.1 - Remote Code Execution (RCE) (Authenticated)
WebHMI 4.1 – Stored Cross Site Scripting (XSS) (Authenticated)
# Exploit Title: WebHMI 4.1 - Stored Cross Site Scripting (XSS) (Authenticated)
Microweber CMS 1.2.10 – Local File Inclusion (Authenticated) (Metasploit)
# Exploit Title: Microweber CMS v1.2.10 Local File Inclusion (Authenticated)
HMA VPN 5.3 – Unquoted Service Path
# Exploit Title: HMA VPN 5.3 - Unquoted Service Path
WordPress Plugin Perfect Survey – 1.5.1 – SQLi (Unauthenticated)
# Exploit Title: WordPress Plugin Perfect Survey - 1.5.1 - SQLi (Unauthenticated)
Cab Management System 1.0 – ‘id’ SQLi (Authenticated)
# Exploit Title: Cab Management System 1.0 - 'id' SQLi (Authenticated)
Microweber 1.2.11 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Microweber 1.2.11 - Remote Code Execution (RCE) (Authenticated)
Cab Management System 1.0 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Cab Management System 1.0 - Remote Code Execution (RCE) (Authenticated)
Thinfinity VirtualUI 2.5.41.0 – IFRAME Injection
Exploit Title: Thinfinity VirtualUI 2.5.41.0 - IFRAME Injection
Thinfinity VirtualUI 2.5.26.2 – Information Disclosure
Exploit Title: Thinfinity VirtualUI 2.5.26.2 - Information Disclosure
WordPress Plugin WP User Frontend 3.5.25 – SQLi (Authenticated)
# Exploit Title: WordPress Plugin WP User Frontend 3.5.25 - SQLi (Authenticated)
Cyclades Serial Console Server 3.3.0 – Local Privilege Escalation
# Exploit Title: Cyclades Serial Console Server 3.3.0 - Local Privilege Escalation
FileCloud 21.2 – Cross-Site Request Forgery (CSRF)
# Exploit Title: FileCloud 21.2 - Cross-Site Request Forgery (CSRF)
Dbltek GoIP – Local File Inclusion
# Exploit Title: Dbltek GoIP - Local File Inclusion
Microsoft Gaming Services 2.52.13001.0 – Unquoted Service Path
# Exploit Title: Microsoft Gaming Services 2.52.13001.0 - Unquoted Service Path
WordPress Plugin MasterStudy LMS 2.7.5 – Unauthenticated Admin Account Creation
# Title: WordPress Plugin MasterStudy LMS 2.7.5 - Unauthenticated Admin Account Creation
WordPress Plugin dzs-zoomsounds 6.60 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: WordPress Plugin dzs-zoomsounds - Remote Code Execution (RCE) (Unauthenticated)
Hotel Druid 3.0.3 – Remote Code Execution (RCE)
# Exploit Title: Hotel Druid 3.0.3 - Remote Code Execution (RCE)
Wondershare Dr.Fone 11.4.9 – ‘DFWSIDService’ Unquoted Service Path
# Exploit Title: Wondershare Dr.Fone 11.4.9 - 'DFWSIDService' Unquoted Service Path
Wondershare MobileTrans 3.5.9 – ‘ElevationService’ Unquoted Service Path
# Exploit Title: Wondershare MobileTrans 3.5.9 - 'ElevationService' Unquoted Service Path
Wondershare FamiSafe 1.0 – ‘FSService’ Unquoted Service Path
# Exploit Title: Wondershare FamiSafe 1.0 - 'FSService' Unquoted Service Path
Wondershare UBackit 2.0.5 – ‘wsbackup’ Unquoted Service Path
# Exploit Title: Wondershare UBackit 2.0.5 - 'wsbackup' Unquoted Service Path
Fortinet Fortimail 7.0.1 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: Fortinet Fortimail 7.0.1 - Reflected Cross-Site Scripting (XSS)
TOSHIBA DVD PLAYER Navi Support Service – ‘TNaviSrv’ Unquoted Service Path
#Exploit Title: TOSHIBA DVD PLAYER Navi Support Service - 'TNaviSrv' Unquoted Service Path
Bluetooth Application 5.4.277 – ‘BlueSoleilCS’ Unquoted Service Path
#Exploit Title: Bluetooth Application 5.4.277 - 'BlueSoleilCS' Unquoted Service Path
Intel(R) Management Engine Components 6.0.0.1189 – ‘LMS’ Unquoted Service Path
#Exploit Title: Intel(R) Management Engine Components 6.0.0.1189 - 'LMS' Unquoted Service Path
File Sanitizer for HP ProtectTools 5.0.1.3 – ‘HPFSService’ Unquoted Service Path
#Exploit Title: File Sanitizer for HP ProtectTools 5.0.1.3 - 'HPFSService' Unquoted Service Path
Connectify Hotspot 2018 ‘ConnectifyService’ – Unquoted Service Path
#Exploit Title: Connectify Hotspot 2018 'ConnectifyService' - Unquoted Service Path
Multi-Vendor Online Groceries Management System 1.0 – ‘id’ Blind SQL Injection
# Exploit Title: Multi-Vendor Online Groceries Management System 1.0 - 'id' Blind SQL Injection
Simple Student Quarterly Result/Grade System 1.0 – SQLi Authentication Bypass
# Exploit Title: Simple Student Quarterly Result/Grade System 1.0 - SQLi Authentication Bypass
ServiceNow – Username Enumeration
# Exploit Title: ServiceNow - Username Enumeration
H3C SSL VPN – Username Enumeration
# Exploit Title: H3C SSL VPN - Username Enumeration
TeamSpeak 3.5.6 – Insecure File Permissions
# Exploit Title: TeamSpeak 3.5.6 - Insecure File Permissions
Network Video Recorder NVR304-16EP – Reflected Cross-Site Scripting (XSS) (Unauthenticated)
# Exploit Title: Network Video Recorder NVR304-16EP - Reflected Cross-Site Scripting (XSS) (Unauthenticated)
Emerson PAC Machine Edition 9.80 Build 8695 – ‘TrapiServer’ Unquoted Service Path
# Exploit Title: Emerson PAC Machine Edition 9.80 Build 8695 - 'TrapiServer' Unquoted Service Path
WordPress Plugin Error Log Viewer 1.1.1 – Arbitrary File Clearing (Authenticated)
# Exploit Title: WordPress Plugin Error Log Viewer 1.1.1 - Arbitrary File Clearing (Authenticated)
Accounting Journal Management System 1.0 – ‘id’ SQLi (Authenticated)
# Exploit Title: Accounting Journal Management System 1.0 - 'id' SQLi (Authenticated)
Subrion CMS 4.2.1 – Cross Site Request Forgery (CSRF) (Add Amin)
# Exploit Title: Subrion CMS 4.2.1 - Cross Site Request Forgery (CSRF) (Add Amin)
Kyocera Command Center RX ECOSYS M2035dn – Directory Traversal File Disclosure (Unauthenticated)
# Exploit Title: Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated)
Cain & Abel 4.9.56 – Unquoted Service Path
# Exploit Title: Cain & Abel 4.9.56 - Unquoted Service Path
Hospital Management Startup 1.0 – ‘Multiple’ SQLi
# Exploit Title: Hospital Management Startup 1.0 - 'loginid' SQLi
Home Owners Collection Management System 1.0 – Account Takeover (Unauthenticated)
# Exploit Title: Home Owners Collection Management System 1.0 - Account Takeover (Unauthenticated)
Home Owners Collection Management System 1.0 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Home Owners Collection Management System 1.0 - Remote Code Execution (RCE) (Authenticated)