AWebServer GhostBuilding 18 – Denial of Service (DoS)
# Exploit Title: AWebServer GhostBuilding 18 - Denial of Service (DoS)
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 39
Hospitals Patient Records Management System 1.0 – ‘id’ SQL Injection (Authenticated)
# Exploit Title: Hospitalss Patient Records Management System 1.0 - 'id' SQL Injection (Authenticated)
Hospitals Patient Records Management System 1.0 – Account TakeOver
# Exploit Title: Hospitals Patient Records Management System 1.0 - Account TakeOver
BeyondTrust Remote Support 6.0 – Reflected Cross-Site Scripting (XSS) (Unauthenticated)
# Exploit Title: BeyondTrust Remote Support 6.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)
TRIGONE Remote System Monitor 3.61 – Unquoted Service Path
# Exploit Title: TRIGONE Remote System Monitor 3.61 - Unquoted Service Path
Virtual Airlines Manager 2.6.2 – ‘multiple’ SQL Injection
# Exploit Title: Virtual Airlines Manager 2.6.2 - 'multiple' SQL Injection
Terramaster TOS 4.2.15 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: Terramaster TOS 4.2.15 - Remote Code Execution (RCE) (Unauthenticated)
Vodafone H-500-s 3.5.10 – WiFi Password Disclosure
# Exploit Title: Vodafone H-500-s 3.5.10 - WiFi Password Disclosure
openSIS Student Information System 8.0 – ‘multiple’ SQL Injection
# Exploit Title: openSIS Student Information System 8.0 - 'multiple' SQL Injection
TermTalk Server 3.24.0.2 – Arbitrary File Read (Unauthenticated)
# Exploit Title: TermTalk Server 3.24.0.2 - Arbitrary File Read (Unauthenticated)
Dixell XWEB 500 – Arbitrary File Write
# Exploit Title: Dixell XWEB-500 - Arbitrary File Write
Gerapy 0.9.7 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Gerapy 0.9.7 - Remote Code Execution (RCE) (Authenticated)
Projeqtor v9.3.1 – Stored Cross Site Scripting (XSS)
# Exploit Title: Projeqtor v9.3.1 - Stored Cross Site Scripting (XSS)
Automox Agent 32 – Local Privilege Escalation
# Exploit Title: Automox Agent 32 - Local Privilege Escalation
WordPress Plugin AAWP 3.16 – ‘tab’ Reflected Cross Site Scripting (XSS) (Authenticated)
# Exploit Title: WordPress Plugin AAWP 3.16 - 'tab' Reflected Cross Site Scripting (XSS) (Authenticated)
WBCE CMS 1.5.1 – Admin Password Reset
# Exploit Title: WBCE CMS 1.5.1 - Admin Password Reset
phpKF CMS 3.00 Beta y6 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: phpKF CMS 3.00 Beta y6 - Remote Code Execution (RCE) (Unauthenticated)
Exponent CMS 2.6 – Multiple Vulnerabilities
# Exploit Title: Exponent CMS 2.6 - Multiple Vulnerabilities
Cibele Thinfinity VirtualUI 2.5.41.0 – User Enumeration
# Exploit Title: Cibele Thinfinity VirtualUI 2.5.41.0 - User Enumeration
Croogo 3.0.2 – Unrestricted File Upload
# Exploit Title: Croogo 3.0.2 - Unrestricted File Upload
Croogo 3.0.2 – ‘Multiple’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Croogo 3.0.2 - 'Multiple' Stored Cross-Site Scripting (XSS)
Arunna 1.0.0 – ‘Multiple’ Cross-Site Request Forgery (CSRF)
# Exploit Title: Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery (CSRF)
Oliver Library Server v5 – Arbitrary File Download
# Exploit Title: Oliver Library Server v5 - Arbitrary File Download
Apache Log4j2 2.14.1 – Information Disclosure
# Exploit Title: Apache Log4j2 2.14.1 - Information Disclosure
Laravel Valet 2.0.3 – Local Privilege Escalation (macOS)
# Exploit Title: Laravel Valet 2.0.3 - Local Privilege Escalation (macOS)
Apache Log4j 2 – Remote Code Execution (RCE)
# Exploit Title: Apache Log4j 2 - Remote Code Execution (RCE)
WordPress Plugin Typebot 1.4.3 – Stored Cross Site Scripting (XSS) (Authenticated)
# Exploit Title: WordPress Plugin Typebot 1.4.3 - Stored Cross Site Scripting (XSS) (Authenticated)
Booked Scheduler 2.7.5 – Remote Command Execution (RCE) (Authenticated)
# Exploit Title: Booked Scheduler 2.7.5 - Remote Command Execution (RCE) (Authenticated)
Zucchetti Axess CLOKI Access Control 1.64 – Cross Site Request Forgery (CSRF)
# Exploit Title: Zucchetti Axess CLOKI Access Control 1.64 - Cross Site Request Forgery (CSRF)
meterN v1.2.3 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: meterN v1.2.3 - Remote Code Execution (RCE) (Authenticated)
Online Thesis Archiving System 1.0 – SQLi Authentication Bypass
# Exploit Title: Online Thesis Archiving System 1.0 - SQLi Authentication Bypass
Microsoft Internet Explorer / ActiveX Control – Security Bypass
# Exploit Title: Microsoft Internet Explorer / ActiveX Control - Security Bypass
HD-Network Real-time Monitoring System 2.0 – Local File Inclusion (LFI)
# Exploit Title: HD-Network Real-time Monitoring System 2.0 - Local File Inclusion (LFI)
WebHMI 4.0 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: WebHMI 4.0 - Remote Code Execution (RCE) (Authenticated)
OpenCATS 0.9.4 – Remote Code Execution (RCE)
# Exploit Title: OpenCATS 0.9.4 - Remote Code Execution (RCE)
Free School Management Software 1.0 – ‘multiple’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Free School Management Software 1.0 - 'multiple' Stored Cross-Site Scripting (XSS)
Free School Management Software 1.0 – Remote Code Execution (RCE)
# Exploit Title: Free School Management Software 1.0 - Remote Code Execution (RCE)
Chikitsa Patient Management System 2.0.2 – ‘plugin’ Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Chikitsa Patient Management System 2.0.2 - Remote Code Execution (RCE) (Authenticated)
Chikitsa Patient Management System 2.0.2 – ‘backup’ Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated)
LimeSurvey 5.2.4 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: LimeSurvey 5.2.4 - Remote Code Execution (RCE) (Authenticated)
MTPutty 1.0.1.21 – SSH Password Disclosure
# Exploit Title: MTPutty 1.0.1.21 - SSH Password Disclosure
Raspberry Pi 5.10 – Default Credentials
# Exploit Title: Raspberry Pi 5.10 - Default Credentials
TestLink 1.19 – Arbitrary File Download (Unauthenticated)
# Exploit Title: TestLink 1.19 - Arbitrary File Download (Unauthenticated)
Student Management System 1.0 – SQLi Authentication Bypass
# Exploit Title: Student Management System 1.0 - SQLi Authentication Bypass
WordPress Plugin Catch Themes Demo Import 1.6.1 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Wordpress Plugin Catch Themes Demo Import 1.6.1 - Remote Code Execution (RCE) (Authenticated)
Grafana 8.3.0 – Directory Traversal and Arbitrary File Read
# Exploit Title: Grafana 8.3.0 - Directory Traversal and Arbitrary File Read
Employees Daily Task Management System 1.0 – ‘username’ SQLi Authentication Bypass
# Exploit Title: Employees Daily Task Management System 1.0 - 'username' SQLi Authentication Bypass
Employees Daily Task Management System 1.0 – ‘multiple’ Cross Site Scripting (XSS)
# Exploit Title: Employees Daily Task Management System 1.0 - 'multiple' Cross Site Scripting (XSS)
Auerswald COMfortel 2.8F – Authentication Bypass
# Exploit Title: Auerswald COMfortel 2.8F - Authentication Bypass
HCL Lotus Notes V12 – Unquoted Service Path
# Exploit Title: HCL Lotus Notes V12- Unquoted Service Path