MaNGOSWebV4 4.0.6 – Reflected XSS
# Exploit Title: MaNGOSWebV4 4.0.6 - Reflected XSS
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 4
phpMyFAQ 2.9.8 – Cross-Site Request Forgery (CSRF)
# Exploit Title: phpMyFAQ 2.9.8 Cross-Site Request Forgery (CSRF)
phpMyFAQ 2.9.8 – Cross-Site Request Forgery(CSRF)
# Exploit Title: phpMyFAQ 2.9.8 - Cross-Site Request Forgery(CSRF)
phpIPAM 1.6 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: phpIPAM 1.6 - Reflected Cross-Site Scripting (XSS)
phpIPAM 1.6 – Reflected-Cross-Site Scripting (XSS)
# Exploit Title: phpIPAM 1.6 - Reflected Cross-Site Scripting (XSS)
Piwigo 13.6.0 – SQL Injection
# Exploit Title: Piwigo 13.6.0 - SQL Injection
phpIPAM 1.5.1 – SQL Injection
# Exploit Title: phpIPAM 1.5.1 - SQL Injection
phpMyFAQ 3.1.7 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting (XSS)
YOURLS 1.8.2 – Cross-Site Request Forgery (CSRF)
# Exploit Title: YOURLS 1.8.2 - Cross-Site Request Forgery (CSRF)
Flowise 3.0.4 – Remote Code Execution (RCE)
# Exploit Title: Flowise 3.0.4 - Remote Code Execution (RCE)
Casdoor 2.95.0 – Cross-Site Request Forgery (CSRF)
# Exploit Title: Casdoor 2.95.0 - Cross-Site Request Forgery (CSRF)
HTMLDOC 1.9.13 – Stack Buffer Overflow
#!/usr/bin/env python3
HTTP/2 2.0 – Denial Of Service (DOS)
#!/usr/bin/env python3
Mbed TLS 3.6.4 – Use-After-Free
#include<stdio.h>
Concrete CMS 9.4.3 – Stored XSS
# Exploit Title: Concrete CMS 9.4.3 - Stored XSS
ELEX WooCommerce WordPress Plugin 1.4.3 – SQL Injection
#include <stdio.h>
dotCMS 25.07.02-1 – Authenticated Blind SQL Injection
#!/usr/bin/env python3
Casdoor 2.55.0 – Cross-Site Request Forgery (CSRF)
# Exploit Title: Casdoor 2.55.0 - Cross-Site Request Forgery (CSRF)
Tourism Management System 2.0 – Arbitrary Shell Upload
# Exploit Title: Tourism Management System 2.0 - Arbitrary Shell Upload
ClipBucket 5.5.2 Build #90 – Server-Side Request Forgery (SSRF)
# Exploit Title: ClipBucket 5.5.2 Build #90 - Server-Side Request Forgery (SSRF)
ClipBucket 5.5.0 – Arbitrary File Upload
# Exploit Title: ClipBucket 5.5.0 - Arbitrary File Upload
Microsoft Windows Server 2025 Hyper-V NT Kernel Integration VSP – Elevation of Privilege
# Exploit Title: Microsoft Windows Server 2025 Hyper-V NT Kernel Integration VSP - Elevation of Privilege
Ilevia EVE X1/X5 Server 4.7.18.0.eden – Reverse Rootshell
#!/usr/bin/env python
Birth Chart Compatibility WordPress Plugin 2.0 – Full Path Disclosure
#include<stdio.h>
Lingdang CRM 8.6.4.7 – SQL Injection
# Exploit Title: Lingdang CRM 8.6.4.7 - SQL Injection
Ivanti Endpoint Manager Mobile 12.5.0.0 – Authentication Bypass
#!/usr/bin/env python3
StoryChief WordPress Plugin 1.0.42 – Arbitrary File Upload
# Exploit Title: StoryChief Wordpress Plugin 1.0.42 - Arbitrary File Upload
GeoVision ASManager Windows Application 6.1.2.0 – Credentials Disclosure
# Exploit Title: GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure
GeoVision ASManager Windows Application 6.1.2.0 – Remote Code Execution (RCE)
# Exploit Title: GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE)
BigAnt Office Messenger 5.6.06 – SQL Injection
# Exploit Title: BigAnt Office Messenger 5.6.06 - SQL Injection
RiteCMS 3.0.0 – Reflected Cross Site Scripting (XSS)
# Exploit Title: RiteCMS 3.0.0 – Reflected Cross-Site Scripting (XSS)
Microsoft Windows 10.0.19045 – NTLMv2 Hash Disclosure
# Exploit Title: Microsoft Windows 10.0.19045 - NTLMv2 Hash Disclosure
Soosyze CMS 2.0 – Brute Force Login
# Exploit Title: Soosyze CMS 2.0 - Brute Force Login
Tenda AC20 16.03.08.12 – Command Injection
#include <stdio.h>
Cisco ISE 3.0 – Remote Code Execution (RCE)
# Exploit Title: Cisco ISE 3.0 - Remote Code Execution (RCE)
Cisco ISE 3.0 – Authorization Bypass
# Exploit Title: Cisco ISE 3.0 - Authorization Bypass
projectworlds Online Admission System 1.0 – SQL Injection
#include <stdio.h>
Microsoft Windows – Storage QoS Filter Driver Checker
# Titles: Microsoft Windows - Storage QoS Filter Driver Checker
atjiu pybbs 6.0.0 – Cross Site Scripting (XSS)
#include <stdio.h>
Citrix NetScaler ADC/Gateway 14.1 – Memory Disclosure
# Exploit Title: Citrix NetScaler ADC/Gateway 14.1 - Memory Disclosure
Grav CMS 1.7.48 – Remote Code Execution (RCE)
# Exploit Title: Grav CMS 1.7.48 - Remote Code Execution (RCE)
Microsoft Edge Renderer Process (Mojo IPC) 134.0.6998.177 – Sandbox Escape
# Titles: Microsoft Edge Renderer Process (Mojo IPC) 134.0.6998.177 - Sandbox Escape
Tigo Energy Cloud Connect Advanced (CCA) 4.0.1 – Command Injection
#include <stdio.h>
Microsoft SharePoint Server 2019 (16.0.10383.20020) – Remote Code Execution (RCE)
# Exploit Title: Microsoft SharePoint Server 2019 – Remote Code Execution (RCE)
VMware vSphere Client 8.0.3.0 – Reflected Cross-Site Scripting (XSS)
# VMware vSphere Client 8.0.3.0 - Reflected Cross-Site Scripting (XSS)
Belkin F9K1009 F9K1010 2.00.04/2.00.09 – Hard Coded Credentials
#include <stdio.h>
Ghost CMS 5.42.1 – Path Traversal
#!/usr/bin/env python3