Netgear Genie 2.4.64 – Unquoted Service Path
# Exploit Title: Netgear Genie 2.4.64 - Unquoted Service Path
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 42
Engineers Online Portal 1.0 – File Upload Remote Code Execution (RCE)
# Exploit Title: Engineers Online Portal 1.0 - File Upload Remote Code Execution (RCE)
Build Smart ERP 21.0817 – ‘eidValue’ SQL Injection (Unauthenticated)
# Exploit Title: Build Smart ERP 21.0817 - 'eidValue' SQL Injection (Unauthenticated)
Apache HTTP Server 2.4.50 – Remote Code Execution (RCE) (2)
# Exploit: Apache HTTP Server 2.4.50 - Remote Code Execution (RCE) (2)
Balbooa Joomla Forms Builder 2.0.6 – SQL Injection (Unauthenticated)
# Exploit Title: Balbooa Joomla Forms Builder 2.0.6 - SQL Injection (Unauthenticated)
OpenClinic GA 5.194.18 – Local Privilege Escalation
# Exploit Title: OpenClinic GA 5.194.18 - Local Privilege Escalation
Gestionale Open 11.00.00 – Local Privilege Escalation
# Exploit Title: Gestionale Open 11.00.00 - Local Privilege Escalation
Online Event Booking and Reservation System 1.0 – ‘reason’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Online Event Booking and Reservation System 1.0 - 'reason' Stored Cross-Site Scripting (XSS)
Engineers Online Portal 1.0 – ‘multiple’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Engineers Online Portal 1.0 - 'multiple' Stored Cross-Site Scripting (XSS)
Engineers Online Portal 1.0 – ‘multiple’ Authentication Bypass
# Exploit Title: Engineers Online Portal 1.0 - 'multiple' Authentication Bypass
Engineers Online Portal 1.0 – ‘id’ SQL Injection
# Exploit Title: Engineers Online Portal 1.0 - 'id' SQL Injection
WordPress Plugin Media-Tags 3.2.0.2 – Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Media-Tags 3.2.0.2 - Stored Cross-Site Scripting (XSS)
WordPress Plugin Ninja Tables 4.1.7 – Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Ninja Tables 4.1.7 - Stored Cross-Site Scripting (XSS)
WordPress 4.9.6 – Arbitrary File Deletion (Authenticated) (2)
# Exploit Title: Wordpress 4.9.6 - Arbitrary File Deletion (Authenticated) (2)
phpMyAdmin 4.8.1 – Remote Code Execution (RCE)
# Exploit Title: phpMyAdmin 4.8.1 - Remote Code Execution (RCE)
Jetty 9.4.37.v20210219 – Information Disclosure
# Exploit Title: Jetty 9.4.37.v20210219 - Information Disclosure
Clinic Management System 1.0 – SQL injection to Remote Code Execution
# Exploit Title: Clinic Management System 1.0 - SQL injection to Remote Code Execution
Online Course Registration 1.0 – Blind Boolean-Based SQL Injection (Authenticated)
# Exploit Title: Online Course Registration 1.0 - Blind Boolean-Based SQL Injection (Authenticated)
NIMax 5.3.1 – ‘Remote VISA System’ Denial of Service (PoC)
# Exploit Title: NIMax 5.3.1 - 'Remote VISA System' Denial of Service (PoC)
NIMax 5.3.1f0 – ‘VISA Alias’ Denial of Service (PoC)
# Exploit Title: NIMax 5.3.1f0 - 'VISA Alias' Denial of Service (PoC)
Small CRM 3.0 – ‘description’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Small CRM 3.0 - 'description' Stored Cross-Site Scripting (XSS)
Easy Chat Server 3.1 – Directory Traversal and Arbitrary File Read
# Exploit Title: Easy Chat Server 3.1 - Directory Traversal and Arbitrary File Read
SonicWall SMA 10.2.1.0-17sv – Password Reset
# Exploit Title: SonicWall SMA 10.2.1.0-17sv - Password Reset
Macro Expert 4.7 – Unquoted Service Path
# Exploit Title: Macro Expert 4.7 - Unquoted Service Path
Dolibarr ERP-CRM 14.0.2 – Stored Cross-Site Scripting (XSS) / Privilege Escalation
# Exploit Title: Dolibarr ERP-CRM 14.0.2 - Stored Cross-Site Scripting (XSS) / Privilege Escalation
WordPress Theme Enfold 4.8.3 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: WordPress Theme Enfold 4.8.3 - Reflected Cross-Site Scripting (XSS)
myfactory FMS 7.1-911 – ‘Multiple’ Reflected Cross-Site Scripting (XSS)
# Exploit Title: myfactory FMS 7.1-911 - 'Multiple' Reflected Cross-Site Scripting (XSS)
Online Motorcycle (Bike) Rental System 1.0 – Blind Time-Based SQL Injection (Unauthenticated)
# Exploit Title: Online Motorcycle (Bike) Rental System 1.0 - Blind Time-Based SQL Injection (Unauthenticated)
Support Board 3.3.4 – ‘Message’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Support Board 3.3.4 - 'Message' Stored Cross-Site Scripting (XSS)
WordPress Plugin Duplicator 1.3.26 – Unauthenticated Arbitrary File Read
# Exploit Title: Wordpress Plugin Duplicator 1.3.26 - Unauthenticated Arbitrary File Read
Company’s Recruitment Management System 1.0. – ‘title’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Company's Recruitment Management System 1.0. - 'title' Stored Cross-Site Scripting (XSS)
Mitsubishi Electric & INEA SmartRTU – Source Code Disclosure
# Exploit Title: Mitsubishi Electric & INEA SmartRTU - Source Code Disclosure
Mitsubishi Electric & INEA SmartRTU – Reflected Cross-Site Scripting (XSS)
# Exploit Title: Mitsubishi Electric & INEA SmartRTU - Reflected Cross-Site Scripting (XSS)
Company’s Recruitment Management System 1.0 – ‘description’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Company's Recruitment Management System 1.0 - 'description' Stored Cross-Site Scripting (XSS)
Company’s Recruitment Management System 1.0 – ‘Add New user’ Cross-Site Request Forgery (CSRF)
# Exploit Title: Company's Recruitment Management System 1.0 - 'Add New user' Cross-Site Request Forgery (CSRF)
Plastic SCM 10.0.16.5622 – WebAdmin Server Access
# Exploit Title: Plastic SCM 10.0.16.5622 - WebAdmin Server Access
i-Panel Administration System 2.0 – Reflected Cross-site Scripting (XSS)
# Exploit Title: i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS)
TextPattern CMS 4.8.7 – Remote Command Execution (RCE) (Authenticated)
# Exploit Title: TextPattern CMS 4.8.7 - Remote Command Execution (RCE) (Authenticated)
SolarWinds Kiwi CatTools 3.11.8 – Unquoted Service Path
# Exploit Title: SolarWinds Kiwi CatTools 3.11.8 - Unquoted Service Path
Simple Payroll System 1.0 – SQLi Authentication Bypass
# Exploit Title: Simple Payroll System 1.0 - SQLi Authentication Bypass
Company’s Recruitment Management System 1.0 – ‘Multiple’ SQL Injection (Unauthenticated)
# Title: Company's Recruitment Management System 1.0 - 'Multiple' SQL Injection (Unauthenticated)
Keycloak 12.0.1 – ‘request_uri ‘ Blind Server-Side Request Forgery (SSRF) (Unauthenticated)
# Exploit Title: Keycloak 12.0.1 - 'request_uri ' Blind Server-Side Request Forgery (SSRF) (Unauthenticated)
Apache HTTP Server 2.4.50 – Path Traversal & Remote Code Execution (RCE)
# Exploit: Apache HTTP Server 2.4.50 - Path Traversal & Remote Code Execution (RCE)
Cypress Solutions CTM-200/CTM-ONE – Hard-coded Credentials Remote Root (Telnet/SSH)
# Exploit Title: Cypress Solutions CTM-200/CTM-ONE - Hard-coded Credentials Remote Root (Telnet/SSH)
Cypress Solutions CTM-200 2.7.1 – Root Remote OS Command Injection
# Exploit Title: Cypress Solutions CTM-200 2.7.1 - Root Remote OS Command Injection
Pharmacy Point of Sale System 1.0 – ‘Add New User’ Cross-Site Request Forgery (CSRF)
# Exploit Title: Pharmacy Point of Sale System 1.0 - 'Add New User' Cross-Site Request Forgery (CSRF)
Online Learning System 2.0 – ‘Multiple’ SQLi Authentication Bypass
# Exploit Title: Online Learning System 2.0 - 'Multiple' SQLi Authentication Bypass
Simple Issue Tracker System 1.0 – SQLi Authentication Bypass
# Exploit Title: Simple Issue Tracker System 1.0 - SQLi Authentication Bypass
Student Quarterly Grading System 1.0 – ‘grade’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Student Quarterly Grading System 1.0 - 'grade' Stored Cross-Site Scripting (XSS)
Logitech Media Server 8.2.0 – ‘Title’ Cross-Site Scripting (XSS)
# Exploit Title: Logitech Media Server 8.2.0 - 'Title' Cross-Site Scripting (XSS)