Sonicwall SonicOS 7.0 – Host Header Injection
# Exploit Title: Sonicwall SonicOS 7.0 - Host Header Injection
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 43
IFSC Code Finder Project 1.0 – SQL injection (Unauthenticated)
# Title: IFSC Code Finder Project 1.0 - SQL injection (Unauthenticated)
Online Traffic Offense Management System 1.0 – Privilage escalation (Unauthenticated)
# Exploit Title: Online Traffic Offense Management System 1.0 - Privilage escalation (Unauthenticated)
django-unicorn 0.35.3 – Stored Cross-Site Scripting (XSS)
# Exploit Title: django-unicorn 0.35.3 - Stored Cross-Site Scripting (XSS)
Maian-Cart 3.8 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit title: Maian-Cart 3.8 - Remote Code Execution (RCE) (Unauthenticated)
WordPress Plugin Pie Register 3.7.1.4 – Admin Privilege Escalation (Unauthenticated)
# Exploit Title: WordPress Plugin Pie Register 3.7.1.4 - Admin Privilege Escalation (Unauthenticated)
Simple Online College Entrance Exam System 1.0 – Unauthenticated Admin Creation
# Exploit Title: Simple Online College Entrance Exam System 1.0 - Unauthenticated Admin Creation
Simple Online College Entrance Exam System 1.0 – Account Takeover
# Exploit Title: Simple Online College Entrance Exam System 1.0 - Account Takeover
Simple Online College Entrance Exam System 1.0 – ‘Multiple’ SQL injection
# Exploit Title: Simple Online College Entrance Exam System 1.0 - 'Multiple' SQL injection
Online Enrollment Management System 1.0 – Authentication Bypass
# Exploit Title: Online Enrollment Management System 1.0 - Authentication Bypass
Online Employees Work From Home Attendance System 1.0 – SQLi Authentication Bypass
# Exploit Title: Online Employees Work From Home Attendance System 1.0 - SQLi Authentication Bypass
Cmder Console Emulator 1.3.18 – ‘Cmder.exe’ Denial of Service (PoC)
# Exploit Title: Cmder Console Emulator 1.3.18 - 'Cmder.exe' Denial of Service (PoC)
Loan Management System 1.0 – SQLi Authentication Bypass
# Exploit Title: Loan Management System 1.0 - SQLi Authentication Bypass
Google SLO-Generator 2.0.0 – Code Execution
# Exploit Title: Google SLO-Generator 2.0.0 - Code Execution
Online DJ Booking Management System 1.0 – ‘Multiple’ Blind Cross-Site Scripting
# Exploit Title: Online DJ Booking Management System 1.0 - 'Multiple' Blind Cross-Site Scripting
Online Traffic Offense Management System 1.0 – Multiple SQL Injection (Unauthenticated)
# Exploit Title: Online Traffic Offense Management System 1.0 - Multiple SQL Injection (Unauthenticated)
Online Traffic Offense Management System 1.0 – Multiple XSS (Unauthenticated)
# Exploit Title: Online Traffic Offense Management System 1.0 - Multiple XSS (Unauthenticated)
Online Traffic Offense Management System 1.0 – Multiple RCE (Unauthenticated)
# Exploit Title: Online Traffic Offense Management System 1.0 - Multiple RCE (Unauthenticated)
Simple Online College Entrance Exam System 1.0 – SQLi Authentication Bypass
# Exploit Title: Simple Online College Entrance Exam System 1.0 - SQLi Authentication Bypass
Atlassian Jira Server Data Center 8.16.0 – Arbitrary File Read
# Exploit Title: Atlassian Jira Server Data Center 8.16.0 - Arbitrary File Read
Odine Solutions GateKeeper 1.0 – ‘trafficCycle’ SQL Injection
# Exploit Title: Odine Solutions GateKeeper 1.0 - 'trafficCycle' SQL Injection
WordPress Plugin BulletProof Security 5.1 – Sensitive Information Disclosure
# Exploit Title: Wordpress Plugin BulletProof Security 5.1 - Sensitive Information Disclosure
Apache HTTP Server 2.4.49 – Path Traversal & Remote Code Execution (RCE)
# Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution (RCE)
Student Quarterly Grading System 1.0 – SQLi Authentication Bypass
# Exploit Title: Student Quarterly Grading System 1.0 - SQLi Authentication Bypass
Atlassian Confluence 7.12.2 – Pre-Authorization Arbitrary File Read
# Exploit Title: Atlassian Confluence 7.12.2 - Pre-Authorization Arbitrary File Read
WordPress Plugin TheCartPress 1.5.3.6 – Privilege Escalation (Unauthenticated)
# Exploit Title: Wordpress Plugin TheCartPress 1.5.3.6 - Privilege Escalation (Unauthenticated)
WordPress Plugin MStore API 2.0.6 – Arbitrary File Upload
# Exploit Title: Wordpress Plugin MStore API 2.0.6 - Arbitrary File Upload
Payara Micro Community 5.2021.6 – Directory Traversal
# Exploit Title: Payara Micro Community 5.2021.6 - Directory Traversal
Lodging Reservation Management System 1.0 – Authentication Bypass
# Exploit Title: Lodging Reservation Management System 1.0 - Authentication Bypass
Open Game Panel – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Open Game Panel - Remote Code Execution (RCE) (Authenticated)
Young Entrepreneur E-Negosyo System 1.0 – SQL Injection Authentication Bypass
# Exploit Title: Young Entrepreneur E-Negosyo System 1.0 - SQL Injection Authentication Bypass
Young Entrepreneur E-Negosyo System 1.0 – ‘PRODESC’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Young Entrepreneur E-Negosyo System 1.0 - 'PRODESC' Stored Cross-Site Scripting (XSS)
Exam Form Submission System 1.0 – SQL Injection Authentication Bypass
# Exploit Title: Exam Form Submission System 1.0 - SQL Injection Authentication Bypass
Drupal Module MiniorangeSAML 8.x-2.22 – Privilege escalation
# Exploit Title: Drupal Module MiniorangeSAML 8.x-2.22 - Privilege escalation via XML Signature Wrapping
Blood Bank System 1.0 – Authentication Bypass
# Exploit Title: Blood Bank System 1.0 - Authentication Bypass
Phpwcms 1.9.30 – Arbitrary File Upload
# Exploit Title: Phpwcms 1.9.30 - Arbitrary File Upload
Vehicle Service Management System 1.0 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: Vehicle Service Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
Dairy Farm Shop Management System 1.0 – SQL Injection Authentication Bypass
# Exploit Title: Dairy Farm Shop Management System 1.0 - SQL Injection Authentication Bypass
WhatsUpGold 21.0.3 – Stored Cross-Site Scripting (XSS)
# Exploit Title: WhatsUpGold 21.0.3 - Stored Cross-Site Scripting (XSS)
CMSimple_XH 1.7.4 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: CMSimple_XH 1.7.4 - Remote Code Execution (RCE) (Authenticated)
Directory Management System 1.0 – SQL Injection Authentication Bypass
# Exploit Title: Directory Management System 1.0 - SQL Injection Authentication Bypass
Cyber Cafe Management System Project (CCMS) 1.0 – SQL Injection Authentication Bypass
# Exploit Title: Cyber Cafe Management System Project (CCMS) 1.0 - SQL Injection Authentication Bypass
Cmsimple 5.4 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Cmsimple 5.4 - Remote Code Execution (RCE) (Authenticated)
Pharmacy Point of Sale System 1.0 – ‘Multiple’ SQL Injection (SQLi)
# Exploit Title: Pharmacy Point of Sale System 1.0 - 'Multiple' SQL Injection (SQLi)
Storage Unit Rental Management System 1.0 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: Storage Unit Rental Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
WordPress Plugin Select All Categories and Taxonomies 1.3.1 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Select All Categories and Taxonomies 1.3.1 - Reflected Cross-Site Scripting (XSS)
WordPress Plugin Redirect 404 to Parent 1.3.0 – Reflected Cross-Site Scripting
# Exploit Title: WordPress Plugin Redirect 404 to Parent 1.3.0 - Reflected Cross-Site Scripting (XSS)
Mitrastar GPT-2541GNAC-N1 – Privilege escalation
# Exploit Title: Mitrastar GPT-2541GNAC-N1 - Privilege escalation
OpenSIS 8.0 – ‘cp_id_miss_attn’ Reflected Cross-Site Scripting (XSS)
# Exploit Title: OpenSIS 8.0 - 'cp_id_miss_attn' Reflected Cross-Site Scripting (XSS)
Pet Shop Management System 1.0 – Remote Code Execution (RCE) (Unauthenticated)
# Title: Pet Shop Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated)