FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 – ‘Add Admin’ Cross-Site Request Forgery (CSRF)
# Exploit Title: FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - 'Add Admin' Cross-Site Request Forgery (CSRF)
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 44
FatPipe Networks WARP 10.2.2 – Authorization Bypass
# Exploit Title: FatPipe Networks WARP 10.2.2 - Authorization Bypass
FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 – Config Download (Unauthenticated)
# Exploit Title: FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Config Download (Unauthenticated)
FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 – Hidden Backdoor Account (Write Access)
# Exploit Title: FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Hidden Backdoor Account (Write Access)
FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 – Remote Privilege Escalation
# Exploit Title: FatPipe Networks MPVPN 10.2.2 - Remote Privilege Escalation
WordPress Plugin TranslatePress 2.0.8 – Stored Cross-Site Scripting (XSS) (Authenticated)
# Exploit Title: WordPress Plugin TranslatePress 2.0.8 - Stored Cross-Site Scripting (XSS) (Authenticated)
WordPress Plugin Contact Form 1.7.14 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Contact Form 1.7.14 - Reflected Cross-Site Scripting (XSS)
WordPress Plugin Ultimate Maps 1.2.4 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Ultimate Maps 1.2.4 - Reflected Cross-Site Scripting (XSS)
WordPress Plugin Popup 1.10.4 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Popup 1.10.4 - Reflected Cross-Site Scripting (XSS)
Apache James Server 2.3.2 – Remote Command Execution (RCE) (Authenticated) (2)
# Exploit Title: Apache James Server 2.3.2 - Remote Command Execution (RCE) (Authenticated) (2)
Ether_MP3_CD_Burner 1.3.8 – Buffer Overflow (SEH)
# Exploit Title: Ether_MP3_CD_Burner 1.3.8 - Buffer Overflow (SEH)
WordPress Plugin Wappointment 2.2.4 – Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Wappointment 2.2.4 - Stored Cross-Site Scripting (XSS)
Library System 1.0 – ‘student_id’ SQL injection (Authenticated)
# Exploit Title: Library System 1.0 - 'student_id' SQL injection (Authenticated)
Cisco small business RV130W 1.0.3.44 – Inject Counterfeit Routers
# Exploit Title: Cisco small business RV130W 1.0.3.44 - Inject Counterfeit Routers
Cyberfox Web Browser 52.9.1 – Denial of Service (PoC)
# Exploit Title: Cyberfox Web Browser 52.9.1 - Denial of Service (PoC)
XAMPP 7.4.3 – Local Privilege Escalation
# Exploit Title: XAMPP 7.4.3 - Local Privilege Escalation
SmarterTools SmarterTrack 7922 – ‘Multiple’ Information Disclosure
# Exploit Title: SmarterTools SmarterTrack 7922 - 'Multiple' Information Disclosure
Pharmacy Point of Sale System 1.0 – SQLi Authentication BYpass
# Exploit Title: Pharmacy Point of Sale System 1.0 - SQLi Authentication Bypass
Microsoft Windows cmd.exe – Stack Buffer Overflow
# Title: Microsoft Windows cmd.exe - Stack Buffer Overflow
Gurock Testrail 7.2.0.3014 – ‘files.md5’ Improper Access Control
# Exploit Title: Gurock Testrail 7.2.0.3014 - 'files.md5' Improper Access Control
WordPress Plugin 3DPrint Lite 1.9.1.4 – Arbitrary File Upload
# Exploit Title: Wordpress Plugin 3DPrint Lite 1.9.1.4 - Arbitrary File Upload
Redragon Gaming Mouse – ‘REDRAGON_MOUSE.sys’ Denial of Service (PoC)
# Exploit Title: Redragon Gaming Mouse - 'REDRAGON_MOUSE.sys' Denial of Service (PoC)
Backdrop CMS 1.20.0 – ‘Multiple’ Cross-Site Request Forgery (CSRF)
# Exploit Title: Backdrop CMS 1.20.0 - 'Multiple' Cross-Site Request Forgery (CSRF)
WordPress Plugin Advanced Order Export For WooCommerce 3.1.7 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin Advanced Order Export For WooCommerce 3.1.7 - Reflected Cross-Site Scripting (XSS)
WordPress Plugin Fitness Calculators 1.9.5 – Cross-Site Request Forgery (CSRF)
# Exploit Title: WordPress Plugin Fitness Calculators 1.9.5 - Cross-Site Request Forgery (CSRF)
Budget and Expense Tracker System 1.0 – Arbitrary File Upload
# Exploit Title: Budget and Expense Tracker System 1.0 - Arbitrary File Upload
Police Crime Record Management Project 1.0 – Time Based SQLi
# Exploit Title: Police Crime Record Management Project 1.0 - Time Based SQLi
Simple Attendance System 1.0 – Unauthenticated Blind SQLi
# Exploit Title: Simple Attendance System 1.0 - Unauthenticated Blind SQLi
Filerun 2021.03.26 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Filerun 2021.03.26 - Remote Code Execution (RCE) (Authenticated)
TotalAV 5.15.69 – Unquoted Service Path
# Exploit Title: TotalAV 5.15.69 - Unquoted Service Path
e107 CMS 2.3.0 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: e107 CMS 2.3.0 - Remote Code Execution (RCE) (Authenticated)
OpenCats 0.9.4-2 – ‘docx ‘ XML External Entity Injection (XXE)
# Exploit Title: OpenCats 0.9.4-2 - 'docx ' XML External Entity Injection (XXE)
Cloudron 6.2 – ‘returnTo ‘ Cross Site Scripting (Reflected)
# Exploit Title: Cloudron 6.2 - 'returnTo ' Cross Site Scripting (Reflected)
Sentry 8.2.0 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Sentry 8.2.0 - Remote Code Execution (RCE) (Authenticated)
Online Reviewer System 1.0 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: Online Reviewer System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
Budget and Expense Tracker System 1.0 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: Budget and Expense Tracker System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
WebsiteBaker 2.13.0 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: WebsiteBaker 2.13.0 - Remote Code Execution (RCE) (Authenticated)
Yenkee Hornet Gaming Mouse – ‘GM312Fltr.sys’ Denial of Service (PoC)
# Exploit Title: Yenkee Hornet Gaming Mouse - 'GM312Fltr.sys' Denial of Service (PoC)
T-Soft E-Commerce 4 – change ‘admin credentials’ Cross-Site Request Forgery (CSRF)
# Exploit Title: T-Soft E-Commerce 4 - change 'admin credentials' Cross-Site Request Forgery (CSRF)
Church Management System 1.0 – ‘search’ SQL Injection (Unauthenticated)
# Exploit Title: Church Management System 1.0 - 'search' SQL Injection (Unauthenticated)
WordPress 5.7 – ‘Media Library’ XML External Entity Injection (XXE) (Authenticated)
# Exploit Title: WordPress 5.7 - 'Media Library' XML External Entity Injection (XXE) (Authenticated)
Online Food Ordering System 2.0 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: Online Food Ordering System 2.0 - Remote Code Execution (RCE) (Unauthenticated)
Church Management System 1.0 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: Church Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
Budget and Expense Tracker System 1.0 – Authenticated Bypass
# Exploit Title: Budget and Expense Tracker System 1.0 - Authenticated Bypass
WordPress Plugin WooCommerce Booster Plugin 5.4.3 – Authentication Bypass
# Exploit Title: WordPress Plugin WooCommerce Booster Plugin 5.4.3 - Authentication Bypass
Library Management System 1.0 – Blind Time-Based SQL Injection (Unauthenticated)
# Exploit Title: Library Management System 1.0 - Blind Time-Based SQL Injection (Unauthenticated)
Simple Attendance System 1.0 – Authenticated bypass
# Exploit Title: Simple Attendance System 1.0 - Authenticated bypass
ImpressCMS 1.4.2 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: ImpressCMS 1.4.2 - Remote Code Execution (RCE) (Authenticated)
Support Board 3.3.3 – ‘Multiple’ SQL Injection (Unauthenticated)
# Exploit Title: Support Board 3.3.3 - 'Multiple' SQL Injection (Unauthenticated)
Seowon 130-SLC router – ‘queriesCnt’ Remote Code Execution (Unauthenticated)
# Exploit Title: Seowon 130-SLC router - 'queriesCnt' Remote Code Execution (Unauthenticated)