Ghost CMS 5.59.1 – Arbitrary File Read
#!/usr/bin/env python3
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 5
ServiceNow Multiple Versions – Input Validation & Template Injection
#!/usr/bin/env python3
JetBrains TeamCity 2023.11.4 – Authentication Bypass
#!/usr/bin/env python3
Microsoft Virtual Hard Disk (VHDX) 11 – Remote Code Execution (RCE)
# Titles: Microsoft Virtual Hard Disk (VHDX) 11 - Remote Code Execution (RCE)
Microsoft Edge (Chromium-based) 135.0.7049.114/.115 – Information Disclosure
# Titles: Microsoft Edge (Chromium-based) 135.0.7049.114/.115 - Information Disclosure
Copyparty 1.18.6 – Reflected Cross-Site Scripting (XSS)
allowing an attacker to inject and execute arbitrary JavaScript in a victim’s browser
Ultimate Member WordPress Plugin 2.6.6 – Privilege Escalation
#!/usr/bin/env python3
Xlight FTP 1.1 – Denial Of Service (DOS)
# Exploit Title: Xlight FTP 1.1 - Denial Of Service (DOS)
Invision Community 4.7.20 – (calendar/view.php) SQL Injection
# Exploit Title: Invision Community
XWiki 14 – SQL Injection via getdeleteddocuments.vm
# Exploit Title: XWiki 14 - SQL Injection via getdeleteddocuments.vm
Mezzanine CMS 6.1.0 – Stored Cross Site Scripting (XSS)
# Exploit Title: Mezzanine CMS 6.1.0 Stored Cross Site Scripting (XSS)
Linux PAM Environment – Variable Injection Local Privilege Escalation
# Exploit Title: Linux PAM Environment - Variable Injection Local Privilege Escalation
Adobe ColdFusion 2023.6 – Remote File Read
# Exploit Title: Adobe ColdFusion 2023.6 - Remote File Read
Simple File List WordPress Plugin 4.2.2 – File Upload to RCE
# Exploit Title: Simple File List WordPress Plugin 4.2.2 - File Upload to RCE
Pie Register WordPress Plugin 3.7.1.4 – Authentication Bypass to RCE
# Exploit Title: Pie Register WordPress Plugin 3.7.1.4 - Authentication Bypass to RCE
Microsoft Edge Windows 10 Version 1511 – Cross Site Scripting (XSS)
# Titles: Microsoft Edge Windows 10 Version 1511 - Cross Site Scripting (XSS)
Joomla JS Jobs plugin 1.4.2 – SQL injection
# Exploit Title: Joomla JS Jobs plugin 1.4.2 - SQL injection
Discourse 3.1.1 – Unauthenticated Chat Message Access
#!/usr/bin/env ruby
LiveHelperChat 4.61 – Stored Cross Site Scripting (XSS) via Telegram Bot Username
# Exploit Title: LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS)
LiveHelperChat 4.61 – Stored Cross Site Scripting (XSS) via Operator Surname
# Exploit Title: LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Operator Surname
LiveHelperChat 4.61 – Stored Cross Site Scripting (XSS) via Facebook Integration Page Name Field
# Exploit Title: LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS)
LiveHelperChat 4.61 – Stored Cross Site Scripting (XSS) via Personal Canned Messages
# Exploit Title: LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS)
LiveHelperChat 4.61 – Stored Cross Site Scripting (XSS) via the Chat Transfer Function
# Exploit Title: LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via the Chat Transfer Function
LiveHelperChat 4.61 – Stored Cross Site Scripting (XSS) via Department Assignment Alias Nick Field
# Exploit Title: LiveHelperChat
MikroTik RouterOS 7.19.1 – Reflected XSS
# Exploit Title: MikroTik RouterOS 7.19.1 - Reflected XSS
Keras 2.15 – Remote Code Execution (RCE)
#!/usr/bin/env python3
Microsoft Brokering File System Windows 11 Version 22H2 – Elevation of Privilege
# Titles: Microsoft Brokering File System Windows 11 Version 22H2 - Elevation of Privilege
PivotX 3.0.0 RC3 – Remote Code Execution (RCE)
# Exploit Title: PivotX v3.0.0 RC3 - Stored XSS to Remote Code Execution (RCE)
TOTOLINK N300RB 8.54 – Command Execution
# Title: TOTOLINK N300RB 8.54 - Command Execution
Langflow 1.2.x – Remote Code Execution (RCE)
#!/usr/bin/env python3
SugarCRM 14.0.0 – SSRF/Code Injection
# Exploit Title : SugarCRM 14.0.0 - SSRF/Code Injection
White Star Software Protop 4.4.2-2024-11-27 – Local File Inclusion (LFI)
# Exploit Title: White Star Software Protop 4.4.2-2024-11-27 - Local File Inclusion (LFI)
WP Publications WordPress Plugin 1.2 – Stored XSS
# Exploit Title: WP Publications WordPress Plugin 1.2 - Stored XSS
NodeJS 24.x – Path Traversal
# Exploit Title : NodeJS 24.x - Path Traversal
Microsoft PowerPoint 2019 – Remote Code Execution (RCE)
#!/usr/bin/env python3
Sudo chroot 1.9.17 – Local Privilege Escalation
Exploit Title: Sudo chroot 1.9.17 - Local Privilege Escalation
ScriptCase 9.12.006 (23) – Remote Command Execution (RCE)
# Exploit Title: ScriptCase 9.12.006 (23) - Remote Command Execution (RCE)
Sudo 1.9.17 Host Option – Elevation of Privilege
# Exploit Title: Sudo 1.9.17 Host Option - Elevation of Privilege
Microsoft Outlook – Remote Code Execution (RCE)
# Titles: Microsoft Outlook - Remote Code Execution (RCE)
Stacks Mobile App Builder 5.2.3 – Authentication Bypass via Account Takeover
# Exploit Title: Stacks Mobile App Builder 5.2.3 - Authentication Bypass via Account Takeover
Discourse 3.2.x – Anonymous Cache Poisoning
#!/usr/bin/env python3
Wing FTP Server 7.4.3 – Unauthenticated Remote Code Execution (RCE)
# Exploit Title: Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
gogs 0.13.0 – Remote Code Execution (RCE)
# Exploit Title: gogs 0.13.0 - Remote Code Execution (RCE)
Moodle 4.4.0 – Authenticated Remote Code Execution
# Exploit Title: Moodle 4.4.0 - Authenticated Remote Code Execution