Codiad 2.8.4 – Remote Code Execution (Authenticated) (2)
# Exploit Title: Codiad 2.8.4 - Remote Code Execution (Authenticated) (2)
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 52
WordPress Plugin ReDi Restaurant Reservation 21.0307 – ‘Comment’ Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin ReDi Restaurant Reservation 21.0307 - 'Comment' Stored Cross-Site Scripting (XSS)
Spotweb 1.4.9 – DOM Based Cross-Site Scripting (XSS)
# Exploit Title: Spotweb 1.4.9 - DOM Based Cross-Site Scripting (XSS)
Mozilla Firefox 88.0.1 – File Extension Execution of Arbitrary Code
# Exploit Title: Mozilla Firefox 88.0.1 - File Extension Execution of Arbitrary Code
DELL dbutil_2_3.sys 2.3 – Arbitrary Write to Local Privilege Escalation (LPE)
# Exploit Title: DELL dbutil_2_3.sys 2.3 - Arbitrary Write to Local Privilege Escalation (LPE)
WordPress Plugin WP Statistics 13.0.7 – Time-Based Blind SQL Injection (Unauthenticated)
# Exploit Title: WordPress Plugin WP Statistics 13.0.7 - Time-Based Blind SQL Injection (Unauthenticated)
Microsoft Exchange 2019 – Unauthenticated Email Download (Metasploit)
# Exploit Title: Microsoft Exchange 2019 - Unauthenticated Email Download (Metasploit)
Solaris SunSSH 11.0 x86 – libpam Remote Root (2)
# Exploit Title: Solaris SunSSH 11.0 x86 - libpam Remote Root (2)
ASUS HID Access Service 1.0.94.0 – ‘AsHidSrv.exe’ Unquoted Service Path
# Exploit Title: ASUS HID Access Service 1.0.94.0 - 'AsHidSrv.exe' Unquoted Service Path
Backup Manager Module 3.0.0.99 – ‘IScheduleSvc.exe’ Unquoted Service Path
# Exploit Title: Acer Backup Manager Module 3.0.0.99 - 'IScheduleSvc.exe' Unquoted Service Path
Acer Updater Service 1.2.3500.0 – ‘UpdaterService.exe’ Unquoted Service Path
# Exploit Title: Acer Updater Service 1.2.3500.0 - 'UpdaterService.exe' Unquoted Service Path
WordPress Plugin Stop Spammers 2021.8 – ‘log’ Reflected Cross-site Scripting (XSS)
# Exploit Title: WordPress Plugin Stop Spammers 2021.8 - 'log' Reflected Cross-site Scripting (XSS)
Visual Studio Code 1.47.1 – Denial of Service (PoC)
# Exploit Tittle: Visual Studio Code 1.47.1 - Denial of Service (Poc)
WebSSH for iOS 14.16.10 – ‘mashREPL’ Denial of Service (PoC)
# Exploit Title: WebSSH for iOS 14.16.10 - 'mashREPL' Denial of Service (PoC)
In4Suit ERP 3.2.74.1370 – ‘txtLoginId’ SQL injection
# Exploit Title: In4Suit ERP 3.2.74.1370 - 'txtLoginId' SQL injection
ManageEngine ADSelfService Plus 6.1 – CSV Injection
# Exploit Title: ManageEngine ADSelfService Plus 6.1 - CSV Injection
COVID19 Testing Management System 1.0 – SQL Injection (Auth Bypass)
# Exploit Title: COVID19 Testing Management System 1.0 - SQL Injection (Auth Bypass)
COVID19 Testing Management System 1.0 – ‘Admin name’ Cross-Site Scripting (XSS)
# Exploit Title: COVID19 Testing Management System 1.0 - 'Admin name' Cross-Site Scripting (XSS)
EgavilanMedia PHPCRUD 1.0 – ‘First Name’ SQL Injection
# Exploit Title: EgavilanMedia PHPCRUD 1.0 - 'First Name' SQL Injection
Microsoft Exchange 2019 – Unauthenticated Email Download
# Exploit Title: Microsoft Exchange 2019 - Unauthenticated Email Download
Customer Relationship Management (CRM) System 1.0 – ‘Category’ Persistent Cross site Scripting
# Exploit Title: Customer Relationship Management (CRM) System 1.0 - 'Category' Persistent Cross site Scripting
IPFire 2.25 – Remote Code Execution (Authenticated)
# Exploit Title: IPFire 2.25 - Remote Code Execution (Authenticated)
Dental Clinic Appointment Reservation System 1.0 – ‘Firstname’ Persistent Cross Site Scripting (Authenticated)
# Exploit Title: Dental Clinic Appointment Reservation System 1.0 - 'Firstname' Persistent Cross Site Scripting (Auth...
Dental Clinic Appointment Reservation System 1.0 – Cross Site Request Forgery (Add Admin)
# Exploit Title: Dental Clinic Appointment Reservation System 1.0 - Cross Site Request Forgery (Add Admin)
Microsoft Internet Explorer 8 – ‘SetMouseCapture ‘ Use After Free
# Exploit Title: Microsoft Internet Explorer 8 - 'SetMouseCapture ' Use After Free
Simple Chatbot Application 1.0 – ‘Category’ Stored Cross site Scripting
# Exploit Title: Simple Chatbot Application 1.0 - 'Category' Stored Cross site Scripting
Billing Management System 2.0 – Union based SQL injection (Authenticated)
# Exploit Title: Billing Management System 2.0 - Union based SQL injection (Authenticated)
Advanced Guestbook 2.4.4 – ‘Smilies’ Persistent Cross-Site Scripting (XSS)
# Exploit Title: Advanced Guestbook 2.4.4 - 'Smilies' Persistent Cross-Site Scripting (XSS)
Subrion CMS 4.2.1 – Arbitrary File Upload
# Exploit Title: Subrion CMS 4.2.1 - File Upload Bypass to RCE (Authenticated)
Printable Staff ID Card Creator System 1.0 – ’email’ SQL Injection
# Exploit Title: Printable Staff ID Card Creator System 1.0 - SQLi & RCE via Arbitrary File Upload
Student Management System 1.0 – ‘message’ Persistent Cross-Site Scripting (Authenticated)
# Exploit Title: Student Management System 1.0 - 'message' Persistent Cross-Site Scripting (Authenticated)
Podcast Generator 3.1 – ‘Long Description’ Persistent Cross-Site Scripting (XSS)
# Exploit Title: Podcast Generator 3.1 - 'Long Description' Persistent Cross-Site Scripting (XSS)
Chamilo LMS 1.11.14 – Remote Code Execution (Authenticated)
# Exploit Title: Chamilo LMS 1.11.14 - Remote Code Execution (Authenticated)
Dental Clinic Appointment Reservation System 1.0 – Authentication Bypass (SQLi)
# Exploit Title: Dental Clinic Appointment Reservation System 1.0 - Authentication Bypass (SQLi)
Dental Clinic Appointment Reservation System 1.0 – ‘date’ UNION based SQL Injection (Authenticated)
# Exploit Title: Dental Clinic Appointment Reservation System 1.0 - 'date' UNION based SQL Injection (Authenticated)
ZeroShell 3.9.0 – Remote Command Execution
# Exploit Title: ZeroShell 3.9.0 - Remote Command Execution
Microsoft Internet Explorer 11 and WPAD service ‘Jscript.dll’ – Use-After-Free
# Exploit Title: Microsoft Internet Explorer 8/11 and WPAD service 'Jscript.dll' - Use-After-Free
Firefox 72 IonMonkey – JIT Type Confusion
# Exploit Title: Firefox 72 IonMonkey - JIT Type Confusion
Chevereto 3.17.1 – Cross Site Scripting (Stored)
# Exploit Title: Chevereto 3.17.1 - Cross Site Scripting (Stored)
Odoo 12.0.20190101 – ‘nssm.exe’ Unquoted Service Path
# Exploit Title: Odoo 12.0.20190101 - 'nssm.exe' Unquoted Service Path
DHCP Broadband 4.1.0.1503 – ‘dhcpt.exe’ Unquoted Service Path
# Exploit Title: DHCP Broadband 4.1.0.1503 - 'dhcpt.exe' Unquoted Service Path
BOOTP Turbo 2.0.0.1253 – ‘bootpt.exe’ Unquoted Service Path
# Exploit Title: BOOTP Turbo 2.0.0.1253 - 'bootpt.exe' Unquoted Service Path
TFTP Broadband 4.3.0.1465 – ‘tftpt.exe’ Unquoted Service Path
# Exploit Title: TFTP Broadband 4.3.0.1465 - 'tftpt.exe' Unquoted Service Path
PHP Timeclock 1.04 – ‘Multiple’ Cross Site Scripting (XSS)
# Exploit Title: PHP Timeclock 1.04 - 'Multiple' Cross Site Scripting (XSS)
Human Resource Information System 0.1 – ‘First Name’ Persistent Cross-Site Scripting (Authenticated)
# Exploit Title: Human Resource Information System 0.1 - 'First Name' Persistent Cross-Site Scripting (Authenticated)
Microweber CMS 1.1.20 – Remote Code Execution (Authenticated)
# Exploit Title: Microweber CMS 1.1.20 - Remote Code Execution (Authenticated)
Epic Games Easy Anti-Cheat 4.0 – Local Privilege Escalation
# Exploit Title: Epic Games Easy Anti-Cheat 4.0 - Local Privilege Escalation
Sandboxie Plus 0.7.4 – ‘SbieSvc’ Unquoted Service Path
# Exploit Title: Sandboxie Plus 0.7.4 - 'SbieSvc' Unquoted Service Path
Voting System 1.0 – Authentication Bypass (SQLI)
# Exploit Title: Voting System 1.0 - Authentication Bypass (SQLI)
Sandboxie 5.49.7 – Denial of Service (PoC)
# Exploit Title: Sandboxie 5.49.7 - Denial of Service (PoC)