WifiHotSpot 1.0.0.0 – ‘WifiHotSpotService.exe’ Unquoted Service Path
# Exploit Title: WifiHotSpot 1.0.0.0 - 'WifiHotSpotService.exe' Unquoted Service Path
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 53
Voting System 1.0 – Remote Code Execution (Unauthenticated)
# Exploit Title: Voting System 1.0 - Remote Code Execution (Unauthenticated)
Human Resource Information System 0.1 – Remote Code Execution (Unauthenticated)
# Exploit Title: Human Resource Information System 0.1 - Remote Code Execution (Unauthenticated)
Epic Games Rocket League 1.95 – Stack Buffer Overrun
# Exploit Title: Epic Games Rocket League 1.95 - Stack Buffer Overrun
PHP Timeclock 1.04 – Time and Boolean Based Blind SQL Injection
# Exploit Title: PHP Timeclock 1.04 - Time and Boolean Based Blind SQL Injection
Schlix CMS 2.2.6-6 – ‘title’ Persistent Cross-Site Scripting (Authenticated)
# Exploit Title: Schlix CMS 2.2.6-6 - 'title' Persistent Cross-Site Scripting (Authenticated)
Schlix CMS 2.2.6-6 – Remote Code Execution (Authenticated)
# Exploit Title: Schlix CMS 2.2.6-6 - Remote Code Execution (Authenticated)
WordPress Plugin WP Super Edit 2.5.4 – Remote File Upload
# Title: Wordpress Plugin WP Super Edit 2.5.4 - Remote File Upload
b2evolution 7-2-2 – ‘cf_name’ SQL Injection
# Exploit Title: b2evolution 7-2-2 - 'cf_name' SQL Injection
Savsoft Quiz 5 – ‘User Account Settings’ Persistent Cross-Site Scripting
# Exploit Title: Savsoft Quiz 5 - 'User Account Settings' Persistent Cross-Site Scripting
Markdown Explorer 0.1.1 – Persistent Cross-Site Scripting
# Exploit Title: Markdown Explorer 0.1.1 - XSS to RCE
Xmind 2020 – Persistent Cross-Site Scripting
# Exploit Title: Xmind 2020 - XSS to RCE
Tagstoo 2.0.1 – Persistent Cross-Site Scripting
# Exploit Title: Tagstoo 2.0.1 - Stored XSS to RCE
SnipCommand 0.1.0 – Persistent Cross-Site Scripting
# Exploit Title: SnipCommand 0.1.0 - XSS to RCE
Moeditor 0.2.0 – Persistent Cross-Site Scripting
# Exploit Title: Moeditor 0.2.0 - Persistent Cross-Site Scripting
Marky 0.0.1 – Persistent Cross-Site Scripting
# Exploit Title: Marky 0.0.1 - Persistent Cross-Site Scripting
StudyMD 0.3.2 – Persistent Cross-Site Scripting
# Exploit Title: StudyMD 0.3.2 - Persistent Cross-Site Scripting
Freeter 1.2.1 – Persistent Cross-Site Scripting
# Exploit Title: Freeter 1.2.1 - Persistent Cross-Site Scripting
Markright 1.0 – Persistent Cross-Site Scripting
# Exploit Title: Markright 1.0 - Persistent Cross-Site Scripting
Markdownify 1.2.0 – Persistent Cross-Site Scripting
# Exploit Title: Markdownify 1.2.0 - Persistent Cross-Site Scripting
Anote 1.0 – Persistent Cross-Site Scripting
# Exploit Title: Anote 1.0 - Persistent Cross-Site Scripting
Internship Portal Management System 1.0 – Remote Code Execution(Unauthenticated)
# Exploit Title: Internship Portal Management System 1.0 - Remote Code Execution Via File Upload (Unauthenticated)
GetSimple CMS Custom JS 0.1 – Cross-Site Request Forgery
# Exploit Title: GetSimple CMS Custom JS 0.1 - CSRF to XSS to RCE
Voting System 1.0 – Time based SQLI (Unauthenticated SQL injection)
# Exploit Title: Voting System 1.0 - Time based SQLI (Unauthenticated SQL injection)
Piwigo 11.3.0 – ‘language’ SQL
# Exploit Title: Piwigo 11.3.0 - 'language' SQL
GitLab Community Edition (CE) 13.10.3 – User Enumeration
# Exploit Title: GitLab Community Edition (CE) 13.10.3 - User Enumeration
GitLab Community Edition (CE) 13.10.3 – ‘Sign_Up’ User Enumeration
# Exploit Title: GitLab Community Edition (CE) 13.10.3 - 'Sign_Up' User Enumeration
Moodle 3.6.1 – Persistent Cross-Site Scripting (XSS)
# Exploit Title: Moodle 3.6.1 - Persistent Cross-Site Scripting (XSS)
GNU Wget < 1.18 - Arbitrary File Upload (2)
# Exploit Title: GNU Wget < 1.18 - Arbitrary File Upload / Remote Code Execution (2)
Cacti 1.2.12 – ‘filter’ SQL Injection
# Exploit Title: Cacti 1.2.12 - 'filter' SQL Injection / Remote Code Execution
FOGProject 1.5.9 – File Upload RCE (Authenticated)
# Exploit Title: FOGProject 1.5.9 - File Upload RCE (Authenticated)
NodeBB Plugin Emoji 3.2.1 – Arbitrary File Write
# Exploit Title: NodeBB Plugin Emoji 3.2.1 - Arbitrary File Write
Kirby CMS 3.5.3.1 – ‘file’ Cross-Site Scripting (XSS)
# Exploit Title: Kirby CMS 3.5.3.1 - 'file' Cross-Site Scripting (XSS)
Kimai 1.14 – CSV Injection
# Exploit Title: Kimai 1.14 - CSV Injection
Montiorr 1.7.6m – Persistent Cross-Site Scripting
# Exploit Title: Montiorr 1.7.6m - Persistent Cross-Site Scripting
WordPress Plugin WPGraphQL 1.3.5 – Denial of Service
# Exploit Title: WordPress Plugin WPGraphQL 1.3.5 - Denial of Service
Hasura GraphQL 1.3.3 – Remote Code Execution
# Exploit Title: Hasura GraphQL 1.3.3 - Remote Code Execution
OpenPLC 3 – Remote Code Execution (Authenticated)
# Exploit Title: OpenPLC 3 - Remote Code Execution (Authenticated)
SEO Panel 4.8.0 – ‘order_col’ Blind SQL Injection (2)
# Exploit Title: SEO Panel 4.8.0 - 'order_col' Blind SQL Injection (2)
Moodle 3.10.3 – ‘url’ Persistent Cross Site Scripting
# Exploit Title: Moodle 3.10.3 - 'url' Persistent Cross Site Scripting
GetSimple CMS My SMTP Contact Plugin 1.1.2 – Persistent Cross-Site Scripting
# Exploit Title: GetSimple CMS My SMTP Contact Plugin 1.1.2 - CSRF to Stored XSS to RCE
DzzOffice 2.02.1 – ‘Multiple’ Cross-Site Scripting (XSS)
# Exploit Title: DzzOffice 2.02.1 - 'Multiple' Cross-Site Scripting (XSS)
Sipwise C5 NGCP CSC – ‘Multiple’ Persistent Cross-Site Scripting (XSS)
# Exploit Title: Sipwise C5 NGCP CSC - 'Multiple' Stored/Reflected Cross-Site Scripting (XSS)
Sipwise C5 NGCP CSC – Click2Dial Cross-Site Request Forgery (CSRF)
# Exploit Title: Sipwise C5 NGCP CSC - Click2Dial Cross-Site Request Forgery (CSRF)
CMS Made Simple 2.2.15 – ‘title’ Cross-Site Scripting (XSS)
# Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS)
OTRS 6.0.1 – Remote Command Execution (2)
# Exploit Title: OTRS 6.0.1 - Remote Command Execution (2)
RemoteClinic 2.0 – ‘Multiple’ Stored Cross-Site Scripting (XSS)
# Exploit Title: RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting (XSS)
Multilaser Router RE018 AC1200 – Cross-Site Request Forgery (Enable Remote Access)
# Exploit Title: Multilaser Router RE018 AC1200 - Cross-Site Request Forgery (Enable Remote Access)
Fast PHP Chat 1.3 – ‘my_item_search’ SQL Injection
# Exploit Title: Fast PHP Chat 1.3 - 'my_item_search' SQL Injection
WordPress Plugin RSS for Yandex Turbo 1.29 – Stored Cross-Site Scripting (XSS)
# Exploit Title: WordPress Plugin RSS for Yandex Turbo 1.29 - Stored Cross-Site Scripting (XSS)