phpPgAdmin 7.13.0 – COPY FROM PROGRAM Command Execution (Authenticated)
# Exploit Title: phpPgAdmin 7.13.0 - COPY FROM PROGRAM Command Execution (Authenticated)
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 55
Zabbix 3.4.7 – Stored XSS
# Exploit Title: Zabbix 3.4.7 - Stored XSS
DD-WRT 45723 – UPNP Buffer Overflow (PoC)
# Exploit Title: DD-WRT 45723 - UPNP Buffer Overflow (PoC)
CourseMS 2.1 – ‘name’ Stored XSS
# Exploit Title: CourseMS 2.1 - 'name' Stored XSS
GetSimple CMS 3.3.16 – Persistent Cross-Site Scripting
# Exploit Title: GetSimple CMS 3.3.16 - Reflected XSS to RCE
Openlitespeed 1.7.9 – ‘Notes’ Stored Cross-Site Scripting
# Exploit Title: Openlitespeed 1.7.9 - 'Notes' Stored Cross-Site Scripting
WordPress Plugin WP Super Cache 1.7.1 – Remote Code Execution (Authenticated)
# Exploit Title: WordPress Plugin WP Super Cache 1.7.1 - Remote Code Execution (Authenticated)
vsftpd 3.0.3 – Remote Denial of Service
# Exploit Title: vsftpd 3.0.3 - Remote Denial of Service
TP-Link Devices – ‘setDefaultHostname’ Stored Cross-site Scripting (Unauthenticated)
# Exploit Title: TP-Link Devices - 'setDefaultHostname' Stored Cross-site Scripting (Unauthenticated)
Concrete5 8.5.4 – ‘name’ Stored XSS
# Exploit Title: Concrete5 8.5.4 - 'name' Stored XSS
Equipment Inventory System 1.0 – ‘multiple’ Stored XSS
# Exploit Title: Equipment Inventory System 1.0 - 'multiple' Stored XSS
Budget Management System 1.0 – ‘Budget title’ Stored XSS
# Exploit Title: Budget Management System 1.0 - 'Budget title' Stored XSS
Novel Boutique House-plus 3.5.1 – Arbitrary File Download
# Exploit Title: Novel Boutique House-plus 3.5.1 - Arbitrary File Download
SyncBreeze 10.1.16 – XML Parsing Stack-based Buffer Overflow
# Exploit Title: SyncBreeze 10.1.16 - XML Parsing Stack-based Buffer Overflow
‘customhs_js_content’ – ‘customhs_js_content’ Cross-Site Request Forgery
# Exploit Title: GetSimple CMS Custom JS Plugin 0.1 - 'customhs_js_content' Cross-Site Request Forgery
Regis Inventory And Monitoring System 1.0 – ‘Item List’ Persistent Cross-Site Scripting
# Title: Regis Inventory And Monitoring System 1.0 - 'Item List' Persistent Cross-Site Scripting
Moodle 3.10.3 – ‘label’ Persistent Cross Site Scripting
# Exploit Title: Moodle 3.10.3 - 'label' Persistent Cross Site Scripting
Ovidentia 6 – ‘id’ SQL injection (Authenticated)
# Exploit Title: Ovidentia 6 - 'id' SQL injection (Authenticated)
Linksys EA7500 2.0.8.194281 – Cross-Site Scripting
# Exploit Title: Linksys EA7500 2.0.8.194281 - Cross-Site Scripting
Genexis Platinum-4410 P4410-V2-1.31A – ‘start_addr’ Persistent Cross-Site Scripting
# Exploit Title: Genexis Platinum-4410 P4410-V2-1.31A - 'start_addr' Persistent Cross-Site Scripting
Dolibarr ERP 11.0.4 – File Upload Restrictions Bypass (Authenticated RCE)
# Exploit Title: Dolibarr ERP/CRM 11.0.4 - File Upload Restrictions Bypass (Authenticated RCE)
Ext2Fsd v0.68 – ‘Ext2Srv’ Unquoted Service Path
# Exploit Title: Ext2Fsd v0.68 - 'Ext2Srv' Unquoted Service Path
MyBB 1.8.25 – Poll Vote Count SQL Injection
# Exploit Title: MyBB 1.8.25 - Poll Vote Count SQL Injection
Hotel And Lodge Management System 1.0 – ‘Customer Details’ Stored XSS
# Exploit Title: Hotel And Lodge Management System 1.0 - 'Customer Details' Stored XSS
Hi-Rez Studios 5.1.6.3 – ‘HiPatchService’ Unquoted Service Path
# Exploit Title: Hi-Rez Studios 5.1.6.3 - 'HiPatchService' Unquoted Service Path
ELAN Touchpad 15.2.13.1_X64_WHQL – ‘ETDService’ Unquoted Service Path
# Exploit Title: ELAN Touchpad 15.2.13.1_X64_WHQL - 'ETDService' Unquoted Service Path
ActivIdentity 8.2 – ‘ac.sharedstore’ Unquoted Service Path
# Exploit Title: ActivIdentity 8.2 - 'ac.sharedstore' Unquoted Service Path
Elodea Event Collector 4.9.3 – ‘ElodeaEventCollectorService’ Unquoted Service Path
# Exploit Title: Elodea Event Collector 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service Path
Codiad 2.8.4 – Remote Code Execution (Authenticated)
# Exploit Title: Codiad 2.8.4 - Remote Code Execution (Authenticated)
SAPSetup Automatic Workstation Update Service 750 – ‘NWSAPAutoWorkstationUpdateSvc’ Unquoted Service Path
# Exploit Title: SAPSetup Automatic Workstation Update Service 750 - 'NWSAPAutoWorkstationUpdateSvc' Unquoted Service...
Winpakpro 4.8 – ‘GuardTourService’ Unquoted Service Path
# Exploit Title: Winpakpro 4.8 - 'GuardTourService' Unquoted Service Path
Winpakpro 4.8 – ‘ScheduleService’ Unquoted Service Path
# Exploit Title: Winpakpro 4.8 - 'ScheduleService' Unquoted Service Path
Winpakpro 4.8 – ‘WPCommandFileService’ Unquoted Service Path
# Exploit Title: Winpakpro 4.8 - 'WPCommandFileService' Unquoted Service Path
WordPress Plugin Delightful Downloads Jquery File Tree 1.6.6 – Path Traversal
# Exploit Title: WordPress Plugin Delightful Downloads Jquery File Tree 1.6.6 - Path Traversal
MacPaw Encrypto 1.0.1 – ‘Encrypto Service’ Unquoted Service Path
# Exploit Title: MacPaw Encrypto 1.0.1 - 'Encrypto Service' Unquoted Service Path
KZTech T3500V 4G LTE CPE 2.0.1 – Weak Default WiFi Password Algorithm
# Exploit Title: KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Weak Default WiFi Password Algorithm
MyBB 1.8.25 – Chained Remote Command Execution
# Exploit Title: MyBB 1.8.25 - Chained Remote Command Execution
ProFTPD 1.3.7a – Remote Denial of Service
# Exploit Title: ProFTPD 1.3.7a - Remote Denial of Service
OSAS Traverse Extension 11 – ‘travextensionhostsvc’ Unquoted Service Path
# Exploit Title: OSAS Traverse Extension 11 - 'travextensionhostsvc' Unquoted Service Path
Plone CMS 5.2.3 – ‘Title’ Stored XSS
# Exploit Title: Plone CMS 5.2.3 - 'Title' Stored XSS
LiveZilla Server 8.0.1.0 – ‘Accept-Language’ Reflected XSS
# Exploit Title: LiveZilla Server 8.0.1.0 - 'Accept-Language' Reflected XSS
Boonex Dolphin 7.4.2 – ‘width’ Stored XSS
# Exploit Title: Boonex Dolphin 7.4.2 - 'width' Stored XSS
BRAdmin Professional 3.75 – ‘BRA_Scheduler’ Unquoted Service Path
# Exploit Title: BRAdmin Professional 3.75 - 'BRA_Scheduler' Unquoted Service Path
Profiling System for Human Resource Management 1.0 – Remote Code Execution (Unauthenticated)
# Exploit Title: Profiling System for Human Resource Management 1.0 - Remote Code Execution (Unauthenticated)
Eclipse Mosquitto MQTT broker 2.0.9 – ‘mosquitto’ Unquoted Service Path
# Exploit Title: Eclipse Mosquitto MQTT broker 2.0.9 - 'mosquitto' Unquoted Service Path
VestaCP 0.9.8 – ‘v_sftp_licence’ Command Injection
# Title: VestaCP 0.9.8 - 'v_sftp_licence' Command Injection
CouchCMS 2.2.1 – Server-Side Request Forgery
# Exploit Title: CouchCMS 2.2.1 - SSRF via SVG file upload
SOYAL Biometric Access Control System 5.0 – Master Code Disclosure
# Exploit Title: SOYAL Biometric Access Control System 5.0 - Master Code Disclosure
SOYAL Biometric Access Control System 5.0 – ‘Change Admin Password’ CSRF
# Exploit Title: SOYAL Biometric Access Control System 5.0 - 'Change Admin Password' CSRF
SOYAL 701 Server 9.0.1 – Insecure Permissions
# Exploit Title: SOYAL 701 Server 9.0.1 - Insecure Permissions