Solaris 10 (Intel) – ‘dtprintinfo’ Local Privilege Escalation (3)
# Exploit Title: Solaris 10 1/13 (Intel) - 'dtprintinfo' Local Privilege Escalation (3)
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 59
Solaris 10 (SPARC) – ‘dtprintinfo’ Local Privilege Escalation (1)
# Exploit Title: Solaris 10 1/13 (SPARC) - 'dtprintinfo' Local Privilege Escalation
Solaris 10 (SPARC) – ‘dtprintinfo’ Local Privilege Escalation (2)
# Exploit Title: Solaris 10 1/13 (SPARC) - 'dtprintinfo' Local Privilege Escalation (2)
Solaris 10 (SPARC) – ‘dtprintinfo’ Local Privilege Escalation (3)
# Exploit Title: Solaris 10 1/13 (SPARC) - 'dtprintinfo' Local Privilege Escalation (3)
MyBB Delete Account Plugin 1.4 – Cross-Site Scripting
# Exploit Title: MyBB Delete Account Plugin 1.4 - Cross-Site Scripting
Zoo Management System 1.0 – ‘anid’ SQL Injection
# Exploit Title: Zoo Management System 1.0 - 'anid' SQL Injection
User Management System 1.0 – ‘uid’ SQL Injection
# Exploit Title: User Management System 1.0 - 'uid' SQL Injection
Park Ticketing Management System 1.0 – ‘viewid’ SQL Injection
# Exploit Title: Park Ticketing Management System 1.0 - 'viewid' SQL Injection
MyBB Trending Widget Plugin 1.2 – Cross-Site Scripting
# Exploit Title: MyBB Trending Widget Plugin 1.2 - Cross-Site Scripting
MyBB Thread Redirect Plugin 0.2.1 – Cross-Site Scripting
# Exploit Title: MyBB Thread Redirect Plugin 0.2.1 - Cross-Site Scripting
bloofoxCMS 0.5.2.1 – CSRF (Add user)
# Title: bloofoxCMS 0.5.2.1 - CSRF (Add user)
H8 SSRMS – ‘id’ IDOR
# Exploit Title: H8 SSRMS - 'id' IDOR
Vehicle Parking Tracker System 1.0 – ‘Owner Name’ Stored Cross-Site Scripting
# Exploit Title: Vehicle Parking Tracker System 1.0 - 'Owner Name' Stored Cross-Site Scripting
Roundcube Webmail 1.2 – File Disclosure
# Exploit Title: Roundcube Webmail 1.2 - File Disclosure
Klog Server 2.4.1 – Command Injection (Authenticated)
# Exploit Title: Klog Server 2.4.1 - Command Injection (Authenticated)
WordPress 5.0.0 – Image Remote Code Execution
# Exploit Title: WordPress 5.0.0 - Image Remote Code Execution
BloofoxCMS 0.5.2.1 – ‘text’ Stored Cross Site Scripting
# Title: BloofoxCMS 0.5.2.1 - 'text' Stored Cross Site Scripting
Online Grading System 1.0 – ‘uname’ SQL Injection
# Exploit Title: Online Grading System 1.0 - 'uname' SQL Injection
Quick.CMS 6.7 – Remote Code Execution (Authenticated)
# Exploit Title: Quick.CMS 6.7 - Remote Code Execution (Authenticated)
Home Assistant Community Store (HACS) 1.10.0 – Directory Traversal
# Exploit Title: Home Assistant Community Store (HACS) 1.10.0 - Path Traversal to Account Takeover
MyBB Hide Thread Content Plugin 1.0 – Information Disclosure
# Exploit Title: MyBB Hide Thread Content Plugin 1.0 - Information Disclosure
Simple Public Chat Room 1.0 – Authentication Bypass SQLi
# Exploit Title: Simple Public Chat Room 1.0 - Authentication Bypass SQLi
Simple Public Chat Room 1.0 – ‘msg’ Stored Cross-Site Scripting
# Exploit Title: Simple Public Chat Room 1.0 - 'msg' Stored Cross-Site Scripting
SonicWall SSL-VPN 8.0.0.0 – ‘visualdoor’ Remote Code Execution (Unauthenticated)
# Exploit Title: SonicWall SSL-VPN 8.0.0.0 - 'shellshock/visualdoor' Remote Code Execution (Unauthenticated)
EgavilanMedia PHPCRUD 1.0 – ‘Full Name’ Stored Cross Site Scripting
# Exploit Title: EgavilanMedia PHPCRUD 1.0 - 'Full Name' Stored Cross Site Scripting
CMSUno 1.6.2 – ‘lang’ Remote Code Execution (Authenticated)
# Exploit Title: CMSUno 1.6.2 - 'lang/user' Remote Code Execution (Authenticated)
OpenEMR 5.0.1 – Remote Code Execution (Authenticated) (2)
# Title: OpenEMR 5.0.1 - Remote Code Execution (Authenticated) (2)
Fuel CMS 1.4.1 – Remote Code Execution (2)
# Title: Fuel CMS 1.4.1 - Remote Code Execution (2)
Umbraco CMS 7.12.4 – Remote Code Execution (Authenticated)
# Exploit Title: Umbraco CMS 7.12.4 - Remote Code Execution (Authenticated)
jQuery UI 1.12.1 – Denial of Service (DoS)
# Exploit Title: jQuery UI 1.12.1 - Denial of Service (DoS)
WordPress Plugin SuperForms 4.9 – Arbitrary File Upload
# Exploit Title: WordPress Plugin SuperForms 4.9 - Arbitrary File Upload to Remote Code Execution
Metasploit Framework 6.0.11 – msfvenom APK template command injection
# Exploit Title: Metasploit Framework 6.0.11 - msfvenom APK template command injection
STVS ProVision 5.9.10 – File Disclosure (Authenticated)
# Exploit Title: STVS ProVision 5.9.10 - File Disclosure (Authenticated)
STVS ProVision 5.9.10 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: STVS ProVision 5.9.10 - Cross-Site Request Forgery (Add Admin)
Openlitespeed Web Server 1.7.8 – Command Injection (Authenticated) (1)
# Exploit Title: Openlitespeed WebServer 1.7.8 - Command Injection (Authenticated)
Cemetry Mapping and Information System 1.0 – ‘user_email’ Sql Injection (Authentication Bypass)
# Exploit Title: Cemetry Mapping and Information System 1.0 - 'user_email' Sql Injection (Authentication Bypass)
Simple College Website 1.0 – ‘name’ Sql Injection (Authentication Bypass)
# Exploit Title: Simple College Website 1.0 - 'name' Sql Injection (Authentication Bypass)
Simple College Website 1.0 – ‘full’ Stored Cross Site Scripting
# Exploit Title: Simple College Website 1.0 - 'full' Stored Cross Site Scripting
Tenda AC5 AC1200 Wireless – ‘WiFi Name & Password’ Stored Cross Site Scripting
# Exploit Title: Tenda AC5 AC1200 Wireless - 'WiFi Name & Password' Stored Cross Site Scripting
Oracle WebLogic Server 12.2.1.0 – RCE (Unauthenticated)
# Exploit Title: Oracle WebLogic Server 12.2.1.0 - RCE (Unauthenticated)
MyBB Timeline Plugin 1.0 – Persistent Cross-Site Scripting
# Exploit Title: MyBB Timeline Plugin 1.0 - Cross-Site Scripting / CSRF
Collabtive 3.1 – ‘address’ Persistent Cross-Site Scripting
# Exploit Title: Collabtive 3.1 - 'address' Persistent Cross-Site Scripting
CASAP Automated Enrollment System 1.0 – ‘First Name’ Stored XSS
# Exploit Title: CASAP Automated Enrollment System 1.0 - 'First Name' Stored XSS
CASAP Automated Enrollment System 1.0 – ‘route’ Stored XSS
# Exploit Title: CASAP Automated Enrollment System 1.0 - 'route' Stored XSS
Library System 1.0 – ‘category’ SQL Injection
# Exploit Title: Library System 1.0 - 'category' SQL Injection
Selea CarPlateServer (CPS) 4.0.1.6 – Remote Program Execution
# Exploit Title: Selea CarPlateServer (CPS) 4.0.1.6 - Remote Program Execution
Selea CarPlateServer (CPS) 4.0.1.6 – Local Privilege Escalation
# Exploit Title: Selea CarPlateServer (CPS) 4.0.1.6 - Local Privilege Escalation
Selea Targa IP OCR-ANPR Camera – ‘files_list’ Remote Stored XSS
# Exploit Title: Selea Targa IP OCR-ANPR Camera - 'files_list' Remote Stored XSS
Selea Targa IP OCR-ANPR Camera – Developer Backdoor Config Overwrite
# Exploit Title: Selea Targa IP OCR-ANPR Camera - Developer Backdoor Config Overwrite