Microsoft SharePoint 2019 – NTLM Authentication
# Titles: Microsoft SharePoint 2019 NTLM Authentication
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 6
freeSSHd 1.0.9 – Denial of Service (DoS)
# Exploit Title: freeSSHd 1.0.9 - Denial of Service (DoS)
PX4 Military UAV Autopilot 1.12.3 – Denial of Service (DoS)
# Exploit Title: PX4 Military UAV Autopilot 1.12.3 - Denial of Service (DoS)
OneTrust SDK 6.33.0 – Denial Of Service (DoS)
- **Exploit Title**: OneTrust SDK 6.33.0 - Denial Of Service (DoS)
Pterodactyl Panel 1.11.11 – Remote Code Execution (RCE)
# Exploit Title: Pterodactyl Panel 1.11.11 - Remote Code Execution (RCE)
Microsoft Excel 2024 Use after free – Remote Code Execution (RCE)
# Exploit Title: Microsoft Excel 2024 Use after free - Remote Code Execution (RCE)
Sitecore 10.4 – Remote Code Execution (RCE)
# Exploit Title: Sitecore 10.4 - Remote Code Execution (RCE)
McAfee Agent 5.7.6 – Insecure Storage of Sensitive Information
Exploit Title: McAfee Agent 5.7.6 - Insecure Storage of Sensitive Information
Social Warfare WordPress Plugin 3.5.2 – Remote Code Execution (RCE)
#!/usr/bin/env python3
FortiOS SSL-VPN 7.4.4 – Insufficient Session Expiration & Cookie Reuse
#!/usr/bin/env python3
Microsoft Excel LTSC 2024 – Remote Code Execution (RCE)
# Titles: Microsoft Excel LTSC 2024 - Remote Code Execution (RCE)
Ingress-NGINX 4.11.0 – Remote Code Execution (RCE)
# Exploit Title: Ingress-NGINX 4.11.0 - Remote Code Execution (RCE)
PCMan FTP Server 2.0.7 – Buffer Overflow
# Exploit Title: PCMan FTP Server 2.0.7 - Buffer Overflow
Anchor CMS 0.12.7 – Stored Cross Site Scripting (XSS)
# Exploit Title: Anchor CMS 0.12.7 - Stored Cross Site Scripting (XSS)
Litespeed Cache WordPress Plugin 6.3.0.1 – Privilege Escalation
# Exploit Title: Litespeed Cache WordPress Plugin 6.3.0.1 - Privilege Escalation
Parrot and DJI variants Drone OSes – Kernel Panic Exploit
#!/usr/bin/env python3
Windows 11 SMB Client – Privilege Escalation & Remote Code Execution (RCE)
#!/usr/bin/env python3
PHP CGI Module 8.3.4 – Remote Code Execution (RCE)
#!/usr/bin/env python3
Microsoft Excel Use After Free – Local Code Execution
# Titles: Microsoft Excel Use After Free - Local Code Execution
AirKeyboard iOS App 1.0.5 – Remote Input Injection
# Exploit Title: AirKeyboard iOS App 1.0.5 - Remote Input Injection
WebDAV Windows 10 – Remote Code Execution (RCE)
Exploit Title: WebDAV Windows 10 - Remote Code Execution (RCE)
Skyvern 0.1.85 – Remote Code Execution (RCE) via SSTI
# Exploit Title: Skyvern 0.1.85 - Remote Code Execution (RCE) via SSTI
Freefloat FTP Server 1.0 – Remote Buffer Overflow
# Exploit Title: Freefloat FTP Server 1.0 - Remote Buffer Overflow
Laravel Pulse 1.3.1 – Arbitrary Code Injection
#!/usr/bin/env python3
Microsoft Windows 11 Version 24H2 Cross Device Service – Elevation of Privilege
#!/usr/bin/env python3
ProSSHD 1.2 20090726 – Denial of Service (DoS)
# Exploit Title: ProSSHD 1.2 20090726 - Denial of Service (DoS)
TightVNC 2.8.83 – Control Pipe Manipulation
# Exploit Title: TightVNC 2.8.83 - Control Pipe Manipulation
CloudClassroom PHP Project 1.0 – SQL Injection
# Exploit Title: CloudClassroom PHP Project 1.0 - SQL Injection
macOS LaunchDaemon iOS 17.2 – Privilege Escalation
#!/usr/bin/env python3
Grandstream GSD3710 1.0.11.13 – Stack Overflow
#!/usr/bin/env python3
Microsoft Windows Server 2025 JScript Engine – Remote Code Execution (RCE)
#!/usr/bin/env python3
ABB Cylon Aspect 3.08.04 DeploySource – Remote Code Execution (RCE)
ABB Cylon Aspect 3.08.04 DeploySource - Remote Code Execution (RCE)
Apache Tomcat 10.1.39 – Denial of Service (DoS)
# Exploit Title: Apache Tomcat 10.1.39 - Denial of Service (DOS)
Campcodes Online Hospital Management System 1.0 – SQL Injection
# Exploit Title: Campcodes Online Hospital Management System 1.0 - SQL Injection
WordPress Digits Plugin 8.4.6.1 – Authentication Bypass via OTP Bruteforcing
# Exploit Title: WordPress Digits Plugin 8.4.6.1 - Authentication Bypass via OTP Bruteforcing
Fortra GoAnywhere MFT 7.4.1 – Authentication Bypass
#!/usr/bin/env python3
Automic Agent 24.3.0 HF4 – Privilege Escalation
# Exploit Title: Automic Agent 24.3.0 HF4 - Privilege Escalation
Windows File Explorer Windows 11 (23H2) – NTLM Hash Disclosure
#!/usr/bin/env python3
SolarWinds Serv-U 15.4.2 HF1 – Directory Traversal
# Exploit Title: SolarWinds Serv-U 15.4.2 HF1 - Directory Traversal
ABB Cylon Aspect 3.08.03 – Guest2Root Privilege Escalation
#!/usr/bin/env python
Windows 2024.15 – Unauthenticated Desktop Screenshot Capture
# Exploit Title: Windows 2024.15 - Unauthenticated Desktop Screenshot Capture
Microsoft Windows Server 2016 – Win32k Elevation of Privilege
# Exploit Title: Microsoft Windows Server 2016 - Win32k Elevation of
WordPress User Registration & Membership Plugin 4.1.2 – Authentication Bypass
#!/usr/bin/env python3
Grandstream GSD3710 1.0.11.13 – Stack Buffer Overflow
#!/usr/bin/env python3
Java-springboot-codebase 1.1 – Arbitrary File Read
# Exploit Title: Java-springboot-codebase 1.1 - Arbitrary File Read
ABB Cylon Aspect Studio 3.08.03 – Binary Planting
# Exploit Title: ABB Cylon Aspect Studio 3.08.03 - Binary Planting
Remote Keyboard Desktop 1.0.1 – Remote Code Execution (RCE)
# Exploit Title: Remote Keyboard Desktop 1.0.1 - Remote Code Execution (RCE)
Zyxel USG FLEX H series uOS 1.31 – Privilege Escalation
# Exploit Title: Zyxel USG FLEX H series uOS 1.31 - Privilege Escalation