Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 60

Selea Targa IP OCR-ANPR Camera – Directory Traversal File Disclosure (Unauthenticated)

# Exploit Title: Selea Targa IP OCR-ANPR Camera - Directory Traversal File Disclosure (Unauthenticated)

2021-01-22 LiquidWorm webapps

Selea Targa IP OCR-ANPR Camera – Multiple SSRF (Unauthenticated)

# Exploit Title: Selea Targa IP OCR-ANPR Camera - Multiple SSRF (Unauthenticated)

2021-01-22 LiquidWorm webapps

Selea Targa IP OCR-ANPR Camera – CSRF Add Admin

# Exploit Title: Selea Targa IP OCR-ANPR Camera - CSRF Add Admin

2021-01-22 LiquidWorm webapps

Selea Targa 512 IP OCR-ANPR Camera – Stream Disclosure (Unauthenticated)

# Exploit Title: Selea Targa IP OCR-ANPR Camera - RTP/RTSP/M-JPEG Stream Disclosure (Unauthenticated)

2021-01-22 LiquidWorm webapps

Selea Targa IP OCR-ANPR Camera – ‘addr’ Remote Code Execution (Unauthenticated)

# Exploit Title: Selea Targa IP OCR-ANPR Camera - 'addr' Remote Code Execution (Unauthenticated)

2021-01-22 LiquidWorm webapps

Oracle WebLogic Server 14.1.1.0 – RCE (Authenticated)

# Exploit Title: Oracle WebLogic Server 14.1.1.0 - RCE (Authenticated)

2021-01-22 Photubias webapps

Library System 1.0 – Authentication Bypass

# Exploit Title: Library System 1.0 - Authentication Bypass Via SQL Injection

2021-01-22 Himanshu Shukla webapps

CASAP Automated Enrollment System 1.0 – Authentication Bypass

# Exploit Title: CASAP Automated Enrollment System 1.0 - Authentication Bypass

2021-01-22 Himanshu Shukla webapps

ERPNext 12.14.0 – SQL Injection (Authenticated)

# Exploit Title: ERPNext 12.14.0 - SQL Injection (Authenticated)

2021-01-22 Hodorsec webapps

Atlassian Confluence Widget Connector Macro – SSTI

# Exploit Title: Atlassian Confluence Widget Connector Macro - SSTI

2021-01-22 46o60 webapps

Online Documents Sharing Platform 1.0 – ‘user’ SQL Injection

# Exploit Title: Online Documents Sharing Platform 1.0 - 'user' SQL Injection

2021-01-21 CANKAT ÇAKMAK webapps

Apartment Visitors Management System 1.0 – ’email’ SQL Injection

# Exploit Title: Apartment Visitors Management System 1.0 - 'email' SQL Injection

2021-01-21 CANKAT ÇAKMAK webapps

Nagios XI 5.7.5 – Multiple Persistent Cross-Site Scripting

# Exploit Title: Nagios XI 5.7.5 - Multiple Persistent Cross-Site Scripting

2021-01-21 Matthew Aberegg webapps

WordPress Plugin Simple Job Board 2.9.3 – Authenticated File Read (Metasploit)

##

2021-01-21 SunCSR Team webapps

Anchor CMS 0.12.7 – CSRF (Delete user)

# Exploit Title: Anchor CMS 0.12.7 - CSRF (Delete user)

2021-01-21 Ninad Mishra webapps

ChurchRota 2.6.4 – RCE (Authenticated)

# Exploit Title: ChurchRota 2.6.4 - RCE (Authenticated)

2021-01-20 Rob McCarthy webapps

Oracle Business Intelligence Enterprise Edition 11.1.1.7.140715 – Stored XSS

# Exploit Title: Oracle Business Intelligence Enterprise Edition 11.1.1.7.140715 - Stored XSS

2021-01-20 omurugur webapps

Voting System 1.0 – File Upload RCE (Authenticated Remote Code Execution)

# Exploit Title: Voting System 1.0 - File Upload RCE (Authenticated Remote Code Execution)

2021-01-20 Richard Jones webapps

osTicket 1.14.2 – SSRF

# Exploit Title: osTicket 1.14.2 - SSRF

2021-01-19 Talat Mehmood webapps

Cisco UCS Manager 2.2(1d) – Remote Command Execution

# Exploit Title: Cisco UCS Manager 2.2(1d) - Remote Command Execution

2021-01-18 liquidsky webapps

Xwiki CMS 12.10.2 – Cross Site Scripting (XSS)

# Exploit Title: Xwiki CMS 12.10.2 - Cross Site Scripting (XSS)

2021-01-18 Karan Keswani webapps

Life Insurance Management System 1.0 – ‘client_id’ SQL Injection

# Exploit Title: Life Insurance Management System 1.0 - 'client_id' SQL Injection

2021-01-18 Aitor Herrero webapps

Life Insurance Management System 1.0 – File Upload RCE (Authenticated)

# Exploit Title: Life Insurance Management System 1.0 - File Upload RCE (Authenticated)

2021-01-18 Aitor Herrero webapps

PHP-Fusion CMS 9.03.90 – Cross-Site Request Forgery (Delete admin shoutbox message)

# Exploit Title: PHP-Fusion CMS 9.03.90 - Cross-Site Request Forgery (Delete admin shoutbox message)

2021-01-15 Mohamed Oosman webapps

WordPress Plugin Easy Contact Form 1.1.7 – ‘Name’ Stored Cross-Site Scripting (XSS)

# Exploit Title: WordPress Plugin Easy Contact Form 1.1.7 - 'Name' Stored Cross-Site Scripting (XSS)

2021-01-15 Rahul Ramakant Singh webapps

Online Hotel Reservation System 1.0 – ‘description’ Stored Cross-site Scripting

# Exploit Title: Online Hotel Reservation System 1.0 - Stored Cross-site Scripting

2021-01-15 Mesut Cetin webapps

Online Hotel Reservation System 1.0 – ‘id’ Time-based SQL Injection

# Exploit Title: Online Hotel Reservation System 1.0 - 'id' Time-based SQL Injection

2021-01-15 Mesut Cetin webapps

Online Hotel Reservation System 1.0 – Cross-site request forgery (CSRF)

# Exploit Title: Online Hotel Reservation System 1.0 - Cross-site request forgery (CSRF)

2021-01-15 Mesut Cetin webapps

Online Hotel Reservation System 1.0 – ‘person’ time-based SQL Injection

# Exploit Title: Online Hotel Reservation System 1.0 - 'person' time-based SQL Injection

2021-01-15 Mesut Cetin webapps

EyesOfNetwork 5.3 – File Upload Remote Code Execution

# Exploit Title: EyesOfNetwork 5.3 - File Upload Remote Code Execution

2021-01-15 Audencia Business SCHOOL Red Team webapps

Alumni Management System 1.0 – “Last Name field in Registration page” Stored XSS

# Exploit Title: Alumni Management System 1.0 - "Last Name field in Registration page" Stored XSS

2021-01-15 Siva Rajendran webapps

E-Learning System 1.0 – Authentication Bypass

# Exploit Title: E-Learning System 1.0 - Authentication Bypass & RCE

2021-01-15 Himanshu Shukla webapps

Netsia SEBA+ 0.16.1 – Add Root User (Metasploit)

##

2021-01-15 AkkuS webapps

Online Movie Streaming 1.0 – Admin Authentication Bypass

# Exploit Title: Online Movie Streaming 1.0 - Admin Authentication Bypass

2021-01-14 Richard Jones webapps

Nagios XI 5.7.X – Remote Code Execution RCE (Authenticated)

# Exploit Title: Nagios XI 5.7.X - Remote Code Execution RCE (Authenticated)

2021-01-14 Haboob Team webapps

Online Shopping Cart System 1.0 – ‘id’ SQL Injection

# Exploit Title: Online Shopping Cart System 1.0 - 'id' SQL Injection

2021-01-14 Aydın Baran Ertemir webapps

Laravel 8.4.2 debug mode – Remote code execution

# Exploit Title: Laravel 8.4.2 debug mode - Remote code execution

2021-01-14 SunCSR Team webapps

Erlang Cookie – Remote Code Execution

# Exploit Title: Erlang Cookie - Remote Code Execution

2021-01-13 1F98D remote

Online Hotel Reservation System 1.0 – Admin Authentication Bypass

# Exploit Title: Online Hotel Reservation System 1.0 - Admin Authentication Bypass

2021-01-13 Richard Jones webapps

Gila CMS 2.0.0 – Remote Code Execution (Unauthenticated)

# Exploit Title: Gila CMS 2.0.0 - Remote Code Execution (Unauthenticated)

2021-01-12 Enesdex webapps

Cemetry Mapping and Information System 1.0 – Multiple SQL Injections

# Exploit Title: Cemetry Mapping and Information System 1.0 - Multiple SQL Injections

2021-01-12 Mesut Cetin webapps

SmartAgent 3.1.0 – Privilege Escalation

# Exploit Title: SmartAgent 3.1.0 - Privilege Escalation

2021-01-12 Orion Hridoy webapps

EyesOfNetwork 5.3 – RCE & PrivEsc

# Exploit Title: EyesOfNetwork 5.3 - RCE & PrivEsc

2021-01-11 Audencia Business SCHOOL Red Team webapps

Anchor CMS 0.12.7 – ‘markdown’ Stored Cross-Site Scripting

# Exploit Title: Anchor CMS 0.12.7 - 'markdown' Stored Cross-Site Scripting

2021-01-11 Ramazan Mert GÖKTEN webapps

EyesOfNetwork 5.3 – LFI

# Exploit Title: EyesOfNetwork 5.3 - LFI

2021-01-11 Audencia Business SCHOOL Red Team webapps

Cemetry Mapping and Information System 1.0 – Multiple Stored Cross-Site Scripting

# Exploit Title: Cemetry Mapping and Information System 1.0 - Multiple Stored Cross-Site Scripting

2021-01-11 Mesut Cetin webapps

WordPress Plugin Custom Global Variables 1.0.5 – ‘name’ Stored Cross-Site Scripting (XSS)

# Exploit Title: WordPress Plugin Custom Global Variables 1.0.5 - 'name' Stored Cross-Site Scripting (XSS)

2021-01-11 Swapnil Subhash Bodekar webapps

OpenCart 3.0.36 – ATO via Cross Site Request Forgery

# Exploit Title: OpenCart 3.0.36 - ATO via Cross Site Request Forgery

2021-01-11 Mahendra Purbia webapps

PortableKanban 4.3.6578.38136 – Encrypted Password Retrieval

# Exploit Title: PortableKanban 4.3.6578.38136 - Encrypted Password Retrieval

2021-01-11 rootabeta local

Prestashop 1.7.7.0 – ‘id_product’ Time Based Blind SQL Injection

# Exploit Title: Prestashop 1.7.7.0 - 'id_product' Time Based Blind SQL Injection

2021-01-11 Jaimin Gondaliya webapps