Exploits

日期	标题	类型	平台	作者
2020-07-26	INNEO Startup TOOLS 2018 M040 13.0.70.3804 – Remote Code Execution	webapps	multiple	Patrick Hener
2020-07-26	Webtareas 2.1p – Arbitrary File Upload (Authenticated)	webapps	php	AppleBois
2020-07-26	ManageEngine Applications Manager 13 – ‘MenuHandlerServlet’ SQL Injection	webapps	java	aldorm
2020-07-26	Bio Star 2.8.2 – Local File Inclusion	webapps	multiple	SITE Team
2020-07-26	Socusoft Photo to Video Converter Professional 8.07 – ‘Output Folder’ Buffer Overflow (SEH Egghunter)	local	windows	MasterVlad
2020-07-26	PandoraFMS 7.0 NG 746 – Persistent Cross-Site Scripting	webapps	php	AppleBois
2020-07-26	GOautodial 4.0 – Persistent Cross-Site Scripting (Authenticated)	webapps	php	Balzabu
2020-07-26	Koken CMS 0.22.24 – Arbitrary File Upload (Authenticated)	webapps	php	V1n1v131r4
2020-07-26	DiskBoss 7.7.14 – ‘Reports and Data Directory’ Buffer Overflow (SEH Egghunter)	local	windows	MasterVlad
2020-07-26	elaniin CMS – Authentication Bypass	webapps	php	BKpatron
2020-07-26	Frigate Professional 3.36.0.9 – ‘Pack File’ Buffer Overflow (SEH Egghunter)	local	windows	MasterVlad
2020-07-26	Online Course Registration 1.0 – Unauthenticated Remote Code Execution	webapps	php	boku
2020-07-26	Nidesoft DVD Ripper 5.2.18 – Local Buffer Overflow (SEH)	local	windows	Felipe Winsnes
2020-07-23	Snes9K 0.09z – ‘Port Number’ Buffer Overflow (SEH)	local	windows	MasterVlad
2020-07-23	FTPDummy 4.80 – Local Buffer Overflow (SEH)	local	windows	Felipe Winsnes
2020-07-23	UBICOD Medivision Digital Signage 1.5.1 – Authorization Bypass	webapps	hardware	LiquidWorm
2020-07-23	TimeClock Software 1.01 0 – (Authenticated) Time-Based SQL Injection	webapps	php	François Bibeau
2020-07-22	Sophos VPN Web Panel 2020 – Denial of Service (Poc)	webapps	multiple	Berk KIRAS
2020-07-22	WordPress Theme NexosReal Estate 1.7 – ‘search_order’ SQL Injection	webapps	php	Vlad Vector
2020-07-22	Docsify.js 4.11.4 – Reflective Cross-Site Scripting	webapps	multiple	Amin Sharifi
2020-07-22	NetPCLinker 1.0.0.0 – Buffer Overflow (SEH Egghunter)	local	windows	Saeed reza Zamanian
2020-07-17	CMSUno 1.6 – Cross-Site Request Forgery (Change Admin Password)	webapps	php	Noth
2020-07-17	Simple Startup Manager 1.17 – ‘File’ Local Buffer Overflow (PoC)	local	windows	PovlTekstTV
2020-07-17	Sonar Qube 8.3.1 – ‘SonarQube Service’ Unquoted Service Path	local	windows	Velayutham Selvaraj
2020-07-16	Wing FTP Server 6.3.8 – Remote Code Execution (Authenticated)	webapps	lua	V1n1v131r4
2020-07-15	Zyxel Armor X1 WAP6806 – Directory Traversal	webapps	hardware	Rajivarnan R
2020-07-15	SuperMicro IPMI WebInterface 03.40 – Cross-Site Request Forgery (Add Admin)	webapps	hardware	Metin Yunus Kandemir
2020-07-15	Infor Storefront B2B 1.0 – ‘usr_name’ SQL Injection	webapps	php	ratboy
2020-07-15	Online Farm Management System 0.1.0 – Persistent Cross-Site Scripting	webapps	php	KeopssGroup0day,Inc
2020-07-15	Web Based Online Hotel Booking System 0.1.0 – Authentication Bypass	webapps	php	KeopssGroup0day,Inc
2020-07-15	Online Polling System 1.0 – Authentication Bypass	webapps	php	AppleBois
2020-07-15	Joomla! J2 JOBS 1.3.0 – ‘sortby’ Authenticated SQL Injection	webapps	php	Mehmet Kelepçe
2020-07-14	Trend Micro Web Security Virtual Appliance 6.5 SP2 Patch 4 Build 1901 – Remote Code Execution (Metasploit)	webapps	multiple	Mehmet Ince
2020-07-14	BSA Radar 1.6.7234.24750 – Local File Inclusion	webapps	multiple	William Summerhill
2020-07-13	Park Ticketing Management System 1.0 – Authentication Bypass	webapps	php	gh1mau
2020-07-13	Park Ticketing Management System 1.0 – ‘viewid’ SQL Injection	webapps	php	gh1mau
2020-07-10	Aruba ClearPass Policy Manager 6.7.0 – Unauthenticated Remote Command Execution	remote	linux	SpicyItalian
2020-07-10	Barangay Management System 1.0 – Authentication Bypass	webapps	php	BKpatron
2020-07-10	HelloWeb 2.0 – Arbitrary File Download	webapps	asp	bRpsd
2020-07-09	Savsoft Quiz 5 – Persistent Cross-Site Scripting	webapps	php	th3d1gger
2020-07-09	CompleteFTP Professional 12.1.3 – Remote Code Execution	remote	windows	1F98D
2020-07-09	WordPress Plugin Powie’s WHOIS Domain Check 0.9.31 – Persistent Cross-Site Scripting	webapps	php	mqt
2020-07-08	Qmail SMTP 1.03 – Bash Environment Variable Injection	remote	multiple	1F98D
2020-07-08	BSA Radar 1.6.7234.24750 – Cross-Site Request Forgery (Change Password)	webapps	hardware	William Summerhill
2020-07-08	SuperMicro IPMI 03.40 – Cross-Site Request Forgery (Add Admin)	webapps	hardware	Metin Yunus Kandemir
2020-07-07	Microsoft Windows mshta.exe 2019 – XML External Entity Injection	remote	xml	hyp3rlinx
2020-07-07	BSA Radar 1.6.7234.24750 – Authenticated Privilege Escalation	webapps	multiple	William Summerhill
2020-07-07	Joomla! J2 JOBS 1.3.0 – ‘sortby’ Authenticated SQL Injection	webapps	php	Mehmet Kelepçe
2020-07-07	Online Shopping Portal 3.1 – ’email’ SQL Injection	webapps	php	gh1mau
2020-07-07	Sickbeard 0.1 – Remote Command Injection	webapps	hardware	bdrake