Exploits

Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

类型: 漏洞条目
总量: 24,950
页码: 65

Invision Community 4.5.4 – ‘Field Name’ Stored Cross-Site Scripting

# Exploit Title: Invision Community 4.5.4 - 'Field Name' Stored Cross-Site Scripting

2020-12-03 Hemant Patidar webapps

Expense Management System – ‘description’ Stored Cross Site Scripting

# Exploit Title: Expense Management System - 'description' Stored Cross Site Scripting

2020-12-02 Nikhil Kumar webapps

aSc TimeTables 2021.6.2 – Denial of Service (PoC)

# Exploit Title: aSc TimeTables 2021.6.2 - Denial of Service (PoC)

2020-12-02 Ismael Nava local

ILIAS Learning Management System 4.3 – SSRF

# Exploit Title: ILIAS Learning Management System 4.3 - SSRF

2020-12-02 Dot webapps

Pharmacy Store Management System 1.0 – ‘id’ SQL Injection

# Exploit Title: Pharmacy Store Management System 1.0 - 'id' SQL Injection

2020-12-02 Aydın Baran Ertemir webapps

Under Construction Page with CPanel 1.0 – SQL injection

# Exploit Title: Under Construction Page with CPanel 1.0 - SQL injection

2020-12-02 Mayur Parmar webapps

EgavilanMedia User Registration & Login System with Admin Panel 1.0 – CSRF

# Exploit Title: EgavilanMedia User Registration & Login System with Admin Panel 1.0 - CSRF

2020-12-02 Hardik Solanki webapps

Student Result Management System 1.0 – Authentication Bypass SQL Injection

# Exploit Title: Student Result Management System 1.0 - Authentication Bypass SQL Injection

2020-12-02 Ritesh Gohil webapps

EgavilanMedia User Registration & Login System with Admin Panel 1.0 – Stored Cross Site Scripting

# Exploit Title: EgavilanMedia User Registration & Login System with Admin Panel 1.0 - Stored Cross Site Scripting

2020-12-02 Soushikta Chowdhury webapps

WonderCMS 3.1.3 – Authenticated SSRF to Remote Remote Code Execution

# Exploit Title: WonderCMS 3.1.3 - Authenticated SSRF to Remote Remote Code Execution

2020-12-02 zetc0de webapps

WonderCMS 3.1.3 – Authenticated Remote Code Execution

# Exploit Title: WonderCMS 3.1.3 - Authenticated Remote Code Execution

2020-12-02 zetc0de webapps

PRTG Network Monitor 20.4.63.1412 – ‘maps’ Stored XSS

# Exploit Title: PRTG Network Monitor 20.4.63.1412 - 'maps' Stored XSS

2020-12-02 Amin Rawah webapps

IDT PC Audio 1.0.6433.0 – ‘STacSV’ Unquoted Service Path

# Exploit Title: IDT PC Audio 1.0.6433.0 - 'STacSV' Unquoted Service Path

2020-12-02 Manuel Alvarez local

Realtek Andrea RT Filters 1.0.64.7 – ‘AERTSr64.EXE’ Unquoted Service Path

# Exploit Title: Realtek Andrea RT Filters 1.0.64.7 - 'AERTSr64.EXE' Unquoted Service Path

2020-12-02 Manuel Alvarez local

Online Voting System Project in PHP – ‘username’ Persistent Cross-Site Scripting

# Exploit Title: Online Voting System Project in PHP - 'username' Persistent Cross-Site Scripting

2020-12-02 Sagar Banwa webapps

NewsLister – Authenticated Persistent Cross-Site Scripting

# Exploit Title: NewsLister - Authenticated Persistent Cross-Site Scripting

2020-12-02 Emre Aslan webapps

Bakeshop Online Ordering System 1.0 – ‘Owner’ Persistent Cross-site scripting

# Exploit Title: Bakeshop Online Ordering System 1.0 - 'Owner' Persistent Cross-site scripting

2020-12-02 Parshwa Bhavsar webapps

Online News Portal System 1.0 – ‘Title’ Stored Cross Site Scripting

# Exploit Title: Online News Portal System 1.0 - 'Title' Stored Cross Site Scripting

2020-12-02 Parshwa Bhavsar webapps

Local Service Search Engine Management System 1.0 – SQLi Authentication Bypass

# Exploit Title: Local Service Search Engine Management System 1.0 - SQLi Authentication Bypass

2020-12-02 Aditya Wakhlu webapps

WonderCMS 3.1.3 – ‘Menu’ Persistent Cross-Site Scripting

# Exploit Title: WonderCMS 3.1.3 - 'menu' Persistent Cross-Site Scripting

2020-12-02 Hemant Patidar webapps

Employee Record Management System 1.1 – Login Bypass SQL Injection

# Exploit Title: Employee Record Management System 1.1 - Login Bypass SQL Injection

2020-12-02 Anurag Kumar webapps

Artworks Gallery 1.0 – Arbitrary File Upload RCE (Authenticated) via Add Artwork

# Exploit Title: Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated)

2020-12-02 Shahrukh Iqbal Mirza webapps

Artworks Gallery 1.0 – Arbitrary File Upload RCE (Authenticated) via Edit Profile

# Exploit Title: Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Edit Profile

2020-12-02 Shahrukh Iqbal Mirza webapps

DotCMS 20.11 – Stored Cross-Site Scripting

# Exploit Title: DotCMS 20.11 - Stored Cross-Site Scripting

2020-12-02 Hardik Solanki webapps

Ksix Zigbee Devices – Playback Protection Bypass (PoC)

# Exploit Title: Ksix Zigbee Devices - Playback Protection Bypass (PoC)

2020-12-02 Alejandro Vazquez Vazquez remote

WebDamn User Registration & Login System with User Panel – SQLi Auth Bypass

# Exploit Title: WebDamn User Registration & Login System with User Panel - SQLi Auth Bypass

2020-12-02 Aakash Madaan webapps

ChurchCRM 4.2.0 – CSV/Formula Injection

#Exploit Title: ChurchCRM 4.2.1- CSV/Formula Injection

2020-12-02 Mufaddal Masalawala webapps

ChurchCRM 4.2.1 – Persistent Cross Site Scripting (XSS)

#Exploit Title: ChurchCRM 4.2.1- Persistent Cross Site Scripting(XSS)

2020-12-02 Mufaddal Masalawala webapps

Anuko Time Tracker 1.19.23.5311 – No rate Limit on Password Reset functionality

#Exploit Title: Anuko Time Tracker 1.19.23.5311 - No rate Limit on Password Reset functionality

2020-12-02 Mufaddal Masalawala webapps

Anuko Time Tracker 1.19.23.5311 – Password Reset leading to Account Takeover

#Exploit Title: Anuko Time Tracker 1.19.23.5311 - Password Reset Vulnerability leading to Account Takeover

2020-12-02 Mufaddal Masalawala webapps

Simple College Website 1.0 – ‘page’ Local File Inclusion

# Exploit Title: Simple College Website 1.0 - 'page' Local File Inclusion

2020-12-02 Mosaaed webapps

Mitel mitel-cs018 – Call Data Information Disclosure

# Exploit Title: Mitel mitel-cs018 - Call Data Information Disclosure

2020-12-02 Andrea Intilangelo remote

Car Rental Management System 1.0 – SQL Injection / Local File include

# Exploit Title: Car Rental Management System 1.0 - SQL Injection / Local File include

2020-12-02 Mosaaed webapps

WordPress Plugin Wp-FileManager 6.8 – RCE

# Exploit Title: WordPress Plugin Wp-FileManager 6.8 - RCE

2020-12-02 Mansoor R webapps

Microsoft Windows – Win32k Elevation of Privilege

# Exploit Title: Microsoft Windows - Win32k Elevation of Privilege

2020-12-02 nu11secur1ty local

TypeSetter 5.1 – CSRF (Change admin e-mail)

# Exploit Title: TypeSetter 5.1 - CSRF (Change admin e-mail)

2020-12-01 Alperen Ergel webapps

Joomla! Component GMapFP 3.5 – Unauthenticated Arbitrary File Upload

# Exploit Title: Joomla! Component GMapFP 3.5 - Unauthenticated Arbitrary File Upload

2020-12-01 ThelastVvV webapps

WordPress Plugin EventON Calendar 3.0.5 – Reflected Cross-Site Scripting

# Exploit Title: Wordpress Plugin EventON Calendar 3.0.5 - Reflected Cross-Site Scripting

2020-12-01 B3KC4T webapps

Online Shopping Alphaware 1.0 – Error Based SQL injection

# Title: Online Shopping Alphaware 1.0 - Error-Based SQL injection

2020-12-01 Moaaz Taha webapps

Pharmacy/Medical Store & Sale Point 1.0 – ’email’ SQL Injection

# Exploit Title: Pharmacy/Medical Store & Sale Point 1.0 - 'email' SQL Injection

2020-12-01 naivenom webapps

Setelsa Conacwin 3.7.1.2 – Local File Inclusion

# Exploit Title: Setelsa Conacwin 3.7.1.2 - Local File Inclusion

2020-12-01 Bryan Rodriguez Martin webapps

10-Strike Network Inventory Explorer 8.65 – Buffer Overflow (SEH)

# Exploit Title: 10-Strike Network Inventory Explorer 8.65 - Buffer Overflow (SEH)

2020-12-01 Sectechs local

Multi Restaurant Table Reservation System 1.0 – Multiple Persistent XSS

# Exploit Title: Multi Restaurant Table Reservation System 1.0 - Multiple Persistent XSS

2020-12-01 yunaranyancat webapps

Tailor Management System 1.0 – Unrestricted File Upload to Remote Code Execution

# Exploit Title: Tailor Management System 1.0 - Unrestricted File Upload to Remote Code Execution

2020-12-01 Saeed Bala Ahmed webapps

LEPTON CMS 4.7.0 – ‘URL’ Persistent Cross-Site Scripting

# Exploit Title: LEPTON CMS 4.7.0 - 'URL' Persistent Cross-Site Scripting

2020-12-01 Sagar Banwa webapps

Medical Center Portal Management System 1.0 – ‘login’ SQL Injection

# Exploit Title: Medical Center Portal Management System 1.0 - 'login' SQL Injection

2020-12-01 Aydın Baran Ertemir webapps

Pandora FMS 7.0 NG 749 – Multiple Persistent Cross-Site Scripting Vulnerabilities

# Exploit Title: Pandora FMS 7.0 NG 749 - Multiple Persistent Cross-Site Scripting Vulnerabilities

2020-12-01 Matthew Aberegg webapps

Social Networking Site – Authentication Bypass (SQli)

# Exploit Title: Social Networking Site - Authentication Bypass (SQli)

2020-12-01 gh1mau webapps

EPSON Status Monitor 3 ‘EPSON_PM_RPCV4_06’ – Unquoted Service Path

#Exploit Title: EPSON Status Monitor 3 'EPSON_PM_RPCV4_06' - Unquoted Service Path

2020-12-01 SamAlucard local

Global Registration Service 1.0.0.3 – ‘GREGsvc.exe’ Unquoted Service Path

# Exploit Title: Global Registration Service 1.0.0.3 - 'GREGsvc.exe' Unquoted Service Path

2020-12-01 Emmanuel Lujan local