Exploits

日期	标题	类型	平台	作者
2020-05-13	Sellacious eCommerce 4.6 – Persistent Cross-Site Scripting	webapps	php	Vulnerability-Lab
2020-05-13	Tryton 5.4 – Persistent Cross-Site Scripting	webapps	php	Vulnerability-Lab
2020-05-13	Remote Desktop Audit 2.3.0.157 – Buffer Overflow (SEH)	local	windows	gurbanli
2020-05-12	MacOS 320.whatis Script – Privilege Escalation	local	macos	Csaba Fitzl
2020-05-12	TylerTech Eagle 2018.3.11 – Remote Code Execution	webapps	java	Anthony Cole
2020-05-12	LanSend 3.2 – Buffer Overflow (SEH)	local	windows	gurbanli
2020-05-12	qdPM 9.1 – Arbitrary File Upload	webapps	php	Besim
2020-05-12	Cisco Digital Network Architecture Center 1.3.1.4 – Persistent Cross-Site Scripting	webapps	java	Dylan Garnaud
2020-05-12	CuteNews 2.1.2 – Authenticated Arbitrary File Upload	webapps	php	Nhat Ha
2020-05-12	WordPress Plugin ChopSlider 3.4 – ‘id’ SQL Injection	webapps	php	SunCSR
2020-05-12	Orchard Core RC1 – Persistent Cross-Site Scripting	webapps	aspx	SunCSR
2020-05-11	Sentrifugo CMS 3.2 – Persistent Cross-Site Scripting	webapps	php	Vulnerability-Lab
2020-05-11	Kartris 1.6 – Arbitrary File Upload	webapps	aspx	Nhat Ha
2020-05-11	Online AgroCulture Farm Management System 1.0 – ‘uname’ SQL Injection	webapps	php	Tarun Sehgal
2020-05-11	LibreNMS 1.46 – ‘search’ SQL Injection	webapps	multiple	Punt
2020-05-11	Complaint Management System 1.0 – Authentication Bypass	webapps	php	BKpatron
2020-05-11	Victor CMS 1.0 – ‘post’ SQL Injection	webapps	php	BKpatron
2020-05-11	OpenZ ERP 3.6.60 – Persistent Cross-Site Scripting	webapps	php	Vulnerability-Lab
2020-05-11	WordPress Plugin Simple File List 4.2.2 – Remote Code Execution	webapps	php	coiffeur
2020-05-11	SolarWinds MSP PME Cache Service 1.1.14 – Insecure File Permissions	local	windows	Jens Regel
2020-05-11	CuteNews 2.1.2 – Arbitrary File Deletion	webapps	php	Besim
2020-05-10	Pi-hole < 4.4 - Authenticated Remote Code Execution / Privileges Escalation	webapps	linux	Nick Frichette
2020-05-10	Pi-hole < 4.4 - Authenticated Remote Code Execution	webapps	linux	Nick Frichette
2020-05-08	Extreme Networks Aerohive HiveOS 11.0 – Remote Denial of Service (PoC)	dos	hardware	LiquidWorm
2020-05-07	Online AgroCulture Farm Management System 1.0 – ‘pid’ SQL Injection	webapps	php	BKpatron
2020-05-07	Pisay Online E-Learning System 1.0 – Remote Code Execution	webapps	php	boku
2020-05-07	Online Clothing Store 1.0 – Arbitrary File Upload	webapps	php	Sushant Kamble
2020-05-07	School File Management System 1.0 – ‘username’ SQL Injection	webapps	php	Tarun Sehgal
2020-05-07	Draytek VigorAP 1000C – Persistent Cross-Site Scripting	webapps	hardware	Vulnerability-Lab
2020-05-07	Car Park Management System 1.0 – Authentication Bypass	webapps	php	Tarun Sehgal
2020-05-07	FlashGet 1.9.6 – Denial of Service (PoC)	dos	windows	Milad karimi
2020-05-06	webTareas 2.0.p8 – Arbitrary File Deletion	webapps	php	Besim
2020-05-06	Online Clothing Store 1.0 – ‘username’ SQL Injection	webapps	php	Sushant Kamble
2020-05-06	Booked Scheduler 2.7.7 – Authenticated Directory Traversal	webapps	php	Besim
2020-05-06	i-doit Open Source CMDB 1.14.1 – Arbitrary File Deletion	webapps	php	Besim
2020-05-06	Online Clothing Store 1.0 – Persistent Cross-Site Scripting	webapps	php	Sushant Kamble
2020-05-06	MPC Sharj 3.11.1 – Arbitrary File Download	webapps	php	SajjadBnd
2020-05-06	YesWiki cercopitheque 2020.04.18.1 – ‘id’ SQL Injection	webapps	php	coiffeur
2020-05-06	GitLab 12.9.0 – Arbitrary File Read	webapps	ruby	KouroshRZ
2020-05-05	NEC Electra Elite IPK II WebPro 01.03.01 – Session Enumeration	webapps	hardware	Cold z3ro
2020-05-05	SimplePHPGal 0.7 – Remote File Inclusion	webapps	php	h4shur
2020-05-05	PhreeBooks ERP 5.2.5 – Remote Command Execution	webapps	php	Besim
2020-05-05	BlogEngine 3.3 – ‘syndication.axd’ XML External Entity Injection	webapps	xml	Daniel Martinez Adan
2020-05-05	Saltstack 3000.1 – Remote Code Execution	remote	multiple	Jasper Lievisse Adriaanse
2020-05-05	webERP 4.15.1 – Unauthenticated Backup File Access	webapps	php	Besim
2020-05-05	Online Scheduling System 1.0 – ‘username’ SQL Injection	webapps	php	Saurav Shukla
2020-05-05	Oracle Database 11g Release 2 – ‘OracleDBConsoleorcl’ Unquoted Service Path	local	windows	Nguyen Khang
2020-05-05	Fishing Reservation System 7.5 – ‘uid’ SQL Injection	webapps	php	Vulnerability-Lab
2020-05-04	Outline Service 1.3.3 – ‘Outline Service ‘ Unquoted Service Path	local	windows	Minh Tuan
2020-05-04	osTicket 1.14.1 – Persistent Authenticated Cross-Site Scripting	webapps	php	Mehmet Kelepçe