LimeSurvey 4.3.10 – ‘Survey Menu’ Persistent Cross-Site Scripting
# Exploit Title: LimeSurvey 4.3.10 - 'Survey Menu' Persistent Cross-Site Scripting
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 73
Eibiz i-Media Server Digital Signage 3.8.0 – Authentication Bypass
# Exploit Title: Eibiz i-Media Server Digital Signage 3.8.0 - Authentication Bypass
Eibiz i-Media Server Digital Signage 3.8.0 – Configuration Disclosure
# Exploit Title: Eibiz i-Media Server Digital Signage 3.8.0 - Configuration Disclosure
Complaint Management System 1.0 – ‘cid’ SQL Injection
# Title: Complaint Management System 1.0 - 'cid' SQL Injection
Seowon SlC 130 Router – Remote Code Execution
# Exploit Title: Seowon SlC 130 Router - Remote Code Execution
ElkarBackup 1.3.3 – Persistent Cross-Site Scripting
# Exploit Title: ElkarBackup 1.3.3 - Persistent Cross-Site Scripting
PNPSCADA 2.200816204020 – ‘interf’ SQL Injection (Authenticated)
# Exploit Title: PNPSCADA 2.200816204020 - 'interf' SQL Injection (Authenticated)
Ruijie Networks Switch eWeb S29_RGOS 11.4 – Directory Traversal
# Exploit Title: Ruijie Networks Switch eWeb S29_RGOS 11.4 - Directory Traversal
Pharmacy Medical Store and Sale Point 1.0 – ‘catid’ SQL Injection
# Title: Pharmacy Medical Store and Sale Point 1.0 - 'catid' SQL Injection
Savsoft Quiz 5 – Stored Cross-Site Scripting
# Exploit Title: Savsoft Quiz 5 - Stored Cross-Site Scripting
Bludit 3.9.2 – Authentication Bruteforce Mitigation Bypass
#!/usr/bin/env ruby
Microsoft SharePoint Server 2019 – Remote Code Execution
# Exploit Title: Microsoft SharePoint Server 2019 - Remote Code Execution
QiHang Media Web Digital Signage 3.0.9 – Cleartext Credential Disclosure
# Exploit Title: QiHang Media Web Digital Signage 3.0.9 - Cleartext Credential Disclosure
QiHang Media Web Digital Signage 3.0.9 – Unauthenticated Arbitrary File Deletion
# Exploit Title: QiHang Media Web Digital Signage 3.0.9 - Unauthenticated Arbitrary File Deletion
QiHang Media Web Digital Signage 3.0.9 – Unauthenticated Arbitrary File Disclosure
# Exploit Title: QiHang Media Web Digital Signage 3.0.9 - Unauthenticated Arbitrary File Disclosure
QiHang Media Web Digital Signage 3.0.9 – Remote Code Execution (Unauthenticated)
# Exploit Title: QiHang Media Web Digital Signage 3.0.9 - Remote Code Execution (Unauthenticated)
Artica Proxy 4.3.0 – Authentication Bypass
# Exploit Title: Artica Proxy 4.3.0 - Authentication Bypass
GetSimple CMS Plugin Multi User 1.8.2 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: GetSimple CMS Plugin Multi User v1.8.2 - Cross-Site Request Forgery (Add Admin)
CMS Made Simple 2.2.14 – Authenticated Arbitrary File Upload
# Exploit Title: CMS Made Simple 2.2.14 - Arbitrary File Upload (Authenticated)
vBulletin 5.6.2 – ‘widget_tabbedContainer_tab_panel’ Remote Code Execution
# Exploit Title: vBulletin 5.6.2 - 'widget_tabbedContainer_tab_panel' Remote Code Execution
Fuel CMS 1.4.7 – ‘col’ SQL Injection (Authenticated)
# Exploit Title: Fuel CMS 1.4.7 - 'col' SQL Injection (Authenticated)
Warehouse Inventory System 1.0 – Cross-Site Request Forgery (Change Admin Password)
# Exploit Title: Warehouse Inventory System 1.0 - Cross-Site Request Forgery (Change Admin Password)
ManageEngine ADSelfService Build prior to 6003 – Remote Code Execution (Unauthenticated)
# Exploit Title: ManageEngine ADSelfService Plus 6000 – Unauthenticated Remote Code Execution
BarcodeOCR 19.3.6 – ‘BarcodeOCR’ Unquoted Service Path
# Exploit Title: BarcodeOCR 19.3.6 - 'BarcodeOCR' Unquoted Service Path
All-Dynamics Digital Signage System 2.0.2 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: All-Dynamics Digital Signage System 2.0.2 - Cross-Site Request Forgery (Add Admin)
Daily Expenses Management System 1.0 – ‘item’ SQL Injection
# Exploit Title: Daily Expenses Management System 1.0 - 'item' SQL Injection
Victor CMS 1.0 – ‘Search’ SQL Injection
# Exploit Title: Victor CMS 1.0 - 'Search' SQL Injection
CodeMeter 6.60 – ‘CodeMeter.exe’ Unquoted Service Path
# Exploit Title: CodeMeter 6.60 - 'CodeMeter.exe' Unquoted Service Path
ACTi NVR3 Standard or Professional Server 3.0.12.42 – Denial of Service (PoC)
# Exploit Title: ACTi NVR3 Standard or Professional Server 3.0.12.42 - Denial of Service (PoC) #
QlikView 12.50.20000.0 – ‘FTP Server Address’ Denial of Service (PoC)
# Exploit Title: QlikView 12.50.20000.0 - 'FTP Server Address' Denial of Service (PoC)
Stock Management System 1.0 – Authentication Bypass
# Exploit Title: Stock Management System 1.0 - Authentication Bypass
Pi-hole 4.3.2 – Remote Code Execution (Authenticated)
#!/usr/bin/env python2
Mocha Telnet Lite for iOS 4.2 – ‘User’ Denial of Service (PoC)
# Exploit Title: Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service (PoC)
RTSP for iOS 1.0 – ‘IP Address’ Denial of Service (PoC)
# Exploit Title: RTSP for iOS 1.0 - 'IP Address' Denial of Service (PoC)
Daily Expenses Management System 1.0 – ‘username’ SQL Injection
# Exploit Title: Daily Expenses Management System 1.0 - 'username' SQL Injection
BacklinkSpeed 2.4 – Buffer Overflow PoC (SEH)
# Exploit Title: BacklinkSpeed 2.4 - Buffer Overflow PoC (SEH)
Online Shopping Alphaware 1.0 – Authentication Bypass
# Title: Online Shopping Alphaware 1.0 - Authentication Bypass
Cisco Adaptive Security Appliance Software 9.7 – Unauthenticated Arbitrary File Deletion
# Exploit Title: Cisco Adaptive Security Appliance Software 9.7 - Unauthenticated Arbitrary File Deletion
WordPress Plugin Maintenance Mode by SeedProd 5.1.1 – Persistent Cross-Site Scripting
# Exploit Title: Wordpress Plugin Maintenance Mode by SeedProd 5.1.1 - Persistent Cross-Site Scripting
Cisco Adaptive Security Appliance Software 9.11 – Local File Inclusion
# Exploit Title: Cisco Adaptive Security Appliance Software 9.11 - Local File Inclusion
eGroupWare 1.14 – ‘spellchecker.php’ Remote Command Execution
# Exploit Title: eGroupWare 1.14 - 'spellchecker.php' Remote Command Execution
Nidesoft DVD Ripper 5.2.18 – Local Buffer Overflow (SEH)
# Exploit Title: Nidesoft DVD Ripper 5.2.18 - Local Buffer Overflow (SEH)
Frigate Professional 3.36.0.9 – ‘Pack File’ Buffer Overflow (SEH Egghunter)
# Exploit Title: Frigate Professional 3.36.0.9 - 'Pack File' Buffer Overflow (SEH Egghunter)
DiskBoss 7.7.14 – ‘Reports and Data Directory’ Buffer Overflow (SEH Egghunter)
# Exploit Title: DiskBoss 7.7.14 - 'Reports and Data Directory' Buffer Overflow (SEH Egghunter)
GOautodial 4.0 – Persistent Cross-Site Scripting (Authenticated)
# Exploit Title: GOautodial 4.0 - Persistent Cross-Site Scripting (Authenticated)
Socusoft Photo to Video Converter Professional 8.07 – ‘Output Folder’ Buffer Overflow (SEH Egghunter)
# Exploit Title: Socusoft Photo to Video Converter Professional 8.07 - 'Output Folder' Buffer Overflow (SEH Egghunter)
ManageEngine Applications Manager 13 – ‘MenuHandlerServlet’ SQL Injection
# Exploit Title: ManageEngine Applications Manager 13 - 'MenuHandlerServlet' SQL Injection
INNEO Startup TOOLS 2018 M040 13.0.70.3804 – Remote Code Execution
# Exploit Title: INNEO Startup TOOLS 2018 M040 13.0.70.3804 - Remote Code Execution
UBICOD Medivision Digital Signage 1.5.1 – Cross-Site Request Forgery (Add Admin)
# Title: UBICOD Medivision Digital Signage 1.5.1 - Cross-Site Request Forgery (Add Admin)
Port Forwarding Wizard 4.8.0 – Buffer Overflow (SEH)
# Exploit Title: Port Forwarding Wizard 4.8.0 - Buffer Overflow (SEH)