Webtateas 2.0 – Arbitrary File Read
# Exploit Title: Webtateas 2.0 - Arbitrary File Read
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 81
WSO2 3.1.0 – Arbitrary File Delete
# Title: WSO2 3.1.0 - Arbitrary File Delete
Free Desktop Clock x86 Venetian Blinds Zipper 3.0 – Unicode Stack Overflow (SEH)
# Exploit Title: Free Desktop Clock x86 Venetian Blinds Zipper 3.0 - Unicode Stack Overflow (SEH)
WordPress Plugin Media Library Assistant 2.81 – Local File Inclusion
# Exploit Title: Wordpress Plugin Media Library Assistant 2.81 - Local File Inclusion
MOVEit Transfer 11.1.1 – ‘token’ Unauthenticated SQL Injection
# Exploit Title: MOVEit Transfer 11.1.1 - 'token' Unauthenticated SQL Injection
AbsoluteTelnet 11.12 – ‘SSH1/username’ Denial of Service (PoC)
# Exploit Title: AbsoluteTelnet 11.12 - 'SSH1/username' Denial of Service (PoC)
Windscribe 1.83 – ‘WindscribeService’ Unquoted Service Path
# Exploit Title: Windscribe 1.83 - 'WindscribeService' Unquoted Service Path
WordPress Plugin Helpful 2.4.11 – SQL Injection
Title: Helpful 2.4.11 Sql Injection - Wordpress Plugin
Zen Load Balancer 3.10.1 – ‘index.cgi’ Directory Traversal
# Exploit Title: Zen Load Balancer 3.10.1 - 'index.cgi' Directory Traversal
Django 3.0 – Cross-Site Request Forgery Token Bypass
# Exploit Title: Django 3.0 - Cross-Site Request Forgery Token Bypass
Amcrest Dahua NVR Camera IP2M-841 – Denial of Service (PoC)
# Exploit Title: Amcrest Dahua NVR Camera IP2M-841 - Denial of Service (PoC)
dnsmasq-utils 2.79-1 – ‘dhcp_release’ Denial of Service (PoC)
# Exploit Title: dnsmasq-utils 2.79-1 - 'dhcp_release' Denial of Service (PoC)
ZOC Terminal 7.25.5 – ‘Script’ Denial of Service (PoC)
# Exploit Title: ZOC Terminal 7.25.5 - 'Script' Denial of Service (PoC)
Memu Play 7.1.3 – Insecure Folder Permissions
# Exploit Title: Memu Play 7.1.3 - Insecure Folder Permissions
Product Key Explorer 4.2.2.0 – ‘Key’ Denial of Service (PoC)
# Exploit Title: Product Key Explorer 4.2.2.0 - 'Key' Denial of Service (PoC)
SpotAuditor 5.3.4 – ‘Name’ Denial of Service (PoC)
# Exploit Title: SpotAuditor 5.3.4 - 'Name' Denial of Service (PoC)
Nsauditor 3.2.0.0 – ‘Name’ Denial of Service (PoC)
# Exploit Title: Nsauditor 3.2.0.0 - 'Name' Denial of Service (PoC)
Frigate 3.36 – Denial of Service (PoC)
# Exploit Title: Frigate 3.36 - Denial of Service (PoC)
UltraVNC Launcher 1.2.4.0 – ‘RepeaterHost’ Denial of Service (PoC)
# Exploit Title: UltraVNC Launcher 1.2.4.0 - 'RepeaterHost' Denial of Service (PoC)
LimeSurvey 4.1.11 – ‘Survey Groups’ Persistent Cross-Site Scripting
# Exploit Title: LimeSurvey 4.1.11 - 'Survey Groups' Persistent Cross-Site Scripting
UltraVNC Launcher 1.2.4.0 – ‘Password’ Denial of Service (PoC)
# Exploit Title: UltraVNC Launcher 1.2.4.0 - 'Password' Denial of Service (PoC)
UltraVNC Viewer 1.2.4.0 – ‘VNCServer’ Denial of Service (PoC)
# Exploit Title: UltraVNC Viewer 1.2.4.0 - 'VNCServer' Denial of Service (PoC)
ZOC Terminal v7.25.5 – ‘Private key file’ Denial of Service (PoC)
# Exploit Title: ZOC Terminal v7.25.5 - 'Private key file' Denial of Service (PoC)
Triologic Media Player 8 – ‘.m3l’ Buffer Overflow (Unicode) (SEH)
# Exploit Title: Triologic Media Player 8 - '.m3l' Buffer Overflow (Unicode) (SEH)
WhatsApp Desktop 0.3.9308 – Persistent Cross-Site Scripting
# Title: WhatsApp Desktop 0.3.9308 - Persistent Cross-Site Scripting
Bolt CMS 3.7.0 – Authenticated Remote Code Execution
# Exploit Title: Bolt CMS 3.7.0 - Authenticated Remote Code Execution
LimeSurvey 4.1.11 – ‘File Manager’ Path Traversal
# Exploit Title: LimeSurvey 4.1.11 - 'File Manager' Path Traversal
Microsoft NET USE win10 – Insufficient Authentication Logic
# Title: Microsoft NET USE win10 - Insufficient Authentication Logic
pfSense 2.4.4-P3 – ‘User Manager’ Persistent Cross-Site Scripting
# Exploit Title: pfSense 2.4.4-P3 - 'User Manager' Persistent Cross-Site Scripting
Pandora FMS 7.0NG – ‘net_tools.php’ Remote Code Execution
# Exploit Title: Pandora FMS 7.0NG - 'net_tools.php' Remote Code Execution
AIDA64 Engineer 6.20.5300 – ‘Report File’ filename Buffer Overflow (SEH)
# Exploit Title: AIDA64 Engineer 6.20.5300 - 'Report File' filename Buffer Overflow (SEH)
PHP-Fusion 9.03.50 – ‘panels.php’ Remote Code Execution
# Exploit Title: PHP-Fusion 9.03.50 - 'panels.php' Multiple vulnerability
DiskBoss 7.7.14 – ‘Input Directory’ Local Buffer Overflow (PoC)
# Exploit Title: DiskBoss 7.7.14 - 'Input Directory' Local Buffer Overflow (PoC)
DiskBoss 7.7.14 – Denial of Service (PoC)
# Exploit Title: DiskBoss 7.7.14 - Denial of Service (PoC)
10Strike LANState 9.32 – ‘Force Check’ Buffer Overflow (SEH)
# Exploit Title: 10Strike LANState 9.32 - 'Force Check' Buffer Overflow (SEH)
FlashFXP 4.2.0 Build 1730 – Denial of Service (PoC)
# Exploit Title: FlashFXP 4.2.0 Build 1730 - Denial of Service (PoC)
Grandstream UCM6200 Series CTI Interface – ‘user_password’ SQL Injection
# Exploit Title: Grandstream UCM6200 Series CTI Interface - 'user_password' SQL Injection
Grandstream UCM6200 Series WebSocket 1.0.20.20 – ‘user_password’ SQL Injection
# Exploit Title: Grandstream UCM6200 Series WebSocket 1.0.20.20 - 'user_password' SQL Injection
SharePoint Workflows – XOML Injection (Metasploit)
# This module requires Metasploit: https://metasploit.com/download
Odin Secure FTP Expert 7.6.3 – ‘Site Info’ Denial of Service (PoC)
# Exploit Title: Odin Secure FTP Expert 7.6.3 - 'Site Info' Denial of Service (PoC)
Joomla! com_fabrik 3.9.11 – Directory Traversal
# Exploit Title: Joomla! com_fabrik 3.9.11 - Directory Traversal
10-Strike Network Inventory Explorer 9.03 – ‘Read from File’ Buffer Overflow (SEH) (ROP)
# Exploit Title: 10-Strike Network Inventory Explorer 9.03 - 'Read from File' Buffer Overflow (SEH)(ROP)
Zen Load Balancer 3.10.1 – Remote Code Execution
# Exploit Title: Zen Load Balancer 3.10.1 - Remote Code Execution
Easy RM to MP3 Converter 2.7.3.700 – ‘Input’ Local Buffer Overflow (SEH)
# Exploit Title: Easy RM to MP3 Converter 2.7.3.700 - 'Input' Local Buffer Overflow (SEH)