ECK Hotel 1.0 – Cross-Site Request Forgery (Add Admin)
# Exploit Title : ECK Hotel 1.0 - Cross-Site Request Forgery (Add Admin)
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 82
Everest 5.50.2100 – ‘Open File’ Denial of Service (PoC)
# Exploit Title: Everest 5.50.2100 - 'Open File' Denial of Service (PoC)
Jinfornet Jreport 15.6 – Unauthenticated Directory Traversal
# Exploit Title: Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal
rConfig 3.9.4 – ‘searchField’ Unauthenticated Root Remote Code Execution
# Exploit Title: rConfig 3.9.4 - 'searchField' Unauthenticated Root Remote Code Execution
TP-Link Archer C50 3 – Denial of Service (PoC)
# Exploit Title: TP-Link Archer C50 3 - Denial of Service (PoC)
Centreo 19.10.8 – ‘DisplayServiceStatus’ Remote Code Execution
# Exploit Title: Centreo 19.10.8 - 'DisplayServiceStatus' Remote Code Execution
Joomla! Component GMapFP 3.30 – Arbitrary File Upload
# Exploit Title: Joomla! Component GMapFP 3.30 - Arbitrary File Upload
AVAST SecureLine 5.5.522.0 – ‘SecureLine’ Unquoted Service Path
# Exploit Title: AVAST SecureLine 5.5.522.0 - 'SecureLine' Unquoted Service Path
LeptonCMS 4.5.0 – Persistent Cross-Site Scripting
# Exploit Title: LeptonCMS 4.5.0 - Persistent Cross-Site Scripting
10-Strike Network Inventory Explorer – ‘srvInventoryWebServer’ Unquoted Service Path
# Exploit Title: 10-Strike Network Inventory Explorer - 'srvInventoryWebServer' Unquoted Service Path
10-Strike Network Inventory Explorer 8.54 – ‘Add’ Local Buffer Overflow (SEH)
# Exploit Title: 10-Strike Network Inventory Explorer 8.54 - 'Add' Local Buffer Overflow (SEH)
UliCMS 2020.1 – Persistent Cross-Site Scripting
# Exploit Title: UliCMS 2020.1 - Persistent Cross-Site Scripting
WordPress Plugin WPForms 1.5.8.2 – Persistent Cross-Site Scripting
# Exploit Title: Wordpress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting
Veyon 4.3.4 – ‘VeyonService’ Unquoted Service Path
# Exploit Title: Veyon 4.3.4 - 'VeyonService' Unquoted Service Path
UCM6202 1.0.18.13 – Remote Command Injection
# Exploit Title: UCM6202 1.0.18.13 - Remote Command Injection
ProficySCADA for iOS 5.0.25920 – ‘Password’ Denial of Service (PoC)
# Exploit Title: ProficySCADA for iOS 5.0.25920 - 'Password' Denial of Service (PoC)
Google Chrome 80.0.3987.87 – Heap-Corruption Remote Denial of Service (PoC)
# Exploit Title: Google Chrome 80.0.3987.87 - Heap-Corruption Remote Denial of Service (PoC)
WordPress Plugin PicUploader 1.0 – Remote File Upload
Vulnerable Source:
CyberArk PSMP 10.9.1 – Policy Restriction Bypass
# Exploit Title: CyberArk PSMP 10.9.1 - Policy Restriction Bypass
FIBARO System Home Center 5.021 – Remote File Include
# Exploit Title: FIBARO System Home Center 5.021 - Remote File Include
rConfig 3.9.4 – ‘search.crud.php’ Remote Command Injection
# Exploit Title: rConfig 3.9.4 - 'search.crud.php' Remote Command Injection
Joomla! com_hdwplayer 4.2 – ‘search.php’ SQL Injection
# Exploit Title: Joomla! com_hdwplayer 4.2 - 'search.php' SQL Injection
Sony Playstation 4 (PS4) < 7.02 / FreeBSD 9 / FreeBSD 12 - 'ip6_setpktopt' Kernel Local Privilege Escalation (PoC)
FreeBSD 12.0-RELEASE x64 Kernel Exploit
Exagate Sysguard 6001 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Exagate Sysguard 6001 - Cross-Site Request Forgery (Add Admin)
VMware Fusion 11.5.2 – Privilege Escalation
# Exploit Title: VMware Fusion 11.5.2 - Privilege Escalation
Netlink GPON Router 1.0.11 – Remote Code Execution
# Exploit Title: Netlink GPON Router 1.0.11 - Remote Code Execution
NetBackup 7.0 – ‘NetBackup INET Daemon’ Unquoted Service Path
# Exploit Title: NetBackup 7.0 - 'NetBackup INET Daemon' Unquoted Service Path
Microtik SSH Daemon 6.44.3 – Denial of Service (PoC)
# Excploit Title: Microtik SSH Daemon 6.44.3 - Denial of Service (PoC)
Joomla! Component ACYMAILING 3.9.0 – Unauthenticated Arbitrary File Upload
# Exploit Title: Joomla! ACYMAILING 3.9.0 component - Unauthenticated Arbitrary File Upload
UADMIN Botnet 1.0 – ‘link’ SQL Injection
# Exploit Title: UADMIN Botnet 1.0 - 'link' SQL Injection
Microsoft VSCode Python Extension – Code Execution
# VSCode Python Extension Code Execution
VMWare Fusion – Local Privilege Escalation
Local Privilege Escalation via VMWare Fusion
Enhanced Multimedia Router 3.0.4.27 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Enhanced Multimedia Router 3.0.4.27 - Cross-Site Request Forgery (Add Admin)
MiladWorkShop VIP System 1.0 – ‘lang’ SQL Injection
# Exploit Title: MiladWorkShop VIP System 1.0 - 'lang' SQL Injection
PHPKB Multi-Language 9 – Authenticated Remote Code Execution
# Exploit Title: PHPKB Multi-Language 9 - Authenticated Remote Code Execution
PHPKB Multi-Language 9 – Authenticated Directory Traversal
# Exploit Title: PHPKB Multi-Language 9 - Authenticated Directory Traversal
PHPKB Multi-Language 9 – ‘image-upload.php’ Authenticated Remote Code Execution
# Exploit Title: PHPKB Multi-Language 9 - 'image-upload.php' Authenticated Remote Code Execution
Microsoft Windows 10 (1903/1909) – ‘SMBGhost’ SMB3.1.1 ‘SMB2_COMPRESSION_CAPABILITIES’ Buffer Overflow (PoC)
# CVE-2020-0796 PoC aka CoronaBlue aka SMBGhost
AnyBurn 4.8 – Buffer Overflow (SEH)
# Exploit Title: AnyBurn 4.8 - Buffer Overflow (SEH)
Centos WebPanel 7 – ‘term’ SQL Injection
# Exploit Title: Centos WebPanel 7 - 'term' SQL Injection
WordPress Plugin Custom Searchable Data System – Unauthenticated Data M]odification
# Exploit Title: Wordpress Plugin Custom Searchable Data System -
Drobo 5N2 4.1.1 – Remote Command Injection
# Exploit Title: Drobo 5N2 4.1.1 - Remote Command Injection
Joomla! Component com_newsfeeds 1.0 – ‘feedid’ SQL Injection
# Exploit Title: Joomla! Component com_newsfeeds 1.0 - 'feedid' SQL Injection
WatchGuard Fireware AD Helper Component 5.8.5.10317 – Credential Disclosure
# Exploit: WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure
WordPress Plugin Appointment Booking Calendar 1.3.34 – CSV Injection
# Exploit Title: Wordpress Plugin Appointment Booking Calendar 1.3.34 - CSV Injection
HRSALE 1.1.8 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: HRSALE 1.1.8 - Cross-Site Request Forgery (Add Admin)
ASUS AAHM 1.00.22 – ‘asHmComSvc’ Unquoted Service Path
# Exploit Title: ASUS AAHM 1.00.22 - 'asHmComSvc' Unquoted Service Path