rConfig 3.93 – ‘ajaxAddTemplate.php’ Authenticated Remote Code Execution
# Exploit Title: rConfig 3.93 - 'ajaxAddTemplate.php' Authenticated Remote Code Execution
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 83
rConfig 3.9 – ‘searchColumn’ SQL Injection
# Exploit Title: rConfig 3.9 - 'searchColumn' SQL Injection
ASUS AXSP 1.02.00 – ‘asComSvc’ Unquoted Service Path
# Exploit Title: ASUS AXSP 1.02.00 - 'asComSvc' Unquoted Service Path
CoreFTP 2.0 Build 674 SIZE – Directory Traversal (Metasploit)
class MetasploitModule < Msf::Auxiliary
CoreFTP 2.0 Build 674 MDTM – Directory Traversal (Metasploit)
class MetasploitModule < Msf::Auxiliary
WordPress Plugin Search Meter 2.13.2 – CSV injection
# Exploit Title: Wordpress Plugin Search Meter 2.13.2 - CSV Injection
Joomla! 3.9.0 < 3.9.7 - CSV Injection
#!/usr/bin/python3
Wing FTP Server – Authenticated CSRF (Delete Admin)
# Exploit Title: Wing FTP Server 6.2.3 - Privilege Escalation
TeamCity Agent XML-RPC 10.0 – Remote Code Execution
# Exploit Title: TeamCity Agent XML-RPC 10.0 - Remote Code Execution
Horde Groupware Webmail Edition 5.2.22 – PHP File Inclusion
## exploit-inc-inclusion.py
Horde Groupware Webmail Edition 5.2.22 – PHAR Loading
## exploit-phar-loading.py
Sysaid 20.1.11 b26 – Remote Command Execution
# Exploit Title: Sysaid 20.1.11 b26 - Remote Command Execution
YzmCMS 5.5 – ‘url’ Persistent Cross-Site Scripting
# Exploit Title: YzmCMS 5.5 - 'url' Persistent Cross-Site Scripting
Persian VIP Download Script 1.0 – ‘active’ SQL Injection
# Exploit Title: Persian VIP Download Script 1.0 - 'active' SQL Injection
60CycleCMS – ‘news.php’ SQL Injection
# Exploit Title: 60CycleCMS - 'news.php' Multiple vulnerability
Sentrifugo HRMS 3.2 – ‘id’ SQL Injection
# Exploit Title: Sentrifugo HRMS 3.2 - 'id' SQL Injection
Counter Strike: GO – ‘.bsp’ Memory Control (PoC)
So I’ve been holding onto this neat little gem of a .bsp that has four bytes very close to the end of the file that c...
Iskysoft Application Framework Service 2.4.3.241 – ‘IsAppService’ Unquoted Service Path
# Exploit Title: Iskysoft Application Framework Service 2.4.3.241 - 'IsAppService' Unquoted Service Path
SpyHunter 4 – ‘SpyHunter 4 Service’ Unquoted Service Path
# Exploit Title: SpyHunter 4 - 'SpyHunter 4 Service' Unquoted Service Path
ASUS GiftBox Desktop 1.1.1.127 – ‘ASUSGiftBoxDesktop’ Unquoted Service Path
# Exploit Title: ASUS GiftBox Desktop 1.1.1.127 - 'ASUSGiftBoxDesktop' Unquoted Service Path
Deep Instinct Windows Agent 1.2.29.0 – ‘DeepMgmtService’ Unquoted Service Path
# Exploit Title: Deep Instinct Windows Agent 1.2.29.0 - 'DeepMgmtService' Unquoted Service Path
UniSharp Laravel File Manager 2.0.0 – Arbitrary File Read
# Exploit Title: UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read
RICOH Aficio SP 5200S Printer – ‘entryNameIn’ HTML Injection
# Exploit Title: RICOH Aficio SP 5200S Printer - 'entryNameIn' HTML Injection
Alfresco 5.2.4 – Persistent Cross-Site Scripting
# Exploit Title: Alfresco 5.2.4 - Persistent Cross-Site Scripting
GUnet OpenEclass 1.7.3 E-learning platform – ‘month’ SQL Injection
# Exploit Title: GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection
RICOH Aficio SP 5210SF Printer – ‘entryNameIn’ HTML Injection
# Exploit Title: RICOH Aficio SP 5210SF Printer - 'entryNameIn' HTML Injection
Joplin Desktop 1.0.184 – Cross-Site Scripting
# Exploit Title: Joplin Desktop 1.0.184 - Cross-Site Scripting
Cyberoam Authentication Client 2.1.2.7 – Buffer Overflow (SEH)
# Exploit Title: Cyberoam Authentication Client 2.1.2.7 - Buffer Overflow (SEH)
Netis WF2419 2.2.36123 – Remote Code Execution
# Exploit Title: Netis WF2419 2.2.36123 - Remote Code Execution
WordPress Plugin Tutor LMS 1.5.3 – Cross-Site Request Forgery (Add User)
# Exploit Title: Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery (Add User)
TL-WR849N 0.9.1 4.16 – Authentication Bypass (Upload Firmware)
# Exploit Title: TL-WR849N 0.9.1 4.16 - Authentication Bypass (Upload Firmware)
Microsoft Exchange 2019 15.2.221.12 – Authenticated Remote Code Execution
# Exploit Title: Microsoft Exchange 2019 15.2.221.12 - Authenticated Remote Code Execution
Wing FTP Server 6.2.5 – Privilege Escalation
# Exploit Title: Wing FTP Server 6.2.5 - Privilege Escalation
TP LINK TL-WR849N – Remote Code Execution
# Exploit Title: TP LINK TL-WR849N - Remote Code Execution
CA Unified Infrastructure Management Nimsoft 7.80 – Remote Buffer Overflow
# Exploit Title: CA Unified Infrastructure Management Nimsoft 7.80 - Remote Buffer Overflow
Intelbras Wireless N 150Mbps WRN240 – Authentication Bypass (Config Upload)
# Exploit Title: Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass (Config Upload)