Sitecore – Remote Code Execution v8.2
#!/usr/bin/env python3
aspx
aspx 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Smart Office Web 20.28 – Remote Information Disclosure (Unauthenticated)
# Exploit Title: Smart Office Web 20.28 - Remote Information Disclosure (Unauthenticated)
ELSI Smart Floor V3.3.3 – Stored Cross-Site Scripting (XSS)
# Exploit Title: ELSI Smart Floor V3.3.3 - Stored Cross-Site Scripting (XSS)
ReQlogic v11.3 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: ReQlogic v11.3 - Reflected Cross-Site Scripting (XSS)
Nyron 1.0 – SQLi (Unauthenticated)
# Exploit Title: Nyron 1.0 - SQLi (Unauthenticated)
Umbraco v8.14.1 – ‘baseUrl’ SSRF
# Exploit Title: Umbraco v8.14.1 - 'baseUrl' SSRF
SmarterTools SmarterTrack 7922 – ‘Multiple’ Information Disclosure
# Exploit Title: SmarterTools SmarterTrack 7922 - 'Multiple' Information Disclosure
Umbraco CMS 8.9.1 – Directory Traversal
# Exploit Title: Umbraco CMS 8.9.1 - Path traversal and Arbitrary File Write (Authenticated)
IntelliChoice eFORCE Software Suite 2.5.9 – Username Enumeration
# Exploit Title: IntelliChoice eFORCE Software Suite 2.5.9 - Username Enumeration
Microsoft SharePoint Server 2019 – Remote Code Execution (2)
# Exploit Title: Microsoft SharePoint Server 2019 - Remote Code Execution (2)
H8 SSRMS – ‘id’ IDOR
# Exploit Title: H8 SSRMS - 'id' IDOR
Umbraco CMS 7.12.4 – Remote Code Execution (Authenticated)
# Exploit Title: Umbraco CMS 7.12.4 - Remote Code Execution (Authenticated)
BlogEngine 3.3.8 – ‘Content’ Stored XSS
# Exploit Title: BlogEngine 3.3.8 - 'Content' Stored XSS
Microsoft SharePoint Server 2019 – Remote Code Execution
# Exploit Title: Microsoft SharePoint Server 2019 - Remote Code Execution
Orchard Core RC1 – Persistent Cross-Site Scripting
# Exploit Title: Orchard Core RC1 - Persistent Cross-Site Scripting
Kartris 1.6 – Arbitrary File Upload
# Exploit Title: Kartris 1.6 - Arbitrary File Upload
DotNetNuke 9.5 – File Upload Restrictions Bypass
# Exploit Title: DotNetNuke 9.5 - File Upload Restrictions Bypass
DotNetNuke 9.5 – Persistent Cross-Site Scripting
# Exploit Title: DotNetNuke 9.5 - Persistent Cross-Site Scripting
Telerik UI – Remote Code Execution via Insecure Deserialization
See the full write-up at Bishop Fox, CVE-2019-18935: https://know.bishopfox.com/research/cve-2019-18935-remote-code-e...
NopCommerce 4.2.0 – Privilege Escalation
# Vulnerability Title: NopCommerce 4.2.0 - Privilege Escalation
Roxy Fileman 1.4.5 – Directory Traversal
# Exploit Title: Roxy Fileman 1.4.5 - Directory Traversal
Adrenalin Core HCM 5.4.0 – ‘ReportID’ Reflected Cross-Site Scripting
# Exploit Title: Adrenalin Core HCM 5.4.0 - 'ReportID' Reflected Cross-Site Scripting
Adrenalin Core HCM 5.4.0 – ‘prntDDLCntrlName’ Reflected Cross-Site Scripting
# Exploit Title: Adrenalin Core HCM 5.4.0 - 'prntDDLCntrlName' Reflected Cross-Site Scripting
Adrenalin Core HCM 5.4.0 – ‘strAction’ Reflected Cross-Site Scripting
# Exploit Title: Adrenalin Core HCM 5.4.0 - 'strAction' Reflected Cross-Site Scripting
SD.NET RIM 4.7.3c – ‘idtyp’ SQL Injection
# Exploit Title: SD.NET RIM 4.7.3c - 'idtyp' SQL Injection
Microsoft SharePoint 2013 SP1 – ‘DestinationFolder’ Persistant Cross-Site Scripting
# Exploit Title: Microsoft SharePoint 2013 SP1 - 'DestinationFolder' Persistent Cross-Site Scripting
Sitecore 9.0 rev 171002 – Persistent Cross-Site Scripting
# Exploit Title: Stored Cross Site Scripting (XSS) in Sitecore 9.0 rev 171002
BlogEngine.NET 3.3.6/3.3.7 – ‘path’ Directory Traversal
# Exploit Title: Directory Traversal on BlogEngine.NET
BlogEngine.NET 3.3.6/3.3.7 – XML External Entity Injection
# Exploit Title: Out-of-band XML External Entity Injection on BlogEngine.NET
BlogEngine.NET 3.3.6/3.3.7 – ‘dirPath’ Directory Traversal / Remote Code Execution
# Exploit Title: Directory Traversal + RCE on BlogEngine.NET
BlogEngine.NET 3.3.6/3.3.7 – ‘theme Cookie’ Directory Traversal / Remote Code Execution
# Exploit Title: Directory Traversal + RCE on BlogEngine.NET
Sitecore 8.x – Deserialization Remote Code Execution
# Exploit Title: Sitecore v 8.x Deserialization RCE
BlogEngine.NET 3.3.6 – Directory Traversal / Remote Code Execution
# Exploit Title: BlogEngine.NET
Umbraco CMS 7.12.4 – (Authenticated) Remote Code Execution
# Exploit Title: Umbraco CMS - Remote Code Execution by authenticated administrators
Library Management System 1.0 – ‘frmListBooks’ SQL Injection
# Exploit Title: Library Management System 1.0 - 'frmListBooks' SQL Injection
Axioscloud Sissiweb Registro Elettronico 7.0.0 – ‘Error_desc’ Cross-Site Scripting
# Exploit Title: Axioscloud Sissiweb Registro Elettronico 7.0.0 - 'Error_desc' Cross-Site Scripting
Sitecore.Net 8.1 – Directory Traversal
# Exploit Title: Sitecore.Net 8.1 - Directory Traversal
EMS Master Calendar < 8.0.0.20180520 - Cross-Site Scripting
# Exploit Title: EMS Master Calendar < 8.0.0.20180520 - Reflected Cross-Site Scripting
SecurEnvoy SecurMail 9.1.501 – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20180312-0 >
IPSwitch MOVEit 8.1 < 9.4 - Cross-Site Scripting
# Exploit Title: IPSwitch MoveIt Stored Cross Site Scripting (XSS)
Telerik UI for ASP.NET AJAX 2012.3.1308 < 2017.1.118 - Encryption Keys Disclosure
# Exploit Title: Telerik UI for ASP.NET AJAX DialogHandler Dialog cracker
Telerik UI for ASP.NET AJAX 2012.3.1308 < 2017.1.118 - Arbitrary File Upload
# Exploit Title: Telerik UI for ASP.NET AJAX RadAsyncUpload uploader
DotNetNuke DreamSlider 01.01.02 – Arbitrary File Download (Metasploit)
# Exploit Title: DotNetNuke DreamSlider Arbitrary File Download
LanSweeper 6.0.100.75 – Cross-Site Scripting
LanSweeper - Cross Site Scripting and HTMLi
SmarterStats 11.3.6347 – Cross-Site Scripting
----------------------------
ICEstate 1.1 – ‘id’ SQL Injection
# # # # #
KBVault MySQL 0.16a – Arbitrary File Upload
# Exploit Title: [KBVault MySQL v0.16a - Unauthenticated File Upload to Run Code]
Personify360 7.5.2/7.6.1 – Improper Access Restrictions
# Exploit Title: Access and read and create vendor / API credentials in plaintext
Personify360 7.5.2/7.6.1 – Improper Database Schema Access Restrictions
# Exploit Title: Discover all tables and columns in database when creating new customer role