Swagger UI 4.1.3 – User Interface (UI) Misrepresentation of Critical Information
# Exploit Title: Swagger UI 4.1.3 - User Interface (UI) Misrepresentation of Critical Information
json
json 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
openMAINT 1.1-2.4.2 – Arbitrary File Upload
# Exploit Title: openMAINT 1.1-2.4.2 - Arbitrary File Upload
EasyPMS 1.0.0 – Authentication Bypass
# Exploit Title: EasyPMS 1.0.0 - Authentication Bypass
NSClient++ 0.5.2.35 – Authenticated Remote Code Execution
# Exploit Title: NSClient++ 0.5.2.35 - Authenticated Remote Code Execution
AVideo Platform 8.1 – Cross Site Request Forgery (Password Reset)
# Exploit Title: AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)
AVideo Platform 8.1 – Information Disclosure (User Enumeration)
# Exploit Title: AVideo Platform 8.1 - Information Disclosure (User Enumeration)
Verodin Director Web Console 3.5.4.0 – Remote Authenticated Password Disclosure (PoC)
# Exploit Title: Verodin Director Web Console 3.5.4.0 - Remote Authenticated Password Disclosure (PoC)
Ajenti 2.1.31 – Remote Code Exection (Metasploit)
# Exploit Title: Ajenti 2.1.31 - Remote Code Exection (Metasploit)
NPMJS gitlabhook 0.0.17 – ‘repository’ Remote Command Execution
# Exploit Title: NPMJS gitlabhook 0.0.17 - 'repository' Remote Command Execution
Royal TS/X – Information Disclosure
RoyalTS/X Exploit
CyberArk Password Vault Web Access < 9.9.5 / < 9.10 / 10.1 - Remote Code Execution
Advisory: CyberArk Password Vault Web Access Remote Code Execution
Shopware 5.2.5/5.3 – Cross-Site Scripting
Document Title:
NethServer 7.3.1611 – Cross-Site Request Forgery / Cross-Site Scripting
NethServer 7.3.1611 (Upload.json) CSRF Script Insertion Vulnerability
REDDOXX Appliance Build 2032 / 2.0.625 – Arbitrary File Disclosure
Advisory: Arbitrary File Disclosure with root Privileges via RdxEngine-API in REDDOXX Appliance
REDDOXX Appliance Build 2032 / 2.0.625 – Remote Command Execution
Advisory: Remote Command Execution as root in REDDOXX Appliance
Sophos Web Appliance 4.3.0.2 – ‘trafficType’ Remote Command Injection (Metasploit)
# Exploit Title: Sophos Web Appliance reporting JSON trafficType Remote Command Injection Vulnerablity
Sungard eTRAKiT3 <= 3.2.1.17 - SQL Injection
Software: Sungard eTRAKiT3
Deluge Web UI 1.3.13 – Cross-Site Request Forgery
Stop sending requests
Untangle NGFW 12.1.0 Beta – ‘execEvil()’ Command Injection
#!/usr/bin/python
Ubiquiti Networks UniFi 3.2.10 – Cross-Site Request Forgery
RCE Security Advisory