ZKTeco ZKBioSecurity 3.0 – Hard-Coded Credentials SYSTEM Remote Code Execution
ZKTeco ZKBioSecurity 3.0 Hardcoded Credentials Remote SYSTEM Code Execution
jsp
jsp 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WSO2 Carbon 4.4.5 – Denial of Service / Cross-Site Request Forgery
[+] Credits: John Page aka HYP3RLINX
WSO2 Carbon 4.4.5 – Persistent Cross-Site Scripting
[+] Credits: John Page aka HYP3RLINX
WSO2 Carbon 4.4.5 – Local File Inclusion
[+] Credits: John Page aka HYP3RLINX
WSO2 Identity Server 5.1.0 – Multiple Vulnerabilities
[+] Credits: John Page aka HYP3RLINX
WebNMS Framework Server 5.2/5.2 SP1 – Multiple Vulnerabilities
>> Multiple vulnerabilities in WebNMS Framework Server 5.2 and 5.2 SP1
Navis Webaccess – SQL Injection
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
OpenFire 3.10.2 < 4.0.1 - Multiple Vulnerabilities
# Several vulnerabilities doscovered in OpenFire version 3.10.2 to 4.0.1
24online SMS_2500i 8.3.6 build 9.0 – SQL Injection
# Exploit Title: SQL Injection In 24 Online Billing API
XpoLog Center 6 – Remote Command Execution / Cross-Site Request Forgery
XpoLog Center V6 CSRF Remote Command Execution
Liferay CE < 6.2 CE GA6 - Persistent Cross-Site Scripting
CVE-2016-3670 Stored Cross Site Scripting in Liferay CE
ManageEngine Applications Manager Build 12700 – Multiple Vulnerabilities
[SPSA-2016-02/ManageEngine ApplicationsManager]------------------------------
Totemomail 4.x/5.x – Persistent Cross-Site Scripting
Document Title:
Oracle Application Testing Suite (ATS) 12.4.0.2.0 – Authentication Bypass / Arbitrary File Upload
# Exploit Title: Oracle Application Testing Suite Authentication Bypass and Arbitrary File Upload Remote Exploit
Novell ServiceDesk 6.5/7.0.3/7.1.0 – Multiple Vulnerabilities
>> Multiple vulnerabilities in Novell Service Desk 7.1.0, 7.0.3 and 6.5
Asbru Web Content Management System 9.2.7 – Multiple Vulnerabilities
Asbru Web Content Management System v9.2.7 Multiple Vulnerabilities
ManageEngine Password Manager Pro 8102 to 8302 – Multiple Vulnerabilities
[Systems Affected]
File Replication Pro 7.2.0 – Multiple Vulnerabilities
Vantage Point Security Advisory 2016-001
eClinicalWorks (CCMR) – Multiple Vulnerabilities
# Title: eClinicalWorks (CCMR) - Multiple Vulnerabilities
NXFilter 3.0.3 – Multiple Cross-Site Scripting Vulnerabilities
[+] Credits: hyp3rlinx
NXFilter 3.0.3 – Cross-Site Request Forgery
[+] Credits: hyp3rlinx
ManageEngine ServiceDesk Plus 9.1 build 9110 – Directory Traversal
Exploit Title: ManageEngine ServiceDesk Plus
Mango Automation 2.6.0 – Multiple Vulnerabilities
Mango Automation 2.6.0 CSRF File Upload And Arbitrary JSP Code Execution
Openfire 3.10.2 – Cross-Site Request Forgery
[+] Credits: hyp3rlinx
Openfire 3.10.2 – Multiple Cross-Site Scripting Vulnerabilities
[+] Credits: hyp3rlinx
Openfire 3.10.2 – Privilege Escalation
[+] Credits: hyp3rlinx
Openfire 3.10.2 – Remote File Inclusion
[+] Credits: hyp3rlinx
Openfire 3.10.2 – Unrestricted Arbitrary File Upload
[+] Credits: hyp3rlinx
JSPMySQL Administrador – Multiple Vulnerabilities
[+] Credits: hyp3rlinx
ZCMS 1.1 – Multiple Vulnerabilities
# Exploit Title: SQL Injection & Persistent XSS
Bonita BPM 6.5.1 – Multiple Vulnerabilities
Advisory ID: HTB23259
JSPMyAdmin 1.1 – Multiple Vulnerabilities
# Exploit Title: JSPMyAdmin 1.1 SQL Injection, CSRF & XSS
Sendio ESP – Information Disclosure
1. Advisory Information
Novell ZENworks Configuration Management 11.3.1 – Remote Code Execution
>> Remote code execution in Novell ZENworks Configuration Management 11.3.1
ManageEngine EventLog Analyzer 9.0 – Directory Traversal / Cross-Site Scripting
################################################################################################
ManageEngine ServiceDesk Plus 9.0 < Build 9031 - User Privileges Management
================================================================================
ManageEngine ServiceDesk Plus 9.0 – User Enumeration
================================================================================
ManageEngine ServiceDesk Plus 9.0 – SQL Injection
================================================================================
NetIQ Access Manager 4.0 SP1 – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20141218-2 >
IBM Tivoli Service Automation Manager 7.2.4 – Remote Code Execution
# Exploit Title: IBM Tivoli Service Automation Manager Remote Code Execution
F5 BIG-IP 10.1.0 – Directory Traversal
+------------------------------------------------------+
ManageEngine OpManager / Social IT Plus / IT360 – Multiple Vulnerabilities
>> Multiple vulnerabilities in ManageEngine OpManager, Social IT Plus and IT360
Symantec Endpoint Protection 12.1.4023.4080 – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20141106-0 >
Progress OpenEdge 11.2 – Directory Traversal
# Exploit Title: Progress OpenEdge Directory Traversal
Mulesoft ESB Runtime 3.5.1 – Privilege Escalation
Mulesoft ESB Runtime 3.5.1 Authenticated Privilege Escalation → Remote Code
DrayTek VigorACS SI 1.3.0 – Multiple Vulnerabilities
DrayTek VigorACS SI (