Cerberus FTP Web Service 11 – ‘svg’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Cerberus FTP web Service 11 - 'svg' Stored Cross-Site Scripting (XSS)
multiple
multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Accela Civic Platform 21.1 – ‘servProvCode’ Cross-Site-Scripting (XSS)
# Exploit Title: Accela Civic Platform 21.1 - 'servProvCode' Cross-Site-Scripting (XSS)
Apache Airflow 1.10.10 – ‘Example Dag’ Remote Code Execution
# Exploit Title: Apache Airflow 1.10.10 - 'Example Dag' Remote Code Execution
Atlassian Jira 8.15.0 – Information Disclosure (Username Enumeration)
# Exploit Title: Atlassian Jira 8.15.0 - Information Disclosure (Username Enumeration)
LogonTracer 1.2.0 – Remote Code Execution (Unauthenticated)
# Exploit Title: LogonTracer 1.2.0 - Remote Code Execution (Unauthenticated)
Postbird 0.8.4 – Javascript Injection
# Exploit Title: Postbird 0.8.4 - Javascript Injection
Codiad 2.8.4 – Remote Code Execution (Authenticated) (3)
# Exploit Title: Codiad 2.8.4 - Remote Code Execution (Authenticated) (3)
Codiad 2.8.4 – Remote Code Execution (Authenticated) (2)
# Exploit Title: Codiad 2.8.4 - Remote Code Execution (Authenticated) (2)
Schlix CMS 2.2.6-6 – Arbitary File Upload (Authenticated)
# Exploit Title: Schlix CMS 2.2.6-6 - Arbitary File Upload And Directory Traversal Leads To RCE (Authenticated)
Spotweb 1.4.9 – DOM Based Cross-Site Scripting (XSS)
# Exploit Title: Spotweb 1.4.9 - DOM Based Cross-Site Scripting (XSS)
ManageEngine ADSelfService Plus 6.1 – CSV Injection
# Exploit Title: ManageEngine ADSelfService Plus 6.1 - CSV Injection
In4Suit ERP 3.2.74.1370 – ‘txtLoginId’ SQL injection
# Exploit Title: In4Suit ERP 3.2.74.1370 - 'txtLoginId' SQL injection
Chevereto 3.17.1 – Cross Site Scripting (Stored)
# Exploit Title: Chevereto 3.17.1 - Cross Site Scripting (Stored)
Schlix CMS 2.2.6-6 – Remote Code Execution (Authenticated)
# Exploit Title: Schlix CMS 2.2.6-6 - Remote Code Execution (Authenticated)
Schlix CMS 2.2.6-6 – ‘title’ Persistent Cross-Site Scripting (Authenticated)
# Exploit Title: Schlix CMS 2.2.6-6 - 'title' Persistent Cross-Site Scripting (Authenticated)
Anote 1.0 – Persistent Cross-Site Scripting
# Exploit Title: Anote 1.0 - Persistent Cross-Site Scripting
Markdownify 1.2.0 – Persistent Cross-Site Scripting
# Exploit Title: Markdownify 1.2.0 - Persistent Cross-Site Scripting
Markright 1.0 – Persistent Cross-Site Scripting
# Exploit Title: Markright 1.0 - Persistent Cross-Site Scripting
Freeter 1.2.1 – Persistent Cross-Site Scripting
# Exploit Title: Freeter 1.2.1 - Persistent Cross-Site Scripting
StudyMD 0.3.2 – Persistent Cross-Site Scripting
# Exploit Title: StudyMD 0.3.2 - Persistent Cross-Site Scripting
Marky 0.0.1 – Persistent Cross-Site Scripting
# Exploit Title: Marky 0.0.1 - Persistent Cross-Site Scripting
Moeditor 0.2.0 – Persistent Cross-Site Scripting
# Exploit Title: Moeditor 0.2.0 - Persistent Cross-Site Scripting
SnipCommand 0.1.0 – Persistent Cross-Site Scripting
# Exploit Title: SnipCommand 0.1.0 - XSS to RCE
Tagstoo 2.0.1 – Persistent Cross-Site Scripting
# Exploit Title: Tagstoo 2.0.1 - Stored XSS to RCE
Xmind 2020 – Persistent Cross-Site Scripting
# Exploit Title: Xmind 2020 - XSS to RCE
Markdown Explorer 0.1.1 – Persistent Cross-Site Scripting
# Exploit Title: Markdown Explorer 0.1.1 - XSS to RCE
NodeBB Plugin Emoji 3.2.1 – Arbitrary File Write
# Exploit Title: NodeBB Plugin Emoji 3.2.1 - Arbitrary File Write
Hasura GraphQL 1.3.3 – Remote Code Execution
# Exploit Title: Hasura GraphQL 1.3.3 - Remote Code Execution
DzzOffice 2.02.1 – ‘Multiple’ Cross-Site Scripting (XSS)
# Exploit Title: DzzOffice 2.02.1 - 'Multiple' Cross-Site Scripting (XSS)
Hasura GraphQL 1.3.3 – Service Side Request Forgery (SSRF)
# Exploit Title: Hasura GraphQL 1.3.3 - Service Side Request Forgery (SSRF)
Hasura GraphQL 1.3.3 – Local File Read
# Exploit Title: Hasura GraphQL 1.3.3 - Local File Read
Hasura GraphQL 1.3.3 – Denial of Service
# Exploit Title: Hasura GraphQL 1.3.3 - Denial of Service
glFTPd 2.11a – Remote Denial of Service
# Exploit Title: glFTPd 2.11a - Remote Denial of Service
htmly 2.8.0 – ‘description’ Stored Cross-Site Scripting (XSS)
# Exploit Title: htmly 2.8.0 - 'description' Stored Cross-Site Scripting (XSS)
Tileserver-gl 3.0.0 – ‘key’ Reflected Cross-Site Scripting (XSS)
# Exploit Title: Tileserver-gl 3.0.0 - 'key' Reflected Cross-Site Scripting (XSS)
Horde Groupware Webmail 5.2.22 – Stored XSS
# Exploit Title: Horde Groupware Webmail 5.2.22 - Stored XSS
jQuery 1.0.3 – Cross-Site Scripting (XSS)
# Exploit Title: jQuery 1.0.3 - Cross-Site Scripting (XSS)
jQuery 1.2 – Cross-Site Scripting (XSS)
# Exploit Title: jQuery 1.2 - Cross-Site Scripting (XSS)
ExpressVPN VPN Router 1.0 – Router Login Panel’s Integer Overflow
# Exploit Title: ExpressVPN VPN Router 1.0 - Router Login Panel's Integer Overflow
Blitar Tourism 1.0 – Authentication Bypass SQLi
# Exploit Title: Blitar Tourism 1.0 - Authentication Bypass SQLi
DMA Radius Manager 4.4.0 – Cross-Site Request Forgery (CSRF)
# Exploit Title: DMA Radius Manager 4.4.0 - Cross-Site Request Forgery (CSRF)
Atlassian Jira Service Desk 4.9.1 – Unrestricted File Upload to XSS
# Exploit Title: Atlassian Jira Service Desk 4.9.1 - Unrestricted File Upload to XSS
Google Chrome 81.0.4044 V8 – Remote Code Execution
# Exploit Title: Google Chrome 81.0.4044 V8 - Remote Code Execution
Google Chrome 86.0.4240 V8 – Remote Code Execution
# Exploit Title: Google Chrome 86.0.4240 V8 - Remote Code Execution
phpPgAdmin 7.13.0 – COPY FROM PROGRAM Command Execution (Authenticated)
# Exploit Title: phpPgAdmin 7.13.0 - COPY FROM PROGRAM Command Execution (Authenticated)
Latrix 0.6.0 – ‘txtaccesscode’ SQL Injection
# Exploit Title: Latrix 0.6.0 – 'txtaccesscode' SQL Injection
CourseMS 2.1 – ‘name’ Stored XSS
# Exploit Title: CourseMS 2.1 - 'name' Stored XSS
Openlitespeed 1.7.9 – ‘Notes’ Stored Cross-Site Scripting
# Exploit Title: Openlitespeed 1.7.9 - 'Notes' Stored Cross-Site Scripting
vsftpd 3.0.3 – Remote Denial of Service
# Exploit Title: vsftpd 3.0.3 - Remote Denial of Service
Codiad 2.8.4 – Remote Code Execution (Authenticated)
# Exploit Title: Codiad 2.8.4 - Remote Code Execution (Authenticated)