ProFTPD 1.3.7a – Remote Denial of Service
# Exploit Title: ProFTPD 1.3.7a - Remote Denial of Service
multiple
multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
VestaCP 0.9.8 – ‘v_sftp_licence’ Command Injection
# Title: VestaCP 0.9.8 - 'v_sftp_licence' Command Injection
Plone CMS 5.2.3 – ‘Title’ Stored XSS
# Exploit Title: Plone CMS 5.2.3 - 'Title' Stored XSS
VestaCP 0.9.8 – ‘v_interface’ Add IP Stored XSS
# Title: VestaCP 0.9.8 - 'v_interface' Add IP Stored XSS
VestaCP 0.9.8 – File Upload CSRF
# Exploit Title: VestaCP 0.9.8 - File Upload CSRF
Sonlogger 4.2.3.3 – SuperAdmin Account Creation / Information Disclosure
# Exploit Title: Sonlogger 4.2.3.3 - SuperAdmin Account Creation / Information Disclosure
openMAINT openMAINT 2.1-3.3-b – ‘Multiple’ Persistent Cross-Site Scripting
# Exploit Title: openMAINT openMAINT 2.1-3.3-b - 'Multiple' Persistent Cross-Site Scripting
Atlassian JIRA 8.11.1 – User Enumeration
# Title: Atlassian JIRA 8.11.1 - User Enumeration
Fluig 1.7.0 – Path Traversal
# Exploit Title: Fluig 1.7.0 - Path Traversal
VMware vCenter Server 7.0 – Unauthenticated File Upload
# Exploit Title: VMware vCenter Server 7.0 - Unauthenticated File Upload
LightCMS 1.3.4 – ‘exclusive’ Stored XSS
# Exploit Title: LightCMS 1.3.4 - 'exclusive' Stored XSS
python jsonpickle 2.0.0 – Remote Code Execution
# Exploit Title: python jsonpickle 2.0.0 - Remote Code Execution
Monica 2.19.1 – ‘last_name’ Stored XSS
# Exploit Title: Monica 2.19.1 - 'last_name' Stored XSS
OpenText Content Server 20.3 – ‘multiple’ Stored Cross-Site Scripting
# Exploit Title: OpenText Content Server 20.3 - 'multiple' Stored Cross-Site Scripting
Gitea 1.12.5 – Remote Code Execution (Authenticated)
# Exploit Title: Gitea 1.12.5 - Remote Code Execution (Authenticated)
Openlitespeed WebServer 1.7.8 – Command Injection (Authenticated) (2)
# Exploit Title: Openlitespeed WebServer 1.7.8 - Command Injection (Authenticated) (2)
Adobe Connect 10 – Username Disclosure
# Title: Adobe Connect 10 - Username Disclosure
Jenzabar 9.2.2 – ‘query’ Reflected XSS.
# Exploit Title: Jenzabar 9.2.2 - 'query' Reflected XSS.
SmartFoxServer 2X 2.17.0 – God Mode Console WebSocket XSS
# Exploit Title: SmartFoxServer 2X 2.17.0 - God Mode Console WebSocket XSS
SmartFoxServer 2X 2.17.0 – Credentials Disclosure
# Exploit Title: SmartFoxServer 2X 2.17.0 - Credentials Disclosure
SmartFoxServer 2X 2.17.0 – God Mode Console Remote Code Execution
# Exploit Title: SmartFoxServer 2X 2.17.0 - God Mode Console Remote Code Execution
Sudo 1.9.5p1 – ‘Baron Samedit ‘ Heap-Based Buffer Overflow Privilege Escalation (2)
# Exploit Title: Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation (2)
Sudo 1.9.5p1 – ‘Baron Samedit ‘ Heap-Based Buffer Overflow Privilege Escalation (1)
# Exploit Title: Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation (1)
Pixelimity 1.0 – ‘password’ Cross-Site Request Forgery
# Exploit Title: Pixelimity 1.0 - 'password' Cross-Site Request Forgery
Metasploit Framework 6.0.11 – msfvenom APK template command injection
# Exploit Title: Metasploit Framework 6.0.11 - msfvenom APK template command injection
jQuery UI 1.12.1 – Denial of Service (DoS)
# Exploit Title: jQuery UI 1.12.1 - Denial of Service (DoS)
Openlitespeed Web Server 1.7.8 – Command Injection (Authenticated) (1)
# Exploit Title: Openlitespeed WebServer 1.7.8 - Command Injection (Authenticated)
Atlassian Confluence Widget Connector Macro – SSTI
# Exploit Title: Atlassian Confluence Widget Connector Macro - SSTI
ERPNext 12.14.0 – SQL Injection (Authenticated)
# Exploit Title: ERPNext 12.14.0 - SQL Injection (Authenticated)
Selea CarPlateServer (CPS) 4.0.1.6 – Remote Program Execution
# Exploit Title: Selea CarPlateServer (CPS) 4.0.1.6 - Remote Program Execution
Anchor CMS 0.12.7 – CSRF (Delete user)
# Exploit Title: Anchor CMS 0.12.7 - CSRF (Delete user)
Oracle Business Intelligence Enterprise Edition 11.1.1.7.140715 – Stored XSS
# Exploit Title: Oracle Business Intelligence Enterprise Edition 11.1.1.7.140715 - Stored XSS
ChurchRota 2.6.4 – RCE (Authenticated)
# Exploit Title: ChurchRota 2.6.4 - RCE (Authenticated)
Xwiki CMS 12.10.2 – Cross Site Scripting (XSS)
# Exploit Title: Xwiki CMS 12.10.2 - Cross Site Scripting (XSS)
EyesOfNetwork 5.3 – File Upload Remote Code Execution
# Exploit Title: EyesOfNetwork 5.3 - File Upload Remote Code Execution
Erlang Cookie – Remote Code Execution
# Exploit Title: Erlang Cookie - Remote Code Execution
SmartAgent 3.1.0 – Privilege Escalation
# Exploit Title: SmartAgent 3.1.0 - Privilege Escalation
EyesOfNetwork 5.3 – LFI
# Exploit Title: EyesOfNetwork 5.3 - LFI
Anchor CMS 0.12.7 – ‘markdown’ Stored Cross-Site Scripting
# Exploit Title: Anchor CMS 0.12.7 - 'markdown' Stored Cross-Site Scripting
EyesOfNetwork 5.3 – RCE & PrivEsc
# Exploit Title: EyesOfNetwork 5.3 - RCE & PrivEsc
Cockpit Version 234 – Server-Side Request Forgery (Unauthenticated)
# Exploit Title: Cockpit Version 234 - Server-Side Request Forgery (Unauthenticated)
Gitea 1.7.5 – Remote Code Execution
# Exploit Title: Gitea 1.7.5 - Remote Code Execution
Newgen Correspondence Management System (corms) eGov 12.0 – IDOR
# Exploit Title: Newgen Correspondence Management System (corms) eGov 12.0 - IDOR
IPeakCMS 3.5 – Boolean-based blind SQLi
# Exploit Title: IPeakCMS 3.5 - Boolean-based blind SQLi
IncomCMS 2.0 – Insecure File Upload
# Exploit Title: IncomCMS 2.0 - Insecure File Upload
EgavilanMedia User Registration & Login System with Admin Panel 1.0 – Persistent Cross-Site Scripting
# Exploit Title: EgavilanMedia User Registration & Login System with Admin Panel 1.0 - Multiple Stored Cross-Site Scr...
HPE Edgeline Infrastructure Manager 1.0 – Multiple Remote Vulnerabilities
# Exploit Title: HPE Edgeline Infrastructure Manager 1.0 - Multiple Remote Vulnerabilities