multiple

multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Click2Magic 1.1.5 – Stored Cross-Site Scripting

# Exploit Title: Click2Magic 1.1.5 - Stored Cross-Site Scripting

2021-01-04 Shivam Verma webapps

Flexmonster Pivot Table & Charts 2.7.17 – ‘Remote JSON’ Reflected XSS

# Exploit Title: Flexmonster Pivot Table & Charts 2.7.17 - 'Remote JSON' Reflected XSS

2020-12-21 Marco Nappi webapps

Flexmonster Pivot Table & Charts 2.7.17 – ‘To remote CSV’ Reflected XSS

# Exploit Title: Flexmonster Pivot Table & Charts 2.7.17 - 'To remote CSV' Reflected XSS

2020-12-21 Marco Nappi webapps

Flexmonster Pivot Table & Charts 2.7.17 – ‘To OLAP’ Reflected XSS

# Exploit Title: Flexmonster Pivot Table & Charts 2.7.17 - 'To OLAP' Reflected XSS

2020-12-21 Marco Nappi webapps

Flexmonster Pivot Table & Charts 2.7.17 – ‘Remote Report’ Reflected XSS

# Exploit Title: Flexmonster Pivot Table & Charts 2.7.17 - 'Remote Report' Reflected XSS

2020-12-21 Marco Nappi webapps

Academy-LMS 4.3 – Stored XSS

# Exploit Title: Academy-LMS 4.3 - Stored XSS

2020-12-21 Vinicius Alves webapps

Spotweb 1.4.9 – ‘search’ SQL Injection

# Exploit Title: Spotweb 1.4.9 - 'search' SQL Injection

2020-12-21 BouSalman webapps

Nxlog Community Edition 2.10.2150 – DoS (Poc)

# Exploit Title: Nxlog Community Edition 2.10.2150 - DoS (Poc)

2020-12-17 Guillaume PETIT dos

Rumble Mail Server 0.51.3135 – ‘username’ Stored XSS

# Exploit Title: Rumble Mail Server 0.51.3135 - 'username' Stored XSS

2020-12-14 Mohammed Alshehri webapps

Rumble Mail Server 0.51.3135 – ‘domain and path’ Stored XSS

# Exploit Title: Rumble Mail Server 0.51.3135 - 'domain and path' Stored XSS

2020-12-14 Mohammed Alshehri webapps

Rumble Mail Server 0.51.3135 – ‘servername’ Stored XSS

# Exploit Title: Rumble Mail Server 0.51.3135 - 'servername' Stored XSS

2020-12-14 Mohammed Alshehri webapps

WordPress Plugin Total Upkeep 1.14.9 – Database and Files Backup Download

# Exploit Title: WordPress Plugin Total Upkeep 1.14.9 - Database and Files Backup Download

2020-12-14 Wadeek webapps

Seacms 11.1 – ‘checkuser’ Stored XSS

# Exploit Title: Seacms 11.1 - 'checkuser' Stored XSS

2020-12-14 j5s webapps

Seacms 11.1 – ‘file’ Local File Inclusion

# Exploit Title: Seacms 11.1 - 'file' Local File Inclusion

2020-12-14 j5s webapps

Seacms 11.1 – ‘ip and weburl’ Remote Command Execution

# Exploit Title: Seacms 11.1 - 'ip and weburl' Remote Command Execution

2020-12-14 j5s webapps

MiniWeb HTTP Server 0.8.19 – Buffer Overflow (PoC)

# Exploit Title: MiniWeb HTTP Server 0.8.19 - Buffer Overflow (PoC)

2020-12-14 securityforeveryone.com webapps

LibreNMS 1.46 – MAC Accounting Graph Authenticated SQL Injection

# Exploit Title: LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL Injection

2020-12-14 Hodorsec webapps

Tibco ObfuscationEngine 5.11 – Fixed Key Password Decryption

# Exploit Title: Tibco ObfuscationEngine 5.11 - Fixed Key Password Decryption

2020-12-09 Tess Sluyter local

VestaCP 0.9.8-26 – ‘backup’ Information Disclosure

# Exploit Title: VestaCP 0.9.8-26 - 'backup' Information Disclosure

2020-12-09 Vulnerability-Lab webapps

VestaCP 0.9.8-26 – ‘LoginAs’ Insufficient Session Validation

# Exploit Title: VestaCP 0.9.8-26 - 'LoginAs' Insufficient Session Validation

2020-12-09 Vulnerability-Lab webapps

Chromium 83 – Full CSP Bypass

#Title: Chromium 83 - Full CSP Bypass

2020-12-04 Gal Weizman local

Testa Online Test Management System 3.4.7 – ‘q’ SQL Injection

# Exploit Title: Testa Online Test Management System 3.4.7 - 'q' SQL Injection

2020-12-04 Ultra Security Team webapps

Phpscript-sgh 0.1.0 – Time Based Blind SQL Injection

# Exploit Title: Phpscript-sgh 0.1.0 - Time Based Blind SQL Injection

2020-12-04 KeopssGroup0day,Inc webapps

WordPress Plugin Canto 1.3.0 – Blind SSRF (Unauthenticated)

# Exploit Title: Wordpress Plugin Canto 1.3.0 - Blind SSRF (Unauthenticated)

2020-12-04 Pankaj Verma webapps

Invision Community 4.5.4 – ‘Field Name’ Stored Cross-Site Scripting

# Exploit Title: Invision Community 4.5.4 - 'Field Name' Stored Cross-Site Scripting

2020-12-03 Hemant Patidar webapps

mojoPortal forums 2.7.0.0 – ‘Title’ Persistent Cross-Site Scripting

# Exploit Title: mojoPortal forums 2.7.0.0 - 'Title' Persistent Cross-Site Scripting

2020-12-03 Sagar Banwa webapps

EgavilanMedia Address Book 1.0 Exploit – SQLi Auth Bypass

# Exploit Title: EgavilanMedia Address Book 1.0 Exploit - SQLi Auth Bypass

2020-12-03 Mayur Parmar webapps

ChurchCRM 4.2.1 – Persistent Cross Site Scripting (XSS)

#Exploit Title: ChurchCRM 4.2.1- Persistent Cross Site Scripting(XSS)

2020-12-02 Mufaddal Masalawala webapps

ChurchCRM 4.2.0 – CSV/Formula Injection

#Exploit Title: ChurchCRM 4.2.1- CSV/Formula Injection

2020-12-02 Mufaddal Masalawala webapps

WebDamn User Registration & Login System with User Panel – SQLi Auth Bypass

# Exploit Title: WebDamn User Registration & Login System with User Panel - SQLi Auth Bypass

2020-12-02 Aakash Madaan webapps

Ksix Zigbee Devices – Playback Protection Bypass (PoC)

# Exploit Title: Ksix Zigbee Devices - Playback Protection Bypass (PoC)

2020-12-02 Alejandro Vazquez Vazquez remote

DotCMS 20.11 – Stored Cross-Site Scripting

# Exploit Title: DotCMS 20.11 - Stored Cross-Site Scripting

2020-12-02 Hardik Solanki webapps

Artworks Gallery 1.0 – Arbitrary File Upload RCE (Authenticated) via Edit Profile

# Exploit Title: Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Edit Profile

2020-12-02 Shahrukh Iqbal Mirza webapps

Artworks Gallery 1.0 – Arbitrary File Upload RCE (Authenticated) via Add Artwork

# Exploit Title: Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated)

2020-12-02 Shahrukh Iqbal Mirza webapps

Employee Record Management System 1.1 – Login Bypass SQL Injection

# Exploit Title: Employee Record Management System 1.1 - Login Bypass SQL Injection

2020-12-02 Anurag Kumar webapps

Local Service Search Engine Management System 1.0 – SQLi Authentication Bypass

# Exploit Title: Local Service Search Engine Management System 1.0 - SQLi Authentication Bypass

2020-12-02 Aditya Wakhlu webapps

Online News Portal System 1.0 – ‘Title’ Stored Cross Site Scripting

# Exploit Title: Online News Portal System 1.0 - 'Title' Stored Cross Site Scripting

2020-12-02 Parshwa Bhavsar webapps

Bakeshop Online Ordering System 1.0 – ‘Owner’ Persistent Cross-site scripting

# Exploit Title: Bakeshop Online Ordering System 1.0 - 'Owner' Persistent Cross-site scripting

2020-12-02 Parshwa Bhavsar webapps

NewsLister – Authenticated Persistent Cross-Site Scripting

# Exploit Title: NewsLister - Authenticated Persistent Cross-Site Scripting

2020-12-02 Emre Aslan webapps

Online Voting System Project in PHP – ‘username’ Persistent Cross-Site Scripting

# Exploit Title: Online Voting System Project in PHP - 'username' Persistent Cross-Site Scripting

2020-12-02 Sagar Banwa webapps

EgavilanMedia User Registration & Login System with Admin Panel 1.0 – Stored Cross Site Scripting

# Exploit Title: EgavilanMedia User Registration & Login System with Admin Panel 1.0 - Stored Cross Site Scripting

2020-12-02 Soushikta Chowdhury webapps

Student Result Management System 1.0 – Authentication Bypass SQL Injection

# Exploit Title: Student Result Management System 1.0 - Authentication Bypass SQL Injection

2020-12-02 Ritesh Gohil webapps

EgavilanMedia User Registration & Login System with Admin Panel 1.0 – CSRF

# Exploit Title: EgavilanMedia User Registration & Login System with Admin Panel 1.0 - CSRF

2020-12-02 Hardik Solanki webapps

Under Construction Page with CPanel 1.0 – SQL injection

# Exploit Title: Under Construction Page with CPanel 1.0 - SQL injection

2020-12-02 Mayur Parmar webapps

ILIAS Learning Management System 4.3 – SSRF

# Exploit Title: ILIAS Learning Management System 4.3 - SSRF

2020-12-02 Dot webapps

Expense Management System – ‘description’ Stored Cross Site Scripting

# Exploit Title: Expense Management System - 'description' Stored Cross Site Scripting

2020-12-02 Nikhil Kumar webapps

Tendenci 12.3.1 – CSV/ Formula Injection

#Exploit Title: Tendenci 12.3.1 - CSV/ Formula Injection

2020-12-01 Mufaddal Masalawala webapps

Setelsa Conacwin 3.7.1.2 – Local File Inclusion

# Exploit Title: Setelsa Conacwin 3.7.1.2 - Local File Inclusion

2020-12-01 Bryan Rodriguez Martin webapps

Acronis Cyber Backup 12.5 Build 16341 – Unauthenticated SSRF

# Exploit Title: Acronis Cyber Backup 12.5 Build 16341 - Unauthenticated SSRF

2020-11-27 Julien Ahrens webapps

SAP Lumira 1.31 – Stored Cross-Site Scripting

# Exploit Title: SAP Lumira 1.31 - Stored Cross-Site Scripting

2020-11-27 Ilca Lucian Florin local