Pure-FTPd 1.0.48 – Remote Denial of Service
# Exploit Title: Pure-FTPd 1.0.48 - Remote Denial of Service
multiple
multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Apache OpenMeetings 5.0.0 – ‘hostname’ Denial of Service
# Exploit Title: Apache OpenMeetings 5.0.0 - 'hostname' Denial of Service
nopCommerce Store 4.30 – ‘name’ Stored Cross-Site Scripting
# Exploit Title: nopCommerce Store 4.30 - 'name' Stored Cross-Site Scripting
LifeRay 7.2.1 GA2 – Stored XSS
# Exploit Title: LifeRay 7.2.1 GA2 - Stored XSS
Nagios Log Server 2.1.7 – Persistent Cross-Site Scripting
# Exploit Title: Nagios Log Server 2.1.7 - 'snapshot_name' Persistent Cross-Site Scripting
M/Monit 3.7.4 – Password Disclosure
# Title: M/Monit 3.7.4 - Password Disclosure
M/Monit 3.7.4 – Privilege Escalation
# Title: M/Monit 3.7.4 - Privilege Escalation
TestBox CFML Test Framework 4.1.0 – Directory Traversal
# Title: TestBox CFML Test Framework 4.1.0 - Directory Traversal
TestBox CFML Test Framework 4.1.0 – Arbitrary File Write and Remote Code Execution
# Title: TestBox CFML Test Framework 4.1.0 - Arbitrary File Write and Remote Code Execution
xuucms 3 – ‘keywords’ SQL Injection
# Exploit Title: xuucms 3 - 'keywords' SQL Injection
PESCMS TEAM 2.3.2 – Multiple Reflected XSS
# Exploit Title: PESCMS TEAM 2.3.2 - Multiple Reflected XSS
BigBlueButton 2.2.25 – Arbitrary File Disclosure and Server-Side Request Forgery
# Exploit Title: BigBlueButton 2.2.25 - Arbitrary File Disclosure and Server-Side Request Forgery
Apache Struts 2.5.20 – Double OGNL evaluation
# Exploit Title: Apache Struts 2.5.20 - Double OGNL evaluation
Aerospike Database 5.1.0.3 – OS Command Execution
# Exploit Title: Aerospike Database 5.1.0.3 - OS Command Execution
Touchbase.io 1.10 – Stored Cross Site Scripting
#Exploit Title: Touchbase.io 1.10 - Stored Cross Site Scripting
Apache Tomcat – AJP ‘Ghostcat’ File Read/Inclusion (Metasploit)
require "msf/core"
Joplin 1.2.6 – ‘link’ Cross Site Scripting
# Exploit Title: Joplin 1.2.6 - 'link' Cross Site Scripting
Citadel WebCit < 926 - Session Hijacking Exploit
# Exploit Title: Citadel WebCit < 926 - Session Hijacking Exploit
WordPress Plugin Colorbox Lightbox v1.1.1 – Persistent Cross-Site Scripting (Authenticated)
# Exploit Title: WordPress Plugin Colorbox Lightbox v1.1.1 - Persistent Cross-Site Scripting Vulnerability (Authentic...
NodeBB Forum 1.12.2-1.14.2 – Account Takeover
# Exploit Title: NodeBB Forum 1.12.2-1.14.2 - Account Takeover
Liman 0.7 – Cross-Site Request Forgery (Change Password)
# Exploit Title: Liman 0.7 - Cross-Site Request Forgery (Change Password)
Joplin 1.0.245 – Arbitrary Code Execution (PoC)
# Exploit Title: Joplin 1.0.245 - Arbitrary Code Execution (PoC)
B-swiss 3 Digital Signage System 3.6.5 – Database Disclosure
# Exploit Title: B-swiss 3 Digital Signage System 3.6.5 - Database Disclosure
B-swiss 3 Digital Signage System 3.6.5 – Cross-Site Request Forgery (Add Maintenance Admin)
# Exploit Title: B-swiss 3 Digital Signage System 3.6.5 - Cross-Site Request Forgery (Add Maintenance Admin)
Comodo Unified Threat Management Web Console 2.7.0 – Remote Code Execution
# Exploit Title: Comodo Unified Threat Management Web Console 2.7.0 - Remote Code Execution
B-swiss 3 Digital Signage System 3.6.5 – Remote Code Execution
# Exploit Title: B-swiss 3 Digital Signage System 3.6.5 - Remote Code Execution
SpamTitan 7.07 – Remote Code Execution (Authenticated)
# Exploit Title: SpamTitan 7.07 - Remote Code Execution (Authenticated)
Tea LaTex 1.0 – Remote Code Execution (Unauthenticated)
# Exploit Title: Tea LaTex 1.0 - Remote Code Execution (Unauthenticated)
VTENEXT 19 CE – Remote Code Execution
#!/usr/bin/python3
Cabot 0.11.12 – Persistent Cross-Site Scripting
# Exploit Title: Cabot 0.11.12 - Persistent Cross-Site Scripting
Nagios Log Server 2.1.6 – Persistent Cross-Site Scripting
# Exploit Title: Nagios Log Server 2.1.6 - Persistent Cross-Site Scripting
Mida eFramework 2.9.0 – Remote Code Execution
# Exploit Title: Mida eFramework 2.9.0 - Remote Code Execution
Eibiz i-Media Server Digital Signage 3.8.0 – Directory Traversal
# Exploit Title: Eibiz i-Media Server Digital Signage 3.8.0 - Directory Traversal
Ericom Access Server x64 9.2.0 – Server-Side Request Forgery
# Exploit Title: Ericom Access Server x64 9.2.0 - Server-Side Request Forgery
Socket.io-file 2.0.31 – Arbitrary File Upload
# Exploit Title: Socket.io-file 2.0.31 - Arbitrary File Upload
Sickbeard 0.1 – Cross-Site Request Forgery (Disable Authentication)
# Exploit Title: Sickbeard 0.1 - Cross-Site Request Forgery (Disable Authentication)
Bio Star 2.8.2 – Local File Inclusion
# Exploit Title: Bio Star 2.8.2 - Local File Inclusion
Bludit 3.9.2 – Directory Traversal
# Title: Bludit 3.9.2 - Directory Traversal
INNEO Startup TOOLS 2018 M040 13.0.70.3804 – Remote Code Execution
# Exploit Title: INNEO Startup TOOLS 2018 M040 13.0.70.3804 - Remote Code Execution
Sophos VPN Web Panel 2020 – Denial of Service (Poc)
# Exploit Title: Sophos VPN Web Panel 2020 - Denial of Service (Poc)
Docsify.js 4.11.4 – Reflective Cross-Site Scripting
# Exploit Title: Docsify.js 4.11.4 - Reflective Cross-Site Scripting
BSA Radar 1.6.7234.24750 – Local File Inclusion
# Exploit title: BSA Radar 1.6.7234.24750 - Local File Inclusion
Qmail SMTP 1.03 – Bash Environment Variable Injection
# Exploit Title: Qmail SMTP 1.03 - Bash Environment Variable Injection
BSA Radar 1.6.7234.24750 – Authenticated Privilege Escalation
# Exploit Title: BSA Radar 1.6.7234.24750 - Authenticated Privilege Escalation
RSA IG&L Aveksa 7.1.1 – Remote Code Execution
# Exploit Title: RSA IG&L Aveksa 7.1.1 - Remote Code Execution
OCS Inventory NG 2.7 – Remote Code Execution
# Exploit Title: OCS Inventory NG 2.7 - Remote Code Execution
BSA Radar 1.6.7234.24750 – Persistent Cross-Site Scripting
# Exploit title: BSA Radar 1.6.7234.24750 - Persistent Cross-Site Scripting
WebPort 1.19.1 – Reflected Cross-Site Scripting
# Exploit Title: WebPort 1.19.1 - Reflected Cross-Site Scripting
Odoo 12.0 – Local File Inclusion
# Exploit Title: Odoo 12.0 - Local File Inclusion