FileRun 2019.05.21 – Reflected Cross-Site Scripting
# Exploit Title: FileRun 2019.05.21 - Reflected Cross-Site Scripting
multiple
multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
OpenCTI 3.3.1 – Directory Traversal
# Exploit Title: OpenCTI 3.3.1 - Directory Traversal
SOS JobScheduler 1.13.3 – Stored Password Decryption
# Exploit Title: SOS JobScheduler 1.13.3 - Stored Password Decryption
Sysax MultiServer 6.90 – Reflected Cross Site Scripting
# Exploit Title: Sysax MultiServer 6.90 - Reflected Cross Site Scripting
Avaya IP Office 11 – Password Disclosure
# Exploit Title: Avaya IP Office 11 - Password Disclosure
SmarterMail 16 – Arbitrary File Upload
# Exploit Title: SmarterMail 16 - Arbitrary File Upload
HFS Http File Server 2.3m Build 300 – Buffer Overflow (PoC)
# Exploit Title: HFS Http File Server 2.3m Build 300 - Buffer Overflow (PoC)
Cayin Digital Signage System xPost 2.5 – Remote Command Injection
# Title: Cayin Digital Signage System xPost 2.5 - Remote Command Injection
Cayin Signage Media Player 3.0 – Remote Command Injection (root)
# Title: Cayin Signage Media Player 3.0 - Remote Command Injection (root)
Cayin Content Management Server 11.0 – Remote Command Injection (root)
# Title: Cayin Content Management Server 11.0 - Remote Command Injection (root)
VMware vCenter Server 6.7 – Authentication Bypass
# Exploit Title: VMware vCenter Server 6.7 - Authentication Bypass
Crystal Shard http-protection 0.2.0 – IP Spoofing Bypass
# Exploit Title : Crystal Shard http-protection 0.2.0 - IP Spoofing Bypass
NOKIA VitalSuite SPM 2020 – ‘UserName’ SQL Injection
# Exploit Title: NOKIA VitalSuite SPM 2020 - 'UserName' SQL Injection
OpenEDX platform Ironwood 2.5 – Remote Code Execution
# Exploit Title: OpenEDX platform Ironwood 2.5 - Remote Code Execution
BIND – ‘TSIG’ Denial of Service
#!/usr/bin/python
HP LinuxKI 6.01 – Remote Command Injection
Exploit Title: HP LinuxKI 6.01 - Remote Command Injection
LibreNMS 1.46 – ‘search’ SQL Injection
# Exploit Title: LibreNMS 1.46 - 'search' SQL Injection
Saltstack 3000.1 – Remote Code Execution
# Exploit Title: Saltstack 3000.1 - Remote Code Execution
EspoCRM 5.8.5 – Privilege Escalation
# Exploit Title: EspoCRM 5.8.5 - Privilege Escalation
WhatsApp Desktop 0.3.9308 – Persistent Cross-Site Scripting
# Title: WhatsApp Desktop 0.3.9308 - Persistent Cross-Site Scripting
FIBARO System Home Center 5.021 – Remote File Include
# Exploit Title: FIBARO System Home Center 5.021 - Remote File Include
CyberArk PSMP 10.9.1 – Policy Restriction Bypass
# Exploit Title: CyberArk PSMP 10.9.1 - Policy Restriction Bypass
Microsoft VSCode Python Extension – Code Execution
# VSCode Python Extension Code Execution
Counter Strike: GO – ‘.bsp’ Memory Control (PoC)
So I’ve been holding onto this neat little gem of a .bsp that has four bytes very close to the end of the file that c...
Wing FTP Server 6.2.5 – Privilege Escalation
# Exploit Title: Wing FTP Server 6.2.5 - Privilege Escalation
Joplin Desktop 1.0.184 – Cross-Site Scripting
# Exploit Title: Joplin Desktop 1.0.184 - Cross-Site Scripting
qdPM < 9.1 - Remote Code Execution
#!/usr/bin/python
Apache Tomcat – AJP ‘Ghostcat File Read/Inclusion
#!/usr/bin/env python
iOS/macOS – Out-of-Bounds Timestamp Write in IOAccelCommandQueue2::processSegmentKernelCommand()
While investigating possible shared memory issues in AGXCommandQueue::processSegmentKernelCommand(), I noticed that t...
Forcepoint WebSecurity 8.5 – Reflective Cross-Site Scripting
# Exploit Title: Forcepoint WebSecurity 8.5 - Reflective Cross-Site Scripting
Google Invisible RECAPTCHA 3 – Spoof Bypass
# Exploit Title: Google Invisible RECAPTCHA 3 - Spoof Bypass
Cacti 1.2.8 – Unauthenticated Remote Code Execution
#!/usr/bin/python3
Cacti 1.2.8 – Authenticated Remote Code Execution
#!/usr/bin/python3
macOS/iOS ImageIO – Heap Corruption when Processing Malformed TIFF Image
The attached tiff image causes a crash in ImageIO on the latest macOS and iOS. To reproduce the issue, the attached c...
KeePass 2.44 – Denial of Service (PoC)
# Exploit Title : KeePass 2.44 - Denial of Service (PoC)
Citrix Application Delivery Controller (ADC) and Gateway 13.0 – Path Traversal
# Exploit Title: Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path Traversal