deephas 1.0.7 – Prototype Pollution
# Exploit Title: deephas 1.0.7 - Prototype Pollution
multiple
multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
SUSE Manager 4.3.15 – Code Execution
# Exploit Title: SUSE Manager 4.3.15 - Code Execution
HAX CMS 24.x – Stored Cross-Site Scripting (XSS)
# Exploit Title: HAX CMS 24.x - Stored Cross-Site Scripting (XSS)
Craft CMS 5.6.16 – RCE
# Exploit Title: Craft CMS 5.6.16 - RCE
GeographicLib v2.5.1 – stack buffer overflow
Exploit title: GeographicLib v2.5.1 - stack buffer overflow
OpenWrt 23.05 – Authenticated Remote Code Execution (RCE)
# Exploit Title: OpenWrt 23.05 - Authenticated Remote Code Execution (RCE)
OpenKM 6.3.12 – Multiple
# Exploit Title: OpenKM Multiple Critical Zero-Day
GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)
# Exploit Title: GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)
JuzaWeb CMS 3.4.2 – Authenticated Remote Code Execution
# Exploit Title: JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution
FacturaScripts 2025.43 – XSS
# Exploit Title: FacturaScripts 2025.43 - XSS
Xibo CMS 4.3.0 – RCE via SSTI
# Exploit Title: Xibo CMS - Authenticated Remote Code Execution via SSTI
LangChain Core 1.2.4 – SSTI/RCE
# Exploit Title: LangChain Core - SSTI/RCE
Atlona ATOMERX21 – Authenticated Command Injection
// Exploit Title: Atlona AT-OME-RX21 Authenticated Command Injection
WordPress Plugin 5.2.0 – Broken Access Control
# Exploit Title: WordPress Plugin 5.2.0 - Broken Access Control
NetBT e-Fatura – Privilege Escalation
# Exploit Title: NetBT e-Fatura - Privilege Escalation
D-Link DIR-650IN – Authenticated Command Injection
# Exploit Title: D-Link DIR-650IN - Authenticated Command Injection
React Server 19.2.0 – Remote Code Execution
# Exploit Title: React Server 19.2.0 - Remote Code Execution
RomM 4.4.0 – XSS_CSRF Chain
# Exploit Title: RomM < 4.4.1 - XSS_CSRF Chain
Jumbo Website Manager – Remote Code Execution
#Exploit Title: Jumbo Website Manager - Remote Code Execution
FortiWeb 8.0.2 – Remote Code Execution
# Exploit Title: FortiWeb 8.0.2 - Remote Code Execution
7-Zip 24.00 – Directory Traversal
# Exploit Title: 7-Zip < 25.00 - Directory Traversal to RCE via Malicious ZIP
xibocms 3.3.4 – RCE
# Exploit Title: XiboCMS 3.3.4- Remote Code Execution
Horilla v1.3 – RCE
# Exploit Title: Horilla v1.3 - RCE
is-localhost-ip 2.0.0 – SSRF
# Titles: is-localhost-ip 2.0.0 - SSRF
Fortinet FortiWeb v8.0.1 – Auth Bypass
# Titles:Fortinet FortiWeb v8.0.1 - Auth Bypass
ASP.net 8.0.10 – Bypass
# Exploit Title: ASP.net 8.0.10 - Bypass
Grafana 11.6.0 – SSRF
# Exploit Title: Grafana 11.6.0 - SSRF
Zhiyuan OA – arbitrary file upload leading
# Exploit Title: Zhiyuan OA - arbitrary file upload leading
WBCE CMS 1.6.4 – Remote Code Execution
# Exploit Title: WBCE CMS 1.6.4 - Remote Code Execution
RiteCMS 3.1.0 – Authenticated Remote Code Execution
# Exploit Title: RiteCMS 3.1.0 - Authenticated Remote Code Execution
WordPress Madara – Local File Inclusion
# Exploit Title: WordPress Madara Local File Inclusion
WordPress Backup Migration 1.3.7 – Remote Command Execution
# Exploit Title: WordPress Backup Migration 1.3.7 - Remote Command Execution
mailcow 2025-01a – Host Header Password Reset Poisoning
# Exploit Title: mailcow 2025-01a - Host Header Password Reset Poisoning
Easy File Sharing Web Server v7.2 – Buffer Overflow
# Exploit title: Easy File Sharing Web Server v7.2 - Buffer Overflow
Boss Mini v1.4.0 – Local File Inclusion (LFI)
# Exploit Title: Boss Mini v1.4.0 - Local File Inclusion (LFI)
motionEye 0.43.1b4 – RCE
# Exploit Title: motionEye 0.43.1b4 - RCE
OctoPrint 1.11.2 – File Upload
# Exploit Title: OctoPrint 1.11.2 - File Upload
Ingress-NGINX Admission Controller v1.11.1 – FD Injection to RCE
# Exploit Title: Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE
FortiWeb Fabric Connector 7.6.x – SQL Injection to Remote Code Execution
# Exploit Title: FortiWeb Fabric Connector 7.6.x - Pre-authentication SQL
Docker Desktop 4.44.3 – Unauthenticated API Exposure
# Exploit Title: Docker Desktop 4.44.3 - Unauthenticated API Exposure
Piranha CMS 12.0 – Stored XSS in Text Block
# Exploit Title: Piranha CMS 12.0 - Stored Cross Site Scripting
RPi-Jukebox-RFID 2.8.0 – Stored Cross-Site Scripting (XSS)
# Exploit Title: RPi-Jukebox-RFID 2.8.0 - Stored XSS (CVE-2025-10370)
D-Link DIR-825 Rev.B 2.10 – Stack Buffer Overflow (DoS)
# Exploit Title: D-Link DIR-825 Rev.B 2.10 - Stack Buffer Overflow (DoS)
RPi-Jukebox-RFID 2.8.0 – Remote Command Execution
# Exploit Title: RPi-Jukebox-RFID 2.8.0 - Remote Code Execution
Siklu EtherHaul Series EH-8010 – Arbitrary File Upload
# Exploit Title: Siklu EtherHaul Series - Unauthenticated Arbitrary File Upload
Siklu EtherHaul Series EH-8010 – Remote Command Execution
# Exploit Title:Siklu EtherHaul Series EH-8010 - Remote Command Execution
WordPress Quiz Maker 6.7.0.56 – SQL Injection
# Exploit Title: WordPress Quiz Maker 6.7.0.56 - SQL Injection
Chained Quiz 1.3.5 – Unauthenticated Insecure Direct Object Reference via Cookie
# Exploit Title: Chained Quiz 1.3.5 - Unauthenticated Insecure Direct Object Reference via Cookie
FreeBSD rtsold 15.x – Remote Code Execution via DNSSL
# Exploit Title: FreeBSD rtsold 15.x - Remote Code Execution via DNSSL
Summar Employee Portal 3.98.0 – Authenticated SQL Injection
# Exploit Title: Summar Employee Portal 3.98.0 - Authenticated SQL Injection