reNgine 2.2.0 – Command Injection (Authenticated)
# Exploit Title: reNgine 2.2.0 - Command Injection (Authenticated)
multiple
multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
NoteMark < 0.13.0 - Stored XSS
# Exploit Title: Stored XSS in NoteMark
Gitea 1.22.0 – Stored XSS
# Exploit Title: Stored XSS in Gitea
Calibre-web 0.6.21 – Stored XSS
# Exploit Title: Stored XSS in Calibre-web
Ivanti vADC 9.9 – Authentication Bypass
# Exploit Title: Ivanti vADC 9.9 - Authentication Bypass
SolarWinds Platform 2024.1 SR1 – Race Condition
# Exploit Title: SolarWinds Platform 2024.1 SR1 - Race Condition
Sitefinity 15.0 – Cross-Site Scripting (XSS)
# Exploit Title: Sitefinity 15.0 - Cross-Site Scripting (XSS)
changedetection < 0.45.20 - Remote Code Execution (RCE)
# Exploit Title: changedetection
CrushFTP < 11.1.0 - Directory Traversal
## Exploit Title: CrushFTP Directory Traversal
iboss Secure Web Gateway – Stored Cross-Site Scripting (XSS)
# Exploit Title: iboss Secure Web Gateway - Stored Cross-Site Scripting (XSS)
PrusaSlicer 2.6.1 – Arbitrary code execution
# Exploit Title: PrusaSlicer 2.6.1 - Arbitrary code execution on g-code export
Broken Access Control – on NodeBB v3.6.7
Exploit Title: Broken Access Control - on NodeBB v3.6.7
Asterisk AMI – Partial File Content & Path Disclosure (Authenticated)
# Exploit Title: Asterisk AMI - Partial File Content & Path Disclosure (Authenticated)
Nagios XI Version 2024R1.01 – SQL Injection
# Exploit Title: NAGIOS XI SQLI
Atlassian Confluence < 8.5.3 - Remote Code Execution
# Exploit Title: CVE-2023-22527: Atlassian Confluence RCE Vulnerability
vm2 – sandbox escape
# Exploit Title: vm2 Sandbox Escape vulnerability
SnipeIT 6.2.1 – Stored Cross Site Scripting
Exploit Title: SnipeIT 6.2.1 - Stored Cross Site Scripting
VMware Cloud Director 10.5 – Bypass identity verification
# Exploit Title: [VMware Cloud Director | Bypass identity verification]
OSGi v3.7.2 (and below) Console – RCE
#!/usr/bin/python
OSGi v3.8-3.18 Console – RCE
#!/usr/bin/python
Adobe ColdFusion versions 2018,15 (and earlier) and 2021,5 and earlier – Arbitrary File Read
# Exploit Title: File Read Arbitrary Exploit for CVE-2023-26360
Easywall 0.3.1 – Authenticated Remote Command Execution
# Exploit Title: Easywall 0.3.1 - Authenticated Remote Command Execution
A-PDF All to MP3 Converter 2.0.0 – DEP Bypass via HeapCreate + HeapAlloc
#!/usr/bin/python
Magento ver. 2.4.6 – XSLT Server Side Injection
# Exploit Title: Magento ver. 2.4.6 - XSLT Server Side Injection
Executables Created with perl2exe < V30.10C - Arbitrary Code Execution
# Exploit Title: Executables Created with perl2exe malicious.pl
Wyrestorm Apollo VX20 < 1.3.58 - Incorrect Access Control 'Credentials Disclosure'
[+] Credits: John Page (aka hyp3rlinx)
Wyrestorm Apollo VX20 < 1.3.58 - Incorrect Access Control 'DoS'
[+] Credits: John Page (aka hyp3rlinx)
Wyrestorm Apollo VX20 < 1.3.58 - Account Enumeration
[+] Credits: John Page (aka hyp3rlinx)
Wondercms 4.3.2 – XSS to RCE
# Author: prodigiousMind
SureMDM On-premise < 6.31 - CAPTCHA Bypass User Enumeration
# Exploit Title: SureMDM On-premise < 6.31 - CAPTCHA Bypass User Enumeration
SISQUALWFM 7.1.319.103 – Host Header Injection
# Exploit Title: SISQUALWFM 7.1.319.103 Host Header Injection
Splunk 9.0.4 – Information Disclosure
# Exploit Title: Splunk 9.0.4 - Information Disclosure
Elasticsearch – StackOverflow DoS
# Exploit Author: TOUHAMI KASBAOUI
WhatsUp Gold 2022 (22.1.0 Build 39) – XSS
# Exploit Title: WhatsUpGold 22.1.0 - Stored Cross-Site Scripting (XSS)
GoAhead Web Server 2.5 – ‘goform/formTest’ Multiple HTML Injection Vulnerabilities
# Exploit Title: GoAhead Web Server 2.5 - 'goform/formTest' Multiple HTML Injection Vulnerabilities
Splunk 9.0.5 – admin account take over
#!/usr/bin/env python3
OpenPLC WebServer 3 – Denial of Service
# Exploit Title: OpenPLC WebServer 3 - Denial of Service
Axigen < 10.3.3.47, 10.2.3.12 - Reflected XSS
# Exploit Title: Axigen < 10.3.3.47, 10.2.3.12 - Reflected XSS
FileMage Gateway 1.10.9 – Local File Inclusion
# Exploit Title: FileMage Gateway 1.10.9 - Local File Inclusion
Lucee 5.4.2.17 – Authenticated Reflected XSS
# Exploit Title: Lucee 5.4.2.17 - Authenticated Reflected XSS
Ozeki SMS Gateway 10.3.208 – Arbitrary File Read (Unauthenticated)
# Exploit Title: Ozeki 10 SMS Gateway 10.3.208 - Arbitrary File Read (Unauthenticated)
Keeper Security desktop 16.10.2 & Browser Extension 16.5.4 – Password Dumping
# Exploit Title: Keeper Security desktop 16.10.2 & Browser Extension 16.5.4 - Password Dumping
RWS WorldServer 11.7.3 – Session Token Enumeration
Exploit Title: RWS WorldServer 11.7.3 - Session Token Enumeration
Microsoft Office 365 Version 18.2305.1222.0 – Elevation of Privilege + RCE.
## Title: Microsoft Office 365 Version 18.2305.1222.0 - Elevation of Privilege + RCE.
Microsoft Outlook Microsoft 365 MSO (Version 2306 Build 16.0.16529.20100) 32-bit – Remote Code Execution
## Title: Microsoft Outlook Microsoft 365 MSO (Version 2306 Build 16.0.16529.20100) 32-bit - Remote Code Execution
Microsoft Edge 114.0.1823.67 (64-bit) – Information Disclosure
## Title:Microsoft Edge 114.0.1823.67 (64-bit) - Information Disclosure
Microsoft 365 MSO (Version 2305 Build 16.0.16501.20074) 32-bit – Remote Code Execution (RCE)
## Title:Microsoft 365 MSO (Version 2305 Build 16.0.16501.20074) 32-bit - Remote Code Execution (RCE)
Microsoft 365 MSO (Version 2305 Build 16.0.16501.20074) 64-bit – Remote Code Execution (RCE)
## Title: Microsoft 365 MSO (Version 2305 Build 16.0.16501.20074) 64-bit - Remote Code Execution (RCE)
FuguHub 8.1 – Remote Code Execution
# Exploit Title: FuguHub 8.1 - Remote Code Execution