ThingsBoard 3.3.1 ‘description’ – Stored Cross-Site Scripting (XSS)
# Exploit Title: ThingsBoard 3.3.1 'description' - Stored Cross-Site Scripting (XSS)
multiple
multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
ThingsBoard 3.3.1 ‘name’ – Stored Cross-Site Scripting (XSS)
# Exploit Title: ThingsBoard 3.3.1 'name' - Stored Cross-Site Scripting (XSS)
Geonetwork 4.2.0 – XML External Entity (XXE)
# Exploit Title: Geonetwork 4.2.0 - XML External Entity (XXE)
OctoBot WebInterface 0.4.3 – Remote Code Execution (RCE)
# Exploit Title: OctoBot WebInterface 0.4.3 - Remote Code Execution (RCE)
Nginx 1.20.0 – Denial of Service (DOS)
# Exploit Title: Nginx 1.20.0 - Denial of Service (DOS)
Mailhog 1.0.1 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Mailhog 1.0.1 - Stored Cross-Site Scripting (XSS)
Sourcegraph Gitserver 3.36.3 – Remote Code Execution (RCE)
# Exploit Title: Sourcegraph Gitserver 3.36.3 - Remote Code Execution (RCE)
Avantune Genialcloud ProJ 10 – Cross-Site Scripting (XSS)
# Exploit Title: Avantune Genialcloud ProJ 10 - Cross-Site Scripting (XSS)
T-Soft E-Commerce 4 – SQLi (Authenticated)
# Exploit Title: T-Soft E-Commerce 4 - SQLi (Authenticated)
T-Soft E-Commerce 4 – ‘UrunAdi’ Stored Cross-Site Scripting (XSS)
# Exploit Title: T-Soft E-Commerce 4 - 'UrunAdi' Stored Cross-Site Scripting (XSS)
Survey Sparrow Enterprise Survey Software 2022 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Survey Sparrow Enterprise Survey Software 2022 - Stored Cross-Site Scripting (XSS)
F5 BIG-IP 16.0.x – Remote Code Execution (RCE)
# Exploit Title: F5 BIG-IP 16.0.x - Remote Code Execution (RCE)
Google Chrome 78.0.3904.70 – Remote Code Execution
# Exploit Title: Google Chrome 78.0.3904.70 - Remote Code Execution
Cyclos 4.14.7 – ‘groupId’ DOM Based Cross-Site Scripting (XSS)
# Exploit Title: Cyclos 4.14.7 - 'groupId' DOM Based Cross-Site Scripting (XSS)
Cyclos 4.14.7 – DOM Based Cross-Site Scripting (XSS)
# Exploit Title: Cyclos 4.14.7 - DOM Based Cross-Site Scripting (XSS)
SAP BusinessObjects Intelligence 4.3 – XML External Entity (XXE)
# Exploit Title: SAP BusinessObjects Intelligence 4.3 - XML External Entity (XXE)
Akka HTTP 10.1.14 – Denial of Service
# Exploit Title: Akka HTTP Denial of Service via Nested Header Comments
Opmon 9.11 – Cross-site Scripting
# Exploit Title: Opmon 9.11 - Cross-site Scripting
PostgreSQL 9.3-11.7 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: PostgreSQL 9.3-11.7 - Remote Code Execution (RCE) (Authenticated)
Ivanti Endpoint Manager 4.6 – Remote Code Execution (RCE)
# Exploit Title: Ivanti Endpoint Manager 4.6 - Remote Code Execution (RCE)
Apache APISIX 2.12.1 – Remote Code Execution (RCE)
# Exploit Title: Apache APISIX 2.12.1 - Remote Code Execution (RCE)
Baixar GLPI Project 9.4.6 – SQLi
# Exploit Title: Baixar GLPI Project 9.4.6 - SQLi
Tdarr 2.00.15 – Command Injection
# Exploit Title: Tdarr 2.00.15 - Command Injection
Hasura GraphQL 2.2.0 – Information Disclosure
# Exploit Title: Hasura GraphQL 2.2.0 - Information Disclosure
Zyxel ZyWALL 2 Plus Internet Security Appliance – Cross-Site Scripting (XSS)
# Exploit Title: Zyxel ZyWALL 2 Plus Internet Security Appliance - Cross-Site Scripting (XSS)
Casdoor 1.13.0 – SQL Injection (Unauthenticated)
// Exploit Title: Casdoor 1.13.0 - SQL Injection (Unauthenticated)
Thinfinity VirtualUI 2.5.26.2 – Information Disclosure
Exploit Title: Thinfinity VirtualUI 2.5.26.2 - Information Disclosure
Thinfinity VirtualUI 2.5.41.0 – IFRAME Injection
Exploit Title: Thinfinity VirtualUI 2.5.41.0 - IFRAME Injection
Fortinet Fortimail 7.0.1 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: Fortinet Fortimail 7.0.1 - Reflected Cross-Site Scripting (XSS)
ServiceNow – Username Enumeration
# Exploit Title: ServiceNow - Username Enumeration
FileBrowser 2.17.2 – Cross Site Request Forgery (CSRF) to Remote Code Execution (RCE)
# Exploit Title: FileBrowser 2.17.2 - Cross Site Request Forgery (CSRF) to Remote Code Execution (RCE)
BeyondTrust Remote Support 6.0 – Reflected Cross-Site Scripting (XSS) (Unauthenticated)
# Exploit Title: BeyondTrust Remote Support 6.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)
ConnectWise Control 19.2.24707 – Username Enumeration
# Exploit Title: ConnectWise Control 19.2.24707 - Username Enumeration
Cibele Thinfinity VirtualUI 2.5.41.0 – User Enumeration
# Exploit Title: Cibele Thinfinity VirtualUI 2.5.41.0 - User Enumeration
Grafana 8.3.0 – Directory Traversal and Arbitrary File Read
# Exploit Title: Grafana 8.3.0 - Directory Traversal and Arbitrary File Read
orangescrum 1.8.0 – ‘Multiple’ Cross-Site Scripting (XSS) (Authenticated)
# Exploit Title: orangescrum 1.8.0 - 'Multiple' Cross-Site Scripting (XSS) (Authenticated)
orangescrum 1.8.0 – ‘Multiple’ SQL Injection (Authenticated)
# Exploit Title: orangescrum 1.8.0 - 'Multiple' SQL Injection (Authenticated)
orangescrum 1.8.0 – Privilege escalation (Authenticated)
# Exploit Title: orangescrum 1.8.0 - Privilege escalation (Authenticated)
Bagisto 1.3.3 – Client-Side Template Injection
# Exploit Title: Bagisto 1.3.3 - Client-Side Template Injection
FLEX 1085 Web 1.6.0 – HTML Injection
# Exploit Title: FLEX 1085 Web 1.6.0 - HTML Injection
Webrun 3.6.0.42 – ‘P_0’ SQL Injection
# Exploit Title: Webrun 3.6.0.42 - 'P_0' SQL Injection
CMDBuild 3.3.2 – ‘Multiple’ Cross Site Scripting (XSS)
# Exploit Title: CMDBuild 3.3.2 - 'Multiple' Cross Site Scripting (XSS)
KONGA 0.14.9 – Privilege Escalation
# Exploit Title: KONGA 0.14.9 - Privilege Escalation
Mumara Classic 2.93 – ‘license’ SQL Injection (Unauthenticated)
# Exploit Title: Mumara Classic 2.93 - 'license' SQL Injection (Unauthenticated)
FormaLMS 2.4.4 – Authentication Bypass
# Exploit Title: FormaLMS 2.4.4 - Authentication Bypass
Apache HTTP Server 2.4.50 – Remote Code Execution (RCE) (3)
# Exploit Title: Apache HTTP Server 2.4.50 - Remote Code Execution (RCE) (3)
zlog 1.2.15 – Buffer Overflow
# Exploit Title: zlog 1.2.15 - Buffer Overflow