Lilac-Reloaded for Nagios 2.0.8 – Remote Code Execution (RCE)
#!/usr/bin/env python
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Serendipity 2.4.0 – Cross-Site Scripting (XSS)
Exploit Title: Serendipity 2.4.0 - Cross-Site Scripting (XSS)
Serendipity 2.4.0 – Remote Code Execution (RCE) (Authenticated)
Exploit Title: Serendipity 2.4.0 - Remote Code Execution (RCE) (Authenticated)
Bludit 4.0.0-rc-2 – Account takeover
## Exploit Title: Bludit 4.0.0-rc-2 - Account takeover
Online Computer and Laptop Store 1.0 – Remote Code Execution (RCE)
#!/usr/bin/env python3
BrainyCP V1.0 – Remote Code Execution
# Exploit Title: BrainyCP V1.0 - Remote Code Execution
dotclear 2.25.3 – Remote Code Execution (RCE) (Authenticated)
Exploit Title: dotclear 2.25.3 - Remote Code Execution (RCE) (Authenticated)
WebsiteBaker v2.13.3 – Cross-Site Scripting (XSS)
Exploit Title: WebsiteBaker v2.13.3 - Cross-Site Scripting (XSS)
X2CRM v6.6/6.9 – Reflected Cross-Site Scripting (XSS) (Authenticated)
# Exploit Title: X2CRM v6.6/6.9 - Reflected Cross-Site Scripting (XSS) (Authenticated)
X2CRM v6.6/6.9 – Stored Cross-Site Scripting (XSS) (Authenticated)
# Exploit Title: X2CRM v6.6/6.9 - Stored Cross-Site Scripting (XSS) (Authenticated)
Online-Pizza-Ordering -1.0 – Remote Code Execution (RCE)
## Exploit Title: Online-Pizza-Ordering -1.0 - Remote Code Execution (RCE)
Medicine Tracker System v1.0 – Sql Injection
# Exploit Title: Medicine Tracker System v1.0 - Sql Injection
Online Appointment System V1.0 – Cross-Site Scripting (XSS)
# Exploit Title: Online Appointment System V1.0 - Cross-Site Scripting (XSS)
Joomla! v4.2.8 – Unauthenticated information disclosure
#!/usr/bin/env ruby
Restaurant Management System 1.0 – SQL Injection
# Exploit Title: Restaurant Management System 1.0 - SQL Injection
Icinga Web 2.10 – Arbitrary File Disclosure
#!/usr/bin/env python3
Rukovoditel 3.3.1 – Remote Code Execution (RCE)
Exploit Title: Rukovoditel 3.3.1 - Remote Code Execution (RCE)
ChurchCRM 4.5.1 – Authenticated SQL Injection
# Exploit Title: ChurchCRM 4.5.1 - Authenticated SQL Injection
NotrinosERP 0.7 – Authenticated Blind SQL Injection
# Exploit Title: NotrinosERP 0.7 - Authenticated Blind SQL Injection
Purchase Order Management-1.0 – Local File Inclusion
## Title: Purchase Order Management-1.0 - Local File Inclusion
Agilebio Lab Collector Electronic Lab Notebook v4.234 – Remote Code Execution (RCE)
# Exploit Title: Agilebio Lab Collector Electronic Lab Notebook v4.234 - Remote Code Execution (RCE)
ChurchCRM v4.5.3-121fcc1 – SQL Injection
## Exploit Title: ChurchCRM v4.5.3-121fcc1 - SQL Injection
flatnux 2021-03.25 – Remote Code Execution (Authenticated)
# Exploit Title: flatnux-2021-03.25 - Remote Code Execution (Authenticated)
Simple Food Ordering System v1.0 – Cross-Site Scripting (XSS)
# Exploit Title: Simple Food Ordering System v1.0 - Cross-Site Scripting (XSS)
Music Gallery Site v1.0 – SQL Injection on page Master.php
# Exploit Title: Music Gallery Site v1.0 - SQL Injection on page Master.php
Music Gallery Site v1.0 – SQL Injection on page view_music_details.php
# Exploit Title: Music Gallery Site v1.0 - SQL Injection on page view_music_details.php
Music Gallery Site v1.0 – Broken Access Control
# Exploit Title: Music Gallery Site v1.0 - Broken Access Control
Music Gallery Site v1.0 – SQL Injection on music_list.php
# Exploit Title: Music Gallery Site v1.0 - SQL Injection on music_list.php
Employee Task Management System v1.0 – SQL Injection on edit-task.php
# Exploit Title: Employee Task Management System v1.0 - SQL Injection on edit-task.php
Employee Task Management System v1.0 – SQL Injection on (task-details.php?task_id=?)
# Exploit Title: Employee Task Management System v1.0 - SQL Injection on (task-details.php?task_id=?)
Employee Task Management System v1.0 – Broken Authentication
# Exploit Title: Employee Task Management System v1.0 - Broken Authentication
Auto Dealer Management System v1.0 – SQL Injection on manage_user.php
# Exploit Title: Auto Dealer Management System v1.0 - SQL Injection on manage_user.php
Auto Dealer Management System v1.0 – SQL Injection in sell_vehicle.php
# Exploit Title: Auto Dealer Management System v1.0 - SQL Injection in sell_vehicle.php
Auto Dealer Management System v1.0 – SQL Injection
# Exploit Title: Auto Dealer Management System v1.0 - SQL Injection
Auto Dealer Management System 1.0 – Broken Access Control Exploit
# Exploit Title: Auto Dealer Management System 1.0 - Broken Access Control Exploit
Best pos Management System v1.0 – Remote Code Execution (RCE) on File Upload
# Exploit Title: Best pos Management System v1.0 - Remote Code Execution (RCE) on File Upload
Best pos Management System v1.0 – SQL Injection
# Exploit Title: Best pos Management System v1.0 - SQL Injection
Kimai-1.30.10 – SameSite Cookie-Vulnerability session hijacking
## Exploit Title: Kimai-1.30.10 - SameSite Cookie-Vulnerability session hijacking
POLR URL 2.3.0 – Shortener Admin Takeover
# Exploit Title: POLR URL 2.3.0 - Shortener Admin Takeover
LDAP Tool Box Self Service Password v1.5.2 – Account takeover
# Exploit Title: LDAP Tool Box Self Service Password v1.5.2 - Account takeover
Intern Record System v1.0 – SQL Injection (Unauthenticated)
# Exploit Title: Intern Record System v1.0 - SQL Injection (Unauthenticated)
Simple Task Managing System v1.0 – SQL Injection (Unauthenticated)
# Exploit Title: Simple Task Managing System v1.0 - SQL Injection (Unauthenticated)
Art Gallery Management System Project in PHP v 1.0 – SQL injection
# Exploit Title: Art Gallery Management System Project in PHP v 1.0 - SQL injection
atrocore 1.5.25 User interaction – Unauthenticated File upload – RCE
## Exploit Title: atrocore 1.5.25 User interaction - Unauthenticated File upload - RCE
Dompdf 1.2.1 – Remote Code Execution (RCE)
#!/usr/bin/python3
Froxlor 2.0.3 Stable – Remote Code Execution (RCE)
#!/usr/bin/python3
CKEditor 5 35.4.0 – Cross-Site Scripting (XSS)
# Exploit Title: CKEditor 5 35.4.0 - Cross-Site Scripting (XSS)
ImageMagick 7.1.0-49 – DoS
## Exploit Title: ImageMagick 7.1.0-49 - DoS
itech TrainSmart r1044 – SQL injection
# Exploit Title: itech TrainSmart r1044 - SQL injection
Responsive FileManager 9.9.5 – Remote Code Execution (RCE)
# Exploit Title: Responsive FileManager 9.9.5 - Remote Code Execution (RCE)