PHP 5.4/5.5/5.6 – SplDoublyLinkedList ‘Unserialize()’ Use-After-Free
Yet Another Use After Free Vulnerability in unserialize() with SplDoublyLinkedList
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
DirectAdmin Web Control Panel 1.483 – Multiple Vulnerabilities
=============================================================================
WordPress Theme White-Label Framework 2.0.6 – Cross-Site Scripting
# Exploit Title: Wordpress White-Label Framework XSS
FireEye Appliance – Unauthorized File Disclosure
Just one of many handfuls of FireEye / Mandiant 0day. Been sitting on this for more than 18 months with no fix from t...
Cerb 7.0.3 – Cross-Site Request Forgery
Advisory ID: HTB23269
YesWiki 0.2 – ‘squelette’ Directory Traversal
# Exploit Title: YESWIKI 0.2 - Path Traversal
Mantis Bug Tracker 1.2.19 – Host Header
# Exploit Title: MantisBT 1.2.19 - Host header attack vulnerability
Bedita 3.5.1 – Cross-Site Scripting
########################################################################################
PhpWiki 1.5.4 – Multiple Vulnerabilities
# Title: phpwiki 1.5.4 - Cross Site Scripting / Local File Inclusion
Pluck CMS 4.7.3 – Multiple Vulnerabilities
# Title: Pluck 4.7.3 - Multiple vulnerabilities
Wolf CMS – Arbitrary File Upload / Execution
# Exploit Title : Wolf CMS 0.8.2 Arbitrary File Upload To Command
WordPress Plugin Responsive Thumbnail Slider 1.0 – Arbitrary File Upload
# Exploit Title: Wordpress Responsive Thumbnail Slider Arbitrary File Upload
Invision Power Board (IP.Board) 4.x – Persistent Cross-Site Scripting
# Exploit Title: IP.Board 4.X Stored XSS
vBulletin 3.6.0 < 4.2.3 - 'ForumRunner' SQL Injection
##################################################################################################
WordPress Theme GeoPlaces3 – Arbitrary File Upload
##################################################################################
Netsweeper 4.0.8 – Arbitrary File Upload / Execution
+--------------------------------------------------------+
Netsweeper 3.0.6 – Authentication Bypass
+------------------------------------------------------------------------+
Netsweeper 4.0.9 – Arbitrary File Upload / Execution
+--------------------------------------------------------+
Netsweeper 4.0.8 – Authentication Bypass (via Disabling of IP Quarantine)
+-----------------------------------------------------------------------+
Netsweeper 4.0.8 – SQL Injection / Authentication Bypass
+----------------------------------------------------------------+
Netsweeper 4.0.4 – SQL Injection
+----------------------------------+
Netsweeper 2.6.29.8 – SQL Injection
+-------------------------------------+
WordPress Plugin MDC Private Message 1.0.0 – Persistent Cross-Site Scripting
# Exploit Title: WordPress MDC Private Message Persistent XSS
WordPress Plugin Googmonify 0.8.1 – Cross-Site Scripting / Cross-Site Request Forgery
[+] Exploit Title : Wordpress Googmonify Plug-in XSS/CSRF
Netsweeper 4.0.8 – Authentication Bypass (via New Profile Creation)
+-----------------------------------------------------------------+
Pligg CMS 2.0.2 – Arbitrary Code Execution
{php}echo ' Hacked ';
up.time 7.5.0 – Upload and Execute
up.time 7.5.0 Upload And Execute File Exploit
up.time 7.5.0 – Arbitrary File Disclose and Delete
up.time 7.5.0 Arbitrary File Disclose And Delete Exploit
up.time 7.5.0 – Cross-Site Scripting / Cross-Site Request Forgery (Add Admin)
up.time 7.5.0 XSS And CSRF Add Admin Exploit
WordPress Plugin WP Symposium 15.1 – ‘get_album_item.php’ SQL Injection
# Exploit Title: Wordpress Plugin wp-symposium Unauthenticated SQL Injection Vulnerability
BigTree CMS 4.2.3 – (Authenticated) SQL Injection
BigTree CMS 4.2.3: Multiple SQL Injection Vulnerabilities
CodoForum 3.3.1 – Multiple SQL Injections
CodoForum 3.3.1: Multiple SQL Injection Vulnerabilities
PHPfileNavigator 2.3.3 – Privilege Escalation
[+] Credits: John Page aka hyp3rlinx
PHPfileNavigator 2.3.3 – Cross-Site Request Forgery
[+] Credits: John Page aka hyp3rlinx
PHPfileNavigator 2.3.3 – Cross-Site Scripting
[+] Credits: John Page aka hyp3rlinx
vBulletin < 4.2.2 - Memcache Remote Code Execution
vBulletin's memcache setting is vulnerable in certain versions(all
Magento CE < 1.9.0.1 - (Authenticated) Remote Code Execution
#!/usr/bin/python
Joomla! Component com_informations – SQL Injection
# Exploit Title: Joomla com_informations component SQL Injection vulnerability
Joomla! Component com_memorix – SQL Injection
# Exploit Title: Joomla com_memorix component SQL Injection vulnerability
Gkplugins Picasaweb – Download File
# Exploit Title: Gkplugins Picasaweb Download File
WordPress Plugin Candidate Application Form 1.0 – Arbitrary File Download
Title: Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin
WordPress Plugin Simple Image Manipulator 1.0 – Arbitrary File Download
Title: Remote file download in simple-image-manipulator v1.0 wordpress plugin