Camaleon CMS v2.7.0 – Server-Side Template Injection (SSTI)
Exploit Title: Camaleon CMS v2.7.0 - Server-Side Template Injection (SSTI)
ruby
ruby 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Cameleon CMS 2.7.4 – Persistent Stored XSS in Post Title
# Exploit Title: Authenticated Persistent XSS in Cameleon CMS 2.7.4
pdfkit v0.8.7.2 – Command Injection
#!/usr/bin/env python3
GitLab v15.3 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: GitLab v15.3 - Remote Code Execution (RCE) (Authenticated)
Gitlab 14.9 – Authentication Bypass
# Exploit Title: Gitlab 14.9 - Authentication Bypass
GitLab 14.9 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Gitlab Stored XSS
GitLab 13.10.2 – Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: GitLab 13.10.2 - Remote Code Execution (RCE) (Unauthenticated)
Gitlab 13.10.2 – Remote Code Execution (Authenticated)
# Exploit Title: Gitlab 13.10.2 - Remote Code Execution (Authenticated)
Gitlab 13.9.3 – Remote Code Execution (Authenticated)
# Exploit Title: Gitlab 13.9.3 - Remote Code Execution (Authenticated)
GitLab Community Edition (CE) 13.10.3 – User Enumeration
# Exploit Title: GitLab Community Edition (CE) 13.10.3 - User Enumeration
GitLab Community Edition (CE) 13.10.3 – ‘Sign_Up’ User Enumeration
# Exploit Title: GitLab Community Edition (CE) 13.10.3 - 'Sign_Up' User Enumeration
STVS ProVision 5.9.10 – File Disclosure (Authenticated)
# Exploit Title: STVS ProVision 5.9.10 - File Disclosure (Authenticated)
STVS ProVision 5.9.10 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: STVS ProVision 5.9.10 - Cross-Site Request Forgery (Add Admin)
GitLab 11.4.7 – RCE (Authenticated) (2)
# Exploit Title: GitLab 11.4.7 RCE (POC)
GitLab 11.4.7 – Remote Code Execution (Authenticated) (1)
# Exploit Title: Gitlab 11.4.7 - Remote Code Execution
Gitlab 12.9.0 – Arbitrary File Read (Authenticated)
# Exploit Title: Gitlab 12.9.0 - Arbitrary File Read (Authenticated)
Rails 5.0.1 – Remote Code Execution
# Exploit Title: Rails 5.0.1 - Remote Code Execution
GitLab 12.9.0 – Arbitrary File Read
# Exploit Title: GitLab 12.9.0 - Arbitrary File Read
Fat Free CRM 0.19.0 – HTML Injection
# Exploit Title: Fat Free CRM v0.19.0 - HTML Injection
AlchemyCMS 4.1 – Cross-Site Scripting
# Exploit Title: AlchemyCMS 4.1 - Cross-Site Scripting
CAMALEON CMS 2.4 – Cross-Site Scripting
# Exploit Title: CAMALEON CMS 2.4 - Cross-Site Scripting
Ruby < 2.2.8 / < 2.3.5 / < 2.4.2 / < 2.5.0-preview1 - 'NET::Ftp' Command Injection
While using NET::Ftp I realised you could get command execution through "malicious" file names.
Metasploit Web UI < 4.14.1-20170828 - Cross-Site Request Forgery
# Exploit Title: CSRF
GitHub Enterprise 2.8.0 < 2.8.6 - Remote Code Execution
#!/usr/bin/ruby
GitLab – ‘impersonate’ Feature Privilege Escalation
# Exploit Title: GitLab privilege escalation via "impersonate" feature
Radiant CMS 1.1.3 – Multiple Persistent Cross-Site Scripting Vulnerabilities
# Exploit Title: Radiant CMS 1.1.3 - Mutiple Persistant XSS Vulnerabilities
NationBuilder – Multiple Persistent Cross-Site Scripting Vulnerabilities
#1 Stored XSS in 'signup[note]' POST parameter