ProSSHD 1.2 20090726 – Denial of Service (DoS)
# Exploit Title: ProSSHD 1.2 20090726 - Denial of Service (DoS)
remote
remote 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Apache Tomcat 10.1.39 – Denial of Service (DoS)
# Exploit Title: Apache Tomcat 10.1.39 - Denial of Service (DOS)
ABB Cylon Aspect 3.08.04 DeploySource – Remote Code Execution (RCE)
ABB Cylon Aspect 3.08.04 DeploySource - Remote Code Execution (RCE)
Microsoft Windows Server 2025 JScript Engine – Remote Code Execution (RCE)
#!/usr/bin/env python3
Grandstream GSD3710 1.0.11.13 – Stack Overflow
#!/usr/bin/env python3
SolarWinds Serv-U 15.4.2 HF1 – Directory Traversal
# Exploit Title: SolarWinds Serv-U 15.4.2 HF1 - Directory Traversal
Windows File Explorer Windows 11 (23H2) – NTLM Hash Disclosure
#!/usr/bin/env python3
Automic Agent 24.3.0 HF4 – Privilege Escalation
# Exploit Title: Automic Agent 24.3.0 HF4 - Privilege Escalation
Fortra GoAnywhere MFT 7.4.1 – Authentication Bypass
#!/usr/bin/env python3
Grandstream GSD3710 1.0.11.13 – Stack Buffer Overflow
#!/usr/bin/env python3
Windows 2024.15 – Unauthenticated Desktop Screenshot Capture
# Exploit Title: Windows 2024.15 - Unauthenticated Desktop Screenshot Capture
ABB Cylon Aspect 3.08.03 – Guest2Root Privilege Escalation
#!/usr/bin/env python
Remote Keyboard Desktop 1.0.1 – Remote Code Execution (RCE)
# Exploit Title: Remote Keyboard Desktop 1.0.1 - Remote Code Execution (RCE)
CrushFTP 11.3.1 – Authentication Bypass
# Exploit Title: CrushFTP 11.3.1 - Authentication Bypass
Apache ActiveMQ 6.1.6 – Denial of Service (DOS)
# Exploit Title: Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
Firefox ESR 115.11 – PDF.js Arbitrary JavaScript execution
# Exploit Title: Firefox ESR 115.11 - Arbitrary JavaScript execution in
WonderCMS 3.4.2 – Remote Code Execution (RCE)
# Exploit Title: WonderCMS 3.4.2 - Remote Code Execution (RCE)
code-projects Online Exam Mastering System 1.0 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting (XSS)
Langflow 1.3.0 – Remote Code Execution (RCE)
# Exploit Title: Langflow 1.3.0 - Remote Code Execution (RCE)
TP-Link VN020 F3v(T) TT_V6.2.1021 – Denial Of Service (DOS)
# Exploit Title: TP-Link VN020 F3v(T) TT_V6.2.1021 - Denial Of Service (DOS)
TP-Link VN020 F3v(T) TT_V6.2.1021 – Buffer Overflow Memory Corruption
#define _CRT_SECURE_NO_WARNINGS
Fortinet FortiOS, FortiProxy, and FortiSwitchManager 7.2.0 – Authentication bypass
# Exploit Title: Fortinet FortiOS, FortiProxy, and FortiSwitchManager 7.2.0 - Authentication bypass
Hugging Face Transformers MobileViTV2 4.41.1 – Remote Code Execution (RCE)
# Exploit Title: Hugging Face Transformers MobileViTV2 RCE
WebMethods Integration Server 10.15.0.0000-0092 – Improper Access on Login Page
# Exploit Title: WebMethods Integration Server 10.15.0.0000-0092 - Improper Access on Login Page
Dell EMC iDRAC7/iDRAC8 2.52.52.52 – Remote Code Execution (RCE)
# Exploit Title: Dell EMC iDRAC7/iDRAC8 2.52.52.52 - Remote Code Execution (RCE)
Ivanti Connect Secure 22.7R2.5 – Remote Code Execution (RCE)
# Exploit Title: Ivanti Connect Secure 22.7R2.5 - Remote Code Execution (RCE)
Pymatgen 2024.1 – Remote Code Execution (RCE)
# Exploit Title : Pymatgen 2024.1 - Remote Code Execution (RCE)
GestioIP 3.5.7 – Remote Command Execution (RCE)
# Exploit Title: GestioIP 3.5.7 - Remote Command Execution (RCE)
GestioIP 3.5.7 – Cross-Site Scripting (XSS)
# Exploit Title: GestioIP 3.5.7 - GestioIP Vulnerability: Auth. Cross-Site Scripting (XSS)
GestioIP 3.5.7 – Stored Cross-Site Scripting (Stored XSS)
# Exploit Title: GestioIP 3.5.7 - GestioIP Vulnerability: Auth. Stored Cross-Site Scripting
GestioIP 3.5.7 – Cross-Site Request Forgery (CSRF)
# Exploit Title: GestioIP 3.5.7 - GestioIP Vulnerability: Auth. Cross-Site Request Forgery (CSRF)
GestioIP 3.5.7 – Reflected Cross-Site Scripting (Reflected XSS)
# Exploit Title: GestioIP 3.5.7 - Reflected Cross-Site Scripting (Reflected XSS)
K7 Ultimate Security K7RKScan.sys 17.0.2019 – Denial Of Service (DoS)
# Exploit Title: K7 Ultimate Security K7RKScan.sys 17.0.2019 - Denial Of Service (DoS)
Sony XAV-AX5500 1.13 – Firmware Update Validation Remote Code Execution (RCE)
# Exploit Title: Sony XAV-AX5500 Firmware Update Validation Remote Code Execution
InfluxDB OSS 2.7.11 – Operator Token Privilege Escalation
# Exploit Title: InfluxDB OSS Operator Privilege Escalation via BusinessLogic Flaw
Microchip TimeProvider 4100 Grandmaster (Data plot modules) 2.4.6 – SQL Injection
# Exploit Title: Microchip TimeProvider 4100 Grandmaster (Data plot modules) 2.4.6 - SQL Injection
Angular-Base64-Upload Library 0.1.20 – Remote Code Execution (RCE)
# Exploit Title: Angular-Base64-Upload Library 0.1.20 - Remote Code Execution (RCE)
Microchip TimeProvider 4100 Grandmaster (Banner Config Modules) 2.4.6 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Microchip TimeProvider 4100 Grandmaster (Banner Config Modules) 2.4.6 - Stored Cross-Site Scripting ...
Microchip TimeProvider 4100 (Configuration modules) 2.4.6 – OS Command Injection
# Exploit Title: Microchip TimeProvider 4100 (Configuration modules) 2.4.6 - OS Command Injection
Microsoft Office 2019 MSO Build 1808 – NTLMv2 Hash Disclosure
# Exploit Title: Microsoft Office 2019 MSO Build 1808 - NTLMv2 Hash Disclosure
Vite 6.2.2 – Arbitrary File Read
# Exploit Title: Vite Arbitrary File Read - CVE-2025-30208
SAP NetWeaver – 7.53 – HTTP Request Smuggling
# Exploit Title: SAPGateBreaker Exploit - CVE-2022-22536 - HTTP Request Smuggling Through SAP's Front Door
Aztech DSL5005EN Router – ‘sysAccess.asp’ Admin Password Change (Unauthenticated)
# Exploit Title: Aztech DSL5005EN Router - 'sysAccess.asp' Admin Password Change (Unauthenticated)
Microsoft Windows – NTLM Hash Leak Malicious Windows Theme
# Exploit Title: CVE-2024-21320 - NTLM Hash Leak via Malicious Windows Theme
CrushFTP < 11.1.0 - Directory Traversal
## Exploit Title: CrushFTP Directory Traversal
Palo Alto PAN-OS < v11.1.2-h3 - Command Injection and Arbitrary File Creation
# Exploit Title: Palo Alto PAN-OS < v11.1.2-h3 - Command Injection and Arbitrary File Creation
MinIO < 2024-01-31T20-20-33Z - Privilege Escalation
# Exploit Title: MinIO < 2024-01-31T20-20-33Z - Privilege Escalation
Positron Broadcast Signal Processor TRA7005 v1.20 – Authentication Bypass
# Exploit Title: Positron Broadcast Signal Processor TRA7005 v1.20 - Authentication Bypass