GL-iNet MT6000 4.5.5 – Arbitrary File Download
# Exploit Title: GL-iNet MT6000 4.5.5 - Arbitrary File Download
remote
remote 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WinRAR version 6.22 – Remote Code Execution via ZIP archive
################################################################################################
Siklu MultiHaul TG series < 2.0.0 - unauthenticated credential disclosure
# Exploit Title: Siklu MultiHaul TG series - unauthenticated credential disclosure
Asterisk AMI – Partial File Content & Path Disclosure (Authenticated)
# Exploit Title: Asterisk AMI - Partial File Content & Path Disclosure (Authenticated)
minaliC 2.0.0 – Denied of Service
#!/usr/bin/perl
HNAS SMU 14.8.7825 – Information Disclosure
# Exploit Title: Hitachi NAS (HNAS) System Management Unit (SMU) 14.8.7825 - Information Disclosure
TELSAT marKoni FM Transmitter 1.9.5 – Insecure Access Control Change Password
TELSAT marKoni FM Transmitter 1.9.5 Insecure Access Control Change Password
TELSAT marKoni FM Transmitter 1.9.5 – Backdoor Account Information Disclosure
TELSAT marKoni FM Transmitter 1.9.5 Backdoor Account
TELSAT marKoni FM Transmitter 1.9.5 – Root Command Injection
#!/usr/bin/env python
GitLab CE/EE < 16.7.2 - Password Reset
# Exploit Title: GitLab CE/EE < 16.7.2 - Password Reset
Ruijie Switch PSG-5124 26293 – Remote Code Execution (RCE)
#- Exploit Title: Ruijie Switch PSG-5124 26293 - Remote Code Execution (RCE)
Viessmann Vitogate 300 2.1.3.0 – Remote Code Execution (RCE)
#- Exploit Title: Viessmann Vitogate 300
SolarView Compact 6.00 – Command Injection
#- Exploit Title: SolarView Compact 6.00 - Command Injection
Honeywell PM43 < P10.19.050004 - Remote Code Execution (RCE)
#- Exploit Title: Honeywell PM43 < P10.19.050004 - Remote Code Execution (RCE)
JetBrains TeamCity 2023.05.3 – Remote Code Execution (RCE)
#- Exploit Title: JetBrains TeamCity 2023.05.3 - Remote Code Execution (RCE)
VMware Cloud Director 10.5 – Bypass identity verification
# Exploit Title: [VMware Cloud Director | Bypass identity verification]
R Radio Network FM Transmitter 1.07 system.cgi – Password Disclosure
R Radio Network FM Transmitter 1.07 system.cgi Password Disclosure
GL.iNet AR300M v3.216 Remote Code Execution – CVE-2023-46456 Exploit
#!/usr/bin/env python3
TitanNit Web Control 2.01 / Atemio 7600 – Root Remote Code Execution
#!/usr/bin/env python
GL.iNet AR300M v4.3.7 Remote Code Execution – CVE-2023-46454 Exploit
#!/usr/bin/env python3
GL.iNet AR300M v4.3.7 Arbitrary File Read – CVE-2023-46455 Exploit
#!/usr/bin/env python3
Maxima Max Pro Power – BLE Traffic Replay (Unauthenticated)
# Exploit Title: Maxima Max Pro Power - BLE Traffic Replay (Unauthenticated)
Enrollment System v1.0 – SQL Injection
# Exploit Title: Enrollment System v1.0 - SQL Injection
AC Repair and Services System v1.0 – Multiple SQL Injection
# Exploit Title: AC Repair and Services System v1.0 - Multiple SQL Injection
Simple Student Attendance System v1.0 – ‘classid’ Time Based Blind & Union Based SQL Injection
# Exploit Title: Simple Student Attendance System v1.0 - 'classid' Time Based Blind & Union Based SQL Injection
Simple Student Attendance System v1.0 – Time Based Blind SQL Injection
# Exploit Title: Simple Student Attendance System - Time Based Blind SQL Injection
Real Estate Management System v1.0 – Remote Code Execution via File Upload
# Exploit Title: Real Estate Management System v1.0 - Remote Code Execution via File Upload
Petrol Pump Management Software v1.0 – Remote Code Execution via File Upload
# Exploit Title: Petrol Pump Management Software v1.0 - Remote Code Execution via File Upload
Petrol Pump Management Software v.1.0 – SQL Injection
# Exploit Title: Petrol Pump Management Software v.1.0 - SQL Injection
Petrol Pump Management Software v.1.0 – Stored Cross Site Scripting via SVG file
# Exploit Title: Petrol Pump Management Software v.1.0 - Stored Cross Site Scripting via SVG file
Petrol Pump Management Software v1.0 – ‘Address’ Stored Cross Site Scripting
# Exploit Title: Petrol Pump Management Software v1.0 - 'Address' Stored Cross Site Scripting
TEM Opera Plus FM Family Transmitter 35.45 – XSRF
CSRF Change Forward Power:
TEM Opera Plus FM Family Transmitter 35.45 – Remote Code Execution
TEM Opera Plus FM Family Transmitter 35.45 Remote Code Execution
Executables Created with perl2exe < V30.10C - Arbitrary Code Execution
# Exploit Title: Executables Created with perl2exe malicious.pl
IBM i Access Client Solutions v1.1.2 – 1.1.4, v1.1.4.3 – 1.1.9.4 – Remote Credential Theft
[+] Credits: John Page (aka hyp3rlinx)
Wyrestorm Apollo VX20 < 1.3.58 - Incorrect Access Control 'Credentials Disclosure'
[+] Credits: John Page (aka hyp3rlinx)
Wyrestorm Apollo VX20 < 1.3.58 - Account Enumeration
[+] Credits: John Page (aka hyp3rlinx)
FAQ Management System v1.0 – ‘faq’ SQL Injection
# Exploit Title: FAQ Management System v1.0 - 'faq' SQL Injection
Flashcard Quiz App v1.0 – ‘card’ SQL Injection
# Exploit Title: Flashcard Quiz App v1.0 - 'card' SQL Injection
Simple Inventory Management System v1.0 – ’email’ SQL Injection
# Exploit Title: Simple Inventory Management System v1.0 - 'email' SQL Injection
Zyxel zysh – Format string
#!/usr/bin/expect -f
PCMan FTP Server 2.0 – ‘pwd’ Remote Buffer Overflow
# Exploit Title: PCMan FTP Server 2.0 - 'pwd' Remote Buffer Overflow
WebCatalog 48.4 – Arbitrary Protocol Execution
# Exploit Title: WebCatalog 48.4 - Arbitrary Protocol Execution
RoyalTSX 6.0.1 – RTSZ File Handling Heap Memory Corruption PoC
RoyalTSX 6.0.1 RTSZ File Handling Heap Memory Corruption PoC
Proxmox VE – TOTP Brute Force
# Exploit Title: Proxmox VE TOTP Brute Force
Ricoh Printer – Directory and File Exposure
#Exploit Title: Ricoh Printer Directory and File Exposure
Blood Bank & Donor Management System using v2.2 – Stored XSS
# Exploit Title: Blood Bank & Donor Management System using v2.2 - Stored XSS