Equipment Rental Script-1.0 – SQLi
## Title: Equipment Rental Script-1.0 - SQLi
remote
remote 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Atcom 2.7.x.x – Authenticated Command Injection
# Exploit Title: Atcom 2.7.x.x - Authenticated Command Injection
Tinycontrol LAN Controller v3 (LK3) 1.58a – Remote Credentials Extraction
#!/usr/bin/env python
Ruijie Reyee Mesh Router – MITM Remote Code Execution (RCE)
# Exploit Title: Ruijie Reyee Wireless Router firmware version B11P204 - MITM Remote Code Execution (RCE)
Techview LA-5570 Wireless Gateway Home Automation Controller – Multiple Vulnerabilities
# Exploit Title: Techview LA-5570 Wireless Gateway Home Automation Controller - Multiple Vulnerabilities
GOM Player 2.3.90.5360 – Remote Code Execution (RCE)
# Exploit Title: GOM Player 2.3.90.5360 - Remote Code Execution (RCE)
EuroTel ETL3100 – Transmitter Unauthenticated Config/Log Download
# Exploit Title: EuroTel ETL3100 - Transmitter Unauthenticated Config/Log Download
EuroTel ETL3100 – Transmitter Authorization Bypass (IDOR)
# Exploit Title: EuroTel ETL3100 - Transmitter Authorization Bypass (IDOR)
EuroTel ETL3100 – Transmitter Default Credentials
#Exploit Title: EuroTel ETL3100 Transmitter Default Credentials
TSPlus 16.0.0.0 – Remote Work Insecure Credential storage
# Exploit Title: TSPlus 16.0.0.0 - Remote Work Insecure Credential storage
TSplus 16.0.0.0 – Remote Work Insecure Files and Folders
# Exploit Title: TSplus 16.0.0.0 - Remote Work Insecure Files and Folders Permissions
TSplus 16.0.2.14 – Remote Access Insecure Files and Folders Permissions
# Exploit Title: TSplus 16.0.2.14 - Remote Access Insecure Files and Folders Permissions
TP-Link Archer AX21 – Unauthenticated Command Injection
#!/usr/bin/python3
Shelly PRO 4PM v0.11.0 – Authentication Bypass
#!/bin/bash
ReyeeOS 1.204.1614 – MITM Remote Code Execution (RCE)
# Exploit Title: ReyeeOS 1.204.1614 - MITM Remote Code Execution (RCE)
Microsoft Office 365 Version 18.2305.1222.0 – Elevation of Privilege + RCE.
## Title: Microsoft Office 365 Version 18.2305.1222.0 - Elevation of Privilege + RCE.
Hikvision Hybrid SAN Ds-a71024 Firmware – Multiple Remote Code Execution
# Exploit Title: Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution
Windows 10 v21H1 – HTTP Protocol Stack Remote Code Execution
## Title: Windows 10 v21H1 - HTTP Protocol Stack Remote Code Execution
Microsoft Outlook Microsoft 365 MSO (Version 2306 Build 16.0.16529.20100) 32-bit – Remote Code Execution
## Title: Microsoft Outlook Microsoft 365 MSO (Version 2306 Build 16.0.16529.20100) 32-bit - Remote Code Execution
Microsoft 365 MSO (Version 2305 Build 16.0.16501.20074) 32-bit – Remote Code Execution (RCE)
## Title:Microsoft 365 MSO (Version 2305 Build 16.0.16501.20074) 32-bit - Remote Code Execution (RCE)
Microsoft 365 MSO (Version 2305 Build 16.0.16501.20074) 64-bit – Remote Code Execution (RCE)
## Title: Microsoft 365 MSO (Version 2305 Build 16.0.16501.20074) 64-bit - Remote Code Execution (RCE)
Azure Apache Ambari 2302250400 – Spoofing
# Exploit Title: Azure Apache Ambari 2302250400 - Spoofing
Microsoft OneNote (Version 2305 Build 16.0.16501.20074) 64-bit – Spoofing
## Title: Microsoft OneNote (Version 2305 Build 16.0.16501.20074) 64-bit - Spoofing
Nokia ASIKA 7.13.52 – Hard-coded private key disclosure
// Exploit Title: Nokia ASIKA 7.13.52 - Hard-coded private key disclosure
Anevia Flamingo XL 3.2.9 – Remote Root Jailbreak
Exploit Title: Anevia Flamingo XL 3.2.9 - Remote Root Jailbreak
Anevia Flamingo XL 3.6.20 – Authenticated Root Remote Code Execution
Exploit Title: Anevia Flamingo XL 3.6.20 - Authenticated Root Remote Code Execution
Anevia Flamingo XS 3.6.5 – Authenticated Root Remote Code Execution
Exploit Title: Anevia Flamingo XS 3.6.5 - Authenticated Root Remote Code Execution
Screen SFT DAB 600/C – Unauthenticated Information Disclosure (userManager.cgx)
# Exploit Title: Screen SFT DAB 600/C - Unauthenticated Information Disclosure (userManager.cgx)
Screen SFT DAB 600/C – Authentication Bypass Reset Board Config
#!/usr/bin/env python3
Screen SFT DAB 600/C – Authentication Bypass Admin Password Change
#!/usr/bin/env python3
Screen SFT DAB 600/C – Authentication Bypass Erase Account
#!/usr/bin/env python3
Screen SFT DAB 600/C – Authentication Bypass Password Change
#!/usr/bin/env python3
Screen SFT DAB 600/C – Authentication Bypass Account Creation
#!/usr/bin/env python3
Optoma 1080PSTX Firmware C02 – Authentication Bypass
# Exploit Title: Optoma 1080PSTX Firmware C02 - Authentication Bypass
Epson Stylus SX510W Printer Remote Power Off – Denial of Service
# Exploit Title: Epson Stylus SX510W Printer Remote Power Off - Denial of Service (PoC)
Franklin Fueling Systems TS-550 – Default Password
# Exploit Title: Franklin Fueling Systems TS-550 - Default Password
Microsoft Word 16.72.23040900 – Remote Code Execution (RCE)
## Exploit Title: Microsoft Word 16.72.23040900 - Remote Code Execution (RCE)
pfsenseCE v2.6.0 – Anti-brute force protection bypass
#!/usr/bin/python3
Microsoft Excel 365 MSO (Version 2302 Build 16.0.16130.20186) 64-bit – Remote Code Execution (RCE)
## Exploit Title: Microsoft Excel 365 MSO (Version 2302 Build 16.0.16130.20186) 64-bit - Remote Code Execution (RCE)
Franklin Fueling Systems TS-550 – Exploit and Default Password
# Exploit Title: Franklin Fueling Systems TS-550 - Exploit and Default Password
Schneider Electric v1.0 – Directory traversal & Broken Authentication
# Exploit Title: Schneider Electric v1.0 - Directory traversal & Broken Authentication
Tenda N300 F3 12.01.01.48 – Malformed HTTP Request Header Processing
#!/usr/bin/python3
IBM Aspera Faspex 4.4.1 – YAML deserialization (RCE)
# Exploit Title: IBM Aspera Faspex 4.4.1 - YAML deserialization (RCE)
Docker based datastores for IBM Instana 241-2 243-0 – No Authentication
# Exploit Title: Docker based datastores for IBM Instana 241-2 243-0 - No Authentication
WIMAX SWC-5100W Firmware V(1.11.0.1 :1.9.9.4) – Authenticated RCE
# Exploit Title: WIMAX SWC-5100W Firmware V(1.11.0.1 :1.9.9.4) - Authenticated RCE