webapps

Winter CMS 1.2.3 – Server-Side Template Injection (SSTI) (Authenticated)

# Exploit Title: Winter CMS 1.2.2 - Server-Side Template Injection (SSTI) (Authenticated)

SnipeIT 6.2.1 – Stored Cross Site Scripting

Exploit Title: SnipeIT 6.2.1 - Stored Cross Site Scripting

Cisco Firepower Management Center < 6.6.7.1 - Authenticated RCE

# Exploit Title: [Cisco Firepower Management Center]

Client Details System 1.0 – SQL Injection

+ **Exploit Title:** CVE-2023-7137_Client_Details_System-SQL_Injection_1

OSGi v3.7.2 (and below) Console – RCE

#!/usr/bin/python

OSGi v3.8-3.18 Console – RCE

#!/usr/bin/python

Human Resource Management System 1.0 – ’employeeid’ SQL Injection

# Exploit Title: Human Resource Management System - SQL Injection

Sitecore – Remote Code Execution v8.2

#!/usr/bin/env python3

Adobe ColdFusion versions 2018,15 (and earlier) and 2021,5 and earlier – Arbitrary File Read

# Exploit Title: File Read Arbitrary Exploit for CVE-2023-26360

WordPress Plugin Duplicator < 1.5.7.1 - Unauthenticated Sensitive Data Exposure to Account Takeover

# Exploit Title: WordPress Plugin Duplicator < 1.5.7.1 -

Hitachi NAS (HNAS) System Management Unit (SMU) Backup & Restore < 14.8.7825.01 - IDOR

#!/usr/bin/python3

Hide My WP < 6.2.9 - Unauthenticated SQLi

# Exploit Title: Wordpress Plugin Hide My WP < 6.2.9 - Unauthenticated SQLi

Akaunting < 3.1.3 - RCE

# Exploit Title: Akaunting < 3.1.3 - RCE

Ladder v0.0.21 – Server-side request forgery (SSRF)

# Exploit Title: Ladder v0.0.21 - Server-side request forgery (SSRF)

DataCube3 v1.0 – Unrestricted file upload ‘RCE’

# Exploit Title: DataCube3 v1.0 - Unrestricted file upload 'RCE'

Numbas < v7.3 - Remote Code Execution

# Exploit Title: Numbas < v7.3 - Remote Code Execution

TP-Link TL-WR740N – Buffer Overflow ‘DOS’

# Exploit Title: TP-Link TL-WR740N - Buffer Overflow 'DOS'

GLiNet – Router Authentication Bypass

DZONERZY Security Research

elFinder Web file manager Version – 2.1.53 Remote Command Execution

# Exploit Title: elFinder Web file manager Version: 2.1.53 Remote Command Execution

CSZ CMS Version 1.3.0 – Authenticated Remote Command Execution

# Exploit Title: CSZ CMS Version 1.3.0 Remote Command Execution

CVE-2023-50071 – Multiple SQL Injection

# Exploit Title: Customer Support System 1.0 - Multiple SQL injection

Lot Reservation Management System – Unauthenticated File Disclosure

# Exploit Title: Lot Reservation Management System Unauthenticated File Disclosure Vulnerability

Lot Reservation Management System – Unauthenticated File Upload and Remote Code Execution

# Exploit Title: Lot Reservation Management System Unauthenticated File Upload and Remote Code Execution

kk Star Ratings < 5.4.6 - Rating Tampering via Race Condition

# Exploit Title: kk Star Ratings < 5.4.6 - Rating Tampering via Race

Neontext WordPress Plugin – Stored XSS

# Exploit Title: Wordpress Plugin Neon Text

Solar-Log 200 PM+ 3.6.0 Build 99 – 15.10.2019 – Stored XSS

# Exploit Title: Stored XSS in Solar-Log 200 3.6.0 web panel

Easywall 0.3.1 – Authenticated Remote Command Execution

# Exploit Title: Easywall 0.3.1 - Authenticated Remote Command Execution

Boss Mini 1.4.0 – local file inclusion

# Exploit Title: Boss Mini 1.4.0 - local file inclusion

Magento ver. 2.4.6 – XSLT Server Side Injection

# Exploit Title: Magento ver. 2.4.6 - XSLT Server Side Injection

WP Fastest Cache 1.2.2 – Unauthenticated SQL Injection

# Exploit Title: Unauthenticated SQL Injection in WP Fastest Cache 1.2.2

Blood Bank v1.0 – Multiple SQL Injection

# Exploit Title: Blood Bank v1.0 SQL Injection Vulnerability

WordPress Plugin Admin Bar & Dashboard Access Control Version: 1.2.8 – “Dashboard Redirect” field Stored Cross-Site Scripting (XSS)

# Exploit Title:  WordPress Plugin Admin Bar & Dashboard Access Control Version: 1.2.8 - "Dashboard Redirect" field  ...

WP Rocket < 2.10.3 - Local File Inclusion (LFI)

Paulos Yibelo discovered and reported this Local File Inclusion vulnerability in WordPress WP Rocket Plugin. This cou...

Atlassian Confluence Data Center and Server – Authentication Bypass (Metasploit)

##

WordPress Plugin Canto < 3.0.5 - Remote File Inclusion (RFI) and Remote Code Execution (RCE)

# Exploit Title: Wordpress Plugin Canto < 3.0.5 - Remote File Inclusion (RFI) and Remote Code Execution (RCE)

Automatic-Systems SOC FL9600 FastLine – The device contains hardcoded login and password for super admin

# Exploit Title: Automatic-Systems SOC FL9600 FastLine - The device contains hardcoded login and password for super a...

Automatic-Systems SOC FL9600 FastLine – Directory Transversal

# Exploit Title: Automatic-Systems SOC FL9600 FastLine - Directory Transversal

SuperStoreFinder – Multiple Vulnerabilities

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

Moodle 4.3 – Insecure Direct Object Reference

# Exploit Title: Moodle 4.3 'id' Insecure Direct Object Reference (IDOR)

Zoo Management System 1.0 – Unauthenticated RCE

# Exploit Title: Zoo Management System 1.0 - Unauthenticated RCE

dawa-pharma 1.0-2022 – Multiple-SQLi

## Title: dawa-pharma-1.0-2022 Multiple-SQLi

Online Shopping System Advanced – Sql Injection

# Exploit Title: Online Shopping System Advanced

taskhub 2.8.7 – SQL Injection

# Exploit Title: taskhub 2.8.7 - SQL Injection

comments-like-dislike < 1.2.0 - Authenticated (Subscriber+) Plugin Setting Reset

# Exploit Title: POC-CVE-2023-3244

WEBIGniter v28.7.23 – Stored Cross Site Scripting (XSS)

# Exploit Title: WEBIGniter v28.7.23 Stored Cross Site Scripting (XSS)

JFrog Artifactory < 7.25.4 - Blind SQL Injection

# Exploit Title: artifactory low-privileged blind sql injection

Wondercms 4.3.2 – XSS to RCE

# Author: prodigiousMind

SureMDM On-premise < 6.31 - CAPTCHA Bypass User Enumeration

# Exploit Title: SureMDM On-premise < 6.31 - CAPTCHA Bypass User Enumeration

Employee Management System v1 – ’email’ SQL Injection

# Exploit Title: Employee Management System v1 - 'email' SQL Injection

phpFox < 4.8.13 - (redirect) PHP Object Injection Exploit