webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Dreambox Plugin BouquetEditor – Cross-Site Scripting

# Exploit Title: Vulnerability XSS - Dreambox

2017-10-12 Thiago Sena webapps

E-Sic Software livre CMS – Cross Site Scripting

# Exploit Title: E-Sic Software livre CMS - Cross Site Scripting#

2017-10-12 Elber Tavares webapps

E-Sic Software livre CMS – ‘f’ SQL Injection

# Exploit Title: E-Sic Software livre CMS - Sql Injection

2017-10-12 Elber Tavares webapps

E-Sic Software livre CMS – ‘cpfcnpj’ SQL Injection

# Exploit Title: E-Sic Software livre CMS - Sql Injection

2017-10-12 Elber Tavares webapps

E-Sic Software livre CMS – Autentication Bypass

# Exploit Title: E-Sic Software livre CMS - Autentication Bypass#

2017-10-12 Elber Tavares webapps

E-Sic Software livre CMS – ‘q’ SQL Injection

# Exploit Title: E-Sic Software livre CMS - Blind SQL Injection

2017-10-12 Guilherme Assmann webapps

OctoberCMS 1.0.425 (Build 425) – Cross-Site Scripting

# Exploit Title: OctoberCMS 1.0.425 (aka Build 425) Stored XSS

2017-10-12 Ishaq Mohammed webapps

Trend Micro Data Loss Prevention Virtual Appliance 5.2 – Path Traversal

# Exploit Title: Trend Micro Data Loss Prevention Virtual Appliance 5.2 Web Path Traversal

2017-10-11 Leonardo Duarte webapps

Trend Micro InterScan Messaging Security (Virtual Appliance) – ‘Proxy.php’ Remote Code Execution (Metasploit)

##

2017-10-11 Mehmet Ince webapps

Trend Micro OfficeScan 11.0/XG (12.0) – Remote Code Execution (Metasploit)

##

2017-10-11 Mehmet Ince webapps

Complain Management System – Hard-Coded Credentials / Blind SQL injection

# Exploit Title : Complain Management System Blind SQL Injection

2017-10-10 havysec webapps

QNAP HelpDesk < 1.1.12 - SQL Injection

## Vulnerability Summary

2017-10-09 SecuriTeam webapps

PHP Melody 2.7.3 – Multiple Vulnerabilities

## Vulnerabilities Summary

2017-10-09 SecuriTeam webapps

ClipShare 7.0 – SQL Injection

# Exploit Title: ClipShare v7.0 - SQL Injection

2017-10-09 8bitsec webapps

Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution (2)

#!/usr/bin/python

2017-10-09 intx0x80 webapps

ClipBucket 2.8.3 – Remote Code Execution

# Exploit Title: ClipBucket PHP Script Remote Code Execution (RCE)

2017-10-04 Meisam Monsef webapps

EPESI 1.8.2 rev20170830 – Cross-Site Scripting

# Exploit Title: Multiple Stored XSS in EPESI

2017-10-03 Zeeshan Shaikh webapps

Fiberhome AN5506-04-F – Command Injection

# Exploit Title: Fiberhome an5506-04-f – -PING- COMMAND INJECTION

2017-10-03 Tauco webapps

OpenText Document Sciences xPression 4.5SP1 Patch 13 – ‘documentId’ SQL Injection

Title: OpenText Document Sciences xPression (formerly EMC Document

2017-10-02 Marcin Woloszyn webapps

OpenText Document Sciences xPression 4.5SP1 Patch 13 – ‘jobRunId’ SQL Injection

Title: OpenText Document Sciences xPression (formerly EMC Document

2017-10-02 Marcin Woloszyn webapps

phpCollab 2.5.1 – SQL Injection

# [CVE-2017-6089] PhpCollab 2.5.1 Multiple SQL Injections (unauthenticated)

2017-10-02 Sysdream webapps

phpCollab 2.5.1 – Arbitrary File Upload

# [CVE-2017-6090] PhpCollab 2.5.1 Arbitrary File Upload (unauthenticated)

2017-10-02 Sysdream webapps

NPM-V (Network Power Manager) 2.4.1 – Password Reset

NPM-V(Network Power Manager)

2017-10-02 Saeed reza Zamanian webapps

ConverTo Video Downloader & Converter 1.4.1 – Arbitrary File Download

# # # # #

2017-09-29 Ihsan Sencan webapps

WordPress Plugin WPHRM – SQL Injection

# # # # #

2017-09-29 Ihsan Sencan webapps

FileRun < 2017.09.18 - SQL Injection

#!/usr/bin/env python

2017-09-29 SPARC webapps

Real Estate MLM plan script 1.0 – ‘srch’ SQL Injection

# Exploit Title: Real Estate MLM plan script v1.0 - 'srch' Parameter SQL Injection

2017-09-28 8bitsec webapps

PHP Multi Vendor Script 1.02 – ‘sid’ SQL Injection

# Exploit Title: PHP Multi Vendor Script v1.02 - 'sid' Parameter SQL Injection

2017-09-28 8bitsec webapps

Easy Blog PHP Script 1.3a – ‘id’ SQL Injection

# Exploit Title: Easy Blog PHP Script v1.3a - SQL Injection

2017-09-28 8bitsec webapps

Roteador Wireless Intelbras WRN150 – Autentication Bypass

# Exploit Title: Autentication Bypass/Config file download - INTELBRAS WRN

2017-09-28 Elber Tavares webapps

Trend Micro OfficeScan 11.0/XG (12.0) – ‘Host’ Header Injection

[+] Credits: John Page (aka hyp3rlinx)

2017-09-28 hyp3rlinx webapps

Trend Micro OfficeScan 11.0/XG (12.0) – Server Side Request Forgery

[+] Credits: John Page (aka hyp3rlinx)

2017-09-28 hyp3rlinx webapps

Trend Micro OfficeScan 11.0/XG (12.0) – Information Disclosure

[+] Credits: John Page (aka hyp3rlinx)

2017-09-28 hyp3rlinx webapps

Trend Micro OfficeScan 11.0/XG (12.0) – Code Execution / Memory Corruption

[+] Credits: John Page (aka hyp3rlinx)

2017-09-28 hyp3rlinx webapps

Trend Micro OfficeScan 11.0/XG (12.0) – Private Key Disclosure

[+] Credits: John Page (aka hyp3rlinx)

2017-09-28 hyp3rlinx webapps

Netgear ReadyNAS Surveillance 1.4.3-16 – Remote Command Execution

# Exploit Netgear ReadyNAS Surveillance 1.4.3-16 Unauthenticated RCE

2017-09-27 Kacper Szurek webapps

SmarterStats 11.3.6347 – Cross-Site Scripting

----------------------------

2017-09-27 sqlhacker webapps