webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

FLIR Thermal Camera PT-Series (PT-334 200562) – Root Remote Code Execution

#!/bin/bash

2017-09-25 LiquidWorm webapps

HBGK DVR 3.0.0 build20161206 – Authentication Bypass

# Exploit Title: HBGK DVR V3.0.0 build20161206 - Authentication Bypass

2017-09-24 RAT - ThiefKing webapps

JitBit HelpDesk < 9.0.2 - Authentication Bypass

# Exploit Title: JitBit HelpDesk

2017-09-22 Kc57 webapps

PHP Auction Ecommerce Script 1.6 – SQL Injection

# Exploit Title: PHP Auction Ecommerce Script v1.6 - SQL Injection

2017-09-22 8bitsec webapps

Secure E-commerce Script 1.02 – ‘sid’ SQL Injection

# Exploit Title: Secure E-commerce Script v1.02 - SQL Injection

2017-09-22 8bitsec webapps

Claydip Airbnb Clone 1.0 – Arbitrary File Upload

# # # # #

2017-09-22 Ihsan Sencan webapps

Cash Back Comparison Script 1.0 – SQL Injection

#!/usr/bin/perl -w

2017-09-22 Ihsan Sencan webapps

Multi Level Marketing – SQL Injection

# # # # #

2017-09-22 Ihsan Sencan webapps

Lending And Borrowing – ‘pid’ SQL Injection

# # # # #

2017-09-22 Ihsan Sencan webapps

Stock Photo Selling 1.0 – SQL Injection

#!/usr/bin/perl -w

2017-09-22 Ihsan Sencan webapps

PHPMyFAQ 2.9.8 – Cross-Site Scripting (1)

# Exploit Title: phpMyFAQ 2.9.8 Stored XSS

2017-09-21 Ishaq Mohammed webapps

Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution (1)

# E-DB Note: https://www.alphabot.com/security/blog/2017/java/Apache-Tomcat-RCE-CVE-2017-12617.html

2017-09-20 xxlegend webapps

DenyAll WAF < 6.3.0 - Remote Code Execution (Metasploit)

##

2017-09-19 Mehmet Ince webapps

Apache < 2.2.34 / < 2.4.27 - OPTIONS Memory Leak

#!/usr/bin/env python3

2017-09-18 Hanno Bock webapps

iBall ADSL2+ Home Router – Authentication Bypass

# Exploit Title: iBall ADSL2+ Home Router Authentication Bypass Vulnerability

2017-09-18 Gem George webapps

DigiAffiliate 1.4 – Cross-Site Request Forgery (Update Admin)

#!/usr/local/bin/python

2017-09-18 Ihsan Sencan webapps

Digileave 1.2 – Cross-Site Request Forgery (Update Admin)

#!/usr/local/bin/python

2017-09-18 Ihsan Sencan webapps

Digirez 3.4 – Cross-Site Request Forgery (Update Admin)

#!/usr/local/bin/python

2017-09-18 Ihsan Sencan webapps

WordPress Plugin Content Timeline – SQL Injection

# Exploit Title: Multiple Blind SQL Injections Wordpress Plugin: Content Timeline

2017-09-16 Jeroen - IT Nerdbox webapps

iTech Gigs Script 1.20 – ‘cat’ SQL Injection

# Exploit Title: iTech Gigs Script v1.20 - SQL Injection

2017-09-15 8bitsec webapps

UTStar WA3002G4 ADSL Broadband Modem – Authentication Bypass

# Exploit Title: UTStar WA3002G4 ADSL Broadband Modem Authentication Bypass Vulnerability

2017-09-15 Gem George webapps

Contact Manager 1.0 – ‘femail’ SQL Injection

# # # # #

2017-09-15 Ihsan Sencan webapps

PTCEvolution 5.50 – SQL Injection

# # # # #

2017-09-15 Ihsan Sencan webapps

Humax Wi-Fi Router HG100R 2.0.6 – Authentication Bypass

# coding: utf-8

2017-09-14 Kivson webapps

Justdial Clone Script – ‘fid’ SQL Injection

# # # # #

2017-09-14 Ihsan Sencan webapps

Theater Management Script – SQL Injection

# # # # #

2017-09-14 Ihsan Sencan webapps

PTC KSV1 Script 1.7 – ‘type’ SQL Injection

# # # # #

2017-09-14 Ihsan Sencan webapps

Adserver Script 5.6 – SQL Injection

# # # # #

2017-09-14 Ihsan Sencan webapps

Enterprise Edition Payment Processor Script 3.7 – SQL Injection

# # # # #

2017-09-14 Ihsan Sencan webapps

Foodspotting Clone 1.0 – SQL Injection

# Exploit Title: Foodspotting Clone v1.0 - SQL Injection/Reflected XSS

2017-09-13 8bitsec webapps

Carel PlantVisor 2.4.4 – Directory Traversal Information Disclosure (Metasploit)

require 'msf/core'

2017-09-13 James Fitts webapps

Carlo Gavazzi Powersoft 2.1.1.1 – Directory Traversal File Disclosure (Metasploit)

require 'msf/core'

2017-09-13 James Fitts webapps

Indusoft Web Studio – Directory Traversal Information Disclosure (Metasploit)

require 'msf/core'

2017-09-13 James Fitts webapps