Metabase 0.46.6 – Pre-Auth Remote Code Execution
# Exploit Title: metabase 0.46.6 - Pre-Auth Remote Code Execution
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
SISQUALWFM 7.1.319.103 – Host Header Injection
# Exploit Title: SISQUALWFM 7.1.319.103 Host Header Injection
Lost and Found Information System v1.0 – ( IDOR ) leads to Account Take over
# Exploit Title: Lost and Found Information System v1.0 - idor leads to Account Take over
ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure
# Exploit Title: ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure
Splunk 9.0.4 – Information Disclosure
# Exploit Title: Splunk 9.0.4 - Information Disclosure
Online Nurse Hiring System 1.0 – Time-Based SQL Injection
# Exploit Title: Online Nurse Hiring System 1.0 - 'bookid' Time-Based SQL Injection
Rail Pass Management System 1.0 – Time-Based SQL Injection
# Exploit Title: Rail Pass Management System - 'searchdata' Time-Based SQL Injection
WordPress Seotheme – Remote Code Execution Unauthenticated
# Exploit Title: Wordpress Seotheme - Remote Code Execution Unauthenticated
WordPress Augmented-Reality – Remote Code Execution Unauthenticated
# Exploit Title: Wordpress Augmented-Reality - Remote Code Execution Unauthenticated
Advanced Page Visit Counter 1.0 – Admin+ Stored Cross-Site Scripting (XSS) (Authenticated)
# Exploit Title: Advanced Page Visit Counter 1.0 - Admin+ Stored Cross-Site
WhatsUp Gold 2022 (22.1.0 Build 39) – XSS
# Exploit Title: WhatsUpGold 22.1.0 - Stored Cross-Site Scripting (XSS)
MISP 2.4.171 – Stored XSS
# Exploit Title: MISP 2.4.171 Stored XSS [CVE-2023-37307] (Authenticated)
Clinic’s Patient Management System 1.0 – Unauthenticated RCE
# Exploit Title: Clinic's Patient Management System 1.0 - Unauthenticated RCE
Curfew e-Pass Management System 1.0 – FromDate SQL Injection
# Exploit Title: Curfew e-Pass Management System 1.0 - FromDate SQL
GYM MS – GYM Management System – Cross Site Scripting (Stored)
# Exploit Title: GYM MS - GYM Management System - Cross Site Scripting (Stored)
Juniper-SRX-Firewalls&EX-switches – (PreAuth-RCE) (PoC)
# ***************************************************************************************************
Electrolink FM/DAB/TV Transmitter – Pre-Auth MPFS Image Remote Code Execution
Electrolink FM/DAB/TV Transmitter Pre-Auth MPFS Image Remote Code Execution
Electrolink FM/DAB/TV Transmitter – Remote Authentication Removal
#!/usr/bin/env python
Electrolink FM/DAB/TV Transmitter (Login Cookie) – Authentication Bypass
Electrolink FM/DAB/TV Transmitter (Login Cookie) Authentication Bypass
Electrolink FM/DAB/TV Transmitter (controlloLogin.js) – Credentials Disclosure
Electrolink FM/DAB/TV Transmitter (controlloLogin.js) Credentials Disclosure
Electrolink FM/DAB/TV Transmitter (login.htm/mail.htm) – Credentials Disclosure
Electrolink FM/DAB/TV Transmitter (login.htm/mail.htm) Credentials Disclosure
TP-LINK TL-WR740N – Multiple HTML Injection
# Exploit Title: TP-LINK TL-WR740N - Multiple HTML Injection Vulnerabilities
TP-Link TL-WR740N – UnAuthenticated Directory Transversal
# Exploit Title: TP-Link TL-WR740N UnAuthenticated Directory Transversal
GoAhead Web Server 2.5 – ‘goform/formTest’ Multiple HTML Injection Vulnerabilities
# Exploit Title: GoAhead Web Server 2.5 - 'goform/formTest' Multiple HTML Injection Vulnerabilities
Grocy <=4.0.2 - CSRF
# Exploit Title: Grocy
101 News 1.0 – Multiple-SQLi
## Title: 101 News-1.0 Multiple-SQLi
Academy LMS 6.2 – SQL Injection
# Exploit Title: Academy LMS 6.2 - SQL Injection
PHP Shopping Cart 4.2 – Multiple-SQLi
## Title: PHP Shopping Cart-4.2 Multiple-SQLi
Fundraising Script 1.0 – SQLi
## Title: Fundraising Script-1.0 SQLi
Bank Locker Management System – SQL Injection
# Exploit Title: Bank Locker Management System - SQL Injection
Splunk 9.0.5 – admin account take over
#!/usr/bin/env python3
Shuttle-Booking-Software v1.0 – Multiple-SQLi
## Title: Shuttle-Booking-Software v1.0 - Multiple-SQLi
Limo Booking Software v1.0 – CORS
## Title: Limo Booking Software v1.0 - CORS
Webedition CMS v2.9.8.8 – Blind SSRF
Exploit Title: Webedition CMS v2.9.8.8 - Blind SSRF
BoidCMS v2.0.0 – authenticated file upload vulnerability
#!/usr/bin/python3
Cacti 1.2.24 – Authenticated command injection when using SNMP options
# Exploit Title: Cacti 1.2.24 - Authenticated command injection when using SNMP options
WordPress Sonaar Music Plugin 4.7 – Stored XSS
# Exploit Title: Wordpress Sonaar Music Plugin 4.7 - Stored XSS
Coppermine Gallery 1.6.25 – RCE
Exploit Title: coppermine-gallery 1.6.25 RCE
Media Library Assistant WordPress Plugin – RCE and LFI
# Exploit Title: Media Library Assistant Wordpress Plugin - RCE and LFI
WEBIGniter v28.7.23 File Upload – Remote Code Execution
## Title: WEBIGniter v28.7.23 File Upload - Remote Code Execution
WordPress Plugin Masterstudy LMS – 3.0.17 – Unauthenticated Instructor Account Creation
# Exploit Title: Wordpress Plugin Masterstudy LMS - 3.0.17 - Unauthenticated Instructor Account Creation
Minio 2022-07-29T19-40-48Z – Path traversal
# Exploit Title: Minio 2022-07-29T19-40-48Z - Path traversal
Clcknshop 1.0.0 – SQL Injection
# Exploit Title: Clcknshop 1.0.0 - SQL Injection
Online ID Generator 1.0 – Remote Code Execution (RCE)
## Title: Online ID Generator 1.0 - Remote Code Execution (RCE)
GLPI GZIP(Py3) 9.4.5 – RCE
#!/usr/bin/env python3
Drupal 10.1.2 – web-cache-poisoning-External-service-interaction
## Title: drupal-10.1.2 web-cache-poisoning-External-service-interaction
Axigen < 10.3.3.47, 10.2.3.12 - Reflected XSS
# Exploit Title: Axigen < 10.3.3.47, 10.2.3.12 - Reflected XSS
soosyze 2.0.0 – File Upload
## Title: soosyze 2.0.0 - File Upload
Wp2Fac – OS Command Injection
# Exploit Title: Wp2Fac v1.0 - OS Command Injection
WordPress Plugin Elementor 3.5.5 – Iframe Injection
# Exploit Title: Wordpress Plugin Elementor < 3.5.5 - Iframe Injection