webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Apple WebKit 10.0.2 (12602.3.12.0.1) – ‘disconnectSubframes’ Universal Cross-Site Scripting

var d = document.body.appendChild(document.createElement("div"));

2017-04-04 Google Security Research webapps

Apple Webkit – Universal Cross-Site Scripting by Accessing a Named Property from an Unloaded Window

"use strict";

2017-04-04 Google Security Research webapps

Apple Webkit – ‘JSCallbackData’ Universal Cross-Site Scripting

"use strict";

2017-04-04 Google Security Research webapps

Apple WebKit 10.0.2(12602.3.12.0.1) – ‘Frame::setDocument (1)’ Universal Cross-Site Scripting

"use strict";

2017-04-04 Google Security Research webapps

Maian Greetings 2.1 – ‘cat’ SQL Injection

# # # # #

2017-04-04 Ihsan Sencan webapps

Maian Survey 1.1 – ‘survey’ SQL Injection

# # # # #

2017-04-04 Ihsan Sencan webapps

Maian Uploader 4.0 – ‘user’ SQL Injection

# # # # #

2017-04-04 Ihsan Sencan webapps

GeoMoose < 2.9.2 - Directory Traversal

# Exploit Title: GeoMoose

2017-04-03 Sander Ferdinand webapps

Pixie 1.0.4 – Arbitrary File Upload

# Exploit Title: File Extension Filter Bypass in File Manager Pixie 1.0.4 With Low Privilege # Google Dork: no

2017-04-02 rungga_reksya webapps

Zyxel, EMG2926 < V1.00(AAQT.4)b8 - OS Command Injection

# Exploit Title: Zyxel, EMG2926 < V1.00(AAQT.4)b8 - OS Command Injection

2017-04-02 trevor Hough webapps

Membership Formula – ‘order’ SQL Injection

# # # # #

2017-03-31 Ihsan Sencan webapps

Splunk Enterprise – Information Disclosure

[+] Credits: John Page AKA hyp3rlinx

2017-03-31 hyp3rlinx webapps

EyesOfNetwork (EON) 5.1 – SQL Injection

# Exploit Title: EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root

2017-03-29 Dany Bach webapps

Opensource Classified Ads Script – ‘keyword’ SQL Injection

# # # # #

2017-03-29 Ihsan Sencan webapps

inoERP 0.6.1 – Cross-Site Scripting / Cross-Site Request Forgery / SQL Injection / Session Fixation

=== FOXMOLE - Security Advisory 2017-01-25 ===

2017-03-27 Tim Herres webapps

Nuxeo 6.0/7.1/7.2/7.3 – Remote Code Execution (Metasploit)

=begin

2017-03-27 Sysdream webapps

EyesOfNetwork (EON) 5.0 – SQL Injection

# [CVE-2017-6088] EON 5.0 Multiple SQL Injection

2017-03-27 Sysdream webapps

EyesOfNetwork (EON) 5.0 – Remote Code Execution

# [CVE-2017-6087] EON 5.0 Remote Code Execution

2017-03-27 Sysdream webapps

CouponPHP CMS 3.1 – ‘code’ SQL Injection

# # # # #

2017-03-27 Ihsan Sencan webapps

Professional Bus Booking Script – ‘hid_Busid’ SQL Injection

# # # # #

2017-03-27 Ihsan Sencan webapps

D-Link DCS-936L Network Camera – Cross-Site Request Forgery

# Exploit Title: [D-Link DCS-936L network camera incomplete/weak CSRF protection vulnerability]

2017-03-26 SlidingWindow webapps