webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Cobbler 2.8.0 – (Authenticated) Remote Code Execution

#!/usr/bin/python

2017-03-16 Dolev Farhi webapps

WordPress Plugin Membership Simplified 1.58 – Arbitrary File Download

import requests

2017-03-16 The Martian webapps

GitHub Enterprise < 2.8.7 - Remote Code Execution

#!/usr/bin/python

2017-03-15 orange webapps

Sitecore CMS 8.1 Update-3 – Cross-Site Scripting

# Exploit Title: Stored Cross Site Scripting (XSS) in Sitecore Experience Platform 8.1 Update-3

2017-03-15 Pralhad Chaskar webapps

GitHub Enterprise 2.8.0 < 2.8.6 - Remote Code Execution

#!/usr/bin/ruby

2017-03-15 iblue webapps

Joomla! Component Vik Rent Car 1.11 – SQL Injection

# # # # #

2017-03-15 Ihsan Sencan webapps

Joomla! Component Vik Rent Items 1.3 – SQL Injection

# # # # #

2017-03-15 Ihsan Sencan webapps

Joomla! Component Vik Appointments 1.5 – SQL Injection

# # # # #

2017-03-15 Ihsan Sencan webapps

Joomla! Component Advertisement Board 3.0.4 – ‘id’ SQL Injection

# # # # #

2017-03-14 Ihsan Sencan webapps

Joomla! Component Simple Membership 3.3.3 – ‘userId’ SQL Injection

# # # # #

2017-03-14 Ihsan Sencan webapps

Steam Profile Integration 2.0.11 – SQL injection

# Exploit Title: IPS Community Suite - Steam Profile Integration 2.0.11 and below SQL injection

2017-03-13 DrWhat webapps

Car Workshop System – SQL Injection

# # # # #

2017-03-13 Ihsan Sencan webapps

Fiyo CMS 2.0.6.1 – Privilege Escalation

# Exploit Title: Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter

2017-03-11 rungga_reksya webapps

Mirage – SQL Injection

# # # # #

2017-03-11 Ihsan Sencan webapps

PHP Forum Script 3.0 – SQL Injection

# # # # #

2017-03-11 Ihsan Sencan webapps

Yellow Pages Script 3.2 – ‘category_id’ SQL Injection

# # # # #

2017-03-11 Ihsan Sencan webapps

Yacht Listing Script 2.0 – SQL Injection

# # # # #

2017-03-11 Ihsan Sencan webapps

Travel Tours Script 2.0 – SQL Injection

# # # # #

2017-03-11 Ihsan Sencan webapps

Property Listing Script 3.1 – SQL Injection

# # # # #

2017-03-11 Ihsan Sencan webapps

Pet Listing Script 3.0 – SQL Injection

# # # # #

2017-03-11 Ihsan Sencan webapps

Vanelo – SQL Injection

# # # # #

2017-03-11 Ihsan Sencan webapps

Global In – Arbitrary File Upload

# # # # #

2017-03-11 Ihsan Sencan webapps

Global In – SQL Injection

# # # # #

2017-03-11 Ihsan Sencan webapps

Domain Marketplace Script – SQL Injection

# # # # #

2017-03-11 Ihsan Sencan webapps

WatchGuard XTMv 11.12 Build 516911 – User Management Cross-Site Request Forgery

2017-03-10 KoreLogic webapps

dnaLIMS DNA Sequencing – Directory Traversal / Session Hijacking / Cross-Site Scripting

Title: Multiple vulnerabilities discovered in dnaLIMS DNA sequencing

2017-03-10 Shorebreak Security webapps

Kinsey Infor/Lawson / ESBUS – SQL Injection

##################################################################

2017-03-10 Michael Benich webapps

FTP Voyager Scheduler 16.2.0 – Cross-Site Request Forgery

2) Persistent Denial Of Service uses call to WMIC

2017-03-10 hyp3rlinx webapps

e107 < 2.1.4 - 'keyword' Blind SQL Injection

#!/usr/bin/perl

2017-03-09 StAkeR webapps