webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Meme Maker Script 2.1 – ‘user’ SQL Injection

# # # # #

2017-03-01 Ihsan Sencan webapps

Rage Faces Script 1.3 – SQL Injection

# # # # #

2017-03-01 Ihsan Sencan webapps

SchoolDir – SQL Injection

# # # # #

2017-03-01 Ihsan Sencan webapps

WordPress Plugin File Manager 3.0.1 – Cross-Site Request Forgery

POST /wp-admin/admin-ajax.php HTTP/1.1

2017-03-01 David Vaartjes webapps

WordPress Plugin Global Content Blocks 2.1.5 – Cross-Site Request Forgery

2017-03-01 Yorick Koster webapps

WordPress Plugin NewStatPress 1.2.4 – Cross-Site Scripting

Source: https://sumofpwn.nl/advisory/2016/persistent_cross_site_scripting_in_the_wordpress_newstatpress_plugin.html

2017-03-01 Han Sahin webapps

WordPress Plugin Popup by Supsystic 1.7.6 – Cross-Site Request Forgery

2017-03-01 Radjnies Bhansingh webapps

WordPress Plugin User Login Log 2.2.1 – Cross-Site Scripting

Source: https://sumofpwn.nl/advisory/2016/stored_cross_site_scripting_vulnerability_in_user_login_log_wordpress_plugi...

2017-03-01 Axel Koolhaas webapps

WordPress Plugin Contact Form Manager – Cross-Site Request Forgery / Cross-Site Scripting

xyz_cfm_SmtpAuthentication

2017-03-01 Edwin Molenaar webapps

Aruba AirWave 8.2.3 – XML External Entity Injection / Cross-Site Scripting

SEC Consult Vulnerability Lab Security Advisory < 20170301-0 >

2017-03-01 SEC Consult webapps

D-Link DSL-2730U Wireless N 150 – Cross-Site Request Forgery

Author : B GOVIND

2017-03-01 B GOVIND webapps

Sophos Web Appliance 4.3.1.1 – Session Fixation

# Exploit Title: [Sophos Secure Web Appliance Session Fixation Vulnerability]

2017-02-28 SlidingWindow webapps

Netgear DGN2200v1/v2/v3/v4 – Cross-Site Request Forgery

# Exploit Title: NETGEAR Firmware DGN2200v1/v2/v3/v4 CSRF which leads to RCE through CVE-2017-6334

2017-02-28 SivertPL webapps

Joomla! Component OneVote! 1.0 – SQL Injection

# # # # #

2017-02-27 Ihsan Sencan webapps

Joomla! Component JomSocial – SQL Injection

# # # # #

2017-02-25 Ihsan Sencan webapps

Joomla! Component Spinner 360 1.3.0 – SQL Injection

# # # # #

2017-02-25 Ihsan Sencan webapps

Joomla! Component Appointments for JomSocial 3.8.1 – SQL Injection

# # # # #

2017-02-25 Ihsan Sencan webapps

Joomla! Component Gnosis 1.1.2 – ‘id’ SQL Injection

# # # # #

2017-02-25 Ihsan Sencan webapps

Netgear DGN2200v1/v2/v3/v4 – ‘dnslookup.cgi’ Remote Command Execution

#!/usr/bin/python

2017-02-25 SivertPL webapps

Joomla! Component Intranet Attendance Track 2.6.5 – SQL Injection

# # # # #

2017-02-25 Ihsan Sencan webapps

Joomla! Component My MSG 3.2.1 – SQL Injection

# # # # #

2017-02-25 Ihsan Sencan webapps

memcache-viewer – Cross-Site Scripting

# Exploit Title: memcache-viewer - Stored XSS

2017-02-24 HaHwul webapps

Apple WebKit 10.0.2 – ‘Frame::setDocument’ Universal Cross-Site Scripting

"use strict";

2017-02-24 Google Security Research webapps