X-Cart < 4.1.3 - Arbitrary Variable Overwrite
X-Cart Arbitrary Variable Overwrite
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Honeywell IP-Camera HICC-1100PT – Credentials Disclosure
1. Advisory Information
SIEMENS IP-Camera CVMS2025-IR / CCMS2025 – Credentials Disclosure
1. Advisory Information
Pi-Hole Web Interface 2.8.1 – Persistent Cross-Site Scripting in Whitelist/Blacklist
# Exploit Title: Pi-Hole Web Interface Stored XSS in White/Black list file
Lepton CMS 2.2.0/2.2.1 – PHP Code Injection
[+] Credits: John Page (HYP3RLINX)
Lepton CMS 2.2.0/2.2.1 – Directory Traversal
[+] Credits: John Page (HYP3RLINX)
WSO2 Carbon 4.4.5 – Denial of Service / Cross-Site Request Forgery
[+] Credits: John Page aka HYP3RLINX
WSO2 Carbon 4.4.5 – Persistent Cross-Site Scripting
[+] Credits: John Page aka HYP3RLINX
WSO2 Carbon 4.4.5 – Local File Inclusion
[+] Credits: John Page aka HYP3RLINX
WSO2 Identity Server 5.1.0 – Multiple Vulnerabilities
[+] Credits: John Page aka HYP3RLINX
Zabbix 2.2.x/3.0.x – SQL Injection
==========================================
GitLab – ‘impersonate’ Feature Privilege Escalation
# Exploit Title: GitLab privilege escalation via "impersonate" feature
Claroline < 1.7.7 - Arbitrary File Inclusion
Claroline Arbitrary File Inclusion
SquirrelMail < 1.4.7 - Arbitrary Variable Overwrite
SquirrelMail Arbitrary Variable Overwrite
ColoradoFTP 1.3 Prime Edition (Build 8) – Directory Traversal
###################################################
WebNMS Framework Server 5.2/5.2 SP1 – Multiple Vulnerabilities
>> Multiple vulnerabilities in WebNMS Framework Server 5.2 and 5.2 SP1
EyeLock nano NXT 3.5 – Remote Code Execution
#!/usr/bin/env python
EyeLock nano NXT 3.5 – Local File Disclosure
EyeLock nano NXT 3.5 Local File Disclosure Vulnerability
Nagios Network Analyzer 2.2.1 – Multiple Cross-Site Request Forgery Vulnerabilities
[+] Credits: John Page ( hyp3rlinx )
Xfinity Gateway (Technicolor DPC3941T) – Cross-Site Request Forgery
# Exploit Title: CSRF XFINITY Gateway product Technicolor(previously Cisco) DPC3941T
WordPress Plugin Add From Server < 3.3.2 - Cross-Site Request Forgery (Arbitrary File Upload)
Cross-Site Request Forgery vulnerability in Add From Server WordPress Plugin
PHPCollab CMS 2.5 – ’emailusers.php’ SQL Injection
Document Title:
Navis Webaccess – SQL Injection
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
NUUO NVRmini 2 3.0.8 – ‘strong_user.php’ Backdoor Remote Shell Access
NUUO Backdoor (strong_user.php) Remote Shell Access
NUUO NVRmini 2 3.0.8 – Arbitrary File Deletion
NUUO Arbitrary File Deletion Vulnerability
NUUO NVRmini 2 3.0.8 – Remote Command Injection (Shellshock)
NUUO NVRmini 2 NE-4160 ShellShock Remote Code Execution
NUUO NVRmini 2 3.0.8 – Multiple OS Command Injections
NUUO Multiple OS Command Injection Vulnerabilities
NUUO NVRmini 2 3.0.8 – Local File Disclosure
NUUO Local File Disclosure Vulnerability
NUUO NVRmini 2 3.0.8 – Remote Code Execution
#!/usr/bin/env python
NASdeluxe NDL-2400r 2.01.09 – OS Command Injection
-----BEGIN PGP SIGNED MESSAGE-----
WordPress Plugin Count Per Day 3.5.4 – Persistent Cross-Site Scripting
Stored Cross-Site Scripting vulnerability in Count per Day WordPress Plugin
Davolink DV-2051 – Multiple Vulnerabilities
===================================================================
PHP Power Browse 1.2 – Directory Traversal
# Exploit Title: PHP Power Browse v1.2 - Path Traversal
Subrion CMS 4.0.5 – SQL Injection
Document Title:
ntop-ng 2.5.160805 – Username Enumeration
# Exploit title: ntopng user enumeration
Open Upload 0.4.2 – Cross-Site Request Forgery (Add Admin)
================================================================================================================
WordPress Plugin ALO EasyMail NewsLetter 2.9.2 – Cross-Site Request Forgery (Add/Import Arbitrary Subscribers)
Cross-Site Request Forgery in ALO EasyMail Newsletter WordPress Plugin
WordPress Plugin WP Live Chat Support 6.2.03 – Persistent Cross-Site Scripting
Stored Cross-Site Scripting vulnerability in WP Live Chat Support WordPress Plugin
WordPress Plugin Booking Calendar 6.2 – SQL Injection
SQL injection vulnerability in Booking Calendar WordPress Plugin
phpMyAdmin 4.6.2 – (Authenticated) Remote Code Execution
#!/usr/bin/env python
WordPress Plugin Ultimate Product Catalog 3.9.8 – do_shortcode via ajax Blind SQL Injection
# Exploit Title: Wordpress Ultimate-Product-Catalog get_results("SELECT * FROM $catalogue_items_table_name WHERE Cata...
AXIS (Multiple Products) – ‘devtools ‘ (Authenticated) Remote Command Execution
_ _ _ _ _ _ _ _ _ _
Iris ID IrisAccess ICU 7000-2 – Remote Command Execution
Iris ID IrisAccess ICU 7000-2 Remote Root Command Execution