webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

WPN-XM Serverstack 0.8.6 – Cross-Site Request Forgery

[+] Credits: hyp3rlinx

2016-04-11 hyp3rlinx webapps

Hikvision Digital Video Recorder – Cross-Site Request Forgery

2016-04-11 LiquidWorm webapps

op5 7.1.9 – Remote Command Execution

[+] Credits: hyp3rlinx

2016-04-08 hyp3rlinx webapps

PLANET Technology IP Surveillance Cameras – Multiple Vulnerabilities

_ _ _ _

2016-04-07 Orwelllabs webapps

SocialEngine 4.8.9 – SQL Injection

Advisory ID: HTB23286

2016-04-06 High-Tech Bridge SA webapps

Asbru Web Content Management System 9.2.7 – Multiple Vulnerabilities

Asbru Web Content Management System v9.2.7 Multiple Vulnerabilities

2016-04-06 LiquidWorm webapps

ManageEngine Password Manager Pro 8102 to 8302 – Multiple Vulnerabilities

[Systems Affected]

2016-04-05 S3ba webapps

PQI Air Pen Express 6W51-0000R2/6W51-0000R2XXX – Multiple Vulnerabilities

_ _ _ _

2016-04-04 Orwelllabs webapps

WordPress Plugin Advanced Video 1.0 – Local File Inclusion

#!/usr/bin/env python

2016-04-01 evait security GmbH webapps

Apache OpenMeetings 1.9.x < 3.1.0 - '.ZIP' File Directory Traversal

Severity: Moderate

2016-03-31 Andreas Lindh webapps

MOBOTIX Video Security Cameras – Cross-Site Request Forgery (Add Admin)

Add admin user Testingus:

2016-03-31 LiquidWorm webapps

CubeCart 6.0.10 – Multiple Vulnerabilities

Advisory ID: HTB23298

2016-03-30 High-Tech Bridge SA webapps

Liferay Portal 5.1.2 – Persistent Cross-Site Scripting

#Exploit Title: Liferay Portal 5.1.2 - Persistent XSS

2016-03-28 Sarim Kiani webapps

WordPress Plugin Photocart Link 1.6 – Local File Inclusion

# Exploit Title: Wordpress Plugin Photocart Link - Local File Inclusion

2016-03-27 CrashBandicot webapps

Trend Micro Deep Discovery Inspector 3.8/3.7 – Cross-Site Request Forgery

[+] Credits: John Page aka hyp3rlinx

2016-03-27 hyp3rlinx webapps

WordPress Plugin IMDb Profile Widget 1.0.8 – Local File Inclusion

# Exploit Title: Wordpress Plugin IMDb Profile Widget - Local File Inclusion

2016-03-27 CrashBandicot webapps

MiCollab 7.0 – SQL Injection

================

2016-03-23 Goran Tuzovic webapps

WordPress Plugin Memphis Document Library 3.1.5 – Arbitrary File Download

# Exploit Title: Arbitrary file download in Memphis Document Library 3.1.5

2016-03-22 Felipe Molina webapps

WordPress Plugin Dharma Booking 2.38.3 – Remote File Inclusion

# Exploit Title: Wordpress Dharma booking File Inclusion

2016-03-22 AMAR^SHG webapps

WordPress Plugin Brandfolder 3.0 – Local/Remote File Inclusion

# Exploit Title: Wordpress brandfolder plugin / RFI & LFI

2016-03-22 AMAR^SHG webapps

Joomla! Component Easy Youtube Gallery 1.0.2 – SQL Injection

######################

2016-03-22 Persian Hack Team webapps

WordPress Plugin HB Audio Gallery Lite 1.0.0 – Arbitrary File Download

# Exploit Title: Wordpress Plugin HB Audio Gallery Lite - Arbitrary File Download

2016-03-22 CrashBandicot webapps

ProjectSend r582 – Multiple Cross-Site Scripting Vulnerabilities

Description

2016-03-21 Michael Helwig webapps

iTop 2.2.1 – Cross-Site Request Forgery

Advisory ID: HTB23293

2016-03-21 High-Tech Bridge SA webapps

Dating Pro Genie 2015.7 – Cross-Site Request Forgery

Advisory ID: HTB23294

2016-03-21 High-Tech Bridge SA webapps

WordPress Plugin Image Export 1.1.0 – Arbitrary File Disclosure

# Exploit Title: Wordpress image-export LFD

2016-03-21 AMAR^SHG webapps

XOOPS 2.5.7.2 – Directory Traversal Bypass

[+] Credits: John Page aka hyp3rlinx

2016-03-21 hyp3rlinx webapps

Xoops 2.5.7.2 – Cross-Site Request Forgery (Arbitrary User Deletions)

2016-03-21 hyp3rlinx webapps

D-Link DWR-932 Firmware 4.00 – Authentication Bypass

D-Link DWR-932 Firmware

2016-03-21 Saeed reza Zamanian webapps

Disc ORGanizer (DORG) – Multiple Vulnerabilities

Exploit Title: DORG - Disc Organization System SQL Injection And Cross Site Scripting

2016-03-21 SECUPENT webapps

WordPress Plugin Abtest – Local File Inclusion

# Exploit Title: Wordpress Plugin Abtest - Local File Inclusion

2016-03-21 CrashBandicot webapps

WordPress Plugin Import CSV 1.0 – Directory Traversal

# Exploit Title: Wordpress Import CSV | Directory Traversal

2016-03-21 Wadeek webapps

WordPress Plugin eBook Download 1.1 – Directory Traversal

# Exploit Title: Wordpress eBook Download 1.1 | Directory Traversal

2016-03-21 Wadeek webapps

Wildfly – ‘WEB-INF’ / ‘META-INF’ Information Disclosure via Filter Restriction Bypass

Exploit Title: Wildfly: WEB-INF and META-INF Information Disclosure via Filter Restriction Bypass

2016-03-20 Tal Solomon of Palantir Security webapps

PivotX 2.3.11 – Directory Traversal

Security Advisory - Curesec Research Team

2016-03-17 Curesec Research Team webapps

ZenPhoto 1.4.11 – Remote File Inclusion

Security Advisory - Curesec Research Team

2016-03-17 Curesec Research Team webapps

Monstra CMS 3.0.3 – Multiple Vulnerabilities

Exploit Title: Monstra CMS 3.0.3 - Privilege Escalation / Remote Password Change

2016-03-16 Sarim Kiani webapps

AKIPS Network Monitor 15.37 through 16.5 – OS Command Injection

# Exploit Title: AKIPS Network Monitor 15.37-16.6 OS Command Injection

2016-03-16 BrianWGray webapps

Kaltura Community Edition < 11.1.0-2 - Multiple Vulnerabilities

( , ) (,

2016-03-15 Security-Assessment.com webapps

TeamPass 2.1.24 – Multiple Vulnerabilities

Affected Product: TeamPass

2016-03-14 Vincent Malguy webapps

WordPress Plugin Site Import 1.0.1 – Local/Remote File Inclusion

# Exploit Title: Wordpress Site Import 1.0.1 | Local and Remote file inclusion

2016-03-14 Wadeek webapps

WordPress Plugin DZS Videogallery < 8.60 - Multiple Vulnerabilities

* Exploit Title: Wordpress DZS Videogallery Plugin - Multiple Vulnerabilities

2016-03-11 Colette Chamberland webapps

WordPress Theme Beauty & Clean 1.0.8 – Arbitrary File Upload

Description

2016-03-11 Colette Chamberland webapps

WordPress Plugin WP Advanced Comment 0.10 – Persistent Cross-Site Scripting

1. Introduction

2016-03-10 Mohammad Khaleghi webapps

WordPress Plugin Best Web Soft Captcha 4.1.5 – Multiple Vulnerabilities

PoC

2016-03-10 Colette Chamberland webapps

WordPress Theme SiteMile Project 2.0.9.5 – Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----

2016-03-09 LSE Leading Security Experts GmbH webapps

Bluethrust Clan Scripts v4 R17 – Multiple Vulnerabilities

2016-03-09 Brandon Murphy webapps

Cerberus Helpdesk (Cerb5) 5 < 6.7 - Password Hash Disclosure

#!/bin/bash

2016-03-07 asdizzle_ webapps

ATutor LMS – ‘/install_modules.php’ Cross-Site Request Forgery / Remote Code Execution

ATutor LMS

2016-03-07 mr_me webapps

PHPLib < 7.4 - SQL Injection

PHPLib SQL Injection

2016-03-05 GulfTech Security webapps