WordPress Plugin WP-Client 3.8.7 – Persistent Cross-Site Scripting
#####################################################################################
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
vBulletin 5.x – Remote Code Execution
#[+] Title: Vbulletin 5.x - Remote Code Execution Exploit
Cambium ePMP 1000 – Multiple Vulnerabilities
timeline. Ceases communication.
ZTE ZXHN H108N R1A / ZXV10 W300 Routers – Multiple Vulnerabilities
# Exploit Title: [ZTE ZXHN H108N R1A + ZXV10 W300 routers - multiple
ZTE ADSL ZXV10 W300 Modems – Multiple Vulnerabilities
# Exploit Title: [ZTE ADSL ZXV10 W300 modems - Multiple vulnerabilities]
Horde Groupware 5.2.10 – Cross-Site Request Forgery
Advisory ID: HTB23272
Netwin SurgeFTP Sever 23d6 – Persistent Cross-Site Scripting
# Exploit Netwin SurgeFTP Sever Stored Cross Site Scripting Vulnerabilities
ClipperCMS 1.3.0 – Multiple SQL Injections
Security Advisory - Curesec Research Team
AlegroCart 1.2.8 – Local/Remote File Inclusion
Security Advisory - Curesec Research Team
AlegroCart 1.2.8 – Multiple SQL Injections
Security Advisory - Curesec Research Team
D-Link DIR-816L Wireless Router – Cross-Site Request Forgery
----------------------------------------------------------------------------------------------
VideoLAN VLC Media Player Web Interface 2.2.1 – Metadata Title Cross-Site Scripting
##################################
CF Image Host 1.65 – PHP Command Injection
[+] Credits: hyp3rlinx
b374k 3.2.3/2.8 (Web Shell) – Cross-Site Request Forgery / Command Injection
[+] Credits: hyp3rlinx
R-Scripts Vacation Rental Script 7R – Multiple Vulnerabilities
R-Scripts VRS 7R Multiple Stored XSS And CSRF Vulnerabilities
WordPress Plugin WP Fastest Cache 0.8.4.8 – Blind SQL Injection
# Exploit Title: WP Fastest Cache 0.8.4.8 Blind SQL Injection
YesWiki 0.2 – ‘template’ Directory Traversal
# Exploit Title: YESWIKI 0.2 - Path Traversal (template param)
Jenkins 1.633 – Credential Recovery
# Exploit Title: Jenkins Unauthenticated Credential Recovery
TestLink 1.9.14 – Cross-Site Request Forgery
Information
Arris TG1682G Modem – Persistent Cross-Site Scripting
Unauth Stored CSRF/XSS - Xfinity Modem
Google AdWords 6.2.0 API client libraries – XML eXternal Entity Injection
# Date: 06.11.2015
eBay Magento CE 1.9.2.1 – Unrestricted Cron Script (Code Execution / Denial of Service)
# Exploit Title: eBay Magento CE
Google AdWords API PHP client library 6.2.0 – Arbitrary PHP Code Execution
# Date: 06.11.2015
WordPress Plugin My Calendar 2.4.10 – Multiple Vulnerabilities
Exploit TItle: My Calendar 2.4.10 CSRF and XSS
NXFilter 3.0.3 – Multiple Cross-Site Scripting Vulnerabilities
[+] Credits: hyp3rlinx
NXFilter 3.0.3 – Cross-Site Request Forgery
[+] Credits: hyp3rlinx
JSSE – SKIP-TLS
#!/usr/bin/env ruby
OpenSSL – Alternative Chains Certificate Forgery
#!/usr/bin/env ruby
vBulletin 5.1.x – Remote Code Execution
# Exploit Title: Vbulletin 5.1.X unserialize 0day preauth RCE exploit
actiTIME 2015.2 – Multiple Vulnerabilities
actiTIME 2015.2 Multiple Vulnerabilities
Oxwall 1.7.4 – Cross-Site Request Forgery
Advisory ID: HTB23266
Pligg CMS 2.0.2 – Cross-Site Request Forgery / Code Execution
Security Advisory - Curesec Research Team
Pligg CMS 2.0.2 – Directory Traversal
Security Advisory - Curesec Research Team
Pligg CMS 2.0.2 – Multiple SQL Injections
Security Advisory - Curesec Research Team
Hitron Router CGN3ACSMR 4.5.8.16 – Arbitrary Code Execution
# Exploit title: Hitron Router (CGN3ACSMR) - Remote Code Execution
eBay Magento 1.9.2.1 – PHP FPM XML eXternal Entity Injection
=============================================
PHP Server Monitor 3.1.1 – Multiple Cross-Site Request Forgery Vulnerabilities
[+] Credits: hyp3rlinx
Joomla! Component com_jnews 8.5.1 – SQL Injection
# Description of the component:
Sagem FAST3304-V2 – Authentication Bypass (2)
================================================================================
JIRA and HipChat for JIRA Plugin – Velocity Template Injection
############################################################################
Joomla! Component Realtyna RPL 8.9.2 – Persistent Cross-Site Scripting / Cross-Site Request Forgery
Realtyna RPL 8.9.2 Joomla Extension Persistent XSS And CSRF Vulnerabilities
Joomla! Component Realtyna RPL 8.9.2 – Multiple SQL Injections
Realtyna RPL 8.9.2 Joomla Extension Multiple SQL Injection Vulnerabilities
Subrion 3.x – Multiple Vulnerabilities
{-} Title => Subrion 3.X.X - Multiple Exploits
Beckhoff CX9020 CPU Module – Remote Code Execution
#!/usr/bin/env python
RealtyScript 4.0.2 – Multiple Blind SQL Injections
RealtyScript v4.0.2 Multiple Time-based Blind SQL Injection Vulnerabilities
RealtyScript 4.0.2 – Multiple Cross-Site Request Forgery / Persistent Cross-Site Scripting Vulnerabilities
RealtyScript v4.0.2 Multiple CSRF And Persistent XSS Vulnerabilities