Xceedium Xsuite – Multiple Vulnerabilities
See also: http://www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WordPress Plugin Count Per Day 3.4 – SQL Injection
Advisory ID: HTB23267
WordPress Plugin Unite Gallery Lite 1.4.6 – Multiple Vulnerabilities
# Title: Cross-Site Request Forgery & SQL Injection Vulnerabilities in Unite Gallery Lite Wordpress Plugin v1.4.6
Hawkeye-G 3.0.1.4912 – Persistent Cross-Site Scripting / Information Leakage
# Exploit Title: Persistent XSS, Information Leakage IDS / IPS
Hawkeye-G 3.0.1.4912 – Cross-Site Request Forgery
# Exploit Title: CSRF, Network Threat Appliance IDS / IPS
XPCOM – Race Condition
XPCOM Race Condition
AirDroid iOS / Android / Win 3.1.3 – Persistent
Document Title:
phpVibe < 4.20 - Persistent Cross-Site Scripting
# phpVibe < 4.20 Stored XSS
8 TOTOLINK Router Models – Backdoor Access / Remote Code Execution
## Advisory Information
4 TOTOLINK Router Models – Backdoor Credentials
## Advisory Information
4 TOTOLINK Router Models – Cross-Site Request Forgery / Cross-Site Scripting
## Advisory Information
15 TOTOLINK Router Models – Multiple Remote Code Execution Vulnerabilities
## Advisory Information
WordPress Plugin Download Manager Free 2.7.94 & Pro 4 – (Authenticated) Persistent Cross-Site Scripting
# WordPress Download Manager Free 2.7.94 & Pro 4 Authenticated Stored XSS
Kaseya Virtual System Administrator (VSA) – Multiple Vulnerabilities (1)
>> Multiple vulnerabilities in Kaseya Virtual System Administrator
Joomla! Component com_docman – Multiple Vulnerabilities
# Joomla docman Component 'com_docman' Full Path Disclosure(FPD) & Local File Disclosure/Include(LFD/LFI)
SquirrelMail < 1.4.5-RC1 - Arbitrary Variable Overwrite
SquirrelMail Arbitrary Variable Overwrite
sysPass 1.0.9 – SQL Injection
-----BEGIN PGP SIGNED MESSAGE-----
Pimcore CMS Build 3450 – Directory Traversal
Vulnerability title: Directory Traversal/Configuration Update In Pimcore CMS
SO Planning 1.32 – Multiple Vulnerabilities
SOPlanning - Simple Online Planning Tool multiple vulnerabilities
WordPress Plugin CP Contact Form with Paypal 1.1.5 – Multiple Vulnerabilities
# Title: Cross-Site Request Forgery, Cross-Site Scripting and SQL Injection
ZenPhoto 1.4.8 – Multiple Vulnerabilities
Vulnerability: SQL Injection, Reflected XSS, Path Traversal
WordPress Plugin Swim Team 1.44.10777 – Arbitrary File Download
Title: Remote file download vulnerability in Wordpress Plugin wp-swimteam v1.44.10777
ArticleFR 3.0.6 – Multiple Vulnerabilities
ArticleFR 3.0.6 CSRF Add Admin Exploit
phpVibe – Arbitrary File Disclosure
## In The Name Of ALLAH ##
Arab Portal 3 – SQL Injection
## In The Name Of ALLAH ##
FreiChat 9.6 – SQL Injection
# Exploit Title: FreiChat 9.6 SQL Injection
phpSQLiteCMS – Multiple Vulnerabilities
# Exploit Title: CSRF, Unrestricted File Upload, Privilege escalation & XSS
WordPress Plugin CP Multi View Event Calendar 1.1.7 – SQL Injection
# Exploit Title: WordPress cp-multi-view-calendar.1.1.7 [Unauthenticated SQL injection vulnerabilities]
WordPress Plugin CP Image Store with Slideshow 1.0.5 – Arbitrary File Download
# Exploit Title: WordPress CP Image Store with Slideshow 1.0.5 [Arbitrary file download vulnerability]
WordPress Plugin Easy2Map 1.24 – SQL Injection
Title: SQL Injection in easy2map wordpress plugin v1.24
Orchard CMS 1.7.3/1.8.2/1.9.0 – Persistent Cross-Site Scripting
-----------------
AirLive (Multiple Products) – OS Command Injection
1. Advisory Information
Grandstream GXV3275 < 1.0.3.30 - Multiple Vulnerabilities
The Grandstream GXV3275 is an Android-based VoIP phone. Several
WordPress Plugin WP E-Commerce Shop Styling 2.5 – Arbitrary File Download
Title: Remote file download vulnerability in wordpress plugin wp-ecommerce-shop-styling v2.5
Centreon 2.5.4 – Multiple Vulnerabilities
Merethis Centreon - Unauthenticated blind SQLi and Authenticated Remote Command Execution
AirLink101 SkyIPCam1620W – OS Command Injection
1. Advisory Information
Cradlepoint MBR1400 and MBR1200 – Local File Inclusion
# Exploit Title: Cradlepoint MBR LFI
D-Link DSL-2750u / DSL-2730u – (Authenticated) Local File Disclosure
#[+] Author: SATHISH ARTHAR
phpLiteAdmin 1.1 – Multiple Vulnerabilities
# Exploit Title: CSRF & XSS
WordPress Plugin ACF Frontend Display 2.0.5 – Arbitrary File Upload
+---------------------------------------------------------------------------+
AirDroid – Arbitrary File Upload
#/IN THE NAME OF GOD
WordPress Plugin S3Bubble Cloud Video With Adverts & Analytics 0.7 – Arbitrary File Download
# Exploit Title: Wordpress S3Bubble Cloud Video With Adverts & Analytics - Arbitrary File Download
WK UDID 1.0.1 iOS – Command Injection
Document Title:
CuteNews 2.0.3 – Arbitrary File Upload
CuteNews 2.0.3 Remote File Upload Vulnerability
PHPXMLRPC < 1.1 - Remote Code Execution
PHPXMLRPC Remote Code Execution
WordPress Plugin Albo Pretorio Online 3.2 – Multiple Vulnerabilities
# Exploit Title: Albo Pretorio Online 3.2 Multiple Vulnerabilities
PEAR XML_RPC < 1.3.0 - Remote Code Execution
PEAR XML_RPC Remote Code Execution
D-Link DSP-W w110 v1.05b01 – Multiple Vulnerabilities
# Exploit Title: D-Link DSP-W Arbitrary Arbitrary file upload