Polycom RealPresence Resource Manager < 8.4 - Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE-----
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
C2Box 4.0.0(r19171) – Cross-Site Request Forgery
Title: Cross-Site Request Forgery (CSRF) Vulnerability in C2Box application Allows adding an Admin User or reset any...
Fiyo CMS 2.0_1.9.1 – SQL Injection
# Exploit Title: Fiyo CMS multiple SQL vulnerability
CollabNet Subversion Edge Management 4.0.11 – Local File Inclusion
# Vuln Title: Local file inclusion in CollabNet Subversion Edge Management
Novius 5.0.1 – Multiple Vulnerabilities
[+] Credits: John Page ( hyp3rlinx )
XOOPS < 2.0.11 - Multiple Vulnerabilities
XOOPS Multiple Vulnerabilities
Huawei Home Gateway UPnP/1.0 IGD/1.00 – Password Change
#!/usr/bin/python
Huawei Home Gateway UPnP/1.0 IGD/1.00 – Password Disclosure
#!/usr/bin/python
DeDeCMS < 5.7-sp1 - Remote File Inclusion
==========================
Thycotic Secret Server 8.8.000004 – Persistent Cross-Site Scripting
#############################################################
Koha 3.20.1 – Multiple Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities
# Exploit Title: Koha Open Source ILS - Multiple XSS and XSRF Vulnerabilities
Koha 3.20.1 – Directory Traversal
# Exploit Title: Koha Open Source ILS - Path Traversal in STAFF client
Koha 3.20.1 – Multiple SQL Injections
# Exploit Title: Koha Open Source ILS - Unauthenticated SQL Injection in OPAC
Vesta Control Panel 0.9.8 – OS Command Injection
Advisory ID: HTB23261
Joomla! Component com_simpleimageupload – Arbitrary File Upload
# Exploit Title: Joomla Simple Image Upload - Arbitrary File Upload
GeniXCMS 0.0.3 – ‘register.php’ SQL Injection
# Exploit Title: Genixcms register.php multiple SQL vuln
WordPress Plugin Huge-IT Slider 2.7.5 – Multiple Vulnerabilities
# Exploit Title: WordPress: wordpress huge-it-slider 2.7.5 & Persistent JS-HTML Code injection, Arbitrary slider dele...
GeniXCMS 0.0.3 – Cross-Site Scripting
# Exploit Title: Persistent XSS
Lively Cart – SQL Injection
##################################################################################################
ZTE ZXV10 W300 v3.1.0c_DR0 – UI Session Delete
Document Title:
ManageEngine SupportCenter Plus 7.90 – Multiple Vulnerabilities
Document Title:
Tango FTP 1.0 (Build 136) – Activex HeapSpray
Tango FTP Activex Heap Spray Exploit
Tango DropBox 3.1.5 + PRO – Activex HeapSpray
Tango DropBox Activex Heap Spray Exploit
BlackCat CMS 1.1.1 – Arbitrary File Download
# Exploit Title: BlackCat CMS v1.1.1 Arbitrary File Download Vulnerability
E-Detective Lawful Interception System – Multiple Vulnerabilities
Advisory: E-Detective Lawful Interception System
TYPO3 Extension Akronymmanager 0.5.0 – SQL Injection
Advisory: SQL Injection in TYPO3 Extension Akronymmanager
Apexis IP CAM – Information Disclosure
Remoteexecution.net**
Ektron CMS 9.10 SP1 (Build 9.1.0.184.1.114) – Cross-Site Request Forgery
# Vulnerability type: Cross-site Request Forgery
Milw0rm Clone Script 1.0 – ‘/admin/login.php’ Authentication Bypass
| Exploit Title: Milw0rm Clone Script v1.0 (Auth Bypass) SQL Injection Vulnerability |
WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta – Arbitrary File Upload
Title: Remote file upload vulnerability in aviary-image-editor-add-on-for-gravity-forms v3.0beta Wordpress plugin
WordPress Plugin SE HTML5 Album Audio Player 1.1.0 – Directory Traversal
Title: Path Traversal vulnerability in Wordpress plugin se-html5-album-audio-player v1.1.0
ZCMS 1.1 – Multiple Vulnerabilities
# Exploit Title: SQL Injection & Persistent XSS
Opsview 4.6.2 – Multiple Cross-Site Scripting Vulnerabilities
# Exploit title: Opsview 4.6.2 - Multiple XSS
Nakid CMS – Multiple Vulnerabilities
# Exploit Title: CSRF, Persistent XSS & LFI
ClickHeat 1.14 – Cross-Site Request Forgery (Change Admin Password)
# Exploit Title: ClickHeat
SysAid Help Desk 14.4 – Multiple Vulnerabilities
>> Multiple vulnerabilities in SysAid Help Desk 14.4
WordPress Plugin Encrypted Contact Form 1.0.4 – Cross-Site Request Forgery
# Title: CVE-2015-4010 - Cross-site Request Forgery & Cross-site Scripting in Encrypted
AnimaGallery 2.6 – Local File Inclusion
# Exploit Title: AnimaGallery 2.6 (theme and lang cookie parametre) Local File Include Vulnerability
Alcatel-Lucent OmniSwitch – Cross-Site Request Forgery
Advisory: Alcatel-Lucent OmniSwitch Web Interface Cross-Site Request Forgery
Bonita BPM 6.5.1 – Multiple Vulnerabilities
Advisory ID: HTB23259
ISPConfig 3.0.5.4p6 – Multiple Vulnerabilities
Advisory ID: HTB23260
GeoVision (GeoHttpServer) Webcams – Remote File Disclosure
#!/usr/bin/python
FiverrScript – Cross-Site Request Forgery (Add Admin)
# Exploit Title: FiverrScript CSRF Vulnerability (add New admin)
Pandora FMS 5.0/5.1 – Authentication Bypass
# Exploit Title: Authentication Bypass in Pandora FMS
WordPress Plugin History Collection 1.1.1 – Arbitrary File Download
# Exploit Title: Wordpress History Collection
WordPress Plugin Paypal Currency Converter Basic For WooCommerce – File Read
# Exploit Title: Paypal Currency Converter Basic For Woocommerce File Read
WordPress Plugin RobotCPA V5 – Local File Inclusion
# Exploit Title: Wordpress Plugin RobotCPA V5 - Local File Include