ManageEngine Desktop Central – Create Administrator
>> Administrator account creation in ManageEngine Desktop Central / Desktop Central MSP
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Ansible Tower 2.0.2 – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20150113-1 >
Foxit MobilePDF 4.4.0 iOS – Multiple Vulnerabilities
Document Title:
Gecko CMS 2.3 – Multiple Vulnerabilities
Gecko CMS 2.3 Multiple Vulnerabilities
D-Link DSL-2730B Modem – ‘Lancfg2get.cgi Persistent Cross-Site Scripting
# Exploit Title: D-Link DSL-2730B Modem lancfg2get.cgi Exploit XSS Injection Stored
D-Link DSL-2730B Modem – Cross-Site Scripting Injection Stored DnsProxy.cmd
# Exploit Title: D-Link DSL-2730B Modem dnsProxy.cmd Exploit XSS Injection Stored
D-Link DSL-2730B Modem – Cross-Site Scripting Injection Stored Wlsecrefresh.wl & Wlsecurity.wl
# Exploit Title: D-Link DSL-2730B Modem wlsecrefresh.wl & wlsecurity.wl Exploit XSS Injection Stored
vBulletin MicroCART 1.1.4 – Arbitrary Files Deletion / SQL Injection / Cross-Site Scripting
# Exploit Title: vBulletin MicroCART 1.1.4 - Arbitrary File(s) Deletion,
Sefrengo CMS 1.6.0 – SQL Injection
Advisory: SQL-Injection in administrative Backend of Sefrengo CMS v.1.6.0
Microweber CMS 0.95 – SQL Injection
# Exploit Title: SQL Injection in Microweber CMS 0.95
AdaptCMS 3.0.3 – Multiple Vulnerabilities
#!/usr/bin/env python
Crea8Social 2.0 – Cross-Site Scripting Change Interface
# Exploit Title: Crea8Social v.2.0 XSS Change Interface
PhotoPost < 4.85 - Multiple Vulnerabilities
PhotoPost Multiple Vulnerabilities
e107 2 Bootstrap CMS – Cross-Site Scripting
_____ _____ ______
ReviewPost < 2.84 - Multiple Vulnerabilities
ReviewPost Multiple Vulnerabilities
PhotoPost Classifieds < 2.01 - Multiple Vulnerabilities
PhotoPost Classifieds Multiple Vulnerabilities
Absolut Engine 1.73 – Multiple Vulnerabilities
Advisory: Multiple SQL Injections and Reflecting XSS in Absolut Engine v.1.73 CMS
Social Microblogging PRO 1.5 – Persistent Cross-Site Scripting
# Exploit Title: Social Microblogging PRO 1.5 Stored XSS Vulnerability
PHP-Calendar < 0.10.1 - Arbitrary File Inclusion
PHP-Calendar Arbitrary File Inclusion
WHM.AutoPilot < 2.4.6.5 - Multiple Vulnerabilities
WHM.AutoPilot Multiple Vulnerabilities
Easy File Sharing Web Server 6.8 – Persistent Cross-Site Scripting
Exploit Title: Easy File Sharing Webserver =>6.8 Persistent XSS
PMB 4.1.3 – (Authenticated) SQL Injection
# Exploit Title: PMB
phpList 3.0.6/3.0.10 – SQL Injection
Document Title:
Pimcore CMS 2.3.0/3.0 – SQL Injection
Document Title:
Lazarus Guestbook 1.22 – Multiple Vulnerabilities
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Phase Botnet – Blind SQL Injection
import requests
NetIQ Access Manager 4.0 SP1 – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20141218-2 >
SysAid Server – Arbitrary File Disclosure
Vantage Point Security Advisory 2014-004
PHPMyRecipes 1.2.2 – ‘browse.php?category’ SQL Injection
##################################################################################################
Codiad 2.4.3 – Multiple Vulnerabilities
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
GQ File Manager 0.2.5 – Multiple Vulnerabilities
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Piwigo 2.7.2 – Multiple Vulnerabilities
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
ProjectSend r561 – Multiple Vulnerabilities
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
MiniBB 3.1 – Blind SQL Injection
# Exploit Title: miniBB 3.1 Blind SQL Injection
CIK Telecom VoIP Router SVG6000RW – Privilege Escalation / Command Execution
####################################################################
CMS Papoo 6.0.0 Rev. 4701 – Persistent Cross-Site Scripting
Advisory: Persistent XSS Vulnerability in CMS Papoo Light v6
WordPress Plugin WP Symposium 14.11 – Arbitrary File Upload
#!/usr/bin/python
ResourceSpace 6.4.5976 – Cross-Site Scripting / SQL Injection / Insecure Cookie Handling
Title: ResourceSpace Multiple Cross Site Scripting, and HTML and SQL
PHPads 213607 – Authentication Bypass / Password Change
PHPads Authentication Bypass Exploit
WordPress Plugin Download Manager 2.7.4 – Remote Code Execution
#!/usr/bin/python
Soitec SmartEnergy 1.4 – SCADA Login SQL Injection / Authentication Bypass
Soitec SmartEnergy 1.4 SCADA Login SQL Injection Authentication Bypass Exploit
GLPI 0.85 – Blind SQL Injection
# Exploit Title: GLPI 0.85 Blind SQL Injection
IBM Tivoli Service Automation Manager 7.2.4 – Remote Code Execution
# Exploit Title: IBM Tivoli Service Automation Manager Remote Code Execution
OpenEMR 4.1.2(7) – Multiple SQL Injections
Vulnerability title: Multiple Authenticated SQL Injections In OpenEMR