ZTE ZXHN H108L – Authentication Bypass (1)
# Exploit Title: ZTE ZXHN H108L Authentication Bypass
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Maarch LetterBox 2.8 – (Authentication Bypass) Insecure Cookies
# Title : Maarch LetterBox 2.8 Insecure Cookie Handling Vulnerability (Login Bypass)
MyBB Forums 1.8.2 – Persistent Cross-Site Scripting
####################################################################################
clientResponse Client Management 4.1 – Cross-Site Scripting
# Exploit Title: clientResponse Client Management XSS Vulnerability
Joomla! Component com_hdflvplayer < 2.1.0.1 - Arbitrary File Download
#!/usr/bin/env python
Gogs – ‘users’/’repos’ ‘?q’ SQL Injection
Unauthenticated SQL Injection in Gogs repository search
Gogs – ‘label’ SQL Injection
Blind SQL Injection in Gogs label search
MyBB 1.8.x – Multiple Vulnerabilities
#Title: MyBB 1.8.X - Multiple Vulnerabilities
Digi Online Examination System 2.0 – Unrestricted Arbitrary File Upload
# Exploit Title: Digi Online Examination System Unrestricted File Upload Vulnerability
F5 BIG-IP 10.1.0 – Directory Traversal
+------------------------------------------------------+
Piwigo 2.6.0 – ‘picture.php?rate’ SQL Injection
=============================================
Joomla! Component com_hdflvplayer < 2.1.0.1 - SQL Injection
#!/usr/bin/python
Proticaret E-Commerce Script 3.0 – SQL Injection (1)
Document Title:
WordPress Plugin SupportEzzy Ticket System 1.2.5 – Persistent Cross-Site Scripting
# Exploit Title: SupportEzzy Ticket System - WordPress Plugin Stored XSS
WordPress Plugin Photo Gallery 1.2.5 – Unrestricted Arbitrary File Upload
# Exploit Title: Photo Gallery 1.2.5 Unrestricted File Upload
Subex Fms 7.4 – SQL Injection
=======================================================================================
WordPress Plugin / Joomla! Component XCloner – Multiple Vulnerabilities
Title: XCloner Wordpress/Joomla! backup Plugin v3.1.1 (Wordpress) v3.5.1 (Joomla!) Vulnerabilities
Password Manager Pro / Pro MSP – Blind SQL Injection
>> Authenticated blind SQL injection in Password Manager Pro / Pro MSP
ManageEngine OpManager / Social IT Plus / IT360 – Multiple Vulnerabilities
>> Multiple vulnerabilities in ManageEngine OpManager, Social IT Plus and IT360
Barracuda – Multiple Unauthentication Logfile Downloads
# Exploit Title: multiple Barracuda products logfile disclosure
PHP-Fusion 7.02.07 – SQL Injection
# Exploit Title: PHP-Fusion 7.02.07 SQL Injection
WordPress Plugin Another WordPress Classifieds Plugin – SQL Injection
Exploit Title: Another Wordpress Classifieds Plugin sql injection and Cross Site Scripting
ZTE ZXDSL 831CII – Insecure Direct Object Reference
# Exploit Title: ZTE ZXDSL 831 Insecure Direct Object Reference
phpSound Music Sharing Platform 1.0.5 – Multiple Cross-Site Scripting Vulnerabilities
# Exploit Title: phpSound Music Sharing Platform Multiple XSS Vulnerabilities
Serenity Client Management Portal 1.0.1 – Multiple Vulnerabilities
# Exploit Title: Serenity Client Management Portal Multiple Vulnerabilities
vldPersonals 2.7 – Multiple Vulnerabilities
# Exploit Title: VLD Personal – Multiple Vulnerabilities
ManageEngine OpManager / Social IT Plus / IT360 – Multiple Vulnerabilities
>> Multiple vulnerabilities in ManageEngine OpManager, Social IT Plus and IT360
Symantec Endpoint Protection 12.1.4023.4080 – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20141106-0 >
ManageEngine EventLog Analyzer – Multiple Vulnerabilities (2)
>> Multiple vulnerabilities in ManageEngine EventLog Analyzer
Mouse Media Script 1.6 – Persistent Cross-Site Scripting
# Exploit Title: Mouse Media Script Stored XSS Vulnerability
PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection
# Exploit Title: PHP 5.x Shellshock Exploit (bypass disable_functions)
Esotalk CMS 1.0.0g4 – Cross-Site Scripting
# Exploit Title: esotalk cms topics xss vulnerability
Who’s Who Script – Cross-Site Request Forgery (Add Admin)
# Title : Who's Who Script CSRF Exploit (Add Admin Account)
ZTE Modem ZXDSL 531BIIV7.3.0f_D09_IN – Persistent Cross-Site Scripting
# Exploit Title: ZTE Modem Stored XSS Vulnerability
Progress OpenEdge 11.2 – Directory Traversal
# Exploit Title: Progress OpenEdge Directory Traversal
MAARCH 1.4 – SQL Injection
# Exploit Title: Maarch 1.4 SQL Injection
MAARCH 1.4 – Arbitrary File Upload
# Exploit Title: Maarch 1.4 Arbitrary file upload
Tapatalk for vBulletin 4.x – Blind SQL Injection
#!/usr/bin/env python
Enalean Tuleap 7.4.99.5 – Remote Command Execution
Vulnerability title: Tuleap
Enalean Tuleap 7.2 – XML External Entity File Disclosure
Vulnerability title: Tuleap
Enalean Tuleap 7.4.99.5 – Blind SQL Injection
Vulnerability title: Tuleap
Folder Plus 2.5.1 iOS – Persistent Cross-Site Scripting
Document Title:
WebDisk+ 2.1 iOS – Code Execution
Document Title:
Incredible PBX 2.0.6.5.0 – Remote Command Execution
#!/usr/bin/perl
Mulesoft ESB Runtime 3.5.1 – Privilege Escalation
Mulesoft ESB Runtime 3.5.1 Authenticated Privilege Escalation → Remote Code
HP Operations Agent – Cross-Site Scripting iFrame Injection
#!/usr/bin/python
CBN CH6640E/CG6640E Wireless Gateway Series – Multiple Vulnerabilities
CBN CH6640E/CG6640E Wireless Gateway Series Multiple Vulnerabilities