Nucom ADSL ADSLR5000UN – ISP Credentials Disclosure
#!/usr/bin/perl
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Cart Engine 3.0 – Multiple Vulnerabilities
=== Details ===
OSClass 3.4.1 – ‘index.php’ Local File Inclusion
Information
webEdition 6.3.8.0 (SVN-Revision: 6985) – Directory Traversal
Advisory ID: HTB23227
Restaurant Script (PizzaInn Project) – Persistent Cross-Site Scripting
Title: Pizza Inn Registration Stored XSS
Glype 1.4.9 – Local Address Filter Bypass
------------------------------------------------------------------------
Glype 1.4.9 – Cookie Injection Directory Traversal Local File Inclusion
------------------------------------------------------------------------
Joomla! Component com_macgallery 1.5 – Arbitrary File Download
######################
Joomla! Component com_facegallery 1.0 – Multiple Vulnerabilities
######################
Onlineon E-Ticaret – Database Disclosure
#!/usr/bin/env python
ZYXEL Prestig P-660HNU-T1 – ISP Credentials Disclosure
#!/usr/bin/perl
LittleSite 0.1 – ‘index.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/43495/info
Livefyre LiveComments Plugin – Persistent Cross-Site Scripting
Title : Stored XSS in Livefyre LiveComments Plugin
vBulletin 4.x Verify Email Before Registration Plugin – SQL Injection
#Title: vBulletin Verify Email Before Registration Plugin - SQL Injection
M/Monit 3.3.2 – Cross-Site Request Forgery
Vulnerability title: M/Monit CSRF Author: Dolev Farhi Contact: dolevf at
USB&WiFi Flash Drive 1.3 iOS – Code Execution
Document Title:
WordPress Plugin Slideshow Gallery 1.4.6 – Arbitrary File Upload
#!/usr/bin/env python
ZTE ZXDSL-931VII – Configuration Dump
# Exploit Title: ZTE ZXDSL-931VII Unauthenticated Configuration Dump
CacheGuard-OS 5.7.7 – Cross-Site Request Forgery
I. VULNERABILITY
Briefcase 4.0 iOS – Code Execution / File Inclusion
Document Title:
ALCASAR 2.8.1 – Remote Code Execution
#!/usr/bin/env python
WordPress Plugin Wordfence Security – Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/69815/info
Food Order Portal – ‘admin_user_delete.php’ Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/69787/info
Joomla! Component com_formmaker 3.4 – SQL Injection
######################
ChatSecure IM 2.2.4 iOS – Persistent Cross-Site Scripting
Document Title:
Photorange 1.0 iOS – Local File Inclusion
Document Title:
Joomla! Component Spider Contacts 1.3.6 – ‘contacts_id’ SQL Injection
#!/usr/bin/env python
OroCRM – Persistent Cross-Site Scripting
# Affected software: OroCRM is an easy-to-use, open source CRM with built in marketing automation tools for your comm...
Parallels Plesk Sitebuilder 9.5 – Multiple Vulnerabilities
#+++++++++++++++++++++++++++++++++++++++++++++++++++++++++
WordPress Plugin WP Support Plus Responsive Ticket System 2.0 – Multiple Vulnerabilities
# Exploit Title: Wordpress WP Support Plus Responsive Ticket System 2.0
Jenkins 1.578 – Multiple Vulnerabilities
#Affected Vendor: http://jenkins-ci.org/
Mpay24 PrestaShop Payment Module 1.5 – Multiple Vulnerabilities
Mpay24 PrestaShop Payment Module Multiple Vulnerabilities
Atmail Webmail 7.2 – Multiple Vulnerabilities
#Title: Atmail Webmail =>7.2 - Multiple XSS & FPD
TP-Link TL-WR841N / TL-WR841ND – Multiple Vulnerabilities
#Title: TP-LINK Model No. TL-WR841N / TL-WR841ND - Multiple Vulnerabilities
TP-Link TL-WR340G / TL-WR340GD – Multiple Vulnerabilities
#Title: TP-LINK Model No. TL-WR340G/TL-WR340GD - Multiple Vulnerabilities
osCommerce 2.3.4 – Multiple Vulnerabilities
#Title: osCommerce 2.3.4 - Multiple vulnerabilities
Zen Cart 1.5.3 – Multiple Vulnerabilities
#Title: Zen Cart 1.5.3 - CSRF & Admin Panel XSS
phpMyFAQ 2.8.x – Multiple Vulnerabilities
#Title: phpMyFAQ 2.8.X - Multiple Vulnerabilities
vBulletin 5.1.x – Persistent Cross-Site Scripting
#Title: vBulletin 5.1.X - Cross Site Scripting
WordPress Plugin Bulk Delete Users by Email 1.0 – Cross-Site Request Forgery
# Exploit Title: Bulk Delete Users by Email, Wordpress Plugin 1.0 - CSRF
WordPress Theme Acento – ‘view-pdf.php?File’ Arbitrary File Download
#+++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Joomla! Component Spider Calendar 3.2.6 – SQL Injection
#!/usr/bin/env python
WordPress Plugin W3 Total Cache – ‘admin.php’ Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/69745/info
WordPress Plugin Xhanch My Twitter – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/69744/info
WordPress Plugin WP to Twitter – Authentication Bypass
source: https://www.securityfocus.com/bid/69741/info
WordPress Plugin Ninja Forms 2.7.7 – Authentication Bypass
source: https://www.securityfocus.com/bid/69740/info
WordPress Theme Antioch – ‘download.php’ Arbitrary File Download
source: https://www.securityfocus.com/bid/69673/info
WordPress Theme Epic – ‘download.php’ Arbitrary File Download
source: https://www.securityfocus.com/bid/69672/info