webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

RaidenTunes – ‘music_out.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/42167/info

2014-08-03 LiquidWorm webapps

TP-Link TL-WR740N v4 Router (FW-Ver. 3.16.6 Build 130529 Rel.47286n) – Command Execution

# Exploit Title: TP-Link TL-WR740N v4 router (FW-Ver. 3.16.6 Build 130529 Rel.47286n) arbitrary shell command execution

2014-08-03 Christoph Kuhl webapps

ArticleFR 11.06.2014 – ‘data.php’ Privilege Escalation

Advisory ID: HTB23219

2014-08-02 High-Tech Bridge SA webapps

Photo WiFi Transfer 1.01 – Directory Traversal

Document Title:

2014-08-02 Vulnerability-Lab webapps

ISPConfig 3.0.54p1 – (Authenticated) Admin Privilege Escalation

# Exploit Title: ISPConfig 3 authenticated admin Localroot vulnerability

2014-08-02 mra webapps

TigerCom iFolder+ 1.2 iOS – Multiple Vulnerabilities

Document Title:

2014-08-02 Vulnerability-Lab webapps

Status2k Server Monitoring Software – Multiple Vulnerabilities

# Exploit Title: Status2k Multiple Vulnerabilities/0days

2014-08-02 Shayan S webapps

Sphider Search Engine – Multiple Vulnerabilities

# Exploit Title: Sphider Search Engine - Multiple Vulnerabilities

2014-08-02 Shayan S webapps

D-Link AP 3200 – Multiple Vulnerabilities

# Exploit Title: D-Link AP 3200 Multiple Vulnerabilities

2014-07-30 pws webapps

SkaDate Lite 2.0 – Remote Code Execution

#!/usr/bin/env python

2014-07-30 LiquidWorm webapps

SkaDate Lite 2.0 – Multiple Cross-Site Request Forgery / Persistent Cross-Site Scripting Vulnerabilities

SkaDate Lite 2.0 Multiple XSRF And Persistent XSS Vulnerabilities

2014-07-30 LiquidWorm webapps

WiFi HD 7.3.0 iOS – Multiple Vulnerabilities

Document Title:

2014-07-29 Vulnerability-Lab webapps

Oxwall 1.7.0 – Multiple Cross-Site Request Forgery / HTML Injection Vulnerabilities

Oxwall 1.7.0 Multiple CSRF And Stored XSS Vulnerabilities

2014-07-28 LiquidWorm webapps

Sphider Search Engine 1.3.6 – Multiple Vulnerabilities

# Exploit Title: Sphider 1.3.6 or later SQL Injection

2014-07-28 Mike Manzotti webapps

Ubiquiti UbiFi / mFi / AirVision – Cross-Site Request Forgery

# Vendor Homepage: (http://www.ubnt.com/)

2014-07-28 Seth Art webapps

WordPress Plugin FB Gorilla – ‘game_play.php’ SQL Injection

source: https://www.securityfocus.com/bid/69222/info

2014-07-28 Amirh03in webapps

CMSimple 4.4.4 – ‘color’ Remote Code Execution

source: https://www.securityfocus.com/bid/68961/info

2014-07-28 Govind Singh webapps

CMSimple 4.4.4 – Remote File Inclusion

source: https://www.securityfocus.com/bid/68961/info

2014-07-28 Govind Singh webapps

CMSimple – Default Administrator Credentials

source: https://www.securityfocus.com/bid/68961/info

2014-07-28 Govind Singh webapps

WordPress Plugin WhyDoWork AdSense – ‘options-general.php’ Cross-Site Request Forgery (Option Manipulation)

source: https://www.securityfocus.com/bid/68954/info

2014-07-28 Dylan Irzi webapps

WordPress Plugin Lead Octopus Power – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/68934/info

2014-07-28 Amirh03in webapps

DirPHP 1.0 – Local File Inclusion

# Exploit Title: DirPHP - version 1.0 Local File Inclusion

2014-07-27 black hat webapps

ZeroCMS 1.0 – Persistent Cross-Site Scripting

######################

2014-07-27 Mayuresh Dani webapps

Moodle 2.7 – Persistent Cross-Site Scripting

Title: Moodle 2.7 Persistent XSS

2014-07-27 Osanda Malith Jayathissa webapps

Pligg CMS 2.0.1 – Multiple Vulnerabilities

#!/usr/bin/python

2014-07-25 BlackHawk webapps

Zenoss Monitoring System 4.2.5-2108 (x64) – Persistent Cross-Site Scripting

# Exploit Title: Stored XSS vulnerability in Zenoss core open source monitoring system

2014-07-25 Dolev Farhi webapps

Lian Li NAS – Multiple Vulnerabilities

# Exploit Title: Lian Li NAS Multiple vulnerabilities

2014-07-24 pws webapps

WordPress Plugin Video Gallery 2.5 – Multiple Vulnerabilities

Wordpress Video Gallery

2014-07-24 Claudio Viviani webapps

Netgear DGN2200 1.0.0.29_1.7.29_HotS – Password Disclosure

# Exploit Title: Password Disclosure vulnerability

2014-07-23 Dolev Farhi webapps

Barracuda Networks #35 Web Firewall 610 6.0.1 – Filter Bypass / Persistent

Document Title:

2014-07-23 Vulnerability-Lab webapps

Ubiquiti Networks UniFi Video Default – ‘crossdomain.xml’ Security Bypass

source: https://www.securityfocus.com/bid/68866/info

2014-07-23 Seth Art webapps

Ilya Birman E2 – ‘/@actions/comment-process’ SQL Injection

source: https://www.securityfocus.com/bid/68843/info

2014-07-23 High-Tech Bridge webapps

Raritan PowerIQ 4.1.0 – SQL Injection (Metasploit)

=begin

2014-07-21 Brandon Perry webapps

MTS MBlaze Ultra Wi-Fi / ZTE AC3633 – Multiple Vulnerabilities

#Author: Ajin Abraham - xboz

2014-07-21 Ajin Abraham webapps

WordPress Plugin WP BackupPlus – Database and Files Backup Download

# Exploit Title: Wordpress wpbackupplus Database and files Backup download (0-day)

2014-07-20 pSyCh0_3D webapps

WordPress Plugin Gallery Objects 0.4 – SQL Injection

######################

2014-07-18 Claudio Viviani webapps

Barracuda Networks Message Archiver 650 – Persistent Cross-Site Scripting

Document Title:

2014-07-18 Vulnerability-Lab webapps

Omeka 2.2 – Cross-Site Request Forgery / Persistent Cross-Site Scripting

Omeka 2.2 CSRF And Stored XSS Vulnerability

2014-07-17 LiquidWorm webapps