Bluetooth Photo-File Share 2.1 iOS – Multiple Vulnerabilities
Document Title:
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
AllReader 1.0 iOS – Multiple Vulnerabilities
Document Title:
TigerCom My Assistant 1.1 iOS – Local File Inclusion
Document Title:
Privacy Pro 1.2 HZ iOS – Local File Inclusion
Document Title:
Files Desk Pro 1.4 iOS – Local File Inclusion
Document Title:
NG WifiTransfer Pro 1.1 – Local File Inclusion
Document Title:
PHPBTTracker+ 2.2 – SQL Injection
# Exploit Title: PHPBTTracker+ 2.2 SQL Injection
WordPress Plugin Participants Database 1.5.4.8 – SQL Injection
Yarubo #1: Arbitrary SQL Execution in Participants Database for Wordpress
Sharetronix 3.3 – Multiple Vulnerabilities
Advisory ID: HTB23214
AuraCMS 3.0 – Multiple Vulnerabilities
# Exploit Title: AuraCMS 3.0 Multiple Vulnerabilities
WordPress Plugin HDW Player – ‘/wp-admin/admin.php’ SQL Injection
source: https://www.securityfocus.com/bid/69105/info
WordPress Plugin Tera Charts (tera-charts) – ‘/charts/zoomabletreemap.php?fn’ Directory Traversal
source: https://www.securityfocus.com/bid/68662/info
WordPress Plugin Tera Charts (tera-charts) – ‘/charts/treemap.php?fn’ Directory Traversal
source: https://www.securityfocus.com/bid/68662/info
WordPress Plugin ENL NewsLetter – ‘/wp-admin/admin.php’ SQL Injection
source: https://www.securityfocus.com/bid/68558/info
WordPress Plugin WP Rss Poster – ‘/wp-admin/admin.php’ SQL Injection
source: https://www.securityfocus.com/bid/68557/info
WordPress Plugin BookX 1.7 – ‘bookx_export.php’ Local File Inclusion
source: https://www.securityfocus.com/bid/68556/info
webEdition CMS – ‘we_fs.php’ SQL Injection
source: https://www.securityfocus.com/bid/67689/info
D-Link Routers – Multiple Vulnerabilities
The following five D-Link model routers suffer from several
ZYXEL P-660HW-T1 3 Wireless Router – Cross-Site Request Forgery
# Exploit Title: Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerabilities
Videos Tube 1.0 – Multiple SQL Injections
# Exploit Title: Videos Tube SQL Injection and Remote Code Execution
User Cake – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/67604/info
PHP-Nuke ‘Submit_News’ Component – SQL Injection
source: https://www.securityfocus.com/bid/67656/info
Web Terra 1.1 – ‘books.cgi’ Remote Command Execution
[+] Remote Comand Execution on books.cgi Web Terra v. 1.1
Mayan-EDms Web-Based Document Management OS System – Multiple Persistent Cross-Site Scripting Vulnerabilities
# Exploit Title: Multiple Stored XSS
Pyplate – ‘addScript.py’ Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/67610/info
WordPress Plugin Booking System (Booking Calendar) – ‘booking_form_id’ SQL Injection
source: https://www.securityfocus.com/bid/67535/info
Binatone DT 850W Wireless Router – Multiple Cross-Site Request Forgery Vulnerabilities
# Exploit Title: Binatone DT 850W Wireless Router - Multiple CSRF Vulnerabilities
Clipperz Password Manager – ‘/backend/PHP/src/setup/rpc.php’ Remote Code Execution
source: https://www.securityfocus.com/bid/67498/info
Wiser Backup – Information Disclosure
source: https://www.securityfocus.com/bid/67481/info
WordPress Plugin NextGEN Gallery 1.9.1 – ‘photocrati_ajax’ Arbitrary File Upload
source: https://www.securityfocus.com/bid/68414/info
Softmatica SMART iPBX – Multiple SQL Injections
source: https://www.securityfocus.com/bid/67465/info
XOOPS Glossaire Module – ‘/modules/glossaire/glossaire-aff.php’ SQL Injection
source: https://www.securityfocus.com/bid/67460/info
SPIP CMS < 2.0.23/ 2.1.22/3.0.9 - Privilege Escalation
#!/usr/bin/env python
WordPress Plugin cnhk-Slideshow – Arbitrary File Upload
source: https://www.securityfocus.com/bid/67469/info
CIS Manager – ’email’ SQL Injection
source: https://www.securityfocus.com/bid/67442/info
eGroupWare 1.8.006 – Multiple Vulnerabilities
Advisory ID: HTB23212
ElasticSearch – Remote Code Execution
Toggle navigation
Seo Panel – ‘file’ Directory Traversal
source: https://www.securityfocus.com/bid/67911/info
Broadcom PIPA C211 – Sensitive Information Disclosure
Vulnerability title: Unauthenticated Credential And Configuration
VM Turbo Operations Manager 4.5x – Directory Traversal
Product: VM Turbo Operations Manager
SpiceWorks 7.2.00174 – Persistent Cross-Site Scripting
# Exploit Title: Multiple Stored XSS vulnerabilities in SpiceWorks Ticketing system
Skybox Security 6.3.x < 6.4.x - Multiple Information Disclosures
# Exploit Title: [SKYBOX Security – Multiple
Alienvault Open Source SIEM (OSSIM) 4.6.1 – (Authenticated) SQL Injection (Metasploit)
Exploit Title: AlienVault newpolicyform.php SQLi
Cobbler 2.4.x < 2.6.x - Local File Inclusion
# Exploit Title: Local File Inclusion vulnerability in cobbler
Collabtive 1.2 – Persistent Cross-Site Scripting
Vulnerability title: Stored XSS vulnerability in Collabtive application
Collabtive 1.2 – SQL Injection
Vulnerability title: SQL Injection / SQL Error message in Collabtive
OpenFiler 2.99.1 – Multiple Persistent Cross-Site Scripting Vulnerabilities
# Exploit Title: Multiple persistent XSS in Openfiler
OpenFiler 2.99.1 – Arbitrary Code Execution
# Exploit Title: Arbitrary Code Execution in Openfiler