webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

WordPress Plugin Frontend Upload – Arbitrary File Upload

# Exploit Title: Frontend Upload Wordpress Plugin - File Arbitrary Upload

2014-02-11 Daniel Godoy webapps

D-Link DSL-2750B ADSL Route’ – Cross-Site Request Forgery

# Exploit Title : D-Link DSL-2750B (ADSL Router) CSRF Vulnerability

2014-02-11 killall-9 webapps

ZTE ZXV10 W300 Router – Hard-Coded Credentials

# Exploit Title: ZTE ZXV10 W300 router contains hardcoded credentials

2014-02-09 Cesar Neira webapps

MyBB Extended Useradmininfo Plugin 1.2.1 – Cross-Site Scripting

# Exploit Title: Extended Useradmininfo MyBB Plugin 1.2.1 - Cross Site

2014-02-09 Fikri Fadzil webapps

AuraCMS 2.3 – Multiple Vulnerabilities

Advisory ID: HTB23196

2014-02-07 High-Tech Bridge SA webapps

doorGets CMS 5.2 – SQL Injection

Advisory ID: HTB23197

2014-02-07 High-Tech Bridge SA webapps

CTERA 3.2.29.0/3.2.42.0 – Persistent Cross-Site Scripting

# Exploit Title: [CTERA Project Folders - Stored XSS]

2014-02-07 Luigi Vezzoso webapps

S9Y Serendipity 1.7.5 – ‘Backend’ Multiple Vulnerabilities

Advisory: Serendipity 1.7.5 (Backend) - Multiple security vulnerabilities

2014-02-07 Stefan Schurtz webapps

osCommerce 2.3.3.4 – ‘geo_zones.php?zID’ SQL Injection

# Title: osCommerce v2.x SQL Injection Vulnerability

2014-02-07 Ahmed Aboul-Ela webapps

Joomla! 3.2.1 – SQL Injection

# Exploit Title: Joomla 3.2.1 sql injection

2014-02-06 killall-9 webapps

PHP Webcam Video Conference – Multiple Vulnerabilities

# Exploit: PHP Webcam Video Conference - LFI/XSS

2014-02-06 vinicius777 webapps

Pandora Fms 5.0RC1 – Remote Command Injection

-----------

2014-02-05 xistence webapps

Joomla! Component com_community 2.6 – Code Execution

#!/usr/bin/python

2014-02-05 Matias Fontanini webapps

ImpressCMS 1.3.5 – Multiple Vulnerabilities

I have discovered two vulnerabilities in ImpressCMS. These have been

2014-02-05 Pedro Ribeiro webapps

Inteno DG301 – Command Injection

1. Background

2014-02-05 Juan J. Guelfo webapps

ownCloud 6.0.0a – Multiple Vulnerabilities

# Exploit Title: ownCloud 6.0.0a File Deletion XSS and CSRF Protection Bypass

2014-02-05 absane webapps

Plogger 1.0 (RC1) – Multiple Vulnerabilities

# Exploit Title: Multiply vulnerabilites in plogger 1.0 (RC1)

2014-02-05 killall-9 webapps

D-Link DIR-100 – Multiple Vulnerabilities

# Table of Contents

2014-02-05 Felix Richter webapps

WordPress Theme Dandelion – Arbitrary File Upload

# Exploit Title: Wordpress Dandelion Themes Arbitry File Upload

2014-02-05 TheBlackMonster webapps

IBM Business Process Manager – User Account Reconfiguration

Exploit Title: IBM BMPS (BPM) User account reconfiguration/Privilege Escalation/Information Disclosure

2014-02-05 0in webapps

Booking Calendar – Multiple Vulnerabilities

Booking Calendar PHP - Multiple Vulnerabilties

2014-02-05 AtT4CKxT3rR0r1ST webapps

Eventy Online Scheduler 1.8 – Multiple Vulnerabilities

Eventy Online Scheduler V1.8 - Multiple Vulnerabilties

2014-02-05 AtT4CKxT3rR0r1ST webapps

TopicsViewer 3.0 Beta 1 – Multiple Vulnerabilities

TopicsViewer v3.0 Beta 1 - Multiple Sql Injection Vulnerabilty

2014-02-05 AtT4CKxT3rR0r1ST webapps

Job Site 1.0 – Multiple Vulnerabilities

Jobsite logo - Multiple Vulnerabilties

2014-02-05 AtT4CKxT3rR0r1ST webapps

WordPress Theme Kiddo – Arbitrary File Upload

source: https://www.securityfocus.com/bid/65460/info

2014-02-05 TUNISIAN CYBER webapps

Singapore 0.9.9b Beta – Image Gallery Remote File Inclusion / Cross-Site Scripting

source: https://www.securityfocus.com/bid/65420/info

2014-02-05 TUNISIAN CYBER webapps

CiMe Citas Médicas – Multiple Vulnerabilities

# Exploit Title: Control de Citas 1.4 (CIME) - Multiple Vulnerabilities

2014-02-03 vinicius777 webapps

MediaWiki 1.22.1 PdfHandler – Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE-----

2014-02-01 @u0x webapps

pfSense 2.1 build 20130911-1816 – Directory Traversal

######################################################################

2014-01-29 @u0x webapps

ManageEngine Support Center Plus 7916 – Directory Traversal

-----------

2014-01-29 xistence webapps

A10 Networks Loadbalancer – Directory Traversal

-----------

2014-01-29 xistence webapps

SimplyShare 1.4 iOS – Multiple Vulnerabilities

Document Title:

2014-01-29 Vulnerability-Lab webapps

LinPHA 1.3.4 – Multiple Vulnerabilities

# Exploit Title: linPHA 1.3.4 - Pemanent XSS and CSRF

2014-01-29 killall-9 webapps

Eventum 2.3.4 – ‘hostname’ Remote Code Execution

Advisory ID: HTB23198

2014-01-28 High-Tech Bridge webapps

Eventum – Insecure File Permissions

source: https://www.securityfocus.com/bid/65186/info

2014-01-27 High-Tech Bridge webapps

Ability Mail Server 2013 -Persistent Cross-Site Scripting / Cross-Site Request Forgery (Password Reset)

these configurations*

2014-01-27 David Um webapps

Skybluecanvas CMS 1.1 r248-03 – Remote Command Execution

Vulnerability in SkyBlueCanvas CMS

2014-01-24 Scott Parish webapps

Franklin Fueling TS-550 evo 2.0.0.6833 – Multiple Vulnerabilities

Trustwave's SpiderLabs Security Advisory TWSL2014-001:

2014-01-24 Trustwave's SpiderLabs webapps

Joomla! Component JV Comment 3.0.2 – ‘id’ SQL Injection

Advisory ID: HTB23195

2014-01-24 High-Tech Bridge SA webapps

Joomla! Component Komento 1.7.2 – Persistent Cross-Site Scripting

Advisory ID: HTB23194

2014-01-24 High-Tech Bridge SA webapps

pChart 2.1.3 – Multiple Vulnerabilities

# Exploit Title: pChart 2.1.3 Directory Traversal and Reflected XSS

2014-01-24 Balazs Makany webapps

Maian Uploader 4.0 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/65137/info

2014-01-24 KedAns-Dz webapps

WordPress Plugin WP E-Commerce – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/65130/info

2014-01-24 KedAns-Dz webapps

ZenPhoto – SQL Injection

source: https://www.securityfocus.com/bid/65126/info

2014-01-24 KedAns-Dz webapps

XOS Shop – ‘goto’ SQL Injection

source: https://www.securityfocus.com/bid/65121/info

2014-01-24 JoKeR_StEx webapps