GeographicLib v2.5.1 – stack buffer overflow
Exploit title: GeographicLib v2.5.1 - stack buffer overflow
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
OpenKM 6.3.12 – Multiple
# Exploit Title: OpenKM Multiple Critical Zero-Day
GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)
# Exploit Title: GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)
JuzaWeb CMS 3.4.2 – Authenticated Remote Code Execution
# Exploit Title: JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution
FacturaScripts 2025.43 – XSS
# Exploit Title: FacturaScripts 2025.43 - XSS
Xibo CMS 4.3.0 – RCE via SSTI
# Exploit Title: Xibo CMS - Authenticated Remote Code Execution via SSTI
LangChain Core 1.2.4 – SSTI/RCE
# Exploit Title: LangChain Core - SSTI/RCE
WordPress Plugin 5.2.0 – Broken Access Control
# Exploit Title: WordPress Plugin 5.2.0 - Broken Access Control
D-Link DIR-650IN – Authenticated Command Injection
# Exploit Title: D-Link DIR-650IN - Authenticated Command Injection
React Server 19.2.0 – Remote Code Execution
# Exploit Title: React Server 19.2.0 - Remote Code Execution
RomM 4.4.0 – XSS_CSRF Chain
# Exploit Title: RomM < 4.4.1 - XSS_CSRF Chain
Jumbo Website Manager – Remote Code Execution
#Exploit Title: Jumbo Website Manager - Remote Code Execution
FortiWeb 8.0.2 – Remote Code Execution
# Exploit Title: FortiWeb 8.0.2 - Remote Code Execution
xibocms 3.3.4 – RCE
# Exploit Title: XiboCMS 3.3.4- Remote Code Execution
Horilla v1.3 – RCE
# Exploit Title: Horilla v1.3 - RCE
Fortinet FortiWeb v8.0.1 – Auth Bypass
# Titles:Fortinet FortiWeb v8.0.1 - Auth Bypass
ASP.net 8.0.10 – Bypass
# Exploit Title: ASP.net 8.0.10 - Bypass
Grafana 11.6.0 – SSRF
# Exploit Title: Grafana 11.6.0 - SSRF
Zhiyuan OA – arbitrary file upload leading
# Exploit Title: Zhiyuan OA - arbitrary file upload leading
WBCE CMS 1.6.4 – Remote Code Execution
# Exploit Title: WBCE CMS 1.6.4 - Remote Code Execution
RiteCMS 3.1.0 – Authenticated Remote Code Execution
# Exploit Title: RiteCMS 3.1.0 - Authenticated Remote Code Execution
WordPress Madara – Local File Inclusion
# Exploit Title: WordPress Madara Local File Inclusion
WordPress Backup Migration 1.3.7 – Remote Command Execution
# Exploit Title: WordPress Backup Migration 1.3.7 - Remote Command Execution
mailcow 2025-01a – Host Header Password Reset Poisoning
# Exploit Title: mailcow 2025-01a - Host Header Password Reset Poisoning
Easy File Sharing Web Server v7.2 – Buffer Overflow
# Exploit title: Easy File Sharing Web Server v7.2 - Buffer Overflow
WeGIA 3.5.0 – SQL Injection
# Exploit Title: WeGIA 3.5.0 - SQL Injection
Boss Mini v1.4.0 – Local File Inclusion (LFI)
# Exploit Title: Boss Mini v1.4.0 - Local File Inclusion (LFI)
motionEye 0.43.1b4 – RCE
# Exploit Title: motionEye 0.43.1b4 - RCE
OctoPrint 1.11.2 – File Upload
# Exploit Title: OctoPrint 1.11.2 - File Upload
aiohttp 3.9.1 – directory traversal PoC
# Exploit Title: Python aiohttp directory traversal PoC (CVE-2024-23334)
FortiWeb Fabric Connector 7.6.x – SQL Injection to Remote Code Execution
# Exploit Title: FortiWeb Fabric Connector 7.6.x - Pre-authentication SQL
Piranha CMS 12.0 – Stored XSS in Text Block
# Exploit Title: Piranha CMS 12.0 - Stored Cross Site Scripting
RPi-Jukebox-RFID 2.8.0 – Stored Cross-Site Scripting (XSS)
# Exploit Title: RPi-Jukebox-RFID 2.8.0 - Stored XSS (CVE-2025-10370)
RPi-Jukebox-RFID 2.8.0 – Remote Command Execution
# Exploit Title: RPi-Jukebox-RFID 2.8.0 - Remote Code Execution
Siklu EtherHaul Series EH-8010 – Arbitrary File Upload
# Exploit Title: Siklu EtherHaul Series - Unauthenticated Arbitrary File Upload
Siklu EtherHaul Series EH-8010 – Remote Command Execution
# Exploit Title:Siklu EtherHaul Series EH-8010 - Remote Command Execution
WordPress Quiz Maker 6.7.0.56 – SQL Injection
# Exploit Title: WordPress Quiz Maker 6.7.0.56 - SQL Injection
Chained Quiz 1.3.5 – Unauthenticated Insecure Direct Object Reference via Cookie
# Exploit Title: Chained Quiz 1.3.5 - Unauthenticated Insecure Direct Object Reference via Cookie
FreeBSD rtsold 15.x – Remote Code Execution via DNSSL
# Exploit Title: FreeBSD rtsold 15.x - Remote Code Execution via DNSSL
Summar Employee Portal 3.98.0 – Authenticated SQL Injection
# Exploit Title: Summar Employee Portal 3.98.0 - Authenticated SQL Injection
esm-dev 136 – Path Traversal
# Exploit Title: esm-dev 136 - Path Traversal
Pluck 4.7.7-dev2 – PHP Code Execution
# Exploit Title: Pluck 4.7.7-dev2 - PHP Code Execution
phpMyFAQ 2.9.8 – Cross-Site Request Forgery(CSRF)
# Exploit Title: phpMyFAQ 2.9.8 - Cross-Site Request Forgery(CSRF)
phpMyFAQ 2.9.8 – Cross-Site Request Forgery (CSRF)
# Exploit Title: phpMyFAQ 2.9.8 Cross-Site Request Forgery (CSRF)
MaNGOSWebV4 4.0.6 – Reflected XSS
# Exploit Title: MaNGOSWebV4 4.0.6 - Reflected XSS
Django 5.1.13 – SQL Injection
# Exploit Title: Django 5.1.13 - SQL Injection
phpMyFaq 2.9.8 – Cross Site Request Forgery (CSRF)
# Exploit Title: phpMyFaq 2.9.8 - Cross Site Request Forgery (CSRF)
MobileDetect 2.8.31 – Cross-Site Scripting (XSS)
# Exploit Title: MobileDetect 2.8.31 - Cross-Site Scripting (XSS)
phpIPAM 1.4 – SQL-Injection
# Exploit Title: phpIPAM 1.4 - SQL Injection
OpenRepeater 2.1 – OS Command Injection
# Exploit Title: OpenRepeater 2.1 - OS Command Injection