webapps

Exploit Database - Exploits for Penetration Testers, Researchers, and Ethical Hackers/漏洞数据库

日期 标题 类别 作者
2025-04-15 OpenCMS 17.0 – Stored Cross Site Scripting (XSS)
  • webapps
    		•  Siddhartha Naik
    2025-04-15 Adapt Authoring Tool 0.11.3 – Remote Command Execution (RCE)
  • webapps
    		•  Eui Chul Chung
    2025-04-15 Really Simple Security 9.1.1.1 – Authentication Bypass
  • webapps
    		•  Antonio Francesco Sardella
    2025-04-15 Spring Boot common-user-management 0.1 – Remote Code Execution (RCE)
  • webapps
    		•  d3sca
    2025-04-15 Cacti 1.2.26 – Remote Code Execution (RCE) (Authenticated)
  • webapps
    		•  D3Ext
    2025-04-15 ABB Cylon Aspect 3.08.03 – Hard-coded Secrets
  • webapps
    		•  LiquidWorm
    2025-04-15 ABB Cylon Aspect 3.08.03 (MapServicesHandler) – Authenticated Reflected XSS
  • webapps
    		•  LiquidWorm
    2025-04-15 IBMi Navigator 7.5 – Server Side Request Forgery (SSRF)
  • webapps
    		•  hyp3rlinx
    2025-04-15 Plane 0.23.1 – Server side request forgery (SSRF)
  • webapps
    		•  Saud Alenazi
    2025-04-15 IBMi Navigator 7.5 – HTTP Security Token Bypass
  • webapps
    		•  hyp3rlinx
    2025-04-14 SilverStripe 5.3.8 – Stored Cross Site Scripting (XSS) (Authenticated)
  • webapps
    		•  James Nicoll
    2025-04-14 OpenPanel Copy and View functions in the File Manager 0.3.4 – Directory Traversal
  • webapps
    		•  Korn Chaisuwan, Charanin Thongudom, Pongtorn Angsuchotmetee
    2025-04-14 OpenPanel 0.3.4 – OS Command Injection
  • webapps
    		•  Korn Chaisuwan, Charanin Thongudom, Pongtorn Angsuchotmetee
    2025-04-14 OpenPanel 0.3.4 – Incorrect Access Control
  • webapps
    		•  Korn Chaisuwan, Charanin Thongudom, Pongtorn Angsuchotmetee
    2025-04-14 OpenPanel 0.3.4 – Directory Traversal
  • webapps
    		•  Korn Chaisuwan, Charanin Thongudom, Pongtorn Angsuchotmetee
    2025-04-14 Pimcore customer-data-framework 4.2.0 – SQL injection
  • webapps
    		•  maeitsec
    2025-04-14 Xinet Elegant 6 Asset Lib Web UI 6.1.655 – SQL Injection
  • webapps
    		•  hyp3rlinx
    2025-04-14 Pimcore 11.4.2 – Stored cross site scripting
  • webapps
    		•  maeitsec
    2025-04-11 GetSimpleCMS 3.3.16 – Remote Code Execution (RCE)
  • webapps
    		•  CodeSecLab
    2025-04-11 flatCore 1.5 – Cross Site Request Forgery (CSRF)
  • webapps
    		•  CodeSecLab
    2025-04-11 GeoVision GV-ASManager 6.1.0.0 – Broken Access Control
  • webapps
    		•  Giorgi Dograshvili
    2025-04-11 GeoVision GV-ASManager 6.1.1.0 – CSRF
  • webapps
    		•  Giorgi Dograshvili
    2025-04-11 CMU CERT/CC VINCE 2.0.6 – Stored XSS
  • webapps
    		•  LiquidWorm
    2025-04-11 WebFileSys 2.31.0 – Directory Path Traversal
  • webapps
    		•  Korn Chaisuwan, Charanin Thongudom, Pongtorn Angsuchotmetee