webapps

Bludit 3.9.2 – Directory Traversal

# Title: Bludit 3.9.2 - Directory Traversal

PandoraFMS NG747 7.0 – ‘filename’ Persistent Cross-Site Scripting

# Exploit Title: PandoraFMS NG747 7.0 - 'filename' Persistent Cross-Site Scripting

WordPress Plugin Email Subscribers & Newsletters 4.2.2 – ‘hash’ SQL Injection (Unauthenticated)

# Exploit Title: WordPress Plugin Email Subscribers & Newsletters 4.2.2 - 'hash' SQL Injection (Unauthenticated)

WordPress Plugin Email Subscribers & Newsletters 4.2.2 – Unauthenticated File Download

# Exploit Title: WordPress Plugin Email Subscribers & Newsletters 4.2.2 - Unauthenticated File Download

UBICOD Medivision Digital Signage 1.5.1 – Cross-Site Request Forgery (Add Admin)

# Title: UBICOD Medivision Digital Signage 1.5.1 - Cross-Site Request Forgery (Add Admin)

INNEO Startup TOOLS 2018 M040 13.0.70.3804 – Remote Code Execution

# Exploit Title: INNEO Startup TOOLS 2018 M040 13.0.70.3804 - Remote Code Execution

ManageEngine Applications Manager 13 – ‘MenuHandlerServlet’ SQL Injection

# Exploit Title: ManageEngine Applications Manager 13 - 'MenuHandlerServlet' SQL Injection

GOautodial 4.0 – Persistent Cross-Site Scripting (Authenticated)

# Exploit Title: GOautodial 4.0 - Persistent Cross-Site Scripting (Authenticated)

TimeClock Software 1.01 0 – (Authenticated) Time-Based SQL Injection

#!/usr/bin/python3

UBICOD Medivision Digital Signage 1.5.1 – Authorization Bypass

# Title: UBICOD Medivision Digital Signage 1.5.1 - Authorization Bypass

Sophos VPN Web Panel 2020 – Denial of Service (Poc)

# Exploit Title: Sophos VPN Web Panel 2020 - Denial of Service (Poc)

WordPress Theme NexosReal Estate 1.7 – ‘search_order’ SQL Injection

# Exploit Title: WordPress Theme NexosReal Estate 1.7 - 'search_order' SQL Injection

Docsify.js 4.11.4 – Reflective Cross-Site Scripting

# Exploit Title: Docsify.js 4.11.4 - Reflective Cross-Site Scripting

CMSUno 1.6 – Cross-Site Request Forgery (Change Admin Password)

# Exploit Title: CMSUno 1.6 - Cross-Site Request Forgery (Change Admin Password)

Wing FTP Server 6.3.8 – Remote Code Execution (Authenticated)

# Exploit Title: Wing FTP Server 6.3.8 - Remote Code Execution (Authenticated)

Infor Storefront B2B 1.0 – ‘usr_name’ SQL Injection

# Exploit Title: Infor Storefront B2B 1.0 - 'usr_name' SQL Injection

Online Farm Management System 0.1.0 – Persistent Cross-Site Scripting

# Exploit Title: Online Farm Management System 0.1.0 - Persistent Cross-Site Scripting

Web Based Online Hotel Booking System 0.1.0 – Authentication Bypass

# Exploit Title: Web Based Online Hotel Booking System 0.1.0 - Authentication Bypass

Online Polling System 1.0 – Authentication Bypass

# Exploit Title: Online Polling System 1.0 - Authentication Bypass

Joomla! J2 JOBS 1.3.0 – ‘sortby’ Authenticated SQL Injection

# Exploit Title: Joomla! J2 JOBS 1.3.0 - 'sortby' Authenticated SQL Injection

Zyxel Armor X1 WAP6806 – Directory Traversal

# Exploit Title: Zyxel Armor X1 WAP6806 - Directory Traversal

SuperMicro IPMI WebInterface 03.40 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: SuperMicro IPMI WebInterface 03.40 - Cross-Site Request Forgery (Add Admin)

Trend Micro Web Security Virtual Appliance 6.5 SP2 Patch 4 Build 1901 – Remote Code Execution (Metasploit)

##

BSA Radar 1.6.7234.24750 – Local File Inclusion

# Exploit title: BSA Radar 1.6.7234.24750 - Local File Inclusion

Park Ticketing Management System 1.0 – Authentication Bypass

# Exploit Title: Park Ticketing Management System 1.0 - Authentication Bypass

Park Ticketing Management System 1.0 – ‘viewid’ SQL Injection

# Exploit Title: Park Ticketing Management System 1.0 - 'viewid' SQL Injection

Barangay Management System 1.0 – Authentication Bypass

# Exploit Title: Barangay Management System 1.0 - Authentication Bypass

HelloWeb 2.0 – Arbitrary File Download

# Exploit Title: HelloWeb 2.0 - Arbitrary File Download

Savsoft Quiz 5 – Persistent Cross-Site Scripting

# Exploit Title: Savsoft Quiz 5 - Persistent Cross-Site Scripting

WordPress Plugin Powie’s WHOIS Domain Check 0.9.31 – Persistent Cross-Site Scripting

# Exploit Title: Wordpress Plugin Powie's WHOIS Domain Check 0.9.31 - Persistent Cross-Site Scripting

BSA Radar 1.6.7234.24750 – Cross-Site Request Forgery (Change Password)

# Exploit title: BSA Radar 1.6.7234.24750 - Cross-Site Request Forgery (Change Password)

SuperMicro IPMI 03.40 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: SuperMicro IPMI 03.40 - Cross-Site Request Forgery (Add Admin)

PHP 7.4 FFI – ‘disable_functions’ Bypass

Exhibitor Web UI 1.7.1 – Remote Code Execution

# Exploit Title: Exhibitor Web UI 1.7.1 - Remote Code Execution

BSA Radar 1.6.7234.24750 – Authenticated Privilege Escalation

# Exploit Title: BSA Radar 1.6.7234.24750 - Authenticated Privilege Escalation

Joomla! J2 JOBS 1.3.0 – ‘sortby’ Authenticated SQL Injection

# Exploit Title: Joomla! J2 JOBS 1.3.0 - 'sortby' Authenticated SQL Injection

Online Shopping Portal 3.1 – ’email’ SQL Injection

# Exploit Title: Online Shopping Portal 3.1 - 'email' SQL Injection

Sickbeard 0.1 – Remote Command Injection

# Exploit Title: Sickbeard 0.1 - Remote Command Injection

BIG-IP 15.0.0 < 15.1.0.3 / 14.1.0 < 14.1.2.5 / 13.1.0 < 13.1.3.3 / 12.1.0 < 12.1.5.1 / 11.6.1 < 11.6.5.1 - Traffic Management User Interface 'TMUI' Remote Code Execution

#!/bin/bash

Nagios XI 5.6.12 – ‘export-rrd.php’ Remote Code Execution

# Exploit Title: Nagios XI 5.6.12 - 'export-rrd.php' Remote Code Execution

RSA IG&L Aveksa 7.1.1 – Remote Code Execution

# Exploit Title: RSA IG&L Aveksa 7.1.1 - Remote Code Execution

RiteCMS 2.2.1 – Authenticated Remote Code Execution

# Exploit Title: RiteCMS 2.2.1 - Authenticated Remote Code Execution

File Management System 1.1 – Persistent Cross-Site Scripting

# Exploit Title: File Management System 1.1 - Persistent Cross-Site Scripting

BIG-IP 15.0.0 < 15.1.0.3 / 14.1.0 < 14.1.2.5 / 13.1.0 < 13.1.3.3 / 12.1.0 < 12.1.5.1 / 11.6.1 < 11.6.5.1 - Traffic Management User Interface 'TMUI' Remote Code Execution (PoC)

## RCE:

OCS Inventory NG 2.7 – Remote Code Execution

# Exploit Title: OCS Inventory NG 2.7 - Remote Code Execution

ZenTao Pro 8.8.2 – Command Injection

# Exploit Title: ZenTao Pro 8.8.2 - Command Injection

Online Shopping Portal 3.1 – Authentication Bypass

# Exploit Title: Online Shopping Portal 3.1 - Authentication Bypass

PHP-Fusion 9.03.60 – PHP Object Injection

# Exploit Title: PHP-Fusion 9.03.60 - PHP Object Injection

e-learning Php Script 0.1.0 – ‘search’ SQL Injection

# Exploit Title: e-learning Php Script 0.1.0 - 'search' SQL Injection

Reside Property Management 3.0 – ‘profile’ SQL Injection

# Exploit Title: Reside Property Management 3.0 - 'profile' SQL Injection