webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

phpList 3.5.0 – Authentication Bypass

# Exploit Title: phpList 3.5.0 - Authentication Bypass

2020-02-03 Suvadip Kar webapps

IceWarp WebMail 11.4.4.1 – Reflective Cross-Site Scripting

# Title: IceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting

2020-02-03 Lutfu Mert Ceylan webapps

FlexNet Publisher 11.12.1 – Cross-Site Request Forgery (Add Local Admin)

# Exploit Title: FlexNet Publisher 11.12.1 - Cross-Site Request Forgery (Add Local Admin)

2020-01-31 Ismail Tasdelen webapps

Lotus Core CMS 1.0.1 – Local File Inclusion

# Exploit Title: Lotus Core CMS 1.0.1 - Local File Inclusion

2020-01-31 Daniel Monzón webapps

rConfig 3.9.3 – Authenticated Remote Code Execution

# Exploit Title: rConfig 3.9.3 - Authenticated Remote Code Execution

2020-01-30 vikingfr webapps

Fifthplay S.A.M.I 2019.2_HP – Persistent Cross-Site Scripting

# Exploit Title: Fifthplay S.A.M.I 2019.2_HP - Persistent Cross-Site Scripting

2020-01-29 LiquidWorm webapps

Centreon 19.10.5 – ‘centreontrapd’ Remote Command Execution

# Exploit Title: Centreon 19.10.5 - 'centreontrapd' Remote Command Execution

2020-01-29 Fabien AUNAY webapps

Centreon 19.10.5 – ‘Pollers’ Remote Command Execution

# Exploit Title: Centreon 19.10.5 - 'Pollers' Remote Command Execution

2020-01-29 Omri Baso webapps

Satellian 1.12 – Remote Code Execution

# Exploit Title: Satellian 1.12 - Remote Code Execution

2020-01-29 Xh4H webapps

Cups Easy 1.0 – Cross Site Request Forgery (Password Reset)

# Title: Cups Easy 1.0 - Cross Site Request Forgery (Password Reset)

2020-01-29 J3rryBl4nks webapps

Liferay CE Portal 6.0.2 – Remote Command Execution

# Exploit Title: Liferay CE Portal 6.0.2 - Remote Command Execution

2020-01-29 Berk Dusunur webapps

Kibana 6.6.1 – CSV Injection

# Exploit Title: Kibana 6.6.1 - CSV Injection

2020-01-29 Aamir Rehman webapps

Centreon 19.10.5 – Remote Command Execution

# Exploit Title: Centreon 19.10.5 - Remote Command Execution

2020-01-28 Fabien AUNAY webapps

Centreon 19.10.5 – Database Credentials Disclosure

# Exploit Title: Centreon 19.10.5 - Database Credentials Disclosure

2020-01-28 Fabien AUNAY webapps

Octeth Oempro 4.8 – ‘CampaignID’ SQL Injection

# Exploit Title: Octeth Oempro 4.8 - 'CampaignID' SQL Injection

2020-01-28 Bruno de Barros Bulle webapps

Adive Framework 2.0.8 – Cross-Site Request Forgery (Change Admin Password)

# Exploit Title: Adive Framework 2.0.8 - Cross-Site Request Forgery (Change Admin Password)

2020-01-28 Sarthak Saini webapps

Genexis Platinum-4410 2.1 – Authentication Bypass

# Exploit Title: Genexis Platinum-4410 2.1 - Authentication Bypass

2020-01-24 Husinul Sanub webapps

OLK Web Store 2020 – Cross-Site Request Forgery

# Exploit Title: OLK Web Store 2020 - Cross-Site Request Forgery

2020-01-24 Joel Aviad Ossi webapps

Webtareas 2.0 – ‘id’ SQL Injection

# Exploit Title: Webtareas 2.0 - 'id' SQL Injection

2020-01-24 Greg.Priest webapps

TP-Link TP-SG105E 1.0.0 – Unauthenticated Remote Reboot

# Exploit Title: TP-Link TP-SG105E 1.0.0 - Unauthenticated Remote Reboot

2020-01-24 PCEumel webapps

qdPM 9.1 – Remote Code Execution

# Exploit Title: qdPM 9.1 - Remote Code Execution

2020-01-23 Rishal Dwivedi webapps

Citrix XenMobile Server 10.8 – XML External Entity Injection

# Exploit Title: Citrix XenMobile Server 10.8 - XML External Entity Injection

2020-01-22 Jonas Lejon webapps

ManageEngine Network Configuration Manager 12.2 – ‘apiKey’ SQL Injection

# Exploit Title: ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection

2020-01-21 Ertebat Gostar Co webapps

Centreon 19.04 – Authenticated Remote Code Execution (Metasploit)

####################################################################

2020-01-20 TheCyberGeek webapps

Adive Framework 2.0.8 – Persistent Cross-Site Scripting

# Exploit Title: Adive Framework 2.0.8 - Persistent Cross-Site Scripting

2020-01-20 Sarthak Saini webapps

WordPress Plugin Time Capsule 1.21.16 – Authentication Bypass

# Exploit Title: Wordpress Time Capsule Plugin 1.21.16 - Authentication Bypass

2020-01-17 B. Canavate webapps

WordPress Plugin InfiniteWP Client 1.9.4.5 – Authentication Bypass

# Exploit Title: Wordpress Plugin InfiniteWP Client 1.9.4.5 - Authentication Bypass

2020-01-17 Raphael Karger webapps

Rukovoditel Project Management CRM 2.5.2 – ‘filters’ SQL Injection

# Exploit Title: Rukovoditel Project Management CRM 2.5.2 - 'filters' SQL Injection

2020-01-16 Fatih Çelik webapps

Rukovoditel Project Management CRM 2.5.2 – ‘entities_id’ SQL Injection

# Exploit Title: Rukovoditel Project Management CRM 2.5.2 - 'entities_id' SQL Injection

2020-01-16 Fatih Çelik webapps

Citrix Application Delivery Controller (ADC) and Gateway 13.0 – Path Traversal

# Exploit Title: Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path Traversal

2020-01-16 Dhiraj Mishra webapps

Online Book Store 1.0 – Arbitrary File Upload

# Exploit Title: Online Book Store 1.0 - Arbitrary File Upload

2020-01-16 Or4nG.M4N webapps

Jenkins Gitlab Hook Plugin 1.4.2 – Reflected Cross-Site Scripting

# Exploit Title: Jenkins Gitlab Hook Plugin 1.4.2 - Reflected Cross-Site Scripting

2020-01-16 Ai Ho webapps

Rukovoditel Project Management CRM 2.5.2 – ‘reports_id’ SQL Injection

# Exploit Title: Rukovoditel Project Management CRM 2.5.2 - 'reports_id' SQL Injection

2020-01-16 Fatih Çelik webapps

WordPress Plugin Postie 1.9.40 – Persistent Cross-Site Scripting

# Exploit Title: WordPress Plugin Postie 1.9.40 - Persistent Cross-Site Scripting

2020-01-16 V1n1v131r4 webapps

Huawei HG255 – Directory Traversal (Metasploit)

##

2020-01-15 Ismail Tasdelen webapps

Online Book Store 1.0 – ‘bookisbn’ SQL Injection

# Exploit Title: Online Book Store 1.0 - 'bookisbn' SQL Injection

2020-01-15 Ertebat Gostar Co webapps

IBM RICOH 6400 Printer – HTML Injection

# Exploit Title: IBM RICOH 6400 Printer - HTML Injection

2020-01-14 Ismail Tasdelen webapps

IBM RICOH InfoPrint 6500 Printer – HTML Injection

# Exploit Title: IBM RICOH InfoPrint 6500 Printer - HTML Injection

2020-01-14 Ismail Tasdelen webapps

Digi AnywhereUSB 14 – Reflective Cross-Site Scripting

# Exploit Title: Digi AnywhereUSB 14 - Reflective Cross-Site Scripting

2020-01-13 Raspina Net Pars Group webapps

Citrix Application Delivery Controller and Gateway 10.5 – Remote Code Execution (Metasploit)

##

2020-01-13 mekhalleh webapps

Chevereto 3.13.4 Core – Remote Code Execution

# Exploit Title: Chevereto 3.13.4 Core - Remote Code Execution

2020-01-13 Jinny Ramsmark webapps

Citrix Application Delivery Controller and Citrix Gateway – Remote Code Execution

#!/usr/bin/python3

2020-01-11 TrustedSec webapps

Citrix Application Delivery Controller and Citrix Gateway – Remote Code Execution (PoC)

#!/bin/bash

2020-01-11 Project Zero India webapps

ASTPP 4.0.1 VoIP Billing – Database Backup Download

# Exploit Title: ASTPP 4.0.1 VoIP Billing - Database Backup Download

2020-01-10 Fabien AUNAY webapps

PixelStor 5000 K:4.0.1580-20150629 – Remote Code Execution

# Exploit Title: PixelStor 5000 - Remote Code Execution

2020-01-10 .:UND3R:. webapps

Pandora 7.0NG – Remote Code Execution

# Exploit Title: Pandora 7.0NG - Remote Code Execution

2020-01-10 Askar webapps

Oracle Weblogic 10.3.6.0.0 – Remote Command Execution

# Exploit Title: Oracle Weblogic 10.3.6.0.0 - Remote Command Execution

2020-01-09 james webapps

Tomcat proprietaryEvaluate 9.0.0.M1 – Sandbox Escape

# Exploit Title: Tomcat proprietaryEvaluate 9.0.0.M1 - Sandbox Escape

2020-01-08 hantwister webapps

Online Book Store 1.0 – Unauthenticated Remote Code Execution

# Exploit Title: Online Book Store 1.0 - Unauthenticated Remote Code Execution

2020-01-08 Tib3rius webapps

Codoforum 4.8.3 – ‘input_txt’ Persistent Cross-Site Scripting

# Exploit Title: Codoforum 4.8.3 - Persistent Cross-Site Scripting

2020-01-08 Vyshnav nk webapps