Complaint Management System 4.0 – Remote Code Execution
# Exploit Title: Complaint Management System 4.0 - Remote Code Execution
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
piSignage 2.6.4 – Directory Traversal
# Exploit Title: piSignage 2.6.4 - Directory Traversal
Job Portal 1.0 – Remote Code Execution
# Exploit Title: Job Portal 1.0 - Remote Code Execution
Codoforum 4.8.3 – Persistent Cross-Site Scripting
# Exploit Title: Codoforum 4.8.3 - Persistent Cross-Site Scripting
Voyager 1.3.0 – Directory Traversal
# Exploit Title: Voyager 1.3.0 - Directory Traversal
Small CRM 2.0 – Authentication Bypass
# Exploit Title: Small CRM 2.0 - Authentication Bypass
elaniin CMS 1.0 – Authentication Bypass
# Exploit Title: elaniin CMS 1.0 - Authentication Bypass
Hostel Management System 2.0 – ‘id’ SQL Injection
# Exploit Title: Hostel Management System 2.0 - 'id' SQL Injection
Subrion CMS 4.0.5 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Subrion CMS 4.0.5 - Cross-Site Request Forgery (Add Admin)
IBM RICOH Infoprint 1532 Printer – Persistent Cross-Site Scripting
# Exploit Title: IBM RICOH Infoprint 1532 Printer - Persistent Cross-Site Scripting
Complaint Management System 4.0 – ‘cid’ SQL injection
# Exploit Title: Complaint Management System 4.0 - 'cid' SQL injection
Dairy Farm Shop Management System 1.0 – ‘username’ SQL Injection
# Exploit Title: Dairy Farm Shop Management System 1.0 - 'username' SQL Injection
Karakuzu ERP Management Web 5.7.0 – ‘k_adi_duz’ SQL Injection
# Exploit Title: Karakuzu ERP Management Web 5.7.0 - 'k_adi_duz' SQL Injection
Online Course Registration 2.0 – Remote Code Execution
# Exploit Title: Online Course Registration 2.0 - Remote Code Execution
BloodX 1.0 – Authentication Bypass
# Exploit Title: BloodX 1.0 - Authentication Bypass
Hospital Management System 4.0 – Persistent Cross-Site Scripting
# Exploit Title: Hospital Management System 4.0 - Persistent Cross-Site Scripting
Hospital Management System 4.0 – ‘searchdata’ SQL Injection
# Exploit Title: Hospital Management System 4.0 - 'searchdata' SQL Injection
Hospital Management System 4.0 – Authentication Bypass
# Exploit Title: Hospital Management System 4.0 - Authentication Bypass
IBM InfoPrint 4247-Z03 Impact Matrix Printer – Directory Traversal
# Exploit Title: IBM InfoPrint 4247-Z03 Impact Matrix Printer - Directory Traversal
Shopping Portal ProVersion 3.0 – Authentication Bypass
# Exploit Title: Shopping Portal ProVersion 3.0 - Authentication Bypass
WordPress Plugin Ultimate Addons for Beaver Builder 1.2.4.1 – Authentication Bypass
# Exploit Title: Wordpress Ultimate Addons for Beaver Builder 1.2.4.1 - Authentication Bypass
Heatmiser Netmonitor 3.03 – HTML Injection
# Exploit Title: Heatmiser Netmonitor 3.03 - HTML Injection
RICOH Web Image Monitor 1.09 – HTML Injection
# Exploit Title: RICOH Web Image Monitor 1.09 - HTML Injection
RICOH SP 4510SF Printer – HTML Injection
# Exploit Title: RICOH SP 4510SF Printer - HTML Injection
MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 – Information Disclosure
# Exploit: MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 - Information Disclosure
Heatmiser Netmonitor 3.03 – Hardcoded Credentials
# Exploit Title: Heatmiser Netmonitor 3.03 - Hardcoded Credentials
AVE DOMINAplus 1.10.x – Authentication Bypass
# Exploit: AVE DOMINAplus 1.10.x - Authentication Bypass
AVE DOMINAplus 1.10.x – Cross-Site Request Forgery (enable/disable alarm)
# Exploit: AVE DOMINAplus 1.10.x - Cross-Site Request Forgery (enable/disable alarm)
AVE DOMINAplus 1.10.x – Unauthenticated Remote Reboot
# Exploit: AVE DOMINAplus 1.10.x - Unauthenticated Remote Reboot
AVE DOMINAplus 1.10.x – Credential Disclosure
# Exploit: AVE DOMINAplus 1.10.x - Credential Disclosure
WEMS BEMS 21.3.1 – Undocumented Backdoor Account
# Exploit: WEMS BEMS 21.3.1 - Undocumented Backdoor Account
XEROX WorkCentre 7830 Printer – Cross-Site Request Forgery (Add Admin)
# Exploit Title: XEROX WorkCentre 7830 Printer - Cross-Site Request Forgery (Add Admin)
XEROX WorkCentre 7855 Printer – Cross-Site Request Forgery (Add Admin)
# Exploit Title: XEROX WorkCentre 7855 Printer - Cross-Site Request Forgery (Add Admin)
Thrive Smart Home 1.1 – Authentication Bypass
# Exploit: Thrive Smart Home 1.1 - Authentication Bypass
XEROX WorkCentre 6655 Printer – Cross-Site Request Forgery (Add Admin)
# Exploit Title: XEROX WorkCentre 6655 Printer - Cross-Site Request Forgery (Add Admin)
elearning-script 1.0 – Authentication Bypass
# Exploit Title: elearning-script 1.0 - Authentication Bypass
HomeAutomation 3.3.2 – Remote Code Execution
# Exploit: HomeAutomation 3.3.2 - Remote Code Execution
HomeAutomation 3.3.2 – Cross-Site Request Forgery (Add Admin)
# Exploit: HomeAutomation 3.3.2 - Cross-Site Request Forgery (Add Admin)
HomeAutomation 3.3.2 – Authentication Bypass
# Exploit: HomeAutomation 3.3.2 - Authentication Bypass
HomeAutomation 3.3.2 – Persistent Cross-Site Scripting
# Exploit: HomeAutomation 3.3.2 - Persistent Cross-Site Scripting
Django < 3.0 < 2.2 < 1.11 - Account Hijack
EDB Note ~ Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/47879.zip
phpMyChat-Plus 1.98 – ‘pmc_username’ Reflected Cross-Site Scripting
# Exploit Title: phpMyChat-Plus 1.98 - 'pmc_username' Reflected Cross-Site Scripting
Deutsche Bahn Ticket Vending Machine Local Kiosk – Privilege Escalation
# Exploit Title: Deutsche Bahn Ticket Vending Machine Local Kiosk - Privilege Escalation
Telerik UI – Remote Code Execution via Insecure Deserialization
See the full write-up at Bishop Fox, CVE-2019-18935: https://know.bishopfox.com/research/cve-2019-18935-remote-code-e...
Rumpus FTP Web File Manager 8.2.9.1 – Reflected Cross-Site Scripting
# Exploit Title: Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting
Xerox AltaLink C8035 Printer – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Xerox AltaLink C8035 Printer - Cross-Site Request Forgery (Add Admin)
Tautulli 2.1.9 – Cross-Site Request Forgery (ShutDown)
# Exploit Title: Tautulli 2.1.9 - Cross-Site Request Forgery (ShutDown)
NopCommerce 4.2.0 – Privilege Escalation
# Vulnerability Title: NopCommerce 4.2.0 - Privilege Escalation
Netgear R6400 – Remote Code Execution
# Exploit Title: Netgear R6400 - Remote Code Execution