Atlassian Confluence 6.15.1 – Directory Traversal (Metasploit)
# Exploit Title: Atlassian Confluence 6.15.1 - Directory Traversal (Metasploit)
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Prima Access Control 2.3.35 – Arbitrary File Upload
# Exploit Title: Prima Access Control 2.3.35 - Arbitrary File Upload
Prima Access Control 2.3.35 – ‘HwName’ Persistent Cross-Site Scripting
# Exploit Title: Prima Access Control 2.3.35 - 'HwName' Persistent Cross-Site Scripting
CBAS-Web 19.0.0 – ‘id’ Boolean-based Blind SQL Injection
# Exploit Title: CBAS-Web 19.0.0 - 'id' Boolean-based Blind SQL Injection
CBAS-Web 19.0.0 – Username Enumeration
# Exploit Title: CBAS-Web 19.0.0 - Username Enumeration
CBAS-Web 19.0.0 – Cross-Site Request Forgery (Add Super Admin)
# Exploit Title: CBAS-Web 19.0.0 - Cross-Site Request Forgery (Add Super Admin)
CBAS-Web 19.0.0 – Remote Code Execution
# Exploit Title: CBAS-Web 19.0.0 - Remote Code Execution
eMerge50P 5000P 4.6.07 – Remote Code Execution
# Exploit Title: eMerge50P 5000P 4.6.07 - Remote Code Execution
eMerge E3 1.00-06 – ‘layout’ Reflected Cross-Site Scripting
# Exploit Title: eMerge E3 1.00-06 - 'layout' Reflected Cross-Site Scripting
eMerge E3 1.00-06 – Arbitrary File Upload
# Exploit Title: eMerge E3 1.00-06 - Arbitrary File Upload
Atlassian Confluence 6.15.1 – Directory Traversal
# Exploit Title: Atlassian Confluence 6.15.1 - Directory Traversal
eMerge E3 1.00-06 – Cross-Site Request Forgery
# Exploit Title: eMerge E3 1.00-06 - Cross-Site Request Forgery
eMerge E3 1.00-06 – Remote Code Execution
# Exploit Title: eMerge E3 1.00-06 - Remote Code Execution
eMerge E3 1.00-06 – Privilege Escalation
# Exploit Title: eMerge E3 1.00-06 - Privilege Escalation
eMerge E3 1.00-06 – Unauthenticated Directory Traversal
# Exploit Title: eMerge E3 1.00-06 - Unauthenticated Directory Traversal
Computrols CBAS-Web 19.0.0 – ‘username’ Reflected Cross-Site Scripting
# Exploit Title: Computrols CBAS-Web 19.0.0 - 'username' Reflected Cross-Site Scripting
Adrenalin Core HCM 5.4.0 – ‘prntDDLCntrlName’ Reflected Cross-Site Scripting
# Exploit Title: Adrenalin Core HCM 5.4.0 - 'prntDDLCntrlName' Reflected Cross-Site Scripting
Prima FlexAir Access Control 2.3.38 – Remote Code Execution
# Exploit Title: Prima FlexAir Access Control 2.3.38 - Remote Code Execution
Adrenalin Core HCM 5.4.0 – ‘strAction’ Reflected Cross-Site Scripting
# Exploit Title: Adrenalin Core HCM 5.4.0 - 'strAction' Reflected Cross-Site Scripting
Nextcloud 17 – Cross-Site Request Forgery
# Exploit Title: Nextcloud 17 - Cross-Site Request Forgery
Adive Framework 2.0.7 – Privilege Escalation
# Exploit Title: Adive Framework 2.0.7 - Privilege Escalation
Jenkins build-metrics plugin 1.3 – ‘label’ Cross-Site Scripting
# Exploit Title: Jenkins build-metrics plugin 1.3 - 'label' Cross-Site Scripting
Smartwares HOME easy 1.0.9 – Database Backup Information Disclosure
# Title: Smartwares HOME easy 1.0.9 - Database Backup Information Disclosure
Smartwares HOME easy 1.0.9 – Client-Side Authentication Bypass
# Exploit Title: Smartwares HOME easy 1.0.9 - Client-Side Authentication Bypass
SD.NET RIM 4.7.3c – ‘idtyp’ SQL Injection
# Exploit Title: SD.NET RIM 4.7.3c - 'idtyp' SQL Injection
html5_snmp 1.11 – ‘Router_ID’ SQL Injection
# Exploit Title: html5_snmp 1.11 - 'Router_ID' SQL Injection
html5_snmp 1.11 – ‘Remark’ Persistent Cross-Site Scripting
# Exploit Title: html5_snmp 1.11 - 'Remark' Persistent Cross-Site Scripting
rimbalinux AhadPOS 1.11 – ‘alamatCustomer’ SQL Injection
# Exploit Title: rimbalinux AhadPOS 1.11 - 'alamatCustomer' SQL Injection
thrsrossi Millhouse-Project 1.414 – ‘content’ Persistent Cross-Site Scripting
# Exploit Title: thrsrossi Millhouse-Project 1.414 - 'content' Persistent Cross-Site Scripting
thejshen Globitek CMS 1.4 – ‘id’ SQL Injection
# Exploit Title: thejshen Globitek CMS 1.4 - 'id' SQL Injection
Apache Solr 8.2.0 – Remote Code Execution
# Title: Apache Solr 8.2.0 - Remote Code Execution
ownCloud 10.3.0 stable – Cross-Site Request Forgery
# Exploit Title: ownCloud 10.3.0 stable - Cross-Site Request Forgery
TheJshen contentManagementSystem 1.04 – ‘id’ SQL Injection
# Exploit Title: TheJshen contentManagementSystem 1.04 - 'id' SQL Injection
WordPress Plugin Google Review Slider 6.1 – ‘tid’ SQL Injection
# Exploit Title: Wordpress Plugin Google Review Slider 6.1 - 'tid' SQL Injection
iSeeQ Hybrid DVR WH-H4 2.0.0.P – (get_jpeg) Stream Disclosure
# Title: iSeeQ Hybrid DVR WH-H4 2.0.0.P - (get_jpeg) Stream Disclosure
Citrix StoreFront Server 7.15 – XML External Entity Injection
# Exploit Title: Citrix StoreFront Server 7.15 - XML External Entity Injection
Ajenti 2.1.31 – Remote Code Exection (Metasploit)
# Exploit Title: Ajenti 2.1.31 - Remote Code Exection (Metasploit)
WordPress Core 5.2.4 – Cross-Origin Resource Sharing
# Exploit Title: Wordpress 5.2.4 - Cross-Origin Resource Sharing
rConfig 3.9.2 – Remote Code Execution
# Exploit Title: rConfig 3.9.2 - Remote Code Execution
PHP-FPM + Nginx – Remote Code Execution
# PHuiP-FPizdaM
delpino73 Blue-Smiley-Organizer 1.32 – ‘datetime’ SQL Injection
Exploit Title: delpino73 Blue-Smiley-Organizer 1.32 - 'datetime' SQL Injection
waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 – ‘description’ Cross-Site Scripting
Exploit Title: waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 - 'description' Cross-Site Scripting
Part-DB 0.4 – Authentication Bypass
# Exploit Title: Part-DB 0.4 - Authentication Bypass
waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 – ‘start’ SQL Injection
Exploit Title: waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 - 'start' SQL Injection
Intelbras Router WRN150 1.0.18 – Cross-Site Request Forgery
Exploit Title: Intelbras Router WRN150 1.0.18 - Cross-Site Request Forgery
ClonOs WEB UI 19.09 – Improper Access Control
# Exploit Title: ClonOs WEB UI 19.09 - Improper Access Control
AUO SunVeillance Monitoring System 1.1.9e – ‘MailAdd’ SQL Injection
# Exploit Title: AUO SunVeillance Monitoring System 1.1.9e - 'MailAdd' SQL Injection
AUO SunVeillance Monitoring System 1.1.9e – Incorrect Access Control
# Exploit Title: AUO SunVeillance Monitoring System 1.1.9e - Incorrect Access Control
WordPress Plugin Sliced Invoices 3.8.2 – ‘post’ SQL Injection
# Exploit Title: Wordpress Sliced Invoices 3.8.2 - 'post' SQL Injection
Joomla! 3.4.6 – Remote Code Execution (Metasploit)
# Exploit Title: Joomla! 3.4.6 - Remote Code Execution (Metasploit)