webapps

Rocket.Chat 2.1.0 – Cross-Site Scripting

# Title: Rocket.Chat 2.1.0 - Cross-Site Scripting

Joomla! 3.4.6 – Remote Code Execution

# Exploit Title: Joomla! 3.4.6 - Remote Code Execution

Restaurant Management System 1.0 – Remote Code Execution

# Exploit Title: Restaurant Management System 1.0 - Remote Code Execution

WordPress Plugin Popup Builder 3.49 – Persistent Cross-Site Scripting

# Exploit Title: Wordpress Popup Builder 3.49 - Persistent Cross-Site Scripting

WordPress Plugin Soliloquy Lite 2.5.6 – Persistent Cross-Site Scripting

# Exploit Title: Wordpress Soliloquy Lite 2.5.6 - Persistent Cross-Site Scripting

WordPress Plugin FooGallery 1.8.12 – Persistent Cross-Site Scripting

# Exploit Title: Wordpress FooGallery 1.8.12 - Persistent Cross-Site Scripting

Accounts Accounting 7.02 – Persistent Cross-Site Scripting

# Exploit Title: Express Accounts Accounting 7.02 - Persistent Cross-Site Scripting

Bolt CMS 3.6.10 – Cross-Site Request Forgery

# Exploit Title: Bolt CMS 3.6.10 - Cross-Site Request Forgery

WordPress Core < 5.2.3 - Viewing Unauthenticated/Password/Private Posts

So far we know that adding `?static=1` to a wordpress URL should leak its secret content

Apache Httpd mod_rewrite – Open Redirects

Normal URLs like http://redirect.local/test will be forwared to https://redirect.local/test. But by using newlines (C...

Apache Httpd mod_proxy – Error Page Cross-Site Scripting

The trick is to use a vertical tab (`%09`) and then place another URL in the tag. So once a victim clicks the link on...

Kirona-DRS 5.5.3.5 – Information Disclosure

# Exploit Title: Kirona-DRS 5.5.3.5 - Information Disclosure

Ajenti 2.1.31 – Remote Code Execution

# Title: Ajenti 2.1.31 - Remote Code Execution

Express Invoice 7.12 – ‘Customer’ Persistent Cross-Site Scripting

# Exploit Title: Express Invoice 7.12 - 'Customer' Persistent Cross-Site Scripting

WordPress Plugin Arforms 3.7.1 – Directory Traversal

# Exploit Title: WordPress Arforms 3.7.1 - Directory Traversal

Intelbras Router WRN150 1.0.18 – Persistent Cross-Site Scripting

# Exploit Title: Intelbras Router WRN150 1.0.18 - Persistent Cross-Site Scripting

TP-Link TL-WR1043ND 2 – Authentication Bypass

# Exploit Title: TP-Link TL-WR1043ND 2 - Authentication Bypass

SMA Solar Technology AG Sunny WebBox device – 1.6 – Cross-Site Request Forgery

# Exploit Title: SMA Solar Technology AG Sunny WebBox device - 1.6 - Cross-Site Request Forgery

Zabbix 4.4 – Authentication Bypass

# Exploit Title: Zabbix 4.4 - Authentication Bypass

vBulletin 5.0 < 5.5.4 - 'updateAvatar' Authenticated Remote Code Execution

';

IBM Bigfix Platform 9.5.9.62 – Arbitrary File Upload

# Exploit Title: IBM Bigfix Platform 9.5.9.62 - Arbitrary File Upload

Subrion 4.2.1 – ‘Email’ Persistant Cross-Site Scripting

# Title: Subrion 4.2.1 - 'Email' Persistant Cross-Site Scripting

Zabbix 4.2 – Authentication Bypass

# Exploit Title: Zabbix 4.2 - Authentication Bypass

Joomla! 3.4.6 – ‘configuration.php’ Remote Code Execution

# Exploit Title: Joomla 3.4.6 - 'configuration.php' Remote Code Execution

LabCollector 5.423 – SQL Injection

# Exploit Title: LabCollector (Laboratory Information System) 5.423 - Multiples SQL Injection

PHP 7.0 < 7.3 (Unix) - 'gc' disable_functions Bypass

AnchorCMS < 0.12.3a - Information Disclosure

# Exploit Title: Information disclosure (MySQL password) in error log

mintinstall 7.9.9 – Code Execution

# Exploit Title: mintinstall (aka Software Manager) object injection

Detrix EDMS 1.2.3.1505 – SQL Injection

#!/usr/bin/php

DotNetNuke 9.3.2 – Cross-Site Scripting

Exploit Title: "Display Name" Stored Unauthenticated XSS in DNN v9.3.2

DotNetNuke < 9.4.0 - Cross-Site Scripting

# Exploit Title: Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0

WordPress Plugin ARforms 3.7.1 – Arbitrary File Deletion

#!/usr/bin/env ruby

TheSystem 1.0 – Command Injection

# Exploit Title: thesystem Command Injection

thesystem 1.0 – Cross-Site Scripting

# Exploit Title: thesystem Persistent XSS

phpIPAM 1.4 – SQL Injection

#!/usr/bin/env python3

vBulletin 5.x – Remote Command Execution (Metasploit)

##

PHP 7.1 < 7.3 - 'json serializer' disable_functions Bypass

WordPress Theme Zoner Real Estate – 4.1.1 Persistent Cross-Site Scripting

# Exploit Title: WordPress Theme Zoner Real Estate - 4.1.1 Persistent Cross-Site Scripting

V-SOL GPON/EPON OLT Platform 2.03 – Remote Privilege Escalation

# Exploit Title: V-SOL GPON/EPON OLT Platform 2.03 - Remote Privilege Escalation

V-SOL GPON/EPON OLT Platform 2.03 – Cross-Site Request Forgery

# Exploit Title: V-SOL GPON/EPON OLT Platform 2.03 - Cross-Site Request Forgery

V-SOL GPON/EPON OLT Platform 2.03 – Unauthenticated Configuration Download

# Title: V-SOL GPON/EPON OLT Platform 2.03 - Unauthenticated Configuration Download

thesystem App 1.0 – ‘username’ SQL Injection

# Exploit Title: thesystem App 1.0 - 'username' SQL Injection

thesystem App 1.0 – Persistent Cross-Site Scripting

# Exploit Title: thesystem App 1.0 - Persistent Cross-Site Scripting

thesystem App 1.0 – ‘server_name’ SQL Injection

# Exploit Title: thesystem 1.0 - 'server_name' SQL Injection

InoERP 0.7.2 – Persistent Cross-Site Scripting

# Exploit Title: InoERP 0.7.2 - Persistent Cross-Site Scripting

citecodecrashers Pic-A-Point 1.1 – ‘Consignment’ SQL Injection

# Exploit Title: citecodecrashers Pic-A-Point 1.1 - 'Consignment' SQL Injection

inoERP 4.15 – ‘download’ SQL Injection

# Exploit Title: inoERP 4.15 - 'download' SQL Injection

all-in-one-seo-pack 3.2.7 – Persistent Cross-Site Scripting

# Exploit Title: all-in-one-seo-pack 3.2.7 - Persistent Cross-Site Scripting

Duplicate-Post 3.2.3 – Persistent Cross-Site Scripting

# Exploit Title: Duplicate-Post 3.2.3 - Persistent Cross-Site Scripting

Chamillo LMS 1.11.8 – Arbitrary File Upload

# Exploit Title: Chamillo LMS 1.11.8 - Arbitrary File Upload