webapps

Adobe ColdFusion 2018 – Arbitrary File Upload

# Exploit Title: Unrestricted file upload in Adobe ColdFusion 2018

ThinkPHP 5.0.23/5.1.31 – Remote Code Execution

# Exploit Title: ThinkPHP 5.x < v5.0.23,v5.1.31 Remote Code Execution

WordPress Plugin AutoSuggest 0.24 – ‘wpas_keys’ SQL Injection

# Exploit Title: WP AutoSuggest 0.24 - SQL Injection

HotelDruid 2.3.0 – ‘id_utente_mod’ SQL Injection

# Exploit Title: SQL Injection in HotelDruid version 2.3

Apache OFBiz 16.11.05 – Cross-Site Scripting

# Exploit Title: Apache OFBiz v16.11.05 - Stored Cross-Site Scripting Vulnerability

ZTE ZXHN H168N – Improper Access Restrictions

[*] POC: (CVE-2018-7357 and CVE-2018-7358)

Huawei B315s-22 – Information Leak

#Product Family: LTE

TP-Link wireless router Archer C1200 – Cross-Site Scripting

[+] Unauthenticated

PrinterOn Enterprise 4.1.4 – Arbitrary File Deletion

# Exploit Author: bzyo

DomainMOD 4.11.01 – Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

PrestaShop 1.6.x/1.7.x – Remote Code Execution

Alumni Tracer SMS Notification – SQL Injection / Cross-Site Request Forgery

# Exploit Title: Alumni Tracer SMS Notification - SQL Injection / Cross-Site Request Forgery (Add/Update Admin)

Tourism Website Blog – Remote Code Execution / SQL Injection

# Exploit Title: Tourism Website Blog - Remote Code Execution / SQL Injection

DomainMOD 4.11.01 – ‘DisplayName’ Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

Adiscon LogAnalyzer < 4.1.7 - Cross-Site Scripting

# Exploit Title: Adiscon LogAnalyzer 4.1.7 - Cross-Site Scripting

i-doit CMDB 1.11.2 – Remote Code Execution

# Exploit Title: i-doit CMDB 1.11.2 - Remote Code Execution

HasanMWB 1.0 – SQL Injection

# Exploit Title: HasanMWB 1.0 - SQL Injection

FreshRSS 1.11.1 – Cross-Site Scripting

Multiple Cross-Site Scripting Vulnerabilities in FreshRSS 1.11.1

DomainMOD 4.11.01 – Registrar Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

NUUO NVRMini2 3.9.1 – (Authenticated) Command Injection

# Exploit Title: NUUO NVRMini2 Authenticated Command Injection

DomainMOD 4.11.01 – Custom SSL Fields Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD 4.11.01 – Custom Domain Fields Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

Dolibarr ERP/CRM 8.0.3 – Cross-Site Scripting

# Exploit Title: Dolibarr ERP/CRM

KeyBase Botnet 1.5 – SQL Injection

################################

NEC Univerge Sv9100 WebPro – 6.00 – Predictable Session ID / Clear Text Password Storage

'''

DomainMOD 4.11.01 – Owner name Field Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

Rockwell Automation Allen-Bradley PowerMonitor 1000 – Incorrect Access Control Authentication Bypass

# Exploit Title: Rockwell Automation Allen-Bradley PowerMonitor 1000 - Incorrect Access Control

WordPress Plugin Advanced-Custom-Fields 5.7.7 – Cross-Site Scripting

# Exploit Title: Wordpress Plugins Advanced-custom-fields 5.7.7 - Cross-Site Scripting

Apache Superset < 0.23 - Remote Code Execution

# Exploit Title: Apache Superset < 0.23 - Remote Code Execution

PHP Server Monitor 3.3.1 – Cross-Site Request Forgery

# Exploit Title: PHP Server Monitor 3.3.1 - Cross-Site Request Forgery

Joomla! Component JE Photo Gallery 1.1 – ‘categoryid’ SQL Injection

# Exploit Title: Joomla! Component JE Photo Gallery 1.1 - SQL Injection

PaloAlto Networks Expedition Migration Tool 1.0.106 – Information Disclosure

# Exploit Title: PaloAlto Networks Expedition Migration Tool 1.0.106 - Information Disclosure

Rockwell Automation Allen-Bradley PowerMonitor 1000 – Cross-Site Scripting

# Exploit Title: Rockwell Automation Allen-Bradley PowerMonitor 1000 - Cross-Site Scripting

Fleetco Fleet Maintenance Management 1.2 – Remote Code Execution

# Exploit Title: Fleetco Fleet Maintenance Management 1.2 - Remote Code Execution

PhpSpreadsheet < 1.5.0 - XML External Entity (XXE)

# Product Description

Synaccess netBooter NP-02x/NP-08x 6.8 – Authentication Bypass

Synaccess netBooter NP-02x/NP-08x 6.8 Authentication Bypass

Schneider Electric PLC – Session Calculation Authentication Bypass

#!/usr/bin/env python

Zyxel VMG1312-B10D 5.13AAXA.8 – Directory Traversal

# Exploit Title: Zyxel VMG1312-B10D 5.13AAXA.8 - Directory Traversal

No-Cms 1.0 – ‘order_by’ SQL Injection

# Exploit Title: No-Cms 1.0 - 'order_by' SQL Injection

Ticketly 1.0 – ‘kind_id’ SQL Injection

# Exploit Title: Ticketly 1.0 – Multiple SQL Injection

WordPress Plugin Easy Testimonials 3.2 – Cross-Site Scripting

# Exploit Title: Wordpress Plugins Easy Testimonials 3.2 - Cross-Site Scripting

Ricoh myPrint 2.9.2.4 – Hard-Coded Credentials

# Exploit Title: Ricoh myPrint 2.9.2.4 - Hard-Coded Credentials

WebOfisi E-Ticaret V4 – ‘urun’ SQL Injection

# Exploit Title: WebOfisi E-Ticaret V4 - 'urun' SQL Injection

WordPress Theme CherryFramework 3.1.4 – Backup File Download

# Exploit Title: Wordpress CherryFramework Themes 3.1.4 - Backup File Download

Ticketly 1.0 – ‘name’ SQL Injection

# Exploit Title: Ticketly 1.0 – 'name' SQL Injection

Synaccess netBooter NP-0801DU 7.4 – Cross-Site Request Forgery (Add Admin)

# Title: Synaccess netBooter NP-0801DU 7.4 - Cross-Site Request Forgery (Add Admin)

Ticketly 1.0 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: Ticketly 1.0 - Cross-Site Request Forgery (Add Admin)

DomainMOD 4.11.01 – ‘raid’ Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

Helpdezk 1.1.1 – Arbitrary File Upload

# Exploit Title: Helpdezk 1.1.1 - Arbitrary File Upload

Warranty Tracking System 11.06.3 – ‘txtCustomerCode’ SQL Injection

# Exploit Title: Warranty Tracking System 11.06.3 - 'txtCustomerCode' SQL Injection