Cobub Razor 0.7.2 – Cross-Site Request Forgery
# Exploit Title: Cobub Razor 0.7.2 Cross Site Request Forgery
webapps
webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
DotNetNuke DNNarticle Module 11 – Directory Traversal
##############################
FiberHome VDSL2 Modem HG 150-UB – Authentication Bypass
# Exploit Title: FiberHome VDSL2 Modem HG 150-UB Authentication Bypass
WordPress Plugin Activity Log 2.4.0 – Cross-Site Scripting
# Exploit Title : Activity Log Wordpress Plugin Stored Cross Site Scripting (XSS)
GetSimple CMS 3.3.13 – Cross-Site Scripting
#######################################
Z-Blog 1.5.1.1740 – Full Path Disclosure
# Exploit Title: Z-Blog 1.5.1.1740 Web Site physical path leakage Vulnerability
Z-Blog 1.5.1.1740 – Cross-Site Scripting
# Exploit Title: Z-Blog 1.5.1.1740 XSS Vulnerability
YzmCMS 3.6 – Cross-Site Scripting
# Exploit Title: YzmCMS 3.6 XSS Vulnerability
Joomla! Component JS Jobs 1.2.0 – Cross-Site Scripting
#######################################
MyBB Plugin Downloads 2.0.3 – Cross-Site Scripting
# Exploit Title: MyBB Downloads Plugin v2.0.3 - Persistent XSS
OpenCMS 10.5.3 – Cross-Site Scripting
# Exploit Title: OpenCMS 10.5.3 Stored Cross Site Scripting Vulnerability
OpenCMS 10.5.3 – Cross-Site Request Forgery
# Exploit Title: OpenCMS 10.5.3 Multiple Cross Site Request Forgery Vulnerabilities
DLink DIR-601 – Admin Password Disclosure
# Exploit Title: DLink DIR-601 Unauthenticated Admin password disclosure
VideoFlow Digital Video Protection (DVP) 2.10 – Hard-Coded Credentials
VideoFlow Digital Video Protection DVP 10 Authenticated Root Remote Code Execution
VideoFlow Digital Video Protection (DVP) 2.10 – Directory Traversal
VideoFlow Digital Video Protection DVP 10 Authenticated Directory Traversal
WampServer 3.1.2 – Cross-Site Request Forgery
# Exploit Title: WampServer 3.1.2 CSRF to add or delete any virtual hostsremotely
WampServer 3.1.1 – Cross-Site Scripting / Cross-Site Request Forgery
# Exploit Title: WampServer 3.1.1 XSS via CSRF
Frog CMS 0.9.5 – Cross-Site Request Forgery (Add User)
# Exploit Title: Cross Site Request Forgery- Frog CMS
D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router – Authentication Bypass
# Exploit Title: D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Route Authentication Bypass
osCommerce 2.3.4.1 – Remote Code Execution
# Exploit Title: osCommerce 2.3.4.1 Remote Code Execution
WordPress Plugin WP Security Audit Log 3.1.1 – Sensitive Information Disclosure
# Exploit Title: WP Security Audit Log Plugin, Sensitive Information Disclosure
Joomla! Component AcySMS 3.5.0 – CSV Macro Injection
# Exploit Title: Joomla! Component AcySMS 3.5.0 CSV Macro Injection
Joomla! Component Acymailing Starter 5.9.5 – CSV Macro Injection
# Exploit Title: Joomla! Component Acymailing Starter 5.9.5 CSV Macro
Homematic CCU2 2.29.23 – Remote Command Execution
#!/usr/bin/ruby
WordPress Plugin Contact Form 7 to Database Extension 2.10.32 – CSV Injection
# Exploit Title : Contact Form 7 to Database Extension Wordpress Plugin CSV Injection
WordPress Plugin Relevanssi 4.0.4 – Reflected Cross-Site Scripting
# Exploit Title : Relevanssi Wordpress Search Plugin Reflected Cross Site Scripting (XSS)
Homematic CCU2 2.29.23 – Arbitrary File Write
#!/usr/bin/ruby
Open-AuditIT Professional 2.1 – Cross-Site Request Forgery
# Exploit Title: Open-AuditIT Professional 2.1 - Cross-Site Request Forgery (CSRF)
Open-AuditIT Professional 2.1 – Cross-Site Scripting
# Exploit Title: Open-AuditIT Professional 2.1 - Stored Cross site scripting (XSS)
Microsoft Windows Remote Assistance – XML External Entity Injection
# Exploit Title: Microsoft Windows Remote Assistance XXE
TwonkyMedia Server 7.0.11-8.5 – Persistent Cross-Site Scripting
---------------------------------------------------------------------
DLINK DCS-5020L – Remote Code Execution (PoC)
“The DCS-5020L Wireless N Day & Night Pan/Tilt Cloud Camera is a day/night network camera that easily connects to you...
Laravel Log Viewer < 0.13.0 - Local File Download
# Exploit Title: Laravel log viewer by rap2hpoutre local file download (LFD)
WordPress Plugin Site Editor 1.1.1 – Local File Inclusion
Product: Site Editor Wordpress Plugin - https://wordpress.org/plugins/site-editor/
MyBB Plugin Last User’s Threads in Profile Plugin 1.2 – Persistent Cross-Site Scripting
# Exploit Title: MyBB Last User's Threads in Profile Plugin v1.2 - Persistent XSS
TL-WR720N 150Mbps Wireless N Router – Cross-Site Request Forgery
Exploit Title: TL-WR720N 150Mbps Wireless N Router - CSRF