Exploit-DB
989122095f
DB: 2025-04-04
...
11 changes to exploits/shellcodes/ghdb
AppSmith 1.47 - Remote Code Execution (RCE)
ollama 0.6.4 - Server Side Request Forgery (SSRF)
Vite 6.2.2 - Arbitrary File Read
ABB Cylon Aspect 3.07.02 - File Disclosure (Authenticated)
Nagios Log Server 2024R1.3.1 - Stored XSS
Webmin Usermin 2.100 - Username Enumeration
ABB Cylon Aspect 3.07.01 - Hard-coded Default Credentials
openSIS 9.1 - SQLi (Authenticated)
Microsoft Office 2019 MSO Build 1808 - NTLMv2 Hash Disclosure
ProSSHD 1.2 - Denial of Service (DOS)
2025-04-04 00:16:25 +00:00
Exploit-DB
c773b14d1c
DB: 2025-04-03
...
6 changes to exploits/shellcodes/ghdb
Mitel mitel-cs018 - Call Data Information Disclosure
SAP NetWeaver - 7.53 - HTTP Request Smuggling
ABB Cylon Aspect 3.08.01 - Remote Code Execution (RCE)
ABB Cylon Aspect 3.08.01 - Arbitrary File Delete
Elaine's Realtime CRM Automation 6.18.17 - Reflected XSS
ProSSHD 1.2 - Denial of Service (DOS)
2025-04-03 00:16:28 +00:00
Exploit-DB
6805102b8a
DB: 2025-03-30
...
3 changes to exploits/shellcodes/ghdb
XWiki Standard 14.10 - Remote Code Execution (RCE)
Solstice Pod 6.2 - API Session Key Extraction via API Endpoint
2025-03-30 00:16:28 +00:00
Exploit-DB
353059c64d
DB: 2025-03-29
...
6 changes to exploits/shellcodes/ghdb
Progress Telerik Report Server 2024 Q1 (10.0.24.305) - Authentication Bypass
Sonatype Nexus Repository 3.53.0-01 - Path Traversal
CodeCanyon RISE CRM 3.7.0 - SQL Injection
Litespeed Cache 6.5.0.1 - Authentication Bypass
Rejetto HTTP File Server 2.3m - Remote Code Execution (RCE)
2025-03-29 00:16:38 +00:00
Exploit-DB
15b516383f
DB: 2025-03-28
...
4 changes to exploits/shellcodes/ghdb
KubeSphere 3.4.0 - Insecure Direct Object Reference (IDOR)
MoziloCMS 3.0 - Remote Code Execution (RCE)
X2CRM 8.5 - Stored Cross-Site Scripting (XSS)
2025-03-28 00:16:32 +00:00
Exploit-DB
51ef1693d4
DB: 2025-03-23
...
4 changes to exploits/shellcodes/ghdb
Aztech DSL5005EN Router - 'sysAccess.asp' Admin Password Change (Unauthenticated)
TeamPass 3.0.0.21 - SQL Injection
Microsoft Windows - NTLM Hash Leak Malicious Windows Theme
2025-03-23 00:16:32 +00:00
Exploit-DB
c185b4853b
DB: 2025-03-22
...
2 changes to exploits/shellcodes/ghdb
Jasmin Ransomware - SQL Injection Login Bypass
2025-03-22 00:16:33 +00:00
Exploit-DB
40ceb13974
DB: 2025-03-21
...
3 changes to exploits/shellcodes/ghdb
FluxBB 1.5.11 - Stored Cross-Site Scripting (XSS)
JUX Real Estate 3.4.0 - SQL Injection
2025-03-21 00:16:35 +00:00
Exploit-DB
04fa5ba95d
DB: 2025-03-20
...
6 changes to exploits/shellcodes/ghdb
Gitea 1.24.0 - HTML Injection
Extensive VC Addons for WPBakery page builder 1.9.0 - Remote Code Execution (RCE)
Loaded Commerce 6.6 - Client-Side Template Injection(CSTI)
TranzAxis 3.2.41.10.26 - Stored Cross-Site Scripting (XSS) (Authenticated)
VeeVPN 1.6.1 - Unquoted Service Path
2025-03-20 00:16:32 +00:00
Exploit-DB
b42ec1de46
DB: 2025-03-19
...
2 changes to exploits/shellcodes/ghdb
Chamilo LMS 1.11.24 - Remote Code Execution (RCE)
2025-03-19 00:16:27 +00:00
Exploit-DB
731ce583a5
DB: 2024-11-26
...
3 changes to exploits/shellcodes/ghdb
AEGON LIFE v1.0 Life Insurance Management System - Unauthenticated Remote Code Execution (RCE)
2024-11-26 00:16:28 +00:00
Exploit-DB
773f5f480c
DB: 2024-11-16
...
2 changes to exploits/shellcodes/ghdb
SOPlanning 1.52.01 (Simple Online Planning Tool) - Remote Code Execution (RCE) (Authenticated)
2024-11-16 00:16:32 +00:00
Exploit-DB
b86fb6e1b7
DB: 2024-10-02
...
4 changes to exploits/shellcodes/ghdb
dizqueTV 1.5.3 - Remote Code Execution (RCE)
reNgine 2.2.0 - Command Injection (Authenticated)
openSIS 9.1 - SQLi (Authenticated)
2024-10-02 00:16:50 +00:00
Exploit-DB
809d81619e
DB: 2024-08-24
...
4 changes to exploits/shellcodes/ghdb
Calibre-web 0.6.21 - Stored XSS
Helpdeskz v2.0.2 - Stored XSS
2024-08-24 00:16:35 +00:00
Exploit-DB
859e322e5c
DB: 2024-07-03
...
13 changes to exploits/shellcodes/ghdb
ASUS ASMB8 iKVM 1.14.51 - Remote Code Execution (RCE) & SSH Access
Zyxel IKE Packet Decoder - Unauthenticated Remote Code Execution (Metasploit)
Rebar3 3.13.2 - Command Injection
Craft CMS Logs Plugin 3.0.3 - Path Traversal (Authenticated)
ZwiiCMS 12.2.04 - Remote Code Execution (Authenticated)
Wipro Holmes Orchestrator 20.4.1 - Log File Disclosure
2024-07-03 00:16:27 +00:00
Exploit-DB
ec14967376
DB: 2024-07-02
...
5 changes to exploits/shellcodes/ghdb
Azon Dominator Affiliate Marketing Script - SQL Injection
Customer Support System 1.0 - Stored XSS
Microweber 2.0.15 - Stored XSS
Xhibiter NFT Marketplace 1.10.2 - SQL Injection
2024-07-02 00:16:21 +00:00
Exploit-DB
2680e71d44
DB: 2024-06-27
...
5 changes to exploits/shellcodes/ghdb
SolarWinds Platform 2024.1 SR1 - Race Condition
Automad 2.0.0-alpha.4 - Stored Cross-Site Scripting (XSS)
Flatboard 3.2 - Stored Cross-Site Scripting (XSS) (Authenticated)
Poultry Farm Management System v1.0 - Remote Code Execution (RCE)
2024-06-27 00:16:25 +00:00
Exploit-DB
1064b5c455
DB: 2024-06-15
...
12 changes to exploits/shellcodes/ghdb
Zyxel IKE Packet Decoder - Unauthenticated Remote Code Execution (Metasploit)
Rebar3 3.13.2 - Command Injection
AEGON LIFE v1.0 Life Insurance Management System - SQL injection vulnerability.
AEGON LIFE v1.0 Life Insurance Management System - Stored cross-site scripting (XSS)
AEGON LIFE v1.0 Life Insurance Management System - Unauthenticated Remote Code Execution (RCE)
Boelter Blue System Management 1.3 - SQL Injection
Carbon Forum 5.9.0 - Stored XSS
PHP < 8.3.8 - Remote Code Execution (Unauthenticated) (Windows)
WP-UserOnline 2.88.0 - Stored Cross Site Scripting (XSS) (Authenticated)
XMB 1.9.12.06 - Stored XSS
ZwiiCMS 12.2.04 - Remote Code Execution (Authenticated)
2024-06-15 00:16:21 +00:00
Exploit-DB
a99f08beda
DB: 2024-06-08
...
2 changes to exploits/shellcodes/ghdb
Backdrop CMS 1.27.1 - Remote Command Execution (RCE)
Backdrop CMS 1.27.1 - Authenticated Remote Command Execution (RCE)
2024-06-08 00:16:25 +00:00
Exploit-DB
8a32e340d5
DB: 2024-06-04
...
8 changes to exploits/shellcodes/ghdb
Sitefinity 15.0 - Cross-Site Scripting (XSS)
appRain CMF 4.0.5 - Remote Code Execution (RCE) (Authenticated)
CMSimple 5.15 - Remote Code Execution (RCE) (Authenticated)
Dotclear 2.29 - Remote Code Execution (RCE)
Monstra CMS 3.0.4 - Remote Code Execution (RCE)
Serendipity 2.5.0 - Remote Code Execution (RCE)
WBCE CMS v1.6.2 - Remote Code Execution (RCE)
2024-06-04 00:16:25 +00:00
Exploit-DB
ea4df5672e
DB: 2024-06-02
...
6 changes to exploits/shellcodes/ghdb
ASUS ASMB8 iKVM 1.14.51 - Remote Code Execution (RCE) & SSH Access
Akaunting 3.1.8 - Server-Side Template Injection (SSTI)
Craft CMS Logs Plugin 3.0.3 - Path Traversal (Authenticated)
FreePBX 16 - Remote Code Execution (RCE) (Authenticated)
Wipro Holmes Orchestrator 20.4.1 - Log File Disclosure
2024-06-02 00:16:32 +00:00
Exploit-DB
3ac07794c9
DB: 2024-06-01
...
7 changes to exploits/shellcodes/ghdb
Aquatronica Control System 5.1.6 - Information Disclosure
Check Point Security Gateway - Information Disclosure (Unauthenticated)
changedetection < 0.45.20 - Remote Code Execution (RCE)
BWL Advanced FAQ Manager 2.0.3 - Authenticated SQL Injection
ElkArte Forum 1.1.9 - Remote Code Execution (RCE) (Authenticated)
iMLog < 1.307 - Persistent Cross Site Scripting (XSS)
2024-06-01 00:16:48 +00:00
Exploit-DB
094f6f9304
DB: 2024-05-20
...
7 changes to exploits/shellcodes/ghdb
Apache OFBiz 18.12.12 - Directory Traversal
Backdrop CMS 1.27.1 - Remote Command Execution (RCE)
htmlLawed 1.2.5 - Remote Code Execution (RCE)
PopojiCMS 2.0.1 - Remote Command Execution (RCE)
Rocket LMS 1.9 - Persistent Cross Site Scripting (XSS)
Wordpress Theme XStore 9.3.8 - SQLi
2024-05-20 00:16:24 +00:00
Exploit-DB
323c36e831
DB: 2024-05-16
...
2 changes to exploits/shellcodes/ghdb
Gibbon LMS < v26.0.00 - Authenticated RCE
2024-05-16 00:16:39 +00:00
Exploit-DB
9d17a3d6ca
DB: 2024-05-14
...
10 changes to exploits/shellcodes/ghdb
CrushFTP < 11.1.0 - Directory Traversal
Apache mod_proxy_cluster - Stored XSS
CE Phoenix Version 1.0.8.20 - Stored XSS
Chyrp 2.5.2 - Stored Cross-Site Scripting (XSS)
Leafpub 1.1.9 - Stored Cross-Site Scripting (XSS)
Prison Management System - SQL Injection Authentication Bypass
PyroCMS v3.0.1 - Stored XSS
Plantronics Hub 3.25.1 - Arbitrary File Read
2024-05-14 00:16:26 +00:00
Exploit-DB
edacab1df2
DB: 2024-05-09
...
3 changes to exploits/shellcodes/ghdb
iboss Secure Web Gateway - Stored Cross-Site Scripting (XSS)
Clinic Queuing System 1.0 - RCE
2024-05-09 00:16:23 +00:00
Exploit-DB
b8a68091fe
DB: 2024-05-05
...
7 changes to exploits/shellcodes/ghdb
Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 - Authentication Bypass
Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link - Authentication Bypass
Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link - Device Config Disclosure
Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 - Authentication Bypass
Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 - Device Config Disclosure
Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 - Device Config Disclosure
2024-05-05 00:16:37 +00:00
Exploit-DB
9eb5c7b425
DB: 2024-04-22
...
7 changes to exploits/shellcodes/ghdb
Palo Alto PAN-OS < v11.1.2-h3 - Command Injection and Arbitrary File Creation
FlatPress v1.3 - Remote Command Execution
Laravel Framework 11 - Credential Leakage
SofaWiki 3.9.2 - Remote Command Execution (RCE) (Authenticated)
Wordpress Plugin Background Image Cropper v1.2 - Remote Code Execution
Flowise 1.6.5 - Authentication Bypass
2024-04-22 00:16:25 +00:00
Exploit-DB
27ecd9e84b
DB: 2024-04-16
...
5 changes to exploits/shellcodes/ghdb
Jenkins 2.441 - Local File Inclusion
OpenClinic GA 5.247.01 - Information Disclosure
OpenClinic GA 5.247.01 - Path Traversal (Authenticated)
djangorestframework-simplejwt 5.3.1 - Information Disclosure
2024-04-16 00:16:46 +00:00
Exploit-DB
b59144d74e
DB: 2024-04-14
...
6 changes to exploits/shellcodes/ghdb
BMC Compuware iStrobe Web - 20.13 - Pre-auth RCE
Online Fire Reporting System OFRS - SQL Injection Authentication Bypass
Savsoft Quiz v6.0 Enterprise - Stored XSS
Stock Management System v1.0 - Unauthenticated SQL Injection
2024-04-14 00:16:33 +00:00
Exploit-DB
aa67db6cea
DB: 2024-04-13
...
15 changes to exploits/shellcodes/ghdb
MinIO < 2024-01-31T20-20-33Z - Privilege Escalation
PrusaSlicer 2.6.1 - Arbitrary code execution
GUnet OpenEclass E-learning platform 3.15 - 'certbadge.php' Unrestricted File Upload
HTMLy Version v2.9.6 - Stored XSS
Moodle 3.10.1 - Authenticated Blind Time-Based SQL Injection - _sort_ parameter
PopojiCMS Version 2.0.1 - Remote Command Execution
Quick CMS v6.7 en 2023 - 'password' SQLi
Service Provider Management System v1.0 - SQL Injection
WBCE 1.6.0 - Unauthenticated SQL injection
WBCE CMS Version 1.6.1 - Remote Command Execution (Authenticated)
Wordpress Plugin Playlist for Youtube 1.32 - Stored Cross-Site Scripting (XSS)
Wordpress Plugin WP Video Playlist 1.1.1 - Stored Cross-Site Scripting (XSS)
Ray OS v2.6.3 - Command Injection RCE(Unauthorized)
Terratec dmx_6fire USB - Unquoted Service Path
2024-04-13 00:16:27 +00:00
Exploit-DB
034fafa3fd
DB: 2024-04-09
...
8 changes to exploits/shellcodes/ghdb
Positron Broadcast Signal Processor TRA7005 v1.20 - Authentication Bypass
Best Student Result Management System v1.0 - Multiple SQLi
Daily Expense Manager 1.0 - 'term' SQLi
Human Resource Management System v1.0 - Multiple SQLi
Open Source Medicine Ordering System v1.0 - SQLi
Wordpress Theme Travelscape v1.0.3 - Arbitrary File Upload
AnyDesk 7.0.15 - Unquoted Service Path
2024-04-09 00:16:23 +00:00
Exploit-DB
a06b0db78d
DB: 2024-04-04
...
6 changes to exploits/shellcodes/ghdb
Computer Laboratory Management System v1.0 - Multiple-SQLi
Petrol Pump Management Software v1.0 - Remote Code Execution (RCE)
Quick CMS v6.7 en 2023 - 'password' SQLi
Wordpress Plugin Alemha Watermarker 1.3.1 - Stored Cross-Site Scripting (XSS)
ESET NOD32 Antivirus 17.0.16.0 - Unquoted Service Path
2024-04-04 00:16:33 +00:00
Exploit-DB
a44e138f78
DB: 2024-04-03
...
28 changes to exploits/shellcodes/ghdb
Casdoor < v1.331.0 - '/api/set-password' CSRF
GL-iNet MT6000 4.5.5 - Arbitrary File Download
Axigen < 10.5.7 - Persistent Cross-Site Scripting
Blood Bank v1.0 - Stored Cross Site Scripting (XSS)
CE Phoenix v1.0.8.20 - Remote Code Execution
Daily Habit Tracker 1.0 - Broken Access Control
Daily Habit Tracker 1.0 - SQL Injection
Daily Habit Tracker 1.0 - Stored Cross-Site Scripting (XSS)
E-INSUARANCE v1.0 - Stored Cross Site Scripting (XSS)
Elementor Website Builder < 3.12.2 - Admin+ SQLi
Employee Management System 1.0 - _txtfullname_ and _txtphone_ SQL Injection
Employee Management System 1.0 - _txtusername_ and _txtpassword_ SQL Injection (Admin Login)
FoF Pretty Mail 1.1.2 - Local File Inclusion (LFI)
FoF Pretty Mail 1.1.2 - Server Side Template Injection (SSTI)
Gibbon LMS v26.0.00 - SSTI vulnerability
Hospital Management System v1.0 - Stored Cross Site Scripting (XSS)
LeptonCMS 7.0.0 - Remote Code Execution (RCE) (Authenticated)
Online Hotel Booking In PHP 1.0 - Blind SQL Injection (Unauthenticated)
OpenCart Core 4.0.2.3 - 'search' SQLi
Petrol Pump Management Software v1.0 - Remote Code Execution (RCE)
Simple Backup Plugin Python Exploit 2.7.10 - Path Traversal
Smart School 6.4.1 - SQL Injection
Wordpress Plugin - Membership For WooCommerce < v2.1.7 - Arbitrary File Upload to Shell (Unauthenticated)
ASUS Control Center Express 01.06.15 - Unquoted Service Path
Microsoft Windows 10.0.17763.5458 - Kernel Privilege Escalation
Microsoft Windows Defender - Detection Mitigation Bypass TrojanWin32Powessere.G
Rapid7 nexpose - 'nexposeconsole' Unquoted Service Path
2024-04-03 00:16:27 +00:00
Exploit-DB
e791587e41
DB: 2024-03-29
...
10 changes to exploits/shellcodes/ghdb
RouterOS 6.40.5 - 6.44 and 6.48.1 - 6.49.10 - Denial of Service
Siklu MultiHaul TG series < 2.0.0 - unauthenticated credential disclosure
Dell Security Management Server <1.9.0 - Local Privilege Escalation
Asterisk AMI - Partial File Content & Path Disclosure (Authenticated)
Broken Access Control - on NodeBB v3.6.7
liveSite Version 2019.1 - Remote Code Execution
Purei CMS 1.0 - SQL Injection
Workout Journal App 1.0 - Stored XSS
WinRAR version 6.22 - Remote Code Execution via ZIP archive
2024-03-29 00:16:30 +00:00
Exploit-DB
c9576b1787
DB: 2024-03-26
...
11 changes to exploits/shellcodes/ghdb
LBT-T300-mini1 - Remote Buffer Overflow
Nagios XI Version 2024R1.01 - SQL Injection
Craft CMS 4.4.14 - Unauthenticated Remote Code Execution
Insurance Management System PHP and MySQL 1.0 - Multiple Stored XSS
LimeSurvey Community 5.3.32 - Stored XSS
MobileShop master v1.0 - SQL Injection Vuln.
SPA-CART CMS - Stored XSS
Tourism Management System v2.0 - Arbitrary File Upload
Wallos < 1.11.2 - File Upload RCE
2024-03-26 00:16:32 +00:00
Exploit-DB
a24ba3c94b
DB: 2024-03-21
...
7 changes to exploits/shellcodes/ghdb
HNAS SMU 14.8.7825 - Information Disclosure
Blood Bank 1.0 - 'bid' SQLi
CSZCMS v1.3.0 - SQL Injection (Authenticated)
Employee Management System 1.0 - 'admin_id' SQLi
Simple Task List 1.0 - 'status' SQLi
Teacher Subject Allocation Management System 1.0 - 'searchdata' SQLi
2024-03-21 00:16:27 +00:00
Exploit-DB
bbffa273d4
DB: 2024-03-19
...
13 changes to exploits/shellcodes/ghdb
TELSAT marKoni FM Transmitter 1.9.5 - Backdoor Account Information Disclosure
TELSAT marKoni FM Transmitter 1.9.5 - Insecure Access Control Change Password
TELSAT marKoni FM Transmitter 1.9.5 - Root Command Injection
Atlassian Confluence < 8.5.3 - Remote Code Execution
Backdrop CMS 1.23.0 - Stored XSS
Gibbon LMS < v26.0.00 - Authenticated RCE
Quick.CMS 6.7 - SQL Injection Login Bypass
TYPO3 11.5.24 - Path Traversal (Authenticated)
WEBIGniter v28.7.23 - Stored XSS
WordPress File Upload Plugin < 4.23.3 - Stored XSS
xbtitFM 4.1.18 - Multiple Vulnerabilities
ZoneMinder Snapshots < 1.37.33 - Unauthenticated RCE
2024-03-19 00:16:26 +00:00
Exploit-DB
8c78d80c78
DB: 2024-03-17
...
7 changes to exploits/shellcodes/ghdb
Karaf v4.4.3 Console - RCE
Nokia BMC Log Scanner - Remote Code Execution
vm2 - sandbox escape
UPS Network Management Card 4 - Path Traversal
Winter CMS 1.2.3 - Server-Side Template Injection (SSTI) (Authenticated)
LaborOfficeFree 19.10 - MySQL Root Password Calculator
2024-03-17 00:16:40 +00:00
Exploit-DB
98f7ce18e2
DB: 2024-03-13
...
8 changes to exploits/shellcodes/ghdb
Cisco Firepower Management Center < 6.6.7.1 - Authenticated RCE
VMware Cloud Director 10.5 - Bypass identity verification
OSGi v3.7.2 (and below) Console - RCE
OSGi v3.8-3.18 Console - RCE
SnipeIT 6.2.1 - Stored Cross Site Scripting
Client Details System 1.0 - SQL Injection
Human Resource Management System 1.0 - 'employeeid' SQL Injection
2024-03-13 00:16:28 +00:00
Exploit-DB
ce58678266
DB: 2024-03-12
...
7 changes to exploits/shellcodes/ghdb
Sitecore - Remote Code Execution v8.2
Hitachi NAS (HNAS) System Management Unit (SMU) Backup & Restore < 14.8.7825.01 - IDOR
Adobe ColdFusion versions 2018_15 (and earlier) and 2021_5 and earlier - Arbitrary File Read
WordPress Plugin Duplicator < 1.5.7.1 - Unauthenticated Sensitive Data Exposure to Account Takeover
Microsoft Windows Defender / Trojan.Win32/Powessere.G - Detection Mitigation Bypass
2024-03-12 00:16:25 +00:00
Exploit-DB
60a90afc8d
DB: 2024-03-11
...
7 changes to exploits/shellcodes/ghdb
Ladder v0.0.21 - Server-side request forgery (SSRF)
TP-Link TL-WR740N - Buffer Overflow 'DOS'
Numbas < v7.3 - Remote Code Execution
Akaunting < 3.1.3 - RCE
DataCube3 v1.0 - Unrestricted file upload 'RCE'
Hide My WP < 6.2.9 - Unauthenticated SQLi
2024-03-11 00:16:24 +00:00
Exploit-DB
7528fc1c5b
DB: 2024-03-07
...
8 changes to exploits/shellcodes/ghdb
GLiNet - Router Authentication Bypass
CSZ CMS Version 1.3.0 - Authenticated Remote Command Execution
CVE-2023-50071 - Multiple SQL Injection
elFinder Web file manager Version - 2.1.53 Remote Command Execution
Lot Reservation Management System - Unauthenticated File Disclosure
Lot Reservation Management System - Unauthenticated File Upload and Remote Code Execution
2024-03-07 00:16:27 +00:00
Exploit-DB
42e75482b6
DB: 2024-03-06
...
4 changes to exploits/shellcodes/ghdb
Solar-Log 200 PM+ 3.6.0 Build 99 - 15.10.2019 - Stored XSS
kk Star Ratings < 5.4.6 - Rating Tampering via Race Condition
Neontext Wordpress Plugin - Stored XSS
2024-03-06 00:16:30 +00:00
Exploit-DB
7ef8e488d8
DB: 2024-03-04
...
22 changes to exploits/shellcodes/ghdb
GL.iNet AR300M v3.216 Remote Code Execution - CVE-2023-46456 Exploit
GL.iNet AR300M v4.3.7 Arbitrary File Read - CVE-2023-46455 Exploit
GL.iNet AR300M v4.3.7 Remote Code Execution - CVE-2023-46454 Exploit
Maxima Max Pro Power - BLE Traffic Replay (Unauthenticated)
R Radio Network FM Transmitter 1.07 system.cgi - Password Disclosure
TitanNit Web Control 2.01 / Atemio 7600 - Root Remote Code Execution
TPC-110W - Missing Authentication for Critical Function
A-PDF All to MP3 Converter 2.0.0 - DEP Bypass via HeapCreate + HeapAlloc
Easywall 0.3.1 - Authenticated Remote Command Execution
Magento ver. 2.4.6 - XSLT Server Side Injection
AC Repair and Services System v1.0 - Multiple SQL Injection
Enrollment System v1.0 - SQL Injection
Petrol Pump Management Software v.1.0 - SQL Injection
Petrol Pump Management Software v.1.0 - Stored Cross Site Scripting via SVG file
Petrol Pump Management Software v1.0 - 'Address' Stored Cross Site Scripting
Petrol Pump Management Software v1.0 - Remote Code Execution via File Upload
Real Estate Management System v1.0 - Remote Code Execution via File Upload
Simple Student Attendance System v1.0 - 'classid' Time Based Blind & Union Based SQL Injection
Simple Student Attendance System v1.0 - Time Based Blind SQL Injection
Boss Mini 1.4.0 - local file inclusion
Windows PowerShell - Event Log Bypass Single Quote Code Execution
2024-03-04 00:16:34 +00:00
Exploit-DB
d0ee8ba723
DB: 2024-03-01
...
5 changes to exploits/shellcodes/ghdb
mooSocial 3.1.8 - Cross-Site Scripting (XSS) on User Login Page
Wordpress 'simple urls' Plugin < 115 - XSS
2024-03-01 00:16:37 +00:00
Exploit-DB
59f10b7f45
DB: 2024-02-29
...
13 changes to exploits/shellcodes/ghdb
Saflok - Key Derication Function Exploit
(shellcode) Linux-x64 - create a shell with execve() sending argument using XOR (/bin//sh) [55 bytes]
Academy LMS 6.2 - Reflected XSS
Blood Bank v1.0 - Multiple SQL Injection
Moodle 4.3 - Reflected XSS
TASKHUB-2.8.8 - XSS-Reflected
WordPress Plugin Admin Bar & Dashboard Access Control Version: 1.2.8 - _Dashboard Redirect_ field Stored Cross-Site Scripting (XSS)
WP Fastest Cache 1.2.2 - Unauthenticated SQL Injection
WP Rocket < 2.10.3 - Local File Inclusion (LFI)
2024-02-29 00:16:26 +00:00
Exploit-DB
c1bcfc6347
DB: 2024-02-28
...
13 changes to exploits/shellcodes/ghdb
TEM Opera Plus FM Family Transmitter 35.45 - Remote Code Execution
TEM Opera Plus FM Family Transmitter 35.45 - XSRF
Executables Created with perl2exe < V30.10C - Arbitrary Code Execution
Atlassian Confluence Data Center and Server - Authentication Bypass (Metasploit)
Automatic-Systems SOC FL9600 FastLine - Directory Transversal
Automatic-Systems SOC FL9600 FastLine - The device contains hardcoded login and password for super admin
dawa-pharma 1.0-2022 - Multiple-SQLi
Moodle 4.3 - Insecure Direct Object Reference
Moodle 4.3 - Reflected XSS
SuperStoreFinder - Multiple Vulnerabilities
Wordpress Plugin Canto < 3.0.5 - Remote File Inclusion (RFI) and Remote Code Execution (RCE)
Zoo Management System 1.0 - Unauthenticated RCE
2024-02-28 00:16:32 +00:00
Exploit-DB
9734fcef1e
DB: 2024-02-27
...
12 changes to exploits/shellcodes/ghdb
Wyrestorm Apollo VX20 < 1.3.58 - Incorrect Access Control 'DoS'
Wyrestorm Apollo VX20 < 1.3.58 - Account Enumeration
Wyrestorm Apollo VX20 < 1.3.58 - Incorrect Access Control 'Credentials Disclosure'
FAQ Management System v1.0 - 'faq' SQL Injection
Flashcard Quiz App v1.0 - 'card' SQL Injection
Simple Inventory Management System v1.0 - 'email' SQL Injection
comments-like-dislike < 1.2.0 - Authenticated (Subscriber+) Plugin Setting Reset
Online Shopping System Advanced - Sql Injection
taskhub 2.8.7 - SQL Injection
IBM i Access Client Solutions v1.1.2 - 1.1.4_ v1.1.4.3 - 1.1.9.4 - Remote Credential Theft
2024-02-27 00:16:33 +00:00
Exploit-DB
624b24bca9
DB: 2024-02-22
...
2 changes to exploits/shellcodes/ghdb
WEBIGniter v28.7.23 - Stored Cross Site Scripting (XSS)
2024-02-22 00:16:28 +00:00
