bpmcdevitt/exploit-db-mirror
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2819 commits 1 branch 0 tags 258 MiB
Commit graph

101 commits

Author SHA1 Message Date
Exploit-DB
809d81619e DB: 2024-08-24 
4 changes to exploits/shellcodes/ghdb

Calibre-web 0.6.21 - Stored XSS

Helpdeskz v2.0.2 - Stored XSS
 2024-08-24 00:16:35 +00:00
Exploit-DB
74ee6f57c7 DB: 2024-07-27 
2 changes to exploits/shellcodes/ghdb

Monstra CMS 3.0.4 - Remote Code Execution (RCE)
 2024-07-27 00:16:34 +00:00
Exploit-DB
388e822220 DB: 2024-07-05 
1 changes to exploits/shellcodes/ghdb
 2024-07-05 00:16:26 +00:00
Exploit-DB
9d17a3d6ca DB: 2024-05-14 
10 changes to exploits/shellcodes/ghdb

CrushFTP < 11.1.0 - Directory Traversal

Apache mod_proxy_cluster - Stored XSS

CE Phoenix Version 1.0.8.20 - Stored XSS

Chyrp 2.5.2 - Stored Cross-Site Scripting (XSS)

Leafpub 1.1.9 - Stored Cross-Site Scripting (XSS)

Prison Management System - SQL Injection Authentication Bypass

PyroCMS v3.0.1 - Stored XSS

Plantronics Hub 3.25.1 - Arbitrary File Read
 2024-05-14 00:16:26 +00:00
Exploit-DB
67e4434322 DB: 2024-05-02 
1 changes to exploits/shellcodes/ghdb
 2024-05-02 00:16:56 +00:00
Exploit-DB
4ab159b6a8 DB: 2024-04-20 
1 changes to exploits/shellcodes/ghdb
 2024-04-20 00:16:33 +00:00
Exploit-DB
b59144d74e DB: 2024-04-14 
6 changes to exploits/shellcodes/ghdb

BMC Compuware iStrobe Web - 20.13 - Pre-auth RCE

Online Fire Reporting System OFRS  - SQL Injection Authentication Bypass

Savsoft Quiz v6.0 Enterprise - Stored XSS

Stock Management System v1.0 - Unauthenticated SQL Injection
 2024-04-14 00:16:33 +00:00
Exploit-DB
c9576b1787 DB: 2024-03-26 
11 changes to exploits/shellcodes/ghdb

LBT-T300-mini1 - Remote Buffer Overflow

Nagios XI Version 2024R1.01 - SQL Injection

Craft CMS 4.4.14 - Unauthenticated Remote Code Execution

Insurance Management System PHP and MySQL 1.0 - Multiple Stored XSS

LimeSurvey Community 5.3.32 - Stored XSS

MobileShop master v1.0 - SQL Injection Vuln.

SPA-CART CMS - Stored XSS

Tourism Management System v2.0 - Arbitrary File Upload

Wallos < 1.11.2 - File Upload RCE
 2024-03-26 00:16:32 +00:00
Exploit-DB
ce58678266 DB: 2024-03-12 
7 changes to exploits/shellcodes/ghdb

Sitecore - Remote Code Execution v8.2

Hitachi NAS (HNAS) System Management Unit (SMU) Backup & Restore < 14.8.7825.01 - IDOR

Adobe ColdFusion versions 2018_15 (and earlier) and 2021_5 and earlier - Arbitrary File Read

WordPress Plugin Duplicator < 1.5.7.1 - Unauthenticated Sensitive Data Exposure to Account Takeover

Microsoft Windows Defender / Trojan.Win32/Powessere.G - Detection Mitigation Bypass
 2024-03-12 00:16:25 +00:00
Exploit-DB
0af7c5d561 DB: 2024-03-09 
1 changes to exploits/shellcodes/ghdb
 2024-03-09 00:16:22 +00:00
Exploit-DB
7528fc1c5b DB: 2024-03-07 
8 changes to exploits/shellcodes/ghdb

GLiNet - Router Authentication Bypass

CSZ CMS Version 1.3.0 - Authenticated Remote Command Execution

CVE-2023-50071 - Multiple SQL Injection

elFinder Web file manager Version - 2.1.53 Remote Command Execution
Lot Reservation Management System - Unauthenticated File Disclosure
Lot Reservation Management System - Unauthenticated File Upload and Remote Code Execution
 2024-03-07 00:16:27 +00:00
Exploit-DB
9734fcef1e DB: 2024-02-27 
12 changes to exploits/shellcodes/ghdb

Wyrestorm Apollo VX20  < 1.3.58 - Incorrect Access Control 'DoS'
Wyrestorm Apollo VX20 < 1.3.58 - Account Enumeration
Wyrestorm Apollo VX20 < 1.3.58 - Incorrect Access Control 'Credentials Disclosure'
FAQ Management System v1.0 - 'faq' SQL Injection
Flashcard Quiz App v1.0 - 'card' SQL Injection

Simple Inventory Management System v1.0 - 'email' SQL Injection

comments-like-dislike < 1.2.0 - Authenticated (Subscriber+) Plugin Setting Reset

Online Shopping System Advanced - Sql Injection

taskhub 2.8.7 - SQL Injection

IBM i Access Client Solutions v1.1.2 - 1.1.4_ v1.1.4.3 - 1.1.9.4 - Remote Credential Theft
 2024-02-27 00:16:33 +00:00
Exploit-DB
411b6755b3 DB: 2024-02-17 
1 changes to exploits/shellcodes/ghdb
 2024-02-17 00:16:52 +00:00
Exploit-DB
5c0c152cec DB: 2024-02-14 
6 changes to exploits/shellcodes/ghdb

VIMESA VHF/FM Transmitter Blue Plus 9.7.1 (doreboot) - Remote Denial Of Service

Splunk 9.0.4 - Information Disclosure

Lost and Found Information System v1.0 - ( IDOR ) leads to Account Take over

ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure
 2024-02-14 00:16:18 +00:00
Exploit-DB
3876052878 DB: 2024-02-07 
1 changes to exploits/shellcodes/ghdb
 2024-02-07 00:16:30 +00:00
Exploit-DB
0c65b881ba DB: 2024-02-06 
10 changes to exploits/shellcodes/ghdb

Milesight Routers UR5X_ UR32L_ UR32_ UR35_ UR41 - Credential Leakage Through Unprotected System Logs and Weak Password Encryption

WhatsUp Gold 2022 (22.1.0 Build 39) - XSS

Clinic's Patient Management System 1.0 - Unauthenticated RCE

Curfew e-Pass Management System 1.0 - FromDate SQL Injection

GYM MS - GYM Management System - Cross Site Scripting (Stored)

MISP 2.4.171 - Stored XSS

TASKHUB-2.8.8 - XSS-Reflected

Wordpress 'simple urls' Plugin < 115 - XSS
 2024-02-06 00:16:29 +00:00
Exploit-DB
81ae91fdae DB: 2024-02-03 
14 changes to exploits/shellcodes/ghdb

Electrolink FM/DAB/TV Transmitter - Unauthenticated Remote DoS
Electrolink FM/DAB/TV Transmitter (controlloLogin.js) - Credentials Disclosure
Electrolink FM/DAB/TV Transmitter (Login Cookie) - Authentication Bypass
Electrolink FM/DAB/TV Transmitter (login.htm/mail.htm) - Credentials Disclosure
Electrolink FM/DAB/TV Transmitter - Pre-Auth MPFS Image Remote Code Execution
Electrolink FM/DAB/TV Transmitter - Remote Authentication Removal
TP-LINK TL-WR740N - Multiple HTML Injection
TP-Link TL-WR740N - UnAuthenticated Directory Transversal

Juniper-SRX-Firewalls&EX-switches - (PreAuth-RCE) (PoC)

mooSocial 3.1.8 - Cross-Site Scripting (XSS) on User Login Page

PCMan FTP Server 2.0 - 'pwd' Remote Buffer Overflow

WebCatalog 48.4 - Arbitrary Protocol Execution
 2024-02-03 00:16:34 +00:00
Exploit-DB
a5920da7af DB: 2024-01-30 
10 changes to exploits/shellcodes/ghdb

Ricoh Printer - Directory and File Exposure

Blood Bank & Donor Management System using v2.2 - Stored XSS

Equipment Rental Script-1.0 - SQLi

Bank Locker Management System - SQL Injection

Fundraising Script 1.0 - SQLi

PHP Shopping Cart 4.2 - Multiple-SQLi

7 Sticky Notes v1.9 - OS Command Injection

Typora v1.7.4 - OS Command Injection
 2024-01-30 00:16:26 +00:00
Exploit-DB
967f9d17d6 DB: 2024-01-24 
1 changes to exploits/shellcodes/ghdb
 2024-01-24 00:16:25 +00:00
Exploit-DB
cb7ba0c503 DB: 2023-12-22 
1 changes to exploits/shellcodes/ghdb
 2023-12-22 00:16:27 +00:00
Exploit-DB
82c4f0ab51 DB: 2023-12-19 
1 changes to exploits/shellcodes/ghdb
 2023-12-19 00:16:22 +00:00
Exploit-DB
d6ac341475 DB: 2023-12-16 
1 changes to exploits/shellcodes/ghdb
 2023-12-16 00:16:30 +00:00
Exploit-DB
5ae67f58b9 DB: 2023-12-15 
1 changes to exploits/shellcodes/ghdb
 2023-12-15 00:16:26 +00:00
Exploit-DB
07b04761c2 DB: 2023-12-13 
1 changes to exploits/shellcodes/ghdb
 2023-12-13 00:16:53 +00:00
Exploit-DB
4b91641d83 DB: 2023-12-12 
1 changes to exploits/shellcodes/ghdb
 2023-12-12 00:16:31 +00:00
Exploit-DB
baedefe44c DB: 2023-12-07 
1 changes to exploits/shellcodes/ghdb
 2023-12-07 00:16:31 +00:00
Exploit-DB
3ed9fc9688 DB: 2023-12-05 
1 changes to exploits/shellcodes/ghdb
 2023-12-05 00:16:21 +00:00
Exploit-DB
066333e56d DB: 2023-12-02 
1 changes to exploits/shellcodes/ghdb
 2023-12-02 00:16:24 +00:00
Exploit-DB
7e32166ebc DB: 2023-12-01 
1 changes to exploits/shellcodes/ghdb
 2023-12-01 00:16:26 +00:00
Exploit-DB
057c2f886a DB: 2023-11-30 
1 changes to exploits/shellcodes/ghdb
 2023-11-30 00:16:31 +00:00
Exploit-DB
bde3836027 DB: 2023-11-28 
1 changes to exploits/shellcodes/ghdb
 2023-11-28 00:16:33 +00:00
Exploit-DB
617a6b4036 DB: 2023-11-25 
1 changes to exploits/shellcodes/ghdb
 2023-11-25 00:16:32 +00:00
Exploit-DB
8a972c9a3f DB: 2023-11-24 
1 changes to exploits/shellcodes/ghdb
 2023-11-24 00:16:42 +00:00
Exploit-DB
d66aada84d DB: 2023-11-21 
1 changes to exploits/shellcodes/ghdb
 2023-11-21 00:16:23 +00:00
Exploit-DB
034fa97b3e DB: 2023-11-18 
1 changes to exploits/shellcodes/ghdb
 2023-11-18 00:16:41 +00:00
Exploit-DB
e7b3c09fd9 DB: 2023-11-11 
1 changes to exploits/shellcodes/ghdb
 2023-11-11 00:16:32 +00:00
Exploit-DB
937420d384 DB: 2023-11-10 
1 changes to exploits/shellcodes/ghdb
 2023-11-10 00:16:27 +00:00
Exploit-DB
43a5e18260 DB: 2023-11-09 
1 changes to exploits/shellcodes/ghdb
 2023-11-09 00:16:27 +00:00
Exploit-DB
7b7a9c9ea4 DB: 2023-11-08 
1 changes to exploits/shellcodes/ghdb
 2023-11-08 00:17:10 +00:00
Exploit-DB
3711d1e88d DB: 2023-11-07 
1 changes to exploits/shellcodes/ghdb
 2023-11-07 00:16:47 +00:00
Exploit-DB
5b9acfe03d DB: 2023-11-03 
1 changes to exploits/shellcodes/ghdb
 2023-11-03 00:17:00 +00:00
Exploit-DB
ea7fd161a3 DB: 2023-11-02 
1 changes to exploits/shellcodes/ghdb
 2023-11-02 00:16:33 +00:00
Exploit-DB
e369c91366 DB: 2023-11-01 
1 changes to exploits/shellcodes/ghdb
 2023-11-01 00:16:42 +00:00
Exploit-DB
75cbb282d9 DB: 2023-10-31 
12 changes to exploits/shellcodes/ghdb

systemd 246 - Local Privilege Escalation

ChurchCRM v4.5.3 - Authenticated SQL Injection

Roxy WI v6.1.0.0 - Unauthenticated Remote Code Execution (RCE) via subprocess_execute

Maltrail v0.53 - Unauthenticated Remote Code Execution (RCE)

Request-Baskets v1.2.1 - Server-side request forgery (SSRF)
 2023-10-31 00:17:05 +00:00
Exploit-DB
45020d9cc3 DB: 2023-10-26 
1 changes to exploits/shellcodes/ghdb
 2023-10-26 00:16:49 +00:00
Exploit-DB
3c68644b7f DB: 2023-10-24 
1 changes to exploits/shellcodes/ghdb
 2023-10-24 00:16:26 +00:00
Exploit-DB
28233c60a9 DB: 2023-10-21 
1 changes to exploits/shellcodes/ghdb
 2023-10-21 00:17:11 +00:00
Exploit-DB
8e469af5e4 DB: 2023-10-20 
1 changes to exploits/shellcodes/ghdb
 2023-10-20 00:16:34 +00:00
Exploit-DB
d769738a1b DB: 2023-10-19 
1 changes to exploits/shellcodes/ghdb
 2023-10-19 00:16:34 +00:00
Exploit-DB
888e6c1d4c DB: 2023-10-17 
1 changes to exploits/shellcodes/ghdb
 2023-10-17 00:16:34 +00:00