Exploit-DB
cbe784b087
DB: 2023-09-09
...
16 changes to exploits/shellcodes/ghdb
Techview LA-5570 Wireless Gateway Home Automation Controller - Multiple Vulnerabilities
Axigen < 10.3.3.47_ 10.2.3.12 - Reflected XSS
Drupal 10.1.2 - web-cache-poisoning-External-service-interaction
Jorani v1.0.3-(c)2014-2023 - XSS Reflected & Information Disclosure
soosyze 2.0.0 - File Upload
SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection
Wordpress Plugin Elementor 3.5.5 - Iframe Injection
Wp2Fac - OS Command Injection
Maltrail v0.53 - Unauthenticated Remote Code Execution (RCE)
SyncBreeze 15.2.24 - 'login' Denial of Service
GOM Player 2.3.90.5360 - Buffer Overflow (PoC)
GOM Player 2.3.90.5360 - Remote Code Execution (RCE)
Windows/x64 - PIC Null-Free TCP Reverse Shell Shellcode (476 Bytes)
2023-09-09 00:16:33 +00:00
Exploit-DB
fdcaa2b976
DB: 2023-09-07
...
1 changes to exploits/shellcodes/ghdb
Blood Donor Management System v1.0 - Stored XSS
2023-09-07 00:16:27 +00:00
Exploit-DB
4e246a01fb
DB: 2023-09-05
...
18 changes to exploits/shellcodes/ghdb
DLINK DPH-400SE - Exposure of Sensitive Information
FileMage Gateway 1.10.9 - Local File Inclusion
Academy LMS 6.1 - Arbitrary File Upload
AdminLTE PiHole 5.18 - Broken Access Control
Blood Donor Management System v1.0 - Stored XSS
Bus Reservation System 1.1 - Multiple-SQLi
Credit Lite 1.5.4 - SQL Injection
CSZ CMS 1.3.0 - Stored Cross-Site Scripting ('Photo URL' and 'YouTube URL' )
CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin 'Gallery')
Hyip Rio 2.1 - Arbitrary File Upload
Member Login Script 3.3 - Client-side desync
SPA-Cart eCommerce CMS 1.9.0.3 - Reflected XSS
Webedition CMS v2.9.8.8 - Remote Code Execution (RCE)
Webedition CMS v2.9.8.8 - Stored XSS
Webedition CMS v2.9.8.8 - Remote Code Execution (RCE)
Webedition CMS v2.9.8.8 - Stored XSS
WP Statistics Plugin 13.1.5 current_page_id - Time based SQL injection (Unauthenticated)
Freefloat FTP Server 1.0 - 'PWD' Remote Buffer Overflow
Kingo ROOT 1.5.8 - Unquoted Service Path
NVClient v5.0 - Stack Buffer Overflow (DoS)
Ivanti Avalanche <v6.4.0.0 - Remote Code Execution
2023-09-05 00:16:27 +00:00
Exploit-DB
4c8ac36b6c
DB: 2023-08-30
...
1 changes to exploits/shellcodes/ghdb
Online Clinic Management System 2.2 - HTML Injection
Online Clinic Management System 2.2 - Multiple Stored Cross-Site Scripting (XSS)
Online Clinic Management System 2.2 - HTML Injection
Online Clinic Management System 2.2 - Multiple Stored Cross-Site Scripting (XSS)
Purchase Order Management System 1.0 - Remote File Upload
Purchase Order Management-1.0 - Local File Inclusion
Purchase Order Management System 1.0 - Remote File Upload
Purchase Order Management-1.0 - Local File Inclusion
Restaurant Management System 1.0 - SQL Injection
2023-08-30 00:16:32 +00:00
Exploit-DB
fe2c42ff0e
DB: 2023-08-25
...
4 changes to exploits/shellcodes/ghdb
User Registration & Login and User Management System v3.0 - SQL Injection (Unauthenticated)
User Registration & Login and User Management System v3.0 - Stored Cross-Site Scripting (XSS)
Uvdesk 1.1.4 - Stored XSS (Authenticated)
2023-08-25 00:16:28 +00:00
Exploit-DB
cb5ca4a416
DB: 2023-08-24
...
1 changes to exploits/shellcodes/ghdb
Color Prediction Game v1.0 - SQL Injection
Multi-Vendor Online Groceries Management System 1.0 - 'id' Blind SQL Injection
Online Eyewear Shop 1.0 - SQL Injection (Unauthenticated)
2023-08-24 00:16:24 +00:00
Exploit-DB
e07f33f24d
DB: 2023-08-22
...
17 changes to exploits/shellcodes/ghdb
EuroTel ETL3100 - Transmitter Authorization Bypass (IDOR)
EuroTel ETL3100 - Transmitter Default Credentials
EuroTel ETL3100 - Transmitter Unauthenticated Config/Log Download
Color Prediction Game v1.0 - SQL Injection
Crypto Currency Tracker (CCT) 9.5 - Admin Account Creation (Unauthenticated)
Dolibarr Version 17.0.1 - Stored XSS
Global - Multi School Management System Express v1.0- SQL Injection
OVOO Movie Portal CMS v3.3.3 - SQL Injection
PHPJabbers Business Directory Script v3.2 - Multiple Vulnerabilities
Taskhub CRM Tool 2.8.6 - SQL Injection
Inosoft VisiWin 7 2022-2.1 - Insecure Folders Permissions
TSPlus 16.0.0.0 - Remote Work Insecure Credential storage
TSplus 16.0.0.0 - Remote Work Insecure Files and Folders
TSplus 16.0.2.14 - Remote Access Insecure Files and Folders Permissions
Linux/x64 - memfd_create ELF loader Shellcode (170 bytes)
2023-08-22 00:16:22 +00:00
Exploit-DB
500cf5a2e0
DB: 2023-08-20
...
1 changes to exploits/shellcodes/ghdb
Diafan CMS 6.0 - Reflected Cross-Site Scripting (XSS)
Online Art gallery project 1.0 - Arbitrary File Upload (Unauthenticated)
Online Shopping Cart System 1.0 - 'id' SQL Injection
Online Thesis Archiving System v1.0 - Multiple-SQLi
WebsiteBaker v2.13.3 - Cross-Site Scripting (XSS)
WebsiteBaker v2.13.3 - Directory Traversal
WebsiteBaker v2.13.3 - Stored XSS
WebsiteBaker v2.13.3 - Cross-Site Scripting (XSS)
WebsiteBaker v2.13.3 - Directory Traversal
WebsiteBaker v2.13.3 - Stored XSS
2023-08-20 00:16:58 +00:00
Exploit-DB
6da2bca764
DB: 2023-08-12
...
1 changes to exploits/shellcodes/ghdb
projectSend r1605 - CSV injection
projectSend r1605 - Private file download
projectSend r1605 - CSV injection
projectSend r1605 - Private file download
projectSend r1605 - Stored XSS
2023-08-12 00:16:26 +00:00
Exploit-DB
f55092b332
DB: 2023-08-11
...
6 changes to exploits/shellcodes/ghdb
TP-Link Archer AX21 - Unauthenticated Command Injection
systemd 246 - Local Privilege Escalation
Maltrail v0.53 - Unauthenticated Remote Code Execution (RCE)
Request-Baskets v1.2.1 - Server-side request forgery (SSRF)
OutSystems Service Studio 11.53.30 - DLL Hijacking
2023-08-11 00:16:25 +00:00
Exploit-DB
69f3ee7722
DB: 2023-08-09
...
8 changes to exploits/shellcodes/ghdb
Lucee 5.4.2.17 - Authenticated Reflected XSS
Adlisting Classified Ads 2.14.0 - WebPage Content Information Disclosure
Emagic Data Center Management Suite v6.0 - OS Command Injection
mooSocial 3.1.8 - Reflected XSS
PHPJabbers Vacation Rental Script 4.0 - CSRF
Social-Commerce 3.1.6 - Reflected XSS
Pyro CMS 3.9 - Server-Side Template Injection (SSTI) (Authenticated)
2023-08-09 00:16:24 +00:00
Exploit-DB
010e679abe
DB: 2023-08-05
...
25 changes to exploits/shellcodes/ghdb
ReyeeOS 1.204.1614 - MITM Remote Code Execution (RCE)
Shelly PRO 4PM v0.11.0 - Authentication Bypass
Ozeki SMS Gateway 10.3.208 - Arbitrary File Read (Unauthenticated)
Academy LMS 6.0 - Reflected XSS
Adiscon LogAnalyzer v.4.1.13 - Cross Site Scripting
Campcodes Online Matrimonial Website System v3.3 - Code Execution via malicious SVG file upload
JLex GuestBook 1.6.4 - Reflected XSS
Joomla JLex Review 6.0.1 - Reflected XSS
News Portal v4.0 - SQL Injection (Unauthorized)
PHPJabbers Cleaning Business 1.0 - Reflected XSS
PHPJabbers Night Club Booking 1.0 - Reflected XSS
PHPJabbers Rental Property Booking 2.0 - Reflected XSS
PHPJabbers Service Booking Script 1.0 - Reflected XSS
PHPJabbers Shuttle Booking Software 1.0 - Reflected XSS
PHPJabbers Taxi Booking 2.0 - Reflected XSS
Webedition CMS v2.9.8.8 - Remote Code Execution (RCE)
Webedition CMS v2.9.8.8 - Stored XSS
Webutler v3.2 - Remote Code Execution (RCE)
WordPress adivaha Travel Plugin 2.3 - Reflected XSS
WordPress adivaha Travel Plugin 2.3 - SQL Injection
Wordpress Plugin EventON Calendar 4.4 - Unauthenticated Event Access
Wordpress Plugin EventON Calendar 4.4 - Unauthenticated Post Access via IDOR
WordPress Plugin Forminator 1.24.6 - Unauthenticated Remote Command Execution
WordPress Plugin Ninja Forms 3.6.25 - Reflected XSS
Xlight FTP Server 3.9.3.6 - 'Stack Buffer Overflow' (DOS)
2023-08-05 00:16:32 +00:00
Exploit-DB
9229ea6f66
DB: 2023-08-03
...
1 changes to exploits/shellcodes/ghdb
Bookwyrm v0.4.3 - Authentication Bypass
Gitea 1.16.6 - Remote Code Execution (RCE) (Metasploit)
Uvdesk v1.1.3 - File Upload Remote Code Execution (RCE) (Authenticated)
WordPress Plugin Duplicator 1.4.7 - Information Disclosure
Wordpress Plugin WP-UserOnline 2.88.0 - Stored Cross Site Scripting (XSS)
2023-08-03 00:16:49 +00:00
Exploit-DB
5eb89a2046
DB: 2023-08-01
...
5 changes to exploits/shellcodes/ghdb
Joomla iProperty Real Estate 4.1.1 - Reflected XSS
Joomla Solidres 2.13.3 - Reflected XSS
RosarioSIS 10.8.4 - CSV Injection
Uvdesk v1.1.3 - File Upload Remote Code Execution (RCE) (Authenticated)
WordPress Plugin AN_Gradebook 5.0.1 - SQLi
General Device Manager 2.5.2.2 - Buffer Overflow (SEH)
2023-08-01 00:16:36 +00:00
Exploit-DB
c18d9953a2
DB: 2023-07-29
...
22 changes to exploits/shellcodes/ghdb
Keeper Security desktop 16.10.2 & Browser Extension 16.5.4 - Password Dumping
Active Super Shop CMS v2.5 - HTML Injection Vulnerabilities
Availability Booking Calendar v1.0 - Multiple Cross-site scripting (XSS)
Dooblou WiFi File Explorer 1.13.3 - Multiple Vulnerabilities
Joomla HikaShop 4.7.4 - Reflected XSS
Joomla VirtueMart Shopping Cart 4.0.12 - Reflected XSS
mooDating 1.2 - Reflected Cross-site scripting (XSS)
October CMS v3.4.4 - Stored Cross-Site Scripting (XSS) (Authenticated)
PaulPrinting CMS - (Search Delivery) Cross Site Scripting
Perch v3.2 - Persistent Cross Site Scripting (XSS)
RosarioSIS 10.8.4 - CSV Injection
WordPress Plugin AN_Gradebook 5.0.1 - SQLi
Zomplog 3.9 - Cross-site scripting (XSS)
zomplog 3.9 - Remote Code Execution (RCE)
copyparty 1.8.2 - Directory Traversal
copyparty v1.8.6 - Reflected Cross Site Scripting (XSS)
GreenShot 1.2.10 - Insecure Deserialization Arbitrary Code Execution
mRemoteNG v1.77.3.1784-NB - Cleartext Storage of Sensitive Information in Memory
Windows/x64 - PIC Null-Free Calc.exe Shellcode (169 Bytes)
2023-07-29 00:16:43 +00:00
Exploit-DB
033e7ba3e0
DB: 2023-07-22
...
3 changes to exploits/shellcodes/ghdb
Online Piggery Management System v1.0 - unauthenticated file upload vulnerability
Perch v3.2 - Remote Code Execution (RCE)
Perch v3.2 - Stored XSS
Wordpress Plugin Zephyr Project Manager 3.2.42 - Multiple SQLi
2023-07-22 00:16:25 +00:00
Exploit-DB
98cdb05106
DB: 2023-07-21
...
10 changes to exploits/shellcodes/ghdb
Microsoft Office 365 Version 18.2305.1222.0 - Elevation of Privilege + RCE.
RWS WorldServer 11.7.3 - Session Token Enumeration
Aures Booking & POS Terminal - Local Privilege Escalation
Boom CMS v8.0.7 - Cross Site Scripting
PaulPrinting CMS - Multiple Cross Site Web Vulnerabilities
pfSense v2.7.0 - OS Command Injection
Webile v1.0.1 - Multiple Cross Site Scripting
Wifi Soft Unibox Administration 3.0 & 3.1 - SQL Injection
RaidenFTPD 2.4.4005 - Buffer Overflow (SEH)
2023-07-21 00:16:29 +00:00
Exploit-DB
3a3c03321c
DB: 2023-07-20
...
18 changes to exploits/shellcodes/ghdb
Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution
ABB FlowX v4.00 - Exposure of Sensitive Information
TP-Link TL-WR740N - Authenticated Directory Transversal
Microsoft Edge 114.0.1823.67 (64-bit) - Information Disclosure
Backdrop Cms v1.25.1 - Stored Cross-Site Scripting (XSS)
Blackcat Cms v1.4 - Remote Code Execution (RCE)
Blackcat Cms v1.4 - Stored XSS
CmsMadeSimple v2.2.17 - Remote Code Execution (RCE)
CmsMadeSimple v2.2.17 - session hijacking via Server-Side Template Injection (SSTI)
CmsMadeSimple v2.2.17 - Stored Cross-Site Scripting (XSS)
Joomla! com_booking component 2.4.9 - Information Leak (Account enumeration)
Online Piggery Management System v1.0 - unauthenticated file upload vulnerability
phpfm v1.7.9 - Authentication type juggling
PimpMyLog v1.7.14 - Improper access control
PMB 7.4.6 - SQL Injection
Statamic 4.7.0 - File-Inclusion
Vaidya-Mitra 1.0 - Multiple SQLi
2023-07-20 00:16:46 +00:00
Exploit-DB
fd788a92e3
DB: 2023-07-16
...
9 changes to exploits/shellcodes/ghdb
Cisco UCS-IMC Supervisor 2.2.0.0 - Authentication Bypass
Netlify CMS 2.10.192 - Stored Cross-Site Scripting (XSS)
Admidio v4.2.10 - Remote Code Execution (RCE)
Bus Pass Management System 1.0 - 'viewid' Insecure direct object references (IDOR)
Bus Pass Management System 1.0 - 'viewid' SQL Injection
Bus Pass Management System 1.0 - 'viewid' Insecure direct object references (IDOR)
Bus Pass Management System 1.0 - 'viewid' SQL Injection
Icinga Web 2.10 - Authenticated Remote Code Execution
News Portal v4.0 - SQL Injection (Unauthorized)
Pluck v4.7.18 - Remote Code Execution (RCE)
ProjeQtOr Project Management System v10.4.1 - Multiple XSS
WinterCMS < 1.2.3 - Persistent Cross-Site Scripting
XAMPP 8.2.4 - Unquoted Path
2023-07-16 00:16:39 +00:00
Exploit-DB
00f5021452
DB: 2023-07-12
...
10 changes to exploits/shellcodes/ghdb
Ateme TITAN File 3.9 - SSRF File Enumeration
Netlify CMS 2.10.192 - Stored Cross-Site Scripting (XSS)
Spring Cloud 3.2.2 - Remote Command Execution (RCE)
BuildaGate5library v5 - Reflected Cross-Site Scripting (XSS)
Park Ticketing Management System 1.0 - 'viewid' SQL Injection
Park Ticketing Management System 1.0 - 'viewid' SQL Injection
Frappe Framework (ERPNext) 13.4.0 - Remote Code Execution (Authenticated)
AVG Anti Spyware 7.5 - Unquoted Service Path _AVG Anti-Spyware Guard_
Game Jackal Server v5 - Unquoted Service Path _GJServiceV5_
MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path _MTAgentService_
MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path _MTSchedulerService_
2023-07-12 00:16:54 +00:00
Exploit-DB
743db0e747
DB: 2023-07-08
...
4 changes to exploits/shellcodes/ghdb
Microsoft Outlook Microsoft 365 MSO (Version 2306 Build 16.0.16529.20100) 32-bit - Remote Code Execution
Bus Pass Management System 1.0 - 'adminname' Stored Cross-Site Scripting (XSS)
Bus Pass Management System 1.0 - 'Search' SQL injection
Bus Pass Management System 1.0 - 'adminname' Stored Cross-Site Scripting (XSS)
Bus Pass Management System 1.0 - 'Search' SQL injection
Faculty Evaluation System v1.0 - SQL Injection
Windows 10 v21H1 - HTTP Protocol Stack Remote Code Execution
2023-07-08 00:16:23 +00:00
Exploit-DB
e2ea5c0412
DB: 2023-07-07
...
4 changes to exploits/shellcodes/ghdb
Gila CMS 1.10.9 - Remote Code Execution (RCE) (Authenticated)
Lost and Found Information System v1.0 - SQL Injection
Piwigo v13.7.0 - Stored Cross-Site Scripting (XSS) (Authenticated)
2023-07-07 00:16:26 +00:00
Exploit-DB
9461677d02
DB: 2023-07-05
...
4 changes to exploits/shellcodes/ghdb
Beauty Salon Management System v1.0 - SQLi
Bus Pass Management System 1.0 - Stored Cross-Site Scripting (XSS)
Car Rental Script 1.8 - Stored Cross-site scripting (XSS)
NEX-Forms WordPress plugin < 7.9.7 - Authenticated SQLi
2023-07-05 00:16:21 +00:00
Exploit-DB
ef9b4e5962
DB: 2023-07-04
...
20 changes to exploits/shellcodes/ghdb
TP-Link TL-WR940N V4 - Buffer OverFlow
D-Link DAP-1325 - Broken Access Control
Alkacon OpenCMS 15.0 - Multiple Cross-Site Scripting (XSS)
Microsoft 365 MSO (Version 2305 Build 16.0.16501.20074) 32-bit - Remote Code Execution (RCE)
Microsoft 365 MSO (Version 2305 Build 16.0.16501.20074) 64-bit - Remote Code Execution (RCE)
FuguHub 8.1 - Remote Code Execution
GZ Forum Script 1.8 - Stored Cross-Site Scripting (XSS)
PodcastGenerator 3.2.9 - Blind SSRF via XML Injection
POS Codekop v2.0 - Authenticated Remote Code Execution (RCE)
Prestashop 8.0.4 - Cross-Site Scripting (XSS)
Rukovoditel 3.4.1 - Multiple Stored XSS
Sales of Cashier Goods v1.0 - Cross Site Scripting (XSS)
spip v4.1.10 - Spoofing Admin account
Time Slot Booking Calendar 1.8 - Stored Cross-Site Scripting (XSS)
Vacation Rental 1.8 - Stored Cross-Site Scripting (XSS)
WBCE CMS 1.6.1 - Open Redirect & CSRF
WebsiteBaker v2.13.3 - Directory Traversal
WebsiteBaker v2.13.3 - Stored XSS
WP AutoComplete 1.0.4 - Unauthenticated SQLi
2023-07-04 00:16:26 +00:00
Exploit-DB
7807e6f266
DB: 2023-06-27
...
7 changes to exploits/shellcodes/ghdb
Azure Apache Ambari 2302250400 - Spoofing
Microsoft SharePoint Enterprise Server 2016 - Spoofing
Bus Pass Management System 1.0 - Cross-Site Scripting (XSS)
NEX-Forms WordPress plugin < 7.9.7 - Authenticated SQLi
PrestaShop Winbiz Payment module - Improper Limitation of a Pathname to a Restricted Directory
Translatepress Multilinugal WordPress plugin < 2.3.3 - Authenticated SQL Injection
Xenforo Version 2.2.13 - Authenticated Stored XSS
Windows 11 22h2 - Kernel Privilege Elevation
2023-06-27 00:17:09 +00:00
Exploit-DB
c79c4813de
DB: 2023-06-24
...
4 changes to exploits/shellcodes/ghdb
MCL-Net 4.3.5.8788 - Information Disclosure
Abantecart v1.3.2 - Authenticated Remote Code Execution
Bludit < 3.13.1 Backup Plugin - Arbitrary File Download (Authenticated)
SimpleMachinesForum v2.1.1 - Authenticated Remote Code Execution
NCH Express Invoice - Clear Text Password Storage and Account Takeover
2023-06-24 00:16:23 +00:00
Exploit-DB
ea194c414f
DB: 2023-06-23
...
3 changes to exploits/shellcodes/ghdb
Smart Office Web 20.28 - Remote Information Disclosure (Unauthenticated)
Microsoft OneNote (Version 2305 Build 16.0.16501.20074) 64-bit - Spoofing
MODX Revolution v2.8.3-pl - Authenticated Remote Code Execution
Super Socializer 7.13.52 - Reflected XSS
2023-06-23 00:16:26 +00:00
Exploit-DB
00f6b3e7ed
DB: 2023-06-22
...
2 changes to exploits/shellcodes/ghdb
HiSecOS 04.0.01 - Privilege Escalation
SPIP v4.2.1 - Remote Code Execution (Unauthenticated)
SPIP v4.2.0 - Remote Code Execution (Unauthenticated)
2023-06-22 00:16:26 +00:00
Exploit-DB
cc495bca11
DB: 2023-06-21
...
8 changes to exploits/shellcodes/ghdb
Nokia ASIKA 7.13.52 - Hard-coded private key disclosure
SPIP v4.2.1 - Remote Code Execution (Unauthenticated)
Student Study Center Management System v1.0 - Stored Cross-Site Scripting (XSS)
Super Socializer 7.13.52 - Reflected XSS
WP Sticky Social 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting (XSS)
PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE)
2023-06-21 00:16:34 +00:00
Exploit-DB
147824bdba
DB: 2023-06-20
...
8 changes to exploits/shellcodes/ghdb
Symantec SiteMinder WebAgent v12.52 - Cross-site scripting (XSS)
BoxBilling<=4.22.1.5 - Remote Code Execution (RCE)
Diafan CMS 6.0 - Reflected Cross-Site Scripting (XSS)
Groomify v1.0 - SQL Injection
Jobpilot v2.61 - SQL Injection
Sales Tracker Management System v1.0 - Multiple Vulnerabilities
Student Study Center Management System v1.0 - Stored Cross-Site Scripting (XSS)
The Shop v2.5 - SQL Injection
WordPress Theme Medic v1.0.0 - Weak Password Recovery Mechanism for Forgotten Password
Zoneminder < v1.37.24 - Log Injection & Stored XSS & CSRF Bypass
2023-06-20 00:16:29 +00:00
Exploit-DB
1e4f82620a
DB: 2023-06-16
...
2 changes to exploits/shellcodes/ghdb
Online Art gallery project 1.0 - Arbitrary File Upload (Unauthenticated)
PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE)
Camaleon CMS v2.7.0 - Server-Side Template Injection (SSTI)
2023-06-16 00:16:25 +00:00
Exploit-DB
158fcdfd5c
DB: 2023-06-15
...
11 changes to exploits/shellcodes/ghdb
Anevia Flamingo XL 3.2.9 - Remote Root Jailbreak
Anevia Flamingo XL 3.6.20 - Authenticated Root Remote Code Execution
Anevia Flamingo XS 3.6.5 - Authenticated Root Remote Code Execution
Monstra 3.0.4 - Stored Cross-Site Scripting (XSS)
Online Thesis Archiving System v1.0 - Multiple-SQLi
projectSend r1605 - CSV injection
projectSend r1605 - Stored XSS
Textpattern CMS v4.8.8 - Stored Cross-Site Scripting (XSS) (Authenticated)
Xoops CMS 2.5.10 - Stored Cross-Site Scripting (XSS) (Authenticated)
PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE)
2023-06-15 00:16:23 +00:00
Exploit-DB
ea8922f91d
DB: 2023-06-14
...
4 changes to exploits/shellcodes/ghdb
Composr-CMS Version <=10.0.39 - Authenticated Remote Code Execution
Online Examination System Project 1.0 - Cross-site request forgery (CSRF)
Sales Tracker Management System v1.0 - Multiple Vulnerabilities
Teachers Record Management System 1.0 - File Upload Type Validation
2023-06-14 00:16:24 +00:00
Exploit-DB
38cd2cd776
DB: 2023-06-10
...
4 changes to exploits/shellcodes/ghdb
BTCPay Server v1.7.4 - HTML Injection.
BTCPay Server v1.7.4 - HTML Injection
Thruk Monitoring Web Interface 3.06 - Path Traversal
WordPress Theme Workreap 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution
WP All Import v3.6.7 - Remote Code Execution (RCE) (Authenticated)
Grafana <=6.2.4 - HTML Injection
2023-06-10 00:16:34 +00:00
Exploit-DB
12f9039552
DB: 2023-06-08
...
2 changes to exploits/shellcodes/ghdb
Apache 2.4.x - Buffer Overflow
Yahoo User Interface library (YUI2) TreeView v2.8.2 - Multiple Reflected Cross Site Scripting (XSS)
USB Flash Drives Control 4.1.0.0 - Unquoted Service Path
2023-06-08 00:16:21 +00:00
Exploit-DB
ccfd0c515d
DB: 2023-06-07
...
3 changes to exploits/shellcodes/ghdb
Enrollment System Project v1.0 - SQL Injection Authentication Bypass (SQLI)
Tree Page View Plugin 1.6.7 - Cross Site Scripting (XSS)
GitLab v15.3 - Remote Code Execution (RCE) (Authenticated)
Macro Expert 4.9 - Unquoted Service Path
2023-06-07 00:16:24 +00:00
Exploit-DB
25f2c0adca
DB: 2023-06-05
...
8 changes to exploits/shellcodes/ghdb
STARFACE 7.3.0.10 - Authentication with Password Hash Possible
Barebones CMS v2.0.2 - Stored Cross-Site Scripting (XSS) (Authenticated)
Best POS Management System v1.0 - Unauthenticated Remote Code Execution
Enrollment System Project v1.0 - SQL Injection Authentication Bypass (SQLI)
Faculty Evaluation System 1.0 - Unauthenticated File Upload
File Manager Advanced Shortcode 2.3.2 - Unauthenticated Remote Code Execution (RCE)
MotoCMS Version 3.4.3 - SQL Injection
Online Security Guards Hiring System 1.0 - Reflected XSS
Total CMS 1.7.4 - Remote Code Execution (RCE)
Roxy WI v6.1.0.0 - Unauthenticated Remote Code Execution (RCE)
2023-06-05 00:16:22 +00:00
Exploit-DB
cb5c64da21
DB: 2023-06-01
...
13 changes to exploits/shellcodes/ghdb
Pydio Cells 4.1.2 - Cross-Site Scripting (XSS) via File Download
Pydio Cells 4.1.2 - Server-Side Request Forgery
Pydio Cells 4.1.2 - Unauthorised Role Assignments
Flexense HTTP Server 10.6.24 - Buffer Overflow (DoS) (Metasploit)
MotoCMS Version 3.4.3 - Server-Side Template Injection (SSTI)
Faculty Evaluation System 1.0 - Unauthenticated File Upload
Online Security Guards Hiring System 1.0 - Reflected XSS
Online shopping system advanced 1.0 - Multiple Vulnerabilities
Rukovoditel 3.3.1 - CSV injection
SCRMS 2023-05-27 1.0 - Multiple SQL Injection
Service Provider Management System v1.0 - SQL Injection
Ulicms-2023.1-sniffing-vicuna - Privilege escalation
unilogies/bumsys v1.0.3 beta - Unrestricted File Upload
2023-06-01 00:16:25 +00:00
Exploit-DB
9e36596021
DB: 2023-05-27
...
3 changes to exploits/shellcodes/ghdb
Bludit CMS v3.14.1 - Stored Cross-Site Scripting (XSS) (Authenticated)
GetSimple CMS v3.3.16 - Remote Code Execution (RCE)
SitemagicCMS 4.4.3 - Remote Code Execution (RCE)
Camaleon CMS v2.7.0 - Server-Side Template Injection (SSTI)
2023-05-27 00:16:29 +00:00
Exploit-DB
9be142a874
DB: 2023-05-26
...
7 changes to exploits/shellcodes/ghdb
Seagate Central Storage 2015.0916 - Unauthenticated Remote Command Execution (Metasploit)
SCM Manager 1.60 - Cross-Site Scripting Stored (Authenticated)
Ulicms 2023.1 - create admin user via mass assignment
WBCE CMS 1.6.1 - Multiple Stored Cross-Site Scripting (XSS)
Zenphoto 1.6 - Multiple stored XSS
Filmora 12 version ( Build 1.0.0.7) - Unquoted Service Paths Privilege Escalation
2023-05-26 00:16:47 +00:00
Exploit-DB
2b62bd319d
DB: 2023-05-25
...
3 changes to exploits/shellcodes/ghdb
Roxy WI v6.1.0.0 - Unauthenticated Remote Code Execution (RCE) via subprocess_execute
Service Provider Management System v1.0 - SQL Injection
WP-file-manager v6.9 - Unauthenticated Arbitrary File Upload leading to RCE
Roxy WI v6.1.0.0 - Improper Authentication Control
2023-05-25 00:16:26 +00:00
Exploit-DB
0a7adaa3fc
DB: 2023-05-24
...
40 changes to exploits/shellcodes/ghdb
Optoma 1080PSTX Firmware C02 - Authentication Bypass
Screen SFT DAB 600/C - Authentication Bypass Account Creation
Screen SFT DAB 600/C - Authentication Bypass Admin Password Change
Screen SFT DAB 600/C - Authentication Bypass Erase Account
Screen SFT DAB 600/C - Authentication Bypass Password Change
Screen SFT DAB 600/C - Authentication Bypass Reset Board Config
Screen SFT DAB 600/C - Unauthenticated Information Disclosure (userManager.cgx)
PnPSCADA v2.x - Unauthenticated PostgreSQL Injection
Gin Markdown Editor v0.7.4 (Electron) - Arbitrary Code Execution
Yank Note v3.52.1 (Electron) - Arbitrary Code Execution
Apache Superset 2.0.0 - Authentication Bypass
FusionInvoice 2023-1.0 - Stored XSS (Cross-Site Scripting)
PaperCut NG/MG 22.0.4 - Remote Code Execution (RCE)
Affiliate Me Version 5.0.1 - SQL Injection
Best POS Management System v1.0 - Unauthenticated Remote Code Execution
Bludit CMS v3.14.1 - Stored Cross-Site Scripting (XSS) (Authenticated)
ChurchCRM v4.5.4 - Reflected XSS via Image (Authenticated)
CiviCRM 5.59.alpha1 - Stored XSS (Cross-Site Scripting)
e107 v2.3.2 - Reflected XSS
File Thingie 2.5.7 - Remote Code Execution (RCE)
GetSimple CMS v3.3.16 - Remote Code Execution (RCE)
LeadPro CRM v1.0 - SQL Injection
PodcastGenerator 3.2.9 - Multiple Stored Cross-Site Scripting (XSS)
Prestashop 8.0.4 - CSV injection
Quicklancer v1.0 - SQL Injection
SitemagicCMS 4.4.3 - Remote Code Execution (RCE)
Smart School v1.0 - SQL Injection
Stackposts Social Marketing Tool v1.0 - SQL Injection
thrsrossi Millhouse-Project 1.414 - Remote Code Execution
TinyWebGallery v2.5 - Remote Code Execution (RCE)
WBiz Desk 1.2 - SQL Injection
Webkul Qloapps 1.5.2 - Cross-Site Scripting (XSS)
WordPress Plugin Backup Migration 1.2.8 - Unauthenticated Database Backup
Cameleon CMS 2.7.4 - Persistent Stored XSS in Post Title
Hubstaff 1.6.14-61e5e22e - 'wow64log' DLL Search Order Hijacking
MobileTrans 4.0.11 - Weak Service Privilege Escalation
Trend Micro OfficeScan Client 10.0 - ACL Service LPE
eScan Management Console 14.0.1400.2281 - Cross Site Scripting
eScan Management Console 14.0.1400.2281 - SQL Injection (Authenticated)
2023-05-24 00:16:34 +00:00
Exploit-DB
7217cf5c90
DB: 2023-05-19
...
2 changes to exploits/shellcodes/ghdb
Auto Dealer Management System 1.0 - Broken Access Control Exploit
Auto Dealer Management System v1.0 - SQL Injection
Auto Dealer Management System v1.0 - SQL Injection in sell_vehicle.php
Auto Dealer Management System v1.0 - SQL Injection on manage_user.php
Auto Dealer Management System 1.0 - Broken Access Control Exploit
Auto Dealer Management System v1.0 - SQL Injection
Auto Dealer Management System v1.0 - SQL Injection in sell_vehicle.php
Auto Dealer Management System v1.0 - SQL Injection on manage_user.php
Best pos Management System v1.0 - Remote Code Execution (RCE) on File Upload
Employee Task Management System v1.0 - Broken Authentication
Employee Task Management System v1.0 - SQL Injection on (task-details.php?task_id=?)
Employee Task Management System v1.0 - SQL Injection on edit-task.php
Employee Task Management System v1.0 - Broken Authentication
Employee Task Management System v1.0 - SQL Injection on (task-details.php?task_id=?)
Employee Task Management System v1.0 - SQL Injection on edit-task.php
Music Gallery Site v1.0 - Broken Access Control
Music Gallery Site v1.0 - SQL Injection on music_list.php
Music Gallery Site v1.0 - SQL Injection on page Master.php
Music Gallery Site v1.0 - SQL Injection on page view_music_details.php
Music Gallery Site v1.0 - Broken Access Control
Music Gallery Site v1.0 - SQL Injection on music_list.php
Music Gallery Site v1.0 - SQL Injection on page Master.php
Music Gallery Site v1.0 - SQL Injection on page view_music_details.php
Responsive FileManager 9.9.5 - Remote Code Execution (RCE)
Simple Food Ordering System v1.0 - Cross-Site Scripting (XSS)
2023-05-19 00:17:10 +00:00
Exploit-DB
bfc4baf25a
DB: 2023-05-14
...
7 changes to exploits/shellcodes/ghdb
FLEX 1080 < 1085 Web 1.6.0 - Denial of Service
Epson Stylus SX510W Printer Remote Power Off - Denial of Service
Job Portal 1.0 - File Upload Restriction Bypass
Online Clinic Management System 2.2 - Multiple Stored Cross-Site Scripting (XSS)
RockMongo 1.1.7 - Stored Cross-Site Scripting (XSS)
TinyWebGallery v2.5 - Stored Cross-Site Scripting (XSS)
2023-05-14 00:16:46 +00:00
Exploit-DB
d63f6320a5
DB: 2023-05-12
...
1 changes to exploits/shellcodes/ghdb
Druva inSync Windows Client 6.5.2 - Local Privilege Escalation
Druva inSync Windows Client 6.6.3 - Local Privilege Escalation
Druva inSync Windows Client 6.5.2 - Local Privilege Escalation
Druva inSync Windows Client 6.6.3 - Local Privilege Escalation
2023-05-12 00:16:22 +00:00
Exploit-DB
59207f4242
DB: 2023-05-10
...
2 changes to exploits/shellcodes/ghdb
Cmaps v8.0 - SQL injection
Online Pizza Ordering System v1.0 - Unauthenticated File Upload
Ulicms-2023.1 sniffing-vicuna - Stored Cross-Site Scripting (XSS)
2023-05-10 00:16:24 +00:00
Exploit-DB
aada2be87a
DB: 2023-05-08
...
2 changes to exploits/shellcodes/ghdb
ChurchCRM v4.5.1 - Authenticated SQL Injection
ChurchCRM v4.5.3 - Authenticated SQL Injection
2023-05-08 00:16:23 +00:00
Exploit-DB
8945b320b5
DB: 2023-05-06
...
20 changes to exploits/shellcodes/ghdb
Codigo Markdown Editor v1.0.1 (Electron) - Remote Code Execution
Cmaps v8.0 - SQL injection
EasyPHP Webserver 14.1 - Multiple Vulnerabilities (RCE and Path Traversal)
File Thingie 2.5.7 - Remote Code Execution (RCE)
Intern Record System v1.0 - SQL Injection (Unauthenticated)
Jedox 2020.2.5 - Disclosure of Database Credentials via Improper Access Controls
Jedox 2020.2.5 - Remote Code Execution via Configurable Storage Path
Jedox 2020.2.5 - Remote Code Execution via Executable Groovy-Scripts
Jedox 2020.2.5 - Stored Cross-Site Scripting in Log-Module
Jedox 2022.4.2 - Code Execution via RPC Interfaces
Jedox 2022.4.2 - Disclosure of Database Credentials via Connection Checks
Jedox 2022.4.2 - Remote Code Execution via Directory Traversal
KodExplorer v4.51.03 - Pwned-Admin File-Inclusion - Remote Code Execution (RCE)
Online Pizza Ordering System v1.0 - Unauthenticated File Upload
pluck v4.7.18 - Stored Cross-Site Scripting (XSS)
Simple Task Managing System v1.0 - SQL Injection (Unauthenticated)
Ulicms-2023.1 sniffing-vicuna - Remote Code Execution (RCE)
Ulicms-2023.1 sniffing-vicuna - Stored Cross-Site Scripting (XSS)
Wolf CMS 0.8.3.1 - Remote Code Execution (RCE)
2023-05-06 00:16:26 +00:00
Exploit-DB
668314bbda
DB: 2023-05-03
...
19 changes to exploits/shellcodes/ghdb
FS-S3900-24T4S - Privilege Escalation
Virtual Reception v1.0 - Web Server Directory Traversal
admidio v4.2.5 - CSV Injection
Companymaps v8.0 - Stored Cross Site Scripting (XSS)
GLPI 9.5.7 - Username Enumeration
OpenEMR v7.0.1 - Authentication credentials brute force
PHP Restaurants 1.0 - SQLi Authentication Bypass & Cross Site Scripting
PHPFusion 9.10.30 - Stored Cross-Site Scripting (XSS)
PHPJabbers Simple CMS 5.0 - SQL Injection
PHPJabbers Simple CMS V5.0 - Stored Cross-Site Scripting (XSS)
phpMyFAQ v3.1.12 - CSV Injection
projectSend r1605 - Private file download
revive-adserver v5.4.1 - Cross-Site Scripting (XSS)
Serendipity 2.4.0 - File Inclusion RCE
SoftExpert (SE) Suite v2.1.3 - Local File Inclusion
Advanced Host Monitor v12.56 - Unquoted Service Path
MilleGPG5 5.9.2 (Gennaio 2023) - Local Privilege Escalation / Incorrect Access Control
2023-05-03 00:16:23 +00:00
Exploit-DB
91a0e53b65
DB: 2023-04-29
...
9 changes to exploits/shellcodes/ghdb
pfsenseCE v2.6.0 - Anti-brute force protection bypass
Art Gallery Management System Project in PHP v 1.0 - SQL injection
Art Gallery Management System Project v1.0 - Reflected Cross-Site Scripting (XSS)
Art Gallery Management System Project v1.0 - SQL Injection (sqli) authenticated
Art Gallery Management System Project v1.0 - SQL Injection (sqli) Unauthenticated
Art Gallery Management System Project in PHP v 1.0 - SQL injection
Art Gallery Management System Project v1.0 - Reflected Cross-Site Scripting (XSS)
Art Gallery Management System Project v1.0 - SQL Injection (cid) Unauthenticated
Art Gallery Management System Project v1.0 - SQL Injection (editid) authenticated
Bang Resto v1.0 - 'Multiple' SQL Injection
Bang Resto v1.0 - Stored Cross-Site Scripting (XSS)
Bang Resto v1.0 - 'Multiple' SQL Injection
Bang Resto v1.0 - Stored Cross-Site Scripting (XSS)
pfsenseCE v2.6.0 - Anti-brute force protection bypass
2023-04-29 00:16:28 +00:00
