Exploit-DB
2.38K subscribers
9.31K links
Offensive Security Exploit Database
Download Telegram
[local] Macro Expert 4.7 - Unquoted Service Path
Macro Expert 4.7 - Unquoted Service Path
hxxps://www.exploit-db.com/exploits/50431
[webapps] SonicWall SMA 10.2.1.0-17sv - Password Reset
SonicWall SMA 10.2.1.0-17sv - Password Reset
hxxps://www.exploit-db.com/exploits/50430
[webapps] Online Motorcycle (Bike) Rental System 1.0 - Blind Time-Based SQL Injection (Unauthenticated)
Online Motorcycle (Bike) Rental System 1.0 - Blind Time-Based SQL Injection (Unauthenticated)
hxxps://www.exploit-db.com/exploits/50429
[webapps] myfactory FMS 7.1-911 - 'Multiple' Reflected Cross-Site Scripting (XSS)
myfactory FMS 7.1-911 - 'Multiple' Reflected Cross-Site Scripting (XSS)
hxxps://www.exploit-db.com/exploits/50428
[webapps] WordPress Theme Enfold 4.8.3 - Reflected Cross-Site Scripting (XSS)
WordPress Theme Enfold 4.8.3 - Reflected Cross-Site Scripting (XSS)
hxxps://www.exploit-db.com/exploits/50427
[webapps] Plastic SCM 10.0.16.5622 - WebAdmin Server Access
Plastic SCM 10.0.16.5622 - WebAdmin Server Access
hxxps://www.exploit-db.com/exploits/50426
[webapps] Company's Recruitment Management System 1.0 - 'Add New user' Cross-Site Request Forgery (CSRF)
Company's Recruitment Management System 1.0 - 'Add New user' Cross-Site Request Forgery (CSRF)
hxxps://www.exploit-db.com/exploits/50425
[webapps] Company's Recruitment Management System 1.0 - 'description' Stored Cross-Site Scripting (XSS)
Company's Recruitment Management System 1.0 - 'description' Stored Cross-Site Scripting (XSS)
hxxps://www.exploit-db.com/exploits/50424
[webapps] Mitsubishi Electric & INEA SmartRTU - Reflected Cross-Site Scripting (XSS)
Mitsubishi Electric & INEA SmartRTU - Reflected Cross-Site Scripting (XSS)
hxxps://www.exploit-db.com/exploits/50423
[webapps] Mitsubishi Electric & INEA SmartRTU - Source Code Disclosure
Mitsubishi Electric & INEA SmartRTU - Source Code Disclosure
hxxps://www.exploit-db.com/exploits/50422
[webapps] Company's Recruitment Management System 1.0. - 'title' Stored Cross-Site Scripting (XSS)
Company's Recruitment Management System 1.0. - 'title' Stored Cross-Site Scripting (XSS)
hxxps://www.exploit-db.com/exploits/50421
[webapps] Wordpress Plugin Duplicator 1.3.26 - Unauthenticated Arbitrary File Read
Wordpress Plugin Duplicator 1.3.26 - Unauthenticated Arbitrary File Read
hxxps://www.exploit-db.com/exploits/50420
[webapps] Support Board 3.3.4 - 'Message' Stored Cross-Site Scripting (XSS)
Support Board 3.3.4 - 'Message' Stored Cross-Site Scripting (XSS)
hxxps://www.exploit-db.com/exploits/50419
[webapps] i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS)
i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS)
hxxps://www.exploit-db.com/exploits/50418
[local] SolarWinds Kiwi CatTools 3.11.8 - Unquoted Service Path
SolarWinds Kiwi CatTools 3.11.8 - Unquoted Service Path
hxxps://www.exploit-db.com/exploits/50416
[webapps] TextPattern CMS 4.8.7 - Remote Command Execution (RCE) (Authenticated)
TextPattern CMS 4.8.7 - Remote Command Execution (RCE) (Authenticated)
hxxps://www.exploit-db.com/exploits/50415
[webapps] Sonicwall SonicOS 7.0 - Host Header Injection
Sonicwall SonicOS 7.0 - Host Header Injection
hxxps://www.exploit-db.com/exploits/50414
[webapps] Logitech Media Server 8.2.0 - 'Title' Cross-Site Scripting (XSS)
Logitech Media Server 8.2.0 - 'Title' Cross-Site Scripting (XSS)
hxxps://www.exploit-db.com/exploits/50413
[webapps] Employee Record Management System 1.2 - 'empid' SQL injection (Unauthenticated)
Employee Record Management System 1.2 - 'empid' SQL injection (Unauthenticated)
hxxps://www.exploit-db.com/exploits/50467
[local] Dynojet Power Core 2.3.0 - Unquoted Service Path
Dynojet Power Core 2.3.0 - Unquoted Service Path
hxxps://www.exploit-db.com/exploits/50466