Exploit-DB
2.38K subscribers
9.31K links
Offensive Security Exploit Database
Download Telegram
[webapps] Plastic SCM 10.0.16.5622 - WebAdmin Server Access
Plastic SCM 10.0.16.5622 - WebAdmin Server Access
hxxps://www.exploit-db.com/exploits/50426
[webapps] Company's Recruitment Management System 1.0 - 'Add New user' Cross-Site Request Forgery (CSRF)
Company's Recruitment Management System 1.0 - 'Add New user' Cross-Site Request Forgery (CSRF)
hxxps://www.exploit-db.com/exploits/50425
[webapps] Company's Recruitment Management System 1.0 - 'description' Stored Cross-Site Scripting (XSS)
Company's Recruitment Management System 1.0 - 'description' Stored Cross-Site Scripting (XSS)
hxxps://www.exploit-db.com/exploits/50424
[webapps] Mitsubishi Electric & INEA SmartRTU - Reflected Cross-Site Scripting (XSS)
Mitsubishi Electric & INEA SmartRTU - Reflected Cross-Site Scripting (XSS)
hxxps://www.exploit-db.com/exploits/50423
[webapps] Mitsubishi Electric & INEA SmartRTU - Source Code Disclosure
Mitsubishi Electric & INEA SmartRTU - Source Code Disclosure
hxxps://www.exploit-db.com/exploits/50422
[webapps] Company's Recruitment Management System 1.0. - 'title' Stored Cross-Site Scripting (XSS)
Company's Recruitment Management System 1.0. - 'title' Stored Cross-Site Scripting (XSS)
hxxps://www.exploit-db.com/exploits/50421
[webapps] Wordpress Plugin Duplicator 1.3.26 - Unauthenticated Arbitrary File Read
Wordpress Plugin Duplicator 1.3.26 - Unauthenticated Arbitrary File Read
hxxps://www.exploit-db.com/exploits/50420
[webapps] Support Board 3.3.4 - 'Message' Stored Cross-Site Scripting (XSS)
Support Board 3.3.4 - 'Message' Stored Cross-Site Scripting (XSS)
hxxps://www.exploit-db.com/exploits/50419
[webapps] i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS)
i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS)
hxxps://www.exploit-db.com/exploits/50418
[local] SolarWinds Kiwi CatTools 3.11.8 - Unquoted Service Path
SolarWinds Kiwi CatTools 3.11.8 - Unquoted Service Path
hxxps://www.exploit-db.com/exploits/50416
[webapps] TextPattern CMS 4.8.7 - Remote Command Execution (RCE) (Authenticated)
TextPattern CMS 4.8.7 - Remote Command Execution (RCE) (Authenticated)
hxxps://www.exploit-db.com/exploits/50415
[webapps] Sonicwall SonicOS 7.0 - Host Header Injection
Sonicwall SonicOS 7.0 - Host Header Injection
hxxps://www.exploit-db.com/exploits/50414
[webapps] Logitech Media Server 8.2.0 - 'Title' Cross-Site Scripting (XSS)
Logitech Media Server 8.2.0 - 'Title' Cross-Site Scripting (XSS)
hxxps://www.exploit-db.com/exploits/50413
[webapps] Employee Record Management System 1.2 - 'empid' SQL injection (Unauthenticated)
Employee Record Management System 1.2 - 'empid' SQL injection (Unauthenticated)
hxxps://www.exploit-db.com/exploits/50467
[local] Dynojet Power Core 2.3.0 - Unquoted Service Path
Dynojet Power Core 2.3.0 - Unquoted Service Path
hxxps://www.exploit-db.com/exploits/50466
[webapps] Ericsson Network Location MPS GMPC21 - Privilege Escalation (Metasploit)
Ericsson Network Location MPS GMPC21 - Privilege Escalation (Metasploit)
hxxps://www.exploit-db.com/exploits/50469
[webapps] Ericsson Network Location MPS GMPC21 - Remote Code Execution (RCE) (Metasploit)
Ericsson Network Location MPS GMPC21 - Remote Code Execution (RCE) (Metasploit)
hxxps://www.exploit-db.com/exploits/50468
[local] 10-Strike Network Inventory Explorer Pro 9.31 - Buffer Overflow (SEH)
10-Strike Network Inventory Explorer Pro 9.31 - Buffer Overflow (SEH)
hxxps://www.exploit-db.com/exploits/50472
[local] YouTube Video Grabber 1.9.9.1 - Buffer Overflow (SEH)
YouTube Video Grabber 1.9.9.1 - Buffer Overflow (SEH)
hxxps://www.exploit-db.com/exploits/50471
[local] Kingdia CD Extractor 3.0.2 - Buffer Overflow (SEH)
Kingdia CD Extractor 3.0.2 - Buffer Overflow (SEH)
hxxps://www.exploit-db.com/exploits/50470