Exploits & CVE's

Exploits Database – Exploits, Shellcode, 0days, Remote Exploits, Local Exploits, Web Apps, Vulnerability Reports, CVEs and more.

Zenitel AlphaCom XE Audio Server 11.2.3.10 Shell Upload

0
Authored by Ricardo Jose Ruiz Fernandez Remote command execution exploit for Zenitel AlphaCom XE Audio Server versions up to 11.2.3.10 which have a web interface called AlphaWeb XE that allows...

Evolution CMS 3.1.6 Remote Code Execution

0
Authored by Halit Akaydin Evolution CMS version 3.1.6 authenticated remote code execution exploit. Change Mirror Download # Exploit Title: Evolution CMS 3.1.6 - Remote Code Execution (RCE) (Authenticated)# Date: 15-09-2021# Exploit Author:...

AHSS-PHP 1.0 Cross Site Scripting / SQL Injection

0
Authored by nu11secur1ty AHSS-PHP version 1.0 suffers from cross site scripting and remote SQL injection vulnerabilities. Change Mirror Download ### Exploit Title: AHSS-PHP (by: oretnom23 ) v1.0 is vulnerable in the application...

Purchase Order Management System 1.0 Shell Upload

0
Authored by Aryan Chehreghani Purchase Order Management System version 1.0 suffers from a remote shell upload vulnerability. Change Mirror Download # Exploit Title: Purchase Order Management System 1.0 - Remote File Upload#...

Facebook ParlAI 1.0.0 Code Execution / Deserialization

0
Authored by Abhiram V Facebook ParlAI version 1.0.0 suffers from a deserialization vulnerability that can allow for code execution. advisories | CVE-2021-24040 Change Mirror Download # Exploit Title: Facebook ParlAI 1.0.0 - ...

Atlassian Confluence WebWork OGNL Injection

0
Authored by wvu, Jang, Benny Jacob | Site metasploit.com This Metasploit module exploits an OGNL injection in Atlassian Confluence's WebWork component to execute commands as the Tomcat user. advisories | CVE-2021-26084 Change...

Men Salon Management System 1.0 Cross Site Scripting / SQL Injection

0
Authored by Aryan Chehreghani Men Salon Management System version 1.0 suffers from cross site scripting and remote SQL injection vulnerabilities. Change Mirror Download # Exploit Title: Men Salon Management System 1.0 -...

WordPress Download From Files 1.48 Shell Upload

0
Authored by spacehen WordPress Download From Files plugin version 1.48 suffers from a remote shell upload vulnerability. Change Mirror Download # Exploit Title: Wordpress Plugin Download From Files 1.48 - Arbitrary File...

Apartment Visitor Management System 1.0 Shell Upload / SQL Injection

0
Authored by mari0x00 Apartment Visitor Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for a shell upload. Change Mirror Download # Exploit Title: Apartment Visitor Management System...

Active WebCam 11.5 Unquoted Service Path

0
Authored by Salman Asad Active WebCam version 11.5 suffers from an unquoted service path vulnerability. Change Mirror Download # Exploit Title: Active WebCam 11.5 - Unquoted Service Path# Exploit Author: Salman Asad...
Error decoding the Instagram API json