Exploits & CVE's

Exploits Database – Exploits, Shellcode, 0days, Remote Exploits, Local Exploits, Web Apps, Vulnerability Reports, CVEs and more.

Palo Alto OS Command Injection Proof Of Concept

0
Authored by W01fh4cker | Site github.com This is a scanning script to validate vulnerable Palo Alto OS systems for the recent zero day command injection vulnerability. advisories | CVE-2024-3400

Palo Alto OS Command Injection

0
Authored by h4x0r-dz | Site github.com Palo Alto OS was recently hit by a command injection zero day attack. These are exploitation details related to the zero day. advisories | CVE-2024-3400 Change...

WBCE 1.6.0 SQL Injection

0
Authored by Young Pope WBCE version 1.6.0 suffers from a remote SQL injection vulnerability. advisories | CVE-2023-39796 Change Mirror Download # Exploit Title: |Unauthenticated SQL injection in WBCE 1.6.0# Date: 15.11.2023 # Exploit...

Kruxton 1.0 Shell Upload

0
Authored by nu11secur1ty Kruxton version 1.0 suffers from a remote shell upload vulnerability. Change Mirror Download ## Title: kruxton-1.0-FileUpload-RCE## Author: nu11secur1ty## Date: 04/15/2024## Vendor: https://www.mayurik.com/## Software: https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html## Reference: https://portswigger.net/web-security/file-upload## Description:The system setting...

Kruxton 1.0 SQL Injection

0
Authored by nu11secur1ty Kruxton version 1.0 suffers from a remote SQL injection vulnerability. Change Mirror Download ## Title: kruxton-1.0-Multiple-SQLi## Author: nu11secur1ty## Date: 04/15/2024## Vendor: https://www.mayurik.com/## Software: https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html## Reference: https://portswigger.net/web-security/sql-injection## Description:The username parameter...

PrusaSlicer 2.6.1 Arbitrary Code Execution

0
Authored by Kamil Brenski PrusaSlicer versions 2.6.1 and below suffer from an arbitrary code execution vulnerability. advisories | CVE-2023-47268 Change Mirror Download # Exploit Title: PrusaSlicer 2.6.1 - Arbitrary code execution on g-code...

AMPLE BILLS 0.1 SQL injection

0
Authored by nu11secur1ty AMPLE BILLS version 0.1 suffers from a remote SQL injection vulnerability. Change Mirror Download ## Title: AMPLE BILLS 0.1 Multiple-SQLi## Author: nu11secur1ty## Date: 04/13/2024## Vendor: https://www.mayurik.com/## Software: https://www.sourcecodester.com/php/16741/free-and-open-source-inventory-management-system-php-source-code.html## Reference:...

Joomla SP Page Builder 5.2.7 SQL Injection

0
Authored by indoushka Joomla SP Page Builder component version 5.2.7 suffers from a remote SQL injection vulnerability. Change Mirror Download ====================================================================================================================================| # Title : SP Page Builder 5.2.7...

CHAOS RAT 5.0.1 Remote Command Execution

0
Authored by chebuya CHAOS RAT web panel version 5.0.1 is vulnerable to command injection, which can be triggered from a cross site scripting attack, allowing an attacker to takeover the...

Windows Kernel Subkey List Use-After-Free

0
Authored by Google Security Research, mjurczyk The Windows Kernel suffers from a subkey list use-after-free vulnerability due to a mishandling of partial success in CmpAddSubKeyEx. advisories | CVE-2024-26182
Error decoding the Instagram API json