Exploits & CVE's

Exploits Database – Exploits, Shellcode, 0days, Remote Exploits, Local Exploits, Web Apps, Vulnerability Reports, CVEs and more.

aptdaemon File Existence Disclosure

0
Authored by Vaisha Bernard aptdaemon versions prior to 1.1.1 suffer from a file existence disclosure vulnerability. Change Mirror Download # Exploit Title: File Existence Disclosure in aptdaemon <= 1.1.1+bzr982-0ubuntu32.1# Date: 2020-10-27# Exploit...

Blueman Local Root / Privilege Escalation

0
Authored by Vaisha Bernard Blueman versions prior to 2.1.4 suffer from a local privilege escalation vulnerability that achieves root. advisories | CVE-2020-15238 Change Mirror Download # Exploit Title: Local Privilege Escalation in Blueman...

Nagios XI 5.7.3 Remote Command Injection

0
Authored by Chris Lyne, Matthew Aberegg Nagios XI version 5.7.3 mibs.php remote command injection exploit. advisories | CVE-2020-5791 Change Mirror Download # Exploit Title: Nagios XI 5.7.3 - 'mibs.php' Remote Command Injection (Authenticated)#...

God Kings 0.60.1 Notification Spoofing

0
Authored by Julien Ahrens | Site rcesecurity.com God Kings version 0.60.1 suffers from an improper authorization issue allowing for in-game notification spoofing. advisories | CVE-2020-25204 Change Mirror Download RCE Security Advisoryhttps://www.rcesecurity.com1. ADVISORY INFORMATION=======================Product:...

BigBlueButton 2.2.25 File Disclosure / Server-Side Request Forgery

0
Site redteam-pentesting.de RedTeam Pentesting discovered a vulnerability in the BigBlueButton web conferencing system version 2.2.25 that allows participants of a conference with permissions to upload presentations to read arbitrary files...

CMS Made Simple 2.1.6 Server-Side Template Injection

0
Authored by Gurkirat Singh CMS Made Simple version 2.1.6 suffers from a server-side template injection vulnerability. advisories | CVE-2017-16783 Change Mirror Download # Exploit Title: CMS Made Simple 2.1.6 - 'cntnt01detailtemplate' Server-Side Template...

PDW File Browser 1.3 Cross Site Scripting

0
Authored by Ramon Janssen, Joost Vondeling, David Bimmel PDW File Browser versions 1.3 and below suffer from a cross site scripting vulnerability. Change Mirror Download # Exploit Title: PDW File Browser <=...

InoERP 0.7.2 Remote Code Execution

0
Authored by Simon Lyhin InoERP version 0.7.2 suffers from an unauthenticated remote code execution vulnerability. Change Mirror Download #!/usr/bin/python# -*- coding: UTF-8 -*-# Exploit Title: InoERP 0.7.2 Unauthenticated Remote Code Execution#...

Online Health Care System 1.0 Cross Site Scripting

0
Authored by Akiner Kisa Online Health Care System version 1.0 suffers from multiple persistent cross site scripting vulnerabilities. Change Mirror Download # Exploit Title: Online Health Care System 1.0 - Multiple Cross...

Genexis Platinum-4410 Cross Site Scripting

0
Authored by Amal Mohandas The Genexis Platinum-4410 router suffers from a persistent cross site scripting vulnerability. Change Mirror Download # Exploit Title: Persistent XSS in SSID# Date: 10/24/2020# Exploit Author: Amal Mohandas#...
Error decoding the Instagram API json