Exploits & CVE's

Exploits Database – Exploits, Shellcode, 0days, Remote Exploits, Local Exploits, Web Apps, Vulnerability Reports, CVEs and more.

Elber ESE DVB-S/S2 Satellite Receiver 1.5.x Insecure Direct Object Reference

0
Authored by LiquidWorm | Site zeroscience.mk Elber ESE DVB-S/S2 Satellite Receiver version 1.5.x suffers from an unauthenticated device configuration and client-side hidden functionality disclosure vulnerability. Change Mirror Download Elber ESE DVB-S/S2 Satellite...

Panel Amadey.d.c MVID-2024-0680 Cross Site Scripting

Authored by malvuln | Site malvuln.com Panel Amadey.d.c malware suffers from cross site scripting vulnerabilities. Change Mirror Download Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2024Original source: https://malvuln.com/advisory/50467c891bf7de34d2d65fa93ab8b558.txtContact: [email protected]: twitter.com/malvulnThreat:...

Drupal-Wiki 8.31 / 8.30 Cross Site Scripting

Authored by Simon Bieber | Site secuvera.de Drupal-Wiki versions 8.30 and 8.31 suffer from multiple persistent cross site scripting vulnerabilities. advisories | CVE-2024-34481 Change Mirror Download -----BEGIN PGP SIGNED MESSAGE-----Hash: SHA256secuvera-SA-2024-02: Multiple Persistent...

Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link Insecure Direct Object Reference

0
Authored by LiquidWorm | Site zeroscience.mk Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link suffers from an unauthenticated device configuration and client-side hidden functionality disclosure vulnerability. Change Mirror Download Elber Reble610 M/ODU XPIC...

Kemp LoadMaster Unauthenticated Command Injection

Authored by Dave Yesland | Site metasploit.com This Metasploit module exploits an unauthenticated command injection vulnerability in Progress Kemp LoadMaster in the authorization header after version 7.2.48.1. The following versions...

Elber ESE DVB-S/S2 Satellite Receiver 1.5.x Authentication Bypass

0
Authored by LiquidWorm | Site zeroscience.mk Elber ESE DVB-S/S2 Satellite Receiver version 1.5.x suffers from an authentication bypass vulnerability through a direct and unauthorized access to the password management functionality....

htmlLawed 1.2.5 Remote Command Execution

Authored by d4t4s3c htmlLawed versions 1.2.5 and below proof of concept remote command execution exploit. advisories | CVE-2022-35914 Change Mirror Download #!/bin/bash# Exploit Title: htmlLawed <= 1.2.5 - Remote Code Execution# Date: 2024-05-02#...

Online Tours And Travels Management System 1.0 SQL Injection

Authored by nu11secur1ty Online Tours and Travels Management System version 1.0 suffers from a remote SQL injection vulnerability. Change Mirror Download ## Titles: Travel-Manager-OTMSP-1.0 Multiple SQLi## Author: nu11secur1ty## Date: 05/01/2024## Vendor: https://mayurik.com/##...

SOPlanning 1.52.00 Cross Site Scripting

Authored by liquidsky SOPlanning version 1.52.00 suffers from a cross site scripting vulnerability in groupe_save.php. Change Mirror Download Exploit Title: SOPlanning v1.52.00 'groupe_save.php' XSS (Reflected XSS)Application: SOPlanningVersion: 1.52.00Date: 4/22/24Exploit Author: Joseph McPeters...

Clinic Queuing System 1.0 Remote Code Execution

Authored by Juan Marco Sanchez Clinic Queuing System version 1.0 suffers from a remote code execution vulnerability. advisories | CVE-2024-0264, CVE-2024-0265 Change Mirror Download # Exploit Title: Clinic Queuing System 1.0 RCE #...
Error decoding the Instagram API json