New pages
From PwnWiki
(newest | oldest) View (newer 50 | older 50) (20 | 50 | 100 | 250 | 500)
- 16:38, 5 July 2021 齊治堡壘機前台遠程命令執行漏洞/zh-cn (hist | edit) [490 bytes] Xc1ym (talk | contribs) (Created page with "==漏洞影响==")
- 09:57, 5 July 2021 一卡通信息管理系統 SQL注入漏洞/zh-cn (hist | edit) [756 bytes] Pwnwiki (talk | contribs) (Created page with "该漏洞已通过验证")
- 09:55, 5 July 2021 一卡通信息管理系統 SQL注入漏洞 (hist | edit) [1,040 bytes] Pwnwiki (talk | contribs) (Created page with "<languages /> <center> {| style="border: 2.0px solid grey; background: #b3ff9c;" width="85%" | align="center" width="60px"| link=|55px | align="center" |''...")
- 17:24, 4 July 2021 CVE-2021-3223 Node-RED ui base 任意文件讀取漏洞/en (hist | edit) [650 bytes] Pwnwiki (talk | contribs) (Created page with "The EXP/POC/Payload on this page has been tested and available, and the vulnerability has been successfully reproduced.")
- 17:21, 4 July 2021 CVE-2021-3223 Node-RED ui base 任意文件讀取漏洞/zh-cn (hist | edit) [581 bytes] Pwnwiki (talk | contribs) (Created page with "CVE-2021-3223 Node-RED ui base 任意文件读取漏洞")
- 17:19, 4 July 2021 CVE-2021-3223 Node-RED ui base 任意文件讀取漏洞 (hist | edit) [721 bytes] Pwnwiki (talk | contribs) (Created page with "<languages /> <center> {| style="border: 2.0px solid grey; background: #b3ff9c;" width="85%" | align="center" width="60px"| link=|55px | align="center" |'...")
- 10:24, 4 July 2021 Scleather SQL注入漏洞 (hist | edit) [889 bytes] Pwnwiki (talk | contribs) (Created page with "<pre> **************************** #Exploit Title: scleather - SQL Injection vulnerability #Date: 2021-06-27 #Exploit Author: Mahdi Karimi #Vendor Homepage: www.scleather.co.t...")
- 10:23, 4 July 2021 EasyFTP Server 1.7.0.11 拒絕服務漏洞 (hist | edit) [1,361 bytes] Pwnwiki (talk | contribs) (Created page with "<pre> #!/usr/bin/python # # e-mail: [email protected] # # Date: 06/10/2021 - 10 jun # # Version Vulnerable: EasyFTP Server 1.7.0.11 - 'XRMD' Denied of Service # # OS...")
- 14:41, 3 July 2021 CVE-2021-32612 VeryFitPro 3.2.8 加密問題漏洞 (hist | edit) [2,773 bytes] Pwnwiki (talk | contribs) (Created page with "<languages /> <translate> ==漏洞簡介== </translate> <translate> VeryFitPro是中國深圳市愛都科技有限公司的一款功能強大的健康管理軟件,需要搭配...")
- 14:37, 3 July 2021 CVE-2019-5736 Docker Container 容器逃逸漏洞 (hist | edit) [12,918 bytes] Pwnwiki (talk | contribs) (Created page with "<pre> ## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf:...")
- 14:07, 3 July 2021 ThinkPHP 5.0.13 代碼執行漏洞/zh-cn (hist | edit) [305 bytes] Xc1ym (talk | contribs) (Created page with "post发送数据")
- 13:17, 3 July 2021 CVE-2021-0741 elFinder 2.0.47 - 'PHP connector' 命令注入漏洞 (hist | edit) [2,231 bytes] Pwnwiki (talk | contribs) (Created page with "<pre> #!/usr/bin/python ''' # Exploit Title: elFinder <= 2.1.47 - Command Injection vulnerability in the PHP connector. # Date: 01/07/2021 # Exploit Author: @hamzaanonime # V...")
- 13:16, 3 July 2021 CVE-2021-34527 Windows Print Spooler 遠程代碼執行漏洞/es (hist | edit) [2,117 bytes] Pwnwiki (talk | contribs) (Created page with "CVE-2021-34527 Vulnerabilidad de ejecución remota de código de Windows Print Spooler")
- 13:15, 3 July 2021 CVE-2021-34527 Windows Print Spooler 遠程代碼執行漏洞/he (hist | edit) [2,117 bytes] Pwnwiki (talk | contribs) (Created page with "CVE-2021-34527 פגיעות ביצוע קוד מרחוק של Windows Print Spooler")
- 13:13, 3 July 2021 CVE-2021-34527 Windows Print Spooler 遠程代碼執行漏洞/pt (hist | edit) [2,111 bytes] Pwnwiki (talk | contribs) (Created page with "== Versão afetada ==")
- 13:13, 3 July 2021 CVE-2021-34527 Windows Print Spooler 遠程代碼執行漏洞/uk (hist | edit) [2,141 bytes] Pwnwiki (talk | contribs) (Created page with "== Знімок екрана ==")
- 12:47, 3 July 2021 ThinkPHP 5.0.13 代碼執行漏洞 (hist | edit) [455 bytes] Pwnwiki (talk | contribs) (Created page with "<languages /> <translate> ==影響版本== </translate> ThinkPHP <= v5.0.19 <translate> ==漏洞利用== </translate> <translate> 通過報錯確定ThinkPHP版本： </trans...")
- 10:03, 3 July 2021 Garbage Collection Management System 1.0 SQL注入漏洞 (hist | edit) [1,607 bytes] Pwnwiki (talk | contribs) (Created page with "<languages /> <translate> ==影響版本== </translate> Version 1.0 ==EXP== <pre> # Exploit Title: Garbage Collection Management System 1.0 - SQL Injection (Unauthenticated)...")
- 10:01, 3 July 2021 CVE-2021-24146 Wordpress Plugin Modern Events Calendar 5.16.2 事件導出漏洞 (hist | edit) [2,806 bytes] Pwnwiki (talk | contribs) (Created page with "<languages /> <translate> ==影響版本== </translate> Version: Before 5.16.5 ==EXP== <pre> # Exploit Title: Wordpress Plugin Modern Events Calendar 5.16.2 - Event export (U...")
- 10:00, 3 July 2021 CVE-2021-24145 Wordpress Plugin Modern Events Calendar 5.16.2 遠程代碼執行漏洞/en (hist | edit) [22,130 bytes] Pwnwiki (talk | contribs) (Created page with "==Affected Versions==")
- 09:58, 3 July 2021 CVE-2021-24145 Wordpress Plugin Modern Events Calendar 5.16.2 遠程代碼執行漏洞 (hist | edit) [22,161 bytes] Pwnwiki (talk | contribs) (Created page with "<languages /> <translate> ==影響版本== </translate> Version: Before 5.16.5 ==EXP== <pre> # Exploit Title: Wordpress Plugin Modern Events Calendar 5.16.2 - Remote Code Ex...")
- 09:57, 3 July 2021 B2evolution 7.2.2 CSRF漏洞 (hist | edit) [6,032 bytes] Pwnwiki (talk | contribs) (Created page with "<pre> # Exploit Title: b2evolution 7.2.2 - 'edit account details' Cross-Site Request Forgery (CSRF) # Exploit Author: Alperen Ergel (@alpernae) # Vendor Homepage: https://b2ev...")
- 09:55, 3 July 2021 CVE-2021-35956 AKCP sensorProbe SPX476 XSS漏洞 (hist | edit) [3,116 bytes] Pwnwiki (talk | contribs) (Created page with "<languages /> <translate> ==影響版本== </translate> Version: < SP480-20210624 ==XSS== <pre> # Exploit Title: AKCP sensorProbe SPX476 - 'Multiple' Cross-Site Scripting (XS...")
- 09:54, 3 July 2021 CVE-2020-7750 Scratch Desktop 3.17 XSS&RCE漏洞 (hist | edit) [2,457 bytes] Pwnwiki (talk | contribs) (Created page with "<languages /> <translate> ==影響版本== </translate> <pre> Version: 3.10.2 </pre> ==EXP== <pre> # Exploit Title: Scratch Desktop 3.17 - Cross-Site Scripting/Remote Code Ex...")
- 19:01, 2 July 2021 CVE-2021-34527 Windows Print Spooler 遠程代碼執行漏洞/ru (hist | edit) [2,128 bytes] Pwnwiki (talk | contribs) (Created page with "CVE-2021-34527 Уязвимость диспетчера очереди печати Windows для удаленного выполнения кода")
- 19:01, 2 July 2021 CVE-2021-34527 Windows Print Spooler 遠程代碼執行漏洞/zh-cn (hist | edit) [2,095 bytes] Pwnwiki (talk | contribs) (Created page with "==截图==")
- 19:00, 2 July 2021 CVE-2021-34527 Windows Print Spooler 遠程代碼執行漏洞/en (hist | edit) [2,104 bytes] Pwnwiki (talk | contribs) (Created page with "CVE-2021-34527 Windows Print Spooler remote code execution vulnerability")
- 18:30, 2 July 2021 CVE-2021-34527 Windows Print Spooler 遠程代碼執行漏洞 (hist | edit) [2,167 bytes] Pwnwiki (talk | contribs) (Created page with "<languages /> <translate> ==影響版本== </translate> <pre> * Windows Server 2019 (Server Core installation) * Windows Server 2019 * Windows Server 2016 (Server Core insta...")
- 17:57, 2 July 2021 燈籠果路由默認帳號密碼登錄 (hist | edit) [126 bytes] Lucky Z (talk | contribs) (Created page with "== '''fofa''' == title="真智能 好多用-登录" == '''password''' == admin thumb|410x410px") Tag: Visual edit
- 16:00, 2 July 2021 CVE-2021-34110 WinWaste.NET 1.0.6183.16475 本地權限提升漏洞 (hist | edit) [6,202 bytes] Pwnwiki (talk | contribs) (Created page with "<languages /> <translate> ==影響版本== </translate> Version: 1.0.6183.16475 ==EXP== <pre> # Exploit Title: WinWaste.NET - Privilege Escalation due Incorrect Access Contro...")
- 11:59, 2 July 2021 安卓版TikTok XSS漏洞/zh-cn (hist | edit) [1,225 bytes] Xc1ym (talk | contribs) (Created page with "将触发以下执行：")
- 11:37, 2 July 2021 WIFISKY-7層流控路由器 後台任意命令執行漏洞/zh-cn (hist | edit) [260 bytes] Xc1ym (talk | contribs) (Created page with "WIFISKY-7层流控路由器 后台任意命令执行漏洞")
- 11:14, 2 July 2021 CVE-2020-35948 wordpress Plugin XCloner 4.2.12 遠程代碼執行漏洞 (hist | edit) [4,435 bytes] Pwnwiki (talk | contribs) (Created page with "<languages /> <translate> ==漏洞影響== </translate> Version: 4.2.1 - 4.2.12 ==EXP== <pre> # Exploit Title: Wordpress Plugin XCloner 4.2.12 - Remote Code Execution (Authen...")
- 11:13, 2 July 2021 Online Voting System 1.0 遠程代碼執行漏洞 (hist | edit) [2,407 bytes] Pwnwiki (talk | contribs) (Created page with "<languages /> <translate> ==影響版本== </translate> Version 1.0 ==POC== <pre> # Exploit Title: Online Voting System 1.0 - Remote Code Execution (Authenticated) # Exploit...")
- 11:12, 2 July 2021 Vianeos OctoPUS 5 SQL注入漏洞 (hist | edit) [682 bytes] Pwnwiki (talk | contribs) (Created page with "<pre> # Exploit Title: Vianeos OctoPUS 5 - 'login_user' SQLi # Date: 01/07/2021 # Exploit Author: Audencia Business SCHOOL # Vendor Homepage: http://www.vianeos.com/en/home-vi...")
- 11:11, 2 July 2021 Online Voting System 1.0 身份驗證繞過漏洞 (hist | edit) [1,247 bytes] Pwnwiki (talk | contribs) (Created page with "<languages /> <translate> ==漏洞影響== </translate> Version 1.0 ==POC== <pre> # Exploit Title: Online Voting System 1.0 - Authentication Bypass (SQLi) # Exploit Author: d...")
- 11:05, 2 July 2021 米拓建站系統 getshell&命令執行漏洞 (hist | edit) [1,229 bytes] Pwnwiki (talk | contribs) (Created page with "<languages /> ==FOFA== <pre> body="MetInfo" </pre> <translate> ==影響版本== </translate> 7.3.0- 7.0.0 <translate> ==漏洞利用== </translate> <translate> 在安裝該...")
- 10:40, 2 July 2021 WIFISKY-7層流控路由器 後台任意命令執行漏洞 (hist | edit) [368 bytes] Pwnwiki (talk | contribs) (Created page with "<languages /> ==FOFA== <pre> app="WIFISKY-7层流控路由器" </pre> <translate> ==默認帳號密碼== </translate> <pre> admin/admin </pre> <translate> ==漏洞利用==...")
- 10:59, 1 July 2021 CVE-2021-35464 ForgeRock OpenAM RCE漏洞 (hist | edit) [230 bytes] Pwnwiki (talk | contribs) (Created page with "==POC1== <pre> GET /openam/oauth2/..;/ccversion/Version?jato.pageSession=<serialized_object> </pre> ==POC2== <pre> curl -v "http://127.0.0.1:7080/openam/oauth2/..;/ccversion/...")
- 21:53, 30 June 2021 Apache Superset 1.1.0 基於時間的用戶枚舉漏洞 (hist | edit) [1,421 bytes] Pwnwiki (talk | contribs) (Created page with "<pre> # Exploit Title: Apache Superset 1.1.0 - Time-Based Account Enumeration # Author: Dolev Farhi # Date: 2021-05-13 # Vendor Homepage: https://superset.apache.org/ # Versio...")
- 21:53, 30 June 2021 Simple Traffic Offense System 1.0 XSS漏洞 (hist | edit) [1,433 bytes] Pwnwiki (talk | contribs) (Created page with "<pre> # Exploit Title: Simple Traffic Offense System 1.0 - 'Multiple' Stored Cross Site Scripting (XSS) # Date: 30-06-2021 # Exploit Author: Barış Yıldızoğlu # Vendor Hom...")
- 21:52, 30 June 2021 Doctors Patients Management System 1.0 SQL注入漏洞 (hist | edit) [590 bytes] Pwnwiki (talk | contribs) (Created page with "<pre> # Exploit Title: Doctors Patients Management System 1.0 - SQL Injection (Authentication Bypass) # Date: 06/30/2021 # Exploit Author: Murat DEMIRCI (butterflyhunt3r) # Ve...")
- 21:51, 30 June 2021 PhpAbook 0.9i SQL注入漏洞 (hist | edit) [1,359 bytes] Pwnwiki (talk | contribs) (Created page with "<pre> # Exploit Title: phpAbook 0.9i - SQL Injection # Date: 2021-06-29 # Vendor Homepage: http://sourceforge.net/projects/phpabook/ # Exploit Author: Said Cortes, Alejandro P...")
- 09:32, 30 June 2021 Weiphp5.0上傳getshell (hist | edit) [639 bytes] Pwnwiki (talk | contribs) (Created page with "<languages /> ==FOFA== <pre> body=”weiphp5.0” </pre> ==POC== <translate> 構造html表單提交上傳: </translate> <pre> <html> <body> <form action="http://127.0.0.1/wei...")
- 09:18, 30 June 2021 CVE-2021-1675 Windows Print Spooler遠程代碼執行漏洞/ru (hist | edit) [2,268 bytes] Pwnwiki (talk | contribs) (Created page with "CVE-2021-1675 Windows Print Spooler уязвимость удаленного выполнения кода")
- 09:11, 30 June 2021 CVE-2021-1675 Windows Print Spooler遠程代碼執行漏洞/en (hist | edit) [2,185 bytes] Pwnwiki (talk | contribs) (Created page with "==Affected Versions==")
- 09:09, 30 June 2021 CVE-2021-1675 Windows Print Spooler遠程代碼執行漏洞/zh-cn (hist | edit) [2,169 bytes] Pwnwiki (talk | contribs) (Created page with "CVE-2021-1675 Windows Print Spooler远程代码执行漏洞")
- 09:07, 30 June 2021 CVE-2021-1675 Windows Print Spooler遠程代碼執行漏洞 (hist | edit) [2,241 bytes] Pwnwiki (talk | contribs) (Created page with "<languages /> <translate> ==影響版本== </translate> <pre> Windows Server 2019 (Server Core installation) Windows Server 2019 Windows Server 2016 (Server Core i...")
- 18:10, 29 June 2021 CVE-2019-6447 ES File Explorer 4.1.9.7.4 任意文件寫入漏洞 (hist | edit) [3,008 bytes] Pwnwiki (talk | contribs) (Created page with "<languages /> <translate> ==影響版本== </translate> Version: ES File Explorer v4.1.9.7.4 ==EXP== <pre> # Exploit Title: ES File Explorer 4.1.9.7.4 - Arbitrary File Read #...")
- 12:14, 29 June 2021 Niushop單商戶V4版任意文件刪除漏洞 (hist | edit) [295 bytes] Pwnwiki (talk | contribs) (Created page with "<languages /> <translate> ==漏洞影響== </translate> Niushop ==FOFA== <pre> title="Niushop" </pre> ==EXP== <translate> 使用Burpsuite攔截請求包，在最下面添加...")
