Exploit for CVE-2021-1675

CVE-2021-1675-PrintNightmare Working PowerShell POC Powershel...

Exploit for Path Traversal in Apache Http_Server

cve-2021-41773 CVE-2021-41773 Path Traversal vulnerability in...

Exploit for Forced Browsing in Atlassian Confluence_Data_Center

CVE-2021-26085 Atlassian Confluence Server 7.5.1 Pre-Authoriza...

Student Quarterly Grading System 1.0 - SQL Injection Authentication Bypass Vulnerability

Exploit Title: Student Quarterly Grading System 1.0 - SQLi Authentication Bypass Exploit Author: Blackhan Vendor Homepage: https://www.sourcecodester.com/php/14953/student-quarterly-grading-system-using-php-and-sqlite-free-source-code.html Software Link:...

Atlassian Jira Server/Data Center 8.16.0 - Arbitrary File Read Vulnerability

Exploit Title: Atlassian Jira Server/Data Center 8.16.0 - Arbitrary File Read Exploit Author: Mayank Deshmukh Vendor Homepage: https://www.atlassian.com/ Software Link: https://www.atlassian.com/software/jira/download/data-center Version: versions 8.5.14, 8.6.0 ≤ version 8.13.6, 8.14.0 ≤ version...

World Travel Information <= 1.0.0 - Reflected Cross-Site Scripting

The plugin does not escape the $SERVER'PHPSELF' parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue PoC https://example.com/wp-admin/admin.php/"/?page=ti-info...

Student Quarterly Grading System 1.0 SQL Injection

Exploit Title: Student Quarterly Grading System 1.0 - SQLi Authentication Bypass Date: 04.10.2021 Exploit Author: Blackhan Vendor Homepage: https://www.sourcecodester.com/php/14953/student-quarterly-grading-system-using-php-and-sqlite-free-source-code.html Software Link:...

Booking.com Product Helper < 1.0.2 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitize and escape Product Code when creating Product Shortcode, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed PoC When creating a "New product shortcode" you can inject XSS payloads like i...

Young Entrepreneur E-Negosyo System 1.0 SQL Injection

Exploit Title: Young Entrepreneur E-Negosyo System 1.0 - SQL Injection Authentication Bypass Date: 2021-10-02 Exploit Author: Jordan Glover Vendor Homepage: https://www.sourcecodester.com/php/12684/young-entrepreneur-e-negosyo-system.html Software Link:...

Young Entrepreneur E-Negosyo System 1.0 - SQL Injection Authentication Bypass Vulnerability

Exploit Title: Young Entrepreneur E-Negosyo System 1.0 - SQL Injection Authentication Bypass Exploit Author: Jordan Glover Vendor Homepage: https://www.sourcecodester.com/php/12684/young-entrepreneur-e-negosyo-system.html Software Link:...

Young Entrepreneur E-Negosyo System 1.0 - (PRODESC) Stored Cross-Site Scripting Vulnerability

Exploit Title: Young Entrepreneur E-Negosyo System 1.0 - 'PRODESC' Stored Cross-Site Scripting XSS Exploit Author: Jordan Glover Vendor Homepage: https://www.sourcecodester.com/php/12684/young-entrepreneur-e-negosyo-system.html Software Link:...

Events Made Easy < 2.2.24 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape Custom Field Names, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed PoC Add/Edit a Custom Field /wp-admin/admin.php?page=eme-formfields and put the following payload in the Field...

Exploit for Privilege Context Switching Error in Canonical Ubuntu_Linux

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Vers...

Exploit for Unrestricted Upload of File with Dangerous Type in Microsoft

ProxyShellPOC POC for...

Exploit for CVE-2021-3129

CVE-2021-3129 PoC for CVE-2021-3129 Laravel For educational...

Directory Management System 1.0 - SQL Injection Authentication Bypass Vulnerability

Exploit Title: Directory Management System 1.0 - SQL Injection Authentication Bypass Exploit Author: SUDONINJA Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/directory-management-system-using-php-and-mysql/ Version: v1.0 Tested on: Windows 10 Steps-To-Reproduce: St...

Exam Form Submission System 1.0 - SQL Injection Authentication Bypass Vulneraility

Exploit Title: Exam Form Submission System 1.0 - SQL Injection Authentication Bypass Exploit Author: Nitin Sharma Vidvansh Vendor Homepage: https://code-projects.org Product link: https://code-projects.org/exam-form-submission-in-php-with-source-code/ Version: 1.0 Tested on: XAMPP / Windows 10...

Dairy Farm Shop Management System 1.0 - SQL Injection Authentication Bypass

Exploit Title: Dairy Farm Shop Management System 1.0 - SQL Injection Authentication Bypass Date: 2021-09-30 Exploit Author: sanjay singh Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/dairy-farm-shop-management-system-using-php-and-mysql/ Version: v1.0 Tested on:...

SharpML - Machine Learning Network Share Password Hunting Toolkit

SharpML is a proof of concept file share data mining tool using Machine Learning in Python and C. The tool is discussed in more detail on our blog here, but is summarised below also: SharpML is C and Python based tool that performs a number of operations with a view to mining file shares, queryin...

Cyber Cafe Management System Project (CCMS) 1.0 - SQL Injection Authentication Bypass Vulnerability

Exploit Title: Cyber Cafe Management System Project CCMS 1.0 - SQL Injection Authentication Bypass Exploit Author: sudoninja Vendor Homepage: https://phpgurukul.com Product link: https://phpgurukul.com/cyber-cafe-management-system-using-php-mysql/ Version: 1.0 Tested on: XAMPP / Windows 10...