Exploit Database

The Exploit Database – ultimate archive of #Exploits, #Shellcodes & Security #Papers/#eZines

[Exploit Database @ExploitDB]

You get a CVE!
You get a CVE!
Everyone gets a CVE!

[OffSec @offsectraining]

It's been a while since we updated you on Exploit Database! Here's a peak into what's new:
⇢We added a few fields into the database dump, including CVEs
⇢We are now distributing Google Hacking Database (GHDB)’s database dump

Learn more: https://t.co/MbyZlfnmrf.

[Exploit Database @ExploitDB]

[webapps] OpenEMR 7.0.2 - Arbitrary File Read https://t.co/FjtGaYbtwA

[Exploit Database @ExploitDB]

[webapps] WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection https://t.co/6yHPr6Qn1v

[Exploit Database @ExploitDB]

[webapps] Drupal Core 10.5.5 - Error-Based SQL Injection https://t.co/D7f44UbTMU

[Exploit Database @ExploitDB]

[webapps] WordPress OrderConvo 14 - Path Traversal https://t.co/czTqHWjch5

[Exploit Database @ExploitDB]

[remote] Notepad++ 8.9.6 - Arbitrary Code Execution https://t.co/sKvaeysL7x

[Exploit Database @ExploitDB]

[webapps] YAMCS yamcs-core 5.12.7 - No Rate Limiting https://t.co/86k0PG6juV

[Exploit Database @ExploitDB]

[webapps] YAMCS yamcs-core 5.12.7 - User Enumeration https://t.co/u6S8opfs4j

[Exploit Database @ExploitDB]

[webapps] YAMCS yamcs-core 5.12.7 - LDAP Injection https://t.co/sXbtUYBYqK

[Exploit Database @ExploitDB]

[remote] Microsoft - NTLMv2 Hash Capture https://t.co/xKfvkQZROR

[Exploit Database @ExploitDB]

[webapps] MikroORM 7.0.13 - SQL Injection https://t.co/OpAjDO0es7

[Exploit Database @ExploitDB]

[webapps] Prodigy Commerce 3.3.0 - Local File Inclusion https://t.co/sq1SS5fQqJ

[Exploit Database @ExploitDB]

[webapps] Langflow 1.3.0 - Remote Code Execution https://t.co/ycnoGR8NaF

[Exploit Database @ExploitDB]

[webapps] Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution https://t.co/H2SaoL1Apa

[Exploit Database @ExploitDB]

[local] ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion https://t.co/HeLxwl6yhZ

[Exploit Database @ExploitDB]

[local] ZTE Routers - Unauthenticated Denial of Service https://t.co/F6n0wxkbPH

[Exploit Database @ExploitDB]

[local] ZTE ZXHN H188A V6 - Authentication Bypass https://t.co/byEkq7tw3b

[Exploit Database @ExploitDB]

[local] ZTE H298A / H108N - Unauthenticated Credential Exposure https://t.co/mt3fy1Fhg5

[Exploit Database @ExploitDB]

[local] Linux Kernel - Local Privilege Escalation https://t.co/yahLmOvhKU

[Exploit Database @ExploitDB]

[webapps] MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution https://t.co/k9H1KTCFzp

[Exploit Database @ExploitDB]

[remote] Wing FTP Server 8.1.3 - Authenticated Remote Code Execution https://t.co/zWIRinBAYn