vBulletin 5.0 < 5.5.4 – ‘widget_php ‘ Unauthenticated Remote Code Execution #!/usr/bin/python # # vBulletin 5.x 0day pre-auth RCE exploit # # This should work

DotNetNuke < 9.4.0 – Cross-Site Scripting # Exploit Title: Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 # Exploit Description : This exploit will

WebKit – UXSS Using JavaScript: URI and Synchronous Page Loads DETALHES DA VULNERABILIDADE “ “ void DocumentWriter :: replaceDocument (const String & source, Document *

WebKit – Universal XSS in WebCore::command <! – DETALHES DA VULNERABILIDADE “ “ static Editor :: Command command (Documento * documento, const String & commandName,

WebKit – User-agent Shadow root Leak in WebCore::ReplacementFragment::ReplacementFragment <! – DETALHES DA VULNERABILIDADE editando / ReplaceSelectionCommnd.cpp: “ “ Ref <HTMLElement> ReplacementFragment :: insertFragmentForTestRendering (Node *

WebKit – Universal XSS Using Cached Pages DETALHES DA VULNERABILIDADE “ “ void FrameLoader :: detachChildren () { […] SubframeLoadingDisabler subframeLoadingDisabler (m_frame.document ()); // ***

Counter-Strike Global Offensive 1.37.1.1 – ‘vphysics.dll’ Denial of Service (PoC) # CVE-2019-15943 O Counter-Strike Global Offensive (vphysics.dll) antes da versão 1.37.1.1 permite que atacantes remotos

Detrix EDMS 1.2.3.1505 – SQL Injection #!/usr/bin/php /* # Exploit Title: Detrix EDMS cleartext user password remote SQLI exploit # Google Dork: # Date: Jul

Detrix EDMS 1.2.3.1505 – SQL Injection #!/usr/bin/php /* # Exploit Title: Detrix EDMS cleartext user password remote SQLI exploit # Google Dork: # Date: Jul

DOUBLEPULSAR – Payload Execution and Neutralization (Metasploit) ## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf::Exploit::Remote Rank =