⚠️ PoC

Doctor Appointment Management System 1.0 Insecure Settings

Doctor Appointment Management System version 1.0 suffers from an ignored default credential vulnerability.

COVID19 Testing Management System 1.0 PHP Code Injection

COVID19 Testing Management System version 1.0 suffers from a php code injection vulnerability.

BP Monitoring Management System 1.0 PHP Code Injection

BP Monitoring Management System version 1.0 suffers from a php code injection vulnerability.

Bank Locker Management System 1.0 Insecure Settings

Bank Locker Management System version 1.0 suffers from an ignored default credential vulnerability.

Art Gallery Management System 1.0 PHP Code Injection

Art Gallery Management System version 1.0 suffers from a php code injection vulnerability.

#0daytoday #VICIdial 2.14-917a Remote Code Execution Vulnerability CVE-2024-8504 [webapps #exploits #Vulnerability #0day #Exploit]

#0daytoday #VICIdial 2.14-917a SQL Injection Vulnerability CVE-2024-8503 [webapps #exploits #Vulnerability #0day #Exploit]

#0daytoday #ASIS 3.2.0 SQL Injection Vulnerability CVE-2024-45622 [webapps #exploits #Vulnerability #0day #Exploit]

Apartment Visitor Management System 1.0 SQL Injection / Code Execution

Apartment Visitor Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for a backdoor to be inserted for code…

Passion Responsive Blogging 1.0 SQL Injection

Passion Responsive Blogging version 1.0 suffers from a remote SQL injection vulnerability.

Breaking Oracle Database VPD Through DDL Permissions In 19c

By having specific DDL permissions set in Oracle 19c, you can bypass access restrictions normally in place for VPD (virtual private database).

PPDB 2.4-update 6118-1 SQL Injection

PPDB version 2.4-update 6118-1 suffers from a remote blind SQL injection vulnerability.

POMS 1.0 Insecure Settings

POMS version 1.0 suffers from an ignored default credential vulnerability.

Pharmacy Management System version 1.0 Insecure Settings

Pharmacy Management System version version 1.0 suffers from an ignored default credential vulnerability.

PDF Generator Web Application 1.0 Insecure Settings

PDF Generator Web Application version 1.0 suffers from an ignored default credential vulnerability.

Park Ticketing Project 1.0 SQL Injection

Park Ticketing Project version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Online Travel Agency System 1.0 Insecure Settings

Online Travel Agency System version 1.0 suffers from an ignored default credential vulnerability.

Online Tours and Travels Management System 1.0 Insecure Settings

Online Tours and Travels Management System version 1.0 suffers from an ignored default credential vulnerability.

Online Survey System 1.0 SQL Injection

Online Survey System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Crime Complaints Reporting Management System 1.0 Arbitrary File Upload

Crime Complaints Reporting Management System version 1.0 suffers from an arbitrary file upload vulnerability.

Blood Bank And Donor Management System 2.4 Insecure Settings

Blood Bank and Donor Management System version 2.4 suffers from an ignored default credential vulnerability.

ASUS RT-AC3200 3.0.0.4.382.50010 Command Injection

Proof of concept exploit demonstrating a remote command injection vulnerability in ASUS RT-AC3200 version 3.0.0.4.382.50010.

ASIS 3.2.0 SQL Injection

Aplikasi Sistem Sekolah using CodeIgniter 3 versions 3.0.0 through 3.2.

#0daytoday #Linux Kernel 5.6.13 Use-After-Free Exploit CVE-2020-27796 [remote #exploits #0day #Exploit]

#0daytoday #IntelliNet 2.0 Remote Root Exploit [remote #exploits #0day #Exploit]

Backdoor.Win32.Symmi.qua MVID-2024-0692 Buffer Overflow

Backdoor.Win32.Symmi.qua malware suffers from a buffer overflow vulnerability.

HackTool.Win32.Freezer.br (WinSpy) MVID-2024-0691 Insecure Credential Storage

HackTool.Win32.Freezer.br (WinSpy) malware suffers from an insecure credential storage vulnerability.

Backdoor.Win32.Optix.02.b MVID-2024-0690 Hardcoded Credential

Backdoor.Win32.Optix.02.b malware suffers from a hardcoded credential vulnerability.

Backdoor.Win32.JustJoke.21 (BackDoor Pro - v2.0b4) MVID-2024-0689 Code Execution

Backdoor.Win32.JustJoke.21 (BackDoor Pro - v2.0b4) malware suffers from a code execution vulnerability.

Backdoor.Win32.PoisonIvy.ymw MVID-2024-0688 Insecure Credential Storage

Backdoor.Win32.PoisonIvy.ymw malware suffers from an insecure credential storage vulnerability.

Online Travel Agency System 1.0 Shell Upload

Online Travel Agency System version 1.0 suffers from a remote shell upload vulnerability.

Tourism Management System 1.0 SQL Injection

Tourism Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Tenant courier management 1.0 Insecure Settings

Tenant courier management version 1.0 suffers from an ignored default credential vulnerability.

Supply Chain Management 1.0 SQL Injection

Supply Chain Management version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Student Result Management System 2.0 Insecure Direct Object Reference

Student Result Management System version 2.0 suffers from an insecure direct object reference vulnerability.

Student Record System 1.0 SQL Injection

Student Record System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.