http://www.expku.com exp库-打造中文最大exploit库 的 最近更新 zh-cn power by www.expku.com vitter@mail.securitycn.net 60 http://www.expku.com/remote/56548.html <pre>Title: Teltonika_RutOS 00.07.06.21 - command injection Author: 0day Rubbish Research Team Contact: disclosure@0day-rubbish.com Type: remote Platform: Hardware &quot;&quot;&quot; Teltonika RutOS -- ipsec.lua instances_status() logread ...... 2026-10-01 00:00:00 REMOTE Rubbish Research Team 出处：expkucom http://www.expku.com/web/56547.html <pre>Title: TigerGraph_Community_Edition 4.2.4 - arbitrary file write Author: 0day Rubbish Research Team Contact: disclosure@0day-rubbish.com Type: remote Platform: Linux TigerGraph Community Edition 4.2.4 -- default credentials + arbit...... 2026-10-01 00:00:00 WEB Rubbish Research Team 出处：expkucom http://www.expku.com/web/56546.html <pre># Exploit Title: WordPress 7.0.2 - Path Travesal # Google Dork: N/A # Date: 2026-09-22 # Exploit Author: Robert Ressl (https://ressl.ch) # Vendor Homepage: https://wordpress.org # Software Link: https://wordpress.org/download/releases/ # ...... 2026-10-01 00:00:00 WEB Robert Ressl 出处：expkucom http://www.expku.com/web/56545.html <pre># Title: Food-Ordering 1.0 - LFI # Author: nu11secur1ty # Date: 9/23/2026 # Vendor: https://kato-james.42web.io/?i=2 # Software: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/2026/Food-Ordering-1.0-kato-james-kalemba # Refer...... 2026-10-01 00:00:00 WEB nu11secur1ty 出处：expkucom http://www.expku.com/remote/56544.html <pre>Title: Ecava IntegraXor IGX 16.0.701.10 - RCE Author: 0day Rubbish Research Team Contact: disclosure@0day-rubbish.com Type: remote Platform: Windows =============================================================================== ...... 2026-10-01 00:00:00 REMOTE Rubbish Research Team 出处：expkucom http://www.expku.com/web/56543.html <pre># Exploit Title: Krayin CRM 2.2.4 - IDOR # Google Dork: inurl:&quot;/admin/login&quot; &quot;Krayin&quot; # Date: 27/09/2026 # Exploit Author: bl4dsc4n # Vendor Homepage: https://github.com/krayin/laravel-crm # Software Link: https://githu...... 2026-10-01 00:00:00 WEB bl4dsc4n 出处：expkucom http://www.expku.com/web/56542.html <pre># Exploit Title: SuiteCRM 8.10.1 - Authenticated SSRF # Exploit Author: Max Gabriel (https://github.com/EntroVyx) # Vendor Homepage: https://suitecrm.com/ # Software Link: https://github.com/SuiteCRM/SuiteCRM # Version: &lt;= 7.15.1, &lt;= ...... 2026-10-01 00:00:00 WEB Max Gabriel 出处：expkucom http://www.expku.com/web/56541.html <pre># Exploit Title: InvoicePlane 1.7.1 - RCE # Date: 2026-04-10 # Exploit Author: Mustafa Murat Akgül # Vendor Homepage: https://invoiceplane.com/ # Software Link: https://github.com/InvoicePlane/InvoicePlane # Version: 1.7.1 (Patched: 1.7.2...... 2026-10-01 00:00:00 WEB Mustafa Murat Akgül 出处：expkucom http://www.expku.com/web/56540.html <pre># Title: POMS oretnom23v1.0 - SQLi vulnerabilities # Author: nu11secur1ty # Date: 10/01/2026 # Vendor: https://github.com/oretnom23 # Software: https://www.sourcecodester.com/php/14935/purchase-order-management-system-using-php-free-source...... 2026-10-01 00:00:00 WEB nu11secur1ty 出处：expkucom http://www.expku.com/remote/56539.html <pre>#!/usr/bin/env python3 # # Exploit Title: MikroTik RouterOS &lt;= 7.23.3 - Unauthenticated SSH Session Policy-Mask Swap (Full Admin) # Date: 2026-09-17 # Exploit Author: DigiProSec # Vendor Homepage: https://mikrotik.com # Software Link: h...... 2026-09-24 00:00:00 REMOTE DigiProSec 出处：expkucom http://www.expku.com/remote/56538.html <pre>#!/usr/bin/env python3 # # Exploit Title: ILIAS &lt;= 9.21 / 10.9 / 11.2 - Unauthenticated PHP Object Injection (RCE) # Date: 2026-08-31 # Exploit Author: DigiProSec # Vendor Homepage: https://www.ilias.de # Software Link: https://github.c...... 2026-09-11 00:00:00 REMOTE DigiProSec 出处：expkucom http://www.expku.com/web/56537.html <pre># Exploit Title: FreePBX 17.0.2 - Remote Code Execution # Date: 2026-08-12 # Exploit Author: K3ysTr0K3R (Jared Brits) # Vendor Homepage: https://www.freepbx.org/ # Software Link: https://github.com/FreePBX/freepbx # Version: FreePBX 15.x &l...... 2026-09-03 00:00:00 WEB Jared Brits 出处：expkucom http://www.expku.com/web/56536.html <pre># Exploit Title: Metabase 0.61.0 - Authenticated Remote Code Execution # Date: 2026-08-12 # Exploit Author: Gutierre0x80 # Vendor Homepage: https://www.metabase.com/ # Software Link: https://github.com/metabase/metabase # Version: &gt;= 0...... 2026-09-03 00:00:00 WEB Gutierre0x80 出处：expkucom http://www.expku.com/dos/56535.html <pre># Exploit Title: EVerest 2025.9.0 - DoS # Date: 2026-08-11 # Exploit Author: [Ranjit Kumar Singh] # Vendor Homepage: https://github.com/EVerest/everest-core # Software Link: https://github.com/EVerest/everest-core/archive/refs/tags/2025.9....... 2026-09-02 00:00:00 DOS Ranjit Kumar Singh 出处：expkucom http://www.expku.com/web/56534.html <pre># Exploit Title: Bludit CMS 3.20.0 - Reflected Cross-Site Scripting # Date: 2026-08-11 # Exploit Author: [Ranjit Kumar Singh] # Vendor Homepage: https://www.bludit.com/ # Software Link: https://github.com/bludit/bludit/archive/refs/tags/3...... 2026-09-02 00:00:00 WEB Ranjit Kumar Singh 出处：expkucom http://www.expku.com/web/56533.html <pre># Exploit Title: PodcastGenerator 3.2.9 - Stored XSS # Date: 2026-08-08 # Exploit Author: Sahil Arya # Vendor Homepage: https://github.com/PodcastGenerator/PodcastGenerator # Software Link: https://github.com/PodcastGenerator/PodcastGenerat...... 2026-09-02 00:00:00 WEB Sahil Arya 出处：expkucom http://www.expku.com/web/56532.html <pre># Exploit Title: Ghost_CMS 6.19.0 - Remote Code Execution # Date: 08/07/2026 # Exploit Author: Maksim Rogov # Vendor Homepage: https://ghost.org/ # Software Link: https://ghost.org/ # Version: &gt;= 0.7.2, &lt;= 6.19.0 # Tested on: Ubuntu...... 2026-09-02 00:00:00 WEB Maksim Rogov 出处：expkucom http://www.expku.com/web/56531.html <pre># Exploit Title: Langflow 1.10.0 - RCE # Exploit Author: Richard Howe &lt;rhowe425&gt; # Vendor Homepage: https://www.langflow.org/ # Software Link: https://www.langflow.org/desktop # Version: &lt; 1.10.0 # Tested on: Ubuntu 22.04 # CVE :...... 2026-09-02 00:00:00 WEB Richard Howe 出处：expkucom http://www.expku.com/web/56530.html <pre># Exploit Title: Fullhan FH8626V100 - Multiple Vulnerabilities # Date: 31-03-2026 # Exploit Author: Amir Aliu # Vendor Homepage: https://www.fullhan.com/ # Software Link: N/A - OEM/whitelabel IP camera module, rebranded under numerous vendo...... 2026-09-02 00:00:00 WEB Amir Aliu 出处：expkucom http://www.expku.com/web/56529.html <pre>Title: Marimo 0.20.4 - RCE Date: August 2nd, 2026 Exploit Author: Jason Bernier Vendor Homepage: https://marimo.io/ Software Link: https://github.com/marimo-team/marimo Version: &lt;=0.20.4 Tested on: Ubuntu 24.04 CVE: CVE-2026-39987 A...... 2026-09-02 00:00:00 WEB Jason Bernier 出处：expkucom http://www.expku.com/web/56528.html <pre># Exploit Title: Wolf CMS 0.8.3.1 - RCE # Date: 02-08-2026 # Exploit Author: Balachandar Gowrisankar # Software Link: https://github.com/wolfcms/wolfcms # Version: &lt;= 0.8.3.1 # Tested on: Kali GNU/Linux Rolling, Wolf CMS 0.8.3.1, Apach...... 2026-09-01 00:00:00 WEB Balachandar Gowrisankar 出处：expkucom http://www.expku.com/web/56527.html <pre># Exploit Title: Payload CMS 3.72.0 - Blind SQL Injection # Google Dork: N/A # Date: 2026-08-01 # Exploit Author: cardosource # Vendor Homepage: https://payloadcms.com/ # Software Link: https://github.com/payloadcms/payload # Version: &lt...... 2026-09-01 00:00:00 WEB cardosource 出处：expkucom http://www.expku.com/web/56526.html <pre># Exploit Title: Bludit CMS - Stored XSS # Date: 2026-07-30 # Exploit Author: Saud Alenazi # Vendor Homepage: https://www.bludit.com # Software Link: https://github.com/bludit/bludit/releases/tag/3.22.0 # Version: 3.22.0 # Tested on: Wind...... 2026-09-01 00:00:00 WEB Saud Alenazi 出处：expkucom http://www.expku.com/web/56525.html <pre>#!/usr/bin/env python3 # Exploit Title: Grav CMS 2.0.7 - Remote Code Execution # Date: 2026-07-27 # Exploit Author: zer0dayf # Vendor Homepage: https://getgrav.org/ # Software Link: https://github.com/getgrav/grav # Version: Grav CMS &lt...... 2026-09-01 00:00:00 WEB zer0dayf 出处：expkucom http://www.expku.com/web/56524.html <pre> # Exploit Title: miniOrange 5.4.3 - Unauthenticated Auth Bypass # Google Dork: inurl:/wp-content/plugins/miniorange-saml-20-single-sign-on/ # Date: 2026-07-27 # Exploit Author: zer0dayf # Vendor Homepage: https://plugins.wordpress.org/mini...... 2026-09-01 00:00:00 WEB zer0dayf 出处：expkucom http://www.expku.com/web/56523.html <pre># Exploit Title: EasyAppointments 1.5.1 - Blind SQL Injection # Google Dork: N/A (backend login required) # Date: 07/27/2026 # Exploit Author: Michael Chesang # Vendor Homepage: https://easyappointments.org # Software Link: https://github...... 2026-09-01 00:00:00 WEB Michael Chesang 出处：expkucom http://www.expku.com/web/56522.html <pre># Exploit Title: C-MOR 6.0104 - Directory Traversal # Google Dork: N/A # Date: 2026-07-23 # Exploit Author: Fadi Kaakahji (Alb Cyber Guards) # Vendor Homepage: https://www.c-mor.com # Software Link: https://www.c-mor.com/ # Version: &lt;=...... 2026-08-31 00:00:00 WEB Samir Shamdin 出处：expkucom http://www.expku.com/web/56521.html <pre># Exploit Title: C-MOR 6.0104 - Cross-Site Scripting (XSS) # Google Dork: N/A # Date: 2026-07-23 # Exploit Author: Samir Shamdin (Alb Cyber Guards) # Vendor Homepage: https://www.c-mor.com # Software Link: https://www.c-mor.com/ # Version...... 2026-08-31 00:00:00 WEB Samir Shamdin 出处：expkucom http://www.expku.com/web/56520.html <pre># Exploit Title: CubeCart 6.7.4 - SQL injection # Date: 2026-06-08 # Exploit Author: Mikail Kocadağ # Vendor Homepage: https://www.cubecart.com/ # Software Link: https://github.com/cubecart/v6 # Vulnerable Version: 6.7.4 # Fixed Version...... 2026-08-31 00:00:00 WEB Mikail KOCADAĞ 出处：expkucom http://www.expku.com/web/56519.html <pre># Exploit Title: CubeCart 6.7.4 - SQL Bypass in maintenance.index.inc.php # Date: 2026-06-08 # Exploit Author: Mikail Kocadağ # Vendor Homepage: https://www.cubecart.com/ # Software Link: https://github.com/cubecart/v6 # Vulnerable Ver...... 2026-08-31 00:00:00 WEB Mikail KOCADAĞ 出处：expkucom http://www.expku.com/web/56518.html <pre># Exploit Title: CubeCart 6.7.4 - Stored Cross-Site Scripting # Date: 2026-06-08 # Exploit Author: Mikail Kocadağ (MKLKCDG) # Vendor Homepage: https://www.cubecart.com/ # Software Link: https://github.com/cubecart/v6 # Vulnerable Versio...... 2026-08-31 00:00:00 WEB Mikail KOCADAĞ 出处：expkucom http://www.expku.com/web/56517.html <pre># Exploit Title: CubeCart 6.7.4 - Cross-Site Scripting Attribute Injection in gui.class.php # Date: 2026-06-08 # Exploit Author: Mikail Kocadağ (MKLKCDG) # Vendor Homepage: https://www.cubecart.com/ # Software Link: https://github.com/c...... 2026-08-31 00:00:00 WEB Mikail KOCADAĞ 出处：expkucom http://www.expku.com/web/56516.html <pre># Exploit Title: Linksys E1200_2.0.04 - Unauthenticated OS Command Injection # Date: 2026-07-22 # Exploit Author: JarrettgxzSec # Vendor Homepage: www.linksys.com # Version: FW &lt;= v2.0.04 # Tested on: v2.0.02 &amp; v2.0.04, directly conn...... 2026-08-31 00:00:00 WEB jarrett 出处：expkucom http://www.expku.com/web/56515.html <pre># Exploit Title: Langflow 1.8.4 - Path Traversal to Remote Code Execution # Google Dork: N/A # Date: 2026-07-20 # Exploit Author: cardosource # Vendor Homepage: https://www.langflow.org/ # Software Link: https://github.com/langflow-ai/lan...... 2026-08-31 00:00:00 WEB cardosource 出处：expkucom http://www.expku.com/remote/56514.html <pre>#!/usr/bin/env python3 &quot;&quot;&quot; CVE-2026-42167 — ProFTPD mod_sql post-authentication SQL injection -&gt; RCE postauth_stor_rce.py --host &lt;ftp-host&gt; --port 21 \ --user &lt;user&gt; --password &lt;pass&gt; \ ...... 2026-08-25 00:00:00 REMOTE youcef-! 出处：expkucom http://www.expku.com/remote/56513.html <pre># Exploit Title: PCMan FTP Server 2.0.7 - Buffer Overflow # Google Dork: [if applicable] # Date: 05/18/2025 # Exploit Author: Thiago Cunha - A.K.A. Blu3B3@rd # Vendor Homepage: http://pcman.openfoundry.org/ # Software Link: https://www.expl...... 2026-08-18 00:00:00 REMOTE Thiago Cunha 出处：expkucom http://www.expku.com/dos/56512.html <pre># Exploit Title: NanaZip 6.5 - DoS # Date: 2026-07-17 # Exploit Author: Pig-Tail (Jorge González Milla) # Vendor Homepage: https://github.com/M2Team/NanaZip # Software Link: https://github.com/M2Team/NanaZip/releases # Version...... 2026-08-18 00:00:00 DOS Jorge González Milla 出处：expkucom http://www.expku.com/web/56511.html <pre># Exploit Title: flyto-core 2.26.7 - Arbitrary File Write # Date: 2026-07-17 # Exploit Author: Pig-Tail (Jorge González Milla) # Vendor Homepage: https://github.com/flytohub/flyto-core # Software Link: https://github.com/flytohub/...... 2026-08-18 00:00:00 WEB Jorge González Milla 出处：expkucom http://www.expku.com/web/56510.html <pre># Exploit Title: Nodemailer 9.0.0 - File Read/ SSRF # Date: 2026-07-17 # Exploit Author: Pig-Tail (Jorge González Milla) # Vendor Homepage: https://github.com/nodemailer/nodemailer # Software Link: https://www.npmjs.com/package/nod...... 2026-08-18 00:00:00 WEB Jorge González Milla 出处：expkucom http://www.expku.com/web/56509.html <pre># Exploit Title: Linuxfabrik monitoring_plugins_6.0.0 - SSRF # Date: 2026-07-17 # Exploit Author: Pig-Tail (Jorge González Milla) # Vendor Homepage: https://github.com/Linuxfabrik/monitoring-plugins # Software Link: https://github...... 2026-08-18 00:00:00 WEB Jorge González Milla 出处：expkucom http://www.expku.com/dos/56508.html <pre># Exploit Title: NanaZip 6.5 - DoS # Date: 2026-07-17 # Exploit Author: Pig-Tail (Jorge González Milla) # Vendor Homepage: https://github.com/M2Team/NanaZip # Software Link: https://github.com/M2Team/NanaZip/releases # Versio...... 2026-08-17 00:00:00 DOS Jorge González Milla 出处：expkucom http://www.expku.com/web/56507.html <pre># Exploit Title: flyto_core 2.26.7- Server-Side Request Forgery # Date: 2026-07-17 # Exploit Author: Pig-Tail (Jorge González Milla) # Vendor Homepage: https://github.com/flytohub/flyto-core # Software Link: https://github.com/fly...... 2026-08-17 00:00:00 WEB Jorge González Milla 出处：expkucom http://www.expku.com/web/56506.html <pre># Exploit Title: Probo 0.222.2 - IDOR # Date: 2026-07-17 # Exploit Author: Pig-Tail (Jorge González Milla) # Vendor Homepage: https://github.com/getprobo/probo # Software Link: https://github.com/getprobo/probo # Version: &lt;...... 2026-08-17 00:00:00 WEB Jorge González Milla 出处：expkucom http://www.expku.com/web/56505.html <pre># Exploit Title: webpack_devserver 5.2.5 - Csrf # Date: 2026-07-17 # Exploit Author: Pig-Tail (Jorge González Milla) # Vendor Homepage: https://github.com/webpack/webpack-dev-server # Software Link: https://www.npmjs.com/package/we...... 2026-08-17 00:00:00 WEB Jorge González Milla 出处：expkucom http://www.expku.com/remote/56504.html <pre># Exploit Title: phpSysInfo 3.4.5 - IP Allowlist Bypass # Google Dork: N/A # Date: 2026-07-11 # Exploit Author: Muhammed Mirac Kayikci # Vendor Homepage: https://phpsysinfo.github.io/phpsysinfo/ # Software Link: https://github.com/phpsysi...... 2026-08-17 00:00:00 REMOTE Muhammed Mirac Kayikci 出处：expkucom http://www.expku.com/dos/56503.html <pre># Exploit Title: Nmap 7.99 - Extension Header Integer Underflow # CVE: CVE-2026-58058 # Date: 2026-06-29 # Exploit Author: Mohammed Idrees Banyamer # Author Country: Jordan # Inst...... 2026-08-17 00:00:00 DOS banyamer 出处：expkucom http://www.expku.com/web/56502.html <pre># Exploit Title: Duplicati 2.2.0.3 - JWT Signing Key Leak Bypass leading to Token Forgery # Date: 2026-06-23 # Exploit Author: Gabriel Rodrigues TEXUGO from HAKAI # Vendor Homepage: https://www.duplicati.com # Software Link: https://github....... 2026-08-17 00:00:00 WEB Gabriel Rodrigues 出处：expkucom http://www.expku.com/web/56501.html <pre># Exploit Title: Joomla JCE_2.9.15 - Remote Code Execution # Date: 2026-07-10 # Exploit Author: K3ysTr0K3R (Jared Brits) # Vendor Homepage: https://www.joomla.org/ # Software Link: https://extensions.joomla.org/extension/jce/ # Version: JC...... 2026-08-17 00:00:00 WEB Jared Brits 出处：expkucom http://www.expku.com/remote/56500.html <pre># Exploit Title: ipTIME A3004T - Remote Code Execution # Date: 2026-06-29 # Exploit Author: Paccaron # Vendor Homepage: https://www.iptime.com # Software Link: https://www.iptime.com/iptime/?page_id=147&amp;pid=34 # Version: 14.19.0 # Tes...... 2026-08-17 00:00:00 REMOTE Paccaron 出处：expkucom http://www.expku.com/remote/56499.html <pre># Exploit Title: D-Link DNS_340L - OS Command Injection # Date: 2026-07-16 # Exploit Author: Jared Brits (K3ysTr0K3R) # Vendor Homepage: https://www.dlink.com/ # Version: DNS-320 (v1.00), DNS-320LW (v1.01.0914.2012), DNS-325 (v1.01, v1.02), ...... 2026-08-17 00:00:00 REMOTE Jared Brits 出处：expkucom