Les derniers exploits Hacking, Cybersécurité, RGPD, Pentest, Bug Bounty

🚨 [Exploit] Elasticsearch 8.5.3 Stack Overflow
👉 Elasticsearch 8.5.3 Stack Overflow

http://www.exploitalert.com/view-details.html?id=39896

🚨 [Exploit] Elasticsearch 8.5.3 Stack Overflow
http://www.exploitalert.com/view-details.html?id=39896

🚨 [Exploit] TOTOLINK Wireless Routers Remote Command Execution
👉 TOTOLINK Wireless Routers Remote Command Execution

http://www.exploitalert.com/view-details.html?id=39897

🚨 [Exploit] TOTOLINK Wireless Routers Remote Command Execution
http://www.exploitalert.com/view-details.html?id=39897

🚨 [Exploit] PHP Type Confusion Vulnerability Leading to Administrator Account Takeover via Authentication Bypass
👉 PHP Type Confusion Vulnerability Leading to Administrator Account Takeover via Authentication Bypass

http://www.exploitalert.com/view-details.html?id=39898

🚨 [Exploit] PHP Type Confusion Vulnerability Leading to Administrator Account Takeover via Authentication Bypass
http://www.exploitalert.com/view-details.html?id=39898

🚨 [Exploit] Taskhub 2.8.8 Cross Site Scripting
👉 Taskhub 2.8.8 Cross Site Scripting

http://www.exploitalert.com/view-details.html?id=39899

🚨 [Exploit] Taskhub 2.8.8 Cross Site Scripting
http://www.exploitalert.com/view-details.html?id=39899

🚨 [Exploit] Pegasus X DLL hijacking
👉 Pegasus X DLL hijacking

http://www.exploitalert.com/view-details.html?id=39895

🚨 [Exploit] Pegasus X DLL hijacking
http://www.exploitalert.com/view-details.html?id=39895

🚨 [Exploit] Academy LMS 6.2 SQL Injection
👉 Academy LMS 6.2 SQL Injection

http://www.exploitalert.com/view-details.html?id=39886

🚨 [Exploit] Academy LMS 6.2 SQL Injection
http://www.exploitalert.com/view-details.html?id=39886

🚨 [Exploit] SFTP/FTP Password Exposure via sftp-config.json
👉 SFTP/FTP Password Exposure via sftp-config.json

http://www.exploitalert.com/view-details.html?id=39887

🚨 [Exploit] SFTP/FTP Password Exposure via sftp-config.json
http://www.exploitalert.com/view-details.html?id=39887

🚨 [Exploit] Atos Unify OpenScape Code Execution / Missing Authentication
👉 Atos Unify OpenScape Code Execution / Missing Authentication

http://www.exploitalert.com/view-details.html?id=39888

🚨 [Exploit] Atos Unify OpenScape Code Execution / Missing Authentication
http://www.exploitalert.com/view-details.html?id=39888

🚨 [Exploit] Lexmark Device Embedded Web Server Remote Code Execution
👉 Lexmark Device Embedded Web Server Remote Code Execution

http://www.exploitalert.com/view-details.html?id=39889

🚨 [Exploit] Lexmark Device Embedded Web Server Remote Code Execution
http://www.exploitalert.com/view-details.html?id=39889

🚨 [Exploit] WordPress Essential Blocks 4.2.0 / Essential Blocks Pro 1.1.0 PHP Object Injection
👉 WordPress Essential Blocks 4.2.0 / Essential Blocks Pro 1.1.0 PHP Object Injection

http://www.exploitalert.com/view-details.html?id=39890

🚨 [Exploit] WordPress Essential Blocks 4.2.0 / Essential Blocks Pro 1.1.0 PHP Object Injection
http://www.exploitalert.com/view-details.html?id=39890

🚨 [Exploit] [dos] SyncBreeze 15.2.24 - 'login' Denial of Service
👉 SyncBreeze 15.2.24 - 'login' Denial of Service

https://www.exploit-db.com/exploits/51725

🚨 [Exploit] [dos] SyncBreeze 15.2.24 - 'login' Denial of Service
https://www.exploit-db.com/exploits/51725

🚨 [Exploit] [local] GOM Player 2.3.90.5360 - Buffer Overflow (PoC)
👉 GOM Player 2.3.90.5360 - Buffer Overflow (PoC)

https://www.exploit-db.com/exploits/51724

🚨 [Exploit] [local] GOM Player 2.3.90.5360 - Buffer Overflow (PoC)
https://www.exploit-db.com/exploits/51724

🚨 [Exploit] [webapps] Drupal 10.1.2 - web-cache-poisoning-External-service-interaction
👉 Drupal 10.1.2 - web-cache-poisoning-External-service-interaction

https://www.exploit-db.com/exploits/51723

🚨 [Exploit] [webapps] Drupal 10.1.2 - web-cache-poisoning-External-service-interaction
https://www.exploit-db.com/exploits/51723

🚨 [Exploit] [webapps] Axigen < 10.3.3.47, 10.2.3.12 - Reflected XSS
👉 Axigen < 10.3.3.47, 10.2.3.12 - Reflected XSS

https://www.exploit-db.com/exploits/51722

🚨 [Exploit] [webapps] Axigen < 10.3.3.47, 10.2.3.12 - Reflected XSS
https://www.exploit-db.com/exploits/51722

🚨 [Exploit] [remote] Techview LA-5570 Wireless Gateway Home Automation Controller - Multiple Vulnerabilities
👉 Techview LA-5570 Wireless Gateway Home Automation Controller - Multiple Vulnerabilities

https://www.exploit-db.com/exploits/51720

🚨 [Exploit] [remote] Techview LA-5570 Wireless Gateway Home Automation Controller - Multiple Vulnerabilities
https://www.exploit-db.com/exploits/51720

🚨 [Exploit] [remote] GOM Player 2.3.90.5360 - Remote Code Execution (RCE)
👉 GOM Player 2.3.90.5360 - Remote Code Execution (RCE)

https://www.exploit-db.com/exploits/51719

🚨 [Exploit] [remote] GOM Player 2.3.90.5360 - Remote Code Execution (RCE)
https://www.exploit-db.com/exploits/51719

🚨 [Exploit] [webapps] soosyze 2.0.0 - File Upload
👉 soosyze 2.0.0 - File Upload

https://www.exploit-db.com/exploits/51718

🚨 [Exploit] [webapps] soosyze 2.0.0 - File Upload
https://www.exploit-db.com/exploits/51718

🚨 [Exploit] [webapps] Wp2Fac - OS Command Injection
👉 Wp2Fac - OS Command Injection

https://www.exploit-db.com/exploits/51717

🚨 [Exploit] [webapps] Wp2Fac - OS Command Injection
https://www.exploit-db.com/exploits/51717

🚨 [Exploit] [webapps] Wordpress Plugin Elementor 3.5.5 - Iframe Injection
👉 Wordpress Plugin Elementor 3.5.5 - Iframe Injection

https://www.exploit-db.com/exploits/51716

🚨 [Exploit] [webapps] Wordpress Plugin Elementor 3.5.5 - Iframe Injection
https://www.exploit-db.com/exploits/51716

🚨 [Exploit] [webapps] Jorani v1.0.3-(c)2014-2023 - XSS Reflected & Information Disclosure
👉 Jorani v1.0.3-(c)2014-2023 - XSS Reflected & Information Disclosure

https://www.exploit-db.com/exploits/51715

🚨 [Exploit] [webapps] Jorani v1.0.3-(c)2014-2023 - XSS Reflected & Information Disclosure
https://www.exploit-db.com/exploits/51715

🚨 [Exploit] [webapps] SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection
👉 SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection

https://www.exploit-db.com/exploits/51714

🚨 [Exploit] [webapps] SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection
https://www.exploit-db.com/exploits/51714

🚨 [Exploit] [webapps] SPA-Cart eCommerce CMS 1.9.0.3 - Reflected XSS
👉 SPA-Cart eCommerce CMS 1.9.0.3 - Reflected XSS

https://www.exploit-db.com/exploits/51713

🚨 [Exploit] [webapps] SPA-Cart eCommerce CMS 1.9.0.3 - Reflected XSS
https://www.exploit-db.com/exploits/51713

🚨 [Exploit] [webapps] Bus Reservation System 1.1 - Multiple-SQLi
👉 Bus Reservation System 1.1 - Multiple-SQLi

https://www.exploit-db.com/exploits/51712

🚨 [Exploit] [webapps] Bus Reservation System 1.1 - Multiple-SQLi
https://www.exploit-db.com/exploits/51712

🚨 [Exploit] [webapps] WP Statistics Plugin 13.1.5 current_page_id - Time based SQL injection (Unauthenticated)
👉 WP Statistics Plugin 13.1.5 current_page_id - Time based SQL injection (Unauthenticated)

https://www.exploit-db.com/exploits/51711

🚨 [Exploit] [webapps] WP Statistics Plugin 13.1.5 current_page_id - Time based SQL injection (Unauthenticated)
https://www.exploit-db.com/exploits/51711

🚨 [Exploit] [webapps] Member Login Script 3.3 - Client-side desync
👉 Member Login Script 3.3 - Client-side desync

https://www.exploit-db.com/exploits/51710

🚨 [Exploit] [webapps] Member Login Script 3.3 - Client-side desync
https://www.exploit-db.com/exploits/51710

🚨 [Exploit] [webapps] DLINK DPH-400SE - Exposure of Sensitive Information
👉 DLINK DPH-400SE - Exposure of Sensitive Information

https://www.exploit-db.com/exploits/51709

🚨 [Exploit] [webapps] DLINK DPH-400SE - Exposure of Sensitive Information
https://www.exploit-db.com/exploits/51709

🚨 [Exploit] [webapps] FileMage Gateway 1.10.9 - Local File Inclusion
👉 FileMage Gateway 1.10.9 - Local File Inclusion

https://www.exploit-db.com/exploits/51708

🚨 [Exploit] [webapps] FileMage Gateway 1.10.9 - Local File Inclusion
https://www.exploit-db.com/exploits/51708

🚨 [Exploit] [local] Kingo ROOT 1.5.8 - Unquoted Service Path
👉 Kingo ROOT 1.5.8 - Unquoted Service Path

https://www.exploit-db.com/exploits/51707

🚨 [Exploit] [local] Kingo ROOT 1.5.8 - Unquoted Service Path
https://www.exploit-db.com/exploits/51707

🚨 [Exploit] [local] Freefloat FTP Server 1.0 - 'PWD' Remote Buffer Overflow
👉 Freefloat FTP Server 1.0 - 'PWD' Remote Buffer Overflow

https://www.exploit-db.com/exploits/51706

🚨 [Exploit] [local] Freefloat FTP Server 1.0 - 'PWD' Remote Buffer Overflow
https://www.exploit-db.com/exploits/51706

🚨 [Exploit] [webapps] AdminLTE PiHole 5.18 - Broken Access Control
👉 AdminLTE PiHole 5.18 - Broken Access Control

https://www.exploit-db.com/exploits/51705

🚨 [Exploit] [webapps] AdminLTE PiHole 5.18 - Broken Access Control
https://www.exploit-db.com/exploits/51705

🚨 [Exploit] [webapps] CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin 'Gallery')
👉 CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin 'Gallery')

https://www.exploit-db.com/exploits/51704

🚨 [Exploit] [webapps] CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin 'Gallery')
https://www.exploit-db.com/exploits/51704

🚨 [Exploit] [webapps] CSZ CMS 1.3.0 - Stored Cross-Site Scripting ('Photo URL' and 'YouTube URL' )
👉 CSZ CMS 1.3.0 - Stored Cross-Site Scripting ('Photo URL' and 'YouTube URL' )

https://www.exploit-db.com/exploits/51703

🚨 [Exploit] [webapps] CSZ CMS 1.3.0 - Stored Cross-Site Scripting ('Photo URL' and 'YouTube URL' )
https://www.exploit-db.com/exploits/51703