DB: 2025-04-14

Exploit-DB · Exploit-DB · commit 60175c996363 · 2025-04-14T00:16:26.000Z
52 changes to exploits/shellcodes/ghdb

Microchip TimeProvider 4100 (Configuration modules) 2.4.6 - OS Command Injection
Microchip TimeProvider 4100 Grandmaster (Banner Config Modules) 2.4.6 - Stored Cross-Site Scripting (XSS)
Microchip TimeProvider 4100 Grandmaster (Data plot modules) 2.4.6 - SQL Injection
Microchip TimeProvider 4100 (Configuration modules) 2.4.6 - OS Command Injection
Microchip TimeProvider 4100 Grandmaster (Banner Config Modules) 2.4.6 - Stored Cross-Site Scripting (XSS)
Microchip TimeProvider 4100 Grandmaster (Data plot modules) 2.4.6 - SQL Injection

Apache HugeGraph Server 1.2.0 - Remote Code Execution (RCE)

DataEase 2.4.0 - Database Configuration Information Exposure

Cosy+ firmware 21.2s7 - Command Injection

Angular-Base64-Upload Library 0.1.20 - Remote Code Execution (RCE)

K7 Ultimate Security K7RKScan.sys 17.0.2019 - Denial Of Service (DoS)
ABB Cylon Aspect 3.07.02 - File Disclosure (Authenticated)
ABB Cylon Aspect 3.08.01 - Remote Code Execution (RCE)
ABB Cylon Aspect 3.07.02 - File Disclosure
ABB Cylon Aspect 3.08.01 - Remote Code Execution (RCE)

Cisco Smart Software Manager On-Prem 8-202206 - Account Takeover

CyberPanel 2.3.6 - Remote Code Execution (RCE)

IBM Security Verify Access 10.0.0 - Open Redirect during OAuth Flow

Intelight X-1L Traffic controller Maxtime 1.9.6 - Remote Code Execution (RCE)

KubeSphere 3.4.0 - Insecure Direct Object Reference (IDOR)

MagnusSolution magnusbilling 7.3.0 - Command Injection

Palo Alto Networks Expedition 1.2.90.1 - Admin Account Takeover

Progress Telerik Report Server 2024 Q1 (10.0.24.305) - Authentication Bypass

Sonatype Nexus Repository 3.53.0-01 - Path Traversal

Watcharr 1.43.0 - Remote Code Execution (RCE)

Webmin Usermin 2.100 - Username Enumeration
ABB Cylon Aspect 3.07.01 - Hard-coded Default Credentials
ABB Cylon Aspect 3.08.01 - Arbitrary File Delete
ABB Cylon Aspect 3.07.01 - Hard-coded Default Credentials
ABB Cylon Aspect 3.08.01 - Arbitrary File Delete

AquilaCMS 1.409.20 - Remote Command Execution (RCE)

Artica Proxy 4.50 - Remote Code Execution (RCE)

Centron 19.04 - Remote Code Execution (RCE)

ChurchCRM 5.9.1 - SQL Injection

CodeAstro Online Railway Reservation System 1.0 - Cross Site Scripting (XSS)

CodeCanyon RISE CRM 3.7.0 - SQL Injection

Elaine's Realtime CRM Automation 6.18.17 - Reflected XSS

Feng Office 3.11.1.2 - SQL Injection
flatCore 1.5 - Cross Site Request Forgery (CSRF)
flatCore 1.5.5 - Arbitrary File Upload
flatCore 1.5 - Cross Site Request Forgery (CSRF)
flatCore 1.5.5 - Arbitrary File Upload

GetSimpleCMS 3.3.16 - Remote Code Execution (RCE)

Gnuboard5 5.3.2.8 - SQL Injection

LearnPress WordPress LMS Plugin 4.2.7 - SQL Injection

Litespeed Cache 6.5.0.1 - Authentication Bypass

MiniCMS 1.1 - Cross Site Scripting (XSS)

MoziloCMS 3.0 - Remote Code Execution (RCE)

NEWS-BUZZ News Management System 1.0 - SQL Injection

PandoraFMS 7.0NG.772 - SQL Injection

phpIPAM 1.6 - Reflected Cross Site Scripting (XSS)

PZ Frontend Manager WordPress Plugin 1.0.5 - Cross Site Request Forgery (CSRF)

ResidenceCMS 2.10.1 - Stored Cross-Site Scripting (XSS)

RosarioSIS 7.6 - SQL Injection

Roundcube Webmail 1.6.6 - Stored Cross Site Scripting (XSS)
Typecho 1.3.0 - Race Condition
Typecho 1.3.0 - Stored Cross-Site Scripting (XSS)
Typecho 1.3.0 - Race Condition
Typecho 1.3.0 - Stored Cross-Site Scripting (XSS)

X2CRM 8.5 - Stored Cross-Site Scripting (XSS)

Rejetto HTTP File Server 2.3m - Remote Code Execution (RCE)

Microsoft Office 2019 MSO Build 1808 - NTLMv2 Hash Disclosure
diff --git a/exploits/hardware/remote/52119.NA b/exploits/hardware/remote/52119.NA
@@ -1,4 +1,4 @@
-# Exploit Title: Microchip TimeProvider 4100 Grandmaster Config File - Remote Code Execution (RCE)
+# Exploit Title: Microchip TimeProvider 4100 (Configuration modules) 2.4.6 - OS Command Injection
 
 # Exploit Author: Armando Huesca Prida
 
diff --git a/exploits/hardware/remote/52120.NA b/exploits/hardware/remote/52120.NA
@@ -1,4 +1,4 @@
-# Exploit Title: Microchip TimeProvider 4100 Grandmaster (banner) - Stored XSS
+# Exploit Title: Microchip TimeProvider 4100 Grandmaster (Banner Config Modules) 2.4.6 - Stored Cross-Site Scripting (XSS)
 
 # Exploit Author: Armando Huesca Prida
 
diff --git a/exploits/hardware/remote/52122.NA b/exploits/hardware/remote/52122.NA
@@ -1,4 +1,4 @@
-# Exploit Title: Microchip TimeProvider 4100 Grandmaster - Unauthenticated SQL Injection
+# Exploit Title: Microchip TimeProvider 4100 Grandmaster (Data plot modules) 2.4.6 - SQL Injection
 
 # Exploit Author: Armando Huesca Prida, Marco Negro
 
diff --git a/exploits/java/webapps/52128.py b/exploits/java/webapps/52128.py
@@ -1,13 +1,11 @@
-################################################################
-############################                                   #
-#- Exploit Title: DataEase Database Creds Extractor            #
-#- Shodan Dork: http.html:"dataease"                           #
-#- FOFA Dork: body="dataease" && title=="DataEase"             #
-#- Exploit Author: ByteHunter                                  #
-#- Email: 0xByteHunter@proton.me                               #
-#- vulnerable Versions: 2.4.0-2.5.0                            #
-#- Tested on: 2.4.0                                            #
-#- CVE : CVE-2024-30269                                        #
+# Exploit Title: DataEase 2.4.0 - Database Configuration Information Exposure
+# Shodan Dork: http.html:"dataease"                           #
+# FOFA Dork: body="dataease" && title=="DataEase"             #
+# Exploit Author: ByteHunter                                  #
+# Email: 0xByteHunter@proton.me                               #
+# vulnerable Versions: 2.4.0-2.5.0                            #
+# Tested on: 2.4.0                                            #
+# CVE : CVE-2024-30269                                        #
 ############################                                   #
 ################################################################
 
diff --git a/exploits/java/webapps/52149.py b/exploits/java/webapps/52149.py
@@ -1,4 +1,4 @@
-# Exploit Title: Apache HugeGraph < 1.2.0 Remote Code Execution (Unauthenticated)
+# Exploit Title: Apache HugeGraph Server 1.2.0 - Remote Code Execution (RCE)
 # Exploit Author: Yesith Alvarez
 # Vendor Homepage: https://hugegraph.apache.org/docs/download/download/
 # Version: Apache HugeGraph 1.0.0 - 1.2.0
diff --git a/exploits/multiple/hardware/52160.py b/exploits/multiple/hardware/52160.py
@@ -1,24 +1,4 @@
-Hey,
-
-Overview: The Ewon Cosy+ is a VPN gateway used for remote access and
-maintenance in industrial environments. The manufacturer describes the
-product as follows (see [1]): "The Ewon Cosy+ gateway establishes a secure
-VPN connection between the machine (PLC, HMI, or other devices) and the
-remote engineer. The connection happens through Talk2m, a highly secured
-industrial cloud service. The Ewon Cosy+ makes industrial remote access
-easy and secure like never before!" Due to improper neutralization of
-parameters read from a user-controlled configuration file, an authenticated
-attacker is able to inject and execute OS commands on the device.
-
-Vulnerability Details: Authenticated attackers are able to upload a custom
-OpenVPN configuration. This configuration can contain the OpenVPN
-paramaters "--up" and "--down", which execute a specified script or
-executable. Since the process itself runs with the highest privileges
-(root), this allows the device to be completely compromised.
-
-
-PoC:
-# Exploit Title: Ewon Cosy+ Command Injection
+# Exploit Title: Cosy+ firmware 21.2s7 - Command Injection
 # Google Dork: N/A
 # Date: 2024-8-20
 # Exploit Author: CodeB0ss
@@ -50,4 +30,22 @@ def configcreator(file_path):
 
 
 GitHub:
-https://github.com/codeb0ss/CVE-2024-33896-PoC
+https://github.com/codeb0ss/CVE-2024-33896-PoC
+
+Hey,
+
+Overview: The Ewon Cosy+ is a VPN gateway used for remote access and
+maintenance in industrial environments. The manufacturer describes the
+product as follows (see [1]): "The Ewon Cosy+ gateway establishes a secure
+VPN connection between the machine (PLC, HMI, or other devices) and the
+remote engineer. The connection happens through Talk2m, a highly secured
+industrial cloud service. The Ewon Cosy+ makes industrial remote access
+easy and secure like never before!" Due to improper neutralization of
+parameters read from a user-controlled configuration file, an authenticated
+attacker is able to inject and execute OS commands on the device.
+
+Vulnerability Details: Authenticated attackers are able to upload a custom
+OpenVPN configuration. This configuration can contain the OpenVPN
+paramaters "--up" and "--down", which execute a specified script or
+executable. Since the process itself runs with the highest privileges
+(root), this allows the device to be completely compromised.
diff --git a/exploits/multiple/remote/52121.py b/exploits/multiple/remote/52121.py
@@ -1,6 +1,4 @@
-#!/bin/python3
-
-# Exploit Title: Unauthenticated RCE via Angular-Base64-Upload Library
+# Exploit Title: Angular-Base64-Upload Library 0.1.20 - Remote Code Execution (RCE)
 # Date: 10 October 2024
 # Discovered by : Ravindu Wickramasinghe | rvz (@rvizx9)
 # Exploit Author: Ravindu Wickramasinghe | rvz (@rvizx9)
@@ -26,6 +24,7 @@
 # It is your responsibility to ensure compliance with all applicable laws and regulations governing your use of this software.
 # Proceed with caution and use this code responsibly.
 
+#!/bin/python3
 
 import re
 import subprocess
diff --git a/exploits/multiple/remote/52158.py b/exploits/multiple/remote/52158.py
@@ -1,4 +1,4 @@
-# Title:  K7 Ultimate Security < v17.0.2019 "K7RKScan.sys" Null Pointer Dereference
+# Exploit Title:  K7 Ultimate Security K7RKScan.sys 17.0.2019 - Denial Of Service (DoS)
 # Date: 13.08.2024
 # Author: M. Akil Gündoğan
 # Vendor Homepage: https://k7computing.com/
diff --git a/exploits/multiple/webapps/52097.NA b/exploits/multiple/webapps/52097.NA
@@ -1,4 +1,4 @@
-# Exploit Title: IDOR Vulnerability in KubeSphere v3.4.0 & KubeSphere Enterprise v4.1.1
+# Exploit Title: KubeSphere 3.4.0 - Insecure Direct Object Reference (IDOR)
 # Date: 3 September
 # Exploit Author: Okan Kurtulus
 # Vendor Homepage: https://kubesphere.io
diff --git a/exploits/multiple/webapps/52101.py b/exploits/multiple/webapps/52101.py
@@ -1,4 +1,4 @@
-# Exploit Title: CVE-2024-4956: Unauthenticated Path Traversal in Nexus Repository Manager 3
+# Exploit Title: Sonatype Nexus Repository 3.53.0-01 - Path Traversal
 # Google Dork: header="Server: Nexus/3.53.0-01 (OSS)"
 # Date: 2024-09-22
 # Exploit Author: VeryLazyTech
diff --git a/exploits/multiple/webapps/52103.py b/exploits/multiple/webapps/52103.py
@@ -1,4 +1,4 @@
-# Exploit Title: CVE-2024-4358: Telerik Report Server Authentication Bypass
+# Exploit Title: Progress Telerik Report Server 2024 Q1 (10.0.24.305) - Authentication Bypass
 # Fofa Dork: title="Telerik Report Server"
 # Date: 2024-09-22
 # Exploit Author: VeryLazyTech
diff --git a/exploits/multiple/webapps/52107.NA b/exploits/multiple/webapps/52107.NA
@@ -1,5 +1,4 @@
-ABB Cylon Aspect 3.08.01 (bigUpload.php) Remote Code Execution
-
+# Exploit Title : ABB Cylon Aspect 3.08.01 - Remote Code Execution (RCE)
 
 Vendor: ABB Ltd.
 Product web page: https://www.global.abb
diff --git a/exploits/multiple/webapps/52115.NA b/exploits/multiple/webapps/52115.NA
@@ -1,4 +1,4 @@
-ABB Cylon Aspect 3.07.02 (downloadDb.php) Authenticated File Disclosure
+# Exploit Title : ABB Cylon Aspect 3.07.02 - File Disclosure
 
 
 Vendor: ABB Ltd.
diff --git a/exploits/multiple/webapps/52123.NA b/exploits/multiple/webapps/52123.NA
@@ -1,5 +1,4 @@
-- IBM Security Verify Access >= 10.0.0 <= 10.0.8 - Open Redirect during OAuth Flow
-
+# Exploit Title : IBM Security Verify Access 10.0.0 - Open Redirect during OAuth Flow
 ======== < Table of Contents > ================================================
 
   0. Overview
diff --git a/exploits/multiple/webapps/52129.py b/exploits/multiple/webapps/52129.py
@@ -1,13 +1,11 @@
-################################################################################################
-############################                                                                   #
-#- Exploit Title: PoC for Admin Account Password Reset of Palo Alto Networks Expedition tool   #
-#- Shodan Dork: html:"expedition project"                                                      #
-#- FOFA Dork: "expedition project" && icon_hash="1499876150"                                   #
-#- Exploit Author: ByteHunter                                                                  #
-#- Email: 0xByteHunter@proton.me                                                               #
-#- Vulnerable Versions: 1.2 < 1.2.92                                                           #
-#- Tested on: 1.2.90.1 & 1.2.75                                                                #
-#- CVE : CVE-2024-5910                                                                         #
+# Exploit Title: Palo Alto Networks Expedition 1.2.90.1 - Admin Account Takeover
+# Shodan Dork: html:"expedition project"                                                      #
+# FOFA Dork: "expedition project" && icon_hash="1499876150"                                   #
+# Exploit Author: ByteHunter                                                                  #
+# Email: 0xByteHunter@proton.me                                                               #
+# Vulnerable Versions: 1.2 < 1.2.92                                                           #
+# Tested on: 1.2.90.1 & 1.2.75                                                                #
+# CVE : CVE-2024-5910                                                                         #
 ############################                                                                   #
 ################################################################################################
 
diff --git a/exploits/multiple/webapps/52130.py b/exploits/multiple/webapps/52130.py
@@ -1,3 +1,4 @@
+# Exploit Title : Watcharr 1.43.0 - Remote Code Execution (RCE)
 # CVE-2024-48827 exploit by Suphawith Phusanbai
 # Affected Watcharr version 1.43.0 and below.
 import argparse
diff --git a/exploits/multiple/webapps/52151.txt b/exploits/multiple/webapps/52151.txt
@@ -1,4 +1,4 @@
-# Exploit Title: MaxTime Database Editor 1.9 Authentication Bypass
+# Exploit Title: Intelight X-1L Traffic controller Maxtime 1.9.6 - Remote Code Execution (RCE)
 # Google Dork: N/A
 # Date: 07/09/2024
 # Exploit Author: Andrew Lemon/Red Threat https://redthreatsec.com
diff --git a/exploits/multiple/webapps/52155.py b/exploits/multiple/webapps/52155.py
@@ -1,4 +1,4 @@
-# Exploit Title: Cisco SSM On-Prem; Account Takeover (CVE-2024-20419)
+# Exploit Title: Cisco Smart Software Manager On-Prem 8-202206 - Account Takeover
 # Google Dork: N/A
 # Date: 21/07/2024
 # Exploit Author: Mohammed Adel
diff --git a/exploits/multiple/webapps/52170.txt b/exploits/multiple/webapps/52170.txt
@@ -1,15 +1,17 @@
-# Exploit Title: [MagnusBilling 6.x and 7.x Unauthenticated Remote Command Injection Vulnerability]
-# Date: [2024-10-26]
-# Exploit Author: [CodeSecLab]
-# Vendor Homepage: [https://github.com/magnussolution/magnusbilling7]
-# Software Link: [https://github.com/magnussolution/magnusbilling7]
-# Version: [7.3.0]
-# Tested on: [Centos]
-# CVE : [CVE-2023-30258]
-
-PoC:
+# Exploit Title: MagnusSolution magnusbilling 7.3.0 - Command Injection
+# Date: 2024-10-26
+# Exploit Author: CodeSecLab
+# Vendor Homepage: https://github.com/magnussolution/magnusbilling7
+# Software Link: https://github.com/magnussolution/magnusbilling7
+# Version: 7.3.0
+# Tested on: Centos
+# CVE : CVE-2023-30258
+
+
 # PoC URL for Command Injection
+
 http://magnusbilling/lib/icepay/icepay.php?democ=testfile; id > /tmp/injected.txt
+
 Result: This PoC attempts to inject the id command.
 
 [Replace Your Domain Name]
diff --git a/exploits/multiple/webapps/52172.py b/exploits/multiple/webapps/52172.py
@@ -1,4 +1,4 @@
-# Exploit Title: CyberPanel v2.3.5, v2.3.6 - Remote Code Execution (RCE) (Unauthenticated)
+# Exploit Title: CyberPanel 2.3.6 - Remote Code Execution (RCE)
 # Date: 10/29/2024
 # Exploit Author: Luka Petrovic (refr4g)
 # Vendor Homepage: https://cyberpanel.net/
diff --git a/exploits/perl/webapps/52114.py b/exploits/perl/webapps/52114.py
@@ -1,4 +1,4 @@
-# Exploit Title: Usermin 2.100 - Username Enumeration
+# Exploit Title: Webmin Usermin 2.100 - Username Enumeration
 # Date: 10.02.2024
 # Exploit Author: Kjesper
 # Vendor Homepage: https://www.webmin.com/usermin.html
diff --git a/exploits/php/webapps/52096.NA b/exploits/php/webapps/52096.NA
@@ -1,4 +1,4 @@
-# Exploit Title: MoziloCMS 3.0 - Remote Code Execution (RCE) (Authenticated)
+# Exploit Title: MoziloCMS 3.0 - Remote Code Execution (RCE)
 # Date: 10/09/2024
 # Exploit Author: Secfortress (https://github.com/sec-fortress)
 # Vendor Homepage: https://mozilo.de/
diff --git a/exploits/php/webapps/52098.NA b/exploits/php/webapps/52098.NA
@@ -1,4 +1,4 @@
-# Exploit Title: X2CRM v8.5 – Stored Cross-Site Scripting (XSS) (Authenticated)
+# Exploit Title: X2CRM 8.5 - Stored Cross-Site Scripting (XSS)
 # Date: 12 September 2024
 # Exploit Author: Okan Kurtulus
 # Vendor Homepage: https://x2engine.com/
diff --git a/exploits/php/webapps/52099.py b/exploits/php/webapps/52099.py
@@ -1,4 +1,4 @@
-# Exploit Title: Litespeed unauthorized account takeover
+# Exploit Title: Litespeed Cache 6.5.0.1 - Authentication Bypass
 # Google Dork: [if applicable]
 # Date: reported on 17 September 2024
 # Exploit Author: Gnzls
diff --git a/exploits/php/webapps/52100.py b/exploits/php/webapps/52100.py
@@ -1,6 +1,4 @@
-########PROOF OF CONCEPT####################
-# CVE: CVE-2024-8945
-# Exploit Title: RISE Ultimate Project Manager 3.7 sql injection POC
+# Exploit Title: CodeCanyon RISE CRM 3.7.0 - SQL Injection
 # Google Dork: N/A
 # Date: September 19, 2024
 # Exploit Author: Jobyer Ahmed
@@ -9,7 +7,7 @@
 # Patched Version: 3.7.1
 # Tested on: Ubuntu 24.04, Debian Testing
 ##########################################
-
+# CVE: CVE-2024-8945
 ############Instruction#######################
 # 1. Login to Ultimate Project Manager 3.7
 # 2. Add a New Dashboard
diff --git a/exploits/php/webapps/52106.NA b/exploits/php/webapps/52106.NA
@@ -1,4 +1,4 @@
-# Exploit Title: Reflected XSS in Elaine's Realtime CRM Automation v6.18.17
+# Exploit Title: Elaine's Realtime CRM Automation 6.18.17 - Reflected XSS
 # Date: 09/2024
 # Exploit Author: Haythem Arfaoui (CBTW Team)
 # Vendor Homepage: https://www.elaine.io/
diff --git a/exploits/php/webapps/52108.NA b/exploits/php/webapps/52108.NA
@@ -1,5 +1,4 @@
-ABB Cylon Aspect 3.08.01 (databaseFileDelete.php) Arbitrary File Delete
-
+# Exploit Title : ABB Cylon Aspect 3.08.01 - Arbitrary File Delete
 
 Vendor: ABB Ltd.
 Product web page: https://www.global.abb
diff --git a/exploits/php/webapps/52112.NA b/exploits/php/webapps/52112.NA
@@ -1,4 +1,4 @@
-ABB Cylon Aspect 3.07.01 (config.inc.php) Hard-coded Credentials in phpMyAdmin
+# Exploit Title : ABB Cylon Aspect 3.07.01 - Hard-coded Default Credentials
 
 
 Vendor: ABB Ltd.
diff --git a/exploits/php/webapps/52146.py b/exploits/php/webapps/52146.py
@@ -1,6 +1,4 @@
-# Exploit Title: CVE-2024-2054 Artica-Proxy administrative web
-application insecure deserialization (RCE)
-# Google Dork:
+# Exploit Title: Artica Proxy 4.50 - Remote Code Execution (RCE)
 # Date: 23-04-2024
 # Exploit Author: Madan
 # Vendor Homepage: https://artica-proxy.com/
diff --git a/exploits/php/webapps/52150.NA b/exploits/php/webapps/52150.NA
@@ -1,5 +1,4 @@
-# Exploit Title: ResidenceCMS <= 2.10.1 Stored Cross-Site Scripting
-via Content Form
+# Exploit Title: ResidenceCMS 2.10.1 - Stored Cross-Site Scripting (XSS)
 # Date: 8-7-2024
 # Category: Web Application
 # Exploit Author: Jeremia Geraldi Sihombing
diff --git a/exploits/php/webapps/52152.NA b/exploits/php/webapps/52152.NA
@@ -1,18 +1,18 @@
-## Exploit Title: ChurchCRM v4.5.3-121fcc1 - SQL Injection
+# Exploit Title: ChurchCRM 5.9.1 - SQL Injection
 
-## Author: Sanan Qasimzada
+# Author: Sanan Qasimzada
 
-## Date: 06.07.2024
+# Date: 06.07.2024
 
-## Vendor: http://churchcrm.io/
+# Vendor: http://churchcrm.io/
 
-## Software: https://github.com/ChurchRM/CRM
+# Software: https://github.com/ChurchRM/CRM
 
-## Reference: https://portswigger.net/web-security/sql-injection
+# Reference: https://portswigger.net/web-security/sql-injection
 
 
 
-## Description:
+# Description:
 
 In the manual insertion point 1 - parameter `EID` appears to be
 
@@ -85,21 +85,21 @@ UNION ALL SELECT
 
 
 
-## Reproduce:
+# Reproduce:
 
 [href](
 https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/ChurchCRM/2023/ChurchCRM-4.5.3-121fcc1
 )
 
 
 
-## Proof and Exploit:
+# Proof and Exploit:
 
 [href](https://streamable.com/1eqhw2)
 
 
 
-## Time spend:
+# Time spend:
 
 01:00:00
 
diff --git a/exploits/php/webapps/52153.NA b/exploits/php/webapps/52153.NA
@@ -1,5 +1,4 @@
-# Exploit Title: pz-frontend-manager <= 1.0.5 - CSRF change user profile
-picture
+# Exploit Title: PZ Frontend Manager WordPress Plugin 1.0.5 - Cross Site Request Forgery (CSRF)
 # Date: 2024-07-01
 # Exploit Author: Vuln Seeker Cybersecurity Team
 # Vendor Homepage: https://wordpress.org/plugins/pz-frontend-manager/
diff --git a/exploits/php/webapps/52154.NA b/exploits/php/webapps/52154.NA
@@ -1,4 +1,4 @@
-# Exploit Title: Blind SQL Injection - FengOffice
+# Exploit Title: Feng Office 3.11.1.2 - SQL Injection
 # Date: 7/2024
 # Exploit Author: Andrey Stoykov
 # Version: 3.11.1.2
diff --git a/exploits/php/webapps/52156.py b/exploits/php/webapps/52156.py
@@ -1,4 +1,4 @@
-#!/usr/bin/env python3
+# Exploit Title : Centron 19.04 - Remote Code Execution (RCE)
 # Tested on Centreon API 19.04.0
 # Centreon 19.04 - Login Password Bruteforcer
 # Written on 6 Nov 2019
@@ -8,6 +8,8 @@
 # Centreon Download Link: https://download.centreon.com/#version-Older
 # Dependencies: sys, requests, argparse, termcolor, os
 
+#!/usr/bin/env python3
+
 import sys
 import requests
 import argparse
diff --git a/exploits/php/webapps/52157.py b/exploits/php/webapps/52157.py
@@ -1,4 +1,4 @@
-# Exploit Title: PandoraFMS console v7.0NG.772 - SQL Injection (Authenticated)
+# Exploit Title: PandoraFMS 7.0NG.772 - SQL Injection
 # Date: 21/11/2023
 # Exploit Author: Osama Yousef
 # Vendor Homepage: https://pandorafms.com/
diff --git a/exploits/php/webapps/52159.txt b/exploits/php/webapps/52159.txt
@@ -1,4 +1,4 @@
-# Exploit Title: XSS Vulnerability in Online Railway Reservation System 1.0
+# Exploit Title: CodeAstro Online Railway Reservation System 1.0 - Cross Site Scripting (XSS)
 # Date: 2024-08-15
 # Exploit Author: Raj Nandi
 # Vendor Homepage: https://codeastro.com/
diff --git a/exploits/php/webapps/52161.go b/exploits/php/webapps/52161.go
diff --git a/exploits/php/webapps/52162.go b/exploits/php/webapps/52162.go
diff --git a/exploits/php/webapps/52164.py b/exploits/php/webapps/52164.py
diff --git a/exploits/php/webapps/52165.txt b/exploits/php/webapps/52165.txt
diff --git a/exploits/php/webapps/52166.txt b/exploits/php/webapps/52166.txt
diff --git a/exploits/php/webapps/52167.txt b/exploits/php/webapps/52167.txt
diff --git a/exploits/php/webapps/52168.txt b/exploits/php/webapps/52168.txt
diff --git a/exploits/php/webapps/52169.txt b/exploits/php/webapps/52169.txt
diff --git a/exploits/php/webapps/52171.txt b/exploits/php/webapps/52171.txt
diff --git a/exploits/php/webapps/52173.txt b/exploits/php/webapps/52173.txt
diff --git a/exploits/php/webapps/52174.txt b/exploits/php/webapps/52174.txt
diff --git a/exploits/php/webapps/52175.txt b/exploits/php/webapps/52175.txt
diff --git a/exploits/php/webapps/52176.txt b/exploits/php/webapps/52176.txt
diff --git a/exploits/typescript/webapps/52102.py b/exploits/typescript/webapps/52102.py
diff --git a/exploits/windows/remote/52113.NA b/exploits/windows/remote/52113.NA
diff --git a/files_exploits.csv b/files_exploits.csv

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-# Exploit Title: Microchip TimeProvider 4100 Grandmaster Config File - Remote Code Execution (RCE)`
	`1`	`+# Exploit Title: Microchip TimeProvider 4100 (Configuration modules) 2.4.6 - OS Command Injection`
`2`	`2`
`3`	`3`	`# Exploit Author: Armando Huesca Prida`
`4`	`4`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-# Exploit Title: Apache HugeGraph < 1.2.0 Remote Code Execution (Unauthenticated)`
	`1`	`+# Exploit Title: Apache HugeGraph Server 1.2.0 - Remote Code Execution (RCE)`
`2`	`2`	`# Exploit Author: Yesith Alvarez`
`3`	`3`	`# Vendor Homepage: https://hugegraph.apache.org/docs/download/download/`
`4`	`4`	`# Version: Apache HugeGraph 1.0.0 - 1.2.0`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-# Title: K7 Ultimate Security < v17.0.2019 "K7RKScan.sys" Null Pointer Dereference`
	`1`	`+# Exploit Title: K7 Ultimate Security K7RKScan.sys 17.0.2019 - Denial Of Service (DoS)`
`2`	`2`	`# Date: 13.08.2024`
`3`	`3`	`# Author: M. Akil Gündoğan`
`4`	`4`	`# Vendor Homepage: https://k7computing.com/`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-# Exploit Title: IDOR Vulnerability in KubeSphere v3.4.0 & KubeSphere Enterprise v4.1.1`
	`1`	`+# Exploit Title: KubeSphere 3.4.0 - Insecure Direct Object Reference (IDOR)`
`2`	`2`	`# Date: 3 September`
`3`	`3`	`# Exploit Author: Okan Kurtulus`
`4`	`4`	`# Vendor Homepage: https://kubesphere.io`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-# Exploit Title: CVE-2024-4956: Unauthenticated Path Traversal in Nexus Repository Manager 3`
	`1`	`+# Exploit Title: Sonatype Nexus Repository 3.53.0-01 - Path Traversal`
`2`	`2`	`# Google Dork: header="Server: Nexus/3.53.0-01 (OSS)"`
`3`	`3`	`# Date: 2024-09-22`
`4`	`4`	`# Exploit Author: VeryLazyTech`