Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2025-12-25 Exploit Code Downloads   WordPress Quiz Maker 6.7.0.56 - SQL Injection 30 WEB Rahul Sreenivasan
2025-12-25 Exploit Code Downloads   Chained Quiz 1.3.5 - Unauthenticated Insecure Direct Object Reference via Cookie 7 WEB 0xsabre
2025-12-25 Exploit Code Downloads   FreeBSD rtsold 15.x - Remote Code Execution via DNSSL 17 WEB Lukas Johannes Möller
2025-12-16 Exploit Code Downloads   Summar Employee Portal 3.98.0 - Authenticated SQL Injection 28 WEB Peter Gabaldon
2025-12-16 Exploit Code Downloads   esm-dev 136 - Path Traversal 11 WEB Byte Reaper
2025-12-08 Exploit Code Downloads   Pluck 4.7.7-dev2 - PHP Code Execution 30 WEB CodeSecLab
2025-12-03 Exploit Code Downloads   phpMyFAQ 2.9.8 - Cross-Site Request Forgery(CSRF) 19 WEB CodeSecLab
2025-12-03 Exploit Code Downloads   phpMyFAQ 2.9.8 - Cross-Site Request Forgery (CSRF) 17 WEB CodeSecLab
2025-12-03 Exploit Code Downloads   MaNGOSWebV4 4.0.6 - Reflected XSS 18 WEB CodeSecLab
2025-12-03 Exploit Code Downloads   Django 5.1.13 - SQL Injection 30 WEB Wafcontrol Security Team
2025-12-03 Exploit Code Downloads   phpMyFaq 2.9.8 - Cross Site Request Forgery (CSRF) 19 WEB CodeSecLab
2025-12-03 Exploit Code Downloads   MobileDetect 2.8.31 - Cross-Site Scripting (XSS) 15 WEB CodeSecLab
2025-12-03 Exploit Code Downloads   phpIPAM 1.4 - SQL-Injection 19 WEB CodeSecLab
2025-12-03 Exploit Code Downloads   OpenRepeater 2.1 - OS Command Injection 14 WEB CodeSecLab
2025-12-03 Exploit Code Downloads   phpMyAdmin 5.0.0 - SQL Injection 18 WEB CodeSecLab
2025-12-03 Exploit Code Downloads   RosarioSIS 6.7.2 - Cross Site Scripting (XSS) 10 WEB CodeSecLab
2025-12-03 Exploit Code Downloads   RosarioSIS 6.7.2 - Cross-Site Scripting (XSS) 11 WEB CodeSecLab
2025-12-03 Exploit Code Downloads   PluckCMS 4.7.10 - Unrestricted File Upload 17 WEB CodeSecLab
2025-12-03 Exploit Code Downloads   openSIS Community Edition 8.0 - SQL Injection 6 WEB CodeSecLab
2025-12-02 Exploit Code Downloads   YOURLS 1.8.2 - Cross-Site Request Forgery (CSRF) 6 WEB CodeSecLab
2025-12-02 Exploit Code Downloads   phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting (XSS) 15 WEB CodeSecLab
2025-12-02 Exploit Code Downloads   phpIPAM 1.5.1 - SQL Injection 11 WEB CodeSecLab
2025-12-02 Exploit Code Downloads   Piwigo 13.6.0 - SQL Injection 15 WEB CodeSecLab
2025-12-02 Exploit Code Downloads   phpIPAM 1.6 - Reflected-Cross-Site Scripting (XSS) 9 WEB CodeSecLab
2025-12-02 Exploit Code Downloads   phpIPAM 1.6 - Reflected Cross-Site Scripting (XSS) 11 WEB CodeSecLab
2025-10-31 Exploit Code Downloads   Flowise 3.0.4 - Remote Code Execution (RCE) 76 WEB nltt0
2025-10-29 Exploit Code Downloads   Casdoor 2.95.0 - Cross-Site Request Forgery (CSRF) 40 WEB Van Lam Nguyen
2025-09-16 Exploit Code Downloads   Tourism Management System 2.0 - Arbitrary Shell Upload 126 WEB Debug Security
2025-09-16 Exploit Code Downloads   Casdoor 2.55.0 - Cross-Site Request Forgery (CSRF) 64 WEB Van Lam Nguyen
2025-09-16 Exploit Code Downloads   dotCMS 25.07.02-1 - Authenticated Blind SQL Injection 64 WEB Matan Sandori (OSCP_ OSEP_ OSWE)
2025-09-16 Exploit Code Downloads   ELEX WooCommerce WordPress Plugin 1.4.3 - SQL Injection 62 WEB Byte Reaper
2025-09-16 Exploit Code Downloads   XWiki Platform 15.10.10 - Metasploit Module for Remote Code Execution (RCE) 60 WEB Maksim Rogov
2025-09-16 Exploit Code Downloads   Concrete CMS 9.4.3 - Stored XSS 51 WEB Chokri Hammedi
2025-08-26 Exploit Code Downloads   StoryChief Wordpress Plugin 1.0.42 - Arbitrary File Upload 103 WEB xpl0dec
2025-08-26 Exploit Code Downloads   Lingdang CRM 8.6.4.7 - SQL Injection 89 WEB Beatriz Fresno Naumova
2025-08-26 Exploit Code Downloads   Birth Chart Compatibility WordPress Plugin 2.0 - Full Path Disclosure 54 WEB Byte Reaper
2025-08-18 Exploit Code Downloads   Lantronix Provisioning Manager 7.10.3 - XML External Entity Injection (XXE) 60 WEB Byte Reaper
2025-08-18 Exploit Code Downloads   Soosyze CMS 2.0 - Brute Force Login 66 WEB Beatriz Fresno Naumova
2025-08-18 Exploit Code Downloads   RiteCMS 3.0.0 - Reflected Cross Site Scripting (XSS) 43 WEB Gurjot Singh
2025-08-18 Exploit Code Downloads   BigAnt Office Messenger 5.6.06 - SQL Injection 31 WEB Nicat Abbasov
2025-08-11 Exploit Code Downloads   JetBrains TeamCity 2023.11.4 - Authentication Bypass 43 WEB İbrahimsql
2025-08-11 Exploit Code Downloads   ServiceNow Multiple Versions - Input Validation & Template Injection 29 WEB İbrahimsql
2025-08-11 Exploit Code Downloads   Ghost CMS 5.59.1 - Arbitrary File Read 43 WEB İbrahimsql
2025-08-11 Exploit Code Downloads   Ghost CMS 5.42.1 - Path Traversal 37 WEB İbrahimsql
2025-08-11 Exploit Code Downloads   VMware vSphere Client 8.0.3.0 - Reflected Cross-Site Scripting (XSS) 69 WEB Imraan Khan (Lich-Sec)
2025-08-11 Exploit Code Downloads   Microsoft Edge Renderer Process (Mojo IPC) 134.0.6998.177 - Sandbox Escape 21 WEB nu11secur1ty
2025-08-11 Exploit Code Downloads   Grav CMS 1.7.48 - Remote Code Execution (RCE) 29 WEB /bin/neko
2025-08-11 Exploit Code Downloads   atjiu pybbs 6.0.0 - Cross Site Scripting (XSS) 40 WEB Byte Reaper
2025-08-11 Exploit Code Downloads   projectworlds Online Admission System 1.0 - SQL Injection 36 WEB Byte Reaper
2025-08-03 Exploit Code Downloads   Ultimate Member WordPress Plugin 2.6.6 - Privilege Escalation 71 WEB Gurjot Singh
2025-08-03 Exploit Code Downloads   LPAR2RRD 8.04 - Remote Code Execution (RCE) 32 WEB Byte Reaper
2025-08-03 Exploit Code Downloads   Copyparty 1.18.6 - Reflected Cross-Site Scripting (XSS) 19 WEB Byte Reaper
2025-08-03 Exploit Code Downloads   Gandia Integra Total 4.4.2236.1 - SQL Injection 18 WEB Byte Reaper
2025-07-28 Exploit Code Downloads   Adobe ColdFusion 2023.6 - Remote File Read 26 WEB İbrahimsql
2025-07-28 Exploit Code Downloads   Mezzanine CMS 6.1.0 - Stored Cross Site Scripting (XSS) 37 WEB Kevin Dicks
2025-07-28 Exploit Code Downloads   XWiki 14 - SQL Injection via getdeleteddocuments.vm 20 WEB Byte Reaper
2025-07-28 Exploit Code Downloads   Invision Community 4.7.20 - (calendar/view.php) SQL Injection 30 WEB Egidio Romano
2025-07-22 Exploit Code Downloads   LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Department Assignment Alias Nick Field 39 WEB Manojkumar J
2025-07-22 Exploit Code Downloads   LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via the Chat Transfer Function 16 WEB Manojkumar J
2025-07-22 Exploit Code Downloads   LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Personal Canned Messages 14 WEB Manojkumar J
2025-07-22 Exploit Code Downloads   LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Facebook Integration Page Name Field 15 WEB Manojkumar J
2025-07-22 Exploit Code Downloads   LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Operator Surname 13 WEB Manojkumar J
2025-07-22 Exploit Code Downloads   LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Telegram Bot Username 15 WEB Manojkumar J
2025-07-22 Exploit Code Downloads   Discourse 3.1.1 - Unauthenticated Chat Message Access 20 WEB İbrahimsql
2025-07-22 Exploit Code Downloads   Joomla JS Jobs plugin 1.4.2 - SQL injection 16 WEB Adam Wallwork
2025-07-22 Exploit Code Downloads   Simple File List WordPress Plugin 4.2.2 - File Upload to RCE 22 WEB Md Amanat Ullah (xSwads)
2025-07-22 Exploit Code Downloads   Pie Register WordPress Plugin 3.7.1.4 - Authentication Bypass to RCE 18 WEB Md Amanat Ullah (xSwads)
2025-07-16 Exploit Code Downloads   WP Publications WordPress Plugin 1.2 - Stored XSS 51 WEB Zeynalxan Quliyev
2025-07-16 Exploit Code Downloads   White Star Software Protop 4.4.2-2024-11-27 - Local File Inclusion (LFI) 56 WEB Imraan Khan (Lich-Sec)
2025-07-16 Exploit Code Downloads   SugarCRM 14.0.0 - SSRF/Code Injection 43 WEB Egidio Romano
2025-07-16 Exploit Code Downloads   Langflow 1.2.x - Remote Code Execution (RCE) 43 WEB Raghad Abdallah Al-syouf
2025-07-16 Exploit Code Downloads   TOTOLINK N300RB 8.54 - Command Execution 52 WEB Skander BELABED - Magellan Sécurité
2025-07-16 Exploit Code Downloads   PivotX 3.0.0 RC3 - Remote Code Execution (RCE) 74 WEB HayToN
2025-07-08 Exploit Code Downloads   Discourse 3.2.x - Anonymous Cache Poisoning 60 WEB İbrahimsql
2025-07-08 Exploit Code Downloads   Stacks Mobile App Builder 5.2.3 - Authentication Bypass via Account Takeover 62 WEB stealthcopter
2025-07-02 Exploit Code Downloads   Moodle 4.4.0 - Authenticated Remote Code Execution 61 WEB Likhith Appalaneni
2025-06-26 Exploit Code Downloads   Social Warfare WordPress Plugin 3.5.2 - Remote Code Execution (RCE) 83 WEB Huseyin Mardinli
2025-06-26 Exploit Code Downloads   Sitecore 10.4 - Remote Code Execution (RCE) 47 WEB Yesith Alvarez
2025-06-26 Exploit Code Downloads   Pterodactyl Panel 1.11.11 - Remote Code Execution (RCE) 48 WEB Zen-kun04
2025-06-15 Exploit Code Downloads   Skyvern 0.1.85 - Remote Code Execution (RCE) via SSTI 53 WEB Cristian Branet
2025-06-15 Exploit Code Downloads   PHP CGI Module 8.3.4 - Remote Code Execution (RCE) 64 WEB İbrahimsql
2025-06-15 Exploit Code Downloads   Litespeed Cache WordPress Plugin 6.3.0.1 - Privilege Escalation 39 WEB Milad karimi
2025-06-15 Exploit Code Downloads   Anchor CMS 0.12.7 - Stored Cross Site Scripting (XSS) 36 WEB /bin/neko
2025-06-13 Exploit Code Downloads   Roundcube 1.6.10 - Remote Code Execution (RCE) 62 WEB Maksim Rogov
2025-06-09 Exploit Code Downloads   Laravel Pulse 1.3.1 - Arbitrary Code Injection 56 WEB Mohammed Idrees Banyamer
2025-06-05 Exploit Code Downloads   CloudClassroom PHP Project 1.0 - SQL Injection 29 WEB Sanjay Singh
2025-05-29 Exploit Code Downloads   Campcodes Online Hospital Management System 1.0 - SQL Injection 36 WEB Carine Constantino
2025-05-29 Exploit Code Downloads   WordPress Digits Plugin 8.4.6.1 - Authentication Bypass via OTP Bruteforcing 36 WEB Saleh Tarawneh
2025-05-25 Exploit Code Downloads   Java-springboot-codebase 1.1 - Arbitrary File Read 41 WEB d3sca
2025-05-25 Exploit Code Downloads   WordPress User Registration & Membership Plugin 4.1.2 - Authentication Bypass 35 WEB Mohammed Idrees Banyamer
2025-05-13 Exploit Code Downloads   WordPress Frontend Login and Registration Blocks Plugin 1.0.7 - Privilege Escalation 34 WEB Md Shoriful Islam
2025-05-13 Exploit Code Downloads   Kentico Xperience 13.0.178 - Cross Site Scripting (XSS) 23 WEB Alex Messham
2025-05-09 Exploit Code Downloads   SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation 30 WEB Abdualhadi khalifa
2025-05-09 Exploit Code Downloads   WordPress Depicter Plugin 3.6.1 - SQL Injection 26 WEB Andrew Long
2025-05-06 Exploit Code Downloads   ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF) 31 WEB Ahmed Thaiban
2025-05-06 Exploit Code Downloads   Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR) 28 WEB Sn1p3r-H4ck3r
2025-05-06 Exploit Code Downloads   Casdoor 1.901.0 - Cross-Site Request Forgery (CSRF) 35 WEB Van Lam Nguyen
2025-04-22 Exploit Code Downloads   WordPress Core 6.2 - Directory Traversal 22 WEB Milad karimi
2025-04-19 Exploit Code Downloads   FoxCMS 1.2.5 - Remote Code Execution (RCE) 37 WEB VeryLazyTech
2025-04-19 Exploit Code Downloads   Drupal 11.x-dev - Full Path Disclosure 21 WEB Milad karimi
2025-04-18 Exploit Code Downloads   KiviCare Clinic & Patient Management System (EHR) 3.6.4 - Unauthenticated SQL Injection 25 WEB samogod
2025-04-18 Exploit Code Downloads   UJCMS 9.6.3 - User Enumeration via IDOR 30 WEB Cyd Tseng
2025-04-18 Exploit Code Downloads   Inventio Lite 4 - SQL Injection 24 WEB pointedsec
2025-04-18 Exploit Code Downloads   Apache Commons Text 1.10.0 - Remote Code Execution 26 WEB Arjun Chaudhary
2025-04-18 Exploit Code Downloads   Tatsu 3.3.11 - Unauthenticated RCE 23 WEB Milad karimi
2025-04-18 Exploit Code Downloads   Hunk Companion Plugin 1.9.0 - Unauthenticated Plugin Installation 28 WEB Jun Takemura
2025-04-17 Exploit Code Downloads   compop.ca 3.5.3 - Arbitrary code Execution 22 WEB dmlino
2025-04-17 Exploit Code Downloads   Blood Bank & Donor Management System 2.4 - CSRF Improper Input Validation 24 WEB Kwangyun Keum
2025-04-17 Exploit Code Downloads   Usermin 2.100 - Username Enumeration 24 WEB Kjesper
2025-04-17 Exploit Code Downloads   Angular-Base64-Upload Library 0.1.21 - Unauthenticated Remote Code Execution (RCE) 25 WEB Ravindu Wickramasinghe
2025-04-17 Exploit Code Downloads   ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) - Authenticated Path Traversal 26 WEB LiquidWorm
2025-04-17 Exploit Code Downloads   ABB Cylon Aspect 3.08.02 (deployStart.php) - Unauthenticated Command Execution 22 WEB LiquidWorm
2025-04-16 Exploit Code Downloads   WooCommerce Customers Manager 29.4 - Post-Authenticated SQL Injection 21 WEB Ivan Spiridonov
2025-04-16 Exploit Code Downloads   Smart Manager 8.27.0 - Post-Authenticated SQL Injection 21 WEB Ivan Spiridonov
2025-04-16 Exploit Code Downloads   KodExplorer 4.52 - Open Redirect 26 WEB Rahad Chowdhury
2025-04-16 Exploit Code Downloads   Car Rental Project 1.0 - Remote Code Execution 27 WEB ub3rsick
2025-04-16 Exploit Code Downloads   Ethercreative Logs 3.0.3 - Path Traversal 21 WEB ub3rsick
2025-04-16 Exploit Code Downloads   FLIR AX8 1.46.16 - Remote Command Injection 24 WEB ub3rsick
2025-04-16 Exploit Code Downloads   Garage Management System 1.0 (categoriesName) - Stored XSS 21 WEB ub3rsick
2025-04-16 Exploit Code Downloads   ProConf 6.0 - Insecure Direct Object Reference (IDOR) 24 WEB ub3rsick
2025-04-16 Exploit Code Downloads   phpMyFAQ 3.2.10 - Unintended File Download Triggered by Embedded Frames 21 WEB Geo
2025-04-16 Exploit Code Downloads   ABB Cylon Aspect 3.08.03 (webServerDeviceLabelUpdate.php) - File Write DoS 17 WEB LiquidWorm
2025-04-16 Exploit Code Downloads   ABB Cylon Aspect 4.00.00 (factorySaved.php) - Unauthenticated XSS 15 WEB LiquidWorm
2025-04-16 Exploit Code Downloads   ABB Cylon Aspect 4.00.00 (factorySetSerialNum.php) - Remote Code Execution 20 WEB LiquidWorm
2025-04-16 Exploit Code Downloads   ABB Cylon Aspect 3.08.02 - Cross-Site Request Forgery (CSRF) 17 WEB LiquidWorm