Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2025-05-13 Exploit Code Downloads   WordPress Frontend Login and Registration Blocks Plugin 1.0.7 - Privilege Escalation 136 WEB Md Shoriful Islam
2025-05-13 Exploit Code Downloads   Kentico Xperience 13.0.178 - Cross Site Scripting (XSS) 55 WEB Alex Messham
2025-05-09 Exploit Code Downloads   SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation 61 WEB Abdualhadi khalifa
2025-05-09 Exploit Code Downloads   WordPress Depicter Plugin 3.6.1 - SQL Injection 114 WEB Andrew Long
2025-05-06 Exploit Code Downloads   ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF) 120 WEB Ahmed Thaiban
2025-05-06 Exploit Code Downloads   Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR) 142 WEB Sn1p3r-H4ck3r
2025-05-06 Exploit Code Downloads   Casdoor 1.901.0 - Cross-Site Request Forgery (CSRF) 101 WEB Van Lam Nguyen
2025-04-22 Exploit Code Downloads   WordPress Core 6.2 - Directory Traversal 57 WEB Milad karimi
2025-04-19 Exploit Code Downloads   FoxCMS 1.2.5 - Remote Code Execution (RCE) 71 WEB VeryLazyTech
2025-04-19 Exploit Code Downloads   Drupal 11.x-dev - Full Path Disclosure 53 WEB Milad karimi
2025-04-18 Exploit Code Downloads   KiviCare Clinic & Patient Management System (EHR) 3.6.4 - Unauthenticated SQL Injection 55 WEB samogod
2025-04-18 Exploit Code Downloads   UJCMS 9.6.3 - User Enumeration via IDOR 62 WEB Cyd Tseng
2025-04-18 Exploit Code Downloads   Inventio Lite 4 - SQL Injection 54 WEB pointedsec
2025-04-18 Exploit Code Downloads   Apache Commons Text 1.10.0 - Remote Code Execution 59 WEB Arjun Chaudhary
2025-04-18 Exploit Code Downloads   Tatsu 3.3.11 - Unauthenticated RCE 53 WEB Milad karimi
2025-04-18 Exploit Code Downloads   Hunk Companion Plugin 1.9.0 - Unauthenticated Plugin Installation 56 WEB Jun Takemura
2025-04-17 Exploit Code Downloads   compop.ca 3.5.3 - Arbitrary code Execution 50 WEB dmlino
2025-04-17 Exploit Code Downloads   Blood Bank & Donor Management System 2.4 - CSRF Improper Input Validation 56 WEB Kwangyun Keum
2025-04-17 Exploit Code Downloads   Usermin 2.100 - Username Enumeration 56 WEB Kjesper
2025-04-17 Exploit Code Downloads   Angular-Base64-Upload Library 0.1.21 - Unauthenticated Remote Code Execution (RCE) 52 WEB Ravindu Wickramasinghe
2025-04-17 Exploit Code Downloads   ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) - Authenticated Path Traversal 56 WEB LiquidWorm
2025-04-17 Exploit Code Downloads   ABB Cylon Aspect 3.08.02 (deployStart.php) - Unauthenticated Command Execution 54 WEB LiquidWorm
2025-04-16 Exploit Code Downloads   WooCommerce Customers Manager 29.4 - Post-Authenticated SQL Injection 59 WEB Ivan Spiridonov
2025-04-16 Exploit Code Downloads   Smart Manager 8.27.0 - Post-Authenticated SQL Injection 53 WEB Ivan Spiridonov
2025-04-16 Exploit Code Downloads   KodExplorer 4.52 - Open Redirect 59 WEB Rahad Chowdhury
2025-04-16 Exploit Code Downloads   Car Rental Project 1.0 - Remote Code Execution 56 WEB ub3rsick
2025-04-16 Exploit Code Downloads   Ethercreative Logs 3.0.3 - Path Traversal 52 WEB ub3rsick
2025-04-16 Exploit Code Downloads   FLIR AX8 1.46.16 - Remote Command Injection 58 WEB ub3rsick
2025-04-16 Exploit Code Downloads   Garage Management System 1.0 (categoriesName) - Stored XSS 51 WEB ub3rsick
2025-04-16 Exploit Code Downloads   ProConf 6.0 - Insecure Direct Object Reference (IDOR) 61 WEB ub3rsick
2025-04-16 Exploit Code Downloads   phpMyFAQ 3.2.10 - Unintended File Download Triggered by Embedded Frames 48 WEB Geo
2025-04-16 Exploit Code Downloads   ABB Cylon Aspect 3.08.03 (webServerDeviceLabelUpdate.php) - File Write DoS 49 WEB LiquidWorm
2025-04-16 Exploit Code Downloads   ABB Cylon Aspect 4.00.00 (factorySaved.php) - Unauthenticated XSS 46 WEB LiquidWorm
2025-04-16 Exploit Code Downloads   ABB Cylon Aspect 4.00.00 (factorySetSerialNum.php) - Remote Code Execution 50 WEB LiquidWorm
2025-04-16 Exploit Code Downloads   ABB Cylon Aspect 3.08.02 - Cross-Site Request Forgery (CSRF) 44 WEB LiquidWorm
2025-04-16 Exploit Code Downloads   Zabbix 7.0.0 - SQL Injection 60 WEB m4nb4
2025-04-16 Exploit Code Downloads   NagVis 1.9.33 - Arbitrary File Read 52 WEB xerosec
2025-04-16 Exploit Code Downloads   Teedy 1.11 - Account Takeover via Stored Cross-Site Scripting (XSS) 50 WEB Ayato Shitomi @ Fore-Z co.ltd
2025-04-16 Exploit Code Downloads   phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting (XSS) 49 WEB CodeSecLab
2025-04-15 Exploit Code Downloads   Cacti 1.2.26 - Remote Code Execution (RCE) (Authenticated) 59 WEB D3Ext
2025-04-15 Exploit Code Downloads   ABB Cylon Aspect 3.08.02 - Cookie User Password Disclosure 42 WEB LiquidWorm
2025-04-15 Exploit Code Downloads   ABB Cylon Aspect 3.08.03 - Hard-coded Secrets 49 WEB LiquidWorm
2025-04-15 Exploit Code Downloads   ABB Cylon Aspect 3.08.03 (MapServicesHandler) - Authenticated Reflected XSS 48 WEB LiquidWorm
2025-04-15 Exploit Code Downloads   ABB Cylon Aspect 3.07.02 (userManagement.php) - Weak Password Policy 50 WEB LiquidWorm
2025-04-15 Exploit Code Downloads   ABB Cylon Aspect 3.08.03 (CookieDB) - SQL Injection 47 WEB LiquidWorm
2025-04-15 Exploit Code Downloads   ABB Cylon Aspect 3.08.02 (webServerUpdate.php) - Input Validation Config Poisoning 50 WEB LiquidWorm
2025-04-15 Exploit Code Downloads   ABB Cylon Aspect 3.08.02 (escDevicesUpdate.php) - Denial of Service (DOS) 47 WEB LiquidWorm
2025-04-15 Exploit Code Downloads   ABB Cylon Aspect 3.08.02 (bbmdUpdate.php) - Remote Code Execution 45 WEB LiquidWorm
2025-04-15 Exploit Code Downloads   ABB Cylon Aspect 3.08.02 (uploadDb.php) - Remote Code Execution 42 WEB LiquidWorm
2025-04-15 Exploit Code Downloads   ABB Cylon Aspect 3.08.02 (licenseUpload.php) - Stored Cross-Site Scripting 41 WEB LiquidWorm
2025-04-15 Exploit Code Downloads   ABB Cylon Aspect 3.08.02 (licenseServerUpdate.php) - Stored Cross-Site Scripting 46 WEB LiquidWorm
2025-04-15 Exploit Code Downloads   IBMi Navigator 7.5 - Server Side Request Forgery (SSRF) 47 WEB hyp3rlinx
2025-04-15 Exploit Code Downloads   Plane 0.23.1 - Server side request forgery (SSRF) 56 WEB Saud Alenazi
2025-04-15 Exploit Code Downloads   IBMi Navigator 7.5 - HTTP Security Token Bypass 52 WEB hyp3rlinx
2025-04-15 Exploit Code Downloads   OpenCMS 17.0 - Stored Cross Site Scripting (XSS) 53 WEB Siddhartha Naik
2025-04-15 Exploit Code Downloads   Adapt Authoring Tool 0.11.3 - Remote Command Execution (RCE) 51 WEB Eui Chul Chung
2025-04-15 Exploit Code Downloads   Really Simple Security 9.1.1.1 - Authentication Bypass 50 WEB Antonio Francesco Sardella
2025-04-15 Exploit Code Downloads   Spring Boot common-user-management 0.1 - Remote Code Execution (RCE) 73 WEB d3sca
2025-04-14 Exploit Code Downloads   SilverStripe 5.3.8 - Stored Cross Site Scripting (XSS) (Authenticated) 49 WEB James Nicoll
2025-04-14 Exploit Code Downloads   OpenPanel Copy and View functions in the File Manager 0.3.4 - Directory Traversal 44 WEB Korn Chaisuwan_ Charanin Thongudom_ Pongtorn Angsu
2025-04-14 Exploit Code Downloads   OpenPanel 0.3.4 - OS Command Injection 51 WEB Korn Chaisuwan_ Charanin Thongudom_ Pongtorn Angsu
2025-04-14 Exploit Code Downloads   OpenPanel 0.3.4 - Incorrect Access Control 41 WEB Korn Chaisuwan_ Charanin Thongudom_ Pongtorn Angsu
2025-04-14 Exploit Code Downloads   OpenPanel 0.3.4 - Directory Traversal 43 WEB Korn Chaisuwan_ Charanin Thongudom_ Pongtorn Angsu
2025-04-14 Exploit Code Downloads   Pimcore 11.4.2 - Stored cross site scripting 50 WEB maeitsec
2025-04-14 Exploit Code Downloads   Pimcore customer-data-framework 4.2.0 - SQL injection 51 WEB maeitsec
2025-04-14 Exploit Code Downloads   Xinet Elegant 6 Asset Lib Web UI 6.1.655 - SQL Injection 44 WEB hyp3rlinx
2025-04-14 Exploit Code Downloads   ZTE ZXHN H168N 3.1 - Remote Code Execution (RCE) via authentication bypass 58 WEB tasos meletlidis
2025-04-11 Exploit Code Downloads   GeoVision GV-ASManager 6.1.0.0 - Broken Access Control 48 WEB Giorgi Dograshvili
2025-04-11 Exploit Code Downloads   ABB Cylon FLXeon 9.3.4 - Remote Code Execution (Authenticated) 46 WEB LiquidWorm
2025-04-11 Exploit Code Downloads   GeoVision GV-ASManager 6.1.1.0 - CSRF 42 WEB Giorgi Dograshvili
2025-04-11 Exploit Code Downloads   ABB Cylon FLXeon 9.3.4 - Remote Code Execution (RCE) 49 WEB LiquidWorm
2025-04-11 Exploit Code Downloads   WebFileSys 2.31.0 - Directory Path Traversal 44 WEB Korn Chaisuwan_ Charanin Thongudom_ Pongtorn Angsu
2025-04-11 Exploit Code Downloads   ABB Cylon FLXeon 9.3.4 - WebSocket Command Spawning 45 WEB LiquidWorm
2025-04-11 Exploit Code Downloads   Netman 204 - Remote command without authentication 47 WEB Parsa Rezaie Khiabanloo
2025-04-11 Exploit Code Downloads   ABB Cylon Aspect 3.08.02 - PHP Session Fixation 49 WEB LiquidWorm
2025-04-11 Exploit Code Downloads   CMU CERT/CC VINCE 2.0.6 - Stored XSS 55 WEB LiquidWorm
2025-04-11 Exploit Code Downloads   ABB Cylon FLXeon 9.3.4 - Cross-Site Request Forgery 45 WEB LiquidWorm
2025-04-11 Exploit Code Downloads   ABB Cylon FLXeon 9.3.4 - Default Credentials 56 WEB LiquidWorm
2025-04-11 Exploit Code Downloads   ABB Cylon FLXeon 9.3.4 - System Logs Information Disclosure 41 WEB LiquidWorm
2025-04-11 Exploit Code Downloads   Nagios Log Server 2024R1.3.1 - API Key Exposure 41 WEB Seth Kraft
2025-04-11 Exploit Code Downloads   phpIPAM 1.6 - Reflected Cross Site Scripting (XSS) 46 WEB CodeSecLab
2025-04-11 Exploit Code Downloads   MiniCMS 1.1 - Cross Site Scripting (XSS) 59 WEB CodeSecLab
2025-04-11 Exploit Code Downloads   NEWS-BUZZ News Management System 1.0 - SQL Injection 44 WEB egsec
2025-04-11 Exploit Code Downloads   Roundcube Webmail 1.6.6 - Stored Cross Site Scripting (XSS) 50 WEB AmirZargham
2025-04-11 Exploit Code Downloads   CyberPanel 2.3.6 - Remote Code Execution (RCE) 53 WEB Luka Petrovic (refr4g)
2025-04-11 Exploit Code Downloads   LearnPress WordPress LMS Plugin 4.2.7 - SQL Injection 47 WEB Francisco Moraga (BTshell)
2025-04-11 Exploit Code Downloads   MagnusSolution magnusbilling 7.3.0 - Command Injection 51 WEB CodeSecLab
2025-04-11 Exploit Code Downloads   RosarioSIS 7.6 - SQL Injection 54 WEB CodeSecLab
2025-04-11 Exploit Code Downloads   GetSimpleCMS 3.3.16 - Remote Code Execution (RCE) 63 WEB CodeSecLab
2025-04-11 Exploit Code Downloads   Gnuboard5 5.3.2.8 - SQL Injection 53 WEB CodeSecLab
2025-04-11 Exploit Code Downloads   flatCore 1.5 - Cross Site Request Forgery (CSRF) 36 WEB CodeSecLab
2025-04-10 Exploit Code Downloads   flatCore 1.5.5 - Arbitrary File Upload 46 WEB CodeSecLab
2025-04-10 Exploit Code Downloads   AquilaCMS 1.409.20 - Remote Command Execution (RCE) 49 WEB Eui Chul Chung
2025-04-10 Exploit Code Downloads   Typecho 1.3.0 - Stored Cross-Site Scripting (XSS) 60 WEB cyberaz0r
2025-04-10 Exploit Code Downloads   Typecho 1.3.0 - Race Condition 65 WEB cyberaz0r
2025-04-10 Exploit Code Downloads   Cosy+ firmware 21.2s7 - Command Injection 60 WEB CodeB0ss
2025-04-10 Exploit Code Downloads   CodeAstro Online Railway Reservation System 1.0 - Cross Site Scripting (XSS) 39 WEB Raj Nandi
2025-04-10 Exploit Code Downloads   PandoraFMS 7.0NG.772 - SQL Injection 46 WEB Osama Yousef
2025-04-10 Exploit Code Downloads   Centron 19.04 - Remote Code Execution (RCE) 52 WEB Starry Sky
2025-04-10 Exploit Code Downloads   Cisco Smart Software Manager On-Prem 8-202206 - Account Takeover 63 WEB Mohammed Adel
2025-04-10 Exploit Code Downloads   Feng Office 3.11.1.2 - SQL Injection 58 WEB Andrey Stoykov
2025-04-09 Exploit Code Downloads   PZ Frontend Manager WordPress Plugin 1.0.5 - Cross Site Request Forgery (CSRF) 42 WEB Vuln Seeker Cybersecurity Team
2025-04-09 Exploit Code Downloads   ChurchCRM 5.9.1 - SQL Injection 46 WEB Sanan Qasimzada
2025-04-09 Exploit Code Downloads   Intelight X-1L Traffic controller Maxtime 1.9.6 - Remote Code Execution (RCE) 55 WEB Andrew Lemon/Red Threat
2025-04-09 Exploit Code Downloads   ResidenceCMS 2.10.1 - Stored Cross-Site Scripting (XSS) 48 WEB Jeremia Geraldi Sihombing
2025-04-09 Exploit Code Downloads   Apache HugeGraph Server 1.2.0 - Remote Code Execution (RCE) 54 WEB Yesith Alvarez
2025-04-09 Exploit Code Downloads   Zohocorp ManageEngine ADManager Plus 7210 - Elevation of Privilege 46 WEB Metin Yunus Kandemir
2025-04-09 Exploit Code Downloads   Anchor CMS 0.12.7 - Stored Cross Site Scripting (XSS) 54 WEB Ahmet Ümit BAYRAM
2025-04-09 Exploit Code Downloads   Artica Proxy 4.50 - Remote Code Execution (RCE) 52 WEB Madan
2025-04-09 Exploit Code Downloads   DocsGPT 0.12.0 - Remote Code Execution 43 WEB Shreyas Malhotra
2025-04-08 Exploit Code Downloads   GeoVision GV-ASManager 6.1.0.0 - Information Disclosure 46 WEB Giorgi Dograshvili
2025-04-08 Exploit Code Downloads   jQuery 3.3.1 - Prototype Pollution & XSS Exploit 63 WEB xOryus
2025-04-08 Exploit Code Downloads   Jasmin Ransomware - Arbitrary File Download (Authenticated) 43 WEB bRpsd
2025-04-08 Exploit Code Downloads   UNA CMS 14.0.0-RC - PHP Object Injection 51 WEB Egidio Romano
2025-04-08 Exploit Code Downloads   Nagios Xi 5.6.6 - Authenticated Remote Code Execution (RCE) 50 WEB Calil Khalil
2025-04-08 Exploit Code Downloads   WordPress User Registration & Membership Plugin 4.1.1 - Unauthenticated Privilege Escalation 56 WEB Al Baradi Joy
2025-04-07 Exploit Code Downloads   XWiki Platform 15.10.10 - Remote Code Execution 51 WEB Al Baradi Joy
2025-04-07 Exploit Code Downloads   YesWiki 4.5.1 - Unauthenticated Path Traversal 52 WEB Al Baradi Joy
2025-04-07 Exploit Code Downloads   Apache Tomcat 11.0.3 - Remote Code Execution 58 WEB Al Baradi Joy
2025-04-06 Exploit Code Downloads   Reservit Hotel 2.1 - Stored Cross-Site Scripting (XSS) 49 WEB Ilteris Kaan Pehlivan
2025-04-06 Exploit Code Downloads   WBCE CMS 1.6.3 - Authenticated Remote Code Execution (RCE) 44 WEB Swammers8
2025-04-06 Exploit Code Downloads   Backup and Staging by WP Time Capsule 1.22.21 - Unauthenticated Arbitrary File Upload 63 WEB Al Baradi Joy
2025-04-06 Exploit Code Downloads   Watcharr 1.43.0 - Remote Code Execution (RCE) 47 WEB Suphawith Phusanbai
2025-04-06 Exploit Code Downloads   Palo Alto Networks Expedition 1.2.90.1 - Admin Account Takeover 45 WEB ByteHunter
2025-04-06 Exploit Code Downloads   DataEase 2.4.0 - Database Configuration Information Exposure 51 WEB ByteHunter