|
2023-06-20
|
|
WP Sticky Social 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting (XSS)
|
12 |
WEB
|
Amirhossein Bahramizadeh
|
|
2023-06-14
|
|
PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE)
|
13 |
WEB
|
Gabriel Lima
|
|
2023-06-19
|
|
WordPress Theme Medic v1.0.0 - Weak Password Recovery Mechanism for Forgotten Password
|
14 |
WEB
|
Amirhossein Bahramizadeh
|
|
2023-06-19
|
|
Symantec SiteMinder WebAgent v12.52 - Cross-site scripting (XSS)
|
12 |
WEB
|
Harshit Joshi
|
|
2023-06-19
|
|
Diafan CMS 6.0 - Reflected Cross-Site Scripting (XSS)
|
15 |
WEB
|
tmrswrr
|
|
2023-06-19
|
|
Student Study Center Management System v1.0 - Stored Cross-Site Scripting (XSS)
|
13 |
WEB
|
VIVEK CHOUDHARY
|
|
2023-06-19
|
|
Jobpilot v2.61 - SQL Injection
|
13 |
WEB
|
Ahmet Ümit BAYRAM
|
|
2023-06-19
|
|
Groomify v1.0 - SQL Injection
|
13 |
WEB
|
Ahmet Ümit BAYRAM
|
|
2023-06-19
|
|
The Shop v2.5 - SQL Injection
|
13 |
WEB
|
Ahmet Ümit BAYRAM
|
|
2023-06-15
|
|
Online Art gallery project 1.0 - Arbitrary File Upload (Unauthenticated)
|
15 |
WEB
|
Ramil Mustafayev
|
|
2023-06-14
|
|
Textpattern CMS v4.8.8 - Stored Cross-Site Scripting (XSS) (Authenticated)
|
12 |
WEB
|
tmrswrr
|
|
2023-06-14
|
|
Online Thesis Archiving System v1.0 - Multiple-SQLi
|
12 |
WEB
|
nu11secur1ty
|
|
2023-06-14
|
|
Xoops CMS 2.5.10 - Stored Cross-Site Scripting (XSS) (Authenticated)
|
13 |
WEB
|
tmrswrr
|
|
2023-06-14
|
|
Monstra 3.0.4 - Stored Cross-Site Scripting (XSS)
|
12 |
WEB
|
tmrswrr
|
|
2023-06-14
|
|
projectSend r1605 - Stored XSS
|
13 |
WEB
|
Mirabbas Ağalarov
|
|
2023-06-14
|
|
projectSend r1605 - CSV injection
|
14 |
WEB
|
Mirabbas Ağalarov
|
|
2023-06-13
|
|
Sales Tracker Management System v1.0 - Multiple Vulnerabilities
|
13 |
WEB
|
AFFAN AHMED
|
|
2023-06-13
|
|
Teachers Record Management System 1.0 - File Upload Type Validation
|
16 |
WEB
|
AFFAN AHMED
|
|
2023-06-13
|
|
Online Examination System Project 1.0 - Cross-site request forgery (CSRF)
|
14 |
WEB
|
Ramil Mustafayev
|
|
2023-06-09
|
|
WordPress Theme Workreap 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution
|
17 |
WEB
|
Mohammad Hossein Khanaki
|
|
2023-06-09
|
|
Thruk Monitoring Web Interface 3.06 - Path Traversal
|
19 |
WEB
|
Galoget Latorre
|
|
2023-06-06
|
|
Tree Page View Plugin 1.6.7 - Cross Site Scripting (XSS)
|
13 |
WEB
|
LEE SE HYOUNG
|
|
2023-06-04
|
|
File Manager Advanced Shortcode 2.3.2 - Unauthenticated Remote Code Execution (RCE)
|
16 |
WEB
|
Mateus Machado Tesser
|
|
2023-06-04
|
|
MotoCMS Version 3.4.3 - SQL Injection
|
11 |
WEB
|
tmrswrr
|
|
2023-06-04
|
|
STARFACE 7.3.0.10 - Authentication with Password Hash Possible
|
16 |
WEB
|
RedTeam Pentesting GmbH
|
|
2023-06-04
|
|
Barebones CMS v2.0.2 - Stored Cross-Site Scripting (XSS) (Authenticated)
|
13 |
WEB
|
tmrswrr
|
|
2023-06-04
|
|
Enrollment System Project v1.0 - SQL Injection Authentication Bypass (SQLI)
|
12 |
WEB
|
VIVEK CHOUDHARY
|
|
2023-06-04
|
|
Total CMS 1.7.4 - Remote Code Execution (RCE)
|
9 |
WEB
|
tmrswrr
|
|
2023-05-31
|
|
MotoCMS Version 3.4.3 - Server-Side Template Injection (SSTI)
|
10 |
WEB
|
tmrswrr
|
|
2023-05-31
|
|
Pydio Cells 4.1.2 - Server-Side Request Forgery
|
13 |
WEB
|
RedTeam Pentesting GmbH
|
|
2023-05-31
|
|
Pydio Cells 4.1.2 - Cross-Site Scripting (XSS) via File Download
|
12 |
WEB
|
RedTeam Pentesting GmbH
|
|
2023-05-31
|
|
Pydio Cells 4.1.2 - Unauthorised Role Assignments
|
10 |
WEB
|
RedTeam Pentesting GmbH
|
|
2023-05-31
|
|
Faculty Evaluation System 1.0 - Unauthenticated File Upload
|
15 |
WEB
|
URGAN
|
|
2023-05-31
|
|
Online Security Guards Hiring System 1.0 - Reflected XSS
|
13 |
WEB
|
AFFAN AHMED
|
|
2023-05-31
|
|
unilogies/bumsys v1.0.3 beta - Unrestricted File Upload
|
11 |
WEB
|
AFFAN AHMED
|
|
2023-05-31
|
|
SCRMS 2023-05-27 1.0 - Multiple SQL Injection
|
14 |
WEB
|
nu11secur1ty
|
|
2023-05-31
|
|
Rukovoditel 3.3.1 - CSV injection
|
13 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-26
|
|
Camaleon CMS v2.7.0 - Server-Side Template Injection (SSTI)
|
15 |
WEB
|
PARAG BAGUL
|
|
2023-05-25
|
|
SCM Manager 1.60 - Cross-Site Scripting Stored (Authenticated)
|
11 |
WEB
|
neg0x
|
|
2023-05-25
|
|
Ulicms 2023.1 - create admin user via mass assignment
|
15 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-25
|
|
Zenphoto 1.6 - Multiple stored XSS
|
13 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-25
|
|
WBCE CMS 1.6.1 - Multiple Stored Cross-Site Scripting (XSS)
|
12 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-24
|
|
Service Provider Management System v1.0 - SQL Injection
|
17 |
WEB
|
ASHIK KUNJUMON
|
|
2023-05-23
|
|
FusionInvoice 2023-1.0 - Stored XSS (Cross-Site Scripting)
|
14 |
WEB
|
Andrea Intilangelo
|
|
2023-05-23
|
|
CiviCRM 5.59.alpha1 - Stored XSS (Cross-Site Scripting)
|
16 |
WEB
|
Andrea Intilangelo
|
|
2023-05-23
|
|
ChurchCRM v4.5.4 - Reflected XSS via Image (Authenticated)
|
15 |
WEB
|
Rahad Chowdhury
|
|
2023-05-23
|
|
Bludit CMS v3.14.1 - Stored Cross-Site Scripting (XSS) (Authenticated)
|
15 |
WEB
|
Rahad Chowdhury
|
|
2023-05-23
|
|
GetSimple CMS v3.3.16 - Remote Code Execution (RCE)
|
13 |
WEB
|
Youssef Muhammad
|
|
2023-05-23
|
|
Quicklancer v1.0 - SQL Injection
|
11 |
WEB
|
Ahmet Ümit BAYRAM
|
|
2023-05-23
|
|
Stackposts Social Marketing Tool v1.0 - SQL Injection
|
12 |
WEB
|
Ahmet Ümit BAYRAM
|
|
2023-05-23
|
|
Smart School v1.0 - SQL Injection
|
14 |
WEB
|
Ahmet Ümit BAYRAM
|
|
2023-05-23
|
|
LeadPro CRM v1.0 - SQL Injection
|
12 |
WEB
|
Ahmet Ümit BAYRAM
|
|
2023-05-23
|
|
Affiliate Me Version 5.0.1 - SQL Injection
|
13 |
WEB
|
h4ck3r
|
|
2023-05-23
|
|
eScan Management Console 14.0.1400.2281 - Cross Site Scripting
|
15 |
WEB
|
Sahil Ojha
|
|
2023-05-23
|
|
eScan Management Console 14.0.1400.2281 - SQL Injection (Authenticated)
|
12 |
WEB
|
Sahil Ojha
|
|
2023-05-23
|
|
Webkul Qloapps 1.5.2 - Cross-Site Scripting (XSS)
|
11 |
WEB
|
Astik Rawat
|
|
2023-05-23
|
|
SitemagicCMS 4.4.3 - Remote Code Execution (RCE)
|
13 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-23
|
|
Prestashop 8.0.4 - CSV injection
|
12 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-23
|
|
Best POS Management System v1.0 - Unauthenticated Remote Code Execution
|
17 |
WEB
|
Mesut Cetin
|
|
2023-05-23
|
|
PodcastGenerator 3.2.9 - Multiple Stored Cross-Site Scripting (XSS)
|
12 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-23
|
|
PaperCut NG/MG 22.0.4 - Remote Code Execution (RCE)
|
14 |
WEB
|
MaanVader
|
|
2023-05-23
|
|
WBiz Desk 1.2 - SQL Injection
|
12 |
WEB
|
h4ck3r
|
|
2023-05-23
|
|
thrsrossi Millhouse-Project 1.414 - Remote Code Execution
|
12 |
WEB
|
Chokri Hammedi
|
|
2023-05-23
|
|
e107 v2.3.2 - Reflected XSS
|
12 |
WEB
|
Hubert Wojciechowski
|
|
2023-05-23
|
|
PnPSCADA v2.x - Unauthenticated PostgreSQL Injection
|
14 |
WEB
|
Momen Eldawakhly
|
|
2023-05-23
|
|
Apache Superset 2.0.0 - Authentication Bypass
|
10 |
WEB
|
MaanVader
|
|
2023-05-23
|
|
Cameleon CMS 2.7.4 - Persistent Stored XSS in Post Title
|
12 |
WEB
|
Yasin Gergin
|
|
2023-05-23
|
|
WordPress Plugin Backup Migration 1.2.8 - Unauthenticated Database Backup
|
14 |
WEB
|
Wadeek
|
|
2023-05-23
|
|
TinyWebGallery v2.5 - Remote Code Execution (RCE)
|
11 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-13
|
|
TinyWebGallery v2.5 - Stored Cross-Site Scripting (XSS)
|
12 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-13
|
|
Job Portal 1.0 - File Upload Restriction Bypass
|
14 |
WEB
|
Rafael Pedrero
|
|
2023-05-13
|
|
Online Clinic Management System 2.2 - Multiple Stored Cross-Site Scripting (XSS)
|
13 |
WEB
|
Rafael Pedrero
|
|
2023-05-13
|
|
RockMongo 1.1.7 - Stored Cross-Site Scripting (XSS)
|
11 |
WEB
|
Rafael Pedrero
|
|
2023-05-05
|
|
File Thingie 2.5.7 - Remote Code Execution (RCE)
|
13 |
WEB
|
Maurice Fielenbach
|
|
2023-05-05
|
|
Ulicms-2023.1 sniffing-vicuna - Stored Cross-Site Scripting (XSS)
|
8 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-05
|
|
Ulicms-2023.1 sniffing-vicuna - Remote Code Execution (RCE)
|
12 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-05
|
|
Ulicms-2023.1-sniffing-vicuna - Privilege escalation
|
15 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-05
|
|
Online Pizza Ordering System v1.0 - Unauthenticated File Upload
|
18 |
WEB
|
URGAN
|
|
2023-05-05
|
|
EasyPHP Webserver 14.1 - Multiple Vulnerabilities (RCE and Path Traversal)
|
12 |
WEB
|
Rafael Pedrero
|
|
2023-05-05
|
|
Jedox 2022.4.2 - Disclosure of Database Credentials via Connection Checks
|
9 |
WEB
|
Team Syslifters
|
|
2023-05-05
|
|
Jedox 2020.2.5 - Disclosure of Database Credentials via Improper Access Controls
|
11 |
WEB
|
Team Syslifters
|
|
2023-05-05
|
|
Jedox 2020.2.5 - Remote Code Execution via Executable Groovy-Scripts
|
12 |
WEB
|
Team Syslifters
|
|
2023-05-05
|
|
Jedox 2020.2.5 - Remote Code Execution via Configurable Storage Path
|
12 |
WEB
|
Team Syslifters
|
|
2023-05-05
|
|
Jedox 2020.2.5 - Stored Cross-Site Scripting in Log-Module
|
12 |
WEB
|
Team Syslifters
|
|
2023-05-05
|
|
Jedox 2022.4.2 - Remote Code Execution via Directory Traversal
|
11 |
WEB
|
Team Syslifters
|
|
2023-05-05
|
|
Jedox 2022.4.2 - Code Execution via RPC Interfaces
|
11 |
WEB
|
Team Syslifters
|
|
2023-05-05
|
|
Cmaps v8.0 - SQL injection
|
11 |
WEB
|
Lucas Noki (0xPrototype)
|
|
2023-05-05
|
|
Wolf CMS 0.8.3.1 - Remote Code Execution (RCE)
|
10 |
WEB
|
Ahmet Ümit BAYRAM
|
|
2023-05-05
|
|
pluck v4.7.18 - Stored Cross-Site Scripting (XSS)
|
11 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-05
|
|
KodExplorer v4.51.03 - Pwned-Admin File-Inclusion - Remote Code Execution (RCE)
|
9 |
WEB
|
nu11secur1ty
|
|
2023-05-02
|
|
GLPI 9.5.7 - Username Enumeration
|
9 |
WEB
|
Rafael B.
|
|
2023-05-02
|
|
Companymaps v8.0 - Stored Cross Site Scripting (XSS)
|
9 |
WEB
|
Lucas Noki (0xPrototype)
|
|
2023-05-02
|
|
PHPJabbers Simple CMS 5.0 - SQL Injection
|
11 |
WEB
|
Ahmet Ümit BAYRAM
|
|
2023-05-02
|
|
PHPJabbers Simple CMS V5.0 - Stored Cross-Site Scripting (XSS)
|
13 |
WEB
|
Ahmet Ümit BAYRAM
|
|
2023-05-02
|
|
OpenEMR v7.0.1 - Authentication credentials brute force
|
16 |
WEB
|
abhhi (Abhishek Birdawade)
|
|
2023-05-02
|
|
PHPFusion 9.10.30 - Stored Cross-Site Scripting (XSS)
|
13 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-02
|
|
SoftExpert (SE) Suite v2.1.3 - Local File Inclusion
|
14 |
WEB
|
Felipe Alcantara
|
|
2023-05-02
|
|
Serendipity 2.4.0 - File Inclusion RCE
|
21 |
WEB
|
nu11secur1ty
|
|
2023-05-02
|
|
admidio v4.2.5 - CSV Injection
|
12 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-02
|
|
revive-adserver v5.4.1 - Cross-Site Scripting (XSS)
|
12 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-02
|
|
projectSend r1605 - Private file download
|
9 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-02
|
|
phpMyFAQ v3.1.12 - CSV Injection
|
10 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-02
|
|
PHP Restaurants 1.0 - SQLi Authentication Bypass & Cross Site Scripting
|
12 |
WEB
|
Or4nG.M4N
|
|
2023-04-25
|
|
Sophos Web Appliance 4.3.10.4 - Pre-auth command injection
|
13 |
WEB
|
Behnam Abasi Vanda
|
|
2023-04-25
|
|
Multi-Vendor Online Groceries Management System 1.0 - Remote Code Execution
|
15 |
WEB
|
Or4nG.M4N
|
|
2023-04-25
|
|
Mars Stealer 8.3 - Admin Account Takeover
|
16 |
WEB
|
Sköll
|
|
2023-04-25
|
|
PaperCut NG/MG 22.0.4 - Authentication Bypass
|
35 |
WEB
|
MaanVader
|
|
2023-04-25
|
|
KodExplorer 4.49 - CSRF to Arbitrary File Upload
|
17 |
WEB
|
Mr Empy
|
|
2023-04-20
|
|
ProjeQtOr Project Management System 10.3.2 - Remote Code Execution (RCE)
|
13 |
WEB
|
Mirabbas Ağalarov
|
|
2023-04-20
|
|
Piwigo 13.6.0 - Stored Cross-Site Scripting (XSS)
|
15 |
WEB
|
Mirabbas Ağalarov
|
|
2023-04-20
|
|
FUXA V.1.1.13-1186 - Unauthenticated Remote Code Execution (RCE)
|
19 |
WEB
|
Rodolfo Mariano
|
|
2023-04-20
|
|
Chitor-CMS v1.1.2 - Pre-Auth SQL Injection
|
13 |
WEB
|
msd0pe
|
|
2023-04-20
|
|
GDidees CMS 3.9.1 - Local File Disclosure
|
14 |
WEB
|
Hadi Mene
|
|
2023-04-20
|
|
Swagger UI 4.1.3 - User Interface (UI) Misrepresentation of Critical Information
|
15 |
WEB
|
Rafael Cintra Lopes
|
|
2023-04-20
|
|
Bang Resto v1.0 - 'Multiple' SQL Injection
|
12 |
WEB
|
Rahad Chowdhury
|
|
2023-04-20
|
|
Bang Resto v1.0 - Stored Cross-Site Scripting (XSS)
|
15 |
WEB
|
Rahad Chowdhury
|
|
2023-04-20
|
|
Lilac-Reloaded for Nagios 2.0.8 - Remote Code Execution (RCE)
|
13 |
WEB
|
max / Zoltan Padanyi
|
|
2023-04-20
|
|
Serendipity 2.4.0 - Cross-Site Scripting (XSS)
|
11 |
WEB
|
Mirabbas Ağalarov
|
|
2023-04-20
|
|
Serendipity 2.4.0 - Remote Code Execution (RCE) (Authenticated)
|
9 |
WEB
|
Mirabbas Ağalarov
|
|
2023-04-14
|
|
Sielco PolyEco Digital FM Transmitter 2.0.6 - Account Takeover / Lockout / EoP
|
11 |
WEB
|
LiquidWorm
|
|
2023-04-14
|
|
Sielco PolyEco Digital FM Transmitter 2.0.6 - Unauthenticated Information Disclosure
|
11 |
WEB
|
LiquidWorm
|
|
2023-04-14
|
|
Sielco PolyEco Digital FM Transmitter 2.0.6 - Radio Data System POST Manipulation
|
12 |
WEB
|
LiquidWorm
|
|
2023-04-14
|
|
Sielco PolyEco Digital FM Transmitter 2.0.6 - Authorization Bypass Factory Reset
|
10 |
WEB
|
LiquidWorm
|
|
2023-04-14
|
|
Sielco PolyEco Digital FM Transmitter 2.0.6 - Authentication Bypass Exploit
|
13 |
WEB
|
LiquidWorm
|
|
2023-04-14
|
|
Sielco Analog FM Transmitter 2.12 - Improper Access Control Change Admin Password
|
11 |
WEB
|
LiquidWorm
|
