Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2023-06-09 Exploit Code Downloads   Thruk Monitoring Web Interface 3.06 - Path Traversal 12 WEB Galoget Latorre
2023-06-06 Exploit Code Downloads   Tree Page View Plugin 1.6.7 - Cross Site Scripting (XSS) 8 WEB LEE SE HYOUNG
2023-06-04 Exploit Code Downloads   File Manager Advanced Shortcode 2.3.2 - Unauthenticated Remote Code Execution (RCE) 8 WEB Mateus Machado Tesser
2023-06-04 Exploit Code Downloads   MotoCMS Version 3.4.3 - SQL Injection 7 WEB tmrswrr
2023-06-04 Exploit Code Downloads   STARFACE 7.3.0.10 - Authentication with Password Hash Possible 8 WEB RedTeam Pentesting GmbH
2023-06-04 Exploit Code Downloads   Barebones CMS v2.0.2 - Stored Cross-Site Scripting (XSS) (Authenticated) 7 WEB tmrswrr
2023-06-04 Exploit Code Downloads   Enrollment System Project v1.0 - SQL Injection Authentication Bypass (SQLI) 6 WEB VIVEK CHOUDHARY
2023-06-04 Exploit Code Downloads   Total CMS 1.7.4 - Remote Code Execution (RCE) 6 WEB tmrswrr
2023-05-31 Exploit Code Downloads   MotoCMS Version 3.4.3 - Server-Side Template Injection (SSTI) 6 WEB tmrswrr
2023-05-31 Exploit Code Downloads   Pydio Cells 4.1.2 - Server-Side Request Forgery 6 WEB RedTeam Pentesting GmbH
2023-05-31 Exploit Code Downloads   Pydio Cells 4.1.2 - Cross-Site Scripting (XSS) via File Download 6 WEB RedTeam Pentesting GmbH
2023-05-31 Exploit Code Downloads   Pydio Cells 4.1.2 - Unauthorised Role Assignments 5 WEB RedTeam Pentesting GmbH
2023-05-31 Exploit Code Downloads   Faculty Evaluation System 1.0 - Unauthenticated File Upload 7 WEB URGAN
2023-05-31 Exploit Code Downloads   Online Security Guards Hiring System 1.0 - Reflected XSS 6 WEB AFFAN AHMED
2023-05-31 Exploit Code Downloads   unilogies/bumsys v1.0.3 beta - Unrestricted File Upload 5 WEB AFFAN AHMED
2023-05-31 Exploit Code Downloads   SCRMS 2023-05-27 1.0 - Multiple SQL Injection 7 WEB nu11secur1ty
2023-05-31 Exploit Code Downloads   Rukovoditel 3.3.1 - CSV injection 6 WEB Mirabbas Ağalarov
2023-05-26 Exploit Code Downloads   Camaleon CMS v2.7.0 - Server-Side Template Injection (SSTI) 8 WEB PARAG BAGUL
2023-05-25 Exploit Code Downloads   SCM Manager 1.60 - Cross-Site Scripting Stored (Authenticated) 6 WEB neg0x
2023-05-25 Exploit Code Downloads   Ulicms 2023.1 - create admin user via mass assignment 7 WEB Mirabbas Ağalarov
2023-05-25 Exploit Code Downloads   Zenphoto 1.6 - Multiple stored XSS 8 WEB Mirabbas Ağalarov
2023-05-25 Exploit Code Downloads   WBCE CMS 1.6.1 - Multiple Stored Cross-Site Scripting (XSS) 6 WEB Mirabbas Ağalarov
2023-05-24 Exploit Code Downloads   Service Provider Management System v1.0 - SQL Injection 8 WEB ASHIK KUNJUMON
2023-05-23 Exploit Code Downloads   FusionInvoice 2023-1.0 - Stored XSS (Cross-Site Scripting) 9 WEB Andrea Intilangelo
2023-05-23 Exploit Code Downloads   CiviCRM 5.59.alpha1 - Stored XSS (Cross-Site Scripting) 10 WEB Andrea Intilangelo
2023-05-23 Exploit Code Downloads   ChurchCRM v4.5.4 - Reflected XSS via Image (Authenticated) 7 WEB Rahad Chowdhury
2023-05-23 Exploit Code Downloads   Bludit CMS v3.14.1 - Stored Cross-Site Scripting (XSS) (Authenticated) 6 WEB Rahad Chowdhury
2023-05-23 Exploit Code Downloads   GetSimple CMS v3.3.16 - Remote Code Execution (RCE) 7 WEB Youssef Muhammad
2023-05-23 Exploit Code Downloads   Quicklancer v1.0 - SQL Injection 7 WEB Ahmet Ümit BAYRAM
2023-05-23 Exploit Code Downloads   Stackposts Social Marketing Tool v1.0 - SQL Injection 6 WEB Ahmet Ümit BAYRAM
2023-05-23 Exploit Code Downloads   Smart School v1.0 - SQL Injection 7 WEB Ahmet Ümit BAYRAM
2023-05-23 Exploit Code Downloads   LeadPro CRM v1.0 - SQL Injection 8 WEB Ahmet Ümit BAYRAM
2023-05-23 Exploit Code Downloads   Affiliate Me Version 5.0.1 - SQL Injection 7 WEB h4ck3r
2023-05-23 Exploit Code Downloads   eScan Management Console 14.0.1400.2281 - Cross Site Scripting 9 WEB Sahil Ojha
2023-05-23 Exploit Code Downloads   eScan Management Console 14.0.1400.2281 - SQL Injection (Authenticated) 6 WEB Sahil Ojha
2023-05-23 Exploit Code Downloads   Webkul Qloapps 1.5.2 - Cross-Site Scripting (XSS) 6 WEB Astik Rawat
2023-05-23 Exploit Code Downloads   SitemagicCMS 4.4.3 - Remote Code Execution (RCE) 6 WEB Mirabbas Ağalarov
2023-05-23 Exploit Code Downloads   Prestashop 8.0.4 - CSV injection 6 WEB Mirabbas Ağalarov
2023-05-23 Exploit Code Downloads   Best POS Management System v1.0 - Unauthenticated Remote Code Execution 9 WEB Mesut Cetin
2023-05-23 Exploit Code Downloads   PodcastGenerator 3.2.9 - Multiple Stored Cross-Site Scripting (XSS) 8 WEB Mirabbas Ağalarov
2023-05-23 Exploit Code Downloads   PaperCut NG/MG 22.0.4 - Remote Code Execution (RCE) 7 WEB MaanVader
2023-05-23 Exploit Code Downloads   WBiz Desk 1.2 - SQL Injection 5 WEB h4ck3r
2023-05-23 Exploit Code Downloads   thrsrossi Millhouse-Project 1.414 - Remote Code Execution 6 WEB Chokri Hammedi
2023-05-23 Exploit Code Downloads   e107 v2.3.2 - Reflected XSS 6 WEB Hubert Wojciechowski
2023-05-23 Exploit Code Downloads   PnPSCADA v2.x - Unauthenticated PostgreSQL Injection 8 WEB Momen Eldawakhly
2023-05-23 Exploit Code Downloads   Apache Superset 2.0.0 - Authentication Bypass 6 WEB MaanVader
2023-05-23 Exploit Code Downloads   Cameleon CMS 2.7.4 - Persistent Stored XSS in Post Title 7 WEB Yasin Gergin
2023-05-23 Exploit Code Downloads   WordPress Plugin Backup Migration 1.2.8 - Unauthenticated Database Backup 7 WEB Wadeek
2023-05-23 Exploit Code Downloads   TinyWebGallery v2.5 - Remote Code Execution (RCE) 6 WEB Mirabbas Ağalarov
2023-05-13 Exploit Code Downloads   TinyWebGallery v2.5 - Stored Cross-Site Scripting (XSS) 7 WEB Mirabbas Ağalarov
2023-05-13 Exploit Code Downloads   Job Portal 1.0 - File Upload Restriction Bypass 5 WEB Rafael Pedrero
2023-05-13 Exploit Code Downloads   Online Clinic Management System 2.2 - Multiple Stored Cross-Site Scripting (XSS) 9 WEB Rafael Pedrero
2023-05-13 Exploit Code Downloads   RockMongo 1.1.7 - Stored Cross-Site Scripting (XSS) 8 WEB Rafael Pedrero
2023-05-05 Exploit Code Downloads   File Thingie 2.5.7 - Remote Code Execution (RCE) 7 WEB Maurice Fielenbach
2023-05-05 Exploit Code Downloads   Ulicms-2023.1 sniffing-vicuna - Stored Cross-Site Scripting (XSS) 5 WEB Mirabbas Ağalarov
2023-05-05 Exploit Code Downloads   Ulicms-2023.1 sniffing-vicuna - Remote Code Execution (RCE) 7 WEB Mirabbas Ağalarov
2023-05-05 Exploit Code Downloads   Ulicms-2023.1-sniffing-vicuna - Privilege escalation 9 WEB Mirabbas Ağalarov
2023-05-05 Exploit Code Downloads   Online Pizza Ordering System v1.0 - Unauthenticated File Upload 10 WEB URGAN
2023-05-05 Exploit Code Downloads   EasyPHP Webserver 14.1 - Multiple Vulnerabilities (RCE and Path Traversal) 7 WEB Rafael Pedrero
2023-05-05 Exploit Code Downloads   Jedox 2022.4.2 - Disclosure of Database Credentials via Connection Checks 5 WEB Team Syslifters
2023-05-05 Exploit Code Downloads   Jedox 2020.2.5 - Disclosure of Database Credentials via Improper Access Controls 7 WEB Team Syslifters
2023-05-05 Exploit Code Downloads   Jedox 2020.2.5 - Remote Code Execution via Executable Groovy-Scripts 6 WEB Team Syslifters
2023-05-05 Exploit Code Downloads   Jedox 2020.2.5 - Remote Code Execution via Configurable Storage Path 8 WEB Team Syslifters
2023-05-05 Exploit Code Downloads   Jedox 2020.2.5 - Stored Cross-Site Scripting in Log-Module 8 WEB Team Syslifters
2023-05-05 Exploit Code Downloads   Jedox 2022.4.2 - Remote Code Execution via Directory Traversal 9 WEB Team Syslifters
2023-05-05 Exploit Code Downloads   Jedox 2022.4.2 - Code Execution via RPC Interfaces 7 WEB Team Syslifters
2023-05-05 Exploit Code Downloads   Cmaps v8.0 - SQL injection 7 WEB Lucas Noki (0xPrototype)
2023-05-05 Exploit Code Downloads   Wolf CMS 0.8.3.1 - Remote Code Execution (RCE) 6 WEB Ahmet Ümit BAYRAM
2023-05-05 Exploit Code Downloads   pluck v4.7.18 - Stored Cross-Site Scripting (XSS) 8 WEB Mirabbas Ağalarov
2023-05-05 Exploit Code Downloads   KodExplorer v4.51.03 - Pwned-Admin File-Inclusion - Remote Code Execution (RCE) 7 WEB nu11secur1ty
2023-05-02 Exploit Code Downloads   GLPI 9.5.7 - Username Enumeration 7 WEB Rafael B.
2023-05-02 Exploit Code Downloads   Companymaps v8.0 - Stored Cross Site Scripting (XSS) 6 WEB Lucas Noki (0xPrototype)
2023-05-02 Exploit Code Downloads   PHPJabbers Simple CMS 5.0 - SQL Injection 8 WEB Ahmet Ümit BAYRAM
2023-05-02 Exploit Code Downloads   PHPJabbers Simple CMS V5.0 - Stored Cross-Site Scripting (XSS) 8 WEB Ahmet Ümit BAYRAM
2023-05-02 Exploit Code Downloads   OpenEMR v7.0.1 - Authentication credentials brute force 12 WEB abhhi (Abhishek Birdawade)
2023-05-02 Exploit Code Downloads   PHPFusion 9.10.30 - Stored Cross-Site Scripting (XSS) 8 WEB Mirabbas Ağalarov
2023-05-02 Exploit Code Downloads   SoftExpert (SE) Suite v2.1.3 - Local File Inclusion 10 WEB Felipe Alcantara
2023-05-02 Exploit Code Downloads   Serendipity 2.4.0 - File Inclusion RCE 17 WEB nu11secur1ty
2023-05-02 Exploit Code Downloads   admidio v4.2.5 - CSV Injection 8 WEB Mirabbas Ağalarov
2023-05-02 Exploit Code Downloads   revive-adserver v5.4.1 - Cross-Site Scripting (XSS) 6 WEB Mirabbas Ağalarov
2023-05-02 Exploit Code Downloads   projectSend r1605 - Private file download 5 WEB Mirabbas Ağalarov
2023-05-02 Exploit Code Downloads   phpMyFAQ v3.1.12 - CSV Injection 6 WEB Mirabbas Ağalarov
2023-05-02 Exploit Code Downloads   PHP Restaurants 1.0 - SQLi Authentication Bypass & Cross Site Scripting 7 WEB Or4nG.M4N
2023-04-25 Exploit Code Downloads   Sophos Web Appliance 4.3.10.4 - Pre-auth command injection 10 WEB Behnam Abasi Vanda
2023-04-25 Exploit Code Downloads   Multi-Vendor Online Groceries Management System 1.0 - Remote Code Execution 11 WEB Or4nG.M4N
2023-04-25 Exploit Code Downloads   Mars Stealer 8.3 - Admin Account Takeover 11 WEB Sköll
2023-04-25 Exploit Code Downloads   PaperCut NG/MG 22.0.4 - Authentication Bypass 25 WEB MaanVader
2023-04-25 Exploit Code Downloads   KodExplorer 4.49 - CSRF to Arbitrary File Upload 10 WEB Mr Empy
2023-04-20 Exploit Code Downloads   ProjeQtOr Project Management System 10.3.2 - Remote Code Execution (RCE) 8 WEB Mirabbas Ağalarov
2023-04-20 Exploit Code Downloads   Piwigo 13.6.0 - Stored Cross-Site Scripting (XSS) 10 WEB Mirabbas Ağalarov
2023-04-20 Exploit Code Downloads   FUXA V.1.1.13-1186 - Unauthenticated Remote Code Execution (RCE) 12 WEB Rodolfo Mariano
2023-04-20 Exploit Code Downloads   Chitor-CMS v1.1.2 - Pre-Auth SQL Injection 8 WEB msd0pe
2023-04-20 Exploit Code Downloads   GDidees CMS 3.9.1 - Local File Disclosure 10 WEB Hadi Mene
2023-04-20 Exploit Code Downloads   Swagger UI 4.1.3 - User Interface (UI) Misrepresentation of Critical Information 11 WEB Rafael Cintra Lopes
2023-04-20 Exploit Code Downloads   Bang Resto v1.0 - 'Multiple' SQL Injection 9 WEB Rahad Chowdhury
2023-04-20 Exploit Code Downloads   Bang Resto v1.0 - Stored Cross-Site Scripting (XSS) 9 WEB Rahad Chowdhury
2023-04-20 Exploit Code Downloads   Lilac-Reloaded for Nagios 2.0.8 - Remote Code Execution (RCE) 9 WEB max / Zoltan Padanyi
2023-04-20 Exploit Code Downloads   Serendipity 2.4.0 - Cross-Site Scripting (XSS) 7 WEB Mirabbas Ağalarov
2023-04-20 Exploit Code Downloads   Serendipity 2.4.0 - Remote Code Execution (RCE) (Authenticated) 7 WEB Mirabbas Ağalarov
2023-04-14 Exploit Code Downloads   Sielco PolyEco Digital FM Transmitter 2.0.6 - Account Takeover / Lockout / EoP 7 WEB LiquidWorm
2023-04-14 Exploit Code Downloads   Sielco PolyEco Digital FM Transmitter 2.0.6 - Unauthenticated Information Disclosure 7 WEB LiquidWorm
2023-04-14 Exploit Code Downloads   Sielco PolyEco Digital FM Transmitter 2.0.6 - Radio Data System POST Manipulation 9 WEB LiquidWorm
2023-04-14 Exploit Code Downloads   Sielco PolyEco Digital FM Transmitter 2.0.6 - Authorization Bypass Factory Reset 7 WEB LiquidWorm
2023-04-14 Exploit Code Downloads   Sielco PolyEco Digital FM Transmitter 2.0.6 - Authentication Bypass Exploit 8 WEB LiquidWorm
2023-04-14 Exploit Code Downloads   Sielco Analog FM Transmitter 2.12 - Improper Access Control Change Admin Password 6 WEB LiquidWorm
2023-04-14 Exploit Code Downloads   Sielco Analog FM Transmitter 2.12 - Cross-Site Request Forgery 7 WEB LiquidWorm
2023-04-14 Exploit Code Downloads   Sielco Analog FM Transmitter 2.12 - 'id' Cookie Brute Force Session Hijacking 8 WEB LiquidWorm
2023-04-14 Exploit Code Downloads   InnovaStudio WYSIWYG Editor 5.4 - Unrestricted File Upload / Directory Traversal 9 WEB Zer0FauLT
2023-04-14 Exploit Code Downloads   Bludit 4.0.0-rc-2 - Account takeover 11 WEB nu11secur1ty
2023-04-10 Exploit Code Downloads   Online Computer and Laptop Store 1.0 - Remote Code Execution (RCE) 9 WEB Matisse Beckandt
2023-04-10 Exploit Code Downloads   BrainyCP V1.0 - Remote Code Execution 10 WEB Ahmet Ümit BAYRAM
2023-04-10 Exploit Code Downloads   Roxy Fileman 1.4.5 - Arbitrary File Upload 8 WEB Zer0FauLT
2023-04-10 Exploit Code Downloads   ever gauzy v0.281.9 - JWT weak HMAC secret 8 WEB nu11secur1ty
2023-04-08 Exploit Code Downloads   dotclear 2.25.3 - Remote Code Execution (RCE) (Authenticated) 6 WEB Mirabbas Ağalarov
2023-04-08 Exploit Code Downloads   Pentaho BA Server EE 9.3.0.0-428 - Remote Code Execution (RCE) (Unauthenticated) 8 WEB dwbzn
2023-04-08 Exploit Code Downloads   WebsiteBaker v2.13.3 - Cross-Site Scripting (XSS) 8 WEB Mirabbas Ağalarov
2023-04-08 Exploit Code Downloads   ZCBS/ZBBS/ZPBS v4.14k - Reflected Cross-Site Scripting (XSS) 7 WEB Abdulaziz Saad
2023-04-08 Exploit Code Downloads   X2CRM v6.6/6.9 - Reflected Cross-Site Scripting (XSS) (Authenticated) 5 WEB Betul Denizler
2023-04-08 Exploit Code Downloads   X2CRM v6.6/6.9 - Stored Cross-Site Scripting (XSS) (Authenticated) 8 WEB Betul Denizler
2023-04-08 Exploit Code Downloads   Online-Pizza-Ordering -1.0 - Remote Code Execution (RCE) 6 WEB nu11secur1ty
2023-04-08 Exploit Code Downloads   Palo Alto Cortex XSOAR 6.5.0 - Stored Cross-Site Scripting (XSS) 6 WEB omurugur
2023-04-08 Exploit Code Downloads   Symantec Messaging Gateway 10.7.4 - Stored Cross-Site Scripting (XSS) 10 WEB omurugur
2023-04-08 Exploit Code Downloads   Suprema BioStar 2 v2.8.16 - SQL Injection 10 WEB Yuriy (Vander) Tsarenko
2023-04-08 Exploit Code Downloads   Goanywhere Encryption helper 7.1.1 - Remote Code Execution (RCE) 12 WEB Youssef Muhammad
2023-04-08 Exploit Code Downloads   Medicine Tracker System v1.0 - Sql Injection 6 WEB Sanjay Singh