Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2021-12-09 Exploit Code Downloads   Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated) 20 WEB 0z09e
2021-12-06 Exploit Code Downloads   Croogo 3.0.2 - Remote Code Execution (Authenticated) 17 WEB Deha Berkin Bir
2021-12-03 Exploit Code Downloads   WordPress Plugin DZS Zoomsounds 6.45 - Arbitrary File Read (Unauthenticated) 21 WEB Uriel Yochpaz
2021-12-03 Exploit Code Downloads   WordPress Plugin Slider by Soliloquy 2.6.2 - 'title' Stored Cross Site Scripting (XSS) (Authenticate 16 WEB Abdurrahman Erkan
2021-12-03 Exploit Code Downloads   WordPress Plugin All-in-One Video Gallery plugin 2.4.9 - Local File Inclusion (LFI) 16 WEB Mohamed Magdy Abumusilm
2021-12-03 Exploit Code Downloads   Online Magazine Management System 1.0 - SQLi Authentication Bypass 21 WEB Mohamed habib Smidi
2021-12-03 Exploit Code Downloads   Online Pre-owned/Used Car Showroom Management System 1.0 - SQLi Authentication Bypass 20 WEB Mohamed habib Smidi
2021-12-01 Exploit Code Downloads   Online Enrollment Management System in PHP and PayPal 1.0 - 'U_NAME' Stored Cross-Site Scripting 21 WEB Tushar Jadhav
2021-11-30 Exploit Code Downloads   Laundry Booking Management System 1.0 - Remote Code Execution (RCE) 20 WEB Pablo Santiago
2021-11-29 Exploit Code Downloads   opencart 3.0.3.8 - Sessjion Injection 19 WEB Hubert Wojciechowski
2021-11-29 Exploit Code Downloads   orangescrum 1.8.0 - 'Multiple' Cross-Site Scripting (XSS) (Authenticated) 15 WEB Hubert Wojciechowski
2021-11-29 Exploit Code Downloads   orangescrum 1.8.0 - 'Multiple' SQL Injection (Authenticated) 14 WEB Hubert Wojciechowski
2021-11-29 Exploit Code Downloads   orangescrum 1.8.0 - Privilege escalation (Authenticated) 18 WEB Hubert Wojciechowski
2021-11-26 Exploit Code Downloads   Bagisto 1.3.3 - Client-Side Template Injection 18 WEB Mohamed Abdellatif Jaber
2021-11-24 Exploit Code Downloads   CMSimple 5.4 - Local file inclusion (LFI) to Remote code execution (RCE) (Authenticated) 16 WEB S1lv3r
2021-11-23 Exploit Code Downloads   FLEX 1085 Web 1.6.0 - HTML Injection 16 WEB Mr Empy
2021-11-23 Exploit Code Downloads   Bus Pass Management System 1.0 - 'Search' SQL injection 18 WEB Abhijeet Singh
2021-11-23 Exploit Code Downloads   Webrun 3.6.0.42 - 'P_0' SQL Injection 16 WEB Vinicius Alves
2021-11-23 Exploit Code Downloads   Wordpress Plugin WP Guppy 1.1 - WP-JSON API Sensitive Information Disclosure 14 WEB Keyvan Hardani
2021-11-22 Exploit Code Downloads   Aimeos Laravel ecommerce platform 2021.10 LTS - 'sort' SQL injection 17 WEB Ilker Burak ADIYAMAN
2021-11-17 Exploit Code Downloads   Wordpress Plugin Smart Product Review 1.0.4 - Arbitrary File Upload 22 WEB Keyvan Hardani
2021-11-17 Exploit Code Downloads   GitLab 13.10.2 - Remote Code Execution (RCE) (Unauthenticated) 27 WEB Jacob Baines
2021-11-17 Exploit Code Downloads   SuiteCRM 7.11.18 - Remote Code Execution (RCE) (Authenticated) (Metasploit) 21 WEB M. Cory Billington
2021-11-17 Exploit Code Downloads   Quick.CMS 6.7 - Cross Site Request Forgery (CSRF) to Cross Site Scripting (XSS) (Authenticated) 19 WEB Rahad Chowdhury
2021-11-17 Exploit Code Downloads   Bludit 3.13.1 - 'username' Cross Site Scripting (XSS) 16 WEB Vasu
2021-11-16 Exploit Code Downloads   CMDBuild 3.3.2 - 'Multiple' Cross Site Scripting (XSS) 21 WEB Hosein Vita
2021-11-16 Exploit Code Downloads   Online Learning System 2.0 - Remote Code Execution (RCE) 17 WEB djebbaranon
2021-11-15 Exploit Code Downloads   PHP Laravel 8.70.1 - Cross Site Scripting (XSS) to Cross Site Request Forgery (CSRF) 16 WEB Hosein Vita
2021-11-15 Exploit Code Downloads   WordPress Plugin Contact Form to Email 1.3.24 - Stored Cross Site Scripting (XSS) (Authenticated) 19 WEB Mohammed Aadhil Ashfaq
2021-11-15 Exploit Code Downloads   Fuel CMS 1.4.13 - 'col' Blind SQL Injection (Authenticated) 19 WEB Rahad Chowdhury
2021-11-15 Exploit Code Downloads   Simple Subscription Website 1.0 - SQLi Authentication Bypass 17 WEB Daniel Haro
2021-11-15 Exploit Code Downloads   KONGA 0.14.9 - Privilege Escalation 18 WEB Fabricio Salomao
2021-11-15 Exploit Code Downloads   WordPress Plugin WPSchoolPress 2.1.16 - 'Multiple' Cross Site Scripting (XSS) 15 WEB Davide Taraschi
2021-11-12 Exploit Code Downloads   Mumara Classic 2.93 - 'license' SQL Injection (Unauthenticated) 23 WEB Shain Lakin
2021-11-12 Exploit Code Downloads   WordPress Plugin AccessPress Social Icons 1.8.2 - 'icon title' Stored Cross-Site Scripting (XSS) 15 WEB Murat DEMİRCİ
2021-11-12 Exploit Code Downloads   WordPress Plugin WP Symposium Pro 2021.10 - 'wps_admin_forum_add_name' Stored Cross-Site Scripting ( 16 WEB Murat DEMİRCİ
2021-11-11 Exploit Code Downloads   FormaLMS 2.4.4 - Authentication Bypass 21 WEB Cristian \'void\' Giustini
2021-11-11 Exploit Code Downloads   Apache HTTP Server 2.4.50 - Remote Code Execution (RCE) (3) 16 WEB Valentin Lobstein
2021-11-11 Exploit Code Downloads   YeaLink SIP-TXXXP 53.84.0.15 - 'cmd' Command Injection (Authenticated) 17 WEB tahaafarooq
2021-11-10 Exploit Code Downloads   Employee and Visitor Gate Pass Logging System 1.0 - 'name' Stored Cross-Site Scripting (XSS) 22 WEB İlhami Selamet
2021-11-10 Exploit Code Downloads   Employee Daily Task Management System 1.0 - 'Name' Stored Cross-Site Scripting (XSS) 15 WEB Ragavender A G
2021-11-08 Exploit Code Downloads   FusionPBX 4.5.29 - Remote Code Execution (RCE) (Authenticated) 17 WEB Luska
2021-11-08 Exploit Code Downloads   WordPress Plugin Backup and Restore 1.0.3 - Arbitrary File Deletion 16 WEB Murat DEMİRCİ
2021-11-08 Exploit Code Downloads   Froxlor 0.10.29.1 - SQL Injection (Authenticated) 19 WEB Martin Cernac
2021-11-08 Exploit Code Downloads   Money Transfer Management System 1.0 - Authentication Bypass 18 WEB Aryan Chehreghani
2021-11-08 Exploit Code Downloads   Kmaleon 1.1.0.205 - 'tipocomb' SQL Injection (Authenticated) 16 WEB Amel BOUZIANE-LEBLOND
2021-11-08 Exploit Code Downloads   Simple Client Management System 1.0 - 'multiple' Stored Cross-Site Scripting (XSS) 20 WEB Sentinal920
2021-11-08 Exploit Code Downloads   Simple Client Management System 1.0 - SQLi (Authentication Bypass) 20 WEB Sentinal920
2021-11-05 Exploit Code Downloads   ImportExportTools NG 10.0.4 - HTML Injection 18 WEB Vulnerability-Lab
2021-11-05 Exploit Code Downloads   Payment Terminal 3.1 - 'Multiple' Cross-Site Scripting (XSS) 28 WEB Vulnerability-Lab
2021-11-04 Exploit Code Downloads   Opencart 3 Extension TMD Vendor System - Blind SQL Injection 21 WEB Muhammad Zaki Sulistya
2021-11-03 Exploit Code Downloads   Ultimate POS 4.4 - 'name' Cross-Site Scripting (XSS) 18 WEB Vulnerability-Lab
2021-11-03 Exploit Code Downloads   Vanguard 2.1 - 'Search' Cross-Site Scripting (XSS) 22 WEB Vulnerability-Lab
2021-11-03 Exploit Code Downloads   Isshue Shopping Cart 3.5 - 'Title' Cross Site Scripting (XSS) 18 WEB Vulnerability-Lab
2021-11-03 Exploit Code Downloads   Mult-e-Cart Ultimate 2.4 - 'id' SQL Injection 17 WEB Vulnerability-Lab
2021-11-03 Exploit Code Downloads   PHP Melody 3.0 - Persistent Cross-Site Scripting (XSS) 18 WEB Vulnerability-Lab
2021-11-03 Exploit Code Downloads   PHP Melody 3.0 - 'vid' SQL Injection 19 WEB Vulnerability-Lab
2021-11-03 Exploit Code Downloads   PHP Melody 3.0 - 'Multiple' Cross-Site Scripting (XSS) 20 WEB Vulnerability-Lab
2021-11-03 Exploit Code Downloads   Sonicwall SonicOS 6.5.4 - 'Common Name' Cross-Site Scripting (XSS) 22 WEB Vulnerability-Lab
2021-11-03 Exploit Code Downloads   Simplephpscripts Simple CMS 2.1 - 'Multiple' SQL Injection 18 WEB Vulnerability-Lab
2021-11-03 Exploit Code Downloads   Simplephpscripts Simple CMS 2.1 - 'Multiple' Stored Cross-Site Scripting (XSS) 16 WEB Vulnerability-Lab
2021-11-03 Exploit Code Downloads   OpenAM 13.0 - LDAP Injection 16 WEB Charlton Trezevant
2021-11-03 Exploit Code Downloads   WordPress Plugin Popup Anything 2.0.3 - 'Multiple' Stored Cross-Site Scripting (XSS) 18 WEB Luca Schembri
2021-11-03 Exploit Code Downloads   Eclipse Jetty 11.0.5 - Sensitive File Disclosure 20 WEB Mayank Deshmukh
2021-11-03 Exploit Code Downloads   Fuel CMS 1.4.1 - Remote Code Execution (3) 16 WEB Padsala Trushal
2021-11-03 Exploit Code Downloads   WordPress Plugin Hotel Listing 3 - 'Multiple' Cross-Site Scripting (XSS) 18 WEB Vulnerability-Lab
2021-11-03 Exploit Code Downloads   PHPJabbers Simple CMS 5 - 'name' Persistent Cross-Site Scripting (XSS) 22 WEB Vulnerability-Lab
2021-11-02 Exploit Code Downloads   Codiad 2.8.4 - Remote Code Execution (Authenticated) (4) 17 WEB P4p4_M4n3
2021-11-02 Exploit Code Downloads   i3 International Annexxus Cameras Ax-n 5.2.0 - Application Logic Flaw 18 WEB LiquidWorm
2021-11-02 Exploit Code Downloads   Ericsson Network Location MPS GMPC21 - Privilege Escalation (Metasploit) 17 WEB AkkuS
2021-11-02 Exploit Code Downloads   Ericsson Network Location MPS GMPC21 - Remote Code Execution (RCE) (Metasploit) 14 WEB AkkuS
2021-11-02 Exploit Code Downloads   Employee Record Management System 1.2 - 'empid' SQL injection (Unauthenticated) 18 WEB Anubhav Singh
2021-10-29 Exploit Code Downloads   Movable Type 7 r.5002 - XMLRPC API OS Command Injection (Metasploit) 16 WEB Charl-Alexandre Le Brun
2021-10-29 Exploit Code Downloads   WebCTRL OEM 6.5 - 'locale' Reflected Cross-Site Scripting (XSS) 17 WEB 3ndG4me
2021-10-29 Exploit Code Downloads   Umbraco v8.14.1 - 'baseUrl' SSRF 14 WEB NgoAnhDuc
2021-10-28 Exploit Code Downloads   PHPGurukul Hostel Management System 2.1 - Cross-site request forgery (CSRF) to Cross-site Scripting 21 WEB Anubhav Singh
2021-10-28 Exploit Code Downloads   WordPress Plugin Supsystic Contact Form 1.7.18 - 'label' Stored Cross-Site Scripting (XSS) 17 WEB Murat DEMİRCİ
2021-10-26 Exploit Code Downloads   WordPress Plugin Filterable Portfolio Gallery 1.0 - 'title' Stored Cross-Site Scripting (XSS) 21 WEB Murat DEMİRCİ
2021-10-25 Exploit Code Downloads   phpMyAdmin 4.8.1 - Remote Code Execution (RCE) 22 WEB samguy
2021-10-25 Exploit Code Downloads   Wordpress 4.9.6 - Arbitrary File Deletion (Authenticated) (2) 23 WEB samguy
2021-10-25 Exploit Code Downloads   WordPress Plugin Ninja Tables 4.1.7 - Stored Cross-Site Scripting (XSS) 23 WEB Akash Patil
2021-10-25 Exploit Code Downloads   WordPress Plugin Media-Tags 3.2.0.2 - Stored Cross-Site Scripting (XSS) 21 WEB Akash Patil
2021-10-25 Exploit Code Downloads   Engineers Online Portal 1.0 - 'id' SQL Injection 19 WEB Alon Leviev
2021-10-25 Exploit Code Downloads   Engineers Online Portal 1.0 - 'multiple' Authentication Bypass 23 WEB Alon Leviev
2021-10-25 Exploit Code Downloads   Engineers Online Portal 1.0 - 'multiple' Stored Cross-Site Scripting (XSS) 21 WEB Alon Leviev
2021-10-25 Exploit Code Downloads   Online Event Booking and Reservation System 1.0 - 'reason' Stored Cross-Site Scripting (XSS) 19 WEB Alon Leviev
2021-10-25 Exploit Code Downloads   Balbooa Joomla Forms Builder 2.0.6 - SQL Injection (Unauthenticated) 22 WEB blockomat2100
2021-10-25 Exploit Code Downloads   Apache HTTP Server 2.4.50 - Remote Code Execution (RCE) (2) 16 WEB ThelastVvV
2021-10-25 Exploit Code Downloads   Build Smart ERP 21.0817 - 'eidValue' SQL Injection (Unauthenticated) 20 WEB Nehru Sethuraman
2021-10-25 Exploit Code Downloads   Engineers Online Portal 1.0 - File Upload Remote Code Execution (RCE) 16 WEB SadKris
2021-10-25 Exploit Code Downloads   WordPress Plugin TaxoPress 3.0.7.1 - Stored Cross-Site Scripting (XSS) (Authenticated) 17 WEB Akash Patil
2021-10-25 Exploit Code Downloads   Hikvision Web Server Build 210702 - Command Injection 22 WEB bashis
2021-10-22 Exploit Code Downloads   Online Course Registration 1.0 - Blind Boolean-Based SQL Injection (Authenticated) 18 WEB Sam Ferguson
2021-10-22 Exploit Code Downloads   Clinic Management System 1.0 - SQL injection to Remote Code Execution 14 WEB Pablo Santiago
2021-10-22 Exploit Code Downloads   Jetty 9.4.37.v20210219 - Information Disclosure 19 WEB Mayank Deshmukh
2021-10-21 Exploit Code Downloads   Easy Chat Server 3.1 - Directory Traversal and Arbitrary File Read 15 WEB z4nd3r
2021-10-21 Exploit Code Downloads   Small CRM 3.0 - 'description' Stored Cross-Site Scripting (XSS) 16 WEB Ghuliev
2021-10-20 Exploit Code Downloads   Dolibarr ERP-CRM 14.0.2 - Stored Cross-Site Scripting (XSS) / Privilege Escalation 18 WEB Oscar Gil Gutierrez
2021-10-20 Exploit Code Downloads   SonicWall SMA 10.2.1.0-17sv - Password Reset 18 WEB Jacob Baines
2021-10-19 Exploit Code Downloads   Online Motorcycle (Bike) Rental System 1.0 - Blind Time-Based SQL Injection (Unauthenticated) 18 WEB Chase Comardelle
2021-10-19 Exploit Code Downloads   myfactory FMS 7.1-911 - 'Multiple' Reflected Cross-Site Scripting (XSS) 14 WEB RedTeam Pentesting GmbH
2021-10-19 Exploit Code Downloads   WordPress Theme Enfold 4.8.3 - Reflected Cross-Site Scripting (XSS) 17 WEB David Álvarez Robles
2021-10-18 Exploit Code Downloads   Plastic SCM 10.0.16.5622 - WebAdmin Server Access 17 WEB Basavaraj Banakar
2021-10-18 Exploit Code Downloads   Company's Recruitment Management System 1.0 - 'Add New user' Cross-Site Request Forgery (CSRF) 17 WEB Aniket Deshmane
2021-10-18 Exploit Code Downloads   Company's Recruitment Management System 1.0 - 'description' Stored Cross-Site Scripting (XSS) 18 WEB Aniket Deshmane
2021-10-18 Exploit Code Downloads   Mitsubishi Electric & INEA SmartRTU - Reflected Cross-Site Scripting (XSS) 17 WEB Hamit CİBO
2021-10-18 Exploit Code Downloads   Mitsubishi Electric & INEA SmartRTU - Source Code Disclosure 20 WEB Hamit CİBO
2021-10-18 Exploit Code Downloads   Company's Recruitment Management System 1.0. - 'title' Stored Cross-Site Scripting (XSS) 23 WEB Aniket Deshmane
2021-10-18 Exploit Code Downloads   Wordpress Plugin Duplicator 1.3.26 - Unauthenticated Arbitrary File Read 26 WEB nam3lum
2021-10-18 Exploit Code Downloads   Support Board 3.3.4 - 'Message' Stored Cross-Site Scripting (XSS) 18 WEB John Jefferson Li
2021-10-15 Exploit Code Downloads   i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS) 16 WEB Forster Chiu
2021-10-14 Exploit Code Downloads   TextPattern CMS 4.8.7 - Remote Command Execution (RCE) (Authenticated) 20 WEB Mert Daş
2021-10-13 Exploit Code Downloads   Sonicwall SonicOS 7.0 - Host Header Injection 27 WEB Ramikan
2021-10-13 Exploit Code Downloads   Logitech Media Server 8.2.0 - 'Title' Cross-Site Scripting (XSS) 21 WEB Mert Daş
2021-10-13 Exploit Code Downloads   Student Quarterly Grading System 1.0 - 'grade' Stored Cross-Site Scripting (XSS) 26 WEB Hüseyin Serkan Balkanli
2021-10-13 Exploit Code Downloads   Simple Issue Tracker System 1.0 - SQLi Authentication Bypass 23 WEB Bekir Bugra TURKOGLU
2021-10-13 Exploit Code Downloads   Online Learning System 2.0 - 'Multiple' SQLi Authentication Bypass 20 WEB Blackhan
2021-10-13 Exploit Code Downloads   Pharmacy Point of Sale System 1.0 - 'Add New User' Cross-Site Request Forgery (CSRF) 18 WEB Murat DEMİRCİ
2021-10-13 Exploit Code Downloads   Apache HTTP Server 2.4.50 - Path Traversal & Remote Code Execution (RCE) 22 WEB Lucas Souza
2021-10-13 Exploit Code Downloads   Keycloak 12.0.1 - 'request_uri ' Blind Server-Side Request Forgery (SSRF) (Unauthenticated) 16 WEB Mayank Deshmukh
2021-10-13 Exploit Code Downloads   Company's Recruitment Management System 1.0 - 'Multiple' SQL Injection (Unauthenticated) 19 WEB Yash Mahajan
2021-10-13 Exploit Code Downloads   Simple Payroll System 1.0 - SQLi Authentication Bypass 19 WEB Yash Mahajan
2021-10-08 Exploit Code Downloads   Loan Management System 1.0 - SQLi Authentication Bypass 21 WEB Merve Oral
2021-10-08 Exploit Code Downloads   Online Employees Work From Home Attendance System 1.0 - SQLi Authentication Bypass 20 WEB Merve Oral
2021-10-08 Exploit Code Downloads   Online Enrollment Management System 1.0 - Authentication Bypass 24 WEB Amine ismail