Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2021-10-08   Simple Online College Entrance Exam System 1.0 - 'Multiple' SQL injection 25 WEB Amine ismail
2021-10-08   Simple Online College Entrance Exam System 1.0 - Account Takeover 18 WEB Amine ismail
2021-10-08   Simple Online College Entrance Exam System 1.0 - Unauthenticated Admin Creation 25 WEB Amine ismail
2021-10-08   WordPress Plugin Pie Register 3.7.1.4 - Admin Privilege Escalation (Unauthenticated) 20 WEB Lotfi13-DZ
2021-10-08   Maian-Cart 3.8 - Remote Code Execution (RCE) (Unauthenticated) 20 WEB DreyAnd
2021-10-08   django-unicorn 0.35.3 - Stored Cross-Site Scripting (XSS) 18 WEB Raven Security Associates
2021-10-08   Online Traffic Offense Management System 1.0 - Privilage escalation (Unauthenticated) 18 WEB snup
2021-10-08   IFSC Code Finder Project 1.0 - SQL injection (Unauthenticated) 23 WEB Yash Mahajan
2021-10-07   Simple Online College Entrance Exam System 1.0 - SQLi Authentication Bypass 19 WEB Mevlüt Yılmaz
2021-10-07   Online Traffic Offense Management System 1.0 - Multiple RCE (Unauthenticated) 19 WEB snup
2021-10-07   Online Traffic Offense Management System 1.0 - Multiple XSS (Unauthenticated) 17 WEB snup
2021-10-07   Online Traffic Offense Management System 1.0 - Multiple SQL Injection (Unauthenticated) 24 WEB snup
2021-10-07   Online DJ Booking Management System 1.0 - 'Multiple' Blind Cross-Site Scripting 17 WEB Yash Mahajan
2021-10-06   Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution (RCE) 14 WEB Lucas Souza
2021-10-06   Wordpress Plugin BulletProof Security 5.1 - Sensitive Information Disclosure 17 WEB Ron Jost
2021-10-06   Odine Solutions GateKeeper 1.0 - 'trafficCycle' SQL Injection 14 WEB Emel Basayar
2021-10-06   Atlassian Jira Server Data Center 8.16.0 - Arbitrary File Read 15 WEB Mayank Deshmukh
2021-10-05   Wordpress Plugin MStore API 2.0.6 - Arbitrary File Upload 18 WEB spacehen
2021-10-05   Wordpress Plugin TheCartPress 1.5.3.6 - Privilege Escalation (Unauthenticated) 22 WEB spacehen
2021-10-05   Atlassian Confluence 7.12.2 - Pre-Authorization Arbitrary File Read 18 WEB Mayank Deshmukh
2021-10-05   Student Quarterly Grading System 1.0 - SQLi Authentication Bypass 18 WEB Blackhan
2021-10-04   Young Entrepreneur E-Negosyo System 1.0 - 'PRODESC' Stored Cross-Site Scripting (XSS) 18 WEB Jordan Glover
2021-10-04   Young Entrepreneur E-Negosyo System 1.0 - SQL Injection Authentication Bypass 20 WEB Jordan Glover
2021-10-04   Open Game Panel - Remote Code Execution (RCE) (Authenticated) 23 WEB prey
2021-10-04   Lodging Reservation Management System 1.0 - Authentication Bypass 21 WEB Nitin Sharma
2021-10-04   Payara Micro Community 5.2021.6 - Directory Traversal 20 WEB Yasser Khan
2021-10-01   Directory Management System 1.0 - SQL Injection Authentication Bypass 20 WEB Sanjay Singh
2021-10-01   CMSimple_XH 1.7.4 - Remote Code Execution (RCE) (Authenticated) 19 WEB Halit AKAYDIN
2021-10-01   WhatsUpGold 21.0.3 - Stored Cross-Site Scripting (XSS) 16 WEB Andreas Finstad
2021-10-01   Dairy Farm Shop Management System 1.0 - SQL Injection Authentication Bypass 15 WEB Sanjay Singh
2021-10-01   Vehicle Service Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated) 24 WEB Ghuliev
2021-10-01   Phpwcms 1.9.30 - Arbitrary File Upload 18 WEB Okan Kurtulus
2021-10-01   Blood Bank System 1.0 - Authentication Bypass 23 WEB Nitin Sharma
2021-10-01   Drupal Module MiniorangeSAML 8.x-2.22 - Privilege escalation 17 WEB Cristian \'void\' Giustini
2021-10-01   Exam Form Submission System 1.0 - SQL Injection Authentication Bypass 19 WEB Nitin Sharma
2021-09-30   Pharmacy Point of Sale System 1.0 - 'Multiple' SQL Injection (SQLi) 19 WEB Murat
2021-09-30   Cmsimple 5.4 - Remote Code Execution (RCE) (Authenticated) 20 WEB pussycat0x
2021-09-30   Cyber Cafe Management System Project (CCMS) 1.0 - SQL Injection Authentication Bypass 19 WEB Sanjay Singh
2021-09-29   Pet Shop Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated) 21 WEB Mr.Gedik
2021-09-29   OpenSIS 8.0 - 'cp_id_miss_attn' Reflected Cross-Site Scripting (XSS) 16 WEB Eric Salario
2021-09-29   WordPress Plugin Redirect 404 to Parent 1.3.0 - Reflected Cross-Site Scripting 17 WEB 0xB9
2021-09-29   WordPress Plugin Select All Categories and Taxonomies 1.3.1 - Reflected Cross-Site Scripting (XSS) 16 WEB 0xB9
2021-09-29   Storage Unit Rental Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated) 21 WEB Ghuliev
2021-09-28   WordPress Plugin Popup 1.10.4 - Reflected Cross-Site Scripting (XSS) 24 WEB 0xB9
2021-09-28   WordPress Plugin Ultimate Maps 1.2.4 - Reflected Cross-Site Scripting (XSS) 17 WEB 0xB9
2021-09-28   WordPress Plugin Contact Form 1.7.14 - Reflected Cross-Site Scripting (XSS) 19 WEB 0xB9
2021-09-28   WordPress Plugin TranslatePress 2.0.8 - Stored Cross-Site Scripting (XSS) (Authenticated) 21 WEB Nosa Shandy
2021-09-28   FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Remote Privilege Escalation 17 WEB LiquidWorm
2021-09-28   FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Hidden Backdoor Account (Write Access) 16 WEB LiquidWorm
2021-09-28   FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Config Download (Unauthenticated) 18 WEB LiquidWorm
2021-09-28   FatPipe Networks WARP 10.2.2 - Authorization Bypass 15 WEB LiquidWorm
2021-09-28   FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - 'Add Admin' Cross-Site Request Forgery (CSRF) 15 WEB LiquidWorm
2021-09-27   Library System 1.0 - 'student_id' SQL injection (Authenticated) 17 WEB Vinay Bhuria
2021-09-27   WordPress Plugin Wappointment 2.2.4 - Stored Cross-Site Scripting (XSS) 18 WEB Renos Nikolaou
2021-09-24   Pharmacy Point of Sale System 1.0 - SQLi Authentication BYpass 15 WEB Janik Wehrli
2021-09-24   SmarterTools SmarterTrack 7922 - 'Multiple' Information Disclosure 15 WEB Andrei Manole
2021-09-23   Police Crime Record Management Project 1.0 - Time Based SQLi 21 WEB ()t/\\/\\1
2021-09-23   Budget and Expense Tracker System 1.0 - Arbitrary File Upload 17 WEB ()t/\\/\\1
2021-09-23   WordPress Plugin Fitness Calculators 1.9.5 - Cross-Site Request Forgery (CSRF) 20 WEB 0xB9
2021-09-23   WordPress Plugin Advanced Order Export For WooCommerce 3.1.7 - Reflected Cross-Site Scripting (XSS) 14 WEB 0xB9
2021-09-23   Backdrop CMS 1.20.0 - 'Multiple' Cross-Site Request Forgery (CSRF) 15 WEB V1n1v131r4
2021-09-23   Wordpress Plugin 3DPrint Lite 1.9.1.4 - Arbitrary File Upload 21 WEB spacehen
2021-09-23   Gurock Testrail 7.2.0.3014 - 'files.md5' Improper Access Control 19 WEB Sick Codes
2021-09-22   Online Reviewer System 1.0 - Remote Code Execution (RCE) (Unauthenticated) 23 WEB Abdullah Khawaja
2021-09-22   Sentry 8.2.0 - Remote Code Execution (RCE) (Authenticated) 19 WEB Mohin Paramasivam
2021-09-22   Cloudron 6.2 - 'returnTo ' Cross Site Scripting (Reflected) 16 WEB Akıner Kısa
2021-09-22   OpenCats 0.9.4-2 - 'docx ' XML External Entity Injection (XXE) 21 WEB Jake Ruston
2021-09-22   e107 CMS 2.3.0 - Remote Code Execution (RCE) (Authenticated) 23 WEB Halit AKAYDIN
2021-09-22   Filerun 2021.03.26 - Remote Code Execution (RCE) (Authenticated) 15 WEB syntegris information solutions GmbH
2021-09-22   Simple Attendance System 1.0 - Unauthenticated Blind SQLi 19 WEB ()t/\\/\\1
2021-09-21   WebsiteBaker 2.13.0 - Remote Code Execution (RCE) (Authenticated) 33 WEB Halit AKAYDIN
2021-09-21   Budget and Expense Tracker System 1.0 - Remote Code Execution (RCE) (Unauthenticated) 15 WEB Abdullah Khawaja
2021-09-20   Budget and Expense Tracker System 1.0 - Authenticated Bypass 14 WEB Prunier Charles-Yves
2021-09-20   Church Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated) 18 WEB Abdullah Khawaja
2021-09-20   Online Food Ordering System 2.0 - Remote Code Execution (RCE) (Unauthenticated) 28 WEB Abdullah Khawaja
2021-09-20   WordPress 5.7 - 'Media Library' XML External Entity Injection (XXE) (Authenticated) 15 WEB David Utón
2021-09-20   Church Management System 1.0 - 'search' SQL Injection (Unauthenticated) 18 WEB Erwin Krazek
2021-09-20   T-Soft E-Commerce 4 - change 'admin credentials' Cross-Site Request Forgery (CSRF) 16 WEB Alperen Ergel
2021-09-17   Simple Attendance System 1.0 - Authenticated bypass 17 WEB Abdullah Khawaja
2021-09-17   Library Management System 1.0 - Blind Time-Based SQL Injection (Unauthenticated) 14 WEB boku
2021-09-17   WordPress Plugin WooCommerce Booster Plugin 5.4.3 - Authentication Bypass 15 WEB 0xB455
2021-09-16   ImpressCMS 1.4.2 - Remote Code Execution (RCE) (Authenticated) 16 WEB Halit AKAYDIN
2021-09-15   AlphaWeb XE - File Upload Remote Code Execution (RCE) (Authenticated) 16 WEB Ricardo Ruiz
2021-09-15   Evolution CMS 3.1.6 - Remote Code Execution (RCE) (Authenticated) 14 WEB Halit AKAYDIN
2021-09-15   Seowon 130-SLC router - 'queriesCnt' Remote Code Execution (Unauthenticated) 23 WEB Aryan Chehreghani
2021-09-15   Support Board 3.3.3 - 'Multiple' SQL Injection (Unauthenticated) 16 WEB John Jefferson Li
2021-09-14   Purchase Order Management System 1.0 - Remote File Upload 23 WEB Aryan Chehreghani
2021-09-13   Apartment Visitor Management System (AVMS) 1.0 - 'username' SQL Injection 14 WEB mari0x00
2021-09-13   Wordpress Plugin Download From Files 1.48 - Arbitrary File Upload 19 WEB spacehen
2021-09-13   ECOA Building Automation System - Arbitrary File Deletion 20 WEB Neurogenesia
2021-09-13   ECOA Building Automation System - Local File Disclosure 17 WEB Neurogenesia
2021-09-13   ECOA Building Automation System - Remote Privilege Escalation 16 WEB Neurogenesia
2021-09-13   ECOA Building Automation System - Configuration Download Information Disclosure 20 WEB Neurogenesia
2021-09-13   ECOA Building Automation System - Cookie Poisoning Authentication Bypass 16 WEB Neurogenesia
2021-09-13   ECOA Building Automation System - 'multiple' Cross-Site Request Forgery (CSRF) 25 WEB Neurogenesia
2021-09-13   ECOA Building Automation System - Directory Traversal Content Disclosure 21 WEB Neurogenesia
2021-09-13   ECOA Building Automation System - Path Traversal Arbitrary File Upload 17 WEB Neurogenesia
2021-09-13   ECOA Building Automation System - Weak Default Credentials 20 WEB Neurogenesia
2021-09-13   Men Salon Management System 1.0 - Multiple Vulnerabilities 18 WEB Aryan Chehreghani
2021-09-09   Bus Pass Management System 1.0 - 'adminname' Stored Cross-Site Scripting (XSS) 16 WEB Emre Aslan
2021-09-08   WordPress Plugin TablePress 1.14 - CSV Injection 28 WEB Nikhil Kapoor
2021-09-07   WordPress Plugin Survey & Poll 1.5.7.3 - 'sss_params' SQL Injection (2) 15 WEB Mohin Paramasivam
2021-09-07   WordPress Plugin WP Sitemap Page 1.6.4 - Stored Cross-Site Scripting (XSS) 25 WEB Nikhil Kapoor
2021-09-06   Antminer Monitor 0.5.0 - Authentication Bypass 18 WEB Vulnz
2021-09-06   Patient Appointment Scheduler System 1.0 - Persistent Cross-Site Scripting 28 WEB a-rey
2021-09-06   Patient Appointment Scheduler System 1.0 - Unauthenticated File Upload 31 WEB a-rey
2021-09-06   Bus Pass Management System 1.0 - 'viewid' Insecure direct object references (IDOR) 16 WEB sudoninja
2021-09-06   FlatCore CMS 2.0.7 - Remote Code Execution (RCE) (Authenticated) 17 WEB Mason Soroka-Gill
2021-09-06   OpenEMR 6.0.0 - 'noteid' Insecure Direct Object Reference (IDOR) 17 WEB Allen Enosh Upputori
2021-09-03   OpenSIS 8.0 'modname' - Directory Traversal 17 WEB Eric Salario
2021-09-02   WordPress Plugin Duplicate Page 4.4.1 - Stored Cross-Site Scripting (XSS) 18 WEB Nikhil Kapoor
2021-09-02   WPanel 4.3.1 - Remote Code Execution (RCE) (Authenticated) 18 WEB Sentinal920
2021-09-02   Compro Technology IP Camera - ' mjpegStreamer.cgi' Screenshot Disclosure 15 WEB icekam
2021-09-02   Compro Technology IP Camera - ' index_MJpeg.cgi' Stream Disclosure 27 WEB icekam
2021-09-02   Compro Technology IP Camera - 'Multiple' Credential Disclosure 22 WEB icekam
2021-09-02   Compro Technology IP Camera - RTSP stream disclosure (Unauthenticated) 17 WEB icekam
2021-09-02   Compro Technology IP Camera - 'killps.cgi' Denial of Service (DoS) 17 WEB icekam
2021-09-02   OpenSIS Community 8.0 - 'cp_id_miss_attn' SQL Injection 21 WEB Eric Salario
2021-09-02   Dolibarr ERP 14.0.1 - Privilege Escalation 18 WEB Vishwaraj Bhattrai
2021-09-01   WordPress Plugin Payments Plugin | GetPaid 2.4.6 - HTML Injection 21 WEB Niraj Mahajan
2021-09-01   Traffic Offense Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated) 18 WEB Tagoletta
2021-09-01   Confluence Server 7.12.4 - 'OGNL injection' Remote Code Execution (RCE) (Unauthenticated) 18 WEB Fellipe Oliveira
2021-08-31   WordPress Plugin ProfilePress 3.1.3 - Privilege Escalation (Unauthenticated) 32 WEB Numan Rajkotiya
2021-08-31   Umbraco CMS 8.9.1 - Directory Traversal 15 WEB BitTheByte
2021-08-30   Projectsend r1295 - 'name' Stored XSS 15 WEB Abdullah Kala