Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2021-09-23 Exploit Code Downloads   Wordpress Plugin 3DPrint Lite 1.9.1.4 - Arbitrary File Upload 30 WEB spacehen
2021-09-23 Exploit Code Downloads   Gurock Testrail 7.2.0.3014 - 'files.md5' Improper Access Control 29 WEB Sick Codes
2021-09-22 Exploit Code Downloads   Online Reviewer System 1.0 - Remote Code Execution (RCE) (Unauthenticated) 30 WEB Abdullah Khawaja
2021-09-22 Exploit Code Downloads   Sentry 8.2.0 - Remote Code Execution (RCE) (Authenticated) 31 WEB Mohin Paramasivam
2021-09-22 Exploit Code Downloads   Cloudron 6.2 - 'returnTo ' Cross Site Scripting (Reflected) 26 WEB Akıner Kısa
2021-09-22 Exploit Code Downloads   OpenCats 0.9.4-2 - 'docx ' XML External Entity Injection (XXE) 28 WEB Jake Ruston
2021-09-22 Exploit Code Downloads   e107 CMS 2.3.0 - Remote Code Execution (RCE) (Authenticated) 31 WEB Halit AKAYDIN
2021-09-22 Exploit Code Downloads   Filerun 2021.03.26 - Remote Code Execution (RCE) (Authenticated) 25 WEB syntegris information solutions GmbH
2021-09-22 Exploit Code Downloads   Simple Attendance System 1.0 - Unauthenticated Blind SQLi 29 WEB ()t/\\/\\1
2021-09-21 Exploit Code Downloads   WebsiteBaker 2.13.0 - Remote Code Execution (RCE) (Authenticated) 51 WEB Halit AKAYDIN
2021-09-21 Exploit Code Downloads   Budget and Expense Tracker System 1.0 - Remote Code Execution (RCE) (Unauthenticated) 30 WEB Abdullah Khawaja
2021-09-20 Exploit Code Downloads   Budget and Expense Tracker System 1.0 - Authenticated Bypass 29 WEB Prunier Charles-Yves
2021-09-20 Exploit Code Downloads   Church Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated) 32 WEB Abdullah Khawaja
2021-09-20 Exploit Code Downloads   Online Food Ordering System 2.0 - Remote Code Execution (RCE) (Unauthenticated) 39 WEB Abdullah Khawaja
2021-09-20 Exploit Code Downloads   WordPress 5.7 - 'Media Library' XML External Entity Injection (XXE) (Authenticated) 23 WEB David Utón
2021-09-20 Exploit Code Downloads   Church Management System 1.0 - 'search' SQL Injection (Unauthenticated) 34 WEB Erwin Krazek
2021-09-20 Exploit Code Downloads   T-Soft E-Commerce 4 - change 'admin credentials' Cross-Site Request Forgery (CSRF) 29 WEB Alperen Ergel
2021-09-17 Exploit Code Downloads   Simple Attendance System 1.0 - Authenticated bypass 29 WEB Abdullah Khawaja
2021-09-17 Exploit Code Downloads   Library Management System 1.0 - Blind Time-Based SQL Injection (Unauthenticated) 29 WEB boku
2021-09-17 Exploit Code Downloads   WordPress Plugin WooCommerce Booster Plugin 5.4.3 - Authentication Bypass 26 WEB 0xB455
2021-09-16 Exploit Code Downloads   ImpressCMS 1.4.2 - Remote Code Execution (RCE) (Authenticated) 25 WEB Halit AKAYDIN
2021-09-15 Exploit Code Downloads   AlphaWeb XE - File Upload Remote Code Execution (RCE) (Authenticated) 24 WEB Ricardo Ruiz
2021-09-15 Exploit Code Downloads   Evolution CMS 3.1.6 - Remote Code Execution (RCE) (Authenticated) 27 WEB Halit AKAYDIN
2021-09-15 Exploit Code Downloads   Seowon 130-SLC router - 'queriesCnt' Remote Code Execution (Unauthenticated) 33 WEB Aryan Chehreghani
2021-09-15 Exploit Code Downloads   Support Board 3.3.3 - 'Multiple' SQL Injection (Unauthenticated) 23 WEB John Jefferson Li
2021-09-14 Exploit Code Downloads   Purchase Order Management System 1.0 - Remote File Upload 38 WEB Aryan Chehreghani
2021-09-13 Exploit Code Downloads   Apartment Visitor Management System (AVMS) 1.0 - 'username' SQL Injection 22 WEB mari0x00
2021-09-13 Exploit Code Downloads   Wordpress Plugin Download From Files 1.48 - Arbitrary File Upload 27 WEB spacehen
2021-09-13 Exploit Code Downloads   ECOA Building Automation System - Arbitrary File Deletion 28 WEB Neurogenesia
2021-09-13 Exploit Code Downloads   ECOA Building Automation System - Local File Disclosure 30 WEB Neurogenesia
2021-09-13 Exploit Code Downloads   ECOA Building Automation System - Remote Privilege Escalation 26 WEB Neurogenesia
2021-09-13 Exploit Code Downloads   ECOA Building Automation System - Configuration Download Information Disclosure 31 WEB Neurogenesia
2021-09-13 Exploit Code Downloads   ECOA Building Automation System - Cookie Poisoning Authentication Bypass 25 WEB Neurogenesia
2021-09-13 Exploit Code Downloads   ECOA Building Automation System - 'multiple' Cross-Site Request Forgery (CSRF) 38 WEB Neurogenesia
2021-09-13 Exploit Code Downloads   ECOA Building Automation System - Directory Traversal Content Disclosure 34 WEB Neurogenesia
2021-09-13 Exploit Code Downloads   ECOA Building Automation System - Path Traversal Arbitrary File Upload 26 WEB Neurogenesia
2021-09-13 Exploit Code Downloads   ECOA Building Automation System - Weak Default Credentials 35 WEB Neurogenesia
2021-09-13 Exploit Code Downloads   Men Salon Management System 1.0 - Multiple Vulnerabilities 28 WEB Aryan Chehreghani
2021-09-09 Exploit Code Downloads   Bus Pass Management System 1.0 - 'adminname' Stored Cross-Site Scripting (XSS) 30 WEB Emre Aslan
2021-09-08 Exploit Code Downloads   WordPress Plugin TablePress 1.14 - CSV Injection 41 WEB Nikhil Kapoor
2021-09-07 Exploit Code Downloads   WordPress Plugin Survey & Poll 1.5.7.3 - 'sss_params' SQL Injection (2) 26 WEB Mohin Paramasivam
2021-09-07 Exploit Code Downloads   WordPress Plugin WP Sitemap Page 1.6.4 - Stored Cross-Site Scripting (XSS) 36 WEB Nikhil Kapoor
2021-09-06 Exploit Code Downloads   Antminer Monitor 0.5.0 - Authentication Bypass 28 WEB Vulnz
2021-09-06 Exploit Code Downloads   Patient Appointment Scheduler System 1.0 - Persistent Cross-Site Scripting 38 WEB a-rey
2021-09-06 Exploit Code Downloads   Patient Appointment Scheduler System 1.0 - Unauthenticated File Upload 42 WEB a-rey
2021-09-06 Exploit Code Downloads   Bus Pass Management System 1.0 - 'viewid' Insecure direct object references (IDOR) 24 WEB sudoninja
2021-09-06 Exploit Code Downloads   FlatCore CMS 2.0.7 - Remote Code Execution (RCE) (Authenticated) 34 WEB Mason Soroka-Gill
2021-09-06 Exploit Code Downloads   OpenEMR 6.0.0 - 'noteid' Insecure Direct Object Reference (IDOR) 25 WEB Allen Enosh Upputori
2021-09-03 Exploit Code Downloads   OpenSIS 8.0 'modname' - Directory Traversal 27 WEB Eric Salario
2021-09-02 Exploit Code Downloads   WordPress Plugin Duplicate Page 4.4.1 - Stored Cross-Site Scripting (XSS) 27 WEB Nikhil Kapoor
2021-09-02 Exploit Code Downloads   WPanel 4.3.1 - Remote Code Execution (RCE) (Authenticated) 27 WEB Sentinal920
2021-09-02 Exploit Code Downloads   Compro Technology IP Camera - ' mjpegStreamer.cgi' Screenshot Disclosure 27 WEB icekam
2021-09-02 Exploit Code Downloads   Compro Technology IP Camera - ' index_MJpeg.cgi' Stream Disclosure 38 WEB icekam
2021-09-02 Exploit Code Downloads   Compro Technology IP Camera - 'Multiple' Credential Disclosure 32 WEB icekam
2021-09-02 Exploit Code Downloads   Compro Technology IP Camera - RTSP stream disclosure (Unauthenticated) 26 WEB icekam
2021-09-02 Exploit Code Downloads   Compro Technology IP Camera - 'killps.cgi' Denial of Service (DoS) 26 WEB icekam
2021-09-02 Exploit Code Downloads   OpenSIS Community 8.0 - 'cp_id_miss_attn' SQL Injection 31 WEB Eric Salario
2021-09-02 Exploit Code Downloads   Dolibarr ERP 14.0.1 - Privilege Escalation 26 WEB Vishwaraj Bhattrai
2021-09-01 Exploit Code Downloads   WordPress Plugin Payments Plugin | GetPaid 2.4.6 - HTML Injection 30 WEB Niraj Mahajan
2021-09-01 Exploit Code Downloads   Traffic Offense Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated) 30 WEB Tagoletta
2021-09-01 Exploit Code Downloads   Confluence Server 7.12.4 - 'OGNL injection' Remote Code Execution (RCE) (Unauthenticated) 31 WEB Fellipe Oliveira
2021-08-31 Exploit Code Downloads   WordPress Plugin ProfilePress 3.1.3 - Privilege Escalation (Unauthenticated) 47 WEB Numan Rajkotiya
2021-08-31 Exploit Code Downloads   Umbraco CMS 8.9.1 - Directory Traversal 27 WEB BitTheByte
2021-08-30 Exploit Code Downloads   Projectsend r1295 - 'name' Stored XSS 24 WEB Abdullah Kala
2021-08-30 Exploit Code Downloads   Strapi CMS 3.0.0-beta.17.4 - Remote Code Execution (RCE) (Unauthenticated) 48 WEB Musyoka Ian
2021-08-30 Exploit Code Downloads   Strapi 3.0.0-beta.17.7 - Remote Code Execution (RCE) (Authenticated) 26 WEB David Utón
2021-08-30 Exploit Code Downloads   Strapi 3.0.0-beta - Set Password (Unauthenticated) 30 WEB David Anglada
2021-08-30 Exploit Code Downloads   Bus Pass Management System 1.0 - 'viewid' SQL Injection 30 WEB Aryan Chehreghani
2021-08-30 Exploit Code Downloads   Usermin 1.820 - Remote Code Execution (RCE) (Authenticated) 32 WEB numan türle
2021-08-30 Exploit Code Downloads   ZesleCP 3.1.9 - Remote Code Execution (RCE) (Authenticated) 27 WEB numan türle
2021-08-27 Exploit Code Downloads   COMMAX UMS Client ActiveX Control 1.7.0.2 - 'CNC_Ctrl.dll' Heap Buffer Overflow 27 WEB LiquidWorm
2021-08-27 Exploit Code Downloads   COMMAX WebViewer ActiveX Control 2.1.4.5 - 'Commax_WebViewer.ocx' Buffer Overflow 43 WEB LiquidWorm
2021-08-27 Exploit Code Downloads   CyberPanel 2.1 - Remote Code Execution (RCE) (Authenticated) 38 WEB numan türle
2021-08-26 Exploit Code Downloads   ProcessMaker 3.5.4 - Local File inclusion 38 WEB Ai Ho
2021-08-25 Exploit Code Downloads   Online Leave Management System 1.0 - Arbitrary File Upload to Shell (Unauthenticated) 45 WEB Justin White
2021-08-25 Exploit Code Downloads   HP OfficeJet 4630/7110 MYM1FN2025AR/2117A - Stored Cross-Site Scripting (XSS) 35 WEB Tyler Butler
2021-08-25 Exploit Code Downloads   WordPress Plugin Mail Masta 1.0 - Local File Inclusion (2) 26 WEB Matheus Alexandre
2021-08-23 Exploit Code Downloads   RaspAP 2.6.6 - Remote Code Execution (RCE) (Authenticated) 27 WEB Moritz Gruber
2021-08-23 Exploit Code Downloads   Simple Phone Book 1.0 - 'Username' SQL Injection (Unauthenticated) 25 WEB Justin White
2021-08-23 Exploit Code Downloads   Online Traffic Offense Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated) 34 WEB Halit AKAYDIN
2021-08-20 Exploit Code Downloads   Laundry Booking Management System 1.0 - 'Multiple' Stored Cross-Site Scripting (XSS) 29 WEB Azumah Foresight Xorlali
2021-08-20 Exploit Code Downloads   Laundry Booking Management System 1.0 - 'Multiple' SQL Injection 27 WEB Azumah Foresight Xorlali
2021-08-20 Exploit Code Downloads   Online Traffic Offense Management System 1.0 - 'id' SQL Injection (Authenticated) 23 WEB Justin White
2021-08-19 Exploit Code Downloads   Charity Management System CMS 1.0 - Multiple Vulnerabilities 26 WEB Davide Taraschi
2021-08-18 Exploit Code Downloads   COVID19 Testing Management System 1.0 - 'Multiple' SQL Injections 26 WEB Halit AKAYDIN
2021-08-18 Exploit Code Downloads   Simple Image Gallery 1.0 - Remote Code Execution (RCE) (Unauthenticated) 29 WEB Tagoletta
2021-08-18 Exploit Code Downloads   Crime records Management System 1.0 - 'Multiple' SQL Injection (Authenticated) 24 WEB Davide Taraschi
2021-08-17 Exploit Code Downloads   GeoVision Geowebserver 5.3.3 - Local FIle Inclusion 34 WEB Ken Pyle
2021-08-16 Exploit Code Downloads   COMMAX CVD-Axx DVR 5.1.4 - Weak Default Credentials Stream Disclosure 25 WEB LiquidWorm
2021-08-16 Exploit Code Downloads   COMMAX Smart Home Ruvie CCTV Bridge DVR Service - Config Write / DoS (Unauthenticated) 25 WEB LiquidWorm
2021-08-16 Exploit Code Downloads   COMMAX Smart Home Ruvie CCTV Bridge DVR Service - RTSP Credentials Disclosure 23 WEB LiquidWorm
2021-08-16 Exploit Code Downloads   COMMAX Smart Home IoT Control System CDP-1020n - SQL Injection Authentication Bypass 22 WEB LiquidWorm
2021-08-16 Exploit Code Downloads   COMMAX Biometric Access Control System 1.0.0 - Authentication Bypass 29 WEB LiquidWorm
2021-08-16 Exploit Code Downloads   Simple Water Refilling Station Management System 1.0 - Remote Code Execution (RCE) through File Uplo 27 WEB Matt Sorrell
2021-08-16 Exploit Code Downloads   Simple Water Refilling Station Management System 1.0 - Authentication Bypass 25 WEB Matt Sorrell
2021-08-16 Exploit Code Downloads   NetGear D1500 V1.0.0.21_1.0.1PE - 'Wireless Repeater' Stored Cross-Site Scripting (XSS) 29 WEB Securityium
2021-08-16 Exploit Code Downloads   CentOS Web Panel 0.9.8.1081 - Stored Cross-Site Scripting (XSS) 21 WEB Dinesh Mohanty
2021-08-13 Exploit Code Downloads   RATES SYSTEM 1.0 - Authentication Bypass 26 WEB Azumah Foresight Xorlali
2021-08-13 Exploit Code Downloads   Simple Image Gallery System 1.0 - 'id' SQL Injection 24 WEB Azumah Foresight Xorlali
2021-08-13 Exploit Code Downloads   Care2x Open Source Hospital Information Management 2.7 Alpha - 'Multiple' Stored XSS 24 WEB securityforeveryone.com
2021-08-13 Exploit Code Downloads   Police Crime Record Management System 1.0 - 'casedetails' SQL Injection 31 WEB Ömer Hasan Durmuş
2021-08-13 Exploit Code Downloads   Police Crime Record Management System 1.0 - 'Multiple' Stored Cross-Site Scripting (XSS) 26 WEB Ömer Hasan Durmuş
2021-08-13 Exploit Code Downloads   easy-mock 1.6.0 - Remote Code Execution (RCE) (Authenticated) 25 WEB LionTree
2021-08-13 Exploit Code Downloads   4images 1.8 - 'limitnumber' SQL Injection (Authenticated) 23 WEB Andrey Stoykov
2021-08-12 Exploit Code Downloads   RATES SYSTEM 1.0 - 'Multiple' SQL Injections 26 WEB Halit AKAYDIN
2021-08-12 Exploit Code Downloads   Altova MobileTogether Server 7.3 - XML External Entity Injection (XXE) 26 WEB RedTeam Pentesting GmbH
2021-08-12 Exploit Code Downloads   COVID19 Testing Management System 1.0 - 'searchdata' SQL Injection 25 WEB Ashish Upsham
2021-08-10 Exploit Code Downloads   Simple Library Management System 1.0 - 'rollno' SQL Injection 28 WEB Halit AKAYDIN
2021-08-10 Exploit Code Downloads   WordPress Plugin Picture Gallery 1.4.2 - 'Edit Content URL' Stored Cross-Site Scripting (XSS) 29 WEB Aryan Chehreghani
2021-08-10 Exploit Code Downloads   Cockpit CMS 0.11.1 - 'Username Enumeration & Password Reset' NoSQL Injection 25 WEB Brian Ombongi
2021-08-10 Exploit Code Downloads   IPCop 2.1.9 - Remote Code Execution (RCE) (Authenticated) 24 WEB Mücahit Saratar
2021-08-05 Exploit Code Downloads   GFI Mail Archiver 15.1 - Telerik UI Component Arbitrary File Upload (Unauthenticated) 30 WEB Amin Bohio
2021-08-05 Exploit Code Downloads   Moodle 3.9 - Remote Code Execution (RCE) (Authenticated) 27 WEB lanz
2021-08-05 Exploit Code Downloads   CMSuno 1.7 - 'tgo' Stored Cross-Site Scripting (XSS) (Authenticated) 26 WEB splint3rsec
2021-08-04 Exploit Code Downloads   ApacheOfBiz 17.12.01 - Remote Command Execution (RCE) 30 WEB Adrián Díaz
2021-08-04 Exploit Code Downloads   Client Management System 1.1 - 'cname' Stored Cross-site scripting (XSS) 33 WEB Mohammad Koochaki
2021-08-04 Exploit Code Downloads   qdPM 9.2 - Password Exposure (Unauthenticated) 32 WEB Leon Trappett
2021-08-04 Exploit Code Downloads   qdPM 9.1 - Remote Code Execution (Authenticated) 28 WEB Leon Trappett
2021-08-04 Exploit Code Downloads   WordPress Plugin WP Customize Login 1.1 - 'Change Logo Title' Stored Cross-Site Scripting (XSS) 24 WEB Aryan Chehreghani
2021-08-03 Exploit Code Downloads   Hotel Management System 1.0 - Cross-Site Scripting (XSS) Arbitrary File Upload Remote Code Execution 38 WEB Merbin Russel
2021-08-02 Exploit Code Downloads   Panasonic Sanyo CCTV Network Camera 2.03-0x - Cross-Site Request Forgery (Change Password) 31 WEB LiquidWorm
2021-08-02 Exploit Code Downloads   Online Hotel Reservation System 1.0 - 'Multiple' Cross-site scripting (XSS) 31 WEB Mohammad Koochaki
2021-08-02 Exploit Code Downloads   Men Salon Management System 1.0 - SQL Injection Authentication Bypass 31 WEB Akshay Khanna
2021-07-29 Exploit Code Downloads   Oracle Fatwire 6.3 - Multiple Vulnerabilities 27 WEB J. Francisco Bolivar
2021-07-29 Exploit Code Downloads   CloverDX 5.9.0 - Cross-Site Request Forgery (CSRF) 26 WEB niebardzo