Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2021-07-05 Exploit Code Downloads   Online Voting System 1.0 - SQLi (Authentication Bypass) + Remote Code Execution (RCE) 18 WEB Geiseric
2021-07-05 Exploit Code Downloads   OpenEMR 5.0.1.7 - 'fileName' Path Traversal (Authenticated) (2) 17 WEB Alexandre ZANNI
2021-07-05 Exploit Code Downloads   WordPress Plugin WP Learn Manager 1.1.2 - Stored Cross-Site Scripting (XSS) 23 WEB Mohammed Adam
2021-07-02 Exploit Code Downloads   Garbage Collection Management System 1.0 - SQL Injection (Unauthenticated) 15 WEB ircashem
2021-07-02 Exploit Code Downloads   Wordpress Plugin Modern Events Calendar 5.16.2 - Event export (Unauthenticated) 19 WEB Ron Jost
2021-07-02 Exploit Code Downloads   Wordpress Plugin Modern Events Calendar 5.16.2 - Remote Code Execution (Authenticated) 14 WEB Ron Jost
2021-07-02 Exploit Code Downloads   b2evolution 7.2.2 - 'edit account details' Cross-Site Request Forgery (CSRF) 15 WEB Alperen Ergel
2021-07-02 Exploit Code Downloads   AKCP sensorProbe SPX476 - 'Multiple' Cross-Site Scripting (XSS) 19 WEB Tyler Butler
2021-07-02 Exploit Code Downloads   Scratch Desktop 3.17 - Remote Code Execution 18 WEB Stig Magnus Baugstø
2021-07-01 Exploit Code Downloads   Vianeos OctoPUS 5 - 'login_user' SQLi 18 WEB Audencia Business SCHOOL Red Team
2021-07-01 Exploit Code Downloads   Wordpress Plugin XCloner 4.2.12 - Remote Code Execution (Authenticated) 18 WEB Ron Jost
2021-07-01 Exploit Code Downloads   Online Voting System 1.0 - Remote Code Execution (Authenticated) 20 WEB Salman Asad
2021-07-01 Exploit Code Downloads   Online Voting System 1.0 - Authentication Bypass (SQLi) 17 WEB Salman Asad
2021-06-30 Exploit Code Downloads   Doctors Patients Management System 1.0 - SQL Injection (Authentication Bypass) 18 WEB Murat DEMİRCİ
2021-06-30 Exploit Code Downloads   Simple Traffic Offense System 1.0 - Stored Cross Site Scripting (XSS) 17 WEB Barış Yıldızoğlu
2021-06-30 Exploit Code Downloads   Apache Superset 1.1.0 - Time-Based Account Enumeration 21 WEB Dolev Farhi
2021-06-30 Exploit Code Downloads   phpAbook 0.9i - SQL Injection 20 WEB Alejandro Perez
2021-06-28 Exploit Code Downloads   Netgear WNAP320 2.0.3 - 'macAddress' Remote Code Execution (RCE) (Unauthenticated) 21 WEB Bryan Leong
2021-06-28 Exploit Code Downloads   Atlassian Jira Server Data Center 8.16.0 - Reflected Cross-Site Scripting (XSS) 15 WEB Captain_hook
2021-06-28 Exploit Code Downloads   WordPress Plugin YOP Polls 6.2.7 - Stored Cross Site Scripting (XSS) 19 WEB Toby Jackson
2021-06-25 Exploit Code Downloads   Lightweight facebook-styled blog 1.3 - Remote Code Execution (RCE) (Authenticated) (Metasploit) 17 WEB Maide Ilkay Aydogdu
2021-06-25 Exploit Code Downloads   Simple Client Management System 1.0 - 'uemail' SQL Injection (Unauthenticated) 17 WEB Barış Yıldızoğlu
2021-06-25 Exploit Code Downloads   Seeddms 5.1.10 - Remote Command Execution (RCE) (Authenticated) 18 WEB Bryan Leong
2021-06-24 Exploit Code Downloads   TP-Link TL-WR841N - Command Injection 15 WEB Koh You Liang
2021-06-24 Exploit Code Downloads   Adobe ColdFusion 8 - Remote Command Execution (RCE) 23 WEB Pergyz
2021-06-24 Exploit Code Downloads   VMware vCenter Server 7.0 - Remote Code Execution (RCE) (Unauthenticated) 20 WEB CHackA0101
2021-06-23 Exploit Code Downloads   Simple CRM 3.0 - 'email' SQL injection (Authentication Bypass) 18 WEB Rinku Kumar
2021-06-23 Exploit Code Downloads   Online Library Management System 1.0 - Arbitrary File Upload Remote Code Execution (Unauthenticated) 31 WEB Berk Can Geyikci
2021-06-23 Exploit Code Downloads   Online Library Management System 1.0 - 'Search' SQL Injection 16 WEB Berk Can Geyikci
2021-06-23 Exploit Code Downloads   WordPress Plugin Poll_ Survey_ Questionnaire and Voting system 1.5.2 - 'date_answers' Blind SQL Inje 17 WEB Toby Jackson
2021-06-23 Exploit Code Downloads   WordPress Plugin WP Google Maps 8.1.11 - Stored Cross-Site Scripting (XSS) 19 WEB Mohammed Adam
2021-06-22 Exploit Code Downloads   Phone Shop Sales Managements System 1.0 - Insecure Direct Object Reference (IDOR) 18 WEB Pratik Khalane
2021-06-22 Exploit Code Downloads   Responsive Tourism Website 3.1 - Remote Code Execution (RCE) (Unauthenticated) 18 WEB Tagoletta
2021-06-21 Exploit Code Downloads   Customer Relationship Management System (CRM) 1.0 - Remote Code Execution 17 WEB Ishan Saha
2021-06-21 Exploit Code Downloads   Simple CRM 3.0 - 'name' Stored Cross site scripting (XSS) 16 WEB Riadh Benlamine
2021-06-21 Exploit Code Downloads   Simple CRM 3.0 - 'Change user information' Cross-Site Request Forgery (CSRF) 20 WEB Riadh Benlamine
2021-06-21 Exploit Code Downloads   Websvn 2.6.0 - Remote Code Execution (Unauthenticated) 20 WEB g0ldm45k
2021-06-21 Exploit Code Downloads   OpenEMR 5.0.1.7 - 'fileName' Path Traversal (Authenticated) 17 WEB Ron Jost
2021-06-18 Exploit Code Downloads   Node.JS - 'node-serialize' Remote Code Execution (3) 18 WEB Beren Kuday GÖRÜN
2021-06-18 Exploit Code Downloads   ICE Hrm 29.0.0.OS - 'xml upload' Stored Cross-Site Scripting (XSS) 17 WEB Piyush Patil
2021-06-18 Exploit Code Downloads   ICE Hrm 29.0.0.OS - 'Account Takeover' Cross-Site Request Forgery (CSRF) 19 WEB Piyush Patil
2021-06-17 Exploit Code Downloads   Online Shopping Portal 3.1 - Remote Code Execution (Unauthenticated) 20 WEB Tagoletta
2021-06-17 Exploit Code Downloads   Zoho ManageEngine ServiceDesk Plus MSP 9.4 - User Enumeration 18 WEB Ricardo Ruiz
2021-06-17 Exploit Code Downloads   Unified Office Total Connect Now 1.0 - 'data' SQL Injection 21 WEB Ajaikumar Nadar
2021-06-16 Exploit Code Downloads   CKEditor 3 - Server-Side Request Forgery (SSRF) 15 WEB ahmed
2021-06-16 Exploit Code Downloads   Teachers Record Management System 1.0 - 'email' Stored Cross-site Scripting (XSS) 19 WEB nhattruong
2021-06-16 Exploit Code Downloads   Teachers Record Management System 1.0 - 'Multiple' SQL Injection (Authenticated) 16 WEB nhattruong
2021-06-16 Exploit Code Downloads   OpenEMR 5.0.1.3 - Authentication Bypass 25 WEB Ron Jost
2021-06-16 Exploit Code Downloads   Cotonti Siena 0.9.19 - 'maintitle' Stored Cross-Site Scripting 18 WEB Fatih İLGİN
2021-06-15 Exploit Code Downloads   Client Management System 1.1 - 'Search' SQL Injection 23 WEB BHAVESH KAUL
2021-06-15 Exploit Code Downloads   Client Management System 1.1 - 'username' Stored Cross-Site Scripting (XSS) 19 WEB BHAVESH KAUL
2021-06-14 Exploit Code Downloads   OpenEMR 5.0.1.3 - 'manage_site_files' Remote Code Execution (Authenticated) 18 WEB Ron Jost
2021-06-14 Exploit Code Downloads   TextPattern CMS 4.8.7 - Remote Command Execution (Authenticated) 20 WEB Mert Daş
2021-06-14 Exploit Code Downloads   Small CRM 3.0 - 'Authentication Bypass' SQL Injection 26 WEB BHAVESH KAUL
2021-06-14 Exploit Code Downloads   Stock Management System 1.0 - 'user_id' Blind SQL injection (Authenticated) 22 WEB Riadh Benlamine
2021-06-14 Exploit Code Downloads   COVID19 Testing Management System 1.0 - 'State' Stored Cross-Site-Scripting (XSS) 18 WEB BHAVESH KAUL
2021-06-14 Exploit Code Downloads   GLPI 9.4.5 - Remote Code Execution (RCE) 16 WEB Brian Peters
2021-06-14 Exploit Code Downloads   Accela Civic Platform 21.1 - 'contactSeqNumber' Insecure Direct Object References (IDOR) 15 WEB Abdulazeez Alaseeri
2021-06-14 Exploit Code Downloads   Accela Civic Platform 21.1 - 'successURL' Cross-Site-Scripting (XSS) 15 WEB Abdulazeez Alaseeri
2021-06-11 Exploit Code Downloads   WoWonder Social Network Platform 3.1 - Authentication Bypass 16 WEB securityforeveryone.com
2021-06-11 Exploit Code Downloads   Zenario CMS 8.8.52729 - 'cID' SQL injection (Authenticated) 16 WEB Avinash R
2021-06-11 Exploit Code Downloads   Solar-Log 500 2.8.2 - Unprotected Storage of Credentials 19 WEB Luca.Chiou
2021-06-11 Exploit Code Downloads   Solar-Log 500 2.8.2 - Incorrect Access Control 17 WEB Luca.Chiou
2021-06-11 Exploit Code Downloads   Grocery crud 1.6.4 - 'order_by' SQL Injection 21 WEB TonyShavez
2021-06-11 Exploit Code Downloads   WordPress Plugin Database Backups 1.2.2.6 - 'Database Backup Download' CSRF 21 WEB 0xB9
2021-06-11 Exploit Code Downloads   OpenEMR 5.0.0 - Remote Code Execution (Authenticated) 24 WEB Ron Jost
2021-06-11 Exploit Code Downloads   Microsoft SharePoint Server 16.0.10372.20060 - 'GetXmlDataFromDataSource' Server-Side Request Forger 18 WEB Alex Birnberg
2021-06-11 Exploit Code Downloads   Cerberus FTP Web Service 11 - 'svg' Stored Cross-Site Scripting (XSS) 21 WEB Mohammad Hossein Kaviyany
2021-06-11 Exploit Code Downloads   Accela Civic Platform 21.1 - 'servProvCode' Cross-Site-Scripting (XSS) 23 WEB Abdulazeez Alaseeri
2021-06-10 Exploit Code Downloads   TextPattern CMS 4.8.7 - Stored Cross-Site Scripting (XSS) 22 WEB Mert Daş
2021-06-10 Exploit Code Downloads   Student Result Management System 1.0 - 'class' SQL Injection 20 WEB Riadh Benlamine
2021-06-09 Exploit Code Downloads   GravCMS 1.10.7 - Arbitrary YAML Write/Update (Unauthenticated) (2) 25 WEB legend
2021-06-09 Exploit Code Downloads   WordPress Plugin visitors-app 0.3 - 'user-agent' Stored Cross-Site Scripting (XSS) 17 WEB Mesut Cetin
2021-06-09 Exploit Code Downloads   OpenCart 3.0.3.6 - 'subject' Stored Cross-Site Scripting 15 WEB Mert Daş
2021-06-09 Exploit Code Downloads   OpenCart 3.0.3.7 - 'Change Password' Cross-Site Request Forgery (CSRF) 20 WEB Mert Daş
2021-06-09 Exploit Code Downloads   Intelbras Router RF 301K - 'DNS Hijacking' Cross-Site Request Forgery (CSRF) 20 WEB Rodolfo Mariano
2021-06-08 Exploit Code Downloads   WordPress Plugin wpDiscuz 7.0.4 - Remote Code Execution (Unauthenticated) 19 WEB Fellipe Oliveira
2021-06-07 Exploit Code Downloads   Wordpress Plugin wpDiscuz 7.0.4 - Arbitrary File Upload (Unauthenticated) 29 WEB UnD3sc0n0c1d0
2021-06-07 Exploit Code Downloads   Grav CMS 1.7.10 - Server-Side Template Injection (SSTI) (Authenticated) 20 WEB enox
2021-06-07 Exploit Code Downloads   Rocket.Chat 3.12.1 - NoSQL Injection (Unauthenticated) 17 WEB enox
2021-06-07 Exploit Code Downloads   WordPress Plugin Smart Slider-3 3.5.0.8 - 'name' Stored Cross-Site Scripting (XSS) 19 WEB Hardik Solanki
2021-06-07 Exploit Code Downloads   OptiLink ONT1GEW GPON 2.1.11_X101 Build 1127.190306 - Remote Code Execution (Authenticated) 20 WEB SecNigma
2021-06-04 Exploit Code Downloads   Gitlab 13.10.2 - Remote Code Execution (Authenticated) 28 WEB enox
2021-06-04 Exploit Code Downloads   Monstra CMS 3.0.4 - Remote Code Execution (Authenticated) 20 WEB Ron Jost
2021-06-03 Exploit Code Downloads   4Images 1.8 - 'redirect' Reflected XSS 19 WEB Piyush Patil
2021-06-03 Exploit Code Downloads   Gitlab 13.9.3 - Remote Code Execution (Authenticated) 22 WEB enox
2021-06-03 Exploit Code Downloads   FUDForum 3.1.0 - 'author' Reflected XSS 16 WEB Piyush Patil
2021-06-03 Exploit Code Downloads   FUDForum 3.1.0 - 'srch' Reflected XSS 20 WEB Piyush Patil
2021-06-03 Exploit Code Downloads   CHIYU IoT Devices - Denial of Service (DoS) 19 WEB sirpedrotavares
2021-06-03 Exploit Code Downloads   Seo Panel 4.8.0 - 'from_time' Reflected XSS 21 WEB Piyush Patil
2021-06-03 Exploit Code Downloads   PHP 8.1.0-dev - 'User-Agentt' Remote Code Execution 19 WEB flast101
2021-06-02 Exploit Code Downloads   Seo Panel 4.8.0 - 'category' Reflected XSS 18 WEB Piyush Patil
2021-06-02 Exploit Code Downloads   Seo Panel 4.8.0 - 'search_name' Reflected XSS 20 WEB Piyush Patil
2021-06-02 Exploit Code Downloads   Products.PluggableAuthService 2.6.0 - Open Redirect 19 WEB Piyush Patil
2021-06-02 Exploit Code Downloads   GetSimple CMS 3.3.4 - Information Disclosure 21 WEB Ron Jost
2021-06-02 Exploit Code Downloads   Apache Airflow 1.10.10 - 'Example Dag' Remote Code Execution 18 WEB Pepe Berba
2021-06-02 Exploit Code Downloads   Thecus N4800Eco Nas Server Control Panel - Comand Injection 15 WEB Metin Yunus Kandemir
2021-06-01 Exploit Code Downloads   Atlassian Jira 8.15.0 - Information Disclosure (Username Enumeration) 19 WEB Mohammed Aloraimi
2021-06-01 Exploit Code Downloads   CHIYU TCP/IP Converter devices - CRLF injection 21 WEB sirpedrotavares
2021-06-01 Exploit Code Downloads   CHIYU IoT devices - 'Multiple' Cross-Site Scripting (XSS) 28 WEB sirpedrotavares
2021-06-01 Exploit Code Downloads   WordPress Plugin WP Prayer version 1.6.1 - 'prayer_messages' Stored Cross-Site Scripting (XSS) (Auth 20 WEB Bastijn Ouwendijk
2021-06-01 Exploit Code Downloads   Ubee EVW327 - 'Enable Remote Access' Cross-Site Request Forgery (CSRF) 17 WEB lated
2021-06-01 Exploit Code Downloads   ProjeQtOr Project Management 9.1.4 - Remote Code Execution 27 WEB Temel Demir
2021-06-01 Exploit Code Downloads   LogonTracer 1.2.0 - Remote Code Execution (Unauthenticated) 23 WEB g0ldm45k
2021-05-28 Exploit Code Downloads   Selenium 3.141.59 - Remote Code Execution (Firefox/geckodriver) 33 WEB Jon Stratton
2021-05-28 Exploit Code Downloads   Trixbox 2.8.0.4 - 'lang' Path Traversal 22 WEB Ron Jost
2021-05-28 Exploit Code Downloads   Trixbox 2.8.0.4 - 'lang' Remote Code Execution (Unauthenticated) 27 WEB Ron Jost
2021-05-28 Exploit Code Downloads   WordPress Plugin LifterLMS 4.21.0 - Stored Cross-Site Scripting (XSS) 19 WEB Captain_hook
2021-05-28 Exploit Code Downloads   PHPFusion 9.03.50 - Remote Code Execution 23 WEB g0ldm45k
2021-05-27 Exploit Code Downloads   Postbird 0.8.4 - Javascript Injection 23 WEB Debshubra Chakraborty
2021-05-26 Exploit Code Downloads   Pluck CMS 4.7.13 - File Upload Remote Code Execution (Authenticated) 28 WEB Ron Jost
2021-05-26 Exploit Code Downloads   Codiad 2.8.4 - Remote Code Execution (Authenticated) (3) 22 WEB Ron Jost
2021-05-25 Exploit Code Downloads   WordPress Plugin Cookie Law Bar 1.2.1 - 'clb_bar_msg' Stored Cross-Site Scripting (XSS) 24 WEB Mesut Cetin
2021-05-25 Exploit Code Downloads   Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting (XSS) 24 WEB Vinay H C
2021-05-24 Exploit Code Downloads   WordPress Plugin ReDi Restaurant Reservation 21.0307 - 'Comment' Stored Cross-Site Scripting (XSS) 19 WEB Bastijn Ouwendijk
2021-05-24 Exploit Code Downloads   Codiad 2.8.4 - Remote Code Execution (Authenticated) (2) 26 WEB Ron Jost
2021-05-24 Exploit Code Downloads   Shopizer 2.16.0 - 'Multiple' Cross-Site Scripting (XSS) 17 WEB Marek Toth
2021-05-24 Exploit Code Downloads   Schlix CMS 2.2.6-6 - Arbitary File Upload (Authenticated) 23 WEB Emir Polat
2021-05-21 Exploit Code Downloads   Microsoft Exchange 2019 - Unauthenticated Email Download (Metasploit) 29 WEB mekhalleh
2021-05-21 Exploit Code Downloads   WordPress Plugin WP Statistics 13.0.7 - Time-Based Blind SQL Injection (Unauthenticated) 19 WEB Mansoor R
2021-05-21 Exploit Code Downloads   Spotweb 1.4.9 - DOM Based Cross-Site Scripting (XSS) 17 WEB nu11secur1ty
2021-05-19 Exploit Code Downloads   COVID19 Testing Management System 1.0 - 'Admin name' Cross-Site Scripting (XSS) 24 WEB Rohit Burke
2021-05-19 Exploit Code Downloads   COVID19 Testing Management System 1.0 - SQL Injection (Auth Bypass) 20 WEB Rohit Burke
2021-05-19 Exploit Code Downloads   ManageEngine ADSelfService Plus 6.1 - CSV Injection 22 WEB Metin Yunus Kandemir
2021-05-19 Exploit Code Downloads   In4Suit ERP 3.2.74.1370 - 'txtLoginId' SQL injection 20 WEB Gulab Mondal