Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2021-06-30 Exploit Code Downloads   Doctors Patients Management System 1.0 - SQL Injection (Authentication Bypass) 11 WEB Murat DEMİRCİ
2021-06-30 Exploit Code Downloads   Simple Traffic Offense System 1.0 - Stored Cross Site Scripting (XSS) 11 WEB Barış Yıldızoğlu
2021-06-30 Exploit Code Downloads   Apache Superset 1.1.0 - Time-Based Account Enumeration 13 WEB Dolev Farhi
2021-06-30 Exploit Code Downloads   phpAbook 0.9i - SQL Injection 14 WEB Alejandro Perez
2021-06-28 Exploit Code Downloads   Netgear WNAP320 2.0.3 - 'macAddress' Remote Code Execution (RCE) (Unauthenticated) 15 WEB Bryan Leong
2021-06-28 Exploit Code Downloads   Atlassian Jira Server Data Center 8.16.0 - Reflected Cross-Site Scripting (XSS) 9 WEB Captain_hook
2021-06-28 Exploit Code Downloads   WordPress Plugin YOP Polls 6.2.7 - Stored Cross Site Scripting (XSS) 11 WEB Toby Jackson
2021-06-25 Exploit Code Downloads   Lightweight facebook-styled blog 1.3 - Remote Code Execution (RCE) (Authenticated) (Metasploit) 12 WEB Maide Ilkay Aydogdu
2021-06-25 Exploit Code Downloads   Simple Client Management System 1.0 - 'uemail' SQL Injection (Unauthenticated) 13 WEB Barış Yıldızoğlu
2021-06-25 Exploit Code Downloads   Seeddms 5.1.10 - Remote Command Execution (RCE) (Authenticated) 12 WEB Bryan Leong
2021-06-24 Exploit Code Downloads   TP-Link TL-WR841N - Command Injection 11 WEB Koh You Liang
2021-06-24 Exploit Code Downloads   Adobe ColdFusion 8 - Remote Command Execution (RCE) 13 WEB Pergyz
2021-06-24 Exploit Code Downloads   VMware vCenter Server 7.0 - Remote Code Execution (RCE) (Unauthenticated) 13 WEB CHackA0101
2021-06-23 Exploit Code Downloads   Simple CRM 3.0 - 'email' SQL injection (Authentication Bypass) 12 WEB Rinku Kumar
2021-06-23 Exploit Code Downloads   Online Library Management System 1.0 - Arbitrary File Upload Remote Code Execution (Unauthenticated) 24 WEB Berk Can Geyikci
2021-06-23 Exploit Code Downloads   Online Library Management System 1.0 - 'Search' SQL Injection 11 WEB Berk Can Geyikci
2021-06-23 Exploit Code Downloads   WordPress Plugin Poll_ Survey_ Questionnaire and Voting system 1.5.2 - 'date_answers' Blind SQL Inje 11 WEB Toby Jackson
2021-06-23 Exploit Code Downloads   WordPress Plugin WP Google Maps 8.1.11 - Stored Cross-Site Scripting (XSS) 13 WEB Mohammed Adam
2021-06-22 Exploit Code Downloads   Phone Shop Sales Managements System 1.0 - Insecure Direct Object Reference (IDOR) 11 WEB Pratik Khalane
2021-06-22 Exploit Code Downloads   Responsive Tourism Website 3.1 - Remote Code Execution (RCE) (Unauthenticated) 13 WEB Tagoletta
2021-06-21 Exploit Code Downloads   Customer Relationship Management System (CRM) 1.0 - Remote Code Execution 11 WEB Ishan Saha
2021-06-21 Exploit Code Downloads   Simple CRM 3.0 - 'name' Stored Cross site scripting (XSS) 12 WEB Riadh Benlamine
2021-06-21 Exploit Code Downloads   Simple CRM 3.0 - 'Change user information' Cross-Site Request Forgery (CSRF) 13 WEB Riadh Benlamine
2021-06-21 Exploit Code Downloads   Websvn 2.6.0 - Remote Code Execution (Unauthenticated) 14 WEB g0ldm45k
2021-06-21 Exploit Code Downloads   OpenEMR 5.0.1.7 - 'fileName' Path Traversal (Authenticated) 11 WEB Ron Jost
2021-06-18 Exploit Code Downloads   Node.JS - 'node-serialize' Remote Code Execution (3) 12 WEB Beren Kuday GÖRÜN
2021-06-18 Exploit Code Downloads   ICE Hrm 29.0.0.OS - 'xml upload' Stored Cross-Site Scripting (XSS) 11 WEB Piyush Patil
2021-06-18 Exploit Code Downloads   ICE Hrm 29.0.0.OS - 'Account Takeover' Cross-Site Request Forgery (CSRF) 10 WEB Piyush Patil
2021-06-17 Exploit Code Downloads   Online Shopping Portal 3.1 - Remote Code Execution (Unauthenticated) 14 WEB Tagoletta
2021-06-17 Exploit Code Downloads   Zoho ManageEngine ServiceDesk Plus MSP 9.4 - User Enumeration 11 WEB Ricardo Ruiz
2021-06-17 Exploit Code Downloads   Unified Office Total Connect Now 1.0 - 'data' SQL Injection 11 WEB Ajaikumar Nadar
2021-06-16 Exploit Code Downloads   CKEditor 3 - Server-Side Request Forgery (SSRF) 11 WEB ahmed
2021-06-16 Exploit Code Downloads   Teachers Record Management System 1.0 - 'email' Stored Cross-site Scripting (XSS) 10 WEB nhattruong
2021-06-16 Exploit Code Downloads   Teachers Record Management System 1.0 - 'Multiple' SQL Injection (Authenticated) 10 WEB nhattruong
2021-06-16 Exploit Code Downloads   OpenEMR 5.0.1.3 - Authentication Bypass 11 WEB Ron Jost
2021-06-16 Exploit Code Downloads   Cotonti Siena 0.9.19 - 'maintitle' Stored Cross-Site Scripting 10 WEB Fatih İLGİN
2021-06-15 Exploit Code Downloads   Client Management System 1.1 - 'Search' SQL Injection 15 WEB BHAVESH KAUL
2021-06-15 Exploit Code Downloads   Client Management System 1.1 - 'username' Stored Cross-Site Scripting (XSS) 14 WEB BHAVESH KAUL
2021-06-14 Exploit Code Downloads   OpenEMR 5.0.1.3 - 'manage_site_files' Remote Code Execution (Authenticated) 13 WEB Ron Jost
2021-06-14 Exploit Code Downloads   TextPattern CMS 4.8.7 - Remote Command Execution (Authenticated) 14 WEB Mert Daş
2021-06-14 Exploit Code Downloads   Small CRM 3.0 - 'Authentication Bypass' SQL Injection 11 WEB BHAVESH KAUL
2021-06-14 Exploit Code Downloads   Stock Management System 1.0 - 'user_id' Blind SQL injection (Authenticated) 13 WEB Riadh Benlamine
2021-06-14 Exploit Code Downloads   COVID19 Testing Management System 1.0 - 'State' Stored Cross-Site-Scripting (XSS) 10 WEB BHAVESH KAUL
2021-06-14 Exploit Code Downloads   GLPI 9.4.5 - Remote Code Execution (RCE) 9 WEB Brian Peters
2021-06-14 Exploit Code Downloads   Accela Civic Platform 21.1 - 'contactSeqNumber' Insecure Direct Object References (IDOR) 9 WEB Abdulazeez Alaseeri
2021-06-14 Exploit Code Downloads   Accela Civic Platform 21.1 - 'successURL' Cross-Site-Scripting (XSS) 9 WEB Abdulazeez Alaseeri
2021-06-11 Exploit Code Downloads   WoWonder Social Network Platform 3.1 - Authentication Bypass 8 WEB securityforeveryone.com
2021-06-11 Exploit Code Downloads   Zenario CMS 8.8.52729 - 'cID' SQL injection (Authenticated) 9 WEB Avinash R
2021-06-11 Exploit Code Downloads   Solar-Log 500 2.8.2 - Unprotected Storage of Credentials 10 WEB Luca.Chiou
2021-06-11 Exploit Code Downloads   Solar-Log 500 2.8.2 - Incorrect Access Control 8 WEB Luca.Chiou
2021-06-11 Exploit Code Downloads   Grocery crud 1.6.4 - 'order_by' SQL Injection 10 WEB TonyShavez
2021-06-11 Exploit Code Downloads   WordPress Plugin Database Backups 1.2.2.6 - 'Database Backup Download' CSRF 9 WEB 0xB9
2021-06-11 Exploit Code Downloads   OpenEMR 5.0.0 - Remote Code Execution (Authenticated) 10 WEB Ron Jost
2021-06-11 Exploit Code Downloads   Microsoft SharePoint Server 16.0.10372.20060 - 'GetXmlDataFromDataSource' Server-Side Request Forger 13 WEB Alex Birnberg
2021-06-11 Exploit Code Downloads   Cerberus FTP Web Service 11 - 'svg' Stored Cross-Site Scripting (XSS) 15 WEB Mohammad Hossein Kaviyany
2021-06-11 Exploit Code Downloads   Accela Civic Platform 21.1 - 'servProvCode' Cross-Site-Scripting (XSS) 16 WEB Abdulazeez Alaseeri
2021-06-10 Exploit Code Downloads   TextPattern CMS 4.8.7 - Stored Cross-Site Scripting (XSS) 12 WEB Mert Daş
2021-06-10 Exploit Code Downloads   Student Result Management System 1.0 - 'class' SQL Injection 13 WEB Riadh Benlamine
2021-06-09 Exploit Code Downloads   GravCMS 1.10.7 - Arbitrary YAML Write/Update (Unauthenticated) (2) 13 WEB legend
2021-06-09 Exploit Code Downloads   WordPress Plugin visitors-app 0.3 - 'user-agent' Stored Cross-Site Scripting (XSS) 10 WEB Mesut Cetin
2021-06-09 Exploit Code Downloads   OpenCart 3.0.3.6 - 'subject' Stored Cross-Site Scripting 8 WEB Mert Daş
2021-06-09 Exploit Code Downloads   OpenCart 3.0.3.7 - 'Change Password' Cross-Site Request Forgery (CSRF) 9 WEB Mert Daş
2021-06-09 Exploit Code Downloads   Intelbras Router RF 301K - 'DNS Hijacking' Cross-Site Request Forgery (CSRF) 12 WEB Rodolfo Mariano
2021-06-08 Exploit Code Downloads   WordPress Plugin wpDiscuz 7.0.4 - Remote Code Execution (Unauthenticated) 15 WEB Fellipe Oliveira
2021-06-07 Exploit Code Downloads   Wordpress Plugin wpDiscuz 7.0.4 - Arbitrary File Upload (Unauthenticated) 20 WEB UnD3sc0n0c1d0
2021-06-07 Exploit Code Downloads   Grav CMS 1.7.10 - Server-Side Template Injection (SSTI) (Authenticated) 15 WEB enox
2021-06-07 Exploit Code Downloads   Rocket.Chat 3.12.1 - NoSQL Injection (Unauthenticated) 12 WEB enox
2021-06-07 Exploit Code Downloads   WordPress Plugin Smart Slider-3 3.5.0.8 - 'name' Stored Cross-Site Scripting (XSS) 12 WEB Hardik Solanki
2021-06-07 Exploit Code Downloads   OptiLink ONT1GEW GPON 2.1.11_X101 Build 1127.190306 - Remote Code Execution (Authenticated) 15 WEB SecNigma
2021-06-04 Exploit Code Downloads   Gitlab 13.10.2 - Remote Code Execution (Authenticated) 14 WEB enox
2021-06-04 Exploit Code Downloads   Monstra CMS 3.0.4 - Remote Code Execution (Authenticated) 10 WEB Ron Jost
2021-06-03 Exploit Code Downloads   4Images 1.8 - 'redirect' Reflected XSS 13 WEB Piyush Patil
2021-06-03 Exploit Code Downloads   Gitlab 13.9.3 - Remote Code Execution (Authenticated) 12 WEB enox
2021-06-03 Exploit Code Downloads   FUDForum 3.1.0 - 'author' Reflected XSS 11 WEB Piyush Patil
2021-06-03 Exploit Code Downloads   FUDForum 3.1.0 - 'srch' Reflected XSS 12 WEB Piyush Patil
2021-06-03 Exploit Code Downloads   CHIYU IoT Devices - Denial of Service (DoS) 12 WEB sirpedrotavares
2021-06-03 Exploit Code Downloads   Seo Panel 4.8.0 - 'from_time' Reflected XSS 13 WEB Piyush Patil
2021-06-03 Exploit Code Downloads   PHP 8.1.0-dev - 'User-Agentt' Remote Code Execution 12 WEB flast101
2021-06-02 Exploit Code Downloads   Seo Panel 4.8.0 - 'category' Reflected XSS 11 WEB Piyush Patil
2021-06-02 Exploit Code Downloads   Seo Panel 4.8.0 - 'search_name' Reflected XSS 15 WEB Piyush Patil
2021-06-02 Exploit Code Downloads   Products.PluggableAuthService 2.6.0 - Open Redirect 12 WEB Piyush Patil
2021-06-02 Exploit Code Downloads   GetSimple CMS 3.3.4 - Information Disclosure 13 WEB Ron Jost
2021-06-02 Exploit Code Downloads   Apache Airflow 1.10.10 - 'Example Dag' Remote Code Execution 10 WEB Pepe Berba
2021-06-02 Exploit Code Downloads   Thecus N4800Eco Nas Server Control Panel - Comand Injection 11 WEB Metin Yunus Kandemir
2021-06-01 Exploit Code Downloads   Atlassian Jira 8.15.0 - Information Disclosure (Username Enumeration) 13 WEB Mohammed Aloraimi
2021-06-01 Exploit Code Downloads   CHIYU TCP/IP Converter devices - CRLF injection 12 WEB sirpedrotavares
2021-06-01 Exploit Code Downloads   CHIYU IoT devices - 'Multiple' Cross-Site Scripting (XSS) 14 WEB sirpedrotavares
2021-06-01 Exploit Code Downloads   WordPress Plugin WP Prayer version 1.6.1 - 'prayer_messages' Stored Cross-Site Scripting (XSS) (Auth 11 WEB Bastijn Ouwendijk
2021-06-01 Exploit Code Downloads   Ubee EVW327 - 'Enable Remote Access' Cross-Site Request Forgery (CSRF) 8 WEB lated
2021-06-01 Exploit Code Downloads   ProjeQtOr Project Management 9.1.4 - Remote Code Execution 19 WEB Temel Demir
2021-06-01 Exploit Code Downloads   LogonTracer 1.2.0 - Remote Code Execution (Unauthenticated) 18 WEB g0ldm45k
2021-05-28 Exploit Code Downloads   Selenium 3.141.59 - Remote Code Execution (Firefox/geckodriver) 23 WEB Jon Stratton
2021-05-28 Exploit Code Downloads   Trixbox 2.8.0.4 - 'lang' Path Traversal 16 WEB Ron Jost
2021-05-28 Exploit Code Downloads   Trixbox 2.8.0.4 - 'lang' Remote Code Execution (Unauthenticated) 18 WEB Ron Jost
2021-05-28 Exploit Code Downloads   WordPress Plugin LifterLMS 4.21.0 - Stored Cross-Site Scripting (XSS) 11 WEB Captain_hook
2021-05-28 Exploit Code Downloads   PHPFusion 9.03.50 - Remote Code Execution 16 WEB g0ldm45k
2021-05-27 Exploit Code Downloads   Postbird 0.8.4 - Javascript Injection 12 WEB Debshubra Chakraborty
2021-05-26 Exploit Code Downloads   Pluck CMS 4.7.13 - File Upload Remote Code Execution (Authenticated) 15 WEB Ron Jost
2021-05-26 Exploit Code Downloads   Codiad 2.8.4 - Remote Code Execution (Authenticated) (3) 15 WEB Ron Jost
2021-05-25 Exploit Code Downloads   WordPress Plugin Cookie Law Bar 1.2.1 - 'clb_bar_msg' Stored Cross-Site Scripting (XSS) 16 WEB Mesut Cetin
2021-05-25 Exploit Code Downloads   Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting (XSS) 14 WEB Vinay H C
2021-05-24 Exploit Code Downloads   WordPress Plugin ReDi Restaurant Reservation 21.0307 - 'Comment' Stored Cross-Site Scripting (XSS) 12 WEB Bastijn Ouwendijk
2021-05-24 Exploit Code Downloads   Codiad 2.8.4 - Remote Code Execution (Authenticated) (2) 16 WEB Ron Jost
2021-05-24 Exploit Code Downloads   Shopizer 2.16.0 - 'Multiple' Cross-Site Scripting (XSS) 11 WEB Marek Toth
2021-05-24 Exploit Code Downloads   Schlix CMS 2.2.6-6 - Arbitary File Upload (Authenticated) 17 WEB Emir Polat
2021-05-21 Exploit Code Downloads   Microsoft Exchange 2019 - Unauthenticated Email Download (Metasploit) 15 WEB mekhalleh
2021-05-21 Exploit Code Downloads   WordPress Plugin WP Statistics 13.0.7 - Time-Based Blind SQL Injection (Unauthenticated) 12 WEB Mansoor R
2021-05-21 Exploit Code Downloads   Spotweb 1.4.9 - DOM Based Cross-Site Scripting (XSS) 11 WEB nu11secur1ty
2021-05-19 Exploit Code Downloads   COVID19 Testing Management System 1.0 - 'Admin name' Cross-Site Scripting (XSS) 11 WEB Rohit Burke
2021-05-19 Exploit Code Downloads   COVID19 Testing Management System 1.0 - SQL Injection (Auth Bypass) 13 WEB Rohit Burke
2021-05-19 Exploit Code Downloads   ManageEngine ADSelfService Plus 6.1 - CSV Injection 12 WEB Metin Yunus Kandemir
2021-05-19 Exploit Code Downloads   In4Suit ERP 3.2.74.1370 - 'txtLoginId' SQL injection 14 WEB Gulab Mondal
2021-05-19 Exploit Code Downloads   WordPress Plugin Stop Spammers 2021.8 - 'log' Reflected Cross-site Scripting (XSS) 13 WEB Hosein Vita
2021-05-18 Exploit Code Downloads   Microsoft Exchange 2019 - Unauthenticated Email Download 16 WEB Gonzalo Villegas
2021-05-18 Exploit Code Downloads   EgavilanMedia PHPCRUD 1.0 - 'First Name' SQL Injection 11 WEB Dimitrios Mitakos
2021-05-17 Exploit Code Downloads   Printable Staff ID Card Creator System 1.0 - 'email' SQL Injection 10 WEB bwnz
2021-05-17 Exploit Code Downloads   Subrion CMS 4.2.1 - Arbitrary File Upload 19 WEB Fellipe Oliveira
2021-05-17 Exploit Code Downloads   Advanced Guestbook 2.4.4 - 'Smilies' Persistent Cross-Site Scripting (XSS) 11 WEB Abdulkadir AYDOGAN
2021-05-17 Exploit Code Downloads   Billing Management System 2.0 - Union based SQL injection (Authenticated) 14 WEB Mohammad Koochaki
2021-05-17 Exploit Code Downloads   Simple Chatbot Application 1.0 - 'Category' Stored Cross site Scripting 12 WEB Vani K G
2021-05-17 Exploit Code Downloads   Dental Clinic Appointment Reservation System 1.0 - Cross Site Request Forgery (Add Admin) 13 WEB Reza Afsahi
2021-05-17 Exploit Code Downloads   Dental Clinic Appointment Reservation System 1.0 - 'Firstname' Persistent Cross Site Scripting (Auth 11 WEB Reza Afsahi
2021-05-17 Exploit Code Downloads   IPFire 2.25 - Remote Code Execution (Authenticated) 11 WEB Mücahit Saratar
2021-05-17 Exploit Code Downloads   Customer Relationship Management (CRM) System 1.0 - 'Category' Persistent Cross site Scripting 9 WEB Vani K G
2021-05-14 Exploit Code Downloads   Chamilo LMS 1.11.14 - Remote Code Execution (Authenticated) 17 WEB M. Cory Billington