Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2021-04-15 Exploit Code Downloads   htmly 2.8.0 - 'description' Stored Cross-Site Scripting (XSS) 29 WEB nu11secur1ty
2021-04-15 Exploit Code Downloads   Tileserver-gl 3.0.0 - 'key' Reflected Cross-Site Scripting (XSS) 31 WEB Akash Chathoth
2021-04-15 Exploit Code Downloads   Horde Groupware Webmail 5.2.22 - Stored XSS 25 WEB nu11secur1ty
2021-04-14 Exploit Code Downloads   jQuery 1.0.3 - Cross-Site Scripting (XSS) 27 WEB Central InfoSec
2021-04-14 Exploit Code Downloads   jQuery 1.2 - Cross-Site Scripting (XSS) 28 WEB Central InfoSec
2021-04-14 Exploit Code Downloads   Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - RCE 25 WEB Jay Sharma
2021-04-14 Exploit Code Downloads   CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection (Authenticated) 29 WEB skysbsb
2021-04-14 Exploit Code Downloads   CITSmart ITSM 9.1.2.22 - LDAP Injection 27 WEB skysbsb
2021-04-14 Exploit Code Downloads   Digital Crime Report Management System 1.0 - SQL Injection (Authentication Bypass) 24 WEB GaluhID
2021-04-13 Exploit Code Downloads   ExpressVPN VPN Router 1.0 - Router Login Panel's Integer Overflow 26 WEB Jai Kumar Sharma
2021-04-13 Exploit Code Downloads   Blitar Tourism 1.0 - Authentication Bypass SQLi 25 WEB sigeri94
2021-04-13 Exploit Code Downloads   Simple Student Information System 1.0 - SQL Injection (Authentication Bypass) 24 WEB GaluhID
2021-04-09 Exploit Code Downloads   PrestaShop 1.7.6.7 - 'location' Blind Sql Injection 30 WEB Vanshal Gaur
2021-04-08 Exploit Code Downloads   Composr 10.0.36 - Remote Code Execution 29 WEB Orion Hridoy
2021-04-08 Exploit Code Downloads   DMA Radius Manager 4.4.0 - Cross-Site Request Forgery (CSRF) 22 WEB Issac Briones
2021-04-08 Exploit Code Downloads   CMSimple 5.2 - 'External' Stored XSS 25 WEB Quadron Research Lab
2021-04-07 Exploit Code Downloads   Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read 23 WEB Rhino Security Labs
2021-04-07 Exploit Code Downloads   Composr CMS 10.0.36 - Cross Site Scripting 25 WEB Orion Hridoy
2021-04-07 Exploit Code Downloads   Atlassian Jira Service Desk 4.9.1 - Unrestricted File Upload to XSS 29 WEB Captain_hook
2021-04-06 Exploit Code Downloads   Mini Mouse 9.3.0 - Local File inclusion 27 WEB gosh
2021-04-05 Exploit Code Downloads   Mini Mouse 9.2.0 - Path Traversal 21 WEB gosh
2021-04-05 Exploit Code Downloads   Mini Mouse 9.2.0 - Remote Code Execution 26 WEB gosh
2021-04-05 Exploit Code Downloads   OpenEMR 4.1.0 - 'u' SQL Injection 28 WEB Michael Ikua
2021-04-05 Exploit Code Downloads   Basic Shopping Cart 1.0 - Authentication Bypass 30 WEB Viren Saroha
2021-04-05 Exploit Code Downloads   Simple Food Website 1.0 - Authentication Bypass 28 WEB Viren Saroha
2021-04-02 Exploit Code Downloads   F5 BIG-IP 16.0.x - iControl REST Remote Code Execution (Unauthenticated) 29 WEB Al1ex
2021-04-02 Exploit Code Downloads   ZBL EPON ONU Broadband Router 1.0 - Remote Privilege Escalation 25 WEB LiquidWorm
2021-04-01 Exploit Code Downloads   phpPgAdmin 7.13.0 - COPY FROM PROGRAM Command Execution (Authenticated) 25 WEB Valerio Severini
2021-04-01 Exploit Code Downloads   ScadaBR 1.0 - Arbitrary File Upload (Authenticated) (2) 26 WEB Fellipe Oliveira
2021-04-01 Exploit Code Downloads   ScadaBR 1.0 - Arbitrary File Upload (Authenticated) (1) 24 WEB Fellipe Oliveira
2021-04-01 Exploit Code Downloads   Latrix 0.6.0 - 'txtaccesscode' SQL Injection 27 WEB cptsticky
2021-03-31 Exploit Code Downloads   CourseMS 2.1 - 'name' Stored XSS 31 WEB cptsticky
2021-03-31 Exploit Code Downloads   Zabbix 3.4.7 - Stored XSS 29 WEB Radmil Gazizov
2021-03-30 Exploit Code Downloads   Openlitespeed 1.7.9 - 'Notes' Stored Cross-Site Scripting 28 WEB cmOs
2021-03-30 Exploit Code Downloads   GetSimple CMS 3.3.16 - Persistent Cross-Site Scripting 28 WEB boku
2021-03-29 Exploit Code Downloads   SyncBreeze 10.1.16 - XML Parsing Stack-based Buffer Overflow 25 WEB Filipe Oliveira
2021-03-29 Exploit Code Downloads   Novel Boutique House-plus 3.5.1 - Arbitrary File Download 25 WEB tuyiqiang
2021-03-29 Exploit Code Downloads   Budget Management System 1.0 - 'Budget title' Stored XSS 23 WEB Jitendra Kumar Tripathi
2021-03-29 Exploit Code Downloads   Equipment Inventory System 1.0 - 'multiple' Stored XSS 24 WEB Jitendra Kumar Tripathi
2021-03-29 Exploit Code Downloads   Concrete5 8.5.4 - 'name' Stored XSS 25 WEB Quadron Research Lab
2021-03-29 Exploit Code Downloads   TP-Link Devices - 'setDefaultHostname' Stored Cross-site Scripting (Unauthenticated) 32 WEB Smriti Gaba
2021-03-29 Exploit Code Downloads   WordPress Plugin WP Super Cache 1.7.1 - Remote Code Execution (Authenticated) 30 WEB m0ze
2021-03-26 Exploit Code Downloads   Moodle 3.10.3 - 'label' Persistent Cross Site Scripting 25 WEB Vincent666
2021-03-26 Exploit Code Downloads   Regis Inventory And Monitoring System 1.0 - 'Item List' Persistent Cross-Site Scripting 27 WEB George Tsimpidas
2021-03-26 Exploit Code Downloads   'customhs_js_content' - 'customhs_js_content' Cross-Site Request Forgery 26 WEB Abhishek Joshi
2021-03-25 Exploit Code Downloads   Dolibarr ERP 11.0.4 - File Upload Restrictions Bypass (Authenticated RCE) 27 WEB Andrea Gonzalez
2021-03-25 Exploit Code Downloads   Genexis Platinum-4410 P4410-V2-1.31A - 'start_addr' Persistent Cross-Site Scripting 24 WEB Jithin KS
2021-03-25 Exploit Code Downloads   Linksys EA7500 2.0.8.194281 - Cross-Site Scripting 24 WEB MiningOmerta
2021-03-25 Exploit Code Downloads   Ovidentia 6 - 'id' SQL injection (Authenticated) 26 WEB Felipe Prates Donato
2021-03-23 Exploit Code Downloads   Codiad 2.8.4 - Remote Code Execution (Authenticated) 24 WEB WangYihang
2021-03-23 Exploit Code Downloads   Hotel And Lodge Management System 1.0 - 'Customer Details' Stored XSS 28 WEB Jitendra Kumar Tripathi
2021-03-23 Exploit Code Downloads   MyBB 1.8.25 - Poll Vote Count SQL Injection 24 WEB SivertPL
2021-03-22 Exploit Code Downloads   MyBB 1.8.25 - Chained Remote Command Execution 26 WEB SivertPL
2021-03-22 Exploit Code Downloads   WordPress Plugin Delightful Downloads Jquery File Tree 1.6.6 - Path Traversal 29 WEB Nicholas Ferreira
2021-03-19 Exploit Code Downloads   Online News Portal 1.0 - 'Multiple' Stored Cross-Site Scripting 25 WEB Richard Jones
2021-03-19 Exploit Code Downloads   Online News Portal 1.0 - 'name' SQL Injection 30 WEB Richard Jones
2021-03-19 Exploit Code Downloads   KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Config Download (Unauthenticated) 29 WEB LiquidWorm
2021-03-19 Exploit Code Downloads   KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Factory Reset (Unauthenticated) 29 WEB LiquidWorm
2021-03-19 Exploit Code Downloads   KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Remote Code Execution 26 WEB LiquidWorm
2021-03-19 Exploit Code Downloads   KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Authentication Bypass 24 WEB LiquidWorm
2021-03-19 Exploit Code Downloads   KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Command Injection (Authenticated) 27 WEB LiquidWorm
2021-03-19 Exploit Code Downloads   SOYAL Biometric Access Control System 5.0 - 'Change Admin Password' CSRF 22 WEB LiquidWorm
2021-03-19 Exploit Code Downloads   SOYAL Biometric Access Control System 5.0 - Master Code Disclosure 37 WEB LiquidWorm
2021-03-19 Exploit Code Downloads   CouchCMS 2.2.1 - Server-Side Request Forgery 26 WEB xxcdd
2021-03-19 Exploit Code Downloads   VestaCP 0.9.8 - 'v_sftp_licence' Command Injection 21 WEB numan türle
2021-03-19 Exploit Code Downloads   Profiling System for Human Resource Management 1.0 - Remote Code Execution (Unauthenticated) 28 WEB Christian Vierschilling
2021-03-19 Exploit Code Downloads   Boonex Dolphin 7.4.2 - 'width' Stored XSS 21 WEB Piyush Patil
2021-03-19 Exploit Code Downloads   LiveZilla Server 8.0.1.0 - 'Accept-Language' Reflected XSS 23 WEB Clément Cruchet
2021-03-19 Exploit Code Downloads   Plone CMS 5.2.3 - 'Title' Stored XSS 24 WEB Piyush Patil
2021-03-18 Exploit Code Downloads   Hestia Control Panel 1.3.2 - Arbitrary File Write 27 WEB numan türle
2021-03-18 Exploit Code Downloads   SEO Panel 4.8.0 - 'order_col' Blind SQL Injection (1) 33 WEB Piyush Patil
2021-03-18 Exploit Code Downloads   rConfig 3.9.6 - Arbitrary File Upload to Remote Code Execution (Authenticated) (1) 26 WEB Murat ŞEKER
2021-03-18 Exploit Code Downloads   VestaCP 0.9.8 - 'v_interface' Add IP Stored XSS 24 WEB numan türle
2021-03-17 Exploit Code Downloads   VestaCP 0.9.8 - File Upload CSRF 30 WEB Fady Mohammed Osman
2021-03-17 Exploit Code Downloads   WoWonder Social Network Platform 3.1 - 'event_id' SQL Injection 24 WEB securityforeveryone.com
2021-03-16 Exploit Code Downloads   Alphaware E-Commerce System 1.0 - Unauthenicated Remote Code Execution (File Upload + SQL injection) 33 WEB Christian Vierschilling
2021-03-15 Exploit Code Downloads   SonLogger 4.2.3.3 - Unauthenticated Arbitrary File Upload (Metasploit) 29 WEB Berkan Er
2021-03-15 Exploit Code Downloads   Sonlogger 4.2.3.3 - SuperAdmin Account Creation / Information Disclosure 26 WEB Berkan Er
2021-03-15 Exploit Code Downloads   openMAINT openMAINT 2.1-3.3-b - 'Multiple' Persistent Cross-Site Scripting 26 WEB Hosein Vita
2021-03-15 Exploit Code Downloads   rConfig 3.9.6 - 'path' Local File Inclusion (Authenticated) 28 WEB Murat ŞEKER
2021-03-15 Exploit Code Downloads   MagpieRSS 0.72 - 'url' Command Injection 24 WEB bl4ckh4ck5
2021-03-15 Exploit Code Downloads   Zenario CMS 8.8.53370 - 'id' Blind SQL Injection 35 WEB Balaji Ayyasamy
2021-03-12 Exploit Code Downloads   Monitoring System (Dashboard) 1.0 - File Upload RCE (Authenticated) 25 WEB Richard Jones
2021-03-12 Exploit Code Downloads   Monitoring System (Dashboard) 1.0 - 'uname' SQL Injection 30 WEB Richard Jones
2021-03-11 Exploit Code Downloads   Microsoft Exchange 2019 - Server-Side Request Forgery (Proxylogon) (PoC) 28 WEB testanull
2021-03-11 Exploit Code Downloads   CouchCMS 2.2.1 - Persistent Cross-Site Scripting 28 WEB xxcdd
2021-03-11 Exploit Code Downloads   MyBB OUGC Feedback Plugin 1.8.22 - Cross-Site Scripting 26 WEB 0xB9
2021-03-11 Exploit Code Downloads   NuCom 11N Wireless Router 5.07.90 - Remote Privilege Escalation 31 WEB LiquidWorm
2021-03-10 Exploit Code Downloads   Atlassian JIRA 8.11.1 - User Enumeration 29 WEB Dolev Farhi
2021-03-08 Exploit Code Downloads   GLPI 9.5.3 - 'fromtype' Unsafe Reflection 28 WEB Vadym Soroka
2021-03-08 Exploit Code Downloads   Joomla JCK Editor 6.4.4 - 'parent' SQL Injection (2) 27 WEB Nicholas Ferreira
2021-03-08 Exploit Code Downloads   Hotel and Lodge Management System 1.0 - Remote Code Execution (Unauthenticated) 26 WEB Christian Vierschilling
2021-03-05 Exploit Code Downloads   Fluig 1.7.0 - Path Traversal 37 WEB Lucas Souza
2021-03-04 Exploit Code Downloads   Textpattern 4.8.3 - Remote code execution (Authenticated) (2) 26 WEB Ricardo Ruiz
2021-03-04 Exploit Code Downloads   Web Based Quiz System 1.0 - 'eid' Union Based Sql Injection (Authenticated) 30 WEB Deepak Kumar Bharti
2021-03-04 Exploit Code Downloads   Online Ordering System 1.0 - Blind SQL Injection (Unauthenticated) 30 WEB Suraj Bhosale
2021-03-04 Exploit Code Downloads   Textpattern CMS 4.9.0-dev - 'Excerpt' Persistent Cross-Site Scripting (XSS) 29 WEB Tushar Vaidya
2021-03-04 Exploit Code Downloads   Textpattern CMS 4.8.4 - 'Comments' Persistent Cross-Site Scripting (XSS) 27 WEB Tushar Vaidya
2021-03-04 Exploit Code Downloads   Online Ordering System 1.0 - Arbitrary File Upload 28 WEB Suraj Bhosale
2021-03-04 Exploit Code Downloads   e107 CMS 2.3.0 - CSRF 34 WEB Tadjmen
2021-03-03 Exploit Code Downloads   Local Services Search Engine Management System (LSSMES) 1.0 - Blind & Error based SQL injection (Aut 28 WEB Tushar Vaidya
2021-03-03 Exploit Code Downloads   Local Services Search Engine Management System (LSSMES) 1.0 - 'name' Persistent Cross-Site Scripting 28 WEB Tushar Vaidya
2021-03-02 Exploit Code Downloads   Zen Cart 1.5.7b - Remote Code Execution (Authenticated) 29 WEB Mücahit Saratar
2021-03-02 Exploit Code Downloads   Web Based Quiz System 1.0 - 'name' Persistent Cross-Site Scripting 25 WEB P.Naveen Kumar
2021-03-02 Exploit Code Downloads   Tiny Tiny RSS - Remote Code Execution 26 WEB Daniel Neagaru
2021-03-02 Exploit Code Downloads   Web Based Quiz System 1.0 - 'MCQ options' Persistent Cross-Site Scripting 29 WEB Praharsh Kumar Singh
2021-03-01 Exploit Code Downloads   Covid-19 Contact Tracing System 1.0 - Remote Code Execution (Unauthenticated) 44 WEB Christian Vierschilling
2021-03-01 Exploit Code Downloads   Online Catering Reservation System 1.0 - Remote Code Execution (Unauthenticated) 29 WEB Christian Vierschilling
2021-03-01 Exploit Code Downloads   VMware vCenter Server 7.0 - Unauthenticated File Upload 25 WEB Photubias
2021-03-01 Exploit Code Downloads   FortiLogger 4.4.2.2 - Unauthenticated Arbitrary File Upload (Metasploit) 28 WEB Berkan Er
2021-02-26 Exploit Code Downloads   LightCMS 1.3.4 - 'exclusive' Stored XSS 29 WEB Peithon
2021-02-26 Exploit Code Downloads   Triconsole 3.75 - Reflected XSS 29 WEB Akash Chathoth
2021-02-26 Exploit Code Downloads   Simple Employee Records System 1.0 - File Upload RCE (Unauthenticated) 30 WEB sml
2021-02-25 Exploit Code Downloads   Vehicle Parking Management System 1.0 - 'catename' Persistent Cross-Site Scripting (XSS) 29 WEB Tushar Vaidya
2021-02-24 Exploit Code Downloads   LayerBB 1.1.4 - 'search_query' SQL Injection 27 WEB Görkem Haşin
2021-02-23 Exploit Code Downloads   Batflat CMS 1.3.6 - 'multiple' Stored XSS 28 WEB Tadjmen
2021-02-23 Exploit Code Downloads   Monica 2.19.1 - 'last_name' Stored XSS 26 WEB BouSalman
2021-02-19 Exploit Code Downloads   Beauty Parlour Management System 1.0 - 'sername' SQL Injection 33 WEB Thinkland Security Team
2021-02-19 Exploit Code Downloads   OpenText Content Server 20.3 - 'multiple' Stored Cross-Site Scripting 27 WEB Kamil Breński
2021-02-19 Exploit Code Downloads   Online Exam System With Timer 1.0 - 'email' SQL injection Auth Bypass 29 WEB Suresh Kumar
2021-02-19 Exploit Code Downloads   Comment System 1.0 - 'multiple' Stored Cross-Site Scripting 31 WEB Pintu Solanki
2021-02-19 Exploit Code Downloads   PEEL Shopping 9.3.0 - 'Comments' Persistent Cross-Site Scripting 29 WEB Anmol K Sachan
2021-02-18 Exploit Code Downloads   Batflat CMS 1.3.6 - Remote Code Execution (Authenticated) 35 WEB mari0x00
2021-02-18 Exploit Code Downloads   Gitea 1.12.5 - Remote Code Execution (Authenticated) 43 WEB Podalirius
2021-02-17 Exploit Code Downloads   Billing Management System 2.0 - 'email' SQL injection Auth Bypass 35 WEB Pintu Solanki