Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2021-02-01 Exploit Code Downloads   User Management System 1.0 - 'uid' SQL Injection 17 WEB Zeyad Azima
2021-02-01 Exploit Code Downloads   Zoo Management System 1.0 - 'anid' SQL Injection 19 WEB Zeyad Azima
2021-02-01 Exploit Code Downloads   MyBB Delete Account Plugin 1.4 - Cross-Site Scripting 19 WEB 0xB9
2021-01-29 Exploit Code Downloads   SonicWall SSL-VPN 8.0.0.0 - 'visualdoor' Remote Code Execution (Unauthenticated) 25 WEB Darren Martyn
2021-01-29 Exploit Code Downloads   Simple Public Chat Room 1.0 - 'msg' Stored Cross-Site Scripting 19 WEB Richard Jones
2021-01-29 Exploit Code Downloads   Simple Public Chat Room 1.0 - Authentication Bypass SQLi 18 WEB Richard Jones
2021-01-29 Exploit Code Downloads   MyBB Hide Thread Content Plugin 1.0 - Information Disclosure 19 WEB 0xB9
2021-01-29 Exploit Code Downloads   Home Assistant Community Store (HACS) 1.10.0 - Directory Traversal 19 WEB Lyghtnox
2021-01-29 Exploit Code Downloads   Quick.CMS 6.7 - Remote Code Execution (Authenticated) 20 WEB mari0x00
2021-01-29 Exploit Code Downloads   Online Grading System 1.0 - 'uname' SQL Injection 18 WEB Ruchi Tiwari
2021-01-29 Exploit Code Downloads   BloofoxCMS 0.5.2.1 - 'text' Stored Cross Site Scripting 24 WEB LiPeiYi
2021-01-28 Exploit Code Downloads   WordPress Plugin SuperForms 4.9 - Arbitrary File Upload 27 WEB ABDO10
2021-01-28 Exploit Code Downloads   Umbraco CMS 7.12.4 - Remote Code Execution (Authenticated) 20 WEB Alexandre ZANNI
2021-01-28 Exploit Code Downloads   Fuel CMS 1.4.1 - Remote Code Execution (2) 18 WEB Alexandre ZANNI
2021-01-28 Exploit Code Downloads   OpenEMR 5.0.1 - Remote Code Execution (Authenticated) (2) 16 WEB Alexandre ZANNI
2021-01-28 Exploit Code Downloads   CMSUno 1.6.2 - 'lang' Remote Code Execution (Authenticated) 13 WEB Alexandre ZANNI
2021-01-28 Exploit Code Downloads   EgavilanMedia PHPCRUD 1.0 - 'Full Name' Stored Cross Site Scripting 13 WEB Mahendra Purbia
2021-01-27 Exploit Code Downloads   Openlitespeed Web Server 1.7.8 - Command Injection (Authenticated) (1) 15 WEB SunCSR
2021-01-27 Exploit Code Downloads   STVS ProVision 5.9.10 - Cross-Site Request Forgery (Add Admin) 15 WEB LiquidWorm
2021-01-27 Exploit Code Downloads   STVS ProVision 5.9.10 - File Disclosure (Authenticated) 17 WEB LiquidWorm
2021-01-26 Exploit Code Downloads   Oracle WebLogic Server 12.2.1.0 - RCE (Unauthenticated) 18 WEB CHackA0101
2021-01-26 Exploit Code Downloads   Tenda AC5 AC1200 Wireless - 'WiFi Name & Password' Stored Cross Site Scripting 17 WEB Chiragh Arora
2021-01-26 Exploit Code Downloads   Simple College Website 1.0 - 'full' Stored Cross Site Scripting 30 WEB Marco Catalano
2021-01-26 Exploit Code Downloads   Simple College Website 1.0 - 'name' Sql Injection (Authentication Bypass) 18 WEB Marco Catalano
2021-01-26 Exploit Code Downloads   Cemetry Mapping and Information System 1.0 - 'user_email' Sql Injection (Authentication Bypass) 15 WEB Marco Catalano
2021-01-25 Exploit Code Downloads   Klog Server 2.4.1 - Unauthenticated Command Injection (Metasploit) 13 WEB Metin Yunus Kandemir
2021-01-25 Exploit Code Downloads   Library System 1.0 - 'category' SQL Injection 20 WEB Aitor Herrero
2021-01-25 Exploit Code Downloads   CASAP Automated Enrollment System 1.0 - 'route' Stored XSS 18 WEB Richard Jones
2021-01-25 Exploit Code Downloads   CASAP Automated Enrollment System 1.0 - 'First Name' Stored XSS 20 WEB Anita Gaud
2021-01-25 Exploit Code Downloads   Collabtive 3.1 - 'address' Persistent Cross-Site Scripting 23 WEB Deha Berkin Bir
2021-01-25 Exploit Code Downloads   MyBB Timeline Plugin 1.0 - Persistent Cross-Site Scripting 18 WEB 0xB9
2021-01-22 Exploit Code Downloads   Atlassian Confluence Widget Connector Macro - SSTI 19 WEB 46o60
2021-01-22 Exploit Code Downloads   ERPNext 12.14.0 - SQL Injection (Authenticated) 21 WEB Hodorsec
2021-01-22 Exploit Code Downloads   CASAP Automated Enrollment System 1.0 - Authentication Bypass 26 WEB Himanshu Shukla
2021-01-22 Exploit Code Downloads   Library System 1.0 - Authentication Bypass 19 WEB Himanshu Shukla
2021-01-22 Exploit Code Downloads   Oracle WebLogic Server 14.1.1.0 - RCE (Authenticated) 18 WEB Photubias
2021-01-22 Exploit Code Downloads   Selea Targa IP OCR-ANPR Camera - 'addr' Remote Code Execution (Unauthenticated) 18 WEB LiquidWorm
2021-01-22 Exploit Code Downloads   Selea Targa 512 IP OCR-ANPR Camera - Stream Disclosure (Unauthenticated) 18 WEB LiquidWorm
2021-01-22 Exploit Code Downloads   Selea Targa IP OCR-ANPR Camera - CSRF Add Admin 17 WEB LiquidWorm
2021-01-22 Exploit Code Downloads   Selea Targa IP OCR-ANPR Camera - Multiple SSRF (Unauthenticated) 19 WEB LiquidWorm
2021-01-22 Exploit Code Downloads   Selea Targa IP OCR-ANPR Camera - Directory Traversal File Disclosure (Unauthenticated) 25 WEB LiquidWorm
2021-01-22 Exploit Code Downloads   Selea Targa IP OCR-ANPR Camera - Developer Backdoor Config Overwrite 18 WEB LiquidWorm
2021-01-22 Exploit Code Downloads   Selea Targa IP OCR-ANPR Camera - 'files_list' Remote Stored XSS 15 WEB LiquidWorm
2021-01-22 Exploit Code Downloads   Selea CarPlateServer (CPS) 4.0.1.6 - Remote Program Execution 19 WEB LiquidWorm
2021-01-21 Exploit Code Downloads   Anchor CMS 0.12.7 - CSRF (Delete user) 21 WEB Ninad Mishra
2021-01-21 Exploit Code Downloads   Wordpress Plugin Simple Job Board 2.9.3 - Authenticated File Read (Metasploit) 22 WEB SunCSR Team
2021-01-21 Exploit Code Downloads   Nagios XI 5.7.5 - Multiple Persistent Cross-Site Scripting 25 WEB Matthew Aberegg
2021-01-21 Exploit Code Downloads   Apartment Visitors Management System 1.0 - 'email' SQL Injection 20 WEB CANKAT ÇAKMAK
2021-01-21 Exploit Code Downloads   Online Documents Sharing Platform 1.0 - 'user' SQL Injection 17 WEB CANKAT ÇAKMAK
2021-01-20 Exploit Code Downloads   Voting System 1.0 - File Upload RCE (Authenticated Remote Code Execution) 19 WEB Richard Jones
2021-01-20 Exploit Code Downloads   Oracle Business Intelligence Enterprise Edition 11.1.1.7.140715 - Stored XSS 20 WEB omurugur
2021-01-20 Exploit Code Downloads   ChurchRota 2.6.4 - RCE (Authenticated) 17 WEB Rob McCarthy
2021-01-19 Exploit Code Downloads   osTicket 1.14.2 - SSRF 15 WEB Talat Mehmood
2021-01-18 Exploit Code Downloads   Life Insurance Management System 1.0 - File Upload RCE (Authenticated) 18 WEB Aitor Herrero
2021-01-18 Exploit Code Downloads   Life Insurance Management System 1.0 - 'client_id' SQL Injection 14 WEB Aitor Herrero
2021-01-18 Exploit Code Downloads   Xwiki CMS 12.10.2 - Cross Site Scripting (XSS) 15 WEB Karan Keswani
2021-01-18 Exploit Code Downloads   Cisco UCS Manager 2.2(1d) - Remote Command Execution 20 WEB liquidsky
2021-01-15 Exploit Code Downloads   Netsia SEBA+ 0.16.1 - Add Root User (Metasploit) 13 WEB AkkuS
2021-01-15 Exploit Code Downloads   E-Learning System 1.0 - Authentication Bypass 15 WEB Himanshu Shukla
2021-01-15 Exploit Code Downloads   Alumni Management System 1.0 - _Last Name field in Registration page_ Stored XSS 19 WEB Siva Rajendran
2021-01-15 Exploit Code Downloads   EyesOfNetwork 5.3 - File Upload Remote Code Execution 17 WEB Audencia Business SCHOOL Red Team
2021-01-15 Exploit Code Downloads   Online Hotel Reservation System 1.0 - 'person' time-based SQL Injection 15 WEB Mesut Cetin
2021-01-15 Exploit Code Downloads   Online Hotel Reservation System 1.0 - Cross-site request forgery (CSRF) 15 WEB Mesut Cetin
2021-01-15 Exploit Code Downloads   Online Hotel Reservation System 1.0 - 'id' Time-based SQL Injection 13 WEB Mesut Cetin
2021-01-15 Exploit Code Downloads   Online Hotel Reservation System 1.0 - 'description' Stored Cross-site Scripting 13 WEB Mesut Cetin
2021-01-15 Exploit Code Downloads   WordPress Plugin Easy Contact Form 1.1.7 - 'Name' Stored Cross-Site Scripting (XSS) 19 WEB Rahul Ramakant Singh
2021-01-15 Exploit Code Downloads   PHP-Fusion CMS 9.03.90 - Cross-Site Request Forgery (Delete admin shoutbox message) 13 WEB Mohamed Oosman
2021-01-14 Exploit Code Downloads   Laravel 8.4.2 debug mode - Remote code execution 14 WEB SunCSR Team
2021-01-14 Exploit Code Downloads   Online Shopping Cart System 1.0 - 'id' SQL Injection 15 WEB Aydın Baran Ertemir
2021-01-14 Exploit Code Downloads   Nagios XI 5.7.X - Remote Code Execution RCE (Authenticated) 12 WEB Haboob Team
2021-01-14 Exploit Code Downloads   Online Movie Streaming 1.0 - Admin Authentication Bypass 13 WEB Richard Jones
2021-01-13 Exploit Code Downloads   Online Hotel Reservation System 1.0 - Admin Authentication Bypass 16 WEB Richard Jones
2021-01-12 Exploit Code Downloads   SmartAgent 3.1.0 - Privilege Escalation 17 WEB Orion Hridoy
2021-01-12 Exploit Code Downloads   Cemetry Mapping and Information System 1.0 - Multiple SQL Injections 20 WEB Mesut Cetin
2021-01-12 Exploit Code Downloads   Gila CMS 2.0.0 - Remote Code Execution (Unauthenticated) 19 WEB Enesdex
2021-01-11 Exploit Code Downloads   Prestashop 1.7.7.0 - 'id_product' Time Based Blind SQL Injection 18 WEB Jaimin Gondaliya
2021-01-11 Exploit Code Downloads   OpenCart 3.0.36 - ATO via Cross Site Request Forgery 15 WEB Mahendra Purbia
2021-01-11 Exploit Code Downloads   WordPress Plugin Custom Global Variables 1.0.5 - 'name' Stored Cross-Site Scripting (XSS) 15 WEB Swapnil Subhash Bodekar
2021-01-11 Exploit Code Downloads   Cemetry Mapping and Information System 1.0 - Multiple Stored Cross-Site Scripting 15 WEB Mesut Cetin
2021-01-11 Exploit Code Downloads   EyesOfNetwork 5.3 - LFI 16 WEB Audencia Business SCHOOL Red Team
2021-01-11 Exploit Code Downloads   Anchor CMS 0.12.7 - 'markdown' Stored Cross-Site Scripting 18 WEB Ramazan Mert GÖKTEN
2021-01-11 Exploit Code Downloads   EyesOfNetwork 5.3 - RCE & PrivEsc 17 WEB Audencia Business SCHOOL Red Team
2021-01-08 Exploit Code Downloads   Wordpress Plugin wpDiscuz 7.0.4 - Unauthenticated Arbitrary File Upload (Metasploit) 20 WEB SunCSR Team
2021-01-08 Exploit Code Downloads   WordPress Plugin Autoptimize 2.7.6 - Authenticated Arbitrary File Upload (Metasploit) 13 WEB SunCSR Team
2021-01-08 Exploit Code Downloads   Apache Flink 1.11.0 - Unauthenticated Arbitrary File Read (Metasploit) 16 WEB SunCSR Team
2021-01-08 Exploit Code Downloads   Cockpit Version 234 - Server-Side Request Forgery (Unauthenticated) 12 WEB Metin Yunus Kandemir
2021-01-08 Exploit Code Downloads   Online Doctor Appointment System 1.0 - 'Multiple' Stored XSS 12 WEB Mohamed habib Smidi
2021-01-08 Exploit Code Downloads   Life Insurance Management System 1.0 - Multiple Stored XSS 14 WEB Arnav Tripathy
2021-01-07 Exploit Code Downloads   CRUD Operation 1.0 - Multiple Stored XSS 14 WEB Arnav Tripathy
2021-01-07 Exploit Code Downloads   ECSIMAGING PACS 6.21.5 - SQL injection 14 WEB shoxxdj
2021-01-07 Exploit Code Downloads   Curfew e-Pass Management System 1.0 - Stored XSS 15 WEB Arnav Tripathy
2021-01-07 Exploit Code Downloads   Cockpit CMS 0.6.1 - Remote Code Execution 13 WEB Rafael Resende
2021-01-07 Exploit Code Downloads   Employee Record System 1.0 - Unrestricted File Upload to Remote Code Execution 16 WEB Saeed Bala Ahmed
2021-01-07 Exploit Code Downloads   ECSIMAGING PACS 6.21.5 - Remote code execution 17 WEB shoxxdj
2021-01-07 Exploit Code Downloads   iBall-Baton WRA150N Rom-0 Backup - File Disclosure (Sensitive Information) 14 WEB h4cks1n
2021-01-06 Exploit Code Downloads   Sonatype Nexus 3.21.1 - Remote Code Execution (Authenticated) 20 WEB 1F98D
2021-01-06 Exploit Code Downloads   Gitea 1.7.5 - Remote Code Execution 30 WEB 1F98D
2021-01-06 Exploit Code Downloads   Resumes Management and Job Application Website 1.0 - RCE (Unauthenticated) 17 WEB Arnav Tripathy
2021-01-06 Exploit Code Downloads   Newgen Correspondence Management System (corms) eGov 12.0 - IDOR 20 WEB ALI AL SINAN
2021-01-06 Exploit Code Downloads   WordPress Plugin WP24 Domain Check 1.6.2 - 'fieldnameDomain' Stored Cross Site Scripting 18 WEB Mehmet Kelepçe
2021-01-06 Exploit Code Downloads   Responsive E-Learning System 1.0 - Stored Cross Site Scripting 15 WEB Kshitiz Raj
2021-01-06 Exploit Code Downloads   Responsive E-Learning System 1.0 - Unrestricted File Upload to RCE 14 WEB Kshitiz Raj
2021-01-06 Exploit Code Downloads   WordPress Plugin litespeed cache 3.6 - 'server_ip' Cross-Site Scripting 15 WEB Nhat Ha
2021-01-06 Exploit Code Downloads   Expense Tracker 1.0 - 'Expense Name' Stored Cross-Site Scripting 16 WEB Shivam Verma
2021-01-06 Exploit Code Downloads   IPeakCMS 3.5 - Boolean-based blind SQLi 19 WEB MoeAlBarbari
2021-01-06 Exploit Code Downloads   Advanced Webhost Billing System 3.7.0 - Cross-Site Request Forgery (CSRF) 14 WEB Rahul Ramakant Singh
2021-01-05 Exploit Code Downloads   EgavilanMedia User Registration & Login System with Admin Panel 1.0 - Persistent Cross-Site Scriptin 15 WEB Mesut Cetin
2021-01-05 Exploit Code Downloads   Klog Server 2.4.1 - Command Injection (Unauthenticated) 13 WEB B3KC4T
2021-01-05 Exploit Code Downloads   Online Learning Management System 1.0 - RCE (Authenticated) 21 WEB Bedri Sertkaya
2021-01-05 Exploit Code Downloads   CSZ CMS 1.2.9 - Multiple Cross-Site Scripting 16 WEB SunCSR
2021-01-05 Exploit Code Downloads   Cassandra Web 0.5.0 - Remote File Read 17 WEB Jeremy Brown
2021-01-05 Exploit Code Downloads   HPE Edgeline Infrastructure Manager 1.0 - Multiple Remote Vulnerabilities 14 WEB Jeremy Brown
2021-01-05 Exploit Code Downloads   Zoom Meeting Connector 4.6.239.20200613 - Remote Root Exploit (Authenticated) 15 WEB Jeremy Brown
2021-01-05 Exploit Code Downloads   Responsive FileManager 9.13.4 - 'path' Path Traversal 13 WEB Sun* Cyber Security Research Team
2021-01-05 Exploit Code Downloads   Baby Care System 1.0 - 'Post title' Stored XSS 14 WEB Hardik Solanki
2021-01-05 Exploit Code Downloads   Responsive E-Learning System 1.0 - 'id' Sql Injection 15 WEB Kshitiz Raj
2021-01-05 Exploit Code Downloads   Online Movie Streaming 1.0 - Authentication Bypass 15 WEB Kshitiz Raj
2021-01-05 Exploit Code Downloads   WordPress Plugin WP-Paginate 2.1.3 - 'preset' Stored XSS 17 WEB Park Won Seok
2021-01-05 Exploit Code Downloads   WordPress Plugin Stripe Payments 2.0.39 - 'AcceptStripePayments-settings[currency_code]' Stored XSS 18 WEB Park Won Seok
2021-01-05 Exploit Code Downloads   Resumes Management and Job Application Website 1.0 - Authentication Bypass 14 WEB Kshitiz Raj
2021-01-05 Exploit Code Downloads   IncomCMS 2.0 - Insecure File Upload 18 WEB MoeAlBarbari
2021-01-04 Exploit Code Downloads   Arteco Web Client DVR/NVR - 'SessionId' Brute Force 17 WEB LiquidWorm
2021-01-04 Exploit Code Downloads   Click2Magic 1.1.5 - Stored Cross-Site Scripting 17 WEB Shivam Verma
2021-01-04 Exploit Code Downloads   Subrion CMS 4.2.1 - 'avatar[path]' XSS 15 WEB icekam
2021-01-04 Exploit Code Downloads   CMS Made Simple 2.2.15 - RCE (Authenticated) 12 WEB Andrey Stoykov