Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2021-01-26   Cemetry Mapping and Information System 1.0 - 'user_email' Sql Injection (Authentication Bypass) 27 WEB Marco Catalano
2021-01-25   Klog Server 2.4.1 - Unauthenticated Command Injection (Metasploit) 26 WEB Metin Yunus Kandemir
2021-01-25   Library System 1.0 - 'category' SQL Injection 33 WEB Aitor Herrero
2021-01-25   CASAP Automated Enrollment System 1.0 - 'route' Stored XSS 31 WEB Richard Jones
2021-01-25   CASAP Automated Enrollment System 1.0 - 'First Name' Stored XSS 37 WEB Anita Gaud
2021-01-25   Collabtive 3.1 - 'address' Persistent Cross-Site Scripting 36 WEB Deha Berkin Bir
2021-01-25   MyBB Timeline Plugin 1.0 - Persistent Cross-Site Scripting 33 WEB 0xB9
2021-01-22   Atlassian Confluence Widget Connector Macro - SSTI 32 WEB 46o60
2021-01-22   ERPNext 12.14.0 - SQL Injection (Authenticated) 34 WEB Hodorsec
2021-01-22   CASAP Automated Enrollment System 1.0 - Authentication Bypass 38 WEB Himanshu Shukla
2021-01-22   Library System 1.0 - Authentication Bypass 32 WEB Himanshu Shukla
2021-01-22   Oracle WebLogic Server 14.1.1.0 - RCE (Authenticated) 34 WEB Photubias
2021-01-22   Selea Targa IP OCR-ANPR Camera - 'addr' Remote Code Execution (Unauthenticated) 33 WEB LiquidWorm
2021-01-22   Selea Targa 512 IP OCR-ANPR Camera - Stream Disclosure (Unauthenticated) 35 WEB LiquidWorm
2021-01-22   Selea Targa IP OCR-ANPR Camera - CSRF Add Admin 32 WEB LiquidWorm
2021-01-22   Selea Targa IP OCR-ANPR Camera - Multiple SSRF (Unauthenticated) 35 WEB LiquidWorm
2021-01-22   Selea Targa IP OCR-ANPR Camera - Directory Traversal File Disclosure (Unauthenticated) 43 WEB LiquidWorm
2021-01-22   Selea Targa IP OCR-ANPR Camera - Developer Backdoor Config Overwrite 38 WEB LiquidWorm
2021-01-22   Selea Targa IP OCR-ANPR Camera - 'files_list' Remote Stored XSS 29 WEB LiquidWorm
2021-01-22   Selea CarPlateServer (CPS) 4.0.1.6 - Remote Program Execution 38 WEB LiquidWorm
2021-01-21   Anchor CMS 0.12.7 - CSRF (Delete user) 48 WEB Ninad Mishra
2021-01-21   Wordpress Plugin Simple Job Board 2.9.3 - Authenticated File Read (Metasploit) 49 WEB SunCSR Team
2021-01-21   Nagios XI 5.7.5 - Multiple Persistent Cross-Site Scripting 41 WEB Matthew Aberegg
2021-01-21   Apartment Visitors Management System 1.0 - 'email' SQL Injection 38 WEB CANKAT ÇAKMAK
2021-01-21   Online Documents Sharing Platform 1.0 - 'user' SQL Injection 35 WEB CANKAT ÇAKMAK
2021-01-20   Voting System 1.0 - File Upload RCE (Authenticated Remote Code Execution) 34 WEB Richard Jones
2021-01-20   Oracle Business Intelligence Enterprise Edition 11.1.1.7.140715 - Stored XSS 35 WEB omurugur
2021-01-20   ChurchRota 2.6.4 - RCE (Authenticated) 34 WEB Rob McCarthy
2021-01-19   osTicket 1.14.2 - SSRF 30 WEB Talat Mehmood
2021-01-18   Life Insurance Management System 1.0 - File Upload RCE (Authenticated) 32 WEB Aitor Herrero
2021-01-18   Life Insurance Management System 1.0 - 'client_id' SQL Injection 29 WEB Aitor Herrero
2021-01-18   Xwiki CMS 12.10.2 - Cross Site Scripting (XSS) 28 WEB Karan Keswani
2021-01-18   Cisco UCS Manager 2.2(1d) - Remote Command Execution 35 WEB liquidsky
2021-01-15   Netsia SEBA+ 0.16.1 - Add Root User (Metasploit) 28 WEB AkkuS
2021-01-15   E-Learning System 1.0 - Authentication Bypass 31 WEB Himanshu Shukla
2021-01-15   Alumni Management System 1.0 - _Last Name field in Registration page_ Stored XSS 34 WEB Siva Rajendran
2021-01-15   EyesOfNetwork 5.3 - File Upload Remote Code Execution 33 WEB Audencia Business SCHOOL Red Team
2021-01-15   Online Hotel Reservation System 1.0 - 'person' time-based SQL Injection 30 WEB Mesut Cetin
2021-01-15   Online Hotel Reservation System 1.0 - Cross-site request forgery (CSRF) 29 WEB Mesut Cetin
2021-01-15   Online Hotel Reservation System 1.0 - 'id' Time-based SQL Injection 29 WEB Mesut Cetin
2021-01-15   Online Hotel Reservation System 1.0 - 'description' Stored Cross-site Scripting 29 WEB Mesut Cetin
2021-01-15   WordPress Plugin Easy Contact Form 1.1.7 - 'Name' Stored Cross-Site Scripting (XSS) 33 WEB Rahul Ramakant Singh
2021-01-15   PHP-Fusion CMS 9.03.90 - Cross-Site Request Forgery (Delete admin shoutbox message) 29 WEB Mohamed Oosman
2021-01-14   Laravel 8.4.2 debug mode - Remote code execution 30 WEB SunCSR Team
2021-01-14   Online Shopping Cart System 1.0 - 'id' SQL Injection 31 WEB Aydın Baran Ertemir
2021-01-14   Nagios XI 5.7.X - Remote Code Execution RCE (Authenticated) 30 WEB Haboob Team
2021-01-14   Online Movie Streaming 1.0 - Admin Authentication Bypass 30 WEB Richard Jones
2021-01-13   Online Hotel Reservation System 1.0 - Admin Authentication Bypass 33 WEB Richard Jones
2021-01-12   SmartAgent 3.1.0 - Privilege Escalation 36 WEB Orion Hridoy
2021-01-12   Cemetry Mapping and Information System 1.0 - Multiple SQL Injections 35 WEB Mesut Cetin
2021-01-12   Gila CMS 2.0.0 - Remote Code Execution (Unauthenticated) 37 WEB Enesdex
2021-01-11   Prestashop 1.7.7.0 - 'id_product' Time Based Blind SQL Injection 32 WEB Jaimin Gondaliya
2021-01-11   OpenCart 3.0.36 - ATO via Cross Site Request Forgery 32 WEB Mahendra Purbia
2021-01-11   WordPress Plugin Custom Global Variables 1.0.5 - 'name' Stored Cross-Site Scripting (XSS) 33 WEB Swapnil Subhash Bodekar
2021-01-11   Cemetry Mapping and Information System 1.0 - Multiple Stored Cross-Site Scripting 32 WEB Mesut Cetin
2021-01-11   EyesOfNetwork 5.3 - LFI 32 WEB Audencia Business SCHOOL Red Team
2021-01-11   Anchor CMS 0.12.7 - 'markdown' Stored Cross-Site Scripting 34 WEB Ramazan Mert GÖKTEN
2021-01-11   EyesOfNetwork 5.3 - RCE & PrivEsc 35 WEB Audencia Business SCHOOL Red Team
2021-01-08   Wordpress Plugin wpDiscuz 7.0.4 - Unauthenticated Arbitrary File Upload (Metasploit) 36 WEB SunCSR Team
2021-01-08   WordPress Plugin Autoptimize 2.7.6 - Authenticated Arbitrary File Upload (Metasploit) 29 WEB SunCSR Team
2021-01-08   Apache Flink 1.11.0 - Unauthenticated Arbitrary File Read (Metasploit) 33 WEB SunCSR Team
2021-01-08   Cockpit Version 234 - Server-Side Request Forgery (Unauthenticated) 29 WEB Metin Yunus Kandemir
2021-01-08   Online Doctor Appointment System 1.0 - 'Multiple' Stored XSS 29 WEB Mohamed habib Smidi
2021-01-08   Life Insurance Management System 1.0 - Multiple Stored XSS 32 WEB Arnav Tripathy
2021-01-07   CRUD Operation 1.0 - Multiple Stored XSS 28 WEB Arnav Tripathy
2021-01-07   ECSIMAGING PACS 6.21.5 - SQL injection 33 WEB shoxxdj
2021-01-07   Curfew e-Pass Management System 1.0 - Stored XSS 31 WEB Arnav Tripathy
2021-01-07   Cockpit CMS 0.6.1 - Remote Code Execution 31 WEB Rafael Resende
2021-01-07   Employee Record System 1.0 - Unrestricted File Upload to Remote Code Execution 34 WEB Saeed Bala Ahmed
2021-01-07   ECSIMAGING PACS 6.21.5 - Remote code execution 29 WEB shoxxdj
2021-01-07   iBall-Baton WRA150N Rom-0 Backup - File Disclosure (Sensitive Information) 31 WEB h4cks1n
2021-01-06   Sonatype Nexus 3.21.1 - Remote Code Execution (Authenticated) 35 WEB 1F98D
2021-01-06   Gitea 1.7.5 - Remote Code Execution 46 WEB 1F98D
2021-01-06   Resumes Management and Job Application Website 1.0 - RCE (Unauthenticated) 33 WEB Arnav Tripathy
2021-01-06   Newgen Correspondence Management System (corms) eGov 12.0 - IDOR 37 WEB ALI AL SINAN
2021-01-06   WordPress Plugin WP24 Domain Check 1.6.2 - 'fieldnameDomain' Stored Cross Site Scripting 36 WEB Mehmet Kelepçe
2021-01-06   Responsive E-Learning System 1.0 - Stored Cross Site Scripting 30 WEB Kshitiz Raj
2021-01-06   Responsive E-Learning System 1.0 - Unrestricted File Upload to RCE 33 WEB Kshitiz Raj
2021-01-06   WordPress Plugin litespeed cache 3.6 - 'server_ip' Cross-Site Scripting 35 WEB Nhat Ha
2021-01-06   Expense Tracker 1.0 - 'Expense Name' Stored Cross-Site Scripting 36 WEB Shivam Verma
2021-01-06   IPeakCMS 3.5 - Boolean-based blind SQLi 34 WEB MoeAlBarbari
2021-01-06   Advanced Webhost Billing System 3.7.0 - Cross-Site Request Forgery (CSRF) 30 WEB Rahul Ramakant Singh
2021-01-05   EgavilanMedia User Registration & Login System with Admin Panel 1.0 - Persistent Cross-Site Scriptin 35 WEB Mesut Cetin
2021-01-05   Klog Server 2.4.1 - Command Injection (Unauthenticated) 29 WEB B3KC4T
2021-01-05   Online Learning Management System 1.0 - RCE (Authenticated) 35 WEB Bedri Sertkaya
2021-01-05   CSZ CMS 1.2.9 - Multiple Cross-Site Scripting 33 WEB SunCSR
2021-01-05   Cassandra Web 0.5.0 - Remote File Read 30 WEB Jeremy Brown
2021-01-05   HPE Edgeline Infrastructure Manager 1.0 - Multiple Remote Vulnerabilities 29 WEB Jeremy Brown
2021-01-05   Zoom Meeting Connector 4.6.239.20200613 - Remote Root Exploit (Authenticated) 34 WEB Jeremy Brown
2021-01-05   Responsive FileManager 9.13.4 - 'path' Path Traversal 32 WEB Sun* Cyber Security Research Team
2021-01-05   Baby Care System 1.0 - 'Post title' Stored XSS 31 WEB Hardik Solanki
2021-01-05   Responsive E-Learning System 1.0 - 'id' Sql Injection 33 WEB Kshitiz Raj
2021-01-05   Online Movie Streaming 1.0 - Authentication Bypass 33 WEB Kshitiz Raj
2021-01-05   WordPress Plugin WP-Paginate 2.1.3 - 'preset' Stored XSS 32 WEB Park Won Seok
2021-01-05   WordPress Plugin Stripe Payments 2.0.39 - 'AcceptStripePayments-settings[currency_code]' Stored XSS 33 WEB Park Won Seok
2021-01-05   Resumes Management and Job Application Website 1.0 - Authentication Bypass 29 WEB Kshitiz Raj
2021-01-05   IncomCMS 2.0 - Insecure File Upload 33 WEB MoeAlBarbari
2021-01-04   Arteco Web Client DVR/NVR - 'SessionId' Brute Force 31 WEB LiquidWorm
2021-01-04   Click2Magic 1.1.5 - Stored Cross-Site Scripting 35 WEB Shivam Verma
2021-01-04   Subrion CMS 4.2.1 - 'avatar[path]' XSS 32 WEB icekam
2021-01-04   CMS Made Simple 2.2.15 - RCE (Authenticated) 30 WEB Andrey Stoykov
2021-01-04   sar2html 3.2.1 - 'plot' Remote Code Execution 33 WEB Musyoka Ian
2021-01-04   Advanced Comment System 1.0 - 'ACS_path' Path Traversal 32 WEB Francisco Javier Santiago Vázquez
2021-01-04   Mantis Bug Tracker 2.24.3 - 'access' SQL Injection 31 WEB EthicalHCOP
2021-01-04   4images v1.7.11 - 'Profile Image' Stored Cross-Site Scripting 37 WEB Ritesh Gohil
2021-01-04   Wordpress Core 5.2.2 - 'post previews' XSS 41 WEB gx1
2020-12-24   Apartment Visitors Management System 1.0 - Authentication Bypass 38 WEB Kshitiz Raj
2020-12-24   GitLab 11.4.7 - RCE (Authenticated) (2) 35 WEB Norbert Hofmann
2020-12-24   WordPress Plugin WP-PostRatings 1.86 - 'postratings_image' Cross-Site Scripting 34 WEB Park Won Seok
2020-12-24   WordPress Plugin Adning Advertising 1.5.5 - Arbitrary File Upload 35 WEB spacehen
2020-12-23   Baby Care System 1.0 - 'roleid' SQL Injection 31 WEB Vijay Sachdeva
2020-12-23   TerraMaster TOS 4.2.06 - Unauthenticated Remote Code Execution (Metasploit) 33 WEB AkkuS
2020-12-23   Sales and Inventory System for Grocery Store 1.0 - Multiple Stored XSS 31 WEB Vijay Sachdeva
2020-12-23   Wordpress Epsilon Framework Multiple Themes - Unauthenticated Function Injection 51 WEB gx1
2020-12-23   Online Learning Management System 1.0 - 'id' SQL Injection 34 WEB Aakash Madaan
2020-12-23   Online Learning Management System 1.0 - Multiple Stored XSS 31 WEB Aakash Madaan
2020-12-23   Online Learning Management System 1.0 - Authentication Bypass 34 WEB Aakash Madaan
2020-12-23   Class Scheduling System 1.0 - Multiple Stored XSS 35 WEB Aakash Madaan
2020-12-22   TerraMaster TOS 4.2.06 - RCE (Unauthenticated) 35 WEB IHTeam
2020-12-22   Faculty Evaluation System 1.0 - Stored XSS 33 WEB Vijay Sachdeva
2020-12-22   Artworks Gallery Management System 1.0 - 'id' SQL Injection 32 WEB Vijay Sachdeva
2020-12-22   Webmin 1.962 - 'Package Updates' Escape Bypass RCE (Metasploit) 34 WEB AkkuS
2020-12-22   WordPress Plugin W3 Total Cache - Unauthenticated Arbitrary File Read (Metasploit) 30 WEB SunCSR Team
2020-12-22   Multi Branch School Management System 3.5 - _Create Branch_ Stored XSS 39 WEB Kislay Kumar
2020-12-22   Library Management System 3.0 - _Add Category_ Stored XSS 32 WEB Kislay Kumar