Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2021-01-11 Exploit Code Downloads   Anchor CMS 0.12.7 - 'markdown' Stored Cross-Site Scripting 25 WEB Ramazan Mert GÖKTEN
2021-01-11 Exploit Code Downloads   EyesOfNetwork 5.3 - RCE & PrivEsc 24 WEB Audencia Business SCHOOL Red Team
2021-01-08 Exploit Code Downloads   Wordpress Plugin wpDiscuz 7.0.4 - Unauthenticated Arbitrary File Upload (Metasploit) 27 WEB SunCSR Team
2021-01-08 Exploit Code Downloads   WordPress Plugin Autoptimize 2.7.6 - Authenticated Arbitrary File Upload (Metasploit) 19 WEB SunCSR Team
2021-01-08 Exploit Code Downloads   Apache Flink 1.11.0 - Unauthenticated Arbitrary File Read (Metasploit) 22 WEB SunCSR Team
2021-01-08 Exploit Code Downloads   Cockpit Version 234 - Server-Side Request Forgery (Unauthenticated) 18 WEB Metin Yunus Kandemir
2021-01-08 Exploit Code Downloads   Online Doctor Appointment System 1.0 - 'Multiple' Stored XSS 20 WEB Mohamed habib Smidi
2021-01-08 Exploit Code Downloads   Life Insurance Management System 1.0 - Multiple Stored XSS 21 WEB Arnav Tripathy
2021-01-07 Exploit Code Downloads   CRUD Operation 1.0 - Multiple Stored XSS 21 WEB Arnav Tripathy
2021-01-07 Exploit Code Downloads   ECSIMAGING PACS 6.21.5 - SQL injection 22 WEB shoxxdj
2021-01-07 Exploit Code Downloads   Curfew e-Pass Management System 1.0 - Stored XSS 22 WEB Arnav Tripathy
2021-01-07 Exploit Code Downloads   Cockpit CMS 0.6.1 - Remote Code Execution 21 WEB Rafael Resende
2021-01-07 Exploit Code Downloads   Employee Record System 1.0 - Unrestricted File Upload to Remote Code Execution 22 WEB Saeed Bala Ahmed
2021-01-07 Exploit Code Downloads   ECSIMAGING PACS 6.21.5 - Remote code execution 21 WEB shoxxdj
2021-01-07 Exploit Code Downloads   iBall-Baton WRA150N Rom-0 Backup - File Disclosure (Sensitive Information) 21 WEB h4cks1n
2021-01-06 Exploit Code Downloads   Sonatype Nexus 3.21.1 - Remote Code Execution (Authenticated) 27 WEB 1F98D
2021-01-06 Exploit Code Downloads   Gitea 1.7.5 - Remote Code Execution 38 WEB 1F98D
2021-01-06 Exploit Code Downloads   Resumes Management and Job Application Website 1.0 - RCE (Unauthenticated) 23 WEB Arnav Tripathy
2021-01-06 Exploit Code Downloads   Newgen Correspondence Management System (corms) eGov 12.0 - IDOR 27 WEB ALI AL SINAN
2021-01-06 Exploit Code Downloads   WordPress Plugin WP24 Domain Check 1.6.2 - 'fieldnameDomain' Stored Cross Site Scripting 24 WEB Mehmet Kelepçe
2021-01-06 Exploit Code Downloads   Responsive E-Learning System 1.0 - Stored Cross Site Scripting 20 WEB Kshitiz Raj
2021-01-06 Exploit Code Downloads   Responsive E-Learning System 1.0 - Unrestricted File Upload to RCE 25 WEB Kshitiz Raj
2021-01-06 Exploit Code Downloads   WordPress Plugin litespeed cache 3.6 - 'server_ip' Cross-Site Scripting 23 WEB Nhat Ha
2021-01-06 Exploit Code Downloads   Expense Tracker 1.0 - 'Expense Name' Stored Cross-Site Scripting 26 WEB Shivam Verma
2021-01-06 Exploit Code Downloads   IPeakCMS 3.5 - Boolean-based blind SQLi 25 WEB MoeAlBarbari
2021-01-06 Exploit Code Downloads   Advanced Webhost Billing System 3.7.0 - Cross-Site Request Forgery (CSRF) 21 WEB Rahul Ramakant Singh
2021-01-05 Exploit Code Downloads   EgavilanMedia User Registration & Login System with Admin Panel 1.0 - Persistent Cross-Site Scriptin 25 WEB Mesut Cetin
2021-01-05 Exploit Code Downloads   Klog Server 2.4.1 - Command Injection (Unauthenticated) 20 WEB B3KC4T
2021-01-05 Exploit Code Downloads   Online Learning Management System 1.0 - RCE (Authenticated) 26 WEB Bedri Sertkaya
2021-01-05 Exploit Code Downloads   CSZ CMS 1.2.9 - Multiple Cross-Site Scripting 22 WEB SunCSR
2021-01-05 Exploit Code Downloads   Cassandra Web 0.5.0 - Remote File Read 22 WEB Jeremy Brown
2021-01-05 Exploit Code Downloads   HPE Edgeline Infrastructure Manager 1.0 - Multiple Remote Vulnerabilities 20 WEB Jeremy Brown
2021-01-05 Exploit Code Downloads   Zoom Meeting Connector 4.6.239.20200613 - Remote Root Exploit (Authenticated) 25 WEB Jeremy Brown
2021-01-05 Exploit Code Downloads   Responsive FileManager 9.13.4 - 'path' Path Traversal 20 WEB Sun* Cyber Security Research Team
2021-01-05 Exploit Code Downloads   Baby Care System 1.0 - 'Post title' Stored XSS 19 WEB Hardik Solanki
2021-01-05 Exploit Code Downloads   Responsive E-Learning System 1.0 - 'id' Sql Injection 26 WEB Kshitiz Raj
2021-01-05 Exploit Code Downloads   Online Movie Streaming 1.0 - Authentication Bypass 23 WEB Kshitiz Raj
2021-01-05 Exploit Code Downloads   WordPress Plugin WP-Paginate 2.1.3 - 'preset' Stored XSS 23 WEB Park Won Seok
2021-01-05 Exploit Code Downloads   WordPress Plugin Stripe Payments 2.0.39 - 'AcceptStripePayments-settings[currency_code]' Stored XSS 25 WEB Park Won Seok
2021-01-05 Exploit Code Downloads   Resumes Management and Job Application Website 1.0 - Authentication Bypass 20 WEB Kshitiz Raj
2021-01-05 Exploit Code Downloads   IncomCMS 2.0 - Insecure File Upload 23 WEB MoeAlBarbari
2021-01-04 Exploit Code Downloads   Arteco Web Client DVR/NVR - 'SessionId' Brute Force 23 WEB LiquidWorm
2021-01-04 Exploit Code Downloads   Click2Magic 1.1.5 - Stored Cross-Site Scripting 28 WEB Shivam Verma
2021-01-04 Exploit Code Downloads   Subrion CMS 4.2.1 - 'avatar[path]' XSS 23 WEB icekam
2021-01-04 Exploit Code Downloads   CMS Made Simple 2.2.15 - RCE (Authenticated) 18 WEB Andrey Stoykov
2021-01-04 Exploit Code Downloads   sar2html 3.2.1 - 'plot' Remote Code Execution 24 WEB Musyoka Ian
2021-01-04 Exploit Code Downloads   Advanced Comment System 1.0 - 'ACS_path' Path Traversal 23 WEB Francisco Javier Santiago Vázquez
2021-01-04 Exploit Code Downloads   Mantis Bug Tracker 2.24.3 - 'access' SQL Injection 25 WEB EthicalHCOP
2021-01-04 Exploit Code Downloads   4images v1.7.11 - 'Profile Image' Stored Cross-Site Scripting 28 WEB Ritesh Gohil
2021-01-04 Exploit Code Downloads   Wordpress Core 5.2.2 - 'post previews' XSS 31 WEB gx1
2020-12-24 Exploit Code Downloads   Apartment Visitors Management System 1.0 - Authentication Bypass 28 WEB Kshitiz Raj
2020-12-24 Exploit Code Downloads   GitLab 11.4.7 - RCE (Authenticated) (2) 25 WEB Norbert Hofmann
2020-12-24 Exploit Code Downloads   WordPress Plugin WP-PostRatings 1.86 - 'postratings_image' Cross-Site Scripting 26 WEB Park Won Seok
2020-12-24 Exploit Code Downloads   WordPress Plugin Adning Advertising 1.5.5 - Arbitrary File Upload 25 WEB spacehen
2020-12-23 Exploit Code Downloads   Baby Care System 1.0 - 'roleid' SQL Injection 22 WEB Vijay Sachdeva
2020-12-23 Exploit Code Downloads   TerraMaster TOS 4.2.06 - Unauthenticated Remote Code Execution (Metasploit) 24 WEB AkkuS
2020-12-23 Exploit Code Downloads   Sales and Inventory System for Grocery Store 1.0 - Multiple Stored XSS 20 WEB Vijay Sachdeva
2020-12-23 Exploit Code Downloads   Wordpress Epsilon Framework Multiple Themes - Unauthenticated Function Injection 42 WEB gx1
2020-12-23 Exploit Code Downloads   Online Learning Management System 1.0 - 'id' SQL Injection 25 WEB Aakash Madaan
2020-12-23 Exploit Code Downloads   Online Learning Management System 1.0 - Multiple Stored XSS 21 WEB Aakash Madaan
2020-12-23 Exploit Code Downloads   Online Learning Management System 1.0 - Authentication Bypass 26 WEB Aakash Madaan
2020-12-23 Exploit Code Downloads   Class Scheduling System 1.0 - Multiple Stored XSS 27 WEB Aakash Madaan
2020-12-22 Exploit Code Downloads   TerraMaster TOS 4.2.06 - RCE (Unauthenticated) 28 WEB IHTeam
2020-12-22 Exploit Code Downloads   Faculty Evaluation System 1.0 - Stored XSS 25 WEB Vijay Sachdeva
2020-12-22 Exploit Code Downloads   Artworks Gallery Management System 1.0 - 'id' SQL Injection 24 WEB Vijay Sachdeva
2020-12-22 Exploit Code Downloads   Webmin 1.962 - 'Package Updates' Escape Bypass RCE (Metasploit) 23 WEB AkkuS
2020-12-22 Exploit Code Downloads   WordPress Plugin W3 Total Cache - Unauthenticated Arbitrary File Read (Metasploit) 22 WEB SunCSR Team
2020-12-22 Exploit Code Downloads   Multi Branch School Management System 3.5 - _Create Branch_ Stored XSS 30 WEB Kislay Kumar
2020-12-22 Exploit Code Downloads   Library Management System 3.0 - _Add Category_ Stored XSS 24 WEB Kislay Kumar
2020-12-22 Exploit Code Downloads   CSE Bookstore 1.0 - Multiple SQL Injection 35 WEB Musyoka Ian
2020-12-22 Exploit Code Downloads   Pandora FMS 7.0 NG 750 - 'Network Scan' SQL Injection (Authenticated) 27 WEB Matthew Aberegg
2020-12-22 Exploit Code Downloads   Victor CMS 1.0 - File Upload To RCE 29 WEB Mosaaed
2020-12-16 Exploit Code Downloads   Sony Playstation 4 (PS4) < 7.02 - 'ValidationMessage::buildBubbleTree()' Use-After-Free WebKit Code 21 WEB ChendoChap
2020-11-12 Exploit Code Downloads   Sony Playstation 4 (PS4) < 6.72 - 'ValidationMessage::buildBubbleTree()' Use-After-Free WebKit Code 17 WEB Synacktiv
2020-12-21 Exploit Code Downloads   Online Marriage Registration System 1.0 - 'searchdata' SQL Injection 23 WEB Raffaele Sabato
2020-12-21 Exploit Code Downloads   Point of Sale System 1.0 - Multiple Stored XSS 20 WEB Saeed Bala Ahmed
2020-12-21 Exploit Code Downloads   Flexmonster Pivot Table & Charts 2.7.17 - 'Remote JSON' Reflected XSS 20 WEB Marco Nappi
2020-12-21 Exploit Code Downloads   Flexmonster Pivot Table & Charts 2.7.17 - 'To remote CSV' Reflected XSS 22 WEB Marco Nappi
2020-12-21 Exploit Code Downloads   Flexmonster Pivot Table & Charts 2.7.17 - 'To OLAP' Reflected XSS 22 WEB Marco Nappi
2020-12-21 Exploit Code Downloads   Flexmonster Pivot Table & Charts 2.7.17 - 'Remote Report' Reflected XSS 23 WEB Marco Nappi
2020-12-21 Exploit Code Downloads   SCO Openserver 5.0.7 - 'outputform' Command Injection 23 WEB Ramikan
2020-12-21 Exploit Code Downloads   SCO Openserver 5.0.7 - 'section' Reflected XSS 19 WEB Ramikan
2020-12-21 Exploit Code Downloads   Spiceworks 7.5 - HTTP Header Injection 26 WEB Ramikan
2020-12-21 Exploit Code Downloads   Academy-LMS 4.3 - Stored XSS 20 WEB Vinicius Alves
2020-12-21 Exploit Code Downloads   Spotweb 1.4.9 - 'search' SQL Injection 26 WEB BouSalman
2020-12-21 Exploit Code Downloads   Queue Management System 4.0.0 - _Add User_ Stored XSS 26 WEB Kislay Kumar
2020-12-18 Exploit Code Downloads   Xeroneit Library Management System 3.1 - _Add Book Category _ Stored XSS 26 WEB Kislay Kumar
2020-12-18 Exploit Code Downloads   SyncBreeze 10.0.28 - 'login' Denial of Service (Poc) 25 WEB Ahmed Elkhressy
2020-12-18 Exploit Code Downloads   Smart Hospital 3.1 - _Add Patient_ Stored XSS 30 WEB Kislay Kumar
2020-12-18 Exploit Code Downloads   Wordpress Plugin Duplicator 1.3.26 - Unauthenticated Arbitrary File Read (Metasploit) 25 WEB SunCSR Team
2020-12-18 Exploit Code Downloads   Alumni Management System 1.0 - 'id' SQL Injection 27 WEB Aakash Madaan
2020-12-18 Exploit Code Downloads   Alumni Management System 1.0 - _Course Form_ Stored XSS 30 WEB Aakash Madaan
2020-12-18 Exploit Code Downloads   Alumni Management System 1.0 - Unrestricted File Upload To RCE 30 WEB Aakash Madaan
2020-12-18 Exploit Code Downloads   Point of Sale System 1.0 - Authentication Bypass 27 WEB Saeed Bala Ahmed
2020-12-17 Exploit Code Downloads   Victor CMS 1.0 - Multiple SQL Injection (Authenticated) 29 WEB Furkan Göksel
2020-12-17 Exploit Code Downloads   PHPJabbers Appointment Scheduler 2.3 - Reflected XSS (Cross-Site Scripting) 31 WEB Andrea Intilangelo
2020-12-17 Exploit Code Downloads   Employee Record System 1.0 - Multiple Stored XSS 25 WEB Saeed Bala Ahmed
2020-12-17 Exploit Code Downloads   Interview Management System 1.0 - 'id' SQL Injection 24 WEB Saeed Bala Ahmed
2020-12-17 Exploit Code Downloads   Interview Management System 1.0 - Stored XSS in Add New Question 20 WEB Saeed Bala Ahmed
2020-12-17 Exploit Code Downloads   Online Tours & Travels Management System 1.0 - _id_ SQL Injection 27 WEB Saeed Bala Ahmed
2020-12-17 Exploit Code Downloads   Customer Support System 1.0 - 'id' SQL Injection 23 WEB Saeed Bala Ahmed
2020-12-17 Exploit Code Downloads   Customer Support System 1.0 - _First Name_ & _Last Name_ Stored XSS 24 WEB Saeed Bala Ahmed
2020-12-17 Exploit Code Downloads   Medical Center Portal Management System 1.0 - 'id' SQL Injection 25 WEB Saeed Bala Ahmed
2020-12-17 Exploit Code Downloads   Content Management System 1.0 - 'id' SQL Injection 24 WEB Zhaiyi
2020-12-17 Exploit Code Downloads   Content Management System 1.0 - 'email' SQL Injection 24 WEB Zhaiyi
2020-12-17 Exploit Code Downloads   Content Management System 1.0 - 'First Name' Stored XSS 26 WEB Zhaiyi
2020-12-17 Exploit Code Downloads   Linksys RE6500 1.0.11.001 - Unauthenticated RCE 29 WEB RE-Solver
2020-12-17 Exploit Code Downloads   Dolibarr ERP-CRM 12.0.3 - Remote Code Execution (Authenticated) 24 WEB Yilmaz Degirmenci
2020-12-16 Exploit Code Downloads   Seotoaster 3.2.0 - Stored XSS on Edit page properties 24 WEB Hardik Solanki
2020-12-16 Exploit Code Downloads   PrestaShop ProductComments 4.2.0 - 'id_products' Time Based Blind SQL Injection 25 WEB Frederic ADAM
2020-12-16 Exploit Code Downloads   Magic Home Pro 1.5.1 - Authentication Bypass 27 WEB Victor Hanna
2020-12-16 Exploit Code Downloads   Raysync 3.3.3.8 - RCE 27 WEB james
2020-12-16 Exploit Code Downloads   Grav CMS 1.6.30 Admin Plugin 1.9.18 - 'Page Title' Persistent Cross-Site Scripting 31 WEB Sagar Banwa
2020-12-15 Exploit Code Downloads   Cisco ASA 9.14.1.10 and FTD 6.6.0.1 - Path Traversal (2) 27 WEB Freakyclown
2020-12-15 Exploit Code Downloads   Online Marriage Registration System (OMRS) 1.0 - Remote Code Execution (2) 27 WEB Andrea Bruschi
2020-12-15 Exploit Code Downloads   Task Management System 1.0 - 'page' Local File Inclusion 27 WEB İsmail BOZKURT
2020-12-14 Exploit Code Downloads   GitLab 11.4.7 - Remote Code Execution (Authenticated) (1) 28 WEB Fortunato Lodari
2020-12-14 Exploit Code Downloads   Macally WIFISD2-2A82 2.000.010 - Guest to Root Privilege Escalation 26 WEB Maximilian Barz
2020-12-14 Exploit Code Downloads   Rumble Mail Server 0.51.3135 - 'username' Stored XSS 27 WEB Mohammed Alshehri
2020-12-14 Exploit Code Downloads   Rumble Mail Server 0.51.3135 - 'domain and path' Stored XSS 26 WEB Mohammed Alshehri
2020-12-14 Exploit Code Downloads   Rumble Mail Server 0.51.3135 - 'servername' Stored XSS 24 WEB Mohammed Alshehri
2020-12-14 Exploit Code Downloads   WordPress Plugin Total Upkeep 1.14.9 - Database and Files Backup Download 26 WEB Wadeek
2020-12-14 Exploit Code Downloads   Seacms 11.1 - 'checkuser' Stored XSS 29 WEB j5s
2020-12-14 Exploit Code Downloads   Seacms 11.1 - 'file' Local File Inclusion 33 WEB j5s
2020-12-14 Exploit Code Downloads   Seacms 11.1 - 'ip and weburl' Remote Command Execution 33 WEB j5s