Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2020-10-28 Exploit Code Downloads   CSE Bookstore 1.0 - Authentication Bypass 36 WEB Alper Basaran
2020-10-28 Exploit Code Downloads   Nagios XI 5.7.3 - 'mibs.php' Remote Command Injection (Authenticated) 37 WEB Matthew Aberegg
2020-10-27 Exploit Code Downloads   Sphider Search Engine 1.3.6 - 'word_upper_bound' RCE (Authenticated) 35 WEB Gurkirat Singh
2020-10-27 Exploit Code Downloads   Client Management System 1.0 - 'searchdata' SQL injection 34 WEB Serkan Sancar
2020-10-27 Exploit Code Downloads   Sentrifugo 3.2 - File Upload Restriction Bypass (Authenticated) 34 WEB Gurkirat Singh
2020-10-26 Exploit Code Downloads   ReQuest Serious Play F3 Media Server 7.0.3 - Remote Code Execution (Unauthenticated) 40 WEB LiquidWorm
2020-10-26 Exploit Code Downloads   ReQuest Serious Play F3 Media Server 7.0.3 - Remote Denial of Service 34 WEB LiquidWorm
2020-10-26 Exploit Code Downloads   ReQuest Serious Play F3 Media Server 7.0.3 - Debug Log Disclosure 32 WEB LiquidWorm
2020-10-26 Exploit Code Downloads   ReQuest Serious Play Media Player 3.0 - Directory Traversal File Disclosure 32 WEB LiquidWorm
2020-10-26 Exploit Code Downloads   Genexis Platinum-4410 - 'SSID' Persistent XSS 30 WEB Amal Mohandas
2020-10-26 Exploit Code Downloads   PDW File Browser 1.3 - 'new_filename' Cross-Site Scripting (XSS) 34 WEB David Bimmel
2020-10-26 Exploit Code Downloads   InoERP 0.7.2 - Remote Code Execution (Unauthenticated) 35 WEB Lyhin\'s Lab
2020-10-26 Exploit Code Downloads   Online Health Care System 1.0 - Multiple Cross Site Scripting (Stored) 34 WEB Akıner Kısa
2020-10-26 Exploit Code Downloads   CMS Made Simple 2.1.6 - 'cntnt01detailtemplate' Server-Side Template Injection 36 WEB Gurkirat Singh
2020-10-23 Exploit Code Downloads   TextPattern CMS 4.8.3 - Remote Code Execution (Authenticated) 33 WEB 0blio_
2020-10-23 Exploit Code Downloads   Bludit 3.9.2 - Auth Bruteforce Bypass 34 WEB Mayank Deshmukh
2020-10-23 Exploit Code Downloads   Gym Management System 1.0 - Stored Cross Site Scripting 33 WEB Jyotsna Adhana
2020-10-23 Exploit Code Downloads   Gym Management System 1.0 - Authentication Bypass 32 WEB Jyotsna Adhana
2020-10-23 Exploit Code Downloads   School Faculty Scheduling System 1.0 - 'username' SQL Injection 36 WEB Jyotsna Adhana
2020-10-23 Exploit Code Downloads   School Faculty Scheduling System 1.0 - 'id' SQL Injection 35 WEB Jyotsna Adhana
2020-10-23 Exploit Code Downloads   Point of Sales 1.0 - 'username' SQL Injection 33 WEB Jyotsna Adhana
2020-10-23 Exploit Code Downloads   Gym Management System 1.0 - 'id' SQL Injection 37 WEB Jyotsna Adhana
2020-10-23 Exploit Code Downloads   Lot Reservation Management System 1.0 - Cross-Site Scripting (Stored) 31 WEB Ankita Pal
2020-10-23 Exploit Code Downloads   Lot Reservation Management System 1.0 - Authentication Bypass 32 WEB Ankita Pal
2020-10-23 Exploit Code Downloads   Point of Sales 1.0 - 'id' SQL Injection 33 WEB Ankita Pal
2020-10-23 Exploit Code Downloads   User Registration & Login and User Management System 2.1 - SQL Injection 32 WEB Ihsan Sencan
2020-10-23 Exploit Code Downloads   Car Rental Management System 1.0 - Arbitrary File Upload 31 WEB Jyotsna Adhana
2020-10-23 Exploit Code Downloads   Stock Management System 1.0 - 'brandId and categoriesId' SQL Injection 34 WEB Ihsan Sencan
2020-10-23 Exploit Code Downloads   Ajenti 2.1.36 - Remote Code Execution (Authenticated) 33 WEB Ahmet Ümit BAYRAM
2020-10-23 Exploit Code Downloads   Online Library Management System 1.0 - Arbitrary File Upload 33 WEB Jyotsna Adhana
2020-10-21 Exploit Code Downloads   Tiki Wiki CMS Groupware 21.1 - Authentication Bypass 35 WEB Maximilian Barz
2020-10-21 Exploit Code Downloads   Stock Management System 1.0 - 'Brand Name' Persistent Cross-Site Scripting 37 WEB Adeeb Shah
2020-10-21 Exploit Code Downloads   Stock Management System 1.0 - 'Categories Name' Persistent Cross-Site Scripting 31 WEB Adeeb Shah
2020-10-21 Exploit Code Downloads   Stock Management System 1.0 - 'Product Name' Persistent Cross-Site Scripting 38 WEB Adeeb Shah
2020-10-21 Exploit Code Downloads   GOautodial 4.0 - Authenticated Shell Upload 32 WEB Balzabu
2020-10-21 Exploit Code Downloads   School Faculty Scheduling System 1.0 - Authentication Bypass POC 35 WEB Jyotsna Adhana
2020-10-21 Exploit Code Downloads   School Faculty Scheduling System 1.0 - Stored Cross Site Scripting POC 31 WEB Jyotsna Adhana
2020-10-21 Exploit Code Downloads   Hrsale 2.0.0 - Local File Inclusion 37 WEB Sosecure
2020-10-20 Exploit Code Downloads   WordPress Plugin Colorbox Lightbox v1.1.1 - Persistent Cross-Site Scripting (Authenticated) 35 WEB n1x_
2020-10-20 Exploit Code Downloads   WordPress Plugin Rest Google Maps < 7.11.18 - SQL Injection 30 WEB Jonatas Fil
2020-10-20 Exploit Code Downloads   Apache Struts 2 - DefaultActionMapper Prefixes OGNL Code Execution 34 WEB Jonatas Fil
2020-10-20 Exploit Code Downloads   Mobile Shop System v1.0 - SQL Injection Authentication Bypass 32 WEB Moaaz Taha
2020-10-20 Exploit Code Downloads   RiteCMS 2.2.1 - Remote Code Execution (Authenticated) 31 WEB H0j3n
2020-10-20 Exploit Code Downloads   User Registration & Login and User Management System With admin panel 2.1 - Persistent XSS 36 WEB yusufmalikul
2020-10-20 Exploit Code Downloads   WordPress Plugin HS Brand Logo Slider 2.1 - 'logoupload' File Upload 35 WEB Net-Hunter
2020-10-20 Exploit Code Downloads   Ultimate Project Manager CRM PRO Version 2.0.5 - SQLi (Authenticated) 32 WEB nag0mez
2020-10-20 Exploit Code Downloads   Visitor Management System in PHP 1.0 - SQL Injection (Authenticated) 32 WEB Rahul Ramkumar
2020-10-20 Exploit Code Downloads   Wordpress Plugin WP Courses < 2.0.29 - Broken Access Controls leading to Courses Content Disclosure 33 WEB redtimmysec
2020-10-20 Exploit Code Downloads   Loan Management System 1.0 - Multiple Cross Site Scripting (Stored) 31 WEB Akıner Kısa
2020-10-20 Exploit Code Downloads   Comtrend AR-5387un router - Persistent XSS (Authenticated) 35 WEB OscarAkaElvis
2020-10-19 Exploit Code Downloads   Textpattern CMS 4.6.2 - Cross-site Request Forgery 33 WEB Alperen Ergel
2020-10-19 Exploit Code Downloads   Typesetter CMS 5.1 - Arbitrary Code Execution (Authenticated) 32 WEB Rodolfo Tavares
2020-10-19 Exploit Code Downloads   Hostel Management System 2.1 - Cross Site Scripting (Multiple Fields) 33 WEB Kokn3t
2020-10-19 Exploit Code Downloads   Jenkins 2.63 - Sandbox bypass in pipeline: Groovy plug-in 30 WEB Daniel Morris
2020-10-19 Exploit Code Downloads   HiSilicon Video Encoders - Unauthenticated RTSP buffer overflow (DoS) 44 WEB Alexei Kojenov
2020-10-19 Exploit Code Downloads   HiSilicon Video Encoders - Full admin access via backdoor password 33 WEB Alexei Kojenov
2020-10-19 Exploit Code Downloads   HiSilicon video encoders - RCE via unauthenticated upload of malicious firmware 35 WEB Alexei Kojenov
2020-10-19 Exploit Code Downloads   HiSilicon Video Encoders - RCE via unauthenticated command injection 34 WEB Alexei Kojenov
2020-10-19 Exploit Code Downloads   HiSilicon Video Encoders - Unauthenticated file disclosure via path traversal 33 WEB Alexei Kojenov
2020-10-19 Exploit Code Downloads   Online Job Portal 1.0 - Cross Site Scripting (Stored) 32 WEB Akıner Kısa
2020-10-19 Exploit Code Downloads   Online Discussion Forum Site 1.0 - XSS in Messaging System 37 WEB j5oh
2020-10-19 Exploit Code Downloads   Online Student's Management System 1.0 - Remote Code Execution (Authenticated) 34 WEB Akıner Kısa
2020-10-19 Exploit Code Downloads   Nagios XI 5.7.3 - 'SNMP Trap Interface' Authenticated SQL Injection 37 WEB Matthew Aberegg
2020-10-19 Exploit Code Downloads   Nagios XI 5.7.3 - 'Manage Users' Authenticated SQL Injection 34 WEB Matthew Aberegg
2020-10-19 Exploit Code Downloads   Nagios XI 5.7.3 - 'Contact Templates' Persistent Cross-Site Scripting 36 WEB Matthew Aberegg
2020-10-19 Exploit Code Downloads   Tourism Management System 1.0 - Arbitrary File Upload 33 WEB Ankita Pal
2020-10-16 Exploit Code Downloads   CS-Cart 1.3.3 - authenticated RCE 31 WEB 0xmmnbassel
2020-10-16 Exploit Code Downloads   CS-Cart 1.3.3 - 'classes_dir' LFI 34 WEB 0xmmnbassel
2020-10-16 Exploit Code Downloads   Seat Reservation System 1.0 - Unauthenticated SQL Injection 34 WEB Rahul Ramkumar
2020-10-16 Exploit Code Downloads   Hotel Management System 1.0 - Remote Code Execution (Authenticated) 33 WEB Aporlorxl23
2020-10-16 Exploit Code Downloads   Seat Reservation System 1.0 - Remote Code Execution (Unauthenticated) 35 WEB Rahul Ramkumar
2020-10-16 Exploit Code Downloads   aaPanel 6.6.6 - Privilege Escalation & Remote Code Execution (Authenticated) 29 WEB Ünsal Furkan Harani
2020-10-16 Exploit Code Downloads   Restaurant Reservation System 1.0 - 'date' SQL Injection (Authenticated) 30 WEB b1nary
2020-10-16 Exploit Code Downloads   Company Visitor Management System (CVMS) 1.0 - Authentication Bypass 32 WEB Oğuz Türkgenç
2020-10-16 Exploit Code Downloads   Alumni Management System 1.0 - Authentication Bypass 33 WEB Ankita Pal
2020-10-16 Exploit Code Downloads   Employee Management System 1.0 - Authentication Bypass 27 WEB Ankita Pal
2020-10-16 Exploit Code Downloads   Employee Management System 1.0 - Cross Site Scripting (Stored) 30 WEB Ankita Pal
2020-10-15 Exploit Code Downloads   Zoo Management System 1.0 - Authentication Bypass 33 WEB Jyotsna Adhana
2020-10-15 Exploit Code Downloads   Simple Grocery Store Sales And Inventory System 1.0 - Authentication Bypass 34 WEB Saurav Shukla
2020-10-15 Exploit Code Downloads   rConfig 3.9.5 - Remote Code Execution (Unauthenticated) 51 WEB Daniel Monzón
2020-10-15 Exploit Code Downloads   Vehicle Parking Management System 1.0 - Authentication Bypass 31 WEB BKpatron
2020-10-14 Exploit Code Downloads   NodeBB Forum 1.12.2-1.14.2 - Account Takeover 30 WEB Muhammed Eren Uygun
2020-07-23 Exploit Code Downloads   TimeClock Software 1.01 0 - (Authenticated) Time-Based SQL Injection 32 WEB François Bibeau
2020-10-13 Exploit Code Downloads   berliCRM 1.0.24 - 'src_record' SQL Injection 33 WEB Ahmet Ümit BAYRAM
2020-10-12 Exploit Code Downloads   Cisco ASA and FTD 9.6.4.42 - Path Traversal 34 WEB 3ndG4me
2020-10-12 Exploit Code Downloads   Online Students Management System 1.0 - 'username' SQL Injections 34 WEB George Tsimpidas
2020-10-12 Exploit Code Downloads   Liman 0.7 - Cross-Site Request Forgery (Change Password) 34 WEB George Tsimpidas
2020-10-12 Exploit Code Downloads   MedDream PACS Server 6.8.3.751 - Remote Code Execution (Unauthenticated) 36 WEB bzyo
2020-10-12 Exploit Code Downloads   Small CRM 2.0 - 'email' SQL Injection 36 WEB Ahmet Ümit BAYRAM
2020-10-09 Exploit Code Downloads   openMAINT 1.1-2.4.2 - Arbitrary File Upload 36 WEB mrb3n
2020-10-09 Exploit Code Downloads   DynPG 4.9.1 - Persistent Cross-Site Scripting (Authenticated) 36 WEB Enes Özeser
2020-10-09 Exploit Code Downloads   Kentico CMS 9.0-12.0.49 - Persistent Cross Site Scripting 34 WEB Ataberk YAVUZER
2020-10-08 Exploit Code Downloads   D-Link DSR-250N 3.12 - Denial of Service (PoC) 35 WEB RedTeam Pentesting GmbH
2020-10-08 Exploit Code Downloads   SEO Panel 4.6.0 - Remote Code Execution (1) 45 WEB Kiko Andreu
2020-10-07 Exploit Code Downloads   Textpattern CMS 4.6.2 - 'body' Persistent Cross-Site Scripting 39 WEB Alperen Ergel
2020-10-06 Exploit Code Downloads   EasyPMS 1.0.0 - Authentication Bypass 42 WEB Jok3r
2020-10-06 Exploit Code Downloads   Karel IP Phone IP1211 Web Management Panel - Directory Traversal 46 WEB berat isler
2020-10-05 Exploit Code Downloads   SpamTitan 7.07 - Unauthenticated Remote Code Execution 50 WEB Felipe Molina
2020-10-02 Exploit Code Downloads   Photo Share Website 1.0 - Persistent Cross-Site Scripting 32 WEB Augkim
2020-10-02 Exploit Code Downloads   MedDream PACS Server 6.8.3.751 - Remote Code Execution (Authenticated) 36 WEB bzyo
2020-10-01 Exploit Code Downloads   Typesetter CMS 5.1 - 'Site Title' Persistent Cross-Site Scripting 35 WEB Alperen Ergel
2020-10-01 Exploit Code Downloads   CMS Made Simple 2.2.14 - Persistent Cross-Site Scripting (Authenticated) 37 WEB Roel van Beurden
2020-10-01 Exploit Code Downloads   GetSimple CMS 3.3.16 - Persistent Cross-Site Scripting (Authenticated) 32 WEB Roel van Beurden
2020-10-01 Exploit Code Downloads   WebsiteBaker 2.12.2 - 'display_name' SQL Injection (authenticated) 37 WEB Roel van Beurden
2020-10-01 Exploit Code Downloads   MonoCMS Blog 1.0 - Arbitrary File Deletion (Authenticated) 37 WEB Shahrukh Iqbal Mirza
2020-10-01 Exploit Code Downloads   SpinetiX Fusion Digital Signage 3.4.8 - Username Enumeration 32 WEB LiquidWorm
2020-10-01 Exploit Code Downloads   SpinetiX Fusion Digital Signage 3.4.8 - Cross-Site Request Forgery (Add Admin) 36 WEB LiquidWorm
2020-10-01 Exploit Code Downloads   SpinetiX Fusion Digital Signage 3.4.8 - Database Backup Disclosure 33 WEB LiquidWorm
2020-10-01 Exploit Code Downloads   BrightSign Digital Signage Diagnostic Web Server 8.2.26 - File Delete Path Traversal 34 WEB LiquidWorm
2020-10-01 Exploit Code Downloads   BrightSign Digital Signage Diagnostic Web Server 8.2.26 - Server-Side Request Forgery (Unauthenticat 39 WEB LiquidWorm
2020-09-29 Exploit Code Downloads   WebsiteBaker 2.12.2 - Remote Code Execution 33 WEB Enesdex
2020-09-28 Exploit Code Downloads   Joplin 1.0.245 - Arbitrary Code Execution (PoC) 36 WEB Ademar Nowasky Junior
2020-09-28 Exploit Code Downloads   Mida eFramework 2.8.9 - Remote Code Execution 35 WEB elbae
2020-09-25 Exploit Code Downloads   B-swiss 3 Digital Signage System 3.6.5 - Database Disclosure 32 WEB LiquidWorm
2020-09-25 Exploit Code Downloads   B-swiss 3 Digital Signage System 3.6.5 - Cross-Site Request Forgery (Add Maintenance Admin) 31 WEB LiquidWorm
2020-09-25 Exploit Code Downloads   Anchor CMS 0.12.7 - Persistent Cross-Site Scripting (Authenticated) 34 WEB Sinem Şahin
2020-09-25 Exploit Code Downloads   BigTree CMS 4.4.10 - Remote Code Execution 33 WEB SunCSR
2020-09-24 Exploit Code Downloads   Visitor Management System in PHP 1.0 - Persistent Cross-Site Scripting 30 WEB Rahul Ramkumar
2020-09-24 Exploit Code Downloads   Simple Online Food Ordering System 1.0 - 'id' SQL Injection (Unauthenticated) 36 WEB Aporlorxl23
2020-09-23 Exploit Code Downloads   Online Food Ordering System 1.0 - Remote Code Execution 32 WEB Eren Şimşek
2020-09-22 Exploit Code Downloads   Flatpress Add Blog 1.0.3 - Persistent Cross-Site Scripting 32 WEB Alperen Ergel
2020-09-22 Exploit Code Downloads   Comodo Unified Threat Management Web Console 2.7.0 - Remote Code Execution 34 WEB Milad Fadavvi
2020-09-21 Exploit Code Downloads   B-swiss 3 Digital Signage System 3.6.5 - Remote Code Execution 35 WEB LiquidWorm
2020-09-21 Exploit Code Downloads   Mida eFramework 2.9.0 - Back Door Access 35 WEB elbae
2020-09-21 Exploit Code Downloads   Seat Reservation System 1.0 - 'id' SQL Injection 30 WEB Augkim