|
2020-10-09
|
|
DynPG 4.9.1 - Persistent Cross-Site Scripting (Authenticated)
|
20 |
WEB
|
Enes Özeser
|
|
2020-10-09
|
|
Kentico CMS 9.0-12.0.49 - Persistent Cross Site Scripting
|
18 |
WEB
|
Ataberk YAVUZER
|
|
2020-10-08
|
|
D-Link DSR-250N 3.12 - Denial of Service (PoC)
|
20 |
WEB
|
RedTeam Pentesting GmbH
|
|
2020-10-08
|
|
SEO Panel 4.6.0 - Remote Code Execution (1)
|
29 |
WEB
|
Kiko Andreu
|
|
2020-10-07
|
|
Textpattern CMS 4.6.2 - 'body' Persistent Cross-Site Scripting
|
26 |
WEB
|
Alperen Ergel
|
|
2020-10-06
|
|
EasyPMS 1.0.0 - Authentication Bypass
|
26 |
WEB
|
Jok3r
|
|
2020-10-06
|
|
Karel IP Phone IP1211 Web Management Panel - Directory Traversal
|
32 |
WEB
|
berat isler
|
|
2020-10-05
|
|
SpamTitan 7.07 - Unauthenticated Remote Code Execution
|
34 |
WEB
|
Felipe Molina
|
|
2020-10-02
|
|
Photo Share Website 1.0 - Persistent Cross-Site Scripting
|
20 |
WEB
|
Augkim
|
|
2020-10-02
|
|
MedDream PACS Server 6.8.3.751 - Remote Code Execution (Authenticated)
|
20 |
WEB
|
bzyo
|
|
2020-10-01
|
|
Typesetter CMS 5.1 - 'Site Title' Persistent Cross-Site Scripting
|
22 |
WEB
|
Alperen Ergel
|
|
2020-10-01
|
|
CMS Made Simple 2.2.14 - Persistent Cross-Site Scripting (Authenticated)
|
23 |
WEB
|
Roel van Beurden
|
|
2020-10-01
|
|
GetSimple CMS 3.3.16 - Persistent Cross-Site Scripting (Authenticated)
|
19 |
WEB
|
Roel van Beurden
|
|
2020-10-01
|
|
WebsiteBaker 2.12.2 - 'display_name' SQL Injection (authenticated)
|
24 |
WEB
|
Roel van Beurden
|
|
2020-10-01
|
|
MonoCMS Blog 1.0 - Arbitrary File Deletion (Authenticated)
|
24 |
WEB
|
Shahrukh Iqbal Mirza
|
|
2020-10-01
|
|
SpinetiX Fusion Digital Signage 3.4.8 - Username Enumeration
|
18 |
WEB
|
LiquidWorm
|
|
2020-10-01
|
|
SpinetiX Fusion Digital Signage 3.4.8 - Cross-Site Request Forgery (Add Admin)
|
22 |
WEB
|
LiquidWorm
|
|
2020-10-01
|
|
SpinetiX Fusion Digital Signage 3.4.8 - Database Backup Disclosure
|
19 |
WEB
|
LiquidWorm
|
|
2020-10-01
|
|
BrightSign Digital Signage Diagnostic Web Server 8.2.26 - File Delete Path Traversal
|
19 |
WEB
|
LiquidWorm
|
|
2020-10-01
|
|
BrightSign Digital Signage Diagnostic Web Server 8.2.26 - Server-Side Request Forgery (Unauthenticat
|
26 |
WEB
|
LiquidWorm
|
|
2020-09-29
|
|
WebsiteBaker 2.12.2 - Remote Code Execution
|
22 |
WEB
|
Enesdex
|
|
2020-09-28
|
|
Joplin 1.0.245 - Arbitrary Code Execution (PoC)
|
22 |
WEB
|
Ademar Nowasky Junior
|
|
2020-09-28
|
|
Mida eFramework 2.8.9 - Remote Code Execution
|
23 |
WEB
|
elbae
|
|
2020-09-25
|
|
B-swiss 3 Digital Signage System 3.6.5 - Database Disclosure
|
19 |
WEB
|
LiquidWorm
|
|
2020-09-25
|
|
B-swiss 3 Digital Signage System 3.6.5 - Cross-Site Request Forgery (Add Maintenance Admin)
|
19 |
WEB
|
LiquidWorm
|
|
2020-09-25
|
|
Anchor CMS 0.12.7 - Persistent Cross-Site Scripting (Authenticated)
|
20 |
WEB
|
Sinem Şahin
|
|
2020-09-25
|
|
BigTree CMS 4.4.10 - Remote Code Execution
|
19 |
WEB
|
SunCSR
|
|
2020-09-24
|
|
Visitor Management System in PHP 1.0 - Persistent Cross-Site Scripting
|
16 |
WEB
|
Rahul Ramkumar
|
|
2020-09-24
|
|
Simple Online Food Ordering System 1.0 - 'id' SQL Injection (Unauthenticated)
|
21 |
WEB
|
Aporlorxl23
|
|
2020-09-23
|
|
Online Food Ordering System 1.0 - Remote Code Execution
|
20 |
WEB
|
Eren Şimşek
|
|
2020-09-22
|
|
Flatpress Add Blog 1.0.3 - Persistent Cross-Site Scripting
|
18 |
WEB
|
Alperen Ergel
|
|
2020-09-22
|
|
Comodo Unified Threat Management Web Console 2.7.0 - Remote Code Execution
|
20 |
WEB
|
Milad Fadavvi
|
|
2020-09-21
|
|
B-swiss 3 Digital Signage System 3.6.5 - Remote Code Execution
|
21 |
WEB
|
LiquidWorm
|
|
2020-09-21
|
|
Mida eFramework 2.9.0 - Back Door Access
|
23 |
WEB
|
elbae
|
|
2020-09-21
|
|
Seat Reservation System 1.0 - 'id' SQL Injection
|
18 |
WEB
|
Augkim
|
|
2020-09-21
|
|
BlackCat CMS 1.3.6 - Cross-Site Request Forgery
|
21 |
WEB
|
Noth
|
|
2020-09-21
|
|
Online Shop Project 1.0 - 'p' SQL Injection
|
20 |
WEB
|
Augkim
|
|
2020-09-18
|
|
Mantis Bug Tracker 2.3.0 - Remote Code Execution (Unauthenticated)
|
29 |
WEB
|
Nikolas Geiselman
|
|
2020-09-18
|
|
SpamTitan 7.07 - Remote Code Execution (Authenticated)
|
26 |
WEB
|
Felipe Molina
|
|
2020-09-16
|
|
Piwigo 2.10.1 - Cross Site Scripting
|
22 |
WEB
|
Iridium
|
|
2020-09-15
|
|
Tailor MS 1.0 - Reflected Cross-Site Scripting
|
27 |
WEB
|
boku
|
|
2020-09-15
|
|
ThinkAdmin 6 - Arbitrarily File Read
|
22 |
WEB
|
Hzllaga
|
|
2020-09-14
|
|
Joomla! paGO Commerce 2.5.9.0 - SQL Injection (Authenticated)
|
21 |
WEB
|
Mehmet Kelepçe
|
|
2020-09-14
|
|
RAD SecFlow-1v SF_0290_2.3.01.26 - Cross-Site Request Forgery (Reboot)
|
19 |
WEB
|
Jonatan Schor
|
|
2020-09-14
|
|
RAD SecFlow-1v SF_0290_2.3.01.26 - Persistent Cross-Site Scripting
|
15 |
WEB
|
Jonatan Schor
|
|
2020-09-11
|
|
Tea LaTex 1.0 - Remote Code Execution (Unauthenticated)
|
23 |
WEB
|
nepska
|
|
2020-09-11
|
|
VTENEXT 19 CE - Remote Code Execution
|
19 |
WEB
|
Marco Ruela
|
|
2020-09-10
|
|
ZTE Router F602W - Captcha Bypass
|
23 |
WEB
|
Hritik Vijay
|
|
2020-09-10
|
|
CuteNews 2.1.2 - Remote Code Execution
|
22 |
WEB
|
Musyoka Ian
|
|
2020-09-10
|
|
Tiandy IPC and NVR 9.12.7 - Credential Disclosure
|
18 |
WEB
|
zb3
|
|
2020-09-09
|
|
Scopia XT Desktop 8.3.915.4 - Cross-Site Request Forgery (change admin password)
|
20 |
WEB
|
V1n1v131r4
|
|
2020-09-09
|
|
Tailor Management System - 'id' SQL Injection
|
22 |
WEB
|
Mosaaed
|
|
2020-09-07
|
|
ManageEngine Applications Manager 14700 - Remote Code Execution (Authenticated)
|
22 |
WEB
|
Hodorsec
|
|
2020-09-07
|
|
grocy 2.7.1 - Persistent Cross-Site Scripting
|
28 |
WEB
|
Mufaddal Masalawala
|
|
2020-09-07
|
|
Cabot 0.11.12 - Persistent Cross-Site Scripting
|
18 |
WEB
|
Abhiram V
|
|
2020-09-03
|
|
SiteMagic CMS 4.4.2 - Arbitrary File Upload (Authenticated)
|
21 |
WEB
|
V1n1v131r4
|
|
2020-09-03
|
|
Daily Tracker System 1.0 - Authentication Bypass
|
23 |
WEB
|
Adeeb Shah
|
|
2020-09-03
|
|
BloodX CMS 1.0 - Authentication Bypass
|
21 |
WEB
|
BKpatron
|
|
2020-09-03
|
|
Savsoft Quiz Enterprise Version 5.5 - Persistent Cross-Site Scripting
|
19 |
WEB
|
Hemant Patidar
|
|
2020-09-02
|
|
Rukovoditel 2.7.1 - Remote Code Execution (2) (Authenticated)
|
25 |
WEB
|
danyx07
|
|
2020-09-02
|
|
Stock Management System 1.0 - Cross-Site Request Forgery (Change Username)
|
21 |
WEB
|
boku
|
|
2020-09-01
|
|
moziloCMS 2.0 - Persistent Cross-Site Scripting (Authenticated)
|
21 |
WEB
|
Abdulkadir Kaya
|
|
2020-09-01
|
|
Mara CMS 7.5 - Remote Code Execution (Authenticated)
|
26 |
WEB
|
0blio_
|
|
2020-08-31
|
|
CMS Made Simple 2.2.14 - Arbitrary File Upload (Authenticated)
|
22 |
WEB
|
Luis Noriega
|
|
2020-08-31
|
|
Fuel CMS 1.4.8 - 'fuel_replace_id' SQL Injection (Authenticated)
|
26 |
WEB
|
c0mpu7er
|
|
2020-08-31
|
|
Mara CMS 7.5 - Reflective Cross-Site Scripting
|
22 |
WEB
|
George Tsimpidas
|
|
2020-08-31
|
|
Online Book Store 1.0 - 'id' SQL Injection
|
19 |
WEB
|
Moaaz Taha
|
|
2020-08-28
|
|
Eibiz i-Media Server Digital Signage 3.8.0 - Privilege Escalation
|
22 |
WEB
|
LiquidWorm
|
|
2020-08-28
|
|
SymphonyCMS 3.0.0 - Persistent Cross-Site Scripting
|
24 |
WEB
|
SunCSR
|
|
2020-08-28
|
|
Nagios Log Server 2.1.6 - Persistent Cross-Site Scripting
|
22 |
WEB
|
Jinson Varghese Behanan
|
|
2020-08-28
|
|
Online Shopping Alphaware 1.0 - 'id' SQL Injection
|
20 |
WEB
|
Moaaz Taha
|
|
2020-08-27
|
|
Wordpress Plugin Autoptimize 2.7.6 - Arbitrary File Upload (Authenticated)
|
26 |
WEB
|
SunCSR Team
|
|
2020-08-27
|
|
Mida eFramework 2.9.0 - Remote Code Execution
|
25 |
WEB
|
elbae
|
|
2020-08-26
|
|
Eibiz i-Media Server Digital Signage 3.8.0 - Directory Traversal
|
22 |
WEB
|
LiquidWorm
|
|
2020-08-26
|
|
Ericom Access Server x64 9.2.0 - Server-Side Request Forgery
|
21 |
WEB
|
hyp3rlinx
|
|
2020-08-24
|
|
Eibiz i-Media Server Digital Signage 3.8.0 - Configuration Disclosure
|
21 |
WEB
|
LiquidWorm
|
|
2020-08-24
|
|
Eibiz i-Media Server Digital Signage 3.8.0 - Authentication Bypass
|
20 |
WEB
|
LiquidWorm
|
|
2020-08-24
|
|
LimeSurvey 4.3.10 - 'Survey Menu' Persistent Cross-Site Scripting
|
21 |
WEB
|
Matthew Aberegg
|
|
2017-07-24
|
|
vBulletin 5.1.2 < 5.1.9 - Unserialize Code Execution (Metasploit)
|
20 |
WEB
|
Metasploit
|
|
2020-08-21
|
|
Seowon SlC 130 Router - Remote Code Execution
|
20 |
WEB
|
maj0rmil4d
|
|
2020-08-21
|
|
Complaint Management System 1.0 - 'cid' SQL Injection
|
20 |
WEB
|
Mohamed Elobeid
|
|
2020-08-20
|
|
PNPSCADA 2.200816204020 - 'interf' SQL Injection (Authenticated)
|
22 |
WEB
|
İsmail ERKEK
|
|
2020-08-20
|
|
ElkarBackup 1.3.3 - Persistent Cross-Site Scripting
|
18 |
WEB
|
Enes Özeser
|
|
2020-08-19
|
|
Ruijie Networks Switch eWeb S29_RGOS 11.4 - Directory Traversal
|
22 |
WEB
|
Tuygun
|
|
2020-08-18
|
|
Savsoft Quiz 5 - Stored Cross-Site Scripting
|
19 |
WEB
|
Mayur Parmar
|
|
2020-08-18
|
|
Pharmacy Medical Store and Sale Point 1.0 - 'catid' SQL Injection
|
20 |
WEB
|
Moaaz Taha
|
|
2020-08-17
|
|
QiHang Media Web Digital Signage 3.0.9 - Remote Code Execution (Unauthenticated)
|
25 |
WEB
|
LiquidWorm
|
|
2020-08-17
|
|
QiHang Media Web Digital Signage 3.0.9 - Unauthenticated Arbitrary File Disclosure
|
20 |
WEB
|
LiquidWorm
|
|
2020-08-17
|
|
QiHang Media Web Digital Signage 3.0.9 - Unauthenticated Arbitrary File Deletion
|
23 |
WEB
|
LiquidWorm
|
|
2020-08-17
|
|
QiHang Media Web Digital Signage 3.0.9 - Cleartext Credential Disclosure
|
25 |
WEB
|
LiquidWorm
|
|
2020-08-17
|
|
Microsoft SharePoint Server 2019 - Remote Code Execution
|
20 |
WEB
|
West Shepherd
|
|
2020-08-17
|
|
Bludit 3.9.2 - Authentication Bruteforce Mitigation Bypass
|
21 |
WEB
|
Alexandre ZANNI
|
|
2020-08-13
|
|
GetSimple CMS Plugin Multi User 1.8.2 - Cross-Site Request Forgery (Add Admin)
|
22 |
WEB
|
boku
|
|
2020-08-13
|
|
Artica Proxy 4.3.0 - Authentication Bypass
|
23 |
WEB
|
Dan Duffy
|
|
2020-08-12
|
|
vBulletin 5.6.2 - 'widget_tabbedContainer_tab_panel' Remote Code Execution
|
24 |
WEB
|
zenofex
|
|
2020-08-12
|
|
CMS Made Simple 2.2.14 - Authenticated Arbitrary File Upload
|
26 |
WEB
|
Roel van Beurden
|
|
2020-08-11
|
|
Fuel CMS 1.4.7 - 'col' SQL Injection (Authenticated)
|
26 |
WEB
|
Roel van Beurden
|
|
2020-08-10
|
|
ManageEngine ADSelfService Build prior to 6003 - Remote Code Execution (Unauthenticated)
|
25 |
WEB
|
Bhadresh Patel
|
|
2020-08-10
|
|
Warehouse Inventory System 1.0 - Cross-Site Request Forgery (Change Admin Password)
|
27 |
WEB
|
boku
|
|
2020-08-07
|
|
Daily Expenses Management System 1.0 - 'item' SQL Injection
|
23 |
WEB
|
screetsec
|
|
2020-08-07
|
|
All-Dynamics Digital Signage System 2.0.2 - Cross-Site Request Forgery (Add Admin)
|
26 |
WEB
|
LiquidWorm
|
|
2020-08-06
|
|
Victor CMS 1.0 - 'Search' SQL Injection
|
25 |
WEB
|
screetsec
|
|
2020-08-05
|
|
Stock Management System 1.0 - Authentication Bypass
|
24 |
WEB
|
Adeeb Shah
|
|
2020-08-04
|
|
Daily Expenses Management System 1.0 - 'username' SQL Injection
|
28 |
WEB
|
Daniel Ortiz
|
|
2020-08-04
|
|
Pi-hole 4.3.2 - Remote Code Execution (Authenticated)
|
28 |
WEB
|
Luis Vacacas
|
|
2020-07-30
|
|
Online Shopping Alphaware 1.0 - Authentication Bypass
|
26 |
WEB
|
Ahmed Abbas
|
|
2020-07-29
|
|
Wordpress Plugin Maintenance Mode by SeedProd 5.1.1 - Persistent Cross-Site Scripting
|
30 |
WEB
|
Jinson Varghese Behanan
|
|
2020-07-29
|
|
Cisco Adaptive Security Appliance Software 9.7 - Unauthenticated Arbitrary File Deletion
|
26 |
WEB
|
0xmmnbassel
|
|
2020-07-28
|
|
Cisco Adaptive Security Appliance Software 9.11 - Local File Inclusion
|
28 |
WEB
|
0xmmnbassel
|
|
2020-07-27
|
|
eGroupWare 1.14 - 'spellchecker.php' Remote Command Execution
|
30 |
WEB
|
Berk KIRAS
|
|
2020-07-26
|
|
Rails 5.0.1 - Remote Code Execution
|
28 |
WEB
|
Lucas Amorim
|
|
2020-07-26
|
|
Virtual Airlines Manager 2.6.2 - Persistent Cross-Site Scripting
|
27 |
WEB
|
Peter Blue
|
|
2020-07-26
|
|
pfSense 2.4.4-p3 - Cross-Site Request Forgery
|
26 |
WEB
|
ghost_fh
|
|
2020-07-26
|
|
Socket.io-file 2.0.31 - Arbitrary File Upload
|
27 |
WEB
|
Cr0wTom
|
|
2020-07-26
|
|
Sickbeard 0.1 - Cross-Site Request Forgery (Disable Authentication)
|
26 |
WEB
|
bdrake
|
|
2020-07-26
|
|
F5 Big-IP 13.1.3 Build 0.0.6 - Local File Inclusion
|
27 |
WEB
|
Carlos E. Vieira
|
|
2020-07-26
|
|
Webtareas 2.1p - Arbitrary File Upload (Authenticated)
|
28 |
WEB
|
AppleBois
|
|
2020-07-26
|
|
Bio Star 2.8.2 - Local File Inclusion
|
26 |
WEB
|
SITE Team
|
|
2020-07-26
|
|
PandoraFMS 7.0 NG 746 - Persistent Cross-Site Scripting
|
23 |
WEB
|
AppleBois
|
|
2020-07-26
|
|
Koken CMS 0.22.24 - Arbitrary File Upload (Authenticated)
|
25 |
WEB
|
V1n1v131r4
|
|
2020-07-26
|
|
elaniin CMS - Authentication Bypass
|
32 |
WEB
|
BKpatron
|
|
2020-07-26
|
|
Online Course Registration 1.0 - Unauthenticated Remote Code Execution
|
32 |
WEB
|
boku
|
|
2020-07-26
|
|
LibreHealth 2.0.0 - Authenticated Remote Code Execution
|
32 |
WEB
|
boku
|
|
2020-07-26
|
|
Bludit 3.9.2 - Directory Traversal
|
29 |
WEB
|
James Green
|
|
2020-07-26
|
|
PandoraFMS NG747 7.0 - 'filename' Persistent Cross-Site Scripting
|
29 |
WEB
|
Emre ÖVÜNÇ
|
