|
2017-12-14
|
|
pfSense 2.4.1 CSRF Error Page Clickjacking
|
389 |
WEB
|
Yorick Koster
|
|
2017-12-06
|
|
WinduCMS 3.1 - Local File Disclosure
|
251 |
WEB
|
Maciek Krupa
|
|
2017-12-04
|
|
Artica Web Proxy 3.06 - Remote Code Execution
|
209 |
WEB
|
hyp3rlinx
|
|
2017-12-04
|
|
MistServer 2.12 - Cross-Site Scripting
|
201 |
WEB
|
hyp3rlinx
|
|
2017-12-04
|
|
WinduCMS 3.1 Local File Disclosure
|
189 |
WEB
|
Maciej Krupa
|
|
2017-11-30
|
|
osCommerce 2.3.4.1 - Arbitrary File Upload
|
239 |
WEB
|
Simon Scannell
|
|
2017-11-29
|
|
Synology StorageManager 5.2 - Remote Root Command Execution
|
234 |
WEB
|
SecuriTeam
|
|
2017-11-20
|
|
phpMyFAQ 2.9.9 Code Injection
|
372 |
WEB
|
tomplixsee
|
|
2017-11-15
|
|
Allworx Server Manager 6x / 6x12 / 48x Cross Site Scripting
|
138 |
WEB
|
LiquidWorm
|
|
2017-11-14
|
|
Web Viewer 1.0.0.193 (Samsung SRN-1670D) - Unrestricted File Upload
|
383 |
WEB
|
Omar Mezrag
|
|
2017-11-09
|
|
Geutebrueck GCore GCoreServer.exe Buffer Overflow
|
194 |
WEB
|
Luca Cappiello
|
|
2017-11-09
|
|
Mako Server 2.5 Command Injection
|
140 |
WEB
|
Steven Patterson
|
|
2017-11-06
|
|
WordPress WP Mobile Detector 3.5 Shell Upload
|
191 |
WEB
|
h00die
|
|
2017-11-06
|
|
Oracle PeopleSoft Enterprise PeopleTools < 8.55 - Remote Code Execution Via Blind XML External Entit
|
148 |
WEB
|
Charles Fol
|
|
2017-10-31
|
|
Oracle Java SE - Web Start jnlp XML External Entity Processing Information Disclosure
|
218 |
WEB
|
mr_me
|
|
2017-10-26
|
|
PHPMailer 5.2.21 Local File Disclosure
|
141 |
WEB
|
Maciej Krupa
|
|
2017-10-24
|
|
Kaltura < 13.1.0 - Remote Code Execution
|
153 |
WEB
|
Robin Verton
|
|
2017-10-23
|
|
TP-Link WR940N Remote Code Execution
|
169 |
WEB
|
Tim Carrington
|
|
2017-10-23
|
|
Check_MK 1.2.8p25 - Information Disclosure
|
151 |
WEB
|
Julien Ahrens
|
|
2017-10-17
|
|
Webmin 1.850 SSRF / CSRF / Cross Site Scripting
|
166 |
WEB
|
hyp3rlinx
|
|
2017-10-13
|
|
Tomcat JSP Upload Bypass Remote Code Execution
|
284 |
WEB
|
peewpw
|
|
2017-10-12
|
|
Trend Micro InterScan Messaging Security (Virtual Appliance) - Remote Code Execution (Metasploit)
|
132 |
WEB
|
Mehmet Ince
|
|
2017-10-10
|
|
ERS Data System 1.8.1 Java Deserialization
|
121 |
WEB
|
West Shepherd
|
|
2017-10-10
|
|
Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execu
|
263 |
WEB
|
intx0x80
|
|
2017-10-10
|
|
ClipBucket 2.8.3 - Remote Code Execution
|
122 |
WEB
|
Meisam Monsef
|
|
2017-10-10
|
|
FileRun < 2017.09.18 - SQL Injection
|
150 |
WEB
|
SPARC
|
|
2017-09-28
|
|
Fibaro Home Center 2 - Remote Command Execution / Privilege Escalation
|
123 |
WEB
|
forsec
|
|
2017-09-26
|
|
FLIR Systems FLIR Thermal Camera F/FC/PT/D Multiple Information Disclosures
|
138 |
WEB
|
LiquidWorm
|
|
2017-09-26
|
|
FLIR Systems FLIR Thermal Camera PT-Series (PT-334 200562) - Root Remote Code Execution
|
118 |
WEB
|
LiquidWorm
|
|
2017-09-25
|
|
Cash Back Comparison Script 1.0 - SQL Injection
|
125 |
WEB
|
Ihsan Sencan
|
|
2017-09-25
|
|
DenyAll WAF < 6.3.0 - Remote Code Execution (Metasploit)
|
128 |
WEB
|
Mehmet Ince
|
|
2017-09-22
|
|
Stock Photo Selling 1.0 - SQL Injection
|
136 |
WEB
|
Ihsan Sencan
|
|
2017-09-21
|
|
Disk Pulse Enterprise 9.9.16 GET Buffer Overflow
|
117 |
WEB
|
Chance Johnson
|
|
2017-09-19
|
|
Apache - HTTP OPTIONS Memory Leak
|
168 |
WEB
|
Hanno Bock
|
|
2017-09-19
|
|
DigiAffiliate 1.4 - Cross-Site Request Forgery (Update Admin)
|
129 |
WEB
|
Ihsan Sencan
|
|
2017-09-19
|
|
Digileave 1.2 - Cross-Site Request Forgery (Update Admin)
|
132 |
WEB
|
Ihsan Sencan
|
|
2017-09-19
|
|
Digirez 3.4 - Cross-Site Request Forgery (Update Admin)
|
131 |
WEB
|
Ihsan Sencan
|
|
2017-09-18
|
|
D-Link DIR8xx Routers - Local Firmware Upload
|
229 |
WEB
|
embedi
|
|
2017-09-18
|
|
D-Link DIR8xx Routers - Root Remote Code Execution
|
153 |
WEB
|
embedi
|
|
2017-09-18
|
|
D-Link DIR8xx Routers - Leak Credentials
|
132 |
WEB
|
embedi
|
|
2017-09-11
|
|
Nimble Professional 1.0 - Cross-Site Request Forgery (Update Admin)
|
145 |
WEB
|
Ihsan Sencan
|
|
2017-09-11
|
|
Topsites Script 1.0 - Cross-Site Request Forgery / PHP Code Injection
|
124 |
WEB
|
Ihsan Sencan
|
|
2017-08-31
|
|
Invoice Manager 3.1 - Cross-Site Request Forgery (Add Admin)
|
249 |
WEB
|
Ali BawazeEer
|
|
2017-08-24
|
|
Automated Logic WebCTRL 6.5 - Unrestricted File Upload / Remote Code Execution
|
142 |
WEB
|
LiquidWorm
|
|
2017-08-11
|
|
DALIM SOFTWARE ES Core 5.0 Build 7184.1 User Enumeration
|
155 |
WEB
|
LiquidWorm
|
|
2017-08-09
|
|
Synology Photo Station 6.7.3-3432 / 6.3-2967 - Remote Code Execution
|
120 |
WEB
|
Kacper Szurek
|
|
2017-08-02
|
|
Advantech SUSIAccess <= 3.0 - 'RecoveryMgmt' File Upload
|
134 |
WEB
|
James Fitts
|
|
2017-08-02
|
|
Advantech SUSIAccess <= 3.0 - Directory Traversal / Information Disclosure (Metasploit)
|
115 |
WEB
|
James Fitts
|
|
2017-07-31
|
|
GitHub Enterprise < 2.8.7 - Remote Code Execution
|
128 |
WEB
|
orange
|
|
2017-07-27
|
|
WebKit JSC - 'JSObject::putInlineSlow and JSValue::putToPrimitive' Universal Cross-Site Scripting
|
100 |
WEB
|
Google Security Research
|
|
2017-07-25
|
|
ManageEngine Desktop Central 10 Build 100087 - Remote Code Execution (Metasploit)
|
205 |
WEB
|
Kacper Szurek
|
|
2017-07-21
|
|
Netscaler SD-WAN 9.1.2.26.561201 - Command Injection (Metasploit)
|
146 |
WEB
|
xort
|
|
2017-07-21
|
|
Sonicwall < 8.1.0.2-14sv - 'sitecustomization.cgi' Command Injection (Metasploit)
|
125 |
WEB
|
xort
|
|
2017-07-21
|
|
Sonicwall < 8.1.0.6-21sv - 'gencsr.cgi' Command Injection (Metasploit)
|
117 |
WEB
|
xort
|
|
2017-07-19
|
|
Easy File Sharing Web Server 7.2 Buffer Overflow
|
153 |
WEB
|
N_A
|
|
2017-07-18
|
|
Barracuda Load Balancer Firmware <= 6.0.1.006 - Remote Command Injection (Metasploit)
|
150 |
WEB
|
xort
|
|
2017-07-18
|
|
Sophos Web Appliance 4.3.0.2 - 'trafficType' Remote Command Injection (Metasploit)
|
126 |
WEB
|
xort
|
|
2017-07-17
|
|
WDTV Live SMP 2.03.20 - Remote Password Reset
|
193 |
WEB
|
Sw1tCh
|
|
2017-07-17
|
|
Apache Struts 2.3.x Showcase - Remote Code Execution (PoC)
|
295 |
WEB
|
Vex Woo
|
|
2017-07-13
|
|
RaidenHTTPD 2.0.44 User-Agent Cross Site Scripting
|
109 |
WEB
|
sultan albalawi
|
|
2017-07-12
|
|
NfSen < 1.3.7 / AlienVault OSSIM 4.3.1 - 'customfmt' Command Injection
|
171 |
WEB
|
Paul Taylor
|
|
2017-07-03
|
|
Humax HG100R 2.0.6 - Backup File Download
|
197 |
WEB
|
gambler
|
|
2017-06-29
|
|
Easy File Sharing Web Server 7.2 - Unrestricted File Upload
|
245 |
WEB
|
Chako
|
|
2017-06-26
|
|
Easy File Sharing HTTP Server 7.2 POST Buffer Overflow
|
77 |
WEB
|
Marco Rivoli
|
|
2017-06-26
|
|
Symantec Messaging Gateway Remote Code Execution
|
127 |
WEB
|
Mehmet Ince
|
|
2017-06-26
|
|
Netgear DGN2200 dnslookup.cgi Command Injection
|
102 |
WEB
|
thecarterb
|
|
2017-06-22
|
|
PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution
|
150 |
WEB
|
phackt_ul
|
|
2017-06-20
|
|
D-Link ADSL DSL-2640B SEA_1.01 Unauthenticated Remote DNS Changer
|
284 |
WEB
|
Todor Donev
|
|
2017-06-20
|
|
D-Link DSL-2640B - Unauthenticated Remote DNS Change
|
116 |
WEB
|
Todor Donev
|
|
2017-06-20
|
|
D-Link DSL-2640U - Unauthenticated DNS Change
|
178 |
WEB
|
Todor Donev
|
|
2017-06-20
|
|
Beetel BCM96338 Router - Unauthenticated DNS Change
|
198 |
WEB
|
Todor Donev
|
|
2017-06-20
|
|
UTstarcom WA3002G4 - Unauthenticated DNS Change
|
136 |
WEB
|
Todor Donev
|
|
2017-06-20
|
|
iBall Baton iB-WRA150N - Unauthenticated DNS Change
|
179 |
WEB
|
Todor Donev
|
|
2017-06-16
|
|
Aerohive HiveOS 5.1r5 < 6.1r5 - Remote Code Execution
|
232 |
WEB
|
Ike-Clinton
|
|
2017-06-14
|
|
MyBB 1.8.12 Stored XSS / File Enumeration
|
220 |
WEB
|
MLT
|
|
2017-06-13
|
|
EFS Easy Chat Server 3.1 - Password Reset
|
289 |
WEB
|
Aitezaz Mohsin
|
|
2017-06-13
|
|
EFS Easy Chat Server 3.1 - Password Disclosure
|
105 |
WEB
|
Aitezaz Mohsin
|
|
2017-06-13
|
|
IPFire 2.19 - Remote Code Execution
|
132 |
WEB
|
0x09AL
|
|
2017-06-07
|
|
Kronos Telestaff < 2.92EU29 - SQL Injection
|
129 |
WEB
|
Goran Tuzovic
|
|
2017-06-06
|
|
EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 - Remote Code Execution
|
167 |
WEB
|
LiquidWorm
|
|
2017-06-02
|
|
Riverbed SteelHead VCX 9.6.0a - Arbitrary File Read
|
130 |
WEB
|
Gregory Draperi
|
|
2017-06-01
|
|
WebKit CachedFrameBase::restore Universal Cross Site Scripting
|
83 |
WEB
|
lokihardt
|
|
2017-06-01
|
|
WebKit Element::setAttributeNodeNS Use-After-Free
|
101 |
WEB
|
lokihardt
|
|
2017-06-01
|
|
WebKit CachedFrame Universal Cross Site Scripting
|
113 |
WEB
|
lokihardt
|
|
2017-06-01
|
|
WebKit JSC emitPutDerivedConstructorToArrowFunctionContextScope Incorrect Check
|
110 |
WEB
|
lokihardt
|
|
2017-06-01
|
|
WebKit JSC JSObject::ensureLength Failure Check
|
100 |
WEB
|
lokihardt
|
|
2017-06-01
|
|
WebKit Document::prepareForDestruction / CachedFrame Universal XSS
|
103 |
WEB
|
lokihardt
|
|
2017-05-31
|
|
TerraMaster F2-420 NAS TOS 3.0.30 - Unauthenticated Remote Code Execution as Root
|
182 |
WEB
|
Simone Margaritelli
|
|
2017-05-31
|
|
IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Hea
|
94 |
WEB
|
SecuriTeam
|
|
2017-05-31
|
|
KEMP LoadMaster 7.135.0.13245 - Persistent Cross-Site Scripting / Remote Code Execution
|
126 |
WEB
|
SecuriTeam
|
|
2017-05-31
|
|
uc-http Daemon - Local File Inclusion / Directory Traversal
|
101 |
WEB
|
Project Insecurity
|
|
2017-05-31
|
|
Apple Safari 10.0.3(12602.4.8) / WebKit - 'HTMLObjectElement::updateWidget' Universal Cross-Site S
|
73 |
WEB
|
Google Security Research
|
|
2017-05-31
|
|
WebKit - Stealing Variables via Page Navigation in FrameLoader::clear
|
90 |
WEB
|
Google Security Research
|
|
2017-05-31
|
|
WebKit - enqueuePageshowEvent and enqueuePopstateEvent Universal Cross-Site Scripting
|
76 |
WEB
|
Google Security Research
|
|
2017-05-31
|
|
WebKit - 'ContainerNode::parserRemoveChild' Universal Cross-Site Scripting
|
65 |
WEB
|
Google Security Research
|
|
2017-05-31
|
|
Apple WebKit / Safari 10.0.3(12602.4.8) - 'Editor::Command::execute' Universal Cross-Site Scriptin
|
88 |
WEB
|
Google Security Research
|
|
2017-05-25
|
|
NetGain EM 7.2.647 build 941 - Authentication Bypass / Local File Inclusion
|
116 |
WEB
|
f3ci
|
|
2017-05-23
|
|
VX Search Enterprise GET Buffer Overflow
|
156 |
WEB
|
Daniel Teixeira
|
|
2017-05-23
|
|
Sync Breeze Enterprise GET Buffer Overflow
|
114 |
WEB
|
Daniel Teixeira
|
|
2017-05-23
|
|
MediaWiki SyntaxHighlight Extension Option Injection
|
231 |
WEB
|
Yorick Koster
|
|
2017-05-22
|
|
Mantis Bug Tracker 1.3.10/2.3.0 - Cross-Site Request Forgery
|
61 |
WEB
|
hyp3rlinx
|
|
2017-05-15
|
|
miniupnpc 2.0.20170421 Denial Of Service
|
243 |
WEB
|
oststrom
|
|
2017-05-11
|
|
ASUS Routers CSRF / Information Disclosure
|
205 |
WEB
|
Yakov Shafranovich
|
|
2017-05-10
|
|
LogRhythm Network Monitor - Authentication Bypass / Command Injection
|
112 |
WEB
|
Francesco Oddo
|
|
2017-05-05
|
|
WordPress 4.6 - Unauthenticated Remote Code Execution
|
228 |
WEB
|
Dawid Golunski
|
|
2017-05-05
|
|
Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Code Execution
|
86 |
WEB
|
LiquidWorm
|
|
2017-05-05
|
|
Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Password Change
|
180 |
WEB
|
LiquidWorm
|
|
2017-05-05
|
|
Serviio PRO 1.8 DLNA Media Streaming Server - REST API Information Disclosure
|
99 |
WEB
|
LiquidWorm
|
|
2017-05-05
|
|
Alerton Webtalk 2.5 / 3.3 - Multiple Vulnerabilities
|
94 |
WEB
|
David Tomaschik
|
|
2017-04-28
|
|
Simple File Uploader - Arbitrary File Download
|
202 |
WEB
|
Daniel Godoy
|
|
2017-04-28
|
|
TYPO3 News Module - SQL Injection
|
118 |
WEB
|
Charles Fol
|
|
2017-04-26
|
|
OpenText Documentum Content Server - dm_bp_transition.ebs docbase Method Arbitrary Code Execution
|
209 |
WEB
|
Andrey B. Panfilov
|
|
2017-04-21
|
|
Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'operationSpreadGeneric' Universal Cross-Site Scrip
|
91 |
WEB
|
Google Security Research
|
|
2017-04-21
|
|
Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'PrototypeMap::createEmptyStructure' Universal Cros
|
122 |
WEB
|
Google Security Research
|
|
2017-04-19
|
|
WebKit operationSpreadGeneric Universal Cross Site Scripting
|
111 |
WEB
|
lokihardt
|
|
2017-04-18
|
|
Mantis Bug Tracker 1.3.0/2.3.0 - Password Reset
|
106 |
WEB
|
hyp3rlinx
|
|
2017-04-18
|
|
Huawei HG532n Command Injection
|
130 |
WEB
|
Ahmed S. Darwish
|
|
2017-04-14
|
|
Alienvault OSSIM/USM 5.3.4/5.3.5 - Remote Command Execution (Metasploit)
|
154 |
WEB
|
Peter Lapp
|
|
2017-04-13
|
|
PCMAN FTP Server 2.0.7 ACCT Buffer Overflow
|
90 |
WEB
|
Cybernetic
|
|
2017-04-13
|
|
XiongMai uc-http 1.0.0 Local File Inclusion / Directory Traversal
|
133 |
WEB
|
Project Insecurity
|
|
2017-04-12
|
|
Apple WebKit / Safari 10.0.3 (12602.4.8) - Universal Cross-Site Scripting via a Focus Event and a Li
|
85 |
WEB
|
Google Security Research
|
|
2017-04-12
|
|
Apple WebKit / Safari 10.0.3 (12602.4.8) - Synchronous Page Load Universal Cross-Site Scripting
|
154 |
WEB
|
Google Security Research
|
|
2017-04-12
|
|
Brother MFC-J6520DW - Authentication Bypass / Password Change
|
162 |
WEB
|
Patryk Bogdan
|
|
2017-04-12
|
|
Adobe Multiple Products - XML Injection File Content Disclosure
|
150 |
WEB
|
Thomas Sluyter
|
|
2017-04-11
|
|
WordPress Plugin CopySafe Web Protect < 2.6 - Cross-Site Request Forgery
|
185 |
WEB
|
Zhiyang Zeng
|
