Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2018-06-11 Exploit Code Downloads   userSpice 4.3.24 - 'X-Forwarded-For' Cross-Site Scripting 119 WEB Dolev Farhi
2018-06-11 Exploit Code Downloads   XiongMai uc-httpd 1.0.0 - Buffer Overflow 205 WEB Andrew Watson
2018-06-11 Exploit Code Downloads   Monstra CMS < 3.0.4 - Cross-Site Scripting 151 WEB DEEPIN2
2018-06-11 Exploit Code Downloads   Jenkins Mailer Plugin < 1.20 - Cross-Site Request Forgery (Send Email) 172 WEB Kl3_GMjq6
2018-06-11 Exploit Code Downloads   Pagekit < 1.0.13 - Cross-Site Scripting Code Generator 153 WEB DEEPIN2
2018-05-28 Exploit Code Downloads   SAP Internet Transaction Server 6200.x - Session Fixation / Cross-Site Scripting 141 WEB J. Carrillo Lencina
2018-05-22 Exploit Code Downloads   GitBucket 4.23.1 - Remote Code Execution 131 WEB Kacper Szurek
2018-05-18 Exploit Code Downloads   Intelbras NCLOUD 300 1.0 - Authentication bypass 154 WEB Pedro Aguiar
2018-05-10 Exploit Code Downloads   Mantis manage_proj_page PHP Code Execution 167 WEB Lars Sorenson
2018-05-08 Exploit Code Downloads   Palo Alto Networks readSessionVarsFromFile() Session Corruption 158 WEB hdm
2018-05-08 Exploit Code Downloads   PlaySMS import.php Code Execution 142 WEB Touhid M.Shaikh
2018-05-08 Exploit Code Downloads   PlaySMS sendfromfile.php Code Execution 141 WEB DarkS3curity
2018-05-07 Exploit Code Downloads   WordPress Plugin User Role Editor < 4.25 - Privilege Escalation 181 WEB Tomislav Paskalev
2018-05-07 Exploit Code Downloads   Apache Struts2 2.0.0 < 2.3.15 - Prefixed Parameters OGNL Injection 211 WEB Takeshi Terada
2018-05-03 Exploit Code Downloads   Nagios XI 5.2.6 < 5.2.9 / 5.3 / 5.4 - Chained Remote Root 160 WEB Jared Arave
2018-05-03 Exploit Code Downloads   Drupal < 7.58 - 'Drupalgeddon3' Authenticated Remote Code 206 WEB SixP4ck3r
2018-05-03 Exploit Code Downloads   osCommerce Installer Unauthenticated Code Execution 141 WEB Daniel Teixeira
2018-04-27 Exploit Code Downloads   GitList 0.6 - Unauthenticated Remote Code Execution 142 WEB Kacper Szurek
2018-04-27 Exploit Code Downloads   SickRage < v2018.03.09 - Clear-Text Credentials HTTP Response 116 WEB Sven Fassbender
2018-04-25 Exploit Code Downloads   Ericsson-LG iPECS NMS A.1Ac - Cleartext Credential Disclosure 154 WEB Berk Cem Göksel
2018-04-25 Exploit Code Downloads   Interspire Email Marketer < 6.1.6 - Remote Admin Authentication Bypass 156 WEB devcoinfet
2018-04-24 Exploit Code Downloads   Apache CouchDB 1.7.0 and 2.x before 2.1.1 - Remote Privilege Escalation 110 WEB Sebastián Castro
2018-04-19 Exploit Code Downloads   Lutron Quantum 2.0 - 3.2.243 - Information Disclosure 146 WEB SadFud
2018-04-16 Exploit Code Downloads   MikroTik 6.41.4 - FTP daemon Denial of Service PoC 151 WEB FarazPajohan
2018-04-16 Exploit Code Downloads   Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution 192 WEB Hans Topo
2018-04-16 Exploit Code Downloads   Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution (PoC) 187 WEB Vitalii Rudnykh
2018-04-10 Exploit Code Downloads   CyberArk Password Vault Web Access < 9.9.5 / < 9.10 / 10.1 - Remote Code Execution 108 WEB RedTeam Pentesting
2018-04-04 Exploit Code Downloads   ProcessMaker Plugin Code Execution 129 WEB Brendan Coles
2018-04-04 Exploit Code Downloads   DuckDuckGo 4.2.0 WebRTC Private IP Leakage 153 WEB Brendan Coles
2018-04-02 Exploit Code Downloads   Vtiger CRM 6.3.0 - Authenticated Arbitrary File Upload (Metasploit) 159 WEB Touhid M.Shaikh
2018-04-02 Exploit Code Downloads   osCommerce 2.3.4.1 - Remote Code Execution 164 WEB Simon Scannell
2018-04-02 Exploit Code Downloads   Homematic CCU2 2.29.23 - Remote Command Execution 163 WEB Gregor Kopf
2018-04-02 Exploit Code Downloads   Homematic CCU2 2.29.23 - Arbitrary File Write 177 WEB Gregor Kopf
2018-03-30 Exploit Code Downloads   Joomla Component Fields - SQLi Remote Code Execution (Metasploit) 196 WEB luisco100
2018-03-30 Exploit Code Downloads   Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Admin Session) 157 WEB Stefan Horst
2018-03-30 Exploit Code Downloads   Square 9 GlobalForms 6.2.x Blind SQL Injection 148 WEB Darrell Damstedt
2018-03-29 Exploit Code Downloads   TwonkyMedia Server 7.0.11-8.5 - Directory Traversal 152 WEB Sven Fassbender
2018-03-27 Exploit Code Downloads   ClipBucket beats_uploader Unauthenticated Arbitrary File Upload 123 WEB Touhid M.Shaikh
2018-03-26 Exploit Code Downloads   XenForo 2 - CSS Loader Denial of Service 149 WEB LockedByte
2018-03-26 Exploit Code Downloads   TL-WR720N 150Mbps Wireless N Router - Cross-Site Request Forgery 162 WEB Mans van Someren
2018-03-26 Exploit Code Downloads   Hikvision IP Camera versions 5.2.0 - 5.3.9 (Builds 140721 - 170109) - Access Control Bypass 327 WEB Matamorphosis
2018-03-22 Exploit Code Downloads   Cisco node-jos < 0.11.0 - Re-sign Tokens 174 WEB zioBlack
2018-03-21 Exploit Code Downloads   Intelbras Telefone IP TIP200 LITE - Local File Disclosure 137 WEB anhax0r
2018-03-16 Exploit Code Downloads   Spring Data REST < 2.6.9 (Ingalls SR9), 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution 201 WEB Antonio Francesco Sardella
2018-03-13 Exploit Code Downloads   Advantech WebAccess < 8.3 - Directory Traversal / Remote Code Execution 146 WEB Chris Lyne
2018-03-13 Exploit Code Downloads   ManageEngine Applications Manager 13.5 - Remote Code Execution (Metasploit) 136 WEB Mehmet Ince
2018-03-07 Exploit Code Downloads   Bravo Tejari Web Portal Cross Site Scripting 132 WEB Arvind V.
2018-02-28 Exploit Code Downloads   Concrete5 < 8.3.0 - Username / Comments Enumeration 181 WEB Chapman Schleiss
2018-02-26 Exploit Code Downloads   AsusWRT LAN Unauthenticated Remote Code Execution 172 WEB Pedro Ribeiro
2018-02-26 Exploit Code Downloads   UserSpice 4.3 - Blind SQL Injection 189 WEB Dolev Farhi
2018-02-07 Exploit Code Downloads   Hava Tahmin 1.0 Database Disclosure 168 WEB indoushka
2018-02-07 Exploit Code Downloads   Hazir Site 2.2 Database Disclosure 194 WEB indoushka
2018-02-07 Exploit Code Downloads   Gateway 1.0 Database Disclosure 174 WEB indoushka
2018-02-07 Exploit Code Downloads   iPortalx Portal Scripti Database Disclosure 192 WEB indoushka
2018-02-06 Exploit Code Downloads   Online Voting System - Authentication Bypass 210 WEB Giulio Comi
2018-02-05 Exploit Code Downloads   Oracle Hospitality Simphony (MICROS) 2.7 < 2.9 - Directory Traversal 171 WEB Dmitry Chastuhin
2018-01-31 Exploit Code Downloads   BMC BladeLogic RSCD Agent 8.3.00.64 - Windows Users Disclosure 195 WEB Paul Taylor
2018-01-30 Exploit Code Downloads   Advantech WebAccess < 8.3 - SQL Injection 161 WEB Chris Lyne
2018-01-29 Exploit Code Downloads   Asus Router Cross Site Script / Authentication Bypass 171 WEB 4TT4CK3R
2018-01-29 Exploit Code Downloads   ASUS DSL-N14U B1 Router 1.1.2.3_345 - Change Administrator Password 179 WEB Víctor Calvo
2018-01-24 Exploit Code Downloads   Kaltura Remote PHP Code Execution 161 WEB Robin Verton
2018-01-24 Exploit Code Downloads   GoAhead Web Server LD_PRELOAD Arbitrary Module Load 175 WEB h00die
2018-01-24 Exploit Code Downloads   Photography CMS 1.0 - Cross-Site Request Forgery (Add Admin) 157 WEB Ihsan Sencan
2018-01-22 Exploit Code Downloads   Simple ASC CMS 1.2 Database Disclosure 145 WEB indoushka
2018-01-22 Exploit Code Downloads   PHPFreeChat 1.7 - Denial of Service 144 WEB A. Pakbaz
2018-01-19 Exploit Code Downloads   Primefaces 5.x - Remote Code Execution (Metasploit) 215 WEB Bjoern Schuette
2018-01-16 Exploit Code Downloads   Adminer 4.3.1 - Server-Side Request Forgery 178 WEB hyp3rlinx
2018-01-16 Exploit Code Downloads   pfSense < 2.1.4 - 'status_rrd_graph_img.php' Command Injection 142 WEB absolomb
2018-01-12 Exploit Code Downloads   D-Link Routers 110/412/615/815 < 1.03 - 'service.cgi' Arbitrary Code Execution 170 WEB Cr0n1c
2018-01-12 Exploit Code Downloads   SAP NetWeaver J2EE Engine 7.40 - SQL Injection 143 WEB Vahagn Vardanyan
2018-01-11 Exploit Code Downloads   Samsung SRN-1670D Web Viewer 1.0.0.193 Arbitrary File Read / Upload 147 WEB Algeria
2018-01-11 Exploit Code Downloads   phpCollab 2.5.1 Unauthenticated File Upload 151 WEB Nick Marcoccio
2018-01-10 Exploit Code Downloads   Synology Photostation 6.7.2-3429 - Remote Code Execution (Metasploit) 174 WEB James Bercegay
2018-01-09 Exploit Code Downloads   FiberHome LM53Q1 - Multiple Vulnerabilities 159 WEB Ibad Shah
2018-01-05 Exploit Code Downloads   D-Link DNS-320L 'mydlinkBRionyg' Backdoor 151 WEB James Bercegay
2018-01-05 Exploit Code Downloads   Western Digital WDMyCloud 'mydlinkBRionyg' Backdoor 145 WEB James Bercegay
2018-01-04 Exploit Code Downloads   Linksys WVBR0-25 User-Agent Command Execution 142 WEB HeadlessZeke
2018-01-02 Exploit Code Downloads   Huawei Router HG532 - Arbitrary Command Execution 176 WEB anonymous
2017-12-28 Exploit Code Downloads   DotNetNuke DreamSlider 01.01.02 - Arbitrary File Download 135 WEB Glafkos Charalambous
2017-12-27 Exploit Code Downloads   Sendroid < 6.5.0 - SQL Injection 143 WEB Onwuka Gideon
2017-12-21 Exploit Code Downloads   Ability Mail Server 3.3.2 - Cross-Site Scripting 99 WEB Aloyce J. Makalanga
2017-12-19 Exploit Code Downloads   Linksys WVBR0 - 'User-Agent' Remote Command Injection 135 WEB nixawk
2017-12-18 Exploit Code Downloads   ITGuard-Manager 0.0.0.1 - Remote Code Execution 129 WEB Nassim Asrir
2017-12-18 Exploit Code Downloads   Western Digital MyCloud multi_uploadify File Upload 120 WEB Zenofex
2017-12-14 Exploit Code Downloads   Microsoft Office DDE Payload Delivery 330 WEB mumbai
2017-12-14 Exploit Code Downloads   Dup Scout Enterprise 10.0.18 Buffer Overflow 343 WEB Chris Higgins
2017-12-14 Exploit Code Downloads   pfSense 2.4.1 CSRF Error Page Clickjacking 399 WEB Yorick Koster
2017-12-06 Exploit Code Downloads   WinduCMS 3.1 - Local File Disclosure 258 WEB Maciek Krupa
2017-12-04 Exploit Code Downloads   Artica Web Proxy 3.06 - Remote Code Execution 218 WEB hyp3rlinx
2017-12-04 Exploit Code Downloads   MistServer 2.12 - Cross-Site Scripting 209 WEB hyp3rlinx
2017-12-04 Exploit Code Downloads   WinduCMS 3.1 Local File Disclosure 199 WEB Maciej Krupa
2017-11-30 Exploit Code Downloads   osCommerce 2.3.4.1 - Arbitrary File Upload 247 WEB Simon Scannell
2017-11-29 Exploit Code Downloads   Synology StorageManager 5.2 - Remote Root Command Execution 242 WEB SecuriTeam
2017-11-20 Exploit Code Downloads   phpMyFAQ 2.9.9 Code Injection 380 WEB tomplixsee
2017-11-15 Exploit Code Downloads   Allworx Server Manager 6x / 6x12 / 48x Cross Site Scripting 147 WEB LiquidWorm
2017-11-14 Exploit Code Downloads   Web Viewer 1.0.0.193 (Samsung SRN-1670D) - Unrestricted File Upload 395 WEB Omar Mezrag
2017-11-09 Exploit Code Downloads   Geutebrueck GCore GCoreServer.exe Buffer Overflow 204 WEB Luca Cappiello
2017-11-09 Exploit Code Downloads   Mako Server 2.5 Command Injection 152 WEB Steven Patterson
2017-11-06 Exploit Code Downloads   WordPress WP Mobile Detector 3.5 Shell Upload 205 WEB h00die
2017-11-06 Exploit Code Downloads   Oracle PeopleSoft Enterprise PeopleTools < 8.55 - Remote Code Execution Via Blind XML External Entit 158 WEB Charles Fol
2017-10-31 Exploit Code Downloads   Oracle Java SE - Web Start jnlp XML External Entity Processing Information Disclosure 229 WEB mr_me
2017-10-26 Exploit Code Downloads   PHPMailer 5.2.21 Local File Disclosure 154 WEB Maciej Krupa
2017-10-24 Exploit Code Downloads   Kaltura < 13.1.0 - Remote Code Execution 162 WEB Robin Verton
2017-10-23 Exploit Code Downloads   TP-Link WR940N Remote Code Execution 178 WEB Tim Carrington
2017-10-23 Exploit Code Downloads   Check_MK 1.2.8p25 - Information Disclosure 159 WEB Julien Ahrens
2017-10-17 Exploit Code Downloads   Webmin 1.850 SSRF / CSRF / Cross Site Scripting 177 WEB hyp3rlinx
2017-10-13 Exploit Code Downloads   Tomcat JSP Upload Bypass Remote Code Execution 297 WEB peewpw
2017-10-12 Exploit Code Downloads   Trend Micro InterScan Messaging Security (Virtual Appliance) - Remote Code Execution (Metasploit) 147 WEB Mehmet Ince
2017-10-10 Exploit Code Downloads   ERS Data System 1.8.1 Java Deserialization 131 WEB West Shepherd
2017-10-10 Exploit Code Downloads   Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execu 279 WEB intx0x80
2017-10-10 Exploit Code Downloads   ClipBucket 2.8.3 - Remote Code Execution 140 WEB Meisam Monsef
2017-10-10 Exploit Code Downloads   FileRun < 2017.09.18 - SQL Injection 164 WEB SPARC
2017-09-28 Exploit Code Downloads   Fibaro Home Center 2 - Remote Command Execution / Privilege Escalation 139 WEB forsec
2017-09-26 Exploit Code Downloads   FLIR Systems FLIR Thermal Camera F/FC/PT/D Multiple Information Disclosures 151 WEB LiquidWorm
2017-09-26 Exploit Code Downloads   FLIR Systems FLIR Thermal Camera PT-Series (PT-334 200562) - Root Remote Code Execution 128 WEB LiquidWorm
2017-09-25 Exploit Code Downloads   Cash Back Comparison Script 1.0 - SQL Injection 136 WEB Ihsan Sencan
2017-09-25 Exploit Code Downloads   DenyAll WAF < 6.3.0 - Remote Code Execution (Metasploit) 139 WEB Mehmet Ince
2017-09-22 Exploit Code Downloads   Stock Photo Selling 1.0 - SQL Injection 151 WEB Ihsan Sencan
2017-09-21 Exploit Code Downloads   Disk Pulse Enterprise 9.9.16 GET Buffer Overflow 128 WEB Chance Johnson
2017-09-19 Exploit Code Downloads   Apache - HTTP OPTIONS Memory Leak 181 WEB Hanno Bock
2017-09-19 Exploit Code Downloads   DigiAffiliate 1.4 - Cross-Site Request Forgery (Update Admin) 140 WEB Ihsan Sencan
2017-09-19 Exploit Code Downloads   Digileave 1.2 - Cross-Site Request Forgery (Update Admin) 145 WEB Ihsan Sencan
2017-09-19 Exploit Code Downloads   Digirez 3.4 - Cross-Site Request Forgery (Update Admin) 142 WEB Ihsan Sencan
2017-09-18 Exploit Code Downloads   D-Link DIR8xx Routers - Local Firmware Upload 242 WEB embedi
2017-09-18 Exploit Code Downloads   D-Link DIR8xx Routers - Root Remote Code Execution 168 WEB embedi