|
2017-09-18
|
|
D-Link DIR8xx Routers - Leak Credentials
|
144 |
WEB
|
embedi
|
|
2017-09-11
|
|
Nimble Professional 1.0 - Cross-Site Request Forgery (Update Admin)
|
158 |
WEB
|
Ihsan Sencan
|
|
2017-09-11
|
|
Topsites Script 1.0 - Cross-Site Request Forgery / PHP Code Injection
|
134 |
WEB
|
Ihsan Sencan
|
|
2017-08-31
|
|
Invoice Manager 3.1 - Cross-Site Request Forgery (Add Admin)
|
258 |
WEB
|
Ali BawazeEer
|
|
2017-08-24
|
|
Automated Logic WebCTRL 6.5 - Unrestricted File Upload / Remote Code Execution
|
154 |
WEB
|
LiquidWorm
|
|
2017-08-11
|
|
DALIM SOFTWARE ES Core 5.0 Build 7184.1 User Enumeration
|
165 |
WEB
|
LiquidWorm
|
|
2017-08-09
|
|
Synology Photo Station 6.7.3-3432 / 6.3-2967 - Remote Code Execution
|
131 |
WEB
|
Kacper Szurek
|
|
2017-08-02
|
|
Advantech SUSIAccess <= 3.0 - 'RecoveryMgmt' File Upload
|
145 |
WEB
|
James Fitts
|
|
2017-08-02
|
|
Advantech SUSIAccess <= 3.0 - Directory Traversal / Information Disclosure (Metasploit)
|
128 |
WEB
|
James Fitts
|
|
2017-07-31
|
|
GitHub Enterprise < 2.8.7 - Remote Code Execution
|
140 |
WEB
|
orange
|
|
2017-07-27
|
|
WebKit JSC - 'JSObject::putInlineSlow and JSValue::putToPrimitive' Universal Cross-Site Scripting
|
113 |
WEB
|
Google Security Research
|
|
2017-07-25
|
|
ManageEngine Desktop Central 10 Build 100087 - Remote Code Execution (Metasploit)
|
217 |
WEB
|
Kacper Szurek
|
|
2017-07-21
|
|
Netscaler SD-WAN 9.1.2.26.561201 - Command Injection (Metasploit)
|
154 |
WEB
|
xort
|
|
2017-07-21
|
|
Sonicwall < 8.1.0.2-14sv - 'sitecustomization.cgi' Command Injection (Metasploit)
|
137 |
WEB
|
xort
|
|
2017-07-21
|
|
Sonicwall < 8.1.0.6-21sv - 'gencsr.cgi' Command Injection (Metasploit)
|
125 |
WEB
|
xort
|
|
2017-07-19
|
|
Easy File Sharing Web Server 7.2 Buffer Overflow
|
162 |
WEB
|
N_A
|
|
2017-07-18
|
|
Barracuda Load Balancer Firmware <= 6.0.1.006 - Remote Command Injection (Metasploit)
|
158 |
WEB
|
xort
|
|
2017-07-18
|
|
Sophos Web Appliance 4.3.0.2 - 'trafficType' Remote Command Injection (Metasploit)
|
137 |
WEB
|
xort
|
|
2017-07-17
|
|
WDTV Live SMP 2.03.20 - Remote Password Reset
|
203 |
WEB
|
Sw1tCh
|
|
2017-07-17
|
|
Apache Struts 2.3.x Showcase - Remote Code Execution (PoC)
|
304 |
WEB
|
Vex Woo
|
|
2017-07-13
|
|
RaidenHTTPD 2.0.44 User-Agent Cross Site Scripting
|
119 |
WEB
|
sultan albalawi
|
|
2017-07-12
|
|
NfSen < 1.3.7 / AlienVault OSSIM 4.3.1 - 'customfmt' Command Injection
|
184 |
WEB
|
Paul Taylor
|
|
2017-07-03
|
|
Humax HG100R 2.0.6 - Backup File Download
|
209 |
WEB
|
gambler
|
|
2017-06-29
|
|
Easy File Sharing Web Server 7.2 - Unrestricted File Upload
|
259 |
WEB
|
Chako
|
|
2017-06-26
|
|
Easy File Sharing HTTP Server 7.2 POST Buffer Overflow
|
89 |
WEB
|
Marco Rivoli
|
|
2017-06-26
|
|
Symantec Messaging Gateway Remote Code Execution
|
140 |
WEB
|
Mehmet Ince
|
|
2017-06-26
|
|
Netgear DGN2200 dnslookup.cgi Command Injection
|
118 |
WEB
|
thecarterb
|
|
2017-06-22
|
|
PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution
|
160 |
WEB
|
phackt_ul
|
|
2017-06-20
|
|
D-Link ADSL DSL-2640B SEA_1.01 Unauthenticated Remote DNS Changer
|
292 |
WEB
|
Todor Donev
|
|
2017-06-20
|
|
D-Link DSL-2640B - Unauthenticated Remote DNS Change
|
126 |
WEB
|
Todor Donev
|
|
2017-06-20
|
|
D-Link DSL-2640U - Unauthenticated DNS Change
|
190 |
WEB
|
Todor Donev
|
|
2017-06-20
|
|
Beetel BCM96338 Router - Unauthenticated DNS Change
|
208 |
WEB
|
Todor Donev
|
|
2017-06-20
|
|
UTstarcom WA3002G4 - Unauthenticated DNS Change
|
146 |
WEB
|
Todor Donev
|
|
2017-06-20
|
|
iBall Baton iB-WRA150N - Unauthenticated DNS Change
|
190 |
WEB
|
Todor Donev
|
|
2017-06-16
|
|
Aerohive HiveOS 5.1r5 < 6.1r5 - Remote Code Execution
|
244 |
WEB
|
Ike-Clinton
|
|
2017-06-14
|
|
MyBB 1.8.12 Stored XSS / File Enumeration
|
228 |
WEB
|
MLT
|
|
2017-06-13
|
|
EFS Easy Chat Server 3.1 - Password Reset
|
298 |
WEB
|
Aitezaz Mohsin
|
|
2017-06-13
|
|
EFS Easy Chat Server 3.1 - Password Disclosure
|
115 |
WEB
|
Aitezaz Mohsin
|
|
2017-06-13
|
|
IPFire 2.19 - Remote Code Execution
|
144 |
WEB
|
0x09AL
|
|
2017-06-07
|
|
Kronos Telestaff < 2.92EU29 - SQL Injection
|
136 |
WEB
|
Goran Tuzovic
|
|
2017-06-06
|
|
EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 - Remote Code Execution
|
178 |
WEB
|
LiquidWorm
|
|
2017-06-02
|
|
Riverbed SteelHead VCX 9.6.0a - Arbitrary File Read
|
142 |
WEB
|
Gregory Draperi
|
|
2017-06-01
|
|
WebKit CachedFrameBase::restore Universal Cross Site Scripting
|
94 |
WEB
|
lokihardt
|
|
2017-06-01
|
|
WebKit Element::setAttributeNodeNS Use-After-Free
|
113 |
WEB
|
lokihardt
|
|
2017-06-01
|
|
WebKit CachedFrame Universal Cross Site Scripting
|
123 |
WEB
|
lokihardt
|
|
2017-06-01
|
|
WebKit JSC emitPutDerivedConstructorToArrowFunctionContextScope Incorrect Check
|
120 |
WEB
|
lokihardt
|
|
2017-06-01
|
|
WebKit JSC JSObject::ensureLength Failure Check
|
113 |
WEB
|
lokihardt
|
|
2017-06-01
|
|
WebKit Document::prepareForDestruction / CachedFrame Universal XSS
|
115 |
WEB
|
lokihardt
|
|
2017-05-31
|
|
TerraMaster F2-420 NAS TOS 3.0.30 - Unauthenticated Remote Code Execution as Root
|
194 |
WEB
|
Simone Margaritelli
|
|
2017-05-31
|
|
IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Hea
|
107 |
WEB
|
SecuriTeam
|
|
2017-05-31
|
|
KEMP LoadMaster 7.135.0.13245 - Persistent Cross-Site Scripting / Remote Code Execution
|
140 |
WEB
|
SecuriTeam
|
|
2017-05-31
|
|
uc-http Daemon - Local File Inclusion / Directory Traversal
|
111 |
WEB
|
Project Insecurity
|
|
2017-05-31
|
|
Apple Safari 10.0.3(12602.4.8) / WebKit - 'HTMLObjectElement::updateWidget' Universal Cross-Site S
|
86 |
WEB
|
Google Security Research
|
|
2017-05-31
|
|
WebKit - Stealing Variables via Page Navigation in FrameLoader::clear
|
105 |
WEB
|
Google Security Research
|
|
2017-05-31
|
|
WebKit - enqueuePageshowEvent and enqueuePopstateEvent Universal Cross-Site Scripting
|
89 |
WEB
|
Google Security Research
|
|
2017-05-31
|
|
WebKit - 'ContainerNode::parserRemoveChild' Universal Cross-Site Scripting
|
75 |
WEB
|
Google Security Research
|
|
2017-05-31
|
|
Apple WebKit / Safari 10.0.3(12602.4.8) - 'Editor::Command::execute' Universal Cross-Site Scriptin
|
99 |
WEB
|
Google Security Research
|
|
2017-05-25
|
|
NetGain EM 7.2.647 build 941 - Authentication Bypass / Local File Inclusion
|
126 |
WEB
|
f3ci
|
|
2017-05-23
|
|
VX Search Enterprise GET Buffer Overflow
|
167 |
WEB
|
Daniel Teixeira
|
|
2017-05-23
|
|
Sync Breeze Enterprise GET Buffer Overflow
|
127 |
WEB
|
Daniel Teixeira
|
|
2017-05-23
|
|
MediaWiki SyntaxHighlight Extension Option Injection
|
240 |
WEB
|
Yorick Koster
|
|
2017-05-22
|
|
Mantis Bug Tracker 1.3.10/2.3.0 - Cross-Site Request Forgery
|
73 |
WEB
|
hyp3rlinx
|
|
2017-05-15
|
|
miniupnpc 2.0.20170421 Denial Of Service
|
255 |
WEB
|
oststrom
|
|
2017-05-11
|
|
ASUS Routers CSRF / Information Disclosure
|
217 |
WEB
|
Yakov Shafranovich
|
|
2017-05-10
|
|
LogRhythm Network Monitor - Authentication Bypass / Command Injection
|
124 |
WEB
|
Francesco Oddo
|
|
2017-05-05
|
|
WordPress 4.6 - Unauthenticated Remote Code Execution
|
239 |
WEB
|
Dawid Golunski
|
|
2017-05-05
|
|
Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Code Execution
|
97 |
WEB
|
LiquidWorm
|
|
2017-05-05
|
|
Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Password Change
|
193 |
WEB
|
LiquidWorm
|
|
2017-05-05
|
|
Serviio PRO 1.8 DLNA Media Streaming Server - REST API Information Disclosure
|
111 |
WEB
|
LiquidWorm
|
|
2017-05-05
|
|
Alerton Webtalk 2.5 / 3.3 - Multiple Vulnerabilities
|
107 |
WEB
|
David Tomaschik
|
|
2017-04-28
|
|
Simple File Uploader - Arbitrary File Download
|
215 |
WEB
|
Daniel Godoy
|
|
2017-04-28
|
|
TYPO3 News Module - SQL Injection
|
132 |
WEB
|
Charles Fol
|
|
2017-04-26
|
|
OpenText Documentum Content Server - dm_bp_transition.ebs docbase Method Arbitrary Code Execution
|
220 |
WEB
|
Andrey B. Panfilov
|
|
2017-04-21
|
|
Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'operationSpreadGeneric' Universal Cross-Site Scrip
|
101 |
WEB
|
Google Security Research
|
|
2017-04-21
|
|
Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'PrototypeMap::createEmptyStructure' Universal Cros
|
132 |
WEB
|
Google Security Research
|
|
2017-04-19
|
|
WebKit operationSpreadGeneric Universal Cross Site Scripting
|
119 |
WEB
|
lokihardt
|
|
2017-04-18
|
|
Mantis Bug Tracker 1.3.0/2.3.0 - Password Reset
|
117 |
WEB
|
hyp3rlinx
|
|
2017-04-18
|
|
Huawei HG532n Command Injection
|
139 |
WEB
|
Ahmed S. Darwish
|
|
2017-04-14
|
|
Alienvault OSSIM/USM 5.3.4/5.3.5 - Remote Command Execution (Metasploit)
|
163 |
WEB
|
Peter Lapp
|
|
2017-04-13
|
|
PCMAN FTP Server 2.0.7 ACCT Buffer Overflow
|
100 |
WEB
|
Cybernetic
|
|
2017-04-13
|
|
XiongMai uc-http 1.0.0 Local File Inclusion / Directory Traversal
|
141 |
WEB
|
Project Insecurity
|
|
2017-04-12
|
|
Apple WebKit / Safari 10.0.3 (12602.4.8) - Universal Cross-Site Scripting via a Focus Event and a Li
|
96 |
WEB
|
Google Security Research
|
|
2017-04-12
|
|
Apple WebKit / Safari 10.0.3 (12602.4.8) - Synchronous Page Load Universal Cross-Site Scripting
|
164 |
WEB
|
Google Security Research
|
|
2017-04-12
|
|
Brother MFC-J6520DW - Authentication Bypass / Password Change
|
173 |
WEB
|
Patryk Bogdan
|
|
2017-04-12
|
|
Adobe Multiple Products - XML Injection File Content Disclosure
|
159 |
WEB
|
Thomas Sluyter
|
|
2017-04-11
|
|
WordPress Plugin CopySafe Web Protect < 2.6 - Cross-Site Request Forgery
|
199 |
WEB
|
Zhiyang Zeng
|
|
2017-04-11
|
|
WordPress Plugin WHIZZ < 1.1.1 - Cross-Site Request Forgery
|
218 |
WEB
|
Zhiyang Zeng
|
|
2017-04-11
|
|
e107 CMS 2.1.4 - Cross-Site Request Forgery
|
145 |
WEB
|
Zhiyang Zeng
|
|
2017-04-11
|
|
QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection
|
133 |
WEB
|
Harry Sintonen
|
|
2017-04-11
|
|
WordPress Plugin Firewall 2 1.3 - Cross-Site Request Forgery / Cross-Site Scripting
|
115 |
WEB
|
dxw
|
|
2017-04-11
|
|
Wordpress webplayer Plugins SQL Injection Vulnerability
|
342 |
WEB
|
Hassan Shakeri
|
|
2017-04-07
|
|
HelpDEZK 1.1.1 - Cross-Site Request Forgery / Code Execution
|
181 |
WEB
|
rungga_reksya
|
|
2017-04-07
|
|
Moodle 2.x/3.x - SQL Injection
|
159 |
WEB
|
Marko Belzetski
|
|
2017-04-06
|
|
D-Link DIR-615 - Cross-Site Request Forgery
|
191 |
WEB
|
Pratik S. Shah
|
|
2017-04-05
|
|
Apple WebKit 10.0.2(12602.3.12.0.1, r210800) - 'constructJSReadableStreamDefaultReader' Type Confu
|
141 |
WEB
|
Google Security Research
|
|
2017-04-05
|
|
Apple WebKit 10.0.2(12602.3.12.0.1) - 'disconnectSubframes' Universal Cross-Site Scripting
|
92 |
WEB
|
Google Security Research
|
|
2017-04-05
|
|
Apple Webkit - Universal Cross-Site Scripting by Accessing a Named Property from an Unloaded Window
|
172 |
WEB
|
Google Security Research
|
|
2017-04-05
|
|
Apple Webkit - 'JSCallbackData' Universal Cross-Site Scripting
|
196 |
WEB
|
Google Security Research
|
|
2017-04-05
|
|
Apple WebKit 10.0.2(12602.3.12.0.1) - 'Frame::setDocument (1)' Universal Cross-Site Scripting
|
189 |
WEB
|
Google Security Research
|
|
2017-04-05
|
|
Splunk Enterprise - Information Disclosure
|
158 |
WEB
|
hyp3rlinx
|
|
2017-03-30
|
|
EyesOfNetwork (EON) 5.1 - SQL Injection
|
204 |
WEB
|
Dany Bach
|
|
2017-03-21
|
|
D-Link DGS-1510 - Multiple Vulnerabilities
|
119 |
WEB
|
Varang Amin
|
|
2017-03-20
|
|
Wordpress Plugin Membership Simplified 1.58 - Arbitrary File Download
|
161 |
WEB
|
The Martian
|
|
2017-03-20
|
|
Microsoft Internet Information Services Cross Site Scripting
|
114 |
WEB
|
David Fernandez
|
|
2017-03-16
|
|
GitHub Enterprise 2.8.0 < 2.8.6 - Remote Code Execution
|
137 |
WEB
|
iblue
|
|
2017-03-15
|
|
Microsoft Edge Fetch API Arbitrary Header Setting
|
200 |
WEB
|
Securify B.V.
|
|
2017-03-13
|
|
e107 <= 2.1.4 - 'keyword' Blind SQL Injection
|
221 |
WEB
|
StAkeR
|
|
2017-03-13
|
|
WatchGuard XTMv 11.12 Build 516911 - User Management Cross-Site Request Forgery
|
233 |
WEB
|
KoreLogic
|
|
2017-03-10
|
|
FTP Voyager Scheduler 16.2.0 - Cross-Site Request Forgery
|
329 |
WEB
|
hyp3rlinx
|
|
2017-03-10
|
|
ASUSWRT RT-AC53 (3.0.0.4.380.6038) - Remote Code Execution
|
286 |
WEB
|
Bruno Bierbaumer
|
|
2017-03-10
|
|
Drupal 7.x Module Services - Remote Code Execution
|
312 |
WEB
|
Charles Fol
|
|
2017-03-09
|
|
Navetti PricePoint 4.6.0.0 - SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery
|
189 |
WEB
|
SEC Consult
|
|
2017-03-08
|
|
Western Digital My Cloud Command Injection
|
312 |
WEB
|
Remco Vermeulen
|
|
2017-03-07
|
|
Deluge Web UI 1.3.13 - Cross-Site Request Forgery
|
230 |
WEB
|
Kyle Neideck
|
|
2017-03-07
|
|
WordPress Multiple Plugins - Arbitrary File Upload
|
319 |
WEB
|
The Martian
|
|
2017-03-06
|
|
pfSense 2.3.2 Cross Site Request Forgery / Cross Site Scripting
|
204 |
WEB
|
Yann CAM
|
|
2017-03-06
|
|
WordPress Username Enumeration
|
273 |
WEB
|
Dctor
|
|
2017-03-01
|
|
NETGEAR DGN2200v1/v2/v3/v4 - Cross-Site Request Forgery
|
200 |
WEB
|
SivertPL
|
|
2017-03-01
|
|
Blizard BB 1.7 (privtmsg) MD5 Hash Retrieve Blind sql injection Exploit
|
345 |
WEB
|
StAkeR
|
|
2017-02-28
|
|
Grails PDF Plugin 0.6 - XML External Entity Injection
|
238 |
WEB
|
Charles Fol
|
|
2017-02-28
|
|
NETGEAR DGN2200v1/v2/v3/v4 - 'dnslookup.cgi' Remote Command Execution
|
214 |
WEB
|
SivertPL
|
|
2017-02-27
|
|
Apple WebKit 10.0.2 - 'Frame::setDocument' Universal Cross-Site Scripting
|
165 |
WEB
|
Google Security Research
|
|
2017-02-27
|
|
Apple WebKit 10.0.2 - Cross-Origin or Sandboxed IFRAME Pop-up Blocker Bypass
|
231 |
WEB
|
Google Security Research
|
|
2017-02-27
|
|
Apple WebKit 10.0.2 - 'FrameLoader::clear' Universal Cross-Site Scripting
|
213 |
WEB
|
Google Security Research
|
|
2017-02-23
|
|
Teradici Management Console 2.2.0 - Privilege Escalation
|
360 |
WEB
|
hantwister
|
