Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2017-07-21 Exploit Code Downloads   Sonicwall < 8.1.0.2-14sv - 'sitecustomization.cgi' Command Injection (Metasploit) 134 WEB xort
2017-07-21 Exploit Code Downloads   Sonicwall < 8.1.0.6-21sv - 'gencsr.cgi' Command Injection (Metasploit) 123 WEB xort
2017-07-19 Exploit Code Downloads   Easy File Sharing Web Server 7.2 Buffer Overflow 160 WEB N_A
2017-07-18 Exploit Code Downloads   Barracuda Load Balancer Firmware <= 6.0.1.006 - Remote Command Injection (Metasploit) 157 WEB xort
2017-07-18 Exploit Code Downloads   Sophos Web Appliance 4.3.0.2 - 'trafficType' Remote Command Injection (Metasploit) 136 WEB xort
2017-07-17 Exploit Code Downloads   WDTV Live SMP 2.03.20 - Remote Password Reset 200 WEB Sw1tCh
2017-07-17 Exploit Code Downloads   Apache Struts 2.3.x Showcase - Remote Code Execution (PoC) 301 WEB Vex Woo
2017-07-13 Exploit Code Downloads   RaidenHTTPD 2.0.44 User-Agent Cross Site Scripting 116 WEB sultan albalawi
2017-07-12 Exploit Code Downloads   NfSen < 1.3.7 / AlienVault OSSIM 4.3.1 - 'customfmt' Command Injection 179 WEB Paul Taylor
2017-07-03 Exploit Code Downloads   Humax HG100R 2.0.6 - Backup File Download 206 WEB gambler
2017-06-29 Exploit Code Downloads   Easy File Sharing Web Server 7.2 - Unrestricted File Upload 252 WEB Chako
2017-06-26 Exploit Code Downloads   Easy File Sharing HTTP Server 7.2 POST Buffer Overflow 85 WEB Marco Rivoli
2017-06-26 Exploit Code Downloads   Symantec Messaging Gateway Remote Code Execution 136 WEB Mehmet Ince
2017-06-26 Exploit Code Downloads   Netgear DGN2200 dnslookup.cgi Command Injection 112 WEB thecarterb
2017-06-22 Exploit Code Downloads   PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution 158 WEB phackt_ul
2017-06-20 Exploit Code Downloads   D-Link ADSL DSL-2640B SEA_1.01 Unauthenticated Remote DNS Changer 291 WEB Todor Donev
2017-06-20 Exploit Code Downloads   D-Link DSL-2640B - Unauthenticated Remote DNS Change 125 WEB Todor Donev
2017-06-20 Exploit Code Downloads   D-Link DSL-2640U - Unauthenticated DNS Change 189 WEB Todor Donev
2017-06-20 Exploit Code Downloads   Beetel BCM96338 Router - Unauthenticated DNS Change 207 WEB Todor Donev
2017-06-20 Exploit Code Downloads   UTstarcom WA3002G4 - Unauthenticated DNS Change 144 WEB Todor Donev
2017-06-20 Exploit Code Downloads   iBall Baton iB-WRA150N - Unauthenticated DNS Change 188 WEB Todor Donev
2017-06-16 Exploit Code Downloads   Aerohive HiveOS 5.1r5 < 6.1r5 - Remote Code Execution 240 WEB Ike-Clinton
2017-06-14 Exploit Code Downloads   MyBB 1.8.12 Stored XSS / File Enumeration 226 WEB MLT
2017-06-13 Exploit Code Downloads   EFS Easy Chat Server 3.1 - Password Reset 295 WEB Aitezaz Mohsin
2017-06-13 Exploit Code Downloads   EFS Easy Chat Server 3.1 - Password Disclosure 113 WEB Aitezaz Mohsin
2017-06-13 Exploit Code Downloads   IPFire 2.19 - Remote Code Execution 142 WEB 0x09AL
2017-06-07 Exploit Code Downloads   Kronos Telestaff < 2.92EU29 - SQL Injection 134 WEB Goran Tuzovic
2017-06-06 Exploit Code Downloads   EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 - Remote Code Execution 175 WEB LiquidWorm
2017-06-02 Exploit Code Downloads   Riverbed SteelHead VCX 9.6.0a - Arbitrary File Read 139 WEB Gregory Draperi
2017-06-01 Exploit Code Downloads   WebKit CachedFrameBase::restore Universal Cross Site Scripting 91 WEB lokihardt
2017-06-01 Exploit Code Downloads   WebKit Element::setAttributeNodeNS Use-After-Free 109 WEB lokihardt
2017-06-01 Exploit Code Downloads   WebKit CachedFrame Universal Cross Site Scripting 121 WEB lokihardt
2017-06-01 Exploit Code Downloads   WebKit JSC emitPutDerivedConstructorToArrowFunctionContextScope Incorrect Check 117 WEB lokihardt
2017-06-01 Exploit Code Downloads   WebKit JSC JSObject::ensureLength Failure Check 110 WEB lokihardt
2017-06-01 Exploit Code Downloads   WebKit Document::prepareForDestruction / CachedFrame Universal XSS 113 WEB lokihardt
2017-05-31 Exploit Code Downloads   TerraMaster F2-420 NAS TOS 3.0.30 - Unauthenticated Remote Code Execution as Root 192 WEB Simone Margaritelli
2017-05-31 Exploit Code Downloads   IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Hea 103 WEB SecuriTeam
2017-05-31 Exploit Code Downloads   KEMP LoadMaster 7.135.0.13245 - Persistent Cross-Site Scripting / Remote Code Execution 136 WEB SecuriTeam
2017-05-31 Exploit Code Downloads   uc-http Daemon - Local File Inclusion / Directory Traversal 109 WEB Project Insecurity
2017-05-31 Exploit Code Downloads   Apple Safari 10.0.3(12602.4.8) / WebKit - 'HTMLObjectElement::updateWidget' Universal Cross-Site S 84 WEB Google Security Research
2017-05-31 Exploit Code Downloads   WebKit - Stealing Variables via Page Navigation in FrameLoader::clear 103 WEB Google Security Research
2017-05-31 Exploit Code Downloads   WebKit - enqueuePageshowEvent and enqueuePopstateEvent Universal Cross-Site Scripting 87 WEB Google Security Research
2017-05-31 Exploit Code Downloads   WebKit - 'ContainerNode::parserRemoveChild' Universal Cross-Site Scripting 73 WEB Google Security Research
2017-05-31 Exploit Code Downloads   Apple WebKit / Safari 10.0.3(12602.4.8) - 'Editor::Command::execute' Universal Cross-Site Scriptin 97 WEB Google Security Research
2017-05-25 Exploit Code Downloads   NetGain EM 7.2.647 build 941 - Authentication Bypass / Local File Inclusion 124 WEB f3ci
2017-05-23 Exploit Code Downloads   VX Search Enterprise GET Buffer Overflow 165 WEB Daniel Teixeira
2017-05-23 Exploit Code Downloads   Sync Breeze Enterprise GET Buffer Overflow 125 WEB Daniel Teixeira
2017-05-23 Exploit Code Downloads   MediaWiki SyntaxHighlight Extension Option Injection 239 WEB Yorick Koster
2017-05-22 Exploit Code Downloads   Mantis Bug Tracker 1.3.10/2.3.0 - Cross-Site Request Forgery 69 WEB hyp3rlinx
2017-05-15 Exploit Code Downloads   miniupnpc 2.0.20170421 Denial Of Service 252 WEB oststrom
2017-05-11 Exploit Code Downloads   ASUS Routers CSRF / Information Disclosure 214 WEB Yakov Shafranovich
2017-05-10 Exploit Code Downloads   LogRhythm Network Monitor - Authentication Bypass / Command Injection 121 WEB Francesco Oddo
2017-05-05 Exploit Code Downloads   WordPress 4.6 - Unauthenticated Remote Code Execution 238 WEB Dawid Golunski
2017-05-05 Exploit Code Downloads   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Code Execution 96 WEB LiquidWorm
2017-05-05 Exploit Code Downloads   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Password Change 192 WEB LiquidWorm
2017-05-05 Exploit Code Downloads   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Information Disclosure 109 WEB LiquidWorm
2017-05-05 Exploit Code Downloads   Alerton Webtalk 2.5 / 3.3 - Multiple Vulnerabilities 105 WEB David Tomaschik
2017-04-28 Exploit Code Downloads   Simple File Uploader - Arbitrary File Download 213 WEB Daniel Godoy
2017-04-28 Exploit Code Downloads   TYPO3 News Module - SQL Injection 130 WEB Charles Fol
2017-04-26 Exploit Code Downloads   OpenText Documentum Content Server - dm_bp_transition.ebs docbase Method Arbitrary Code Execution 219 WEB Andrey B. Panfilov
2017-04-21 Exploit Code Downloads   Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'operationSpreadGeneric' Universal Cross-Site Scrip 99 WEB Google Security Research
2017-04-21 Exploit Code Downloads   Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'PrototypeMap::createEmptyStructure' Universal Cros 130 WEB Google Security Research
2017-04-19 Exploit Code Downloads   WebKit operationSpreadGeneric Universal Cross Site Scripting 117 WEB lokihardt
2017-04-18 Exploit Code Downloads   Mantis Bug Tracker 1.3.0/2.3.0 - Password Reset 115 WEB hyp3rlinx
2017-04-18 Exploit Code Downloads   Huawei HG532n Command Injection 138 WEB Ahmed S. Darwish
2017-04-14 Exploit Code Downloads   Alienvault OSSIM/USM 5.3.4/5.3.5 - Remote Command Execution (Metasploit) 162 WEB Peter Lapp
2017-04-13 Exploit Code Downloads   PCMAN FTP Server 2.0.7 ACCT Buffer Overflow 99 WEB Cybernetic
2017-04-13 Exploit Code Downloads   XiongMai uc-http 1.0.0 Local File Inclusion / Directory Traversal 140 WEB Project Insecurity
2017-04-12 Exploit Code Downloads   Apple WebKit / Safari 10.0.3 (12602.4.8) - Universal Cross-Site Scripting via a Focus Event and a Li 94 WEB Google Security Research
2017-04-12 Exploit Code Downloads   Apple WebKit / Safari 10.0.3 (12602.4.8) - Synchronous Page Load Universal Cross-Site Scripting 164 WEB Google Security Research
2017-04-12 Exploit Code Downloads   Brother MFC-J6520DW - Authentication Bypass / Password Change 173 WEB Patryk Bogdan
2017-04-12 Exploit Code Downloads   Adobe Multiple Products - XML Injection File Content Disclosure 159 WEB Thomas Sluyter
2017-04-11 Exploit Code Downloads   WordPress Plugin CopySafe Web Protect < 2.6 - Cross-Site Request Forgery 198 WEB Zhiyang Zeng
2017-04-11 Exploit Code Downloads   WordPress Plugin WHIZZ < 1.1.1 - Cross-Site Request Forgery 216 WEB Zhiyang Zeng
2017-04-11 Exploit Code Downloads   e107 CMS 2.1.4 - Cross-Site Request Forgery 143 WEB Zhiyang Zeng
2017-04-11 Exploit Code Downloads   QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection 131 WEB Harry Sintonen
2017-04-11 Exploit Code Downloads   WordPress Plugin Firewall 2 1.3 - Cross-Site Request Forgery / Cross-Site Scripting 112 WEB dxw
2017-04-11 Exploit Code Downloads   Wordpress webplayer Plugins SQL Injection Vulnerability 340 WEB Hassan Shakeri
2017-04-07 Exploit Code Downloads   HelpDEZK 1.1.1 - Cross-Site Request Forgery / Code Execution 178 WEB rungga_reksya
2017-04-07 Exploit Code Downloads   Moodle 2.x/3.x - SQL Injection 157 WEB Marko Belzetski
2017-04-06 Exploit Code Downloads   D-Link DIR-615 - Cross-Site Request Forgery 187 WEB Pratik S. Shah
2017-04-05 Exploit Code Downloads   Apple WebKit 10.0.2(12602.3.12.0.1, r210800) - 'constructJSReadableStreamDefaultReader' Type Confu 139 WEB Google Security Research
2017-04-05 Exploit Code Downloads   Apple WebKit 10.0.2(12602.3.12.0.1) - 'disconnectSubframes' Universal Cross-Site Scripting 88 WEB Google Security Research
2017-04-05 Exploit Code Downloads   Apple Webkit - Universal Cross-Site Scripting by Accessing a Named Property from an Unloaded Window 170 WEB Google Security Research
2017-04-05 Exploit Code Downloads   Apple Webkit - 'JSCallbackData' Universal Cross-Site Scripting 194 WEB Google Security Research
2017-04-05 Exploit Code Downloads   Apple WebKit 10.0.2(12602.3.12.0.1) - 'Frame::setDocument (1)' Universal Cross-Site Scripting 187 WEB Google Security Research
2017-04-05 Exploit Code Downloads   Splunk Enterprise - Information Disclosure 155 WEB hyp3rlinx
2017-03-30 Exploit Code Downloads   EyesOfNetwork (EON) 5.1 - SQL Injection 201 WEB Dany Bach
2017-03-21 Exploit Code Downloads   D-Link DGS-1510 - Multiple Vulnerabilities 117 WEB Varang Amin
2017-03-20 Exploit Code Downloads   Wordpress Plugin Membership Simplified 1.58 - Arbitrary File Download 159 WEB The Martian
2017-03-20 Exploit Code Downloads   Microsoft Internet Information Services Cross Site Scripting 112 WEB David Fernandez
2017-03-16 Exploit Code Downloads   GitHub Enterprise 2.8.0 < 2.8.6 - Remote Code Execution 134 WEB iblue
2017-03-15 Exploit Code Downloads   Microsoft Edge Fetch API Arbitrary Header Setting 197 WEB Securify B.V.
2017-03-13 Exploit Code Downloads   e107 <= 2.1.4 - 'keyword' Blind SQL Injection 219 WEB StAkeR
2017-03-13 Exploit Code Downloads   WatchGuard XTMv 11.12 Build 516911 - User Management Cross-Site Request Forgery 232 WEB KoreLogic
2017-03-10 Exploit Code Downloads   FTP Voyager Scheduler 16.2.0 - Cross-Site Request Forgery 327 WEB hyp3rlinx
2017-03-10 Exploit Code Downloads   ASUSWRT RT-AC53 (3.0.0.4.380.6038) - Remote Code Execution 285 WEB Bruno Bierbaumer
2017-03-10 Exploit Code Downloads   Drupal 7.x Module Services - Remote Code Execution 311 WEB Charles Fol
2017-03-09 Exploit Code Downloads   Navetti PricePoint 4.6.0.0 - SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery 186 WEB SEC Consult
2017-03-08 Exploit Code Downloads   Western Digital My Cloud Command Injection 310 WEB Remco Vermeulen
2017-03-07 Exploit Code Downloads   Deluge Web UI 1.3.13 - Cross-Site Request Forgery 226 WEB Kyle Neideck
2017-03-07 Exploit Code Downloads   WordPress Multiple Plugins - Arbitrary File Upload 317 WEB The Martian
2017-03-06 Exploit Code Downloads   pfSense 2.3.2 Cross Site Request Forgery / Cross Site Scripting 203 WEB Yann CAM
2017-03-06 Exploit Code Downloads   WordPress Username Enumeration 272 WEB Dctor
2017-03-01 Exploit Code Downloads   NETGEAR DGN2200v1/v2/v3/v4 - Cross-Site Request Forgery 199 WEB SivertPL
2017-03-01 Exploit Code Downloads   Blizard BB 1.7 (privtmsg) MD5 Hash Retrieve Blind sql injection Exploit 344 WEB StAkeR
2017-02-28 Exploit Code Downloads   Grails PDF Plugin 0.6 - XML External Entity Injection 237 WEB Charles Fol
2017-02-28 Exploit Code Downloads   NETGEAR DGN2200v1/v2/v3/v4 - 'dnslookup.cgi' Remote Command Execution 212 WEB SivertPL
2017-02-27 Exploit Code Downloads   Apple WebKit 10.0.2 - 'Frame::setDocument' Universal Cross-Site Scripting 163 WEB Google Security Research
2017-02-27 Exploit Code Downloads   Apple WebKit 10.0.2 - Cross-Origin or Sandboxed IFRAME Pop-up Blocker Bypass 230 WEB Google Security Research
2017-02-27 Exploit Code Downloads   Apple WebKit 10.0.2 - 'FrameLoader::clear' Universal Cross-Site Scripting 212 WEB Google Security Research
2017-02-23 Exploit Code Downloads   Teradici Management Console 2.2.0 - Privilege Escalation 358 WEB hantwister
2017-02-22 Exploit Code Downloads   AlienVault OSSIM/USM <= 5.3.1 - Remote Code Execution (Metasploit) 133 WEB Mehmet Ince
2017-02-22 Exploit Code Downloads   Sonicwall 8.1.0.2-14sv - 'viewcert.cgi' Remote Command Injection (Metasploit) 201 WEB xort
2017-02-22 Exploit Code Downloads   Sonicwall 8.1.0.2-14sv - 'extensionsettings.cgi' Remote Command Injection (Metasploit) 172 WEB xort
2017-02-22 Exploit Code Downloads   Sophos Web Appliance 4.2.1.3 - DiagnosticTools Remote Command Injection (Metasploit) 176 WEB xort
2017-02-22 Exploit Code Downloads   Sophos Web Appliance 4.2.1.3 - block/unblock Remote Command Injection (Metasploit) 222 WEB xort
2017-02-20 Exploit Code Downloads   NETGEAR DGN2200v1/v2/v3/v4 - 'ping.cgi' Remote Command Execution 227 WEB SivertPL
2017-02-20 Exploit Code Downloads   TI Online Examination System 2.0 Admin Password Changer Exploit 252 WEB StAkeR
2017-02-17 Exploit Code Downloads   dotCMS 3.6.1 - Blind Boolean SQL Injection 247 WEB Ben Nott
2017-02-16 Exploit Code Downloads   Geutebruck 5.02024 G-Cam/EFD-2250 - Remote Command Execution (Metasploit) 176 WEB Davy Douhine
2017-02-14 Exploit Code Downloads   PHP Marketplace Script - SQL Injection 212 WEB Th3GundY
2017-02-10 Exploit Code Downloads   WordPress wp-json Content Injection 258 WEB Larry W. Cashdollar
2017-02-09 Exploit Code Downloads   POSNIC 1.03 Shell Upload Exploit 159 WEB Rony Das
2017-02-06 Exploit Code Downloads   Alstrasoft Template Seller Pro 3.25e - 'tempid' Parameter SQL Injection 99 WEB Ihsan Sencan