Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2017-06-01   WebKit Element::setAttributeNodeNS Use-After-Free 104 WEB lokihardt
2017-06-01   WebKit CachedFrame Universal Cross Site Scripting 116 WEB lokihardt
2017-06-01   WebKit JSC emitPutDerivedConstructorToArrowFunctionContextScope Incorrect Check 111 WEB lokihardt
2017-06-01   WebKit JSC JSObject::ensureLength Failure Check 104 WEB lokihardt
2017-06-01   WebKit Document::prepareForDestruction / CachedFrame Universal XSS 107 WEB lokihardt
2017-05-31   TerraMaster F2-420 NAS TOS 3.0.30 - Unauthenticated Remote Code Execution as Root 186 WEB Simone Margaritelli
2017-05-31   IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Hea 98 WEB SecuriTeam
2017-05-31   KEMP LoadMaster 7.135.0.13245 - Persistent Cross-Site Scripting / Remote Code Execution 130 WEB SecuriTeam
2017-05-31   uc-http Daemon - Local File Inclusion / Directory Traversal 103 WEB Project Insecurity
2017-05-31   Apple Safari 10.0.3(12602.4.8) / WebKit - 'HTMLObjectElement::updateWidget' Universal Cross-Site S 77 WEB Google Security Research
2017-05-31   WebKit - Stealing Variables via Page Navigation in FrameLoader::clear 94 WEB Google Security Research
2017-05-31   WebKit - enqueuePageshowEvent and enqueuePopstateEvent Universal Cross-Site Scripting 80 WEB Google Security Research
2017-05-31   WebKit - 'ContainerNode::parserRemoveChild' Universal Cross-Site Scripting 68 WEB Google Security Research
2017-05-31   Apple WebKit / Safari 10.0.3(12602.4.8) - 'Editor::Command::execute' Universal Cross-Site Scriptin 92 WEB Google Security Research
2017-05-25   NetGain EM 7.2.647 build 941 - Authentication Bypass / Local File Inclusion 119 WEB f3ci
2017-05-23   VX Search Enterprise GET Buffer Overflow 158 WEB Daniel Teixeira
2017-05-23   Sync Breeze Enterprise GET Buffer Overflow 116 WEB Daniel Teixeira
2017-05-23   MediaWiki SyntaxHighlight Extension Option Injection 233 WEB Yorick Koster
2017-05-22   Mantis Bug Tracker 1.3.10/2.3.0 - Cross-Site Request Forgery 64 WEB hyp3rlinx
2017-05-15   miniupnpc 2.0.20170421 Denial Of Service 247 WEB oststrom
2017-05-11   ASUS Routers CSRF / Information Disclosure 208 WEB Yakov Shafranovich
2017-05-10   LogRhythm Network Monitor - Authentication Bypass / Command Injection 114 WEB Francesco Oddo
2017-05-05   WordPress 4.6 - Unauthenticated Remote Code Execution 232 WEB Dawid Golunski
2017-05-05   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Code Execution 90 WEB LiquidWorm
2017-05-05   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Password Change 185 WEB LiquidWorm
2017-05-05   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Information Disclosure 102 WEB LiquidWorm
2017-05-05   Alerton Webtalk 2.5 / 3.3 - Multiple Vulnerabilities 98 WEB David Tomaschik
2017-04-28   Simple File Uploader - Arbitrary File Download 205 WEB Daniel Godoy
2017-04-28   TYPO3 News Module - SQL Injection 122 WEB Charles Fol
2017-04-26   OpenText Documentum Content Server - dm_bp_transition.ebs docbase Method Arbitrary Code Execution 212 WEB Andrey B. Panfilov
2017-04-21   Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'operationSpreadGeneric' Universal Cross-Site Scrip 93 WEB Google Security Research
2017-04-21   Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'PrototypeMap::createEmptyStructure' Universal Cros 123 WEB Google Security Research
2017-04-19   WebKit operationSpreadGeneric Universal Cross Site Scripting 113 WEB lokihardt
2017-04-18   Mantis Bug Tracker 1.3.0/2.3.0 - Password Reset 110 WEB hyp3rlinx
2017-04-18   Huawei HG532n Command Injection 133 WEB Ahmed S. Darwish
2017-04-14   Alienvault OSSIM/USM 5.3.4/5.3.5 - Remote Command Execution (Metasploit) 157 WEB Peter Lapp
2017-04-13   PCMAN FTP Server 2.0.7 ACCT Buffer Overflow 93 WEB Cybernetic
2017-04-13   XiongMai uc-http 1.0.0 Local File Inclusion / Directory Traversal 134 WEB Project Insecurity
2017-04-12   Apple WebKit / Safari 10.0.3 (12602.4.8) - Universal Cross-Site Scripting via a Focus Event and a Li 88 WEB Google Security Research
2017-04-12   Apple WebKit / Safari 10.0.3 (12602.4.8) - Synchronous Page Load Universal Cross-Site Scripting 157 WEB Google Security Research
2017-04-12   Brother MFC-J6520DW - Authentication Bypass / Password Change 166 WEB Patryk Bogdan
2017-04-12   Adobe Multiple Products - XML Injection File Content Disclosure 153 WEB Thomas Sluyter
2017-04-11   WordPress Plugin CopySafe Web Protect < 2.6 - Cross-Site Request Forgery 189 WEB Zhiyang Zeng
2017-04-11   WordPress Plugin WHIZZ < 1.1.1 - Cross-Site Request Forgery 209 WEB Zhiyang Zeng
2017-04-11   e107 CMS 2.1.4 - Cross-Site Request Forgery 135 WEB Zhiyang Zeng
2017-04-11   QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection 124 WEB Harry Sintonen
2017-04-11   WordPress Plugin Firewall 2 1.3 - Cross-Site Request Forgery / Cross-Site Scripting 106 WEB dxw
2017-04-11   Wordpress webplayer Plugins SQL Injection Vulnerability 333 WEB Hassan Shakeri
2017-04-07   HelpDEZK 1.1.1 - Cross-Site Request Forgery / Code Execution 172 WEB rungga_reksya
2017-04-07   Moodle 2.x/3.x - SQL Injection 151 WEB Marko Belzetski
2017-04-06   D-Link DIR-615 - Cross-Site Request Forgery 181 WEB Pratik S. Shah
2017-04-05   Apple WebKit 10.0.2(12602.3.12.0.1, r210800) - 'constructJSReadableStreamDefaultReader' Type Confu 132 WEB Google Security Research
2017-04-05   Apple WebKit 10.0.2(12602.3.12.0.1) - 'disconnectSubframes' Universal Cross-Site Scripting 82 WEB Google Security Research
2017-04-05   Apple Webkit - Universal Cross-Site Scripting by Accessing a Named Property from an Unloaded Window 163 WEB Google Security Research
2017-04-05   Apple Webkit - 'JSCallbackData' Universal Cross-Site Scripting 188 WEB Google Security Research
2017-04-05   Apple WebKit 10.0.2(12602.3.12.0.1) - 'Frame::setDocument (1)' Universal Cross-Site Scripting 182 WEB Google Security Research
2017-04-05   Splunk Enterprise - Information Disclosure 146 WEB hyp3rlinx
2017-03-30   EyesOfNetwork (EON) 5.1 - SQL Injection 195 WEB Dany Bach
2017-03-21   D-Link DGS-1510 - Multiple Vulnerabilities 110 WEB Varang Amin
2017-03-20   Wordpress Plugin Membership Simplified 1.58 - Arbitrary File Download 152 WEB The Martian
2017-03-20   Microsoft Internet Information Services Cross Site Scripting 107 WEB David Fernandez
2017-03-16   GitHub Enterprise 2.8.0 < 2.8.6 - Remote Code Execution 128 WEB iblue
2017-03-15   Microsoft Edge Fetch API Arbitrary Header Setting 192 WEB Securify B.V.
2017-03-13   e107 <= 2.1.4 - 'keyword' Blind SQL Injection 214 WEB StAkeR
2017-03-13   WatchGuard XTMv 11.12 Build 516911 - User Management Cross-Site Request Forgery 226 WEB KoreLogic
2017-03-10   FTP Voyager Scheduler 16.2.0 - Cross-Site Request Forgery 320 WEB hyp3rlinx
2017-03-10   ASUSWRT RT-AC53 (3.0.0.4.380.6038) - Remote Code Execution 275 WEB Bruno Bierbaumer
2017-03-10   Drupal 7.x Module Services - Remote Code Execution 305 WEB Charles Fol
2017-03-09   Navetti PricePoint 4.6.0.0 - SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery 179 WEB SEC Consult
2017-03-08   Western Digital My Cloud Command Injection 304 WEB Remco Vermeulen
2017-03-07   Deluge Web UI 1.3.13 - Cross-Site Request Forgery 214 WEB Kyle Neideck
2017-03-07   WordPress Multiple Plugins - Arbitrary File Upload 301 WEB The Martian
2017-03-06   pfSense 2.3.2 Cross Site Request Forgery / Cross Site Scripting 198 WEB Yann CAM
2017-03-06   WordPress Username Enumeration 267 WEB Dctor
2017-03-01   NETGEAR DGN2200v1/v2/v3/v4 - Cross-Site Request Forgery 193 WEB SivertPL
2017-03-01   Blizard BB 1.7 (privtmsg) MD5 Hash Retrieve Blind sql injection Exploit 336 WEB StAkeR
2017-02-28   Grails PDF Plugin 0.6 - XML External Entity Injection 231 WEB Charles Fol
2017-02-28   NETGEAR DGN2200v1/v2/v3/v4 - 'dnslookup.cgi' Remote Command Execution 207 WEB SivertPL
2017-02-27   Apple WebKit 10.0.2 - 'Frame::setDocument' Universal Cross-Site Scripting 155 WEB Google Security Research
2017-02-27   Apple WebKit 10.0.2 - Cross-Origin or Sandboxed IFRAME Pop-up Blocker Bypass 223 WEB Google Security Research
2017-02-27   Apple WebKit 10.0.2 - 'FrameLoader::clear' Universal Cross-Site Scripting 207 WEB Google Security Research
2017-02-23   Teradici Management Console 2.2.0 - Privilege Escalation 353 WEB hantwister
2017-02-22   AlienVault OSSIM/USM <= 5.3.1 - Remote Code Execution (Metasploit) 128 WEB Mehmet Ince
2017-02-22   Sonicwall 8.1.0.2-14sv - 'viewcert.cgi' Remote Command Injection (Metasploit) 197 WEB xort
2017-02-22   Sonicwall 8.1.0.2-14sv - 'extensionsettings.cgi' Remote Command Injection (Metasploit) 166 WEB xort
2017-02-22   Sophos Web Appliance 4.2.1.3 - DiagnosticTools Remote Command Injection (Metasploit) 173 WEB xort
2017-02-22   Sophos Web Appliance 4.2.1.3 - block/unblock Remote Command Injection (Metasploit) 217 WEB xort
2017-02-20   NETGEAR DGN2200v1/v2/v3/v4 - 'ping.cgi' Remote Command Execution 223 WEB SivertPL
2017-02-20   TI Online Examination System 2.0 Admin Password Changer Exploit 248 WEB StAkeR
2017-02-17   dotCMS 3.6.1 - Blind Boolean SQL Injection 243 WEB Ben Nott
2017-02-16   Geutebruck 5.02024 G-Cam/EFD-2250 - Remote Command Execution (Metasploit) 169 WEB Davy Douhine
2017-02-14   PHP Marketplace Script - SQL Injection 204 WEB Th3GundY
2017-02-10   WordPress wp-json Content Injection 253 WEB Larry W. Cashdollar
2017-02-09   POSNIC 1.03 Shell Upload Exploit 153 WEB Rony Das
2017-02-06   Alstrasoft Template Seller Pro 3.25e - 'tempid' Parameter SQL Injection 94 WEB Ihsan Sencan
2017-02-03   WordPress 4.7.0/4.7.1 - Unauthenticated Content Injection (Ruby) 339 WEB Harsh Jaiswal
2017-02-03   WordPress 4.7.0/4.7.1 - Unauthenticated Content Injection (Python) 221 WEB leonjza
2017-02-03   Multiple Netgear Routers - Password Disclosure 202 WEB Trustwave's SpiderLabs
2017-02-03   HelpDeskZ < 1.0.2 - Authenticated SQL Injection / Unauthorized File Download 201 WEB Mariusz Poplawski
2017-02-03   Joomla! < 3.6.4 - Admin TakeOver 321 WEB Charles Fol
2017-02-03   Joomla! < 2.5.2 - Admin Creation 94 WEB Charles Fol
2017-01-23   PageKit 1.0.10 - Password Reset 100 WEB Saurabh Banawar
2017-01-22   Pirelli DRG A115 v3 ADSL Router - Unauthenticated DNS Change 188 WEB Todor Donev
2017-01-22   Tenda ADSL2/2+ Modem D820R - Unauthenticated DNS Change 285 WEB Todor Donev
2017-01-18   BoZoN 2.4 - Remote Code Execution 247 WEB hyp3rlinx
2017-01-18   dirLIST 0.3.0 - Arbitrary File Upload 214 WEB hyp3rlinx
2017-01-18   WordPress WooCommerce Direct Download Local File Inclusion 231 WEB Diego Celdran Morell
2017-01-17   Tenda ADSL2/2+ Modem D840R - Unauthenticated DNS Change 233 WEB Todor Donev
2017-01-17   Pirelli DRG A115 ADSL Router - Unauthenticated DNS Change 225 WEB Todor Donev
2017-01-13   iTechscripts Freelancer Script 5.11 - 'sk' Parameter SQL Injection 296 WEB v3n0m
2017-01-11   Freepbx < 2.11.1.5 - Remote Code Execution 209 WEB inj3ctor3
2017-01-04   PHPMailer Sendmail Argument Injection 193 WEB Spencer McIntyre
2017-01-03   PHPMailer < 5.2.20 / SwiftMailer < 5.4.5-DEV / Zend Framework / zend-mail < 2.4.11 - (AIO) 'PwnScri 157 WEB Dawid Golunski
2017-01-03   Xfinity Gateway (Technicolor DPC3941T) - Cross-Site Request Forgery 209 WEB Ayushman Dutta
2017-01-03   Zend Framework / zend-mail < 2.4.11 - Remote Code Execution 221 WEB Dawid Golunski
2016-12-30   PHPMailer < 5.2.18 - Remote Code Execution (Python) 465 WEB anarc0der
2016-12-29   SwiftMailer < 5.4.5-DEV - Remote Code Execution 107 WEB Dawid Golunski
2016-12-29   PHPMailer < 5.2.18 - Remote Code Execution (PHP) 210 WEB Dawid Golunski
2016-12-29   PHPMailer < 5.2.20 - Remote Code Execution 115 WEB Dawid Golunski
2016-12-27   PHPMailer 5.2.17 - Remote Code Execution 103 WEB Dawid Golunski
2016-12-26   Apache mod_session_crypto - Padding Oracle 113 WEB RedTeam Pentesting GmbH
2016-12-20   ntop-ng 2.5.160805 - Username Enumeration 192 WEB Dolev Farhi
2016-12-13   ARG-W4 ADSL Router - Multiple Vulnerabilities 174 WEB Persian Hack Team
2016-12-12   Splunk Enterprise 6.4.3 - Server-Side Request Forgery 141 WEB Security-Assessment.com
2016-12-02   MS Edge CMarkup::EnsureDeleteCFState Use-After-Free 190 WEB SkyLined