Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2016-08-31   Arabportal 2.x RCE Vulnerability 78 WEB Team Uruk
2016-08-30   HelpDeskZ 1.0.2 - Unauthenticated Shell Upload 228 WEB Lars Morgenroth
2016-08-29   Prestashop VtermSlideShow Module Arbitrary File Upload Exploit 136 WEB PentesterDesk
2016-08-29   Prestashop Attributewizardpro Module Arbitrary File Upload Exploit 133 WEB PentesterDesk
2016-08-29   Prestashop Multi Modules Arbitrary File Upload Exploit 221 WEB PentesterDesk
2016-08-23   WordPress 4.5.3 - Directory Traversal / Denial of Service 197 WEB Yorick Koster
2016-08-23   VideoIQ Camera - Local File Disclosure 140 WEB Yakir Wizman
2016-08-23   MESSOA IP Cameras (Multiple Models) - Unauthenticated Password Change 82 WEB Todor Donev
2016-08-23   ZYCOO IP Phone System - Remote Command Execution 104 WEB 0x4148
2016-08-19   SIEMENS IP Camera CCMW1025 x.2.2.1798 - Remote Admin Credentials Change 114 WEB Todor Donev
2016-08-11   EyeLock nano NXT 3.5 - Remote Root Exploit 210 WEB LiquidWorm
2016-08-11   EyeLock nano NXT 3.5 - Local File Disclosure 73 WEB LiquidWorm
2016-08-11   vBulletin 5.2.2 - Preauth Server Side Request Forgery (SSRF) 334 WEB Dawid Golunski
2016-08-11   Nagios Network Analyzer 2.2.1 - Multiple CSRF 182 WEB hyp3rlinx
2016-08-09   NUUO NVRmini 2 3.0.8 - (Add Admin) CSRF 323 WEB LiquidWorm
2016-08-09   NUUO NVRmini 2 3.0.8 - Remote Root Exploit 338 WEB LiquidWorm
2016-08-09   PhpMyAdmin 4.6.2 - Post-Auth Remote Code Execution 122 WEB iamsecurity
2016-07-27   PHP File Vault 0.9 - Directory Traversal 94 WEB N_A
2016-07-27   Bellini/Supercook Wi-Fi Yumi SC200 - Multiple Vulnerabilities 89 WEB James McLean
2016-07-27   Technicolor TC7200 Modem/Router STD6.02.11 - Multiple Vulnerabilities 153 WEB Gergely Eberhardt
2016-07-27   Ubee EVW3226 Modem/Router 1.0.20 - Multiple Vulnerabilities 74 WEB Gergely Eberhardt
2016-07-27   PHP gettext (gettext.php) 1.0.12 - Unauthenticated Code Execution 71 WEB kmkz
2016-07-27   Drupal CODER Module 2.5 - Remote Command Execution (Metasploit) 66 WEB Mehmet Ince
2016-07-22   Technicolor TC7200 Modem / Router Session Management / Fixed Password 158 WEB Gergely Eberhardt
2016-07-22   Cisco EPC3925 UPC Modem / Router Default Passphrase 135 WEB Gergely Eberhardt
2016-07-21   WordPress Video Player Plugin 1.5.16 - SQL Injection 121 WEB David Vaartjes
2016-07-21   Wowza Streaming Engine 4.5.0 - Multiple XSS 113 WEB LiquidWorm
2016-07-21   Wowza Streaming Engine 4.5.0 - Add Advanced Admin CSRF 97 WEB LiquidWorm
2016-07-21   Wowza Streaming Engine 4.5.0 - Remote Privilege Escalation 84 WEB LiquidWorm
2016-07-19   vBulletin 4.x - SQLi in breadcrumbs via xmlrpc API (Post-Auth) 92 WEB tintinweb
2016-07-19   vBulletin 5.x/4.x - Persistent XSS in AdminCP/ApiLog via xmlrpc API (Post-Auth) 70 WEB tintinweb
2016-07-13   Prestashop vtermslidesshow module Arbitrary File Upload Exploit 314 WEB PentesterDesk
2016-07-12   Belkin Router AC1200 Firmware 1.00.27 - Authentication Bypass 100 WEB Gregory Smiley
2016-07-11   CyberPower Systems PowerPanel 3.1.2 - XXE Out-Of-Band Data Retrieval 206 WEB LiquidWorm
2016-07-11   php Real Estate Script 3 - Arbitrary File Disclosure 61 WEB Meisam Monsef
2016-07-11   WordPress WP-DownloadManager Plugin 1.68.1 - Arbitrary File Upload Vulnerability 224 WEB Mojtaba MobhaM
2016-07-07   PrinceXML Wrapper Class Command Injection 209 WEB Brandon Perry
2016-07-06   Nagios XI Chained Remote Code Execution 210 WEB wvu
2016-07-05   WordPress Real3D FlipBook Plugin - Multiple Vulnerabilities 139 WEB Mukarram Khalid
2016-07-01   Ubiquiti Administration Portal - CSRF to Remote Command Execution 98 WEB KoreLogic
2016-07-01   WordPress Ultimate Membership Pro Plugin 3.3 - SQL Injection 145 WEB wp0Day
2016-07-01   Symantec Endpoint Protection Manager 12.1 - Multiple Vulnerabilities 101 WEB hyp3rlinx
2016-06-29   Prestashop Attribute Wizard Pro module Arbitrary File Upload Exploit 719 WEB PentesterDesk
2016-06-28   Untangle NGFW 12.1.0 Beta execEvil() Command Injection 189 WEB Matt Bush
2016-06-28   Ruby HTTP Header Injection 108 WEB rootredrain
2016-06-28   MyLittleForum 2.3.5 - PHP Command Injection 75 WEB hyp3rlinx
2016-06-23   Prestashop modules Arbitrary File Upload Vulnerability 816 WEB PentesterDesk Team
2016-06-21   Airia - Webshell Upload Exploit 114 WEB HaHwul
2016-06-21   Airia - (Add Content) CSRF 103 WEB HaHwul
2016-06-21   WordPress Ultimate Product Catalog Plugin 3.8.1 - Privilege Escalation Exploit 110 WEB Joaquin Ramirez Martinez
2016-06-21   WordPress Premium SEO Pack 1.9.1.3 wp_options Overwrite 92 WEB wp0Day.com
2016-06-20   Skype For Business 2013 User Enumeration 68 WEB nyxgeek
2016-06-20   Microsoft Internet Explorer 11 Garbage Collector Attribute Type Confusion 75 WEB SkyLined
2016-06-20   phpATM 1.32 - Remote Command Execution (Shell Upload) on Windows Servers 89 WEB Paolo Massenio
2016-06-20   WordPress Gravity Forms Plugin 1.8.19 - Arbitrary File Upload 324 WEB Abk Khan
2016-06-16   PHPLive 4.4.8 - 4.5.4 - Password Recovery SQL Injection 105 WEB Tiago Carvalho
2016-06-15   WordPress Social Stream Plugin 1.5.15 - wp_options Overwrite 110 WEB wp0Day.com
2016-06-14   Viart Shopping Cart 5.0 CSRF / Shell Upload 196 WEB Ali Ghanbari
2016-06-14   Zabbix 2.2 - 3.0.3 - RCE with API JSON-RPC 147 WEB Alexander Gurin
2016-06-12   Mobiketa 1.0 - CSRF Add Admin Exploit 71 WEB Murat Yilmazlar
2016-06-12   Dell OpenManage Server Administrator 8.3 - XML External Entity Exploit 260 WEB hantwister
2016-06-08   Apache Continuum 1.4.2 Command Injection / Cross Site Scripting 81 WEB David Shanahan
2016-06-07   WordPress Uncode Theme 1.3.1 - Arbitrary File Upload 166 WEB wp0Day.com
2016-06-07   WordPress Newspaper Theme 6.7.1 - Privilege Escalation 177 WEB wp0Day.com
2016-06-07   WordPress WP PRO Advertising System Plugin 4.6.18 - SQL Injection 207 WEB wp0Day.com
2016-06-07   WordPress Creative Multi-Purpose Theme 9.1.3 - Stored XSS 222 WEB wp0Day.com
2016-06-01   FlatPress 1.0.3 - CSRF Arbitrary File Upload 279 WEB LiquidWorm
2016-05-30   WordPress Ninja Forms Unauthenticated File Upload 137 WEB Rob Carr
2016-05-30   Linknat VOS3000/VOS2009 SQL Injection Exploit 264 WEB Osama Khalid
2016-05-24   Job Script by Scubez - Remote Code Execution 110 WEB Bikramaditya Guha
2016-05-19   Magento < 2.0.6 - Unauthenticated Arbitrary Unserialize -> Arbitrary Write File 181 WEB agix
2016-05-17   TP-Link SC2020n Authenticated Telnet Injection 105 WEB Nicholas Starke
2016-05-17   Meteocontrol WEB’log - Admin Password Disclosure 98 WEB Karn Ganeshen
2016-05-17   eXtplorer 2.1.9 - Archive Path Traversal 172 WEB hyp3rlinx
2016-05-17   Web interface for DNSmasq / Mikrotik - SQL Injection 269 WEB hyp3rlinx
2016-05-06   ImageMagick < 6.9.3-9 - Multiple Vulnerabilities 238 WEB Nikolay Ermishkin
2016-05-05   PHP Imagick 3.3.0 - disable_functions Bypass 574 WEB RicterZ
2016-04-28   Multiple Vendors (RomPager <= 4.34) - Misfortune Cookie Router Authentication Bypass 122 WEB Milad Doorbash
2016-04-26   Gemtek CPE7000 - WLTCS-106 sysconf.cgi Unauthenticated Remote Command Execution (MSF) 97 WEB Federico Scalco
2016-04-26   Gemtek CPE7000 - WLTCS-106 Administrator SID Retriever (MSF) 145 WEB Federico Scalco
2016-04-22   Gemtek CPE7000 / WLTCS-106 - Multiple Vulnerabilities 237 WEB Federico Ramondino
2016-04-22   Symantec Brightmail 10.6.0-7- LDAP Credentials Disclosure 117 WEB Fakhir Karim Reda
2016-04-21   PHPBack 1.3.0 - SQL Injection 228 WEB hyp3rlinx
2016-04-15   Oracle Application Testing Suite 12.4.0.2.0 - Authentication Bypass and Arbitrary File Upload Exploi 201 WEB Zhou Yu
2016-04-06   WordPress Advanced Video Plugin 1.0 - Local File Inclusion Exploit 214 WEB evait security GmbH
2016-03-18   Zenphoto 1.4.11 - Remote File Inclusion Vulnerability 127 WEB curesec
2016-03-08   ATutor LMS install_modules.php CSRF Remote Code Execution Vulnerability 175 WEB mr_me
2016-03-04   WordPress Bulk Delete Plugin 5.5.3 - Privilege Escalation 146 WEB Panagiotis Vagenas
2016-03-01   Pulse CMS 4.5.2 Local File Inclusion 366 WEB Ehsan Hosseini
2016-02-26   IBM Lotus Domino <= R8 Password Hash Extraction Exploit 334 WEB Jonathan Broche
2016-02-25   WordPress Extra User Details Plugin 0.4.2 - Privilege Escalation 111 WEB Panagiotis Vagenas
2016-02-18   Cisco ASA VPN Portal Cross Site Scripting 149 WEB Juan Sacco
2016-02-17   phpMyBackupPro 2.5 - Remote Command Execution / CSRF 132 WEB hyp3rlinx
2016-02-17   Inductive Automation Ignition 7.8.1 Remote Leakage Of Shared Buffers 219 WEB LiquidWorm
2016-02-14   Wordpress Smallbiz Themes Remote File Uploads Vulnerability 379 WEB Milad Hacking
2016-02-14   WordPress WooCommerce Store Toolkit Plugin 1.5.5 - Privilege Escalation Exploit 103 WEB Panagiotis Vagenas
2016-02-14   WordPress WP User Frontend Plugin < 2.3.11 - Unrestricted File Upload Exploit 320 WEB Panagiotis Vagenas
2016-02-14   JiveForums 5.5.25 Directory Traversal Exploit 219 WEB Zhaohuan
2016-01-27   Glassfish Server - Arbitrary File Read Vulnerability 355 WEB bingbing
2016-01-26   pfSense Firewall <= 2.2.5 - Config File CSRF 134 WEB Aatif Shahdad
2016-01-22   Joomla com_forum Remote SQL Injection Exploit 224 WEB Dz MinD Injector
2016-01-15   Manage Engine Application Manager 12.5 - Arbitrary Command Execution Vulnerability 363 WEB Bikramaditya Guha
2016-01-15   SevOne NMS <= 5.3.6.0 - Remote Root Exploit 181 WEB iamsecurity
2016-01-14   WhatsUp Gold 16.3 - Unauthenticated Remote Code Execution 101 WEB Matt Buzanowski
2016-01-07   D-Link DCS-931L Arbitrary File Upload 162 WEB Brendan Coles
2016-01-04   Joomla 3.4.5 Object Injection 228 WEB Khashayar Fereidani
2016-01-04   WordPress Simple Ads Manager 2.9.4.116 SQL Injection 225 WEB Kacper Szurek
2016-01-04   Simple Ads Manager 2.9.4.116 - SQL Injection 209 WEB Kacper Szurek
2015-12-23   phpMyFAQ 2.7.9 PHP Code Injection 160 WEB indoushka
2015-12-22   Ovidentia Widgets 1.0.61 - Remote Command Execution Exploit 139 WEB bd0rk
2015-12-16   Article Script 1.00 SQL Injection 101 WEB Linux Zone Research Team
2015-12-16   WordPress Tierra Billboard Manager 1.14 SQL Injection 135 WEB Linux Zone Research Team
2015-12-15   Joomla MyDynGallery SQL Injection 202 WEB D35m0nd142
2015-12-08   DMarket 1.0 Remote PHP Code Injection 119 WEB indoushka
2015-12-07   Atlassian HipChat for Jira Plugin Velocity Template Injection 212 WEB sinn3r
2015-12-02   Advantech Switch Bash Environment Variable Code Injection 152 WEB hdm
2015-11-26   Dimofinf 3.0.0 SQL Injection 90 WEB D35m0nd142
2015-11-24   vBulletin 5.x - Remote Code Execution Exploit 108 WEB Mohammad Reza
2015-11-18   WordPress Users Ultra 1.5.50 Unrestricted File Upload 163 WEB panVagenas
2015-11-17   D-Link DIR-816L Cross Site Request Forgery 182 WEB Bhadresh Patel
2015-11-17   D-Link SSDP Command Injection 204 WEB Samuel Huntley
2015-11-17   D-Link DIR-890L/R Buffer Overflow 350 WEB Samuel Huntley
2015-11-17   D-Link DIR-866L Buffer Overflow 122 WEB Samuel Huntley
2015-11-17   D-Link DIR-825 Buffer Overflow / Directory Traversal 82 WEB Samuel Huntley
2015-11-17   D-Link DIR-818W Buffer Overflow / Command Injection 75 WEB Samuel Huntley