Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2017-10-31 Exploit Code Downloads   Oracle Java SE - Web Start jnlp XML External Entity Processing Information Disclosure 255 WEB mr_me
2017-10-26 Exploit Code Downloads   PHPMailer 5.2.21 Local File Disclosure 185 WEB Maciej Krupa
2017-10-24 Exploit Code Downloads   Kaltura < 13.1.0 - Remote Code Execution 187 WEB Robin Verton
2017-10-23 Exploit Code Downloads   TP-Link WR940N Remote Code Execution 205 WEB Tim Carrington
2017-10-23 Exploit Code Downloads   Check_MK 1.2.8p25 - Information Disclosure 186 WEB Julien Ahrens
2017-10-17 Exploit Code Downloads   Webmin 1.850 SSRF / CSRF / Cross Site Scripting 205 WEB hyp3rlinx
2017-10-13 Exploit Code Downloads   Tomcat JSP Upload Bypass Remote Code Execution 325 WEB peewpw
2017-10-12 Exploit Code Downloads   Trend Micro InterScan Messaging Security (Virtual Appliance) - Remote Code Execution (Metasploit) 173 WEB Mehmet Ince
2017-10-10 Exploit Code Downloads   ERS Data System 1.8.1 Java Deserialization 158 WEB West Shepherd
2017-10-10 Exploit Code Downloads   Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execu 307 WEB intx0x80
2017-10-10 Exploit Code Downloads   ClipBucket 2.8.3 - Remote Code Execution 166 WEB Meisam Monsef
2017-10-10 Exploit Code Downloads   FileRun < 2017.09.18 - SQL Injection 190 WEB SPARC
2017-09-28 Exploit Code Downloads   Fibaro Home Center 2 - Remote Command Execution / Privilege Escalation 166 WEB forsec
2017-09-26 Exploit Code Downloads   FLIR Systems FLIR Thermal Camera F/FC/PT/D Multiple Information Disclosures 176 WEB LiquidWorm
2017-09-26 Exploit Code Downloads   FLIR Systems FLIR Thermal Camera PT-Series (PT-334 200562) - Root Remote Code Execution 153 WEB LiquidWorm
2017-09-25 Exploit Code Downloads   Cash Back Comparison Script 1.0 - SQL Injection 161 WEB Ihsan Sencan
2017-09-25 Exploit Code Downloads   DenyAll WAF < 6.3.0 - Remote Code Execution (Metasploit) 164 WEB Mehmet Ince
2017-09-22 Exploit Code Downloads   Stock Photo Selling 1.0 - SQL Injection 178 WEB Ihsan Sencan
2017-09-21 Exploit Code Downloads   Disk Pulse Enterprise 9.9.16 GET Buffer Overflow 153 WEB Chance Johnson
2017-09-19 Exploit Code Downloads   Apache - HTTP OPTIONS Memory Leak 209 WEB Hanno Bock
2017-09-19 Exploit Code Downloads   DigiAffiliate 1.4 - Cross-Site Request Forgery (Update Admin) 168 WEB Ihsan Sencan
2017-09-19 Exploit Code Downloads   Digileave 1.2 - Cross-Site Request Forgery (Update Admin) 169 WEB Ihsan Sencan
2017-09-19 Exploit Code Downloads   Digirez 3.4 - Cross-Site Request Forgery (Update Admin) 167 WEB Ihsan Sencan
2017-09-18 Exploit Code Downloads   D-Link DIR8xx Routers - Local Firmware Upload 268 WEB embedi
2017-09-18 Exploit Code Downloads   D-Link DIR8xx Routers - Root Remote Code Execution 193 WEB embedi
2017-09-18 Exploit Code Downloads   D-Link DIR8xx Routers - Leak Credentials 169 WEB embedi
2017-09-11 Exploit Code Downloads   Nimble Professional 1.0 - Cross-Site Request Forgery (Update Admin) 183 WEB Ihsan Sencan
2017-09-11 Exploit Code Downloads   Topsites Script 1.0 - Cross-Site Request Forgery / PHP Code Injection 160 WEB Ihsan Sencan
2017-08-31 Exploit Code Downloads   Invoice Manager 3.1 - Cross-Site Request Forgery (Add Admin) 290 WEB Ali BawazeEer
2017-08-24 Exploit Code Downloads   Automated Logic WebCTRL 6.5 - Unrestricted File Upload / Remote Code Execution 180 WEB LiquidWorm
2017-08-11 Exploit Code Downloads   DALIM SOFTWARE ES Core 5.0 Build 7184.1 User Enumeration 191 WEB LiquidWorm
2017-08-09 Exploit Code Downloads   Synology Photo Station 6.7.3-3432 / 6.3-2967 - Remote Code Execution 157 WEB Kacper Szurek
2017-08-02 Exploit Code Downloads   Advantech SUSIAccess <= 3.0 - 'RecoveryMgmt' File Upload 172 WEB James Fitts
2017-08-02 Exploit Code Downloads   Advantech SUSIAccess <= 3.0 - Directory Traversal / Information Disclosure (Metasploit) 160 WEB James Fitts
2017-07-31 Exploit Code Downloads   GitHub Enterprise < 2.8.7 - Remote Code Execution 165 WEB orange
2017-07-27 Exploit Code Downloads   WebKit JSC - 'JSObject::putInlineSlow and JSValue::putToPrimitive' Universal Cross-Site Scripting 137 WEB Google Security Research
2017-07-25 Exploit Code Downloads   ManageEngine Desktop Central 10 Build 100087 - Remote Code Execution (Metasploit) 245 WEB Kacper Szurek
2017-07-21 Exploit Code Downloads   Netscaler SD-WAN 9.1.2.26.561201 - Command Injection (Metasploit) 178 WEB xort
2017-07-21 Exploit Code Downloads   Sonicwall < 8.1.0.2-14sv - 'sitecustomization.cgi' Command Injection (Metasploit) 161 WEB xort
2017-07-21 Exploit Code Downloads   Sonicwall < 8.1.0.6-21sv - 'gencsr.cgi' Command Injection (Metasploit) 153 WEB xort
2017-07-19 Exploit Code Downloads   Easy File Sharing Web Server 7.2 Buffer Overflow 192 WEB N_A
2017-07-18 Exploit Code Downloads   Barracuda Load Balancer Firmware <= 6.0.1.006 - Remote Command Injection (Metasploit) 188 WEB xort
2017-07-18 Exploit Code Downloads   Sophos Web Appliance 4.3.0.2 - 'trafficType' Remote Command Injection (Metasploit) 166 WEB xort
2017-07-17 Exploit Code Downloads   WDTV Live SMP 2.03.20 - Remote Password Reset 231 WEB Sw1tCh
2017-07-17 Exploit Code Downloads   Apache Struts 2.3.x Showcase - Remote Code Execution (PoC) 330 WEB Vex Woo
2017-07-13 Exploit Code Downloads   RaidenHTTPD 2.0.44 User-Agent Cross Site Scripting 147 WEB sultan albalawi
2017-07-12 Exploit Code Downloads   NfSen < 1.3.7 / AlienVault OSSIM 4.3.1 - 'customfmt' Command Injection 210 WEB Paul Taylor
2017-07-03 Exploit Code Downloads   Humax HG100R 2.0.6 - Backup File Download 231 WEB gambler
2017-06-29 Exploit Code Downloads   Easy File Sharing Web Server 7.2 - Unrestricted File Upload 284 WEB Chako
2017-06-26 Exploit Code Downloads   Easy File Sharing HTTP Server 7.2 POST Buffer Overflow 113 WEB Marco Rivoli
2017-06-26 Exploit Code Downloads   Symantec Messaging Gateway Remote Code Execution 163 WEB Mehmet Ince
2017-06-26 Exploit Code Downloads   Netgear DGN2200 dnslookup.cgi Command Injection 139 WEB thecarterb
2017-06-22 Exploit Code Downloads   PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution 191 WEB phackt_ul
2017-06-20 Exploit Code Downloads   D-Link ADSL DSL-2640B SEA_1.01 Unauthenticated Remote DNS Changer 322 WEB Todor Donev
2017-06-20 Exploit Code Downloads   D-Link DSL-2640B - Unauthenticated Remote DNS Change 152 WEB Todor Donev
2017-06-20 Exploit Code Downloads   D-Link DSL-2640U - Unauthenticated DNS Change 219 WEB Todor Donev
2017-06-20 Exploit Code Downloads   Beetel BCM96338 Router - Unauthenticated DNS Change 234 WEB Todor Donev
2017-06-20 Exploit Code Downloads   UTstarcom WA3002G4 - Unauthenticated DNS Change 171 WEB Todor Donev
2017-06-20 Exploit Code Downloads   iBall Baton iB-WRA150N - Unauthenticated DNS Change 216 WEB Todor Donev
2017-06-16 Exploit Code Downloads   Aerohive HiveOS 5.1r5 < 6.1r5 - Remote Code Execution 270 WEB Ike-Clinton
2017-06-14 Exploit Code Downloads   MyBB 1.8.12 Stored XSS / File Enumeration 251 WEB MLT
2017-06-13 Exploit Code Downloads   EFS Easy Chat Server 3.1 - Password Reset 323 WEB Aitezaz Mohsin
2017-06-13 Exploit Code Downloads   EFS Easy Chat Server 3.1 - Password Disclosure 143 WEB Aitezaz Mohsin
2017-06-13 Exploit Code Downloads   IPFire 2.19 - Remote Code Execution 169 WEB 0x09AL
2017-06-07 Exploit Code Downloads   Kronos Telestaff < 2.92EU29 - SQL Injection 167 WEB Goran Tuzovic
2017-06-06 Exploit Code Downloads   EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 - Remote Code Execution 219 WEB LiquidWorm
2017-06-02 Exploit Code Downloads   Riverbed SteelHead VCX 9.6.0a - Arbitrary File Read 169 WEB Gregory Draperi
2017-06-01 Exploit Code Downloads   WebKit CachedFrameBase::restore Universal Cross Site Scripting 125 WEB lokihardt
2017-06-01 Exploit Code Downloads   WebKit Element::setAttributeNodeNS Use-After-Free 138 WEB lokihardt
2017-06-01 Exploit Code Downloads   WebKit CachedFrame Universal Cross Site Scripting 150 WEB lokihardt
2017-06-01 Exploit Code Downloads   WebKit JSC emitPutDerivedConstructorToArrowFunctionContextScope Incorrect Check 146 WEB lokihardt
2017-06-01 Exploit Code Downloads   WebKit JSC JSObject::ensureLength Failure Check 138 WEB lokihardt
2017-06-01 Exploit Code Downloads   WebKit Document::prepareForDestruction / CachedFrame Universal XSS 138 WEB lokihardt
2017-05-31 Exploit Code Downloads   TerraMaster F2-420 NAS TOS 3.0.30 - Unauthenticated Remote Code Execution as Root 217 WEB Simone Margaritelli
2017-05-31 Exploit Code Downloads   IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Hea 135 WEB SecuriTeam
2017-05-31 Exploit Code Downloads   KEMP LoadMaster 7.135.0.13245 - Persistent Cross-Site Scripting / Remote Code Execution 165 WEB SecuriTeam
2017-05-31 Exploit Code Downloads   uc-http Daemon - Local File Inclusion / Directory Traversal 138 WEB Project Insecurity
2017-05-31 Exploit Code Downloads   Apple Safari 10.0.3(12602.4.8) / WebKit - 'HTMLObjectElement::updateWidget' Universal Cross-Site S 110 WEB Google Security Research
2017-05-31 Exploit Code Downloads   WebKit - Stealing Variables via Page Navigation in FrameLoader::clear 130 WEB Google Security Research
2017-05-31 Exploit Code Downloads   WebKit - enqueuePageshowEvent and enqueuePopstateEvent Universal Cross-Site Scripting 117 WEB Google Security Research
2017-05-31 Exploit Code Downloads   WebKit - 'ContainerNode::parserRemoveChild' Universal Cross-Site Scripting 103 WEB Google Security Research
2017-05-31 Exploit Code Downloads   Apple WebKit / Safari 10.0.3(12602.4.8) - 'Editor::Command::execute' Universal Cross-Site Scriptin 124 WEB Google Security Research
2017-05-25 Exploit Code Downloads   NetGain EM 7.2.647 build 941 - Authentication Bypass / Local File Inclusion 151 WEB f3ci
2017-05-23 Exploit Code Downloads   VX Search Enterprise GET Buffer Overflow 191 WEB Daniel Teixeira
2017-05-23 Exploit Code Downloads   Sync Breeze Enterprise GET Buffer Overflow 153 WEB Daniel Teixeira
2017-05-23 Exploit Code Downloads   MediaWiki SyntaxHighlight Extension Option Injection 267 WEB Yorick Koster
2017-05-22 Exploit Code Downloads   Mantis Bug Tracker 1.3.10/2.3.0 - Cross-Site Request Forgery 96 WEB hyp3rlinx
2017-05-15 Exploit Code Downloads   miniupnpc 2.0.20170421 Denial Of Service 283 WEB oststrom
2017-05-11 Exploit Code Downloads   ASUS Routers CSRF / Information Disclosure 245 WEB Yakov Shafranovich
2017-05-10 Exploit Code Downloads   LogRhythm Network Monitor - Authentication Bypass / Command Injection 149 WEB Francesco Oddo
2017-05-05 Exploit Code Downloads   WordPress 4.6 - Unauthenticated Remote Code Execution 265 WEB Dawid Golunski
2017-05-05 Exploit Code Downloads   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Code Execution 124 WEB LiquidWorm
2017-05-05 Exploit Code Downloads   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Password Change 218 WEB LiquidWorm
2017-05-05 Exploit Code Downloads   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Information Disclosure 136 WEB LiquidWorm
2017-05-05 Exploit Code Downloads   Alerton Webtalk 2.5 / 3.3 - Multiple Vulnerabilities 131 WEB David Tomaschik
2017-04-28 Exploit Code Downloads   Simple File Uploader - Arbitrary File Download 238 WEB Daniel Godoy
2017-04-28 Exploit Code Downloads   TYPO3 News Module - SQL Injection 160 WEB Charles Fol
2017-04-26 Exploit Code Downloads   OpenText Documentum Content Server - dm_bp_transition.ebs docbase Method Arbitrary Code Execution 247 WEB Andrey B. Panfilov
2017-04-21 Exploit Code Downloads   Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'operationSpreadGeneric' Universal Cross-Site Scrip 125 WEB Google Security Research
2017-04-21 Exploit Code Downloads   Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'PrototypeMap::createEmptyStructure' Universal Cros 157 WEB Google Security Research
2017-04-19 Exploit Code Downloads   WebKit operationSpreadGeneric Universal Cross Site Scripting 146 WEB lokihardt
2017-04-18 Exploit Code Downloads   Mantis Bug Tracker 1.3.0/2.3.0 - Password Reset 148 WEB hyp3rlinx
2017-04-18 Exploit Code Downloads   Huawei HG532n Command Injection 167 WEB Ahmed S. Darwish
2017-04-14 Exploit Code Downloads   Alienvault OSSIM/USM 5.3.4/5.3.5 - Remote Command Execution (Metasploit) 189 WEB Peter Lapp
2017-04-13 Exploit Code Downloads   PCMAN FTP Server 2.0.7 ACCT Buffer Overflow 127 WEB Cybernetic
2017-04-13 Exploit Code Downloads   XiongMai uc-http 1.0.0 Local File Inclusion / Directory Traversal 169 WEB Project Insecurity
2017-04-12 Exploit Code Downloads   Apple WebKit / Safari 10.0.3 (12602.4.8) - Universal Cross-Site Scripting via a Focus Event and a Li 121 WEB Google Security Research
2017-04-12 Exploit Code Downloads   Apple WebKit / Safari 10.0.3 (12602.4.8) - Synchronous Page Load Universal Cross-Site Scripting 191 WEB Google Security Research
2017-04-12 Exploit Code Downloads   Brother MFC-J6520DW - Authentication Bypass / Password Change 198 WEB Patryk Bogdan
2017-04-12 Exploit Code Downloads   Adobe Multiple Products - XML Injection File Content Disclosure 192 WEB Thomas Sluyter
2017-04-11 Exploit Code Downloads   WordPress Plugin CopySafe Web Protect < 2.6 - Cross-Site Request Forgery 225 WEB Zhiyang Zeng
2017-04-11 Exploit Code Downloads   WordPress Plugin WHIZZ < 1.1.1 - Cross-Site Request Forgery 242 WEB Zhiyang Zeng
2017-04-11 Exploit Code Downloads   e107 CMS 2.1.4 - Cross-Site Request Forgery 173 WEB Zhiyang Zeng
2017-04-11 Exploit Code Downloads   QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection 157 WEB Harry Sintonen
2017-04-11 Exploit Code Downloads   WordPress Plugin Firewall 2 1.3 - Cross-Site Request Forgery / Cross-Site Scripting 140 WEB dxw
2017-04-11 Exploit Code Downloads   Wordpress webplayer Plugins SQL Injection Vulnerability 370 WEB Hassan Shakeri
2017-04-07 Exploit Code Downloads   HelpDEZK 1.1.1 - Cross-Site Request Forgery / Code Execution 206 WEB rungga_reksya
2017-04-07 Exploit Code Downloads   Moodle 2.x/3.x - SQL Injection 191 WEB Marko Belzetski
2017-04-06 Exploit Code Downloads   D-Link DIR-615 - Cross-Site Request Forgery 216 WEB Pratik S. Shah
2017-04-05 Exploit Code Downloads   Apple WebKit 10.0.2(12602.3.12.0.1, r210800) - 'constructJSReadableStreamDefaultReader' Type Confu 165 WEB Google Security Research
2017-04-05 Exploit Code Downloads   Apple WebKit 10.0.2(12602.3.12.0.1) - 'disconnectSubframes' Universal Cross-Site Scripting 116 WEB Google Security Research
2017-04-05 Exploit Code Downloads   Apple Webkit - Universal Cross-Site Scripting by Accessing a Named Property from an Unloaded Window 201 WEB Google Security Research
2017-04-05 Exploit Code Downloads   Apple Webkit - 'JSCallbackData' Universal Cross-Site Scripting 221 WEB Google Security Research
2017-04-05 Exploit Code Downloads   Apple WebKit 10.0.2(12602.3.12.0.1) - 'Frame::setDocument (1)' Universal Cross-Site Scripting 214 WEB Google Security Research
2017-04-05 Exploit Code Downloads   Splunk Enterprise - Information Disclosure 189 WEB hyp3rlinx