Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2017-02-22   AlienVault OSSIM/USM <= 5.3.1 - Remote Code Execution (Metasploit) 135 WEB Mehmet Ince
2017-02-22   Sonicwall 8.1.0.2-14sv - 'viewcert.cgi' Remote Command Injection (Metasploit) 203 WEB xort
2017-02-22   Sonicwall 8.1.0.2-14sv - 'extensionsettings.cgi' Remote Command Injection (Metasploit) 174 WEB xort
2017-02-22   Sophos Web Appliance 4.2.1.3 - DiagnosticTools Remote Command Injection (Metasploit) 178 WEB xort
2017-02-22   Sophos Web Appliance 4.2.1.3 - block/unblock Remote Command Injection (Metasploit) 223 WEB xort
2017-02-20   NETGEAR DGN2200v1/v2/v3/v4 - 'ping.cgi' Remote Command Execution 231 WEB SivertPL
2017-02-20   TI Online Examination System 2.0 Admin Password Changer Exploit 254 WEB StAkeR
2017-02-17   dotCMS 3.6.1 - Blind Boolean SQL Injection 249 WEB Ben Nott
2017-02-16   Geutebruck 5.02024 G-Cam/EFD-2250 - Remote Command Execution (Metasploit) 177 WEB Davy Douhine
2017-02-14   PHP Marketplace Script - SQL Injection 214 WEB Th3GundY
2017-02-10   WordPress wp-json Content Injection 260 WEB Larry W. Cashdollar
2017-02-09   POSNIC 1.03 Shell Upload Exploit 160 WEB Rony Das
2017-02-06   Alstrasoft Template Seller Pro 3.25e - 'tempid' Parameter SQL Injection 102 WEB Ihsan Sencan
2017-02-03   WordPress 4.7.0/4.7.1 - Unauthenticated Content Injection (Ruby) 347 WEB Harsh Jaiswal
2017-02-03   WordPress 4.7.0/4.7.1 - Unauthenticated Content Injection (Python) 229 WEB leonjza
2017-02-03   Multiple Netgear Routers - Password Disclosure 211 WEB Trustwave's SpiderLabs
2017-02-03   HelpDeskZ < 1.0.2 - Authenticated SQL Injection / Unauthorized File Download 210 WEB Mariusz Poplawski
2017-02-03   Joomla! < 3.6.4 - Admin TakeOver 334 WEB Charles Fol
2017-02-03   Joomla! < 2.5.2 - Admin Creation 110 WEB Charles Fol
2017-01-23   PageKit 1.0.10 - Password Reset 110 WEB Saurabh Banawar
2017-01-22   Pirelli DRG A115 v3 ADSL Router - Unauthenticated DNS Change 199 WEB Todor Donev
2017-01-22   Tenda ADSL2/2+ Modem D820R - Unauthenticated DNS Change 293 WEB Todor Donev
2017-01-18   BoZoN 2.4 - Remote Code Execution 254 WEB hyp3rlinx
2017-01-18   dirLIST 0.3.0 - Arbitrary File Upload 221 WEB hyp3rlinx
2017-01-18   WordPress WooCommerce Direct Download Local File Inclusion 239 WEB Diego Celdran Morell
2017-01-17   Tenda ADSL2/2+ Modem D840R - Unauthenticated DNS Change 239 WEB Todor Donev
2017-01-17   Pirelli DRG A115 ADSL Router - Unauthenticated DNS Change 232 WEB Todor Donev
2017-01-13   iTechscripts Freelancer Script 5.11 - 'sk' Parameter SQL Injection 319 WEB v3n0m
2017-01-11   Freepbx < 2.11.1.5 - Remote Code Execution 216 WEB inj3ctor3
2017-01-04   PHPMailer Sendmail Argument Injection 201 WEB Spencer McIntyre
2017-01-03   PHPMailer < 5.2.20 / SwiftMailer < 5.4.5-DEV / Zend Framework / zend-mail < 2.4.11 - (AIO) 'PwnScri 164 WEB Dawid Golunski
2017-01-03   Xfinity Gateway (Technicolor DPC3941T) - Cross-Site Request Forgery 215 WEB Ayushman Dutta
2017-01-03   Zend Framework / zend-mail < 2.4.11 - Remote Code Execution 228 WEB Dawid Golunski
2016-12-30   PHPMailer < 5.2.18 - Remote Code Execution (Python) 472 WEB anarc0der
2016-12-29   SwiftMailer < 5.4.5-DEV - Remote Code Execution 114 WEB Dawid Golunski
2016-12-29   PHPMailer < 5.2.18 - Remote Code Execution (PHP) 216 WEB Dawid Golunski
2016-12-29   PHPMailer < 5.2.20 - Remote Code Execution 124 WEB Dawid Golunski
2016-12-27   PHPMailer 5.2.17 - Remote Code Execution 110 WEB Dawid Golunski
2016-12-26   Apache mod_session_crypto - Padding Oracle 119 WEB RedTeam Pentesting GmbH
2016-12-20   ntop-ng 2.5.160805 - Username Enumeration 200 WEB Dolev Farhi
2016-12-13   ARG-W4 ADSL Router - Multiple Vulnerabilities 186 WEB Persian Hack Team
2016-12-12   Splunk Enterprise 6.4.3 - Server-Side Request Forgery 153 WEB Security-Assessment.com
2016-12-02   MS Edge CMarkup::EnsureDeleteCFState Use-After-Free 200 WEB SkyLined
2016-11-30   Google Chrome Accessibility blink::Node Corruption 134 WEB SkyLined
2016-11-28   Osticket 1.9.14 - 'X-Forwarded-For' Cross-Site Scripting 191 WEB Joaquin Ramirez Martinez
2016-11-24   Chrome Blink SpeechRecognitionController Use-After-Free 96 WEB SkyLined
2016-11-18   Microsoft Internet Explorer 8 Javascript RegExpBase::FBadHeader Use-After-Free 146 WEB SkyLined
2016-11-16   phpWebAdmin 1.0 SQL Injection 166 WEB N_A
2016-11-15   Boonex Dolphin 7.3.2 - Authentication Bypass / Remote Code Execution 175 WEB 0x4148
2016-11-14   Schoolhos CMS 2.29 - Remote Code Execution / SQL Injection 215 WEB 0x4148
2016-11-14   InvoicePlane 1.4.8 - Password Reset 227 WEB feedersec
2016-11-11   e107 CMS 2.1.2 - Privilege Escalation 168 WEB Kacper Szurek
2016-11-10   Adobe Connect 9.5.7 - Cross-Site Scripting 89 WEB Vulnerability-Lab
2016-11-04   SweetRice 1.5.1 - Arbitrary File Download 196 WEB Ehsan Hosseini
2016-11-04   Mini Notice Board 1.1 SQL Injection 149 WEB N_A
2016-11-01   ASP Gateway 1.0.0 Database Disclosure 109 WEB indoushka
2016-11-01   Angelo Emlak Scripti 1.0 Database Disclosure 95 WEB indoushka
2016-10-31   InfraPower PPS-02-S Q213V1 - Local File Disclosure 115 WEB LiquidWorm
2016-10-26   EC-CUBE 2.12.6 - Server-Side Request Forgery 173 WEB Wadeek
2016-10-25   Event Calendar PHP 1.5 Cross Site Request Forgery 109 WEB Ehsan Hosseini
2016-10-25   WordPress Userpro Remote File Upload 158 WEB T3rm!nat0r5
2016-10-24   Zenbership 107 - Multiple Vulnerabilities 206 WEB Zenbership
2016-10-24   FreePBX 10.13.66 - Remote Command Execution / Privilege Escalation 222 WEB Christopher Davis
2016-10-19   Cgiemail 1.6 - Source Code Disclosure 229 WEB Finbar Crago
2016-10-19   Pluck CMS 4.7.3 - Cross-Site Request Forgery (Add Page) 220 WEB Ahsan Tahir
2016-10-17   YouTube Automated CMS 1.0.7 - Cross-Site Request Forgery / Persistent Cross-Site Scripting 448 WEB Arbin Godar
2016-10-17   Simple Forum PHP 2.4 - Cross-Site Request Forgery (Edit Options) 138 WEB Ehsan Hosseini
2016-10-13   ApPHP MicroCMS 3.9.5 - (Add Admin) Cross-Site Request Forgery 160 WEB Besim
2016-10-12   ApPHP MicroBlog 1.0.2 - Cross-Site Request Forgery (Add New Author) 111 WEB Besim
2016-10-12   phpEnter 4.2.7 - Cross-Site Request Forgery (Add New Post) 121 WEB Besim
2016-10-12   BirdBlog 1.4.0 - Cross-Site Request Forgery (Add New Post) 125 WEB Besim
2016-10-12   Spacemarc News - Cross-Site Request Forgery (Add New Post) 83 WEB Besim
2016-10-08   Witbe - Remote Code Execution 139 WEB BeLmar
2016-09-27   VenShop System 2010 Database Disclosure 208 WEB indoushka
2016-09-23   Kerio Control Unified Threat Management 9.1.0 build 1087, 9.1.1 build 1324 - Multiple Vulnerabilitie 150 WEB SEC Consult
2016-09-21   VegaDNS 0.13.2 - Remote Command Injection 147 WEB Wireghoul
2016-09-20   ZineBasic 1.1 - Arbitrary File Disclosure 129 WEB bd0rk
2016-09-18   AnoBBS 1.0.1 - Remote File Inclusion 107 WEB bd0rk
2016-09-14   wdCalendar 2 - SQL Injection 202 WEB Alfonso Castillo Angel
2016-09-14   Cherry Music 0.35.1 - Arbitrary File Disclosure 212 WEB feedersec
2016-09-12   Vodafone Mobile Wifi - Reset Admin Password 282 WEB Daniele Linguaglossa
2016-09-09   Zabbix 2.0 - 3.0.3 - SQL Injection 149 WEB Zzzians
2016-09-08   Adobe ColdFusion < 11 Update 10 - XML External Entity Injection 268 WEB Dawid Golunski
2016-09-05   Belkin F9K1122v1 1.00.30 - Buffer Overflow (via Cross-Site Request Forgery) 225 WEB b1ack0wl
2016-09-05   Easy File Sharing Web Server 7.2 SEH Buffer Overflow 188 WEB Iran Cyber Security Group
2016-09-01   CactuShop 7 Database Disclosure 183 WEB indoushka
2016-08-31   Arabportal 2.x RCE Vulnerability 91 WEB Team Uruk
2016-08-30   HelpDeskZ 1.0.2 - Unauthenticated Shell Upload 240 WEB Lars Morgenroth
2016-08-29   Prestashop VtermSlideShow Module Arbitrary File Upload Exploit 148 WEB PentesterDesk
2016-08-29   Prestashop Attributewizardpro Module Arbitrary File Upload Exploit 146 WEB PentesterDesk
2016-08-29   Prestashop Multi Modules Arbitrary File Upload Exploit 233 WEB PentesterDesk
2016-08-23   WordPress 4.5.3 - Directory Traversal / Denial of Service 211 WEB Yorick Koster
2016-08-23   VideoIQ Camera - Local File Disclosure 151 WEB Yakir Wizman
2016-08-23   MESSOA IP Cameras (Multiple Models) - Unauthenticated Password Change 95 WEB Todor Donev
2016-08-23   ZYCOO IP Phone System - Remote Command Execution 115 WEB 0x4148
2016-08-19   SIEMENS IP Camera CCMW1025 x.2.2.1798 - Remote Admin Credentials Change 122 WEB Todor Donev
2016-08-11   EyeLock nano NXT 3.5 - Remote Root Exploit 224 WEB LiquidWorm
2016-08-11   EyeLock nano NXT 3.5 - Local File Disclosure 84 WEB LiquidWorm
2016-08-11   vBulletin 5.2.2 - Preauth Server Side Request Forgery (SSRF) 348 WEB Dawid Golunski
2016-08-11   Nagios Network Analyzer 2.2.1 - Multiple CSRF 194 WEB hyp3rlinx
2016-08-09   NUUO NVRmini 2 3.0.8 - (Add Admin) CSRF 333 WEB LiquidWorm
2016-08-09   NUUO NVRmini 2 3.0.8 - Remote Root Exploit 349 WEB LiquidWorm
2016-08-09   PhpMyAdmin 4.6.2 - Post-Auth Remote Code Execution 131 WEB iamsecurity
2016-07-27   PHP File Vault 0.9 - Directory Traversal 106 WEB N_A
2016-07-27   Bellini/Supercook Wi-Fi Yumi SC200 - Multiple Vulnerabilities 102 WEB James McLean
2016-07-27   Technicolor TC7200 Modem/Router STD6.02.11 - Multiple Vulnerabilities 165 WEB Gergely Eberhardt
2016-07-27   Ubee EVW3226 Modem/Router 1.0.20 - Multiple Vulnerabilities 85 WEB Gergely Eberhardt
2016-07-27   PHP gettext (gettext.php) 1.0.12 - Unauthenticated Code Execution 81 WEB kmkz
2016-07-27   Drupal CODER Module 2.5 - Remote Command Execution (Metasploit) 77 WEB Mehmet Ince
2016-07-22   Technicolor TC7200 Modem / Router Session Management / Fixed Password 168 WEB Gergely Eberhardt
2016-07-22   Cisco EPC3925 UPC Modem / Router Default Passphrase 145 WEB Gergely Eberhardt
2016-07-21   WordPress Video Player Plugin 1.5.16 - SQL Injection 128 WEB David Vaartjes
2016-07-21   Wowza Streaming Engine 4.5.0 - Multiple XSS 121 WEB LiquidWorm
2016-07-21   Wowza Streaming Engine 4.5.0 - Add Advanced Admin CSRF 108 WEB LiquidWorm
2016-07-21   Wowza Streaming Engine 4.5.0 - Remote Privilege Escalation 94 WEB LiquidWorm
2016-07-19   vBulletin 4.x - SQLi in breadcrumbs via xmlrpc API (Post-Auth) 105 WEB tintinweb
2016-07-19   vBulletin 5.x/4.x - Persistent XSS in AdminCP/ApiLog via xmlrpc API (Post-Auth) 80 WEB tintinweb
2016-07-13   Prestashop vtermslidesshow module Arbitrary File Upload Exploit 323 WEB PentesterDesk
2016-07-12   Belkin Router AC1200 Firmware 1.00.27 - Authentication Bypass 111 WEB Gregory Smiley
2016-07-11   CyberPower Systems PowerPanel 3.1.2 - XXE Out-Of-Band Data Retrieval 219 WEB LiquidWorm
2016-07-11   php Real Estate Script 3 - Arbitrary File Disclosure 74 WEB Meisam Monsef
2016-07-11   WordPress WP-DownloadManager Plugin 1.68.1 - Arbitrary File Upload Vulnerability 233 WEB Mojtaba MobhaM
2016-07-07   PrinceXML Wrapper Class Command Injection 229 WEB Brandon Perry
2016-07-06   Nagios XI Chained Remote Code Execution 219 WEB wvu
2016-07-05   WordPress Real3D FlipBook Plugin - Multiple Vulnerabilities 149 WEB Mukarram Khalid