Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2016-09-18   AnoBBS 1.0.1 - Remote File Inclusion 114 WEB bd0rk
2016-09-14   wdCalendar 2 - SQL Injection 208 WEB Alfonso Castillo Angel
2016-09-14   Cherry Music 0.35.1 - Arbitrary File Disclosure 219 WEB feedersec
2016-09-12   Vodafone Mobile Wifi - Reset Admin Password 289 WEB Daniele Linguaglossa
2016-09-09   Zabbix 2.0 - 3.0.3 - SQL Injection 159 WEB Zzzians
2016-09-08   Adobe ColdFusion < 11 Update 10 - XML External Entity Injection 274 WEB Dawid Golunski
2016-09-05   Belkin F9K1122v1 1.00.30 - Buffer Overflow (via Cross-Site Request Forgery) 231 WEB b1ack0wl
2016-09-05   Easy File Sharing Web Server 7.2 SEH Buffer Overflow 194 WEB Iran Cyber Security Group
2016-09-01   CactuShop 7 Database Disclosure 194 WEB indoushka
2016-08-31   Arabportal 2.x RCE Vulnerability 100 WEB Team Uruk
2016-08-30   HelpDeskZ 1.0.2 - Unauthenticated Shell Upload 246 WEB Lars Morgenroth
2016-08-29   Prestashop VtermSlideShow Module Arbitrary File Upload Exploit 155 WEB PentesterDesk
2016-08-29   Prestashop Attributewizardpro Module Arbitrary File Upload Exploit 154 WEB PentesterDesk
2016-08-29   Prestashop Multi Modules Arbitrary File Upload Exploit 242 WEB PentesterDesk
2016-08-23   WordPress 4.5.3 - Directory Traversal / Denial of Service 226 WEB Yorick Koster
2016-08-23   VideoIQ Camera - Local File Disclosure 160 WEB Yakir Wizman
2016-08-23   MESSOA IP Cameras (Multiple Models) - Unauthenticated Password Change 102 WEB Todor Donev
2016-08-23   ZYCOO IP Phone System - Remote Command Execution 122 WEB 0x4148
2016-08-19   SIEMENS IP Camera CCMW1025 x.2.2.1798 - Remote Admin Credentials Change 133 WEB Todor Donev
2016-08-11   EyeLock nano NXT 3.5 - Remote Root Exploit 231 WEB LiquidWorm
2016-08-11   EyeLock nano NXT 3.5 - Local File Disclosure 91 WEB LiquidWorm
2016-08-11   vBulletin 5.2.2 - Preauth Server Side Request Forgery (SSRF) 355 WEB Dawid Golunski
2016-08-11   Nagios Network Analyzer 2.2.1 - Multiple CSRF 200 WEB hyp3rlinx
2016-08-09   NUUO NVRmini 2 3.0.8 - (Add Admin) CSRF 344 WEB LiquidWorm
2016-08-09   NUUO NVRmini 2 3.0.8 - Remote Root Exploit 357 WEB LiquidWorm
2016-08-09   PhpMyAdmin 4.6.2 - Post-Auth Remote Code Execution 139 WEB iamsecurity
2016-07-27   PHP File Vault 0.9 - Directory Traversal 113 WEB N_A
2016-07-27   Bellini/Supercook Wi-Fi Yumi SC200 - Multiple Vulnerabilities 110 WEB James McLean
2016-07-27   Technicolor TC7200 Modem/Router STD6.02.11 - Multiple Vulnerabilities 172 WEB Gergely Eberhardt
2016-07-27   Ubee EVW3226 Modem/Router 1.0.20 - Multiple Vulnerabilities 92 WEB Gergely Eberhardt
2016-07-27   PHP gettext (gettext.php) 1.0.12 - Unauthenticated Code Execution 89 WEB kmkz
2016-07-27   Drupal CODER Module 2.5 - Remote Command Execution (Metasploit) 82 WEB Mehmet Ince
2016-07-22   Technicolor TC7200 Modem / Router Session Management / Fixed Password 173 WEB Gergely Eberhardt
2016-07-22   Cisco EPC3925 UPC Modem / Router Default Passphrase 152 WEB Gergely Eberhardt
2016-07-21   WordPress Video Player Plugin 1.5.16 - SQL Injection 133 WEB David Vaartjes
2016-07-21   Wowza Streaming Engine 4.5.0 - Multiple XSS 128 WEB LiquidWorm
2016-07-21   Wowza Streaming Engine 4.5.0 - Add Advanced Admin CSRF 116 WEB LiquidWorm
2016-07-21   Wowza Streaming Engine 4.5.0 - Remote Privilege Escalation 99 WEB LiquidWorm
2016-07-19   vBulletin 4.x - SQLi in breadcrumbs via xmlrpc API (Post-Auth) 113 WEB tintinweb
2016-07-19   vBulletin 5.x/4.x - Persistent XSS in AdminCP/ApiLog via xmlrpc API (Post-Auth) 89 WEB tintinweb
2016-07-13   Prestashop vtermslidesshow module Arbitrary File Upload Exploit 329 WEB PentesterDesk
2016-07-12   Belkin Router AC1200 Firmware 1.00.27 - Authentication Bypass 121 WEB Gregory Smiley
2016-07-11   CyberPower Systems PowerPanel 3.1.2 - XXE Out-Of-Band Data Retrieval 227 WEB LiquidWorm
2016-07-11   php Real Estate Script 3 - Arbitrary File Disclosure 82 WEB Meisam Monsef
2016-07-11   WordPress WP-DownloadManager Plugin 1.68.1 - Arbitrary File Upload Vulnerability 242 WEB Mojtaba MobhaM
2016-07-07   PrinceXML Wrapper Class Command Injection 238 WEB Brandon Perry
2016-07-06   Nagios XI Chained Remote Code Execution 229 WEB wvu
2016-07-05   WordPress Real3D FlipBook Plugin - Multiple Vulnerabilities 156 WEB Mukarram Khalid
2016-07-01   Ubiquiti Administration Portal - CSRF to Remote Command Execution 116 WEB KoreLogic
2016-07-01   WordPress Ultimate Membership Pro Plugin 3.3 - SQL Injection 161 WEB wp0Day
2016-07-01   Symantec Endpoint Protection Manager 12.1 - Multiple Vulnerabilities 117 WEB hyp3rlinx
2016-06-29   Prestashop Attribute Wizard Pro module Arbitrary File Upload Exploit 737 WEB PentesterDesk
2016-06-28   Untangle NGFW 12.1.0 Beta execEvil() Command Injection 210 WEB Matt Bush
2016-06-28   Ruby HTTP Header Injection 126 WEB rootredrain
2016-06-28   MyLittleForum 2.3.5 - PHP Command Injection 95 WEB hyp3rlinx
2016-06-23   Prestashop modules Arbitrary File Upload Vulnerability 832 WEB PentesterDesk Team
2016-06-21   Airia - Webshell Upload Exploit 134 WEB HaHwul
2016-06-21   Airia - (Add Content) CSRF 118 WEB HaHwul
2016-06-21   WordPress Ultimate Product Catalog Plugin 3.8.1 - Privilege Escalation Exploit 125 WEB Joaquin Ramirez Martinez
2016-06-21   WordPress Premium SEO Pack 1.9.1.3 wp_options Overwrite 110 WEB wp0Day.com
2016-06-20   Skype For Business 2013 User Enumeration 84 WEB nyxgeek
2016-06-20   Microsoft Internet Explorer 11 Garbage Collector Attribute Type Confusion 92 WEB SkyLined
2016-06-20   phpATM 1.32 - Remote Command Execution (Shell Upload) on Windows Servers 105 WEB Paolo Massenio
2016-06-20   WordPress Gravity Forms Plugin 1.8.19 - Arbitrary File Upload 338 WEB Abk Khan
2016-06-16   PHPLive 4.4.8 - 4.5.4 - Password Recovery SQL Injection 120 WEB Tiago Carvalho
2016-06-15   WordPress Social Stream Plugin 1.5.15 - wp_options Overwrite 131 WEB wp0Day.com
2016-06-14   Viart Shopping Cart 5.0 CSRF / Shell Upload 214 WEB Ali Ghanbari
2016-06-14   Zabbix 2.2 - 3.0.3 - RCE with API JSON-RPC 162 WEB Alexander Gurin
2016-06-12   Mobiketa 1.0 - CSRF Add Admin Exploit 88 WEB Murat Yilmazlar
2016-06-12   Dell OpenManage Server Administrator 8.3 - XML External Entity Exploit 277 WEB hantwister
2016-06-08   Apache Continuum 1.4.2 Command Injection / Cross Site Scripting 98 WEB David Shanahan
2016-06-07   WordPress Uncode Theme 1.3.1 - Arbitrary File Upload 182 WEB wp0Day.com
2016-06-07   WordPress Newspaper Theme 6.7.1 - Privilege Escalation 193 WEB wp0Day.com
2016-06-07   WordPress WP PRO Advertising System Plugin 4.6.18 - SQL Injection 227 WEB wp0Day.com
2016-06-07   WordPress Creative Multi-Purpose Theme 9.1.3 - Stored XSS 240 WEB wp0Day.com
2016-06-01   FlatPress 1.0.3 - CSRF Arbitrary File Upload 296 WEB LiquidWorm
2016-05-30   WordPress Ninja Forms Unauthenticated File Upload 158 WEB Rob Carr
2016-05-30   Linknat VOS3000/VOS2009 SQL Injection Exploit 283 WEB Osama Khalid
2016-05-24   Job Script by Scubez - Remote Code Execution 124 WEB Bikramaditya Guha
2016-05-19   Magento < 2.0.6 - Unauthenticated Arbitrary Unserialize -> Arbitrary Write File 199 WEB agix
2016-05-17   TP-Link SC2020n Authenticated Telnet Injection 125 WEB Nicholas Starke
2016-05-17   Meteocontrol WEB’log - Admin Password Disclosure 133 WEB Karn Ganeshen
2016-05-17   eXtplorer 2.1.9 - Archive Path Traversal 192 WEB hyp3rlinx
2016-05-17   Web interface for DNSmasq / Mikrotik - SQL Injection 292 WEB hyp3rlinx
2016-05-06   ImageMagick < 6.9.3-9 - Multiple Vulnerabilities 254 WEB Nikolay Ermishkin
2016-05-05   PHP Imagick 3.3.0 - disable_functions Bypass 593 WEB RicterZ
2016-04-28   Multiple Vendors (RomPager <= 4.34) - Misfortune Cookie Router Authentication Bypass 147 WEB Milad Doorbash
2016-04-26   Gemtek CPE7000 - WLTCS-106 sysconf.cgi Unauthenticated Remote Command Execution (MSF) 114 WEB Federico Scalco
2016-04-26   Gemtek CPE7000 - WLTCS-106 Administrator SID Retriever (MSF) 161 WEB Federico Scalco
2016-04-22   Gemtek CPE7000 / WLTCS-106 - Multiple Vulnerabilities 256 WEB Federico Ramondino
2016-04-22   Symantec Brightmail 10.6.0-7- LDAP Credentials Disclosure 133 WEB Fakhir Karim Reda
2016-04-21   PHPBack 1.3.0 - SQL Injection 244 WEB hyp3rlinx
2016-04-15   Oracle Application Testing Suite 12.4.0.2.0 - Authentication Bypass and Arbitrary File Upload Exploi 216 WEB Zhou Yu
2016-04-06   WordPress Advanced Video Plugin 1.0 - Local File Inclusion Exploit 234 WEB evait security GmbH
2016-03-18   Zenphoto 1.4.11 - Remote File Inclusion Vulnerability 146 WEB curesec
2016-03-08   ATutor LMS install_modules.php CSRF Remote Code Execution Vulnerability 191 WEB mr_me
2016-03-04   WordPress Bulk Delete Plugin 5.5.3 - Privilege Escalation 166 WEB Panagiotis Vagenas
2016-03-01   Pulse CMS 4.5.2 Local File Inclusion 383 WEB Ehsan Hosseini
2016-02-26   IBM Lotus Domino <= R8 Password Hash Extraction Exploit 349 WEB Jonathan Broche
2016-02-25   WordPress Extra User Details Plugin 0.4.2 - Privilege Escalation 130 WEB Panagiotis Vagenas
2016-02-18   Cisco ASA VPN Portal Cross Site Scripting 166 WEB Juan Sacco
2016-02-17   phpMyBackupPro 2.5 - Remote Command Execution / CSRF 148 WEB hyp3rlinx
2016-02-17   Inductive Automation Ignition 7.8.1 Remote Leakage Of Shared Buffers 236 WEB LiquidWorm
2016-02-14   Wordpress Smallbiz Themes Remote File Uploads Vulnerability 396 WEB Milad Hacking
2016-02-14   WordPress WooCommerce Store Toolkit Plugin 1.5.5 - Privilege Escalation Exploit 120 WEB Panagiotis Vagenas
2016-02-14   WordPress WP User Frontend Plugin < 2.3.11 - Unrestricted File Upload Exploit 336 WEB Panagiotis Vagenas
2016-02-14   JiveForums 5.5.25 Directory Traversal Exploit 236 WEB Zhaohuan
2016-01-27   Glassfish Server - Arbitrary File Read Vulnerability 372 WEB bingbing
2016-01-26   pfSense Firewall <= 2.2.5 - Config File CSRF 152 WEB Aatif Shahdad
2016-01-22   Joomla com_forum Remote SQL Injection Exploit 243 WEB Dz MinD Injector
2016-01-15   Manage Engine Application Manager 12.5 - Arbitrary Command Execution Vulnerability 384 WEB Bikramaditya Guha
2016-01-15   SevOne NMS <= 5.3.6.0 - Remote Root Exploit 199 WEB iamsecurity
2016-01-14   WhatsUp Gold 16.3 - Unauthenticated Remote Code Execution 128 WEB Matt Buzanowski
2016-01-07   D-Link DCS-931L Arbitrary File Upload 177 WEB Brendan Coles
2016-01-04   Joomla 3.4.5 Object Injection 248 WEB Khashayar Fereidani
2016-01-04   WordPress Simple Ads Manager 2.9.4.116 SQL Injection 245 WEB Kacper Szurek
2016-01-04   Simple Ads Manager 2.9.4.116 - SQL Injection 228 WEB Kacper Szurek
2015-12-23   phpMyFAQ 2.7.9 PHP Code Injection 177 WEB indoushka
2015-12-22   Ovidentia Widgets 1.0.61 - Remote Command Execution Exploit 158 WEB bd0rk
2015-12-16   Article Script 1.00 SQL Injection 122 WEB Linux Zone Research Team
2015-12-16   WordPress Tierra Billboard Manager 1.14 SQL Injection 153 WEB Linux Zone Research Team
2015-12-15   Joomla MyDynGallery SQL Injection 219 WEB D35m0nd142
2015-12-08   DMarket 1.0 Remote PHP Code Injection 137 WEB indoushka
2015-12-07   Atlassian HipChat for Jira Plugin Velocity Template Injection 230 WEB sinn3r
2015-12-02   Advantech Switch Bash Environment Variable Code Injection 170 WEB hdm