|
2015-11-26
|
|
Dimofinf 3.0.0 SQL Injection
|
111 |
WEB
|
D35m0nd142
|
|
2015-11-24
|
|
vBulletin 5.x - Remote Code Execution Exploit
|
127 |
WEB
|
Mohammad Reza
|
|
2015-11-18
|
|
WordPress Users Ultra 1.5.50 Unrestricted File Upload
|
185 |
WEB
|
panVagenas
|
|
2015-11-17
|
|
D-Link DIR-816L Cross Site Request Forgery
|
201 |
WEB
|
Bhadresh Patel
|
|
2015-11-17
|
|
D-Link SSDP Command Injection
|
221 |
WEB
|
Samuel Huntley
|
|
2015-11-17
|
|
D-Link DIR-890L/R Buffer Overflow
|
368 |
WEB
|
Samuel Huntley
|
|
2015-11-17
|
|
D-Link DIR-866L Buffer Overflow
|
140 |
WEB
|
Samuel Huntley
|
|
2015-11-17
|
|
D-Link DIR-825 Buffer Overflow / Directory Traversal
|
102 |
WEB
|
Samuel Huntley
|
|
2015-11-17
|
|
D-Link DIR-818W Buffer Overflow / Command Injection
|
95 |
WEB
|
Samuel Huntley
|
|
2015-11-17
|
|
D-Link DGL5500 - HNAP Buffer Overflow Vulnerability
|
103 |
WEB
|
Samuel Huntley
|
|
2015-11-16
|
|
Idera Up.Time Monitoring Station 7.0 post2file.php Arbitrary File Upload Version 1
|
199 |
WEB
|
Denis Andzakovic
|
|
2015-11-16
|
|
Idera Up.Time Monitoring Station 7.4 post2file.php Arbitrary File Upload Version 2
|
190 |
WEB
|
Denis Andzakovic
|
|
2015-11-16
|
|
vBulletin 5.1.2 Unserialize Code Execution
|
279 |
WEB
|
cutz
|
|
2015-11-11
|
|
Google AdWords <= 6.2.0 API client libraries - XML eXternal Entity Injection (XXE)
|
155 |
WEB
|
Dawid Golunski
|
|
2015-11-11
|
|
Google AdWords API PHP client library <= 6.2.0 - Arbitrary PHP Code Execution
|
73 |
WEB
|
Dawid Golunski
|
|
2015-11-11
|
|
Jenkins 1.633 - Unauthenticated Credential Recovery
|
228 |
WEB
|
The Repo
|
|
2015-11-10
|
|
Google AdWords API PHP Client Library 6.2.0 XXE Injection
|
198 |
WEB
|
Dawid Golunski
|
|
2015-11-10
|
|
Google AdWords API PHP Client Library 6.2.0 Code Execution
|
179 |
WEB
|
Dawid Golunski
|
|
2015-11-10
|
|
Arris TG1682G Modem - Stored XSS Vulnerability
|
309 |
WEB
|
Nu11By73
|
|
2015-11-09
|
|
vBulletin 5.1.x - PreAuth 0day Remote Code Execution Exploit
|
275 |
WEB
|
hhjj
|
|
2015-11-06
|
|
OpenSSL Alternative Chains Certificate Forgery
|
240 |
WEB
|
Ramon de C Valle
|
|
2015-11-06
|
|
Java Secure Socket Extension (JSSE) SKIP-TLS
|
217 |
WEB
|
Ramon de C Valle
|
|
2015-11-02
|
|
eBay Magento <= 1.9.2.1 - PHP FPM XML eXternal Entity Injection
|
149 |
WEB
|
Dawid Golunski
|
|
2015-11-02
|
|
PHP Server Monitor 3.1.1- CSRF Privilege Escalation
|
96 |
WEB
|
hyp3rlinx
|
|
2015-10-27
|
|
articleFR 3.0.7 Arbitrary File Read
|
188 |
WEB
|
0keeteam
|
|
2015-10-27
|
|
SiteWIX SQL Injection
|
219 |
WEB
|
ZoRLu
|
|
2015-10-27
|
|
Beckhoff CX9020 CPU Module - Remote Code Execution Exploit
|
335 |
WEB
|
Photubias
|
|
2015-10-20
|
|
RealtyScript 4.0.2 SQL Injection
|
182 |
WEB
|
LiquidWorm
|
|
2015-10-20
|
|
RealtyScript 4.0.2 Cross Site Request Forgery / Cross Site Scripting
|
187 |
WEB
|
LiquidWorm
|
|
2015-10-19
|
|
Nibbleblog File Upload
|
133 |
WEB
|
Roberto Soares Espreto
|
|
2015-10-19
|
|
WordPress Ajax Load More Plugin < 2.8.2 - File Upload Vulnerability
|
243 |
WEB
|
PizzaHatHacker
|
|
2015-10-19
|
|
ZHONE < S3.0.501 - Multiple Remote Code Execution Vulnerabilities
|
203 |
WEB
|
Lyon Yang
|
|
2015-10-15
|
|
ElasticSearch Snapshot API Directory Traversal
|
213 |
WEB
|
Pedro Andujar
|
|
2015-10-14
|
|
Kerio Control <= 8.6.1 - Multiple Vulnerabilities
|
324 |
WEB
|
Raschin Tavakoli
|
|
2015-10-10
|
|
Buffalo LinkStation 1.34 / 1.69 / 1.70 Authentication Bypass
|
132 |
WEB
|
Jens Liebchen
|
|
2015-09-30
|
|
Western Digital My Cloud 04.01.03-421, 04.01.04-422 - Command Injection
|
192 |
WEB
|
absane
|
|
2015-09-29
|
|
ManageEngine EventLog Analyzer Remote Code Execution
|
102 |
WEB
|
xistence
|
|
2015-09-28
|
|
Watchguard XCS Remote Command Execution
|
143 |
WEB
|
Daniel Jensen
|
|
2015-09-28
|
|
SMF (Simple Machine Forum) <= 2.0.10 - Remote Memory Exfiltration Exploit
|
139 |
WEB
|
Filippo Roncari
|
|
2015-09-23
|
|
Shadow Infosystem Arbitrary File Download
|
112 |
WEB
|
Cloner-47
|
|
2015-09-11
|
|
php - cgimode fpm writeprocmemfile bypass disable function demo
|
284 |
WEB
|
ylbhz
|
|
2015-09-10
|
|
Auto-Exchanger 5.1.0 - CSRF Vulnerability
|
201 |
WEB
|
Aryan Bayaninejad
|
|
2015-09-07
|
|
Elastix < 2.5 , PHP Code Injection Exploit
|
209 |
WEB
|
i-Hmx
|
|
2015-09-07
|
|
WordPress Contact Form Generator <= 2.0.1 - Multiple CSRF Vulnerabilities
|
143 |
WEB
|
i0akiN SEC-LABORATORY
|
|
2015-09-06
|
|
GPON Home Router FTP G-93RG1 - CSRF Command Execution Vulnerability
|
110 |
WEB
|
Phan Thanh Duy
|
|
2015-09-06
|
|
YesWiki 0.2 - Path Traversal Vulnerability
|
116 |
WEB
|
HaHwul
|
|
2015-09-06
|
|
Thomson Wireless VoIP Cable Modem TWG850-4B ST9C.05.08 - Authentication Bypass
|
130 |
WEB
|
Glaysson dos Santos
|
|
2015-09-06
|
|
Serendipity 2.0.1 Shell Upload
|
183 |
WEB
|
Tim Coen
|
|
2015-09-01
|
|
Ganglia Web Frontend < 3.5.1 - PHP Code Execution
|
88 |
WEB
|
Andrei Costin
|
|
2015-08-31
|
|
Pluck CMS 4.7.3 - Multiple Vulnerabilities
|
107 |
WEB
|
smash
|
|
2015-08-25
|
|
Pligg CMS 2.0.2 - CSRF Add Admin Exploit
|
117 |
WEB
|
Arash Khazaei
|
|
2015-08-21
|
|
Pligg CMS 2.0.2 - Arbitrary Code Execution
|
195 |
WEB
|
Arash Khazaei
|
|
2015-08-21
|
|
up.time 7.5.0 Upload And Execute File Exploit
|
159 |
WEB
|
LiquidWorm
|
|
2015-08-21
|
|
up.time 7.5.0 Superadmin Privilege Escalation Exploit
|
175 |
WEB
|
LiquidWorm
|
|
2015-08-21
|
|
Easy File Management Web Server 5.6 Buffer Overflow
|
173 |
WEB
|
Tracy Turben
|
|
2015-08-19
|
|
Magento CE < 1.9.0.1 Post Auth RCE
|
194 |
WEB
|
Ebrietas0
|
|
2015-08-18
|
|
Sagemcom F@ST 3864 V2 - Get Admin Password
|
441 |
WEB
|
Cade Bull
|
|
2015-08-18
|
|
TOTOLINK Routers - Backdoor and RCE Exploit PoC
|
304 |
WEB
|
MadMouse
|
|
2015-08-13
|
|
PHPfileNavigator 2.3.3 Privilege Escalation
|
177 |
WEB
|
hyp3rlinx
|
|
2015-08-10
|
|
Microweber 1.0.3 - Stored XSS And CSRF Add Admin Exploit
|
182 |
WEB
|
LiquidWorm
|
|
2015-07-28
|
|
Xceedium Xsuite Command Injection / XSS / Traversal / Escalation
|
101 |
WEB
|
Martin Schobert
|
|
2015-07-15
|
|
FreiChat 9.6 SQL Injection
|
211 |
WEB
|
Kacper Szurek
|
|
2015-07-15
|
|
WordPress WP-PowerPlayGallery 3.3 File Upload / SQL Injection
|
219 |
WEB
|
Larry W. Cashdollar
|
|
2015-07-10
|
|
GWC CMS 1.0 SQL Injection
|
183 |
WEB
|
nopesled
|
|
2015-07-10
|
|
WordPress S3Bubble Cloud Video With Adverts / Analytics Arbitrary File Download
|
247 |
WEB
|
CrashBandicot
|
|
2015-07-07
|
|
DedeCMS < 5.7-sp1 - Remote File Inclusion
|
411 |
WEB
|
zise
|
|
2015-07-07
|
|
AirDroid Unauthenticated Arbitrary File Upload
|
78 |
WEB
|
Parsa Adib
|
|
2015-07-02
|
|
D-Link DSP-W w110 v1.05b01 - Multiple Vulnerabilities
|
126 |
WEB
|
DNO
|
|
2015-06-30
|
|
Huawei Home Gateway HG530 / HG520b Password Disclosure / Change
|
100 |
WEB
|
Fady Mohamed Osman
|
|
2015-06-30
|
|
C2Box 4.0.0 r19171 Cross Site Request Forgery
|
117 |
WEB
|
Wissam Bashour
|
|
2015-06-29
|
|
Joomla Simple Image Upload 1.0 Shell Upload
|
255 |
WEB
|
CrashBandicot
|
|
2015-06-29
|
|
WordPress Revslider Arbitrary File Upload / Download / XSS
|
126 |
WEB
|
CaFc Versace
|
|
2015-06-21
|
|
Tango FTP 1.0 Active-X Heap Spray
|
113 |
WEB
|
metacom
|
|
2015-06-21
|
|
Tango DropBox 3.1.5 Active-X Heap Spray
|
92 |
WEB
|
metacom
|
|
2015-06-17
|
|
Apexis IP CAM - Information Disclosure
|
253 |
WEB
|
Sunplace Solutions
|
|
2015-06-16
|
|
WordPress Aviary Image Editor Add On For Gravity Forms 3.0 Beta Shell Upload
|
120 |
WEB
|
Larry W. Cashdollar
|
|
2015-06-16
|
|
WordPress NativeChurch Theme 1.0 / 1.5 Arbitrary File Download
|
167 |
WEB
|
Arash Khazaei
|
|
2015-06-12
|
|
D-Link DSP-W110 Command Execution / SQL Injection / File Upload
|
162 |
WEB
|
Peter Adkins
|
|
2015-06-11
|
|
GeoVision (GeoHttpServer) Webcams Remote File Disclosure Exploit
|
523 |
WEB
|
Viktor Minin
|
|
2015-06-10
|
|
Apexis IP CAM Username / Password Disclosure
|
246 |
WEB
|
Daniel Godoy
|
|
2015-06-10
|
|
WordPress Plugin 'WP Mobile Edition' - LFI Vulnerability
|
242 |
WEB
|
Ali Khalil
|
|
2015-06-05
|
|
ProductCart 2.1 Database Disclosure
|
102 |
WEB
|
indoushka
|
|
2015-06-05
|
|
CmyDocument CMS Database Disclosure
|
181 |
WEB
|
indoushka
|
|
2015-06-05
|
|
JDownloader 2 Beta Directory Traversal Vulnerability
|
124 |
WEB
|
PizzaHatHacker
|
|
2015-06-02
|
|
WordPress dzs-zoomsounds Plugins <= 2.0 - Remote File Upload Vulnerability
|
269 |
WEB
|
nabil chris
|
|
2015-06-02
|
|
D-Link Devices HNAP SOAPAction-Header Command Execution
|
128 |
WEB
|
Michael Messner
|
|
2015-06-01
|
|
Realtek SDK Miniigd UPnP SOAP Command Execution
|
222 |
WEB
|
Michael Messner
|
|
2015-06-01
|
|
Airties login-cgi Buffer Overflow
|
169 |
WEB
|
Michael Messner
|
|
2015-06-01
|
|
D-Link Devices UPnP SOAPAction-Header Command Execution
|
206 |
WEB
|
Michael Messner
|
|
2015-06-01
|
|
ESC 8832 Data Controller Multiple Vulnerabilities
|
103 |
WEB
|
alazs Makany
|
|
2015-05-28
|
|
extjs Arbitrary File Read
|
194 |
WEB
|
Jianfeng Gao
|
|
2015-05-27
|
|
Apache Jackrabbit WebDAV XXE Exploit
|
94 |
WEB
|
Mikhail Egorov
|
|
2015-05-27
|
|
Sendio ESP Information Disclosure Vulnerability
|
83 |
WEB
|
Core Security
|
|
2015-05-25
|
|
Newsletter 4.3 SQL Injection
|
96 |
WEB
|
Ashiyane Digital Security Team
|
|
2015-05-22
|
|
ElasticSearch 1.4.5 / 1.5.2 - Path Transversal Vulnerability
|
136 |
WEB
|
Pedro Andujar
|
|
2015-05-20
|
|
ManageEngine EventLog Analyzer 10.0 Build 10001 CSRF Vulnerability
|
122 |
WEB
|
Akash S. Chavan
|
|
2015-05-13
|
|
WordPress N-Media Website Contact Form with File Upload 1.3.4 - File Upload
|
73 |
WEB
|
F17.c0de
|
|
2015-05-12
|
|
SixApart MovableType Storable Perl Code Execution
|
151 |
WEB
|
John Lightsey
|
|
2015-05-12
|
|
D-Link DSL-500B Gen 2 - (URL Filter Configuration Panel) Stored XSS
|
90 |
WEB
|
XLabs Security
|
|
2015-05-12
|
|
D-Link DSL-500B Gen 2 - (Parental Control Configuration Panel) Stored XSS
|
88 |
WEB
|
XLabs Security
|
|
2015-05-08
|
|
WordPress RevSlider 3.0.95 File Upload / Execute
|
207 |
WEB
|
Tom Sellers
|
|
2015-05-08
|
|
elFinder 2 Remote Command Execution (Via File Creation) Vulnerability
|
112 |
WEB
|
TUNISIAN CYBER
|
|
2015-05-06
|
|
WordPress 4.2.1 XSS / Code Execution
|
96 |
WEB
|
Evex
|
|
2015-04-28
|
|
ProjectSend r561 CSRF / XSS / Shell Upload
|
90 |
WEB
|
TUNISIAN CYBER
|
|
2015-04-28
|
|
OTRS 3.x Cross Site Scripting
|
185 |
WEB
|
Adam Ziaja
|
|
2015-04-28
|
|
OTRS < 3.1.x & < 3.2.x & < 3.3.x - Stored Cross-Site Scripting (XSS) Vulnerability
|
176 |
WEB
|
Adam Ziaja
|
|
2015-04-27
|
|
WordPress WPshop eCommerce 1.3.9.5 Shell Upload
|
145 |
WEB
|
Roberto Soares Espreto
|
|
2015-04-27
|
|
WordPress InBoundio Marketing 2.0 Shell Upload
|
78 |
WEB
|
Roberto Soares Espreto
|
|
2015-04-23
|
|
Wolf CMS 0.8.2 Arbitrary File Upload Exploit
|
136 |
WEB
|
CWH Underground
|
|
2015-04-22
|
|
WordPress NEX-Forms 3.0 SQL Injection
|
211 |
WEB
|
Cleiton Pinheiro
|
|
2015-04-22
|
|
Open-Letters Remote PHP Code Injection Exploit
|
123 |
WEB
|
TUNISIAN CYBER
|
|
2015-04-21
|
|
WordPress SlideShow Gallery Authenticated File Upload
|
85 |
WEB
|
Roberto Soares Espreto
|
|
2015-04-21
|
|
MediaSuite CMS - Artibary File Disclosure Exploit
|
81 |
WEB
|
KnocKout
|
|
2015-04-20
|
|
WordPress Reflex Gallery Upload
|
126 |
WEB
|
Roberto Soares Espreto
|
|
2015-04-20
|
|
WordPress N-Media Website Contact Form Upload
|
90 |
WEB
|
Roberto Soares Espreto
|
|
2015-04-20
|
|
WordPress Creative Contact Form Upload
|
73 |
WEB
|
Roberto Soares Espreto
|
|
2015-04-13
|
|
TP-LINK Local File Disclosure
|
198 |
WEB
|
Stefan Viehböck
|
|
2015-04-07
|
|
WordPress PHP Event Calendar 1.5 Arbitrary File Upload Vulnerability
|
90 |
WEB
|
CrashBandicot
|
|
2015-04-02
|
|
WordPress VideoWhisper Video Presentation 3.31.17 Shell Upload
|
98 |
WEB
|
Larry W. Cashdollar
|
|
2015-04-02
|
|
WordPress VideoWhisper Video Conference Integration 4.91.8 Shell Upload
|
117 |
WEB
|
Larry W. Cashdollar
|
|
2015-04-02
|
|
WordPress Revolution Slider File Upload
|
90 |
WEB
|
CrashBandicot
|
|
2015-04-02
|
|
WordPress DesignFolio+ Theme File Upload
|
91 |
WEB
|
CrashBandicot
|
|
2015-04-01
|
|
Palo Alto Traps Server 3.1.2.1546 - Persistent XSS Vulnerability
|
191 |
WEB
|
Michael Hendrickx
|
|
2015-03-31
|
|
WebDepo CMS SQL Injection
|
144 |
WEB
|
Cleiton Pinheiro
|
|
2015-03-30
|
|
Wordpress Plugin Revolution Slider - Unrestricted File Upload Exploit
|
108 |
WEB
|
CrashBandicot
|
