|
2016-06-07
|
|
WordPress Newspaper Theme 6.7.1 - Privilege Escalation
|
205 |
WEB
|
wp0Day.com
|
|
2016-06-07
|
|
WordPress WP PRO Advertising System Plugin 4.6.18 - SQL Injection
|
238 |
WEB
|
wp0Day.com
|
|
2016-06-07
|
|
WordPress Creative Multi-Purpose Theme 9.1.3 - Stored XSS
|
253 |
WEB
|
wp0Day.com
|
|
2016-06-01
|
|
FlatPress 1.0.3 - CSRF Arbitrary File Upload
|
308 |
WEB
|
LiquidWorm
|
|
2016-05-30
|
|
WordPress Ninja Forms Unauthenticated File Upload
|
167 |
WEB
|
Rob Carr
|
|
2016-05-30
|
|
Linknat VOS3000/VOS2009 SQL Injection Exploit
|
294 |
WEB
|
Osama Khalid
|
|
2016-05-24
|
|
Job Script by Scubez - Remote Code Execution
|
136 |
WEB
|
Bikramaditya Guha
|
|
2016-05-19
|
|
Magento < 2.0.6 - Unauthenticated Arbitrary Unserialize -> Arbitrary Write File
|
214 |
WEB
|
agix
|
|
2016-05-17
|
|
TP-Link SC2020n Authenticated Telnet Injection
|
136 |
WEB
|
Nicholas Starke
|
|
2016-05-17
|
|
Meteocontrol WEB’log - Admin Password Disclosure
|
145 |
WEB
|
Karn Ganeshen
|
|
2016-05-17
|
|
eXtplorer 2.1.9 - Archive Path Traversal
|
204 |
WEB
|
hyp3rlinx
|
|
2016-05-17
|
|
Web interface for DNSmasq / Mikrotik - SQL Injection
|
303 |
WEB
|
hyp3rlinx
|
|
2016-05-06
|
|
ImageMagick < 6.9.3-9 - Multiple Vulnerabilities
|
266 |
WEB
|
Nikolay Ermishkin
|
|
2016-05-05
|
|
PHP Imagick 3.3.0 - disable_functions Bypass
|
605 |
WEB
|
RicterZ
|
|
2016-04-28
|
|
Multiple Vendors (RomPager <= 4.34) - Misfortune Cookie Router Authentication Bypass
|
157 |
WEB
|
Milad Doorbash
|
|
2016-04-26
|
|
Gemtek CPE7000 - WLTCS-106 sysconf.cgi Unauthenticated Remote Command Execution (MSF)
|
125 |
WEB
|
Federico Scalco
|
|
2016-04-26
|
|
Gemtek CPE7000 - WLTCS-106 Administrator SID Retriever (MSF)
|
171 |
WEB
|
Federico Scalco
|
|
2016-04-22
|
|
Gemtek CPE7000 / WLTCS-106 - Multiple Vulnerabilities
|
269 |
WEB
|
Federico Ramondino
|
|
2016-04-22
|
|
Symantec Brightmail 10.6.0-7- LDAP Credentials Disclosure
|
145 |
WEB
|
Fakhir Karim Reda
|
|
2016-04-21
|
|
PHPBack 1.3.0 - SQL Injection
|
255 |
WEB
|
hyp3rlinx
|
|
2016-04-15
|
|
Oracle Application Testing Suite 12.4.0.2.0 - Authentication Bypass and Arbitrary File Upload Exploi
|
225 |
WEB
|
Zhou Yu
|
|
2016-04-06
|
|
WordPress Advanced Video Plugin 1.0 - Local File Inclusion Exploit
|
245 |
WEB
|
evait security GmbH
|
|
2016-03-18
|
|
Zenphoto 1.4.11 - Remote File Inclusion Vulnerability
|
161 |
WEB
|
curesec
|
|
2016-03-08
|
|
ATutor LMS install_modules.php CSRF Remote Code Execution Vulnerability
|
202 |
WEB
|
mr_me
|
|
2016-03-04
|
|
WordPress Bulk Delete Plugin 5.5.3 - Privilege Escalation
|
181 |
WEB
|
Panagiotis Vagenas
|
|
2016-03-01
|
|
Pulse CMS 4.5.2 Local File Inclusion
|
393 |
WEB
|
Ehsan Hosseini
|
|
2016-02-26
|
|
IBM Lotus Domino <= R8 Password Hash Extraction Exploit
|
360 |
WEB
|
Jonathan Broche
|
|
2016-02-25
|
|
WordPress Extra User Details Plugin 0.4.2 - Privilege Escalation
|
140 |
WEB
|
Panagiotis Vagenas
|
|
2016-02-18
|
|
Cisco ASA VPN Portal Cross Site Scripting
|
179 |
WEB
|
Juan Sacco
|
|
2016-02-17
|
|
phpMyBackupPro 2.5 - Remote Command Execution / CSRF
|
160 |
WEB
|
hyp3rlinx
|
|
2016-02-17
|
|
Inductive Automation Ignition 7.8.1 Remote Leakage Of Shared Buffers
|
248 |
WEB
|
LiquidWorm
|
|
2016-02-14
|
|
Wordpress Smallbiz Themes Remote File Uploads Vulnerability
|
407 |
WEB
|
Milad Hacking
|
|
2016-02-14
|
|
WordPress WooCommerce Store Toolkit Plugin 1.5.5 - Privilege Escalation Exploit
|
132 |
WEB
|
Panagiotis Vagenas
|
|
2016-02-14
|
|
WordPress WP User Frontend Plugin < 2.3.11 - Unrestricted File Upload Exploit
|
347 |
WEB
|
Panagiotis Vagenas
|
|
2016-02-14
|
|
JiveForums 5.5.25 Directory Traversal Exploit
|
246 |
WEB
|
Zhaohuan
|
|
2016-01-27
|
|
Glassfish Server - Arbitrary File Read Vulnerability
|
382 |
WEB
|
bingbing
|
|
2016-01-26
|
|
pfSense Firewall <= 2.2.5 - Config File CSRF
|
162 |
WEB
|
Aatif Shahdad
|
|
2016-01-22
|
|
Joomla com_forum Remote SQL Injection Exploit
|
252 |
WEB
|
Dz MinD Injector
|
|
2016-01-15
|
|
Manage Engine Application Manager 12.5 - Arbitrary Command Execution Vulnerability
|
396 |
WEB
|
Bikramaditya Guha
|
|
2016-01-15
|
|
SevOne NMS <= 5.3.6.0 - Remote Root Exploit
|
209 |
WEB
|
iamsecurity
|
|
2016-01-14
|
|
WhatsUp Gold 16.3 - Unauthenticated Remote Code Execution
|
143 |
WEB
|
Matt Buzanowski
|
|
2016-01-07
|
|
D-Link DCS-931L Arbitrary File Upload
|
191 |
WEB
|
Brendan Coles
|
|
2016-01-04
|
|
Joomla 3.4.5 Object Injection
|
257 |
WEB
|
Khashayar Fereidani
|
|
2016-01-04
|
|
WordPress Simple Ads Manager 2.9.4.116 SQL Injection
|
258 |
WEB
|
Kacper Szurek
|
|
2016-01-04
|
|
Simple Ads Manager 2.9.4.116 - SQL Injection
|
240 |
WEB
|
Kacper Szurek
|
|
2015-12-23
|
|
phpMyFAQ 2.7.9 PHP Code Injection
|
189 |
WEB
|
indoushka
|
|
2015-12-22
|
|
Ovidentia Widgets 1.0.61 - Remote Command Execution Exploit
|
171 |
WEB
|
bd0rk
|
|
2015-12-16
|
|
Article Script 1.00 SQL Injection
|
134 |
WEB
|
Linux Zone Research Team
|
|
2015-12-16
|
|
WordPress Tierra Billboard Manager 1.14 SQL Injection
|
164 |
WEB
|
Linux Zone Research Team
|
|
2015-12-15
|
|
Joomla MyDynGallery SQL Injection
|
230 |
WEB
|
D35m0nd142
|
|
2015-12-08
|
|
DMarket 1.0 Remote PHP Code Injection
|
151 |
WEB
|
indoushka
|
|
2015-12-07
|
|
Atlassian HipChat for Jira Plugin Velocity Template Injection
|
244 |
WEB
|
sinn3r
|
|
2015-12-02
|
|
Advantech Switch Bash Environment Variable Code Injection
|
181 |
WEB
|
hdm
|
|
2015-11-26
|
|
Dimofinf 3.0.0 SQL Injection
|
122 |
WEB
|
D35m0nd142
|
|
2015-11-24
|
|
vBulletin 5.x - Remote Code Execution Exploit
|
137 |
WEB
|
Mohammad Reza
|
|
2015-11-18
|
|
WordPress Users Ultra 1.5.50 Unrestricted File Upload
|
195 |
WEB
|
panVagenas
|
|
2015-11-17
|
|
D-Link DIR-816L Cross Site Request Forgery
|
212 |
WEB
|
Bhadresh Patel
|
|
2015-11-17
|
|
D-Link SSDP Command Injection
|
234 |
WEB
|
Samuel Huntley
|
|
2015-11-17
|
|
D-Link DIR-890L/R Buffer Overflow
|
380 |
WEB
|
Samuel Huntley
|
|
2015-11-17
|
|
D-Link DIR-866L Buffer Overflow
|
150 |
WEB
|
Samuel Huntley
|
|
2015-11-17
|
|
D-Link DIR-825 Buffer Overflow / Directory Traversal
|
114 |
WEB
|
Samuel Huntley
|
|
2015-11-17
|
|
D-Link DIR-818W Buffer Overflow / Command Injection
|
107 |
WEB
|
Samuel Huntley
|
|
2015-11-17
|
|
D-Link DGL5500 - HNAP Buffer Overflow Vulnerability
|
114 |
WEB
|
Samuel Huntley
|
|
2015-11-16
|
|
Idera Up.Time Monitoring Station 7.0 post2file.php Arbitrary File Upload Version 1
|
213 |
WEB
|
Denis Andzakovic
|
|
2015-11-16
|
|
Idera Up.Time Monitoring Station 7.4 post2file.php Arbitrary File Upload Version 2
|
201 |
WEB
|
Denis Andzakovic
|
|
2015-11-16
|
|
vBulletin 5.1.2 Unserialize Code Execution
|
291 |
WEB
|
cutz
|
|
2015-11-11
|
|
Google AdWords <= 6.2.0 API client libraries - XML eXternal Entity Injection (XXE)
|
165 |
WEB
|
Dawid Golunski
|
|
2015-11-11
|
|
Google AdWords API PHP client library <= 6.2.0 - Arbitrary PHP Code Execution
|
85 |
WEB
|
Dawid Golunski
|
|
2015-11-11
|
|
Jenkins 1.633 - Unauthenticated Credential Recovery
|
241 |
WEB
|
The Repo
|
|
2015-11-10
|
|
Google AdWords API PHP Client Library 6.2.0 XXE Injection
|
209 |
WEB
|
Dawid Golunski
|
|
2015-11-10
|
|
Google AdWords API PHP Client Library 6.2.0 Code Execution
|
192 |
WEB
|
Dawid Golunski
|
|
2015-11-10
|
|
Arris TG1682G Modem - Stored XSS Vulnerability
|
320 |
WEB
|
Nu11By73
|
|
2015-11-09
|
|
vBulletin 5.1.x - PreAuth 0day Remote Code Execution Exploit
|
287 |
WEB
|
hhjj
|
|
2015-11-06
|
|
OpenSSL Alternative Chains Certificate Forgery
|
252 |
WEB
|
Ramon de C Valle
|
|
2015-11-06
|
|
Java Secure Socket Extension (JSSE) SKIP-TLS
|
227 |
WEB
|
Ramon de C Valle
|
|
2015-11-02
|
|
eBay Magento <= 1.9.2.1 - PHP FPM XML eXternal Entity Injection
|
160 |
WEB
|
Dawid Golunski
|
|
2015-11-02
|
|
PHP Server Monitor 3.1.1- CSRF Privilege Escalation
|
105 |
WEB
|
hyp3rlinx
|
|
2015-10-27
|
|
articleFR 3.0.7 Arbitrary File Read
|
200 |
WEB
|
0keeteam
|
|
2015-10-27
|
|
SiteWIX SQL Injection
|
229 |
WEB
|
ZoRLu
|
|
2015-10-27
|
|
Beckhoff CX9020 CPU Module - Remote Code Execution Exploit
|
345 |
WEB
|
Photubias
|
|
2015-10-20
|
|
RealtyScript 4.0.2 SQL Injection
|
194 |
WEB
|
LiquidWorm
|
|
2015-10-20
|
|
RealtyScript 4.0.2 Cross Site Request Forgery / Cross Site Scripting
|
199 |
WEB
|
LiquidWorm
|
|
2015-10-19
|
|
Nibbleblog File Upload
|
144 |
WEB
|
Roberto Soares Espreto
|
|
2015-10-19
|
|
WordPress Ajax Load More Plugin < 2.8.2 - File Upload Vulnerability
|
254 |
WEB
|
PizzaHatHacker
|
|
2015-10-19
|
|
ZHONE < S3.0.501 - Multiple Remote Code Execution Vulnerabilities
|
212 |
WEB
|
Lyon Yang
|
|
2015-10-15
|
|
ElasticSearch Snapshot API Directory Traversal
|
224 |
WEB
|
Pedro Andujar
|
|
2015-10-14
|
|
Kerio Control <= 8.6.1 - Multiple Vulnerabilities
|
335 |
WEB
|
Raschin Tavakoli
|
|
2015-10-10
|
|
Buffalo LinkStation 1.34 / 1.69 / 1.70 Authentication Bypass
|
142 |
WEB
|
Jens Liebchen
|
|
2015-09-30
|
|
Western Digital My Cloud 04.01.03-421, 04.01.04-422 - Command Injection
|
204 |
WEB
|
absane
|
|
2015-09-29
|
|
ManageEngine EventLog Analyzer Remote Code Execution
|
113 |
WEB
|
xistence
|
|
2015-09-28
|
|
Watchguard XCS Remote Command Execution
|
154 |
WEB
|
Daniel Jensen
|
|
2015-09-28
|
|
SMF (Simple Machine Forum) <= 2.0.10 - Remote Memory Exfiltration Exploit
|
153 |
WEB
|
Filippo Roncari
|
|
2015-09-23
|
|
Shadow Infosystem Arbitrary File Download
|
121 |
WEB
|
Cloner-47
|
|
2015-09-11
|
|
php - cgimode fpm writeprocmemfile bypass disable function demo
|
297 |
WEB
|
ylbhz
|
|
2015-09-10
|
|
Auto-Exchanger 5.1.0 - CSRF Vulnerability
|
211 |
WEB
|
Aryan Bayaninejad
|
|
2015-09-07
|
|
Elastix < 2.5 , PHP Code Injection Exploit
|
218 |
WEB
|
i-Hmx
|
|
2015-09-07
|
|
WordPress Contact Form Generator <= 2.0.1 - Multiple CSRF Vulnerabilities
|
153 |
WEB
|
i0akiN SEC-LABORATORY
|
|
2015-09-06
|
|
GPON Home Router FTP G-93RG1 - CSRF Command Execution Vulnerability
|
120 |
WEB
|
Phan Thanh Duy
|
|
2015-09-06
|
|
YesWiki 0.2 - Path Traversal Vulnerability
|
125 |
WEB
|
HaHwul
|
|
2015-09-06
|
|
Thomson Wireless VoIP Cable Modem TWG850-4B ST9C.05.08 - Authentication Bypass
|
141 |
WEB
|
Glaysson dos Santos
|
|
2015-09-06
|
|
Serendipity 2.0.1 Shell Upload
|
198 |
WEB
|
Tim Coen
|
|
2015-09-01
|
|
Ganglia Web Frontend < 3.5.1 - PHP Code Execution
|
99 |
WEB
|
Andrei Costin
|
|
2015-08-31
|
|
Pluck CMS 4.7.3 - Multiple Vulnerabilities
|
118 |
WEB
|
smash
|
|
2015-08-25
|
|
Pligg CMS 2.0.2 - CSRF Add Admin Exploit
|
131 |
WEB
|
Arash Khazaei
|
|
2015-08-21
|
|
Pligg CMS 2.0.2 - Arbitrary Code Execution
|
206 |
WEB
|
Arash Khazaei
|
|
2015-08-21
|
|
up.time 7.5.0 Upload And Execute File Exploit
|
170 |
WEB
|
LiquidWorm
|
|
2015-08-21
|
|
up.time 7.5.0 Superadmin Privilege Escalation Exploit
|
186 |
WEB
|
LiquidWorm
|
|
2015-08-21
|
|
Easy File Management Web Server 5.6 Buffer Overflow
|
185 |
WEB
|
Tracy Turben
|
|
2015-08-19
|
|
Magento CE < 1.9.0.1 Post Auth RCE
|
207 |
WEB
|
Ebrietas0
|
|
2015-08-18
|
|
Sagemcom F@ST 3864 V2 - Get Admin Password
|
452 |
WEB
|
Cade Bull
|
|
2015-08-18
|
|
TOTOLINK Routers - Backdoor and RCE Exploit PoC
|
315 |
WEB
|
MadMouse
|
|
2015-08-13
|
|
PHPfileNavigator 2.3.3 Privilege Escalation
|
186 |
WEB
|
hyp3rlinx
|
|
2015-08-10
|
|
Microweber 1.0.3 - Stored XSS And CSRF Add Admin Exploit
|
194 |
WEB
|
LiquidWorm
|
|
2015-07-28
|
|
Xceedium Xsuite Command Injection / XSS / Traversal / Escalation
|
113 |
WEB
|
Martin Schobert
|
|
2015-07-15
|
|
FreiChat 9.6 SQL Injection
|
223 |
WEB
|
Kacper Szurek
|
|
2015-07-15
|
|
WordPress WP-PowerPlayGallery 3.3 File Upload / SQL Injection
|
229 |
WEB
|
Larry W. Cashdollar
|
|
2015-07-10
|
|
GWC CMS 1.0 SQL Injection
|
194 |
WEB
|
nopesled
|
|
2015-07-10
|
|
WordPress S3Bubble Cloud Video With Adverts / Analytics Arbitrary File Download
|
258 |
WEB
|
CrashBandicot
|
|
2015-07-07
|
|
DedeCMS < 5.7-sp1 - Remote File Inclusion
|
423 |
WEB
|
zise
|
|
2015-07-07
|
|
AirDroid Unauthenticated Arbitrary File Upload
|
90 |
WEB
|
Parsa Adib
|
|
2015-07-02
|
|
D-Link DSP-W w110 v1.05b01 - Multiple Vulnerabilities
|
138 |
WEB
|
DNO
|
|
2015-06-30
|
|
Huawei Home Gateway HG530 / HG520b Password Disclosure / Change
|
114 |
WEB
|
Fady Mohamed Osman
|
|
2015-06-30
|
|
C2Box 4.0.0 r19171 Cross Site Request Forgery
|
129 |
WEB
|
Wissam Bashour
|
|
2015-06-29
|
|
Joomla Simple Image Upload 1.0 Shell Upload
|
267 |
WEB
|
CrashBandicot
|
|
2015-06-29
|
|
WordPress Revslider Arbitrary File Upload / Download / XSS
|
138 |
WEB
|
CaFc Versace
|
