|
2015-01-06
|
|
AdaptCMS 3.0.3 XSS / Remote Code Execute Vulnerabilities
|
66 |
WEB
|
LiquidWorm
|
|
2015-01-06
|
|
HikaShop 2.3.3 Local File Inclusion Vulnerability
|
101 |
WEB
|
HauntIT Blog
|
|
2015-01-04
|
|
WordPress RevSlider Local File Disclosure
|
85 |
WEB
|
FarbodEZRaeL
|
|
2015-01-04
|
|
PHPads <= 213607 - Authentication Bypass / Password Change Exploit
|
114 |
WEB
|
Shaker msallm
|
|
2014-12-30
|
|
ProjectSend Arbitrary File Upload
|
116 |
WEB
|
Fady Mohammed Osman
|
|
2014-12-30
|
|
WordPress Dmsguestbook Unauthenticated Data Injection
|
79 |
WEB
|
Evex
|
|
2014-12-25
|
|
WordPress Themes download.php File Disclosure
|
194 |
WEB
|
Cleiton Pinheiro
|
|
2014-12-25
|
|
AMSI 3.20.47 Build 37 File Disclosure
|
198 |
WEB
|
KnocKout
|
|
2014-12-24
|
|
Phase botnet blind SQL injection vulnerability
|
72 |
WEB
|
Xylitol
|
|
2014-12-22
|
|
Cacti Superlinks Plugin 1.4-2 RCE(LFI) via SQL Injection Exploit
|
85 |
WEB
|
Wireghoul
|
|
2014-12-17
|
|
ProjectSend r-561 - Arbitrary File Upload
|
92 |
WEB
|
Fady Mohammed Osman
|
|
2014-12-16
|
|
Wordpress Download Manager 2.7.4 - Remote Code Execution Vulnerability
|
88 |
WEB
|
Claudio Viviani
|
|
2014-12-15
|
|
Tuleap PHP Unserialize Code Execution
|
162 |
WEB
|
EgiX
|
|
2014-12-15
|
|
WordPress WP Symposium 14.11 Shell Upload
|
86 |
WEB
|
Claudio Viviani
|
|
2014-12-09
|
|
Flat Calendar 1.1 HTML Injection
|
128 |
WEB
|
ZoRLu
|
|
2014-11-27
|
|
Device42 Embedded Credentials
|
100 |
WEB
|
Brandon Perry
|
|
2014-11-27
|
|
Slider Revolution/Showbiz Pro Shell Upload Exploit
|
86 |
WEB
|
Simo Ben Youssef
|
|
2014-11-27
|
|
Device42 WAN Emulator 2.3 Ping Command Injection
|
63 |
WEB
|
Brandon Perry
|
|
2014-11-27
|
|
Device42 WAN Emulator 2.3 Traceroute Command Injection
|
79 |
WEB
|
Brandon Perry
|
|
2014-11-26
|
|
All-in-One WP Migration 2.0.2 Remote Code Execution Vulnerability
|
89 |
WEB
|
Kacper Szurek
|
|
2014-11-26
|
|
Arris VAP2500 Authentication Bypass
|
103 |
WEB
|
HeadlessZeke
|
|
2014-11-26
|
|
phpMyRecipes 1.2.2 (dosearch.php, words_exact param) - SQL Injection
|
148 |
WEB
|
bard
|
|
2014-11-25
|
|
WordPress WP-DB-Backup 2.2.4 Backup Theft
|
116 |
WEB
|
Larry W. Cashdollar
|
|
2014-11-25
|
|
FluxBB 1.5.6 SQL Injection
|
92 |
WEB
|
secthrowaway
|
|
2014-11-25
|
|
Atrax Botnet Shell Upload Vulnerability
|
90 |
WEB
|
Xylitol
|
|
2014-11-24
|
|
Wordpress wpDataTables 1.5.3 shell Upload Exploit
|
78 |
WEB
|
Claudio Viviani
|
|
2014-11-18
|
|
MantisBT XmlImportExport Plugin PHP Code Injection
|
63 |
WEB
|
EgiX
|
|
2014-11-18
|
|
Joomla HD FLV 2.1.0.1 Arbitrary File Download
|
103 |
WEB
|
Claudio Viviani
|
|
2014-11-18
|
|
PHP 5.x - Bypass Disable Functions Vulnerability
|
156 |
WEB
|
Ryan King
|
|
2014-11-18
|
|
Proticaret E-Commerce Script 3.0 - SQL Injection Vulnerability
|
71 |
WEB
|
Onur Alanbel
|
|
2014-11-18
|
|
ZTE ZXHN H108L - Authentication Bypass
|
212 |
WEB
|
Project Zero Labs
|
|
2014-11-18
|
|
ZTE ZXHN H108L - Authentication Bypass
|
60 |
WEB
|
Project Zero Labs
|
|
2014-11-14
|
|
Who's Who Script Cross Site Request Forgery
|
89 |
WEB
|
ZoRLu
|
|
2014-11-14
|
|
Joomla HD FLV 2.1.0.1 SQL Injection
|
96 |
WEB
|
Claudio Viviani
|
|
2014-11-11
|
|
IP.Board 3.4.7 SQL Injection
|
90 |
WEB
|
secthrowaway
|
|
2014-11-05
|
|
Drupal < 7.32 Pre Auth SQL Injection
|
155 |
WEB
|
Stefan Horst
|
|
2014-10-31
|
|
Joomla RD Download SQL Injection
|
134 |
WEB
|
Claudio Viviani
|
|
2014-10-30
|
|
MAARCH 1.4 - Arbitrary File Upload
|
82 |
WEB
|
Adrien Thierry
|
|
2014-10-29
|
|
vBulletin Tapatalk - Blind SQL Injection
|
191 |
WEB
|
tintinweb
|
|
2014-10-28
|
|
vBulletin 4.x Tapatalk Blind SQL Injection
|
107 |
WEB
|
tintinweb
|
|
2014-10-28
|
|
Incredible PBX 2.0.6.5.0 - Remote Command Execution Exploit
|
87 |
WEB
|
Simo Ben Youssef
|
|
2014-10-28
|
|
HP Operations Agent Remote XSS iFrame Injection
|
105 |
WEB
|
Matt Schmidt
|
|
2014-10-28
|
|
Creative Contact Form (Wordpress 0.9.7 and Joomla 2.0.0) - Shell Upload Vulnerability
|
92 |
WEB
|
Claudio Viviani
|
|
2014-10-24
|
|
Centreon SQL / Command Injection
|
99 |
WEB
|
MaZ
|
|
2014-10-24
|
|
WordPress / Joomla Creative Contact Form 0.9.7 Shell Upload
|
100 |
WEB
|
Claudio Viviani
|
|
2014-10-24
|
|
Feng Office 1.7.4 - Arbitrary File Upload
|
73 |
WEB
|
AutoSec Tools
|
|
2014-10-23
|
|
DotNetNuke DNNspot Store 3.0.0 Arbitary File Upload
|
167 |
WEB
|
Glafkos Charalambous
|
|
2014-10-21
|
|
ZTE ZXDSL-931VII - Unauthenticated Configuration Dump
|
252 |
WEB
|
L0ukanik0-s S0kniaku0l
|
|
2014-10-20
|
|
Fonality Trixbox CE 2.8.0.4 Command Execution Vulnerability
|
89 |
WEB
|
Simo Ben
|
|
2014-10-20
|
|
NETIS DL4322D Multiple Vulnerabilities
|
83 |
WEB
|
AkaStep
|
|
2014-10-20
|
|
Wordpress Theme Dazzling Shell Upload Vulnerability
|
104 |
WEB
|
king_cobra
|
|
2014-10-20
|
|
Drupal Core <= 7.32 - SQL Injection (PHP)
|
94 |
WEB
|
Dustin Dörr
|
|
2014-10-20
|
|
Drupal Core <= 7.32 - SQL Injection
|
82 |
WEB
|
fyukyuk
|
|
2014-10-17
|
|
Drupal 7.X SQL Injection
|
196 |
WEB
|
Claudio Viviani
|
|
2014-10-15
|
|
SEO Control Panel 3.6.0 - Authenticated SQL Injection
|
85 |
WEB
|
Tiago Carvalho
|
|
2014-10-14
|
|
Croogo 2.0.0 Arbitrary PHP Code Execution / Cross Site Scripting Vulnerabilities
|
90 |
WEB
|
LiquidWorm
|
|
2014-10-09
|
|
Nessus Web UI 2.3.3 Cross Site Scripting Vulnerability
|
70 |
WEB
|
Frank Lycops
|
|
2014-10-09
|
|
Wordpress InfusionSoft Upload
|
126 |
WEB
|
us3r777
|
|
2014-10-08
|
|
Toast Forums Database Disclosure
|
100 |
WEB
|
indoushka
|
|
2014-10-08
|
|
Snitz Forums 2000 3.4.07 Database Disclosure
|
91 |
WEB
|
indoushka
|
|
2014-10-08
|
|
AutoWeb 3.0 SQL Injection
|
260 |
WEB
|
ZoRLu
|
|
2014-10-08
|
|
Wordpress Slideshow Gallery 1.4.6 - Shell Upload (Python Exploit)
|
73 |
WEB
|
Claudio Viviani
|
|
2014-10-08
|
|
IPFire Cgi Web Interface Authenticated Bash Environment Variable Code Injection exploit
|
97 |
WEB
|
Claudio Viviani
|
|
2014-09-30
|
|
Microsoft Exchange IIS HTTP Internal IP Address Disclosure
|
80 |
WEB
|
Nate Power
|
|
2014-09-30
|
|
OpenFiler 2.99.1 - CSRF Vulnerability
|
89 |
WEB
|
Dolev Farhi
|
|
2014-09-28
|
|
Comersus Sophisticated Cart Database Disclosure
|
87 |
WEB
|
indoushka
|
|
2014-09-26
|
|
Nucom ADSL ADSLR5000UN ISP Credentials Disclosure
|
75 |
WEB
|
Sebastián Magof
|
|
2014-09-25
|
|
ZyXEL Prestig P-660HNU-T1 ISP Credentials Disclosure Exploit
|
91 |
WEB
|
Sebastián Magof
|
|
2014-09-23
|
|
Joomla Face Gallery 1.0 Multiple Vulnerabilities
|
97 |
WEB
|
Claudio Viviani
|
|
2014-09-23
|
|
Joomla Mac Gallery <= 1.5 Arbitrary File Download Exploit
|
87 |
WEB
|
Claudio Viviani
|
|
2014-09-22
|
|
GetSimpleCMS PHP File Upload
|
78 |
WEB
|
Ahmed Elhady Mohamed
|
|
2014-09-19
|
|
Briefcase 4.0 iOS - Code Execution & File Include Vulnerability
|
100 |
WEB
|
Vulnerability-Lab
|
|
2014-09-18
|
|
ZTE ZXDSL-931VII Unauthenticated Configuration Dump
|
348 |
WEB
|
L0ukanik0s
|
|
2014-09-17
|
|
WordPress Slideshow Gallery 1.4.6 Shell Upload
|
79 |
WEB
|
Claudio Viviani
|
|
2014-09-16
|
|
ALCASAR <= 2.8.1 - Remote Root Code Execution Vulnerability
|
133 |
WEB
|
eF
|
|
2014-09-15
|
|
EGYWEB (Mantrac) <= Remote File Disclosure Exploit
|
111 |
WEB
|
KnocKout
|
|
2014-09-12
|
|
Onlineon E-Ticaret Database Disclosure
|
92 |
WEB
|
ZoRLu
|
|
2014-09-12
|
|
Joomla Spider Contacts 1.3.6 (index.php, contacts_id param) - SQL Injection
|
94 |
WEB
|
Claudio Viviani
|
|
2014-08-29
|
|
DomainTrader Domain Parking / Auction Script 2.5.3 CSRF / XSS
|
79 |
WEB
|
Haider Mahmood
|
|
2014-08-29
|
|
XRMS - Blind SQL Injection and Command Execution
|
113 |
WEB
|
Benjamin Harris
|
|
2014-08-29
|
|
PhpWiki - Remote Command Execution
|
61 |
WEB
|
Benjamin Harris
|
|
2014-08-29
|
|
ActualAnalyzer Lite 2.81 - Unauthenticated Command Execution
|
79 |
WEB
|
Benjamin Harris
|
|
2014-08-29
|
|
Plogger 1.0-RC1 - Authenticated Arbitrary File Upload
|
80 |
WEB
|
b0z
|
|
2014-08-20
|
|
HybridAuth install.php PHP Code Execution
|
89 |
WEB
|
Pichaya Morimoto
|
|
2014-08-14
|
|
WordPress Disqus 2.7.5 CSRF / Cross Site Scripting Vulnerabilities
|
120 |
WEB
|
Nik Cubrilovic
|
|
2014-08-13
|
|
CS-Cart 4.2.0 Session Hijacking
|
71 |
WEB
|
Nik Cubrilovic
|
|
2014-08-04
|
|
TigerCom iFolder+ v1.2 iOS - Multiple Vulnerabilities
|
97 |
WEB
|
Vulnerability-Lab
|
|
2014-07-31
|
|
D-Link AP 3200 Multiple Vulnerabilities
|
106 |
WEB
|
pws
|
|
2014-07-31
|
|
SkaDate Lite 2.0 - Remote Code Execution Exploit
|
189 |
WEB
|
LiquidWorm
|
|
2014-07-29
|
|
Oxwall 1.7.0 - Remote Code Execution Exploit
|
141 |
WEB
|
LiquidWorm
|
|
2014-07-29
|
|
Oxwall 1.7.0 - Multiple CSRF And HTML Injection Vulnerabilities
|
95 |
WEB
|
LiquidWorm
|
|
2014-07-28
|
|
Pligg 2.0.1 - Multiple Vulnerabilities
|
87 |
WEB
|
BlackHawk
|
|
2014-07-25
|
|
NETGEAR DGN2200 1.0.0.29_1.7.29_HotS - Password Disclosure vulnerability
|
92 |
WEB
|
Dolev Farhi
|
|
2014-07-22
|
|
vBulletin 5.1.2 SQL Injection
|
94 |
WEB
|
Nytro
|
|
2014-07-22
|
|
MTS MBlaze Ultra Wi-Fi / ZTE AC3633 - Multiple Vulnerabilities
|
80 |
WEB
|
Ajin Abraham
|
|
2014-07-16
|
|
Wordpress WPTouch Authenticated File Upload
|
68 |
WEB
|
Marc-Alexandre Montpas
|
|
2014-07-09
|
|
Yokogawa CS3000 BKFSim_vhfd.exe Buffer Overflow
|
112 |
WEB
|
Redsadic
|
|
2014-07-09
|
|
Wordpress Theme ProjectTheme Shell Upload Vulnerability
|
124 |
WEB
|
Aloulou
|
|
2014-07-09
|
|
Wordpress Theme PricerrTheme Shell Upload Vulnerability
|
131 |
WEB
|
Aloulou
|
|
2014-07-08
|
|
Netgear WNR1000v3 - Password Recovery Credential Disclosure Vulnerability
|
146 |
WEB
|
c1ph04
|
|
2014-07-01
|
|
IBM Algorithmics RICOS Disclosure / XSS / CSRF
|
148 |
WEB
|
F. Lukavsky
|
|
2014-07-01
|
|
Horde Framework Unserialize PHP Code Execution
|
80 |
WEB
|
Akra Macha
|
|
2014-06-30
|
|
WordPress wp-crm Plugin Arbitrary File Upload Vulnerability
|
314 |
WEB
|
brunox
|
|
2014-06-27
|
|
Python CGIHTTPServer File Disclosure / Code Execution
|
253 |
WEB
|
Jens Liebchen
|
|
2014-06-25
|
|
WordPress image-symlinks Plugin Arbitrary File Upload Vulnerability
|
160 |
WEB
|
brunox
|
|
2014-06-25
|
|
Cogent DataHub Command Injection
|
115 |
WEB
|
juan vazquez
|
|
2014-06-24
|
|
Supermicro IPMI/BMC Cleartext Password Scanner
|
215 |
WEB
|
1N3
|
|
2014-06-23
|
|
D-link DSL-2760U-E1 - Persistent XSS
|
85 |
WEB
|
Yuval tisf Nativ
|
|
2014-06-20
|
|
AlienVault OSSIM av-centerd Command Injection
|
64 |
WEB
|
temp66
|
|
2014-06-19
|
|
Ericom AccessNow Server Buffer Overflow
|
97 |
WEB
|
temp66
|
|
2014-06-16
|
|
ZeroCMS 1.0 - zero_transact_user.php, Handling Privilege Escalation
|
154 |
WEB
|
Tiago Carvalho
|
|
2014-06-13
|
|
Plesk 10.4.4 / 11.0.9 XXE Injection
|
87 |
WEB
|
z00
|
|
2014-06-10
|
|
Xornic Contact Us Form CAPTCHA Bypass / XSS
|
103 |
WEB
|
Scott Arciszewski
|
|
2014-06-09
|
|
Madness Pro <= 1.14 - SQL Injection
|
80 |
WEB
|
bwall
|
|
2014-06-09
|
|
Madness Pro <= 1.14 - Persistent XSS
|
100 |
WEB
|
bwall
|
|
2014-05-22
|
|
SPIP - CMS < 3.0.9 / 2.1.22 / 2.0.23 - Privilege Escalation
|
85 |
WEB
|
Gregory DRAPERI
|
|
2014-05-20
|
|
UPS Web/SNMP-Manager CS121 Login Bypass
|
86 |
WEB
|
jkmac
|
|
2014-05-20
|
|
SafeNet Sentinel Protection Server 7.0 - 7.4 and Sentinel Keys Server 1.0.3 - 1.0.4 Directory Traver
|
74 |
WEB
|
Matt Schmidt
|
|
2014-05-20
|
|
HP Release Control Authenticated XXE
|
97 |
WEB
|
Brandon Perry
|
|
2014-05-16
|
|
ElasticSearch Remote Code Execution
|
80 |
WEB
|
Jeff Geiger
|
|
2014-05-14
|
|
WordPress Formidable Forms Remote Code Execution
|
92 |
WEB
|
Manish Tanwar
|
|
2014-05-14
|
|
AlienVault OSSIM 4.6.1 - Authenticated SQL Injection
|
109 |
WEB
|
Chris Hebert
|
|
2014-05-09
|
|
F5 iControl Remote Command Execution Vulnerability
|
74 |
WEB
|
Brandon Perry
|
|
2014-05-04
|
|
HP Laser Jet - JavaScript Persistent XSS via PJL Directory Traversal
|
83 |
WEB
|
@0x00string
|
|
2014-04-25
|
|
Bonefire v.0.7.1 - Reinstall Admin Account Exploit
|
68 |
WEB
|
Mehmet Ince
|
