|
2014-06-16
|
|
ZeroCMS 1.0 - zero_transact_user.php, Handling Privilege Escalation
|
162 |
WEB
|
Tiago Carvalho
|
|
2014-06-13
|
|
Plesk 10.4.4 / 11.0.9 XXE Injection
|
92 |
WEB
|
z00
|
|
2014-06-10
|
|
Xornic Contact Us Form CAPTCHA Bypass / XSS
|
107 |
WEB
|
Scott Arciszewski
|
|
2014-06-09
|
|
Madness Pro <= 1.14 - SQL Injection
|
86 |
WEB
|
bwall
|
|
2014-06-09
|
|
Madness Pro <= 1.14 - Persistent XSS
|
104 |
WEB
|
bwall
|
|
2014-05-22
|
|
SPIP - CMS < 3.0.9 / 2.1.22 / 2.0.23 - Privilege Escalation
|
90 |
WEB
|
Gregory DRAPERI
|
|
2014-05-20
|
|
UPS Web/SNMP-Manager CS121 Login Bypass
|
89 |
WEB
|
jkmac
|
|
2014-05-20
|
|
SafeNet Sentinel Protection Server 7.0 - 7.4 and Sentinel Keys Server 1.0.3 - 1.0.4 Directory Traver
|
79 |
WEB
|
Matt Schmidt
|
|
2014-05-20
|
|
HP Release Control Authenticated XXE
|
101 |
WEB
|
Brandon Perry
|
|
2014-05-16
|
|
ElasticSearch Remote Code Execution
|
86 |
WEB
|
Jeff Geiger
|
|
2014-05-14
|
|
WordPress Formidable Forms Remote Code Execution
|
99 |
WEB
|
Manish Tanwar
|
|
2014-05-14
|
|
AlienVault OSSIM 4.6.1 - Authenticated SQL Injection
|
114 |
WEB
|
Chris Hebert
|
|
2014-05-09
|
|
F5 iControl Remote Command Execution Vulnerability
|
78 |
WEB
|
Brandon Perry
|
|
2014-05-04
|
|
HP Laser Jet - JavaScript Persistent XSS via PJL Directory Traversal
|
87 |
WEB
|
@0x00string
|
|
2014-04-25
|
|
Bonefire v.0.7.1 - Reinstall Admin Account Exploit
|
74 |
WEB
|
Mehmet Ince
|
|
2014-04-23
|
|
No-CMS 0.6.6 rev 1 - Admin Account Hijacking / RCE Exploit via Static Encryption Key
|
187 |
WEB
|
Mehmet Ince
|
|
2014-04-23
|
|
Sixnet Sixview 2.4.1 - Web Console Directory Traversal
|
71 |
WEB
|
daniel svartman
|
|
2014-04-22
|
|
Comtrend CT 5361T Cross Site Request Forgery / Cross Site Scripting
|
97 |
WEB
|
TUNISIAN CYBER
|
|
2014-04-22
|
|
ATSEngine credential disclosure vulnerability
|
65 |
WEB
|
Xylitol
|
|
2014-04-21
|
|
CU3ER 1.24 Cross Site Scripting / Content Spoofing
|
86 |
WEB
|
MustLive
|
|
2014-04-16
|
|
NETGEAR N600 WIRELESS DUAL BAND WNDR3400 - Multiple Vulnerabilities
|
94 |
WEB
|
Santhosh Kumar
|
|
2014-04-15
|
|
Madss Software Solution SQL Injection
|
138 |
WEB
|
Ashiyane Digital Security Team
|
|
2014-04-14
|
|
Plex Media Server 0.9.9.10 CSRF / Disclosure
|
188 |
WEB
|
S. Viehbock
|
|
2014-04-14
|
|
eScan Web Management Console Command Injection
|
80 |
WEB
|
juan vazquez
|
|
2014-04-10
|
|
Sophos Web Protection Appliance Command Execution
|
77 |
WEB
|
Brandon Perry
|
|
2014-04-10
|
|
RunCMS 1.6.1 - 'pm.class.php' Multiple SQL Injection Vulnerabilities
|
125 |
WEB
|
The:Paradox
|
|
2014-04-09
|
|
Vtiger Install Unauthenticated Remote Command Execution
|
51 |
WEB
|
Jonathan Borgeaud
|
|
2014-04-08
|
|
PHPFox 3.7.5 Authorization Bypass
|
110 |
WEB
|
Wesley Henrique Leite
|
|
2014-04-04
|
|
Kyocera FS5250 Cross Site Scripting
|
71 |
WEB
|
Jeff Sergeant
|
|
2014-04-04
|
|
Kloxo-MR 6.5.0 - CSRF Vulnerability
|
103 |
WEB
|
Necmettin COSKUN
|
|
2014-04-04
|
|
Kloxo 6.1.18 Stable - CSRF Vulnerability
|
86 |
WEB
|
Necmettin COSKUN
|
|
2014-04-03
|
|
iShare Your Moving Library 1.0 iOS - Multiple Vulnerabilities
|
58 |
WEB
|
Vulnerability-Lab
|
|
2014-04-03
|
|
ICOMM 610 Wireless Modem - CSRF Vulnerability
|
110 |
WEB
|
Blessen Thomas
|
|
2014-04-01
|
|
AlienVault 4.5.0 SQL Injection
|
96 |
WEB
|
Brandon Perry
|
|
2014-04-01
|
|
EMC Cloud Tiering Appliance v10.0 Unauthenticated XXE Arbitrary File Read
|
195 |
WEB
|
Brandon Perry
|
|
2014-03-31
|
|
WordPress Business Intelligence 1.0.6 Shell Upload
|
113 |
WEB
|
Manish Tanwar
|
|
2014-03-27
|
|
IBM Tealeaf CX 8.8 - Remote OS Command Injection
|
69 |
WEB
|
drone
|
|
2014-03-26
|
|
qEngine CMS 6.0.0 - Multiple Vulnerabilities
|
91 |
WEB
|
LiquidWorm
|
|
2014-03-26
|
|
Kemana Directory 1.5.6 (qvc_init()) Cookie Poisoning CAPTCHA Bypass Exploit
|
85 |
WEB
|
LiquidWorm
|
|
2014-03-26
|
|
Kemana Directory 1.5.6 Database Backup Disclosure Exploit
|
102 |
WEB
|
LiquidWorm
|
|
2014-03-26
|
|
Cart Engine 3.0.0 Database Backup Disclosure Exploit
|
90 |
WEB
|
LiquidWorm
|
|
2014-03-18
|
|
osCmax 2.5.X Cross-Site Request Forgery (Add Admin) Vulnerability
|
85 |
WEB
|
TUNISIAN CYBER
|
|
2014-03-17
|
|
OpenSupports v2.x AuthBypass/CSRF Vulnerabilities
|
85 |
WEB
|
TUNISIAN CYBER
|
|
2014-03-11
|
|
Herpes Net 3.0 SQL Injection
|
95 |
WEB
|
bwall
|
|
2014-03-06
|
|
Ganib 2.3 SQL Injection
|
99 |
WEB
|
drone
|
|
2014-02-14
|
|
Dexter CasinoLoader SQL Injection
|
113 |
WEB
|
bwall
|
|
2014-02-11
|
|
ZTE ZXV10 W300 Hardcoded Credentials
|
117 |
WEB
|
Cesar Neira
|
|
2014-02-11
|
|
WordPress Kidoo Shell Upload
|
98 |
WEB
|
TUNISIAN CYBER
|
|
2014-01-21
|
|
WordPress Global Flash Galleries File Upload
|
89 |
WEB
|
Ashiyane Digital Security Team
|
|
2014-01-20
|
|
bloofoxCMS 0.5.0 CSRF / PHP Code Injection
|
165 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2014-01-17
|
|
SmarterMail 11.x Cross Site Scripting
|
170 |
WEB
|
Saeed reza Zamanian
|
|
2014-01-09
|
|
Eyou Mail System Remote Code Execution
|
81 |
WEB
|
conqu3r.zeng
|
|
2014-01-08
|
|
Command School Student Management System 1.06.01 SQL Injection / CSRF / XSS
|
99 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2014-01-08
|
|
vTiger CRM SOAP AddEmailAttachment Arbitrary File Upload
|
97 |
WEB
|
EgiX
|
|
2014-01-07
|
|
Seagate BlackArmor NAS sg2000-2000.1331 - Multiple Persistent Cross Site Scripting Vulnerabilities
|
93 |
WEB
|
Jeroen - IT Nerdbox
|
|
2014-01-07
|
|
Seagate BlackArmor NAS sg2000-2000.1331 - Cross Site Request Forgery
|
77 |
WEB
|
Jeroen - IT Nerdbox
|
|
2014-01-07
|
|
Seagate BlackArmor NAS sg2000-2000.1331 - Remote Command Execution
|
205 |
WEB
|
Jeroen - IT Nerdbox
|
|
2014-01-07
|
|
Seagate BlackArmor - Root Exploit
|
116 |
WEB
|
Jeroen - IT Nerdbox
|
|
2013-12-31
|
|
PhotoStore 4.0.7. Shell Upload
|
90 |
WEB
|
Gabby
|
|
2013-12-24
|
|
Synology DiskStation Manager SLICEUPLOAD Remote Command Execution
|
84 |
WEB
|
Markus Wulftange
|
|
2013-12-24
|
|
OpenSIS 'modname' PHP Code Execution
|
96 |
WEB
|
EgiX
|
|
2013-12-24
|
|
Zimbra Collaboration Server LFI
|
118 |
WEB
|
rubina119
|
|
2013-12-24
|
|
Song Exporter 2.1.1 RS Local File Inclusion
|
73 |
WEB
|
Benjamin Kunz Mejri
|
|
2013-12-24
|
|
WordPress Persuasion Theme File Download / Deletion
|
85 |
WEB
|
Interference Security
|
|
2013-12-23
|
|
USP Secure Entry Server URL Redirection
|
72 |
WEB
|
Alexandre Herzog
|
|
2013-12-18
|
|
iScripts Support Desk 4.1 SQL Injection
|
153 |
WEB
|
i-Hmx
|
|
2013-12-18
|
|
Traidnt Upload 3 Add Administrator
|
85 |
WEB
|
i-Hmx
|
|
2013-12-16
|
|
PHP openssl_x509_parse() Memory Corruption
|
134 |
WEB
|
Stefan Esser
|
|
2013-12-16
|
|
iScripts AutoHoster PHP Code Injection
|
81 |
WEB
|
i-Hmx
|
|
2013-12-11
|
|
vBulletin index.php/ajax/api/reputation/vote nodeid Parameter SQL Injection
|
97 |
WEB
|
Orestis Kourides
|
|
2013-12-09
|
|
Up.Time Monitoring Station post2file.php Arbitrary File Upload
|
99 |
WEB
|
Denis Andzakovic
|
|
2013-12-09
|
|
Eaton Network Shutdown Module 3.21 PHP Code Injection
|
91 |
WEB
|
Filip Waeytens
|
|
2013-12-06
|
|
Joomla Hotornot2 Shell Upload
|
108 |
WEB
|
DevilScreaM
|
|
2013-12-05
|
|
Kaseya uploadImage Arbitrary File Upload
|
107 |
WEB
|
Thomas Hibbert
|
|
2013-12-03
|
|
WordPress OptimizePress Theme File Upload
|
102 |
WEB
|
Mekanismen
|
|
2013-12-02
|
|
Joomla JMultimedia Command Execution
|
104 |
WEB
|
Deepankar Arora
|
|
2013-11-29
|
|
Kimai 0.9.2 db_restore.php SQL Injection
|
90 |
WEB
|
drone
|
|
2013-11-26
|
|
LimeSurvey 2.00+ (build 131107) - Multiple Vulnerabilities
|
105 |
WEB
|
LiquidWorm
|
|
2013-11-11
|
|
RASPcalendar 1.01 SQL Injection
|
79 |
WEB
|
Hackeri-AL
|
|
2013-11-01
|
|
Joomla Joomleague Shell Upload
|
99 |
WEB
|
wantexz
|
|
2013-11-01
|
|
Unicorn WB-3300NR Cross Site Request Forgery
|
97 |
WEB
|
absane
|
|
2013-10-31
|
|
ProcessMaker Open Source Authenticated PHP Code Execution
|
84 |
WEB
|
Brendan Coles
|
|
2013-10-28
|
|
WordPress GeoPlaces 4.x Shell Upload
|
81 |
WEB
|
DevilScreaM
|
|
2013-10-28
|
|
WebCollab 3.30 HTTP Response Splitting
|
92 |
WEB
|
Manuel Garcia Cardenas
|
|
2013-10-24
|
|
Joomla Component com_maianmedia Remote Code Execution
|
114 |
WEB
|
indexphp
|
|
2013-10-23
|
|
Apache Shindig 2.5.0 XXE Injection
|
88 |
WEB
|
Kousuke Ebihara
|
|
2013-10-21
|
|
Bluetooth U 1.2.0 Directory Traversal
|
88 |
WEB
|
Benjamin Kunz Mejri
|
|
2013-10-21
|
|
WebTester 5.x Command Execution
|
78 |
WEB
|
Brendan Coles
|
|
2013-10-18
|
|
Oracle Portal Demo Organization Chart PL/SQL Injection
|
125 |
WEB
|
Manuel Garcia Cardenas
|
|
2013-10-18
|
|
Level One Enterprise Access Points Password Disclosure
|
83 |
WEB
|
Richard Weinberger
|
|
2013-10-15
|
|
Zabbix 2.0.8 SQL Injection / Remote Code Execution
|
109 |
WEB
|
Lincoln
|
|
2013-10-08
|
|
WordPress Woopra Remote Code Execution
|
112 |
WEB
|
wantexz
|
|
2013-10-08
|
|
WordPress Slimstat Ex Code Execution
|
82 |
WEB
|
wantexz
|
|
2013-10-08
|
|
WordPress SEO Watcher Remote Code Execution
|
94 |
WEB
|
wantexz
|
|
2013-09-27
|
|
Astium Remote Code Execution
|
151 |
WEB
|
xistence
|
|
2013-09-26
|
|
Nodejs js-yaml load() Code Execution
|
129 |
WEB
|
joev
|
|
2013-09-24
|
|
Raidsonic NAS Devices Unauthenticated Remote Command Execution
|
133 |
WEB
|
juan vazquez
|
|
2013-08-29
|
|
SPIP Connect Parameter PHP Injection
|
99 |
WEB
|
Frederic Cikala
|
|
2013-08-15
|
|
Struts2 2.3.15 Open Redirect
|
95 |
WEB
|
Takeshi Terada
|
|
2013-08-15
|
|
Struts2 2.3.15 OGNL Injection
|
369 |
WEB
|
Takeshi Terada
|
|
2013-08-12
|
|
Sybase EAServer XXE Injection
|
78 |
WEB
|
MustLive
|
|
2013-08-08
|
|
MyBB 1.6.10 Open Redirection
|
73 |
WEB
|
LiquidWorm
|
|
2013-07-30
|
|
PineApp Mail-SeCure test_li_connection.php Arbitrary Command Execution
|
79 |
WEB
|
Dave Weinstein
|
|
2013-07-30
|
|
PineApp Mail-SeCure ldapsyncnow.php Arbitrary Command Execution
|
86 |
WEB
|
Dave Weinstein
|
|
2013-07-30
|
|
PineApp Mail-SeCure livelog.html Arbitrary Command Execution
|
96 |
WEB
|
temp66
|
|
2013-07-26
|
|
Powershell Payload Web Delivery
|
86 |
WEB
|
Chris Campbell
|
|
2013-06-24
|
|
HP System Management Homepage JustGetSNMPQueue Command Injection
|
101 |
WEB
|
sinn3r
|
|
2013-06-24
|
|
LibrettoCMS File Manager Arbitrary File Upload
|
123 |
WEB
|
sinn3r
|
|
2013-06-19
|
|
MoinMoin twikidraw Action Traversal File Upload
|
93 |
WEB
|
HTP
|
|
2013-06-09
|
|
Resin Application Server 4.0.36 Cross Site Scripting
|
86 |
WEB
|
LiquidWorm
|
|
2013-06-09
|
|
Resin Application Server 4.0.36 Source Code Disclosure
|
90 |
WEB
|
LiquidWorm
|
|
2013-06-08
|
|
JBoss AS Administrative Console Password Disclosure
|
250 |
WEB
|
amroot
|
|
2013-06-04
|
|
Seowonintech Routers Remote Root File Dumper
|
72 |
WEB
|
Todor Donev
|
|
2013-06-03
|
|
PhpTax 0.8 - File Manipulation(newvalue,field) Remote Code Execution
|
119 |
WEB
|
CWH Underground
|
|
2013-05-31
|
|
HP LaserJet Pro P1606dn Password Reset
|
104 |
WEB
|
m3tamantra
|
|
2013-05-29
|
|
Matterdaddy Market 1.4.2 Cross Site Request Forgery / Arbitrary File Upload
|
89 |
WEB
|
KedAns-Dz
|
|
2013-05-20
|
|
D-Link DIR615h OS Command Injection
|
214 |
WEB
|
juan vazquez
|
|
2013-04-26
|
|
phpMyAdmin 3.5.8 and 4.0.0-RC2 - Multiple Vulnerabilities
|
90 |
WEB
|
waraxe
|
|
2013-04-26
|
|
Hornbill Supportworks ITSM 1.0.0 - SQL Injection Vulnerability
|
90 |
WEB
|
Joseph Sheridan
|
|
2013-04-25
|
|
CiviCRM for Joomla 4.2.2 - Remote Code Injection
|
100 |
WEB
|
iskorpitx
|
|
2013-04-25
|
|
SMF 2.0.4 PHP Code Injection
|
196 |
WEB
|
Jakub Galczyk
|
|
2013-04-23
|
|
Janissaries Joomla Civicrm Shell Upload
|
81 |
WEB
|
miyachung
|
|
2013-04-22
|
|
nginx 0.6.x Arbitrary Code Execution NullByte Injection
|
97 |
WEB
|
Neal Poole
|
|
2013-04-22
|
|
Netgear DGN2200B pppoe.cgi Remote Command Execution
|
205 |
WEB
|
juan vazquez
|
|
2013-04-18
|
|
Java Web Start Launcher Memory Corruption
|
195 |
WEB
|
A. Antukh
|
