|
2014-04-23
|
|
No-CMS 0.6.6 rev 1 - Admin Account Hijacking / RCE Exploit via Static Encryption Key
|
181 |
WEB
|
Mehmet Ince
|
|
2014-04-23
|
|
Sixnet Sixview 2.4.1 - Web Console Directory Traversal
|
66 |
WEB
|
daniel svartman
|
|
2014-04-22
|
|
Comtrend CT 5361T Cross Site Request Forgery / Cross Site Scripting
|
92 |
WEB
|
TUNISIAN CYBER
|
|
2014-04-22
|
|
ATSEngine credential disclosure vulnerability
|
60 |
WEB
|
Xylitol
|
|
2014-04-21
|
|
CU3ER 1.24 Cross Site Scripting / Content Spoofing
|
81 |
WEB
|
MustLive
|
|
2014-04-16
|
|
NETGEAR N600 WIRELESS DUAL BAND WNDR3400 - Multiple Vulnerabilities
|
87 |
WEB
|
Santhosh Kumar
|
|
2014-04-15
|
|
Madss Software Solution SQL Injection
|
133 |
WEB
|
Ashiyane Digital Security Team
|
|
2014-04-14
|
|
Plex Media Server 0.9.9.10 CSRF / Disclosure
|
181 |
WEB
|
S. Viehbock
|
|
2014-04-14
|
|
eScan Web Management Console Command Injection
|
73 |
WEB
|
juan vazquez
|
|
2014-04-10
|
|
Sophos Web Protection Appliance Command Execution
|
67 |
WEB
|
Brandon Perry
|
|
2014-04-10
|
|
RunCMS 1.6.1 - 'pm.class.php' Multiple SQL Injection Vulnerabilities
|
120 |
WEB
|
The:Paradox
|
|
2014-04-09
|
|
Vtiger Install Unauthenticated Remote Command Execution
|
46 |
WEB
|
Jonathan Borgeaud
|
|
2014-04-08
|
|
PHPFox 3.7.5 Authorization Bypass
|
102 |
WEB
|
Wesley Henrique Leite
|
|
2014-04-04
|
|
Kyocera FS5250 Cross Site Scripting
|
66 |
WEB
|
Jeff Sergeant
|
|
2014-04-04
|
|
Kloxo-MR 6.5.0 - CSRF Vulnerability
|
96 |
WEB
|
Necmettin COSKUN
|
|
2014-04-04
|
|
Kloxo 6.1.18 Stable - CSRF Vulnerability
|
79 |
WEB
|
Necmettin COSKUN
|
|
2014-04-03
|
|
iShare Your Moving Library 1.0 iOS - Multiple Vulnerabilities
|
48 |
WEB
|
Vulnerability-Lab
|
|
2014-04-03
|
|
ICOMM 610 Wireless Modem - CSRF Vulnerability
|
102 |
WEB
|
Blessen Thomas
|
|
2014-04-01
|
|
AlienVault 4.5.0 SQL Injection
|
88 |
WEB
|
Brandon Perry
|
|
2014-04-01
|
|
EMC Cloud Tiering Appliance v10.0 Unauthenticated XXE Arbitrary File Read
|
187 |
WEB
|
Brandon Perry
|
|
2014-03-31
|
|
WordPress Business Intelligence 1.0.6 Shell Upload
|
107 |
WEB
|
Manish Tanwar
|
|
2014-03-27
|
|
IBM Tealeaf CX 8.8 - Remote OS Command Injection
|
63 |
WEB
|
drone
|
|
2014-03-26
|
|
qEngine CMS 6.0.0 - Multiple Vulnerabilities
|
82 |
WEB
|
LiquidWorm
|
|
2014-03-26
|
|
Kemana Directory 1.5.6 (qvc_init()) Cookie Poisoning CAPTCHA Bypass Exploit
|
79 |
WEB
|
LiquidWorm
|
|
2014-03-26
|
|
Kemana Directory 1.5.6 Database Backup Disclosure Exploit
|
96 |
WEB
|
LiquidWorm
|
|
2014-03-26
|
|
Cart Engine 3.0.0 Database Backup Disclosure Exploit
|
85 |
WEB
|
LiquidWorm
|
|
2014-03-18
|
|
osCmax 2.5.X Cross-Site Request Forgery (Add Admin) Vulnerability
|
79 |
WEB
|
TUNISIAN CYBER
|
|
2014-03-17
|
|
OpenSupports v2.x AuthBypass/CSRF Vulnerabilities
|
78 |
WEB
|
TUNISIAN CYBER
|
|
2014-03-11
|
|
Herpes Net 3.0 SQL Injection
|
88 |
WEB
|
bwall
|
|
2014-03-06
|
|
Ganib 2.3 SQL Injection
|
94 |
WEB
|
drone
|
|
2014-02-14
|
|
Dexter CasinoLoader SQL Injection
|
107 |
WEB
|
bwall
|
|
2014-02-11
|
|
ZTE ZXV10 W300 Hardcoded Credentials
|
112 |
WEB
|
Cesar Neira
|
|
2014-02-11
|
|
WordPress Kidoo Shell Upload
|
91 |
WEB
|
TUNISIAN CYBER
|
|
2014-01-21
|
|
WordPress Global Flash Galleries File Upload
|
85 |
WEB
|
Ashiyane Digital Security Team
|
|
2014-01-20
|
|
bloofoxCMS 0.5.0 CSRF / PHP Code Injection
|
155 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2014-01-17
|
|
SmarterMail 11.x Cross Site Scripting
|
162 |
WEB
|
Saeed reza Zamanian
|
|
2014-01-09
|
|
Eyou Mail System Remote Code Execution
|
75 |
WEB
|
conqu3r.zeng
|
|
2014-01-08
|
|
Command School Student Management System 1.06.01 SQL Injection / CSRF / XSS
|
89 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2014-01-08
|
|
vTiger CRM SOAP AddEmailAttachment Arbitrary File Upload
|
92 |
WEB
|
EgiX
|
|
2014-01-07
|
|
Seagate BlackArmor NAS sg2000-2000.1331 - Multiple Persistent Cross Site Scripting Vulnerabilities
|
85 |
WEB
|
Jeroen - IT Nerdbox
|
|
2014-01-07
|
|
Seagate BlackArmor NAS sg2000-2000.1331 - Cross Site Request Forgery
|
70 |
WEB
|
Jeroen - IT Nerdbox
|
|
2014-01-07
|
|
Seagate BlackArmor NAS sg2000-2000.1331 - Remote Command Execution
|
199 |
WEB
|
Jeroen - IT Nerdbox
|
|
2014-01-07
|
|
Seagate BlackArmor - Root Exploit
|
111 |
WEB
|
Jeroen - IT Nerdbox
|
|
2013-12-31
|
|
PhotoStore 4.0.7. Shell Upload
|
84 |
WEB
|
Gabby
|
|
2013-12-24
|
|
Synology DiskStation Manager SLICEUPLOAD Remote Command Execution
|
76 |
WEB
|
Markus Wulftange
|
|
2013-12-24
|
|
OpenSIS 'modname' PHP Code Execution
|
92 |
WEB
|
EgiX
|
|
2013-12-24
|
|
Zimbra Collaboration Server LFI
|
112 |
WEB
|
rubina119
|
|
2013-12-24
|
|
Song Exporter 2.1.1 RS Local File Inclusion
|
67 |
WEB
|
Benjamin Kunz Mejri
|
|
2013-12-24
|
|
WordPress Persuasion Theme File Download / Deletion
|
77 |
WEB
|
Interference Security
|
|
2013-12-23
|
|
USP Secure Entry Server URL Redirection
|
63 |
WEB
|
Alexandre Herzog
|
|
2013-12-18
|
|
iScripts Support Desk 4.1 SQL Injection
|
145 |
WEB
|
i-Hmx
|
|
2013-12-18
|
|
Traidnt Upload 3 Add Administrator
|
78 |
WEB
|
i-Hmx
|
|
2013-12-16
|
|
PHP openssl_x509_parse() Memory Corruption
|
126 |
WEB
|
Stefan Esser
|
|
2013-12-16
|
|
iScripts AutoHoster PHP Code Injection
|
75 |
WEB
|
i-Hmx
|
|
2013-12-11
|
|
vBulletin index.php/ajax/api/reputation/vote nodeid Parameter SQL Injection
|
88 |
WEB
|
Orestis Kourides
|
|
2013-12-09
|
|
Up.Time Monitoring Station post2file.php Arbitrary File Upload
|
92 |
WEB
|
Denis Andzakovic
|
|
2013-12-09
|
|
Eaton Network Shutdown Module 3.21 PHP Code Injection
|
86 |
WEB
|
Filip Waeytens
|
|
2013-12-06
|
|
Joomla Hotornot2 Shell Upload
|
102 |
WEB
|
DevilScreaM
|
|
2013-12-05
|
|
Kaseya uploadImage Arbitrary File Upload
|
101 |
WEB
|
Thomas Hibbert
|
|
2013-12-03
|
|
WordPress OptimizePress Theme File Upload
|
97 |
WEB
|
Mekanismen
|
|
2013-12-02
|
|
Joomla JMultimedia Command Execution
|
98 |
WEB
|
Deepankar Arora
|
|
2013-11-29
|
|
Kimai 0.9.2 db_restore.php SQL Injection
|
83 |
WEB
|
drone
|
|
2013-11-26
|
|
LimeSurvey 2.00+ (build 131107) - Multiple Vulnerabilities
|
96 |
WEB
|
LiquidWorm
|
|
2013-11-11
|
|
RASPcalendar 1.01 SQL Injection
|
73 |
WEB
|
Hackeri-AL
|
|
2013-11-01
|
|
Joomla Joomleague Shell Upload
|
91 |
WEB
|
wantexz
|
|
2013-11-01
|
|
Unicorn WB-3300NR Cross Site Request Forgery
|
92 |
WEB
|
absane
|
|
2013-10-31
|
|
ProcessMaker Open Source Authenticated PHP Code Execution
|
77 |
WEB
|
Brendan Coles
|
|
2013-10-28
|
|
WordPress GeoPlaces 4.x Shell Upload
|
72 |
WEB
|
DevilScreaM
|
|
2013-10-28
|
|
WebCollab 3.30 HTTP Response Splitting
|
84 |
WEB
|
Manuel Garcia Cardenas
|
|
2013-10-24
|
|
Joomla Component com_maianmedia Remote Code Execution
|
107 |
WEB
|
indexphp
|
|
2013-10-23
|
|
Apache Shindig 2.5.0 XXE Injection
|
81 |
WEB
|
Kousuke Ebihara
|
|
2013-10-21
|
|
Bluetooth U 1.2.0 Directory Traversal
|
80 |
WEB
|
Benjamin Kunz Mejri
|
|
2013-10-21
|
|
WebTester 5.x Command Execution
|
72 |
WEB
|
Brendan Coles
|
|
2013-10-18
|
|
Oracle Portal Demo Organization Chart PL/SQL Injection
|
119 |
WEB
|
Manuel Garcia Cardenas
|
|
2013-10-18
|
|
Level One Enterprise Access Points Password Disclosure
|
77 |
WEB
|
Richard Weinberger
|
|
2013-10-15
|
|
Zabbix 2.0.8 SQL Injection / Remote Code Execution
|
101 |
WEB
|
Lincoln
|
|
2013-10-08
|
|
WordPress Woopra Remote Code Execution
|
106 |
WEB
|
wantexz
|
|
2013-10-08
|
|
WordPress Slimstat Ex Code Execution
|
75 |
WEB
|
wantexz
|
|
2013-10-08
|
|
WordPress SEO Watcher Remote Code Execution
|
86 |
WEB
|
wantexz
|
|
2013-09-27
|
|
Astium Remote Code Execution
|
146 |
WEB
|
xistence
|
|
2013-09-26
|
|
Nodejs js-yaml load() Code Execution
|
122 |
WEB
|
joev
|
|
2013-09-24
|
|
Raidsonic NAS Devices Unauthenticated Remote Command Execution
|
124 |
WEB
|
juan vazquez
|
|
2013-08-29
|
|
SPIP Connect Parameter PHP Injection
|
93 |
WEB
|
Frederic Cikala
|
|
2013-08-15
|
|
Struts2 2.3.15 Open Redirect
|
89 |
WEB
|
Takeshi Terada
|
|
2013-08-15
|
|
Struts2 2.3.15 OGNL Injection
|
361 |
WEB
|
Takeshi Terada
|
|
2013-08-12
|
|
Sybase EAServer XXE Injection
|
73 |
WEB
|
MustLive
|
|
2013-08-08
|
|
MyBB 1.6.10 Open Redirection
|
66 |
WEB
|
LiquidWorm
|
|
2013-07-30
|
|
PineApp Mail-SeCure test_li_connection.php Arbitrary Command Execution
|
74 |
WEB
|
Dave Weinstein
|
|
2013-07-30
|
|
PineApp Mail-SeCure ldapsyncnow.php Arbitrary Command Execution
|
82 |
WEB
|
Dave Weinstein
|
|
2013-07-30
|
|
PineApp Mail-SeCure livelog.html Arbitrary Command Execution
|
92 |
WEB
|
temp66
|
|
2013-07-26
|
|
Powershell Payload Web Delivery
|
79 |
WEB
|
Chris Campbell
|
|
2013-06-24
|
|
HP System Management Homepage JustGetSNMPQueue Command Injection
|
97 |
WEB
|
sinn3r
|
|
2013-06-24
|
|
LibrettoCMS File Manager Arbitrary File Upload
|
120 |
WEB
|
sinn3r
|
|
2013-06-19
|
|
MoinMoin twikidraw Action Traversal File Upload
|
86 |
WEB
|
HTP
|
|
2013-06-09
|
|
Resin Application Server 4.0.36 Cross Site Scripting
|
79 |
WEB
|
LiquidWorm
|
|
2013-06-09
|
|
Resin Application Server 4.0.36 Source Code Disclosure
|
79 |
WEB
|
LiquidWorm
|
|
2013-06-08
|
|
JBoss AS Administrative Console Password Disclosure
|
246 |
WEB
|
amroot
|
|
2013-06-04
|
|
Seowonintech Routers Remote Root File Dumper
|
65 |
WEB
|
Todor Donev
|
|
2013-06-03
|
|
PhpTax 0.8 - File Manipulation(newvalue,field) Remote Code Execution
|
111 |
WEB
|
CWH Underground
|
|
2013-05-31
|
|
HP LaserJet Pro P1606dn Password Reset
|
99 |
WEB
|
m3tamantra
|
|
2013-05-29
|
|
Matterdaddy Market 1.4.2 Cross Site Request Forgery / Arbitrary File Upload
|
83 |
WEB
|
KedAns-Dz
|
|
2013-05-20
|
|
D-Link DIR615h OS Command Injection
|
208 |
WEB
|
juan vazquez
|
|
2013-04-26
|
|
phpMyAdmin 3.5.8 and 4.0.0-RC2 - Multiple Vulnerabilities
|
86 |
WEB
|
waraxe
|
|
2013-04-26
|
|
Hornbill Supportworks ITSM 1.0.0 - SQL Injection Vulnerability
|
85 |
WEB
|
Joseph Sheridan
|
|
2013-04-25
|
|
CiviCRM for Joomla 4.2.2 - Remote Code Injection
|
93 |
WEB
|
iskorpitx
|
|
2013-04-25
|
|
SMF 2.0.4 PHP Code Injection
|
191 |
WEB
|
Jakub Galczyk
|
|
2013-04-23
|
|
Janissaries Joomla Civicrm Shell Upload
|
77 |
WEB
|
miyachung
|
|
2013-04-22
|
|
nginx 0.6.x Arbitrary Code Execution NullByte Injection
|
91 |
WEB
|
Neal Poole
|
|
2013-04-22
|
|
Netgear DGN2200B pppoe.cgi Remote Command Execution
|
199 |
WEB
|
juan vazquez
|
|
2013-04-18
|
|
Java Web Start Launcher Memory Corruption
|
190 |
WEB
|
A. Antukh
|
|
2013-04-03
|
|
Aspen 0.8 Directory Traversal
|
81 |
WEB
|
Daniel Ricardo dos Santos
|
|
2013-04-03
|
|
Netgear WNR1000 Authentication Bypass
|
114 |
WEB
|
Roberto Paleari
|
|
2013-03-29
|
|
PsychoStats 3.2.2b Blind SQL Injection
|
71 |
WEB
|
Mohamed from ALG
|
|
2013-03-29
|
|
McAfee Virtual Technician (MVT) 6.5.0.2101 Unsafe Active-X
|
90 |
WEB
|
High-Tech Bridge SA
|
|
2013-03-29
|
|
AWS XMS 2.5 Path Traversal
|
88 |
WEB
|
High-Tech Bridge SA
|
|
2013-03-21
|
|
TP-Link TL-WR740N Wireless Router Remote Denial Of Service
|
108 |
WEB
|
LiquidWorm
|
|
2013-03-15
|
|
QuinStreet Database ID Spoofing
|
94 |
WEB
|
Henry Garrison
|
|
2013-03-14
|
|
LCG Disk Pool Manager SQL Injection
|
68 |
WEB
|
Adam Zabrocki
|
|
2013-03-14
|
|
Apache Rave User Exposure
|
70 |
WEB
|
Andreas Guth
|
|
2013-03-13
|
|
Web Cookbook SQL Injection
|
83 |
WEB
|
Saadat Ullah
|
|
2013-02-20
|
|
OpenEMR PHP File Upload
|
90 |
WEB
|
juan vazquez
|
|
2013-01-29
|
|
PHP Weby Directory Software 1.2 Multiple Vulnerabilities
|
151 |
WEB
|
AkaStep
|
|
2013-01-21
|
|
PHP-Charts 1.0 PHP Code Execution
|
70 |
WEB
|
Akastep
|
|
2013-01-18
|
|
PHP Chart 1.0 Code Execution
|
95 |
WEB
|
Akastep
|
|
2013-01-16
|
|
Oracle Application Framework Diagnostic Mode Bypass
|
120 |
WEB
|
David Byrne
|
