Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2020-05-11   Complaint Management System 1.0 - Authentication Bypass 9 WEB BKpatron
2020-05-11   Victor CMS 1.0 - 'post' SQL Injection 9 WEB BKpatron
2020-05-11   OpenZ ERP 3.6.60 - Persistent Cross-Site Scripting 8 WEB Vulnerability-Lab
2020-05-11   WordPress Plugin Simple File List 4.2.2 - Remote Code Execution 9 WEB coiffeur
2020-05-11   CuteNews 2.1.2 - Arbitrary File Deletion 12 WEB Besim
2020-05-11   Sentrifugo CMS 3.2 - Persistent Cross-Site Scripting 9 WEB Vulnerability-Lab
2020-05-11   Kartris 1.6 - Arbitrary File Upload 13 WEB Nhat Ha
2020-05-11   Online AgroCulture Farm Management System 1.0 - 'uname' SQL Injection 12 WEB Tarun Sehgal
2020-05-10   Pi-hole < 4.4 - Authenticated Remote Code Execution / Privileges Escalation 9 WEB Nick Frichette
2020-05-10   Pi-hole < 4.4 - Authenticated Remote Code Execution 11 WEB Nick Frichette
2020-05-07   Online AgroCulture Farm Management System 1.0 - 'pid' SQL Injection 14 WEB BKpatron
2020-05-07   Pisay Online E-Learning System 1.0 - Remote Code Execution 10 WEB boku
2020-05-07   Online Clothing Store 1.0 - Arbitrary File Upload 12 WEB Sushant Kamble
2020-05-07   School File Management System 1.0 - 'username' SQL Injection 13 WEB Tarun Sehgal
2020-05-07   Draytek VigorAP 1000C - Persistent Cross-Site Scripting 13 WEB Vulnerability-Lab
2020-05-07   Car Park Management System 1.0 - Authentication Bypass 12 WEB Tarun Sehgal
2020-05-06   MPC Sharj 3.11.1 - Arbitrary File Download 12 WEB SajjadBnd
2020-05-06   YesWiki cercopitheque 2020.04.18.1 - 'id' SQL Injection 10 WEB coiffeur
2020-05-06   GitLab 12.9.0 - Arbitrary File Read 10 WEB KouroshRZ
2020-05-06   webTareas 2.0.p8 - Arbitrary File Deletion 9 WEB Besim
2020-05-06   Online Clothing Store 1.0 - 'username' SQL Injection 7 WEB Sushant Kamble
2020-05-06   Booked Scheduler 2.7.7 - Authenticated Directory Traversal 7 WEB Besim
2020-05-06   i-doit Open Source CMDB 1.14.1 - Arbitrary File Deletion 7 WEB Besim
2020-05-06   Online Clothing Store 1.0 - Persistent Cross-Site Scripting 7 WEB Sushant Kamble
2020-05-05   NEC Electra Elite IPK II WebPro 01.03.01 - Session Enumeration 7 WEB Cold z3ro
2020-05-05   SimplePHPGal 0.7 - Remote File Inclusion 6 WEB h4shur
2020-05-05   PhreeBooks ERP 5.2.5 - Remote Command Execution 7 WEB Besim
2020-05-05   BlogEngine 3.3 - 'syndication.axd' XML External Entity Injection 12 WEB Daniel Martinez Adan
2020-05-05   webERP 4.15.1 - Unauthenticated Backup File Access 12 WEB Besim
2020-05-05   Online Scheduling System 1.0 - 'username' SQL Injection 11 WEB Saurav Shukla
2020-05-05   Fishing Reservation System 7.5 - 'uid' SQL Injection 10 WEB Vulnerability-Lab
2020-05-04   addressbook 9.0.0.1 - 'id' SQL Injection 9 WEB David Velazquez
2020-05-04   osTicket 1.14.1 - Persistent Authenticated Cross-Site Scripting 9 WEB Mehmet Kelepçe
2020-05-04   BoltWire 6.03 - Local File Inclusion 14 WEB Andrey Stoykov
2020-05-01   Online Scheduling System 1.0 - Authentication Bypass 12 WEB boku
2020-05-01   Apache OFBiz 17.12.03 - Cross-Site Request Forgery (Account Takeover) 8 WEB Faiz Ahmed Zaidi
2020-05-01   HardDrive 2.1 for iOS - Arbitrary File Upload 8 WEB Vulnerability-Lab
2020-05-01   Super Backup 2.0.5 for iOS - Directory Traversal 9 WEB Vulnerability-Lab
2020-05-01   php-fusion 9.03.50 - Persistent Cross-Site Scripting 12 WEB SunCSR
2020-05-01   Online Scheduling System 1.0 - Persistent Cross-Site Scripting 13 WEB boku
2020-05-01   ChemInv 1.0 - Authenticated Persistent Cross-Site Scripting 14 WEB boku
2020-04-29   hits script 1.0 - 'item_name' SQL Injection 11 WEB SajjadBnd
2020-04-29   Easy Transfer 1.7 for iOS - Directory Traversal 10 WEB Vulnerability-Lab
2020-04-29   School ERP Pro 1.0 - Arbitrary File Read 12 WEB Besim
2020-04-29   Open-AudIT Professional 3.3.1 - Remote Code Execution 12 WEB Askar
2020-04-28   School ERP Pro 1.0 - Remote Code Execution 12 WEB Besim
2020-04-28   School ERP Pro 1.0 - 'es_messagesid' SQL Injection 14 WEB Besim
2020-04-27   Maian Support Helpdesk 4.3 - Cross-Site Request Forgery (Add Admin) 10 WEB Besim
2020-04-27   Online Course Registration 2.0 - Authentication Bypass 13 WEB Daniel Monzón
2020-04-27   Netis E1+ V1.2.32533 - Unauthenticated WiFi Password Leak 11 WEB Besim
2020-04-27   Online shopping system advanced 1.0 - 'p' SQL Injection 9 WEB Majid kalantari
2020-04-27   Netis E1+ 1.2.32533 - Backdoor Account (root) 11 WEB Besim
2020-04-27   PHP-Fusion 9.03.50 - 'Edit Profile' Arbitrary File Upload 13 WEB Besim
2020-04-24   Furukawa Electric ConsciusMAP 2.8.1 - Remote Code Execution 11 WEB LiquidWorm
2020-04-24   Edimax EW-7438RPn 1.13 - Remote Code Execution 13 WEB Besim
2020-04-24   EspoCRM 5.8.5 - Privilege Escalation 14 WEB Besim
2020-04-23   Sky File 2.1.0 iOS - Directory Traversal 12 WEB Vulnerability-Lab
2020-04-23   Library CMS Powerful Book Management System 2.2.0 - Session Fixation 10 WEB Ismail Tasdelen
2020-04-23   Zen Load Balancer 3.10.1 - Directory Traversal (Metasploit) 10 WEB Dhiraj Mishra
2020-04-23   Complaint Management System 4.2 - Cross-Site Request Forgery (Delete User) 7 WEB Besim
2020-04-23   Complaint Management System 4.2 - Authentication Bypass 8 WEB Besim
2020-04-23   Complaint Management System 4.2 - Persistent Cross-Site Scripting 8 WEB Besim
2020-04-23   User Management System 2.0 - Authentication Bypass 12 WEB Besim
2020-04-23   User Management System 2.0 - Persistent Cross-Site Scripting 10 WEB Besim
2020-04-22   Mahara 19.10.2 CMS - Persistent Cross-Site Scripting 10 WEB Vulnerability-Lab
2020-04-22   Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering) 12 WEB Besim
2020-04-22   Edimax EW-7438RPn - Information Disclosure (WiFi Password) 11 WEB Besim
2020-04-21   P5 FNIP-8x16A FNIP-4xSH 1.0.20 - Cross-Site Request Forgery (Add Admin) 10 WEB LiquidWorm
2020-04-21   jizhi CMS 1.6.7 - Arbitrary File Download 14 WEB jizhicms
2020-04-21   NSClient++ 0.5.2.35 - Authenticated Remote Code Execution 11 WEB kindredsec
2020-04-21   IQrouter 3.3.1 Firmware - Remote Code Execution 13 WEB drakylar
2020-04-21   CSZ CMS 1.2.7 - 'title' HTML Injection 15 WEB Metin Yunus Kandemir
2020-04-21   PMB 5.6 - 'logid' SQL Injection 16 WEB 41-trk
2020-04-21   CSZ CMS 1.2.7 - Persistent Cross-Site Scripting 14 WEB Metin Yunus Kandemir
2020-04-20   Fork CMS 5.8.0 - Persistent Cross-Site Scripting 10 WEB Vulnerability-Lab
2020-04-20   Prestashop 1.7.6.4 - Cross-Site Request Forgery 10 WEB Sivanesh Ashok
2020-04-20   Centreon 19.10.5 - 'id' SQL Injection 13 WEB Basim Alabdullah
2020-04-17   TAO Open Source Assessment Platform 3.3.0 RC02 - HTML Injection 14 WEB Vulnerability-Lab
2020-04-17   Playable 9.18 iOS - Persistent Cross-Site Scripting 10 WEB Vulnerability-Lab
2020-04-15   Xeroneit Library Management System 3.0 - 'category' SQL Injection 7 WEB Sohel Yousef
2020-04-15   File Transfer iFamily 2.1 - Directory Traversal 8 WEB Vulnerability-Lab
2020-04-15   DedeCMS 7.5 SP2 - Persistent Cross-Site Scripting 7 WEB Vulnerability Research Laboratory
2020-04-15   Macs Framework 1.14f CMS - Persistent Cross-Site Scripting 8 WEB Vulnerability-Lab
2020-04-15   SeedDMS 5.1.18 - Persistent Cross-Site Scripting 9 WEB Vulnerability-Lab
2020-04-15   Pinger 1.0 - Remote Code Execution 6 WEB Milad karimi
2020-04-15   SuperBackup 2.0.5 for iOS - Persistent Cross-Site Scripting 5 WEB Vulnerability-Lab
2020-04-15   AirDisk Pro 5.5.3 for iOS - Persistent Cross-Site Scripting 6 WEB Vulnerability-Lab
2020-04-14   Oracle WebLogic Server 12.2.1.4.0 - Remote Code Execution 9 WEB nu11secur1ty
2020-04-14   WSO2 3.1.0 - Persistent Cross-Site Scripting 9 WEB Raki Ben Hamouda
2020-04-14   Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution 9 WEB Wadeek
2020-04-13   MOVEit Transfer 11.1.1 - 'token' Unauthenticated SQL Injection 8 WEB Aviv Beniash
2020-04-13   WordPress Plugin Media Library Assistant 2.81 - Local File Inclusion 11 WEB Daniel Monzón
2020-04-13   WSO2 3.1.0 - Arbitrary File Delete 12 WEB Raki Ben Hamouda
2020-04-13   Webtateas 2.0 - Arbitrary File Read 9 WEB China Banking and Insurance Information Technology
2020-04-13   TVT NVMS 1000 - Directory Traversal 9 WEB Mohin Paramasivam
2020-04-13   Huawei HG630 2 Router - Authentication Bypass 8 WEB Eslam Medhat
2020-04-10   Zen Load Balancer 3.10.1 - 'index.cgi' Directory Traversal 10 WEB Basim Alabdullah
2020-04-10   WordPress Plugin Helpful 2.4.11 - SQL Injection 10 WEB numan türle
2020-04-08   Django 3.0 - Cross-Site Request Forgery Token Bypass 16 WEB Spad Security Group
2020-04-06   pfSense 2.4.4-P3 - 'User Manager' Persistent Cross-Site Scripting 14 WEB Matthew Aberegg
2020-04-06   LimeSurvey 4.1.11 - 'File Manager' Path Traversal 9 WEB Matthew Aberegg
2020-04-06   Bolt CMS 3.7.0 - Authenticated Remote Code Execution 8 WEB r3m0t3nu11
2020-04-06   WhatsApp Desktop 0.3.9308 - Persistent Cross-Site Scripting 8 WEB Gal Weizman
2020-04-06   Vesta Control Panel 0.9.8-26 - Authenticated Remote Code Execution (Metasploit) 8 WEB Mehmet Ince
2020-04-06   LimeSurvey 4.1.11 - 'Survey Groups' Persistent Cross-Site Scripting 12 WEB Matthew Aberegg
2020-04-03   Pandora FMS 7.0NG - 'net_tools.php' Remote Code Execution 9 WEB Basim Alabdullah
2020-04-02   PHP-Fusion 9.03.50 - 'panels.php' Remote Code Execution 10 WEB Unkn0wn
2020-03-31   Grandstream UCM6200 Series WebSocket 1.0.20.20 - 'user_password' SQL Injection 12 WEB Jacob Baines
2020-03-31   Grandstream UCM6200 Series CTI Interface - 'user_password' SQL Injection 13 WEB Jacob Baines
2020-03-30   Zen Load Balancer 3.10.1 - Remote Code Execution 9 WEB Cody Sixteen
2020-03-30   Joomla! com_fabrik 3.9.11 - Directory Traversal 11 WEB qw3rTyTy
2020-03-27   rConfig 3.9.4 - 'searchField' Unauthenticated Root Remote Code Execution 12 WEB vikingfr
2020-03-27   Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal 13 WEB hongphukt
2020-03-27   ECK Hotel 1.0 - Cross-Site Request Forgery (Add Admin) 12 WEB Mustafa Emre Gül
2020-03-26   Centreo 19.10.8 - 'DisplayServiceStatus' Remote Code Execution 12 WEB Engin Demirbilek
2020-03-25   LeptonCMS 4.5.0 - Persistent Cross-Site Scripting 14 WEB SunCSR
2020-03-25   Joomla! Component GMapFP 3.30 - Arbitrary File Upload 12 WEB ThelastVvV
2020-03-24   UCM6202 1.0.18.13 - Remote Command Injection 9 WEB Jacob Baines
2020-03-24   WordPress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting 11 WEB Jinson Varghese Behanan
2020-03-24   UliCMS 2020.1 - Persistent Cross-Site Scripting 12 WEB SunCSR
2020-03-23   Joomla! com_hdwplayer 4.2 - 'search.php' SQL Injection 13 WEB qw3rTyTy
2020-03-23   rConfig 3.9.4 - 'search.crud.php' Remote Command Injection 10 WEB Matthew Aberegg
2020-03-23   FIBARO System Home Center 5.021 - Remote File Include 11 WEB LiquidWorm
2020-03-23   Wordpress Plugin PicUploader 1.0 - Remote File Upload 17 WEB Milad karimi
2020-03-20   Exagate Sysguard 6001 - Cross-Site Request Forgery (Add Admin) 11 WEB Metin Yunus Kandemir