Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2020-05-11   CuteNews 2.1.2 - Arbitrary File Deletion 37 WEB Besim
2020-05-11   Sentrifugo CMS 3.2 - Persistent Cross-Site Scripting 37 WEB Vulnerability-Lab
2020-05-11   Kartris 1.6 - Arbitrary File Upload 36 WEB Nhat Ha
2020-05-11   Online AgroCulture Farm Management System 1.0 - 'uname' SQL Injection 36 WEB Tarun Sehgal
2020-05-10   Pi-hole < 4.4 - Authenticated Remote Code Execution / Privileges Escalation 40 WEB Nick Frichette
2020-05-10   Pi-hole < 4.4 - Authenticated Remote Code Execution 38 WEB Nick Frichette
2020-05-07   Online AgroCulture Farm Management System 1.0 - 'pid' SQL Injection 39 WEB BKpatron
2020-05-07   Pisay Online E-Learning System 1.0 - Remote Code Execution 35 WEB boku
2020-05-07   Online Clothing Store 1.0 - Arbitrary File Upload 44 WEB Sushant Kamble
2020-05-07   School File Management System 1.0 - 'username' SQL Injection 44 WEB Tarun Sehgal
2020-05-07   Draytek VigorAP 1000C - Persistent Cross-Site Scripting 41 WEB Vulnerability-Lab
2020-05-07   Car Park Management System 1.0 - Authentication Bypass 35 WEB Tarun Sehgal
2020-05-06   MPC Sharj 3.11.1 - Arbitrary File Download 36 WEB SajjadBnd
2020-05-06   YesWiki cercopitheque 2020.04.18.1 - 'id' SQL Injection 40 WEB coiffeur
2020-05-06   GitLab 12.9.0 - Arbitrary File Read 33 WEB KouroshRZ
2020-05-06   webTareas 2.0.p8 - Arbitrary File Deletion 35 WEB Besim
2020-05-06   Online Clothing Store 1.0 - 'username' SQL Injection 38 WEB Sushant Kamble
2020-05-06   Booked Scheduler 2.7.7 - Authenticated Directory Traversal 34 WEB Besim
2020-05-06   i-doit Open Source CMDB 1.14.1 - Arbitrary File Deletion 34 WEB Besim
2020-05-06   Online Clothing Store 1.0 - Persistent Cross-Site Scripting 39 WEB Sushant Kamble
2020-05-05   NEC Electra Elite IPK II WebPro 01.03.01 - Session Enumeration 31 WEB Cold z3ro
2020-05-05   SimplePHPGal 0.7 - Remote File Inclusion 32 WEB h4shur
2020-05-05   PhreeBooks ERP 5.2.5 - Remote Command Execution 28 WEB Besim
2020-05-05   BlogEngine 3.3 - 'syndication.axd' XML External Entity Injection 39 WEB Daniel Martinez Adan
2020-05-05   webERP 4.15.1 - Unauthenticated Backup File Access 37 WEB Besim
2020-05-05   Online Scheduling System 1.0 - 'username' SQL Injection 34 WEB Saurav Shukla
2020-05-05   Fishing Reservation System 7.5 - 'uid' SQL Injection 35 WEB Vulnerability-Lab
2020-05-04   addressbook 9.0.0.1 - 'id' SQL Injection 35 WEB David Velazquez
2020-05-04   osTicket 1.14.1 - Persistent Authenticated Cross-Site Scripting 35 WEB Mehmet Kelepçe
2020-05-04   BoltWire 6.03 - Local File Inclusion 44 WEB Andrey Stoykov
2020-05-01   Online Scheduling System 1.0 - Authentication Bypass 40 WEB boku
2020-05-01   Apache OFBiz 17.12.03 - Cross-Site Request Forgery (Account Takeover) 36 WEB Faiz Ahmed Zaidi
2020-05-01   HardDrive 2.1 for iOS - Arbitrary File Upload 34 WEB Vulnerability-Lab
2020-05-01   Super Backup 2.0.5 for iOS - Directory Traversal 37 WEB Vulnerability-Lab
2020-05-01   php-fusion 9.03.50 - Persistent Cross-Site Scripting 38 WEB SunCSR
2020-05-01   Online Scheduling System 1.0 - Persistent Cross-Site Scripting 37 WEB boku
2020-05-01   ChemInv 1.0 - Authenticated Persistent Cross-Site Scripting 40 WEB boku
2020-04-29   hits script 1.0 - 'item_name' SQL Injection 34 WEB SajjadBnd
2020-04-29   Easy Transfer 1.7 for iOS - Directory Traversal 33 WEB Vulnerability-Lab
2020-04-29   School ERP Pro 1.0 - Arbitrary File Read 39 WEB Besim
2020-04-29   Open-AudIT Professional 3.3.1 - Remote Code Execution 37 WEB Askar
2020-04-28   School ERP Pro 1.0 - Remote Code Execution 38 WEB Besim
2020-04-28   School ERP Pro 1.0 - 'es_messagesid' SQL Injection 42 WEB Besim
2020-04-27   Maian Support Helpdesk 4.3 - Cross-Site Request Forgery (Add Admin) 34 WEB Besim
2020-04-27   Online Course Registration 2.0 - Authentication Bypass 39 WEB Daniel Monzón
2020-04-27   Netis E1+ V1.2.32533 - Unauthenticated WiFi Password Leak 38 WEB Besim
2020-04-27   Online shopping system advanced 1.0 - 'p' SQL Injection 34 WEB Majid kalantari
2020-04-27   Netis E1+ 1.2.32533 - Backdoor Account (root) 43 WEB Besim
2020-04-27   PHP-Fusion 9.03.50 - 'Edit Profile' Arbitrary File Upload 42 WEB Besim
2020-04-24   Furukawa Electric ConsciusMAP 2.8.1 - Remote Code Execution 35 WEB LiquidWorm
2020-04-24   Edimax EW-7438RPn 1.13 - Remote Code Execution 40 WEB Besim
2020-04-24   EspoCRM 5.8.5 - Privilege Escalation 42 WEB Besim
2020-04-23   Sky File 2.1.0 iOS - Directory Traversal 37 WEB Vulnerability-Lab
2020-04-23   Library CMS Powerful Book Management System 2.2.0 - Session Fixation 31 WEB Ismail Tasdelen
2020-04-23   Zen Load Balancer 3.10.1 - Directory Traversal (Metasploit) 35 WEB Dhiraj Mishra
2020-04-23   Complaint Management System 4.2 - Cross-Site Request Forgery (Delete User) 32 WEB Besim
2020-04-23   Complaint Management System 4.2 - Authentication Bypass 38 WEB Besim
2020-04-23   Complaint Management System 4.2 - Persistent Cross-Site Scripting 31 WEB Besim
2020-04-23   User Management System 2.0 - Authentication Bypass 34 WEB Besim
2020-04-23   User Management System 2.0 - Persistent Cross-Site Scripting 35 WEB Besim
2020-04-22   Mahara 19.10.2 CMS - Persistent Cross-Site Scripting 36 WEB Vulnerability-Lab
2020-04-22   Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering) 41 WEB Besim
2020-04-22   Edimax EW-7438RPn - Information Disclosure (WiFi Password) 34 WEB Besim
2020-04-21   P5 FNIP-8x16A FNIP-4xSH 1.0.20 - Cross-Site Request Forgery (Add Admin) 36 WEB LiquidWorm
2020-04-21   jizhi CMS 1.6.7 - Arbitrary File Download 41 WEB jizhicms
2020-04-21   NSClient++ 0.5.2.35 - Authenticated Remote Code Execution 36 WEB kindredsec
2020-04-21   IQrouter 3.3.1 Firmware - Remote Code Execution 50 WEB drakylar
2020-04-21   CSZ CMS 1.2.7 - 'title' HTML Injection 50 WEB Metin Yunus Kandemir
2020-04-21   PMB 5.6 - 'logid' SQL Injection 49 WEB 41-trk
2020-04-21   CSZ CMS 1.2.7 - Persistent Cross-Site Scripting 43 WEB Metin Yunus Kandemir
2020-04-20   Fork CMS 5.8.0 - Persistent Cross-Site Scripting 34 WEB Vulnerability-Lab
2020-04-20   Prestashop 1.7.6.4 - Cross-Site Request Forgery 38 WEB Sivanesh Ashok
2020-04-20   Centreon 19.10.5 - 'id' SQL Injection 39 WEB Basim Alabdullah
2020-04-17   TAO Open Source Assessment Platform 3.3.0 RC02 - HTML Injection 40 WEB Vulnerability-Lab
2020-04-17   Playable 9.18 iOS - Persistent Cross-Site Scripting 35 WEB Vulnerability-Lab
2020-04-15   Xeroneit Library Management System 3.0 - 'category' SQL Injection 32 WEB Sohel Yousef
2020-04-15   File Transfer iFamily 2.1 - Directory Traversal 37 WEB Vulnerability-Lab
2020-04-15   DedeCMS 7.5 SP2 - Persistent Cross-Site Scripting 33 WEB Vulnerability Research Laboratory
2020-04-15   Macs Framework 1.14f CMS - Persistent Cross-Site Scripting 33 WEB Vulnerability-Lab
2020-04-15   SeedDMS 5.1.18 - Persistent Cross-Site Scripting 34 WEB Vulnerability-Lab
2020-04-15   Pinger 1.0 - Remote Code Execution 35 WEB Milad karimi
2020-04-15   SuperBackup 2.0.5 for iOS - Persistent Cross-Site Scripting 31 WEB Vulnerability-Lab
2020-04-15   AirDisk Pro 5.5.3 for iOS - Persistent Cross-Site Scripting 34 WEB Vulnerability-Lab
2020-04-14   Oracle WebLogic Server 12.2.1.4.0 - Remote Code Execution 36 WEB nu11secur1ty
2020-04-14   WSO2 3.1.0 - Persistent Cross-Site Scripting 38 WEB Raki Ben Hamouda
2020-04-14   Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution 35 WEB Wadeek
2020-04-13   MOVEit Transfer 11.1.1 - 'token' Unauthenticated SQL Injection 36 WEB Aviv Beniash
2020-04-13   WordPress Plugin Media Library Assistant 2.81 - Local File Inclusion 36 WEB Daniel Monzón
2020-04-13   WSO2 3.1.0 - Arbitrary File Delete 36 WEB Raki Ben Hamouda
2020-04-13   Webtateas 2.0 - Arbitrary File Read 33 WEB China Banking and Insurance Information Technology
2020-04-13   TVT NVMS 1000 - Directory Traversal 32 WEB Mohin Paramasivam
2020-04-13   Huawei HG630 2 Router - Authentication Bypass 36 WEB Eslam Medhat
2020-04-10   Zen Load Balancer 3.10.1 - 'index.cgi' Directory Traversal 36 WEB Basim Alabdullah
2020-04-10   WordPress Plugin Helpful 2.4.11 - SQL Injection 36 WEB numan türle
2020-04-08   Django 3.0 - Cross-Site Request Forgery Token Bypass 42 WEB Spad Security Group
2020-04-06   pfSense 2.4.4-P3 - 'User Manager' Persistent Cross-Site Scripting 40 WEB Matthew Aberegg
2020-04-06   LimeSurvey 4.1.11 - 'File Manager' Path Traversal 38 WEB Matthew Aberegg
2020-04-06   Bolt CMS 3.7.0 - Authenticated Remote Code Execution 32 WEB r3m0t3nu11
2020-04-06   WhatsApp Desktop 0.3.9308 - Persistent Cross-Site Scripting 39 WEB Gal Weizman
2020-04-06   Vesta Control Panel 0.9.8-26 - Authenticated Remote Code Execution (Metasploit) 39 WEB Mehmet Ince
2020-04-06   LimeSurvey 4.1.11 - 'Survey Groups' Persistent Cross-Site Scripting 41 WEB Matthew Aberegg
2020-04-03   Pandora FMS 7.0NG - 'net_tools.php' Remote Code Execution 36 WEB Basim Alabdullah
2020-04-02   PHP-Fusion 9.03.50 - 'panels.php' Remote Code Execution 36 WEB Unkn0wn
2020-03-31   Grandstream UCM6200 Series WebSocket 1.0.20.20 - 'user_password' SQL Injection 39 WEB Jacob Baines
2020-03-31   Grandstream UCM6200 Series CTI Interface - 'user_password' SQL Injection 43 WEB Jacob Baines
2020-03-30   Zen Load Balancer 3.10.1 - Remote Code Execution 38 WEB Cody Sixteen
2020-03-30   Joomla! com_fabrik 3.9.11 - Directory Traversal 37 WEB qw3rTyTy
2020-03-27   rConfig 3.9.4 - 'searchField' Unauthenticated Root Remote Code Execution 38 WEB vikingfr
2020-03-27   Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal 39 WEB hongphukt
2020-03-27   ECK Hotel 1.0 - Cross-Site Request Forgery (Add Admin) 41 WEB Mustafa Emre Gül
2020-03-26   Centreo 19.10.8 - 'DisplayServiceStatus' Remote Code Execution 35 WEB Engin Demirbilek
2020-03-25   LeptonCMS 4.5.0 - Persistent Cross-Site Scripting 37 WEB SunCSR
2020-03-25   Joomla! Component GMapFP 3.30 - Arbitrary File Upload 44 WEB ThelastVvV
2020-03-24   UCM6202 1.0.18.13 - Remote Command Injection 33 WEB Jacob Baines
2020-03-24   WordPress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting 38 WEB Jinson Varghese Behanan
2020-03-24   UliCMS 2020.1 - Persistent Cross-Site Scripting 39 WEB SunCSR
2020-03-23   Joomla! com_hdwplayer 4.2 - 'search.php' SQL Injection 38 WEB qw3rTyTy
2020-03-23   rConfig 3.9.4 - 'search.crud.php' Remote Command Injection 38 WEB Matthew Aberegg
2020-03-23   FIBARO System Home Center 5.021 - Remote File Include 40 WEB LiquidWorm
2020-03-23   Wordpress Plugin PicUploader 1.0 - Remote File Upload 49 WEB Milad karimi
2020-03-20   Exagate Sysguard 6001 - Cross-Site Request Forgery (Add Admin) 38 WEB Metin Yunus Kandemir
2020-03-18   Joomla! Component ACYMAILING 3.9.0 - Unauthenticated Arbitrary File Upload 45 WEB qw3rTyTy
2020-03-18   Netlink GPON Router 1.0.11 - Remote Code Execution 43 WEB shellord
2020-03-17   UADMIN Botnet 1.0 - 'link' SQL Injection 39 WEB n4pst3r
2020-03-16   PHPKB Multi-Language 9 - 'image-upload.php' Authenticated Remote Code Execution 36 WEB Antonio Cannito