Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2020-04-27   Online Course Registration 2.0 - Authentication Bypass 31 WEB Daniel Monzón
2020-04-27   Netis E1+ V1.2.32533 - Unauthenticated WiFi Password Leak 30 WEB Besim
2020-04-27   Online shopping system advanced 1.0 - 'p' SQL Injection 25 WEB Majid kalantari
2020-04-27   Netis E1+ 1.2.32533 - Backdoor Account (root) 33 WEB Besim
2020-04-27   PHP-Fusion 9.03.50 - 'Edit Profile' Arbitrary File Upload 34 WEB Besim
2020-04-24   Furukawa Electric ConsciusMAP 2.8.1 - Remote Code Execution 26 WEB LiquidWorm
2020-04-24   Edimax EW-7438RPn 1.13 - Remote Code Execution 32 WEB Besim
2020-04-24   EspoCRM 5.8.5 - Privilege Escalation 34 WEB Besim
2020-04-23   Sky File 2.1.0 iOS - Directory Traversal 28 WEB Vulnerability-Lab
2020-04-23   Library CMS Powerful Book Management System 2.2.0 - Session Fixation 23 WEB Ismail Tasdelen
2020-04-23   Zen Load Balancer 3.10.1 - Directory Traversal (Metasploit) 26 WEB Dhiraj Mishra
2020-04-23   Complaint Management System 4.2 - Cross-Site Request Forgery (Delete User) 23 WEB Besim
2020-04-23   Complaint Management System 4.2 - Authentication Bypass 29 WEB Besim
2020-04-23   Complaint Management System 4.2 - Persistent Cross-Site Scripting 23 WEB Besim
2020-04-23   User Management System 2.0 - Authentication Bypass 26 WEB Besim
2020-04-23   User Management System 2.0 - Persistent Cross-Site Scripting 27 WEB Besim
2020-04-22   Mahara 19.10.2 CMS - Persistent Cross-Site Scripting 27 WEB Vulnerability-Lab
2020-04-22   Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering) 33 WEB Besim
2020-04-22   Edimax EW-7438RPn - Information Disclosure (WiFi Password) 26 WEB Besim
2020-04-21   P5 FNIP-8x16A FNIP-4xSH 1.0.20 - Cross-Site Request Forgery (Add Admin) 26 WEB LiquidWorm
2020-04-21   jizhi CMS 1.6.7 - Arbitrary File Download 33 WEB jizhicms
2020-04-21   NSClient++ 0.5.2.35 - Authenticated Remote Code Execution 28 WEB kindredsec
2020-04-21   IQrouter 3.3.1 Firmware - Remote Code Execution 40 WEB drakylar
2020-04-21   CSZ CMS 1.2.7 - 'title' HTML Injection 39 WEB Metin Yunus Kandemir
2020-04-21   PMB 5.6 - 'logid' SQL Injection 41 WEB 41-trk
2020-04-21   CSZ CMS 1.2.7 - Persistent Cross-Site Scripting 32 WEB Metin Yunus Kandemir
2020-04-20   Fork CMS 5.8.0 - Persistent Cross-Site Scripting 25 WEB Vulnerability-Lab
2020-04-20   Prestashop 1.7.6.4 - Cross-Site Request Forgery 29 WEB Sivanesh Ashok
2020-04-20   Centreon 19.10.5 - 'id' SQL Injection 30 WEB Basim Alabdullah
2020-04-17   TAO Open Source Assessment Platform 3.3.0 RC02 - HTML Injection 30 WEB Vulnerability-Lab
2020-04-17   Playable 9.18 iOS - Persistent Cross-Site Scripting 24 WEB Vulnerability-Lab
2020-04-15   Xeroneit Library Management System 3.0 - 'category' SQL Injection 22 WEB Sohel Yousef
2020-04-15   File Transfer iFamily 2.1 - Directory Traversal 26 WEB Vulnerability-Lab
2020-04-15   DedeCMS 7.5 SP2 - Persistent Cross-Site Scripting 26 WEB Vulnerability Research Laboratory
2020-04-15   Macs Framework 1.14f CMS - Persistent Cross-Site Scripting 26 WEB Vulnerability-Lab
2020-04-15   SeedDMS 5.1.18 - Persistent Cross-Site Scripting 24 WEB Vulnerability-Lab
2020-04-15   Pinger 1.0 - Remote Code Execution 25 WEB Milad karimi
2020-04-15   SuperBackup 2.0.5 for iOS - Persistent Cross-Site Scripting 22 WEB Vulnerability-Lab
2020-04-15   AirDisk Pro 5.5.3 for iOS - Persistent Cross-Site Scripting 26 WEB Vulnerability-Lab
2020-04-14   Oracle WebLogic Server 12.2.1.4.0 - Remote Code Execution 29 WEB nu11secur1ty
2020-04-14   WSO2 3.1.0 - Persistent Cross-Site Scripting 30 WEB Raki Ben Hamouda
2020-04-14   Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution 27 WEB Wadeek
2020-04-13   MOVEit Transfer 11.1.1 - 'token' Unauthenticated SQL Injection 29 WEB Aviv Beniash
2020-04-13   WordPress Plugin Media Library Assistant 2.81 - Local File Inclusion 27 WEB Daniel Monzón
2020-04-13   WSO2 3.1.0 - Arbitrary File Delete 27 WEB Raki Ben Hamouda
2020-04-13   Webtateas 2.0 - Arbitrary File Read 25 WEB China Banking and Insurance Information Technology
2020-04-13   TVT NVMS 1000 - Directory Traversal 24 WEB Mohin Paramasivam
2020-04-13   Huawei HG630 2 Router - Authentication Bypass 26 WEB Eslam Medhat
2020-04-10   Zen Load Balancer 3.10.1 - 'index.cgi' Directory Traversal 27 WEB Basim Alabdullah
2020-04-10   WordPress Plugin Helpful 2.4.11 - SQL Injection 25 WEB numan türle
2020-04-08   Django 3.0 - Cross-Site Request Forgery Token Bypass 32 WEB Spad Security Group
2020-04-06   pfSense 2.4.4-P3 - 'User Manager' Persistent Cross-Site Scripting 33 WEB Matthew Aberegg
2020-04-06   LimeSurvey 4.1.11 - 'File Manager' Path Traversal 28 WEB Matthew Aberegg
2020-04-06   Bolt CMS 3.7.0 - Authenticated Remote Code Execution 22 WEB r3m0t3nu11
2020-04-06   WhatsApp Desktop 0.3.9308 - Persistent Cross-Site Scripting 29 WEB Gal Weizman
2020-04-06   Vesta Control Panel 0.9.8-26 - Authenticated Remote Code Execution (Metasploit) 27 WEB Mehmet Ince
2020-04-06   LimeSurvey 4.1.11 - 'Survey Groups' Persistent Cross-Site Scripting 31 WEB Matthew Aberegg
2020-04-03   Pandora FMS 7.0NG - 'net_tools.php' Remote Code Execution 26 WEB Basim Alabdullah
2020-04-02   PHP-Fusion 9.03.50 - 'panels.php' Remote Code Execution 26 WEB Unkn0wn
2020-03-31   Grandstream UCM6200 Series WebSocket 1.0.20.20 - 'user_password' SQL Injection 28 WEB Jacob Baines
2020-03-31   Grandstream UCM6200 Series CTI Interface - 'user_password' SQL Injection 33 WEB Jacob Baines
2020-03-30   Zen Load Balancer 3.10.1 - Remote Code Execution 28 WEB Cody Sixteen
2020-03-30   Joomla! com_fabrik 3.9.11 - Directory Traversal 28 WEB qw3rTyTy
2020-03-27   rConfig 3.9.4 - 'searchField' Unauthenticated Root Remote Code Execution 28 WEB vikingfr
2020-03-27   Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal 28 WEB hongphukt
2020-03-27   ECK Hotel 1.0 - Cross-Site Request Forgery (Add Admin) 30 WEB Mustafa Emre Gül
2020-03-26   Centreo 19.10.8 - 'DisplayServiceStatus' Remote Code Execution 26 WEB Engin Demirbilek
2020-03-25   LeptonCMS 4.5.0 - Persistent Cross-Site Scripting 28 WEB SunCSR
2020-03-25   Joomla! Component GMapFP 3.30 - Arbitrary File Upload 34 WEB ThelastVvV
2020-03-24   UCM6202 1.0.18.13 - Remote Command Injection 25 WEB Jacob Baines
2020-03-24   WordPress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting 28 WEB Jinson Varghese Behanan
2020-03-24   UliCMS 2020.1 - Persistent Cross-Site Scripting 31 WEB SunCSR
2020-03-23   Joomla! com_hdwplayer 4.2 - 'search.php' SQL Injection 28 WEB qw3rTyTy
2020-03-23   rConfig 3.9.4 - 'search.crud.php' Remote Command Injection 27 WEB Matthew Aberegg
2020-03-23   FIBARO System Home Center 5.021 - Remote File Include 30 WEB LiquidWorm
2020-03-23   Wordpress Plugin PicUploader 1.0 - Remote File Upload 38 WEB Milad karimi
2020-03-20   Exagate Sysguard 6001 - Cross-Site Request Forgery (Add Admin) 29 WEB Metin Yunus Kandemir
2020-03-18   Joomla! Component ACYMAILING 3.9.0 - Unauthenticated Arbitrary File Upload 32 WEB qw3rTyTy
2020-03-18   Netlink GPON Router 1.0.11 - Remote Code Execution 27 WEB shellord
2020-03-17   UADMIN Botnet 1.0 - 'link' SQL Injection 31 WEB n4pst3r
2020-03-16   PHPKB Multi-Language 9 - 'image-upload.php' Authenticated Remote Code Execution 26 WEB Antonio Cannito
2020-03-16   PHPKB Multi-Language 9 - Authenticated Directory Traversal 27 WEB Antonio Cannito
2020-03-16   PHPKB Multi-Language 9 - Authenticated Remote Code Execution 29 WEB Antonio Cannito
2020-03-16   MiladWorkShop VIP System 1.0 - 'lang' SQL Injection 27 WEB AYADI Mohamed
2020-03-16   Enhanced Multimedia Router 3.0.4.27 - Cross-Site Request Forgery (Add Admin) 32 WEB Miguel Mendez Z
2020-03-10   Horde Groupware Webmail Edition 5.2.22 - Remote Code Execution 30 WEB Andrea Cardaci
2020-03-13   WordPress Plugin Custom Searchable Data System - Unauthenticated Data M]odification 29 WEB Nawaf Alkeraithe
2020-03-13   Centos WebPanel 7 - 'term' SQL Injection 30 WEB Berke YILMAZ
2020-03-11   Horde Groupware Webmail Edition 5.2.22 - PHAR Loading 26 WEB Andrea Cardaci
2020-03-11   Horde Groupware Webmail Edition 5.2.22 - PHP File Inclusion 27 WEB Andrea Cardaci
2020-03-12   rConfig 3.9 - 'searchColumn' SQL Injection 26 WEB vikingfr
2020-03-12   rConfig 3.93 - 'ajaxAddTemplate.php' Authenticated Remote Code Execution 27 WEB Engin Demirbilek
2020-03-12   HRSALE 1.1.8 - Cross-Site Request Forgery (Add Admin) 25 WEB Ismail Akıcı
2020-03-12   WordPress Plugin Appointment Booking Calendar 1.3.34 - CSV Injection 30 WEB Daniel Monzón
2020-03-12   WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure 25 WEB RedTeam Pentesting GmbH
2020-03-12   Joomla! Component com_newsfeeds 1.0 - 'feedid' SQL Injection 28 WEB Milad karimi
2020-03-11   TeamCity Agent XML-RPC 10.0 - Remote Code Execution 24 WEB 1F98D
2020-03-11   Wing FTP Server - Authenticated CSRF (Delete Admin) 25 WEB Dhiraj Mishra
2020-03-11   PlaySMS 1.4.3 - Template Injection / Remote Code Execution 26 WEB Touhid M.Shaikh
2020-03-11   Joomla! 3.9.0 < 3.9.7 - CSV Injection 21 WEB i4bdullah
2020-03-11   WordPress Plugin Search Meter 2.13.2 - CSV injection 32 WEB Daniel Monzón
2020-03-10   Persian VIP Download Script 1.0 - 'active' SQL Injection 26 WEB Amir Hossein Vafifar
2020-03-10   YzmCMS 5.5 - 'url' Persistent Cross-Site Scripting 25 WEB En_dust
2020-03-10   Sysaid 20.1.11 b26 - Remote Command Execution 26 WEB Ahmed Sherif
2020-03-09   Sentrifugo HRMS 3.2 - 'id' SQL Injection 28 WEB minhnb
2020-03-09   60CycleCMS - 'news.php' SQL Injection 21 WEB Unkn0wn
2019-12-12   ManageEngine Desktop Central - 'FileStorage getChartImage' Deserialization / Unauthenticated Remote 28 WEB mr_me
2020-03-04   UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read 30 WEB NgoAnhDuc
2020-03-03   RICOH Aficio SP 5210SF Printer - 'entryNameIn' HTML Injection 27 WEB Olga Villagran
2020-03-03   GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection 23 WEB emaragkos
2020-03-03   Alfresco 5.2.4 - Persistent Cross-Site Scripting 30 WEB Alexandre ZANNI
2020-03-03   RICOH Aficio SP 5200S Printer - 'entryNameIn' HTML Injection 29 WEB Paulina Girón
2020-03-02   Cacti v1.2.8 - Unauthenticated Remote Code Execution (Metasploit) 25 WEB Lucas Amorim
2020-03-02   Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass (Config Upload) 31 WEB Elber Tavares
2020-03-02   TP LINK TL-WR849N - Remote Code Execution 29 WEB Elber Tavares
2020-03-02   Wing FTP Server 6.2.5 - Privilege Escalation 28 WEB Cary Hooper
2020-03-02   TL-WR849N 0.9.1 4.16 - Authentication Bypass (Upload Firmware) 27 WEB Elber Tavares
2020-03-02   WordPress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery (Add User) 32 WEB Jinson Varghese Behanan
2020-03-02   Netis WF2419 2.2.36123 - Remote Code Execution 30 WEB Elias Issa
2020-03-02   Joplin Desktop 1.0.184 - Cross-Site Scripting 24 WEB Javier Olmedo
2020-02-28   qdPM < 9.1 - Remote Code Execution 29 WEB Tobin Shields
2020-02-03   Cacti 1.2.8 - Unauthenticated Remote Code Execution 25 WEB Askar
2020-02-03   Cacti 1.2.8 - Authenticated Remote Code Execution 21 WEB Askar
2020-02-20   Apache Tomcat - AJP 'Ghostcat File Read/Inclusion 24 WEB YDHCUI
2020-02-27   Comtrend VR-3033 - Command Injection 26 WEB Raki Ben Hamouda