Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2020-05-19   qdPM 9.1 - 'cfg[app_app_name]' Persistent Cross-Site Scripting 34 WEB Kishan Lal Choudhary
2020-05-19   Victor CMS 1.0 - 'cat_id' SQL Injection 38 WEB Kishan Lal Choudhary
2020-05-19   Victor CMS 1.0 - 'comment_author' Persistent Cross-Site Scripting 43 WEB Kishan Lal Choudhary
2020-05-18   Online Healthcare management system 1.0 - Authentication Bypass 42 WEB BKpatron
2020-05-18   Online Healthcare Patient Record Management System 1.0 - Authentication Bypass 63 WEB Daniel Monzón
2020-05-18   online Chatting System 1.0 - 'id' SQL Injection 37 WEB BKpatron
2020-05-18   Monstra CMS 3.0.4 - Authenticated Arbitrary File Upload 37 WEB Kishan Lal Choudhary
2020-05-18   forma.lms The E-Learning Suite 2.3.0.2 - Persistent Cross-Site Scripting 37 WEB Daniel Ortiz
2020-05-18   Oracle Hospitality RES 3700 5.7 - Remote Code Execution 39 WEB Walid Faour
2020-05-18   Online Examination System 1.0 - 'eid' SQL Injection 38 WEB BKpatron
2020-05-18   WordPress Plugin Ajax Load More 5.3.1 - '#1' Authenticated SQL Injection 37 WEB Nguyen Khang
2020-05-18   Mikrotik Router Monitoring System 1.2.3 - 'community' SQL Injection 37 WEB jul10l1r4
2020-05-15   ManageEngine Service Desk 10.0 - Cross-Site Scripting 39 WEB Felipe Molina
2020-05-15   vBulletin 5.6.1 - 'nodeId' SQL Injection 37 WEB Photubias
2020-05-14   E-Commerce System 1.0 - Unauthenticated Remote Code Execution 43 WEB SunCSR
2020-05-14   Netlink XPON 1GE WiFi V2801RGW - Remote Command Execution 35 WEB Seecko Das
2020-05-14   Complaint Management System 1.0 - 'username' SQL Injection 44 WEB Daniel Ortiz
2020-05-13   Sellacious eCommerce 4.6 - Persistent Cross-Site Scripting 44 WEB Vulnerability-Lab
2020-05-13   Tryton 5.4 - Persistent Cross-Site Scripting 37 WEB Vulnerability-Lab
2020-05-12   TylerTech Eagle 2018.3.11 - Remote Code Execution 37 WEB Anthony Cole
2020-05-12   qdPM 9.1 - Arbitrary File Upload 39 WEB Besim
2020-05-12   Cisco Digital Network Architecture Center 1.3.1.4 - Persistent Cross-Site Scripting 35 WEB Dylan Garnaud
2020-05-12   CuteNews 2.1.2 - Authenticated Arbitrary File Upload 39 WEB Nhat Ha
2020-05-12   WordPress Plugin ChopSlider 3.4 - 'id' SQL Injection 38 WEB SunCSR
2020-05-12   Orchard Core RC1 - Persistent Cross-Site Scripting 33 WEB SunCSR
2014-12-23   Phase Botnet - Blind SQL Injection 34 WEB MalwareTech
2020-05-11   LibreNMS 1.46 - 'search' SQL Injection 36 WEB Punt
2020-05-11   Complaint Management System 1.0 - Authentication Bypass 47 WEB BKpatron
2020-05-11   Victor CMS 1.0 - 'post' SQL Injection 35 WEB BKpatron
2020-05-11   OpenZ ERP 3.6.60 - Persistent Cross-Site Scripting 48 WEB Vulnerability-Lab
2020-05-11   WordPress Plugin Simple File List 4.2.2 - Remote Code Execution 46 WEB coiffeur
2020-05-11   CuteNews 2.1.2 - Arbitrary File Deletion 39 WEB Besim
2020-05-11   Sentrifugo CMS 3.2 - Persistent Cross-Site Scripting 40 WEB Vulnerability-Lab
2020-05-11   Kartris 1.6 - Arbitrary File Upload 37 WEB Nhat Ha
2020-05-11   Online AgroCulture Farm Management System 1.0 - 'uname' SQL Injection 39 WEB Tarun Sehgal
2020-05-10   Pi-hole < 4.4 - Authenticated Remote Code Execution / Privileges Escalation 46 WEB Nick Frichette
2020-05-10   Pi-hole < 4.4 - Authenticated Remote Code Execution 45 WEB Nick Frichette
2020-05-07   Online AgroCulture Farm Management System 1.0 - 'pid' SQL Injection 43 WEB BKpatron
2020-05-07   Pisay Online E-Learning System 1.0 - Remote Code Execution 39 WEB boku
2020-05-07   Online Clothing Store 1.0 - Arbitrary File Upload 48 WEB Sushant Kamble
2020-05-07   School File Management System 1.0 - 'username' SQL Injection 48 WEB Tarun Sehgal
2020-05-07   Draytek VigorAP 1000C - Persistent Cross-Site Scripting 44 WEB Vulnerability-Lab
2020-05-07   Car Park Management System 1.0 - Authentication Bypass 39 WEB Tarun Sehgal
2020-05-06   MPC Sharj 3.11.1 - Arbitrary File Download 41 WEB SajjadBnd
2020-05-06   YesWiki cercopitheque 2020.04.18.1 - 'id' SQL Injection 44 WEB coiffeur
2020-05-06   GitLab 12.9.0 - Arbitrary File Read 36 WEB KouroshRZ
2020-05-06   webTareas 2.0.p8 - Arbitrary File Deletion 37 WEB Besim
2020-05-06   Online Clothing Store 1.0 - 'username' SQL Injection 40 WEB Sushant Kamble
2020-05-06   Booked Scheduler 2.7.7 - Authenticated Directory Traversal 36 WEB Besim
2020-05-06   i-doit Open Source CMDB 1.14.1 - Arbitrary File Deletion 36 WEB Besim
2020-05-06   Online Clothing Store 1.0 - Persistent Cross-Site Scripting 41 WEB Sushant Kamble
2020-05-05   NEC Electra Elite IPK II WebPro 01.03.01 - Session Enumeration 33 WEB Cold z3ro
2020-05-05   SimplePHPGal 0.7 - Remote File Inclusion 34 WEB h4shur
2020-05-05   PhreeBooks ERP 5.2.5 - Remote Command Execution 30 WEB Besim
2020-05-05   BlogEngine 3.3 - 'syndication.axd' XML External Entity Injection 41 WEB Daniel Martinez Adan
2020-05-05   webERP 4.15.1 - Unauthenticated Backup File Access 39 WEB Besim
2020-05-05   Online Scheduling System 1.0 - 'username' SQL Injection 36 WEB Saurav Shukla
2020-05-05   Fishing Reservation System 7.5 - 'uid' SQL Injection 38 WEB Vulnerability-Lab
2020-05-04   addressbook 9.0.0.1 - 'id' SQL Injection 38 WEB David Velazquez
2020-05-04   osTicket 1.14.1 - Persistent Authenticated Cross-Site Scripting 37 WEB Mehmet Kelepçe
2020-05-04   BoltWire 6.03 - Local File Inclusion 47 WEB Andrey Stoykov
2020-05-01   Online Scheduling System 1.0 - Authentication Bypass 42 WEB boku
2020-05-01   Apache OFBiz 17.12.03 - Cross-Site Request Forgery (Account Takeover) 38 WEB Faiz Ahmed Zaidi
2020-05-01   HardDrive 2.1 for iOS - Arbitrary File Upload 36 WEB Vulnerability-Lab
2020-05-01   Super Backup 2.0.5 for iOS - Directory Traversal 41 WEB Vulnerability-Lab
2020-05-01   php-fusion 9.03.50 - Persistent Cross-Site Scripting 42 WEB SunCSR
2020-05-01   Online Scheduling System 1.0 - Persistent Cross-Site Scripting 42 WEB boku
2020-05-01   ChemInv 1.0 - Authenticated Persistent Cross-Site Scripting 44 WEB boku
2020-04-29   hits script 1.0 - 'item_name' SQL Injection 38 WEB SajjadBnd
2020-04-29   Easy Transfer 1.7 for iOS - Directory Traversal 35 WEB Vulnerability-Lab
2020-04-29   School ERP Pro 1.0 - Arbitrary File Read 41 WEB Besim
2020-04-29   Open-AudIT Professional 3.3.1 - Remote Code Execution 40 WEB Askar
2020-04-28   School ERP Pro 1.0 - Remote Code Execution 41 WEB Besim
2020-04-28   School ERP Pro 1.0 - 'es_messagesid' SQL Injection 45 WEB Besim
2020-04-27   Maian Support Helpdesk 4.3 - Cross-Site Request Forgery (Add Admin) 38 WEB Besim
2020-04-27   Online Course Registration 2.0 - Authentication Bypass 42 WEB Daniel Monzón
2020-04-27   Netis E1+ V1.2.32533 - Unauthenticated WiFi Password Leak 41 WEB Besim
2020-04-27   Online shopping system advanced 1.0 - 'p' SQL Injection 36 WEB Majid kalantari
2020-04-27   Netis E1+ 1.2.32533 - Backdoor Account (root) 46 WEB Besim
2020-04-27   PHP-Fusion 9.03.50 - 'Edit Profile' Arbitrary File Upload 46 WEB Besim
2020-04-24   Furukawa Electric ConsciusMAP 2.8.1 - Remote Code Execution 42 WEB LiquidWorm
2020-04-24   Edimax EW-7438RPn 1.13 - Remote Code Execution 44 WEB Besim
2020-04-24   EspoCRM 5.8.5 - Privilege Escalation 44 WEB Besim
2020-04-23   Sky File 2.1.0 iOS - Directory Traversal 38 WEB Vulnerability-Lab
2020-04-23   Library CMS Powerful Book Management System 2.2.0 - Session Fixation 33 WEB Ismail Tasdelen
2020-04-23   Zen Load Balancer 3.10.1 - Directory Traversal (Metasploit) 37 WEB Dhiraj Mishra
2020-04-23   Complaint Management System 4.2 - Cross-Site Request Forgery (Delete User) 34 WEB Besim
2020-04-23   Complaint Management System 4.2 - Authentication Bypass 40 WEB Besim
2020-04-23   Complaint Management System 4.2 - Persistent Cross-Site Scripting 33 WEB Besim
2020-04-23   User Management System 2.0 - Authentication Bypass 36 WEB Besim
2020-04-23   User Management System 2.0 - Persistent Cross-Site Scripting 37 WEB Besim
2020-04-22   Mahara 19.10.2 CMS - Persistent Cross-Site Scripting 38 WEB Vulnerability-Lab
2020-04-22   Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering) 43 WEB Besim
2020-04-22   Edimax EW-7438RPn - Information Disclosure (WiFi Password) 37 WEB Besim
2020-04-21   P5 FNIP-8x16A FNIP-4xSH 1.0.20 - Cross-Site Request Forgery (Add Admin) 38 WEB LiquidWorm
2020-04-21   jizhi CMS 1.6.7 - Arbitrary File Download 44 WEB jizhicms
2020-04-21   NSClient++ 0.5.2.35 - Authenticated Remote Code Execution 39 WEB kindredsec
2020-04-21   IQrouter 3.3.1 Firmware - Remote Code Execution 54 WEB drakylar
2020-04-21   CSZ CMS 1.2.7 - 'title' HTML Injection 54 WEB Metin Yunus Kandemir
2020-04-21   PMB 5.6 - 'logid' SQL Injection 54 WEB 41-trk
2020-04-21   CSZ CMS 1.2.7 - Persistent Cross-Site Scripting 46 WEB Metin Yunus Kandemir
2020-04-20   Fork CMS 5.8.0 - Persistent Cross-Site Scripting 36 WEB Vulnerability-Lab
2020-04-20   Prestashop 1.7.6.4 - Cross-Site Request Forgery 41 WEB Sivanesh Ashok
2020-04-20   Centreon 19.10.5 - 'id' SQL Injection 43 WEB Basim Alabdullah
2020-04-17   TAO Open Source Assessment Platform 3.3.0 RC02 - HTML Injection 43 WEB Vulnerability-Lab
2020-04-17   Playable 9.18 iOS - Persistent Cross-Site Scripting 39 WEB Vulnerability-Lab
2020-04-15   Xeroneit Library Management System 3.0 - 'category' SQL Injection 35 WEB Sohel Yousef
2020-04-15   File Transfer iFamily 2.1 - Directory Traversal 39 WEB Vulnerability-Lab
2020-04-15   DedeCMS 7.5 SP2 - Persistent Cross-Site Scripting 35 WEB Vulnerability Research Laboratory
2020-04-15   Macs Framework 1.14f CMS - Persistent Cross-Site Scripting 37 WEB Vulnerability-Lab
2020-04-15   SeedDMS 5.1.18 - Persistent Cross-Site Scripting 37 WEB Vulnerability-Lab
2020-04-15   Pinger 1.0 - Remote Code Execution 39 WEB Milad karimi
2020-04-15   SuperBackup 2.0.5 for iOS - Persistent Cross-Site Scripting 34 WEB Vulnerability-Lab
2020-04-15   AirDisk Pro 5.5.3 for iOS - Persistent Cross-Site Scripting 38 WEB Vulnerability-Lab
2020-04-14   Oracle WebLogic Server 12.2.1.4.0 - Remote Code Execution 40 WEB nu11secur1ty
2020-04-14   WSO2 3.1.0 - Persistent Cross-Site Scripting 43 WEB Raki Ben Hamouda
2020-04-14   Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution 38 WEB Wadeek
2020-04-13   MOVEit Transfer 11.1.1 - 'token' Unauthenticated SQL Injection 39 WEB Aviv Beniash
2020-04-13   WordPress Plugin Media Library Assistant 2.81 - Local File Inclusion 38 WEB Daniel Monzón
2020-04-13   WSO2 3.1.0 - Arbitrary File Delete 38 WEB Raki Ben Hamouda
2020-04-13   Webtateas 2.0 - Arbitrary File Read 35 WEB China Banking and Insurance Information Technology
2020-04-13   TVT NVMS 1000 - Directory Traversal 35 WEB Mohin Paramasivam
2020-04-13   Huawei HG630 2 Router - Authentication Bypass 39 WEB Eslam Medhat
2020-04-10   Zen Load Balancer 3.10.1 - 'index.cgi' Directory Traversal 40 WEB Basim Alabdullah
2020-04-10   WordPress Plugin Helpful 2.4.11 - SQL Injection 40 WEB numan türle