Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2019-09-16   CollegeManagementSystem-CMS 1.3 - 'batch' SQL Injection 41 WEB cakes
2019-09-16   Symantec Advanced Secure Gateway (ASG) / ProxySG - Unrestricted File Upload 42 WEB Pankaj Kumar Thakur
2019-09-16   NetGain EM Plus 10.1.68 - Remote Command Execution 45 WEB azams
2019-09-14   College-Management-System 1.2 - Authentication Bypass 36 WEB cakes
2019-09-14   Ticket-Booking 1.4 - Authentication Bypass 46 WEB cakes
2019-09-13   LimeSurvey 3.17.13 - Cross-Site Scripting 37 WEB SEC Consult
2019-09-13   phpMyAdmin 4.9.0.1 - Cross-Site Request Forgery 40 WEB Manuel García Cárdenas
2019-09-13   Dolibarr ERP-CRM 10.0.1 - 'User-Agent' Cross-Site Scripting 39 WEB Metin Yunus Kandemir
2019-09-11   eWON Flexy - Authentication Bypass 41 WEB Photubias
2019-09-11   AVCON6 systems management platform - OGNL Remote Command Execution 48 WEB Nassim Asrir
2019-09-10   WordPress Plugin Photo Gallery 1.5.34 - Cross-Site Scripting (2) 40 WEB MTK
2019-09-10   WordPress Plugin Photo Gallery 1.5.34 - Cross-Site Scripting 35 WEB MTK
2019-09-10   WordPress Plugin Photo Gallery 1.5.34 - SQL Injection 33 WEB MTK
2019-09-09   Dolibarr ERP-CRM 10.0.1 - SQL Injection 35 WEB Metin Yunus Kandemir
2019-09-09   WordPress Plugin Sell Downloads 1.0.86 - Cross-Site Scripting 41 WEB Mr Winst0n
2019-09-09   Rifatron Intelligent Digital Security System - 'animate.cgi' Stream Disclosure 38 WEB LiquidWorm
2019-09-09   Online Appointment - SQL Injection 46 WEB mohammad zaheri
2019-09-09   Enigma NMS 65.0.0 - SQL Injection 39 WEB xerubus
2019-09-09   Enigma NMS 65.0.0 - OS Command Injection 37 WEB xerubus
2019-09-09   Enigma NMS 65.0.0 - Cross-Site Request Forgery 37 WEB xerubus
2019-09-09   Dolibarr ERP-CRM 10.0.1 - 'elemid' SQL Injection 35 WEB Metin Yunus Kandemir
2019-09-09   WordPress Core 5.2.3 - Cross-Site Host Modification 40 WEB Todor Donev
2019-09-06   Publisure Hybrid - Multiple Vulnerabilities 39 WEB Jean-Marie Bourbon
2019-09-06   Inventory Webapp - 'itemquery' SQL injection 43 WEB mohammad zaheri
2019-09-04   DASAN Zhone ZNID GPON 2426A EU - Multiple Cross-Site Scripting 42 WEB Adam Ziaja
2019-09-04   WordPress Plugin Download Manager 2.9.93 - Cross-Site Scripting 41 WEB MgThuraMoeMyint
2019-09-03   FileThingie 2.5.7 - Arbitrary File Upload 62 WEB cakes
2019-09-02   Craft CMS 2.7.9/3.2.5 - Information Disclosure 43 WEB Mohammed Abdul Raheem
2019-09-02   Wolters Kluwer TeamMate 3.1 - Cross-Site Request Forgery 45 WEB Bhadresh Patel
2019-09-02   Alkacon OpenCMS 10.5.x - Local File inclusion 47 WEB Aetsu
2019-09-02   Alkacon OpenCMS 10.5.x - Cross-Site Scripting (2) 40 WEB Aetsu
2019-09-02   Alkacon OpenCMS 10.5.x - Cross-Site Scripting 39 WEB Aetsu
2019-09-02   WordPress Plugin Event Tickets 4.10.7.1 - CSV Injection 48 WEB MTK
2019-09-02   Opencart 3.x - Cross-Site Scripting 38 WEB Nipun Somani
2019-09-02   Webmin < 1.920 - 'rpc.cgi' Remote Code Execution (Metasploit) 39 WEB James Bercegay
2019-08-30   WordPress Plugin WooCommerce Product Feed 2.2.18 - Cross-Site Scripting 42 WEB Damian Ebelties
2019-08-30   YouPHPTube 7.4 - Remote Code Execution 45 WEB Damian Ebelties
2019-08-30   DomainMod 4.13 - Cross-Site Scripting 43 WEB Damian Ebelties
2019-08-30   Sentrifugo 3.2 - Persistent Cross-Site Scripting 46 WEB creosote
2019-08-30   Sentrifugo 3.2 - File Upload Restriction Bypass 46 WEB creosote
2019-08-29   PilusCart 1.4.1 - Local File Disclosure 42 WEB Damian Ebelties
2019-08-29   Jobberbase 2.0 - 'subscribe' SQL Injection 44 WEB Damian Ebelties
2018-10-31   WordPress Plugin GoURL.io < 1.4.14 - File Upload 48 WEB Pouya Darabi
2019-08-28   Jobberbase 2.0 CMS - 'jobs-in' SQL Injection 45 WEB Suvadip Kar
2019-08-28   SQLiteManager 1.2.0 / 1.2.4 - Blind SQL Injection 41 WEB Rafael Pedrero
2019-08-27   Tableau - XML External Entity 44 WEB Jarad Kopf
2019-08-26   openITCOCKPIT 3.6.1-2 - Cross-Site Request Forgery 40 WEB Julian Rittweger
2019-08-26   WordPress Plugin UserPro 4.9.32 - Cross-Site Scripting 39 WEB Damian Ebelties
2019-08-26   WordPress Plugin Import Export WordPress Users 1.3.1 - CSV Injection 38 WEB Javier Olmedo
2019-08-26   LSoft ListServ < 16.5-2018a - Cross-Site Scripting 40 WEB MTK
2019-08-23   Nimble Streamer 3.0.2-2 < 3.5.4-9 - Directory Traversal 35 WEB MaYaSeVeN
2019-08-21   Nagios XI 5.6.5 - Remote Code Execution / Root Privilege Escalation 41 WEB Jak Gibb
2019-08-21   Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Arbitrary File Disclosure (Metasploit) 37 WEB Alyssa Herrera
2019-08-20   WordPress Plugin Add Mime Types 2.2.1 - Cross-Site Request Forgery 44 WEB Princy Edward
2019-08-19   YouPHPTube 7.2 - 'userCreate.json.php' SQL Injection 44 WEB Fabian Mosch
2019-08-19   Webmin 1.920 - Remote Code Execution 41 WEB Fernando A. Lagos B
2019-08-19   Neo Billing 3.5 - Persistent Cross-Site Scripting 44 WEB n1x_
2019-08-19   Fortinet FortiOS 5.6.3 - 5.6.7 / FortiOS 6.0.0 - 6.0.4 - Credentials Disclosure 41 WEB Carlos E. Vieira
2019-08-19   Fortinet FortiOS 5.6.3 - 5.6.7 / FortiOS 6.0.0 - 6.0.4 - Credentials Disclosure (Metasploit) 44 WEB Carlos E. Vieira
2019-08-19   Kimai 2 - Persistent Cross-Site Scripting 38 WEB osamaalaa
2019-08-16   Web Wiz Forums 12.01 - 'PF' SQL Injection 44 WEB n1x_
2019-08-16   Integria IMS 5.0.86 - Arbitrary File Upload 40 WEB Greg.Priest
2019-08-16   Joomla! component com_jsjobs 1.2.6 - Arbitrary File Deletion 48 WEB qw3rTyTy
2019-08-16   EyesOfNetwork 5.1 - Authenticated Remote Command Execution 37 WEB Nassim Asrir
2019-08-14   ManageEngine opManager 12.3.150 - Authenticated Code Execution 45 WEB kindredsec
2019-08-14   TortoiseSVN 1.12.1 - Remote Code Execution 42 WEB Vulnerability-Lab
2019-08-14   WordPress Plugin Download Manager 2.5 - Cross-Site Request Forgery 44 WEB Princy Edward
2019-08-14   D-Link DIR-600M - Authentication Bypass (Metasploit) 35 WEB Devendra Singh Solanki
2019-08-14   D-Link DIR-600M - Authentication Bypass (Metasploit) 32 WEB Devendra Singh Solanki
2019-08-14   Joomla! Component JS Jobs (com_jsjobs) 1.2.5 - 'customfields.php' SQL Injection 39 WEB qw3rTyTy
2019-08-14   SugarCRM Enterprise 9.0.0 - Cross-Site Scripting 45 WEB Ilca Lucian Florin
2019-08-12   Mitsubishi Electric smartRTU / INEA ME-RTU - Unauthenticated OS Command Injection Bind Shell 45 WEB xerubus
2019-08-12   Mitsubishi Electric smartRTU / INEA ME-RTU - Unauthenticated Configuration Download 44 WEB xerubus
2019-08-12   Joomla! Component JS Jobs (com_jsjobs) 1.2.5 - 'cities.php' SQL Injection 42 WEB qw3rTyTy
2019-08-12   osTicket 1.12 - Persistent Cross-Site Scripting 41 WEB Aishwarya Iyer
2019-08-12   osTicket 1.12 - Formula Injection 40 WEB Aishwarya Iyer
2019-08-12   osTicket 1.12 - Persistent Cross-Site Scripting via File Upload 37 WEB Aishwarya Iyer
2019-08-12   Joomla! Component JS Support Ticket (com_jssupportticket) 1.1.6 - 'ticket.php' Arbitrary File Deleti 35 WEB qw3rTyTy
2019-08-12   Joomla! Component JS Support Ticket (com_jssupportticket) 1.1.6 - 'ticketreply.php' SQL Injection 33 WEB qw3rTyTy
2019-08-12   UNA 10.0.0 RC1 - 'polyglot.php' Persistent Cross-Site Scripting 31 WEB Greg.Priest
2019-08-12   Cisco Adaptive Security Appliance - Path Traversal (Metasploit) 32 WEB Angelo Ruwantha
2019-08-12   BSI Advance Hotel Booking System 2.0 - 'booking_details.php Persistent Cross-Site Scripting 35 WEB Angelo Ruwantha
2019-08-08   Joomla! Component JS Support Ticket (component com_jssupportticket) 1.1.5 - SQL Injection 37 WEB qw3rTyTy
2019-08-08   Adive Framework 2.0.7 - Cross-Site Request Forgery 38 WEB Pablo Santiago
2019-08-08   Joomla! Component JS Support Ticket (component com_jssupportticket) 1.1.5 - Arbitrary File Download 37 WEB qw3rTyTy
2019-08-08   Aptana Jaxer 1.0.3.4547 - Local File inclusion 39 WEB Steph Jensen
2019-08-08   Daily Expense Manager 1.0 - Cross-Site Request Forgery (Delete Income) 42 WEB Mr Winst0n
2019-08-08   Open-School 3.0 / Community Edition 2.3 - Cross-Site Scripting 40 WEB Greg.Priest
2019-08-07   WordPress Plugin JoomSport 3.3 - SQL Injection 42 WEB Pablo Santiago
2019-08-02   1CRM On-Premise Software 8.5.7 - Persistent Cross-Site Scripting 41 WEB Kusol Watchara-Apanukorn
2019-08-02   Rest - Cafe and Restaurant Website CMS - 'slug' SQL Injection 36 WEB n1x_
2019-08-02   Sar2HTML 3.2.1 - Remote Command Execution 36 WEB Cemal Cihad ÇİFTÇİ
2019-08-01   Cisco Catalyst 3850 Series Device Manager - Cross-Site Request Forgery 41 WEB Alperen Soydan
2019-08-01   WebIncorp ERP - SQL injection 40 WEB n1x_
2019-08-01   Ultimate Loan Manager 2.0 - Cross-Site Scripting 40 WEB Metin Yunus Kandemir
2019-07-31   Oracle Hyperion Planning 11.1.2.3 - XML External Entity 40 WEB Lucas Dinucci
2019-07-30   Amcrest Cameras 2.520.AC00.18.R - Unauthenticated Audio Streaming 44 WEB Jacob Baines
2019-07-29   GigToDo 1.3 - Cross-Site Scripting 42 WEB m0ze
2019-07-29   WordPress Theme Real Estate 2.8.9 - Cross-Site Scripting 38 WEB m0ze
2019-07-29   WordPress Plugin Simple Membership 3.8.4 - Cross-Site Request Forgery 42 WEB rubyman
2019-07-26   Ahsay Backup 7.x - 8.1.1.50 - XML External Entity Injection 39 WEB Wietse Boonstra
2019-07-26   Ahsay Backup 7.x - 8.1.1.50 - Authenticated Arbitrary File Upload / Remote Code Execution (Metasploi 38 WEB Wietse Boonstra
2019-07-26   Ahsay Backup 8.1.1.50 - Insecure File Upload and Code Execution (Authenticated) 41 WEB Wietse Boonstra
2019-07-26   Moodle Filepicker 3.5.2 - Server Side Request Forgery 39 WEB Fabian Mosch_ Nick Theisinger
2019-07-25   MyBB < 1.8.21 - Remote Code Execution 41 WEB Giovanni Chhatta
2019-07-25   Ovidentia 8.4.3 - SQL Injection 37 WEB UserX
2019-07-25   Ovidentia 8.4.3 - Cross-Site Scripting 41 WEB n3k00n3
2019-07-24   WordPress Plugin Hybrid Composer 1.4.6 - Improper Access Restrictions 38 WEB yasin
2019-07-24   Cisco Wireless Controller 3.6.10E - Cross-Site Request Forgery 40 WEB Mehmet Onder
2019-07-24   NoviSmart CMS - SQL injection 43 WEB n1x_
2019-07-22   Axway SecureTransport 5 - Unauthenticated XML Injection 47 WEB Dominik Penner
2019-07-19   REDCap < 9.1.2 - Cross-Site Scripting 39 WEB Alexandre ZANNI
2019-07-19   Web Ofisi Firma 13 - 'oz' SQL Injection 35 WEB Ahmet Ümit BAYRAM
2019-07-19   Web Ofisi Rent a Car 3 - 'klima' SQL Injection 33 WEB Ahmet Ümit BAYRAM
2019-07-19   Web Ofisi Firma Rehberi 1 - 'il' SQL Injection 33 WEB Ahmet Ümit BAYRAM
2019-07-19   Web Ofisi Emlak 3 - 'emlak_durumu' SQL Injection 32 WEB Ahmet Ümit BAYRAM
2019-07-19   Web Ofisi Emlak 2 - 'ara' SQL Injection 34 WEB Ahmet Ümit BAYRAM
2019-07-19   Web Ofisi Platinum E-Ticaret 5 - 'q' SQL Injection 35 WEB Ahmet Ümit BAYRAM
2019-07-19   Web Ofisi E-Ticaret 3 - 'a' SQL Injection 38 WEB Ahmet Ümit BAYRAM
2019-07-19   fuel CMS 1.4.1 - Remote Code Execution (1) 48 WEB 0xd0ff9
2019-07-18   WordPress Plugin OneSignal 1.17.5 - 'subdomain' Persistent Cross-Site Scripting 39 WEB LiquidWorm
2019-07-17   Oracle Siebel CRM 19.0 - Persistent Cross-Site Scripting 48 WEB Sarath Nair
2019-07-16   CentOS Control Web Panel 0.9.8.838 - User Enumeration 43 WEB Pongtorn Angsuchotmetee_ Nissana Sirijirakal_ Nari
2019-07-16   CentOS Control Web Panel 0.9.8.836 - Privilege Escalation 37 WEB Pongtorn Angsuchotmetee_ Nissana Sirijirakal_ Nari
2019-07-16   CentOS Control Web Panel 0.9.8.836 - Authentication Bypass 32 WEB Pongtorn Angsuchotmetee