Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2019-03-19 Exploit Code Downloads   MyBB Upcoming Events Plugin 1.32 - Cross-Site Scripting 26 WEB 0xB9
2019-03-19 Exploit Code Downloads   Gila CMS 1.9.1 - Cross-Site Scripting 22 WEB Ahmet Ümit BAYRAM
2019-03-18 Exploit Code Downloads   TheCarProject 2 - Multiple SQL Injection 28 WEB Mehmet EMIROGLU
2019-03-15 Exploit Code Downloads   Moodle 3.4.1 - Remote Code Execution 27 WEB Darryn Ten
2019-03-15 Exploit Code Downloads   Laundry CMS - Multiple Vulnerabilities 22 WEB Mehmet EMIROGLU
2019-03-15 Exploit Code Downloads   Vembu Storegrid Web Interface 4.4.0 - Multiple Vulnerabilities 23 WEB Gionathan Reale
2019-03-15 Exploit Code Downloads   ICE HRM 23.0 - Multiple Vulnerabilities 24 WEB Mehmet EMIROGLU
2019-03-15 Exploit Code Downloads   CMS Made Simple Showtime2 Module 3.6.2 - (Authenticated) Arbitrary File Upload 29 WEB Daniele Scanu
2019-03-15 Exploit Code Downloads   NetData 1.13.0 - HTML Injection 27 WEB s4vitar
2019-03-14 Exploit Code Downloads   Pegasus CMS 1.0 - 'extra_fields.php' Plugin Remote Code Execution 31 WEB R3zk0n
2019-03-14 Exploit Code Downloads   Intel Modular Server System 10.18 - Cross-Site Request Forgery (Change Admin Password) 29 WEB LiquidWorm
2019-03-13 Exploit Code Downloads   pfSense 2.4.4-p1 (HAProxy Package 0.59_14) - Persistent Cross-Site Scripting 29 WEB Gionathan Reale
2019-03-13 Exploit Code Downloads   WordPress Plugin GraceMedia Media Player 1.0 - Local File Inclusion 23 WEB Manuel García Cárdenas
2019-03-12 Exploit Code Downloads   PilusCart 1.4.1 - Cross-Site Request Forgery (Add Admin) 28 WEB Gionathan Reale
2019-03-11 Exploit Code Downloads   Flexpaper PHP Publish Service 2.3.6 - Remote Code Execution 25 WEB redtimmysec
2019-03-11 Exploit Code Downloads   PRTG Network Monitor 18.2.38 - (Authenticated) Remote Code Execution 23 WEB M4LV0
2019-03-11 Exploit Code Downloads   OpenKM 6.3.2 < 6.3.7 - Remote Command Execution (Metasploit) 25 WEB AkkuS
2019-03-11 Exploit Code Downloads   Liferay CE Portal < 7.1.2 ga3 - Remote Command Execution (Metasploit) 27 WEB AkkuS
2019-03-08 Exploit Code Downloads   DirectAdmin 1.55 - 'CMD_ACCOUNT_ADMIN' Cross-Site Request Forgery 30 WEB ManhNho
2019-03-08 Exploit Code Downloads   McAfee ePO 5.9.1 - Registered Executable Local Access Bypass 27 WEB leonjza
2019-03-08 Exploit Code Downloads   OrientDB 3.0.17 GA Community Edition - Cross-Site Request Forgery / Cross-Site Scripting 26 WEB Ozer Goker
2019-03-08 Exploit Code Downloads   OrientDB 3.0.17 GA Community Edition - Cross-Site Request Forgery / Cross-Site Scripting 27 WEB Ozer Goker
2018-12-12 Exploit Code Downloads   phpBB 3.2.3 - Remote Code Execution 27 WEB allyshka
2019-03-01 Exploit Code Downloads   WordPress Core 5.0 - Remote Code Execution 29 WEB allyshka
2019-03-07 Exploit Code Downloads   Kados R10 GreenBee - Multiple SQL Injection 29 WEB Mehmet EMIROGLU
2019-03-05 Exploit Code Downloads   OpenDocMan 1.3.4 - 'search.php where' SQL Injection 21 WEB Mehmet EMIROGLU
2019-03-04 Exploit Code Downloads   Fiberhome AN5506-04-F RP2669 - Persistent Cross-Site Scripting 24 WEB Tauco
2019-03-04 Exploit Code Downloads   WordPress Plugin Cerber Security_ Antispam & Malware Scan 8.0 - Multiple Bypass Vulnerabilities 29 WEB ed0x21son
2019-03-04 Exploit Code Downloads   Craft CMS 3.1.12 Pro - Cross-Site Scripting 25 WEB Ismail Tasdelen
2019-03-04 Exploit Code Downloads   Bolt CMS 3.6.4 - Cross-Site Scripting 28 WEB Ismail Tasdelen
2019-03-04 Exploit Code Downloads   MarcomCentral FusionPro VDP Creator < 10.0 - Directory Traversal 27 WEB 0v3rride
2019-03-04 Exploit Code Downloads   Raisecom XPON ISCOMHT803G-U_2.0.0_140521_R4.1.47.002 - Remote Code Execution 27 WEB JameelNabbo
2019-03-04 Exploit Code Downloads   zzzphp CMS 1.6.1 - Cross-Site Request Forgery 27 WEB Yang Chenglong
2019-03-04 Exploit Code Downloads   Splunk Enterprise 7.2.4 - Custom App Remote Command Execution (Persistent Backdoor / Custom Binary) 30 WEB Matteo Malvica
2019-03-04 Exploit Code Downloads   Booked Scheduler 2.7.5 - Remote Command Execution (Metasploit) 22 WEB AkkuS
2019-03-04 Exploit Code Downloads   OOP CMS BLOG 1.0 - Multiple Cross-Site Request Forgery 27 WEB Mr Winst0n
2019-03-04 Exploit Code Downloads   OOP CMS BLOG 1.0 - Multiple SQL Injection 26 WEB Mr Winst0n
2019-03-04 Exploit Code Downloads   elFinder 2.1.47 - 'PHP connector' Command Injection 30 WEB q3rv0
2019-03-04 Exploit Code Downloads   CMSsite 1.0 - Multiple Cross-Site Request Forgery 24 WEB Mr Winst0n
2019-02-28 Exploit Code Downloads   Feng Office 3.7.0.5 - Remote Command Execution (Metasploit) 38 WEB AkkuS
2019-02-28 Exploit Code Downloads   Usermin 1.750 - Remote Command Execution (Metasploit) 27 WEB AkkuS
2019-02-28 Exploit Code Downloads   Joomla! Component J2Store < 3.3.7 - SQL Injection 27 WEB Andrei Conache
2019-02-28 Exploit Code Downloads   Simple Online Hotel Reservation System - Cross-Site Request Forgery (Delete Admin) 29 WEB Mr Winst0n
2019-02-28 Exploit Code Downloads   Simple Online Hotel Reservation System - Cross-Site Request Forgery (Add Admin) 24 WEB Mr Winst0n
2019-02-28 Exploit Code Downloads   Simple Online Hotel Reservation System - SQL Injection 20 WEB Mr Winst0n
2019-02-25 Exploit Code Downloads   Drupal < 8.6.9 - REST Module Remote Code Execution 31 WEB leonjza
2019-02-25 Exploit Code Downloads   Advance Gift Shop Pro Script 2.0.3 - SQL Injection 29 WEB Mr Winst0n
2019-02-25 Exploit Code Downloads   News Website Script 2.0.5 - SQL Injection 26 WEB Mr Winst0n
2019-02-25 Exploit Code Downloads   PHP Ecommerce Script 2.0.6 - Cross-Site Scripting / SQL Injection 19 WEB Mr Winst0n
2019-02-25 Exploit Code Downloads   zzzphp CMS 1.6.1 - Remote Code Execution 23 WEB Yang Chenglong
2019-02-25 Exploit Code Downloads   Jenkins Plugin Script Security 1.49/Declarative 1.3.4/Groovy 2.60 - Remote Code Execution 22 WEB wetw0rk
2019-02-23 Exploit Code Downloads   Drupal < 8.6.10 / < 8.5.11 - REST Module Remote Code Execution 24 WEB Charles Fol
2019-02-22 Exploit Code Downloads   Teracue ENC-400 - Command Injection / Missing Authentication 22 WEB Stephen Shkardoon
2019-02-22 Exploit Code Downloads   Micro Focus Filr 3.4.0.217 - Path Traversal / Local Privilege Escalation 36 WEB SecureAuth
2019-02-22 Exploit Code Downloads   Quest NetVault Backup Server < 11.4.5 - Process Manager Service SQL Injection / Remote Code Executio 36 WEB Chris Anastasio
2019-02-21 Exploit Code Downloads   EI-Tube 3 - SQL Injection 28 WEB Meisam Monsef
2019-02-21 Exploit Code Downloads   C4G Basic Laboratory Information System (BLIS) 3.4 - SQL Injection 31 WEB Carlos Avila
2019-02-20 Exploit Code Downloads   HotelDruid 2.3 - Cross-Site Scripting 30 WEB Mehmet EMIROGLU
2019-02-19 Exploit Code Downloads   Jenkins Plugin Script Security < 1.50/Declarative < 1.3.4.1/Groovy < 2.61.1 - Remote Code Execution 29 WEB orange
2019-02-19 Exploit Code Downloads   Ask Expert Script 3.0.5 - Cross Site Scripting / SQL Injection 22 WEB Mr Winst0n
2019-02-19 Exploit Code Downloads   Ask Expert Script 3.0.5 - Cross Site Scripting / SQL Injection 22 WEB Mr Winst0n
2019-02-19 Exploit Code Downloads   Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 - Path Traversal / Cross-Site Scripting 25 WEB Rafael Pedrero
2019-02-19 Exploit Code Downloads   Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 - Path Traversal / Cross-Site Scripting 22 WEB Rafael Pedrero
2019-02-19 Exploit Code Downloads   XAMPP 5.6.8 - SQL Injection / Persistent Cross-Site Scripting 26 WEB Rafael Pedrero
2019-02-19 Exploit Code Downloads   XAMPP 5.6.8 - SQL Injection / Persistent Cross-Site Scripting 28 WEB Rafael Pedrero
2019-02-19 Exploit Code Downloads   eDirectory - SQL Injection 28 WEB Efrén Díaz
2019-02-19 Exploit Code Downloads   Zuz Music 2.1 - 'zuzconsole/___contact ' Persistent Cross-Site Scripting 32 WEB Deyaa Muhammad
2019-02-19 Exploit Code Downloads   Listing Hub CMS 1.0 - 'pages.php id' SQL Injection 29 WEB Deyaa Muhammad
2019-02-19 Exploit Code Downloads   Find a Place CMS Directory 1.5 - 'assets/external/data_2.php cate' SQL Injection 29 WEB Deyaa Muhammad
2019-02-18 Exploit Code Downloads   WordPress Plugin WooCommerce - GloBee (cryptocurrency) Payment Gateway 1.1.1 - Payment Bypass / Unau 24 WEB GeekHack
2019-02-18 Exploit Code Downloads   Zoho ManageEngine ServiceDesk Plus (SDP) < 10.0 build 10012 - Arbitrary File Upload 28 WEB Dao Duy Hung
2019-02-18 Exploit Code Downloads   Comodo Dome Firewall 2.7.0 - Cross-Site Scripting 30 WEB Ozer Goker
2019-02-18 Exploit Code Downloads   ArangoDB Community Edition 3.4.2-1 - Cross-Site Scripting 27 WEB Ozer Goker
2019-02-18 Exploit Code Downloads   Apache CouchDB 2.3.0 - Cross-Site Scripting 27 WEB Ozer Goker
2019-02-18 Exploit Code Downloads   Webiness Inventory 2.3 - 'ProductModel' Arbitrary File Upload 30 WEB Mehmet EMIROGLU
2019-02-18 Exploit Code Downloads   M/Monit 3.7.2 - Privilege Escalation 25 WEB Dolev Farhi
2019-02-18 Exploit Code Downloads   CMSsite 1.0 - 'post' SQL Injection 27 WEB Mr Winst0n
2019-02-18 Exploit Code Downloads   MISP 2.4.97 - SQL Command Execution via Command Injection in STIX Module 29 WEB Tm9jdGlz
2019-02-18 Exploit Code Downloads   Master IP CAM 01 3.3.4.2103 - Remote Command Execution 27 WEB Raffaele Sabato
2019-02-18 Exploit Code Downloads   qdPM 9.1 - 'search[keywords]' Cross-Site Scripting 24 WEB Mehmet EMIROGLU
2019-02-18 Exploit Code Downloads   qdPM 9.1 - 'type' Cross-Site Scripting 24 WEB Mehmet EMIROGLU
2019-02-15 Exploit Code Downloads   UniSharp Laravel File Manager 2.0.0-alpha7 - Arbitrary File Upload 29 WEB Mohammad Danish
2019-02-15 Exploit Code Downloads   qdPM 9.1 - 'search_by_extrafields[]' SQL Injection 27 WEB Mehmet EMIROGLU
2019-02-15 Exploit Code Downloads   Jinja2 2.10 - 'from_string' Server Side Template Injection 29 WEB JameelNabbo
2019-02-15 Exploit Code Downloads   MyBB Trash Bin Plugin 1.1.3 - Cross-Site Scripting / Cross-Site Request Forgery 25 WEB 0xB9
2019-02-15 Exploit Code Downloads   MyBB Trash Bin Plugin 1.1.3 - Cross-Site Scripting / Cross-Site Request Forgery 28 WEB 0xB9
2019-02-14 Exploit Code Downloads   LayerBB 1.1.2 - Cross-Site Request Forgery (Add Admin) 34 WEB 0xB9
2019-02-14 Exploit Code Downloads   WordPress Plugin Booking Calendar 8.4.3 - (Authenticated) SQL Injection 28 WEB B0UG
2019-02-14 Exploit Code Downloads   DomainMOD 4.11.01 - 'assets/edit/host.php?whid=5' Cross-Site Scripting 27 WEB Mohammed Abdul Kareem
2019-02-14 Exploit Code Downloads   DomainMOD 4.11.01 - 'assets/add/dns.php' Cross-Site Scripting 25 WEB Mohammed Abdul Kareem
2019-02-14 Exploit Code Downloads   DomainMOD 4.11.01 - 'category.php CatagoryName_ StakeHolder' Cross-Site Scripting 22 WEB Mohammed Abdul Raheem
2019-02-14 Exploit Code Downloads   DomainMOD 4.11.01 - 'ssl-accounts.php username' Cross-Site Scripting 27 WEB Mohammed Abdul Raheem
2019-02-14 Exploit Code Downloads   DomainMOD 4.11.01 - 'ssl-provider-name' Cross-Site Scripting 30 WEB Mohammed Abdul Raheem
2019-02-13 Exploit Code Downloads   PilusCart 1.4.1 - 'send' SQL Injection 31 WEB Mehmet EMIROGLU
2019-02-13 Exploit Code Downloads   Rukovoditel Project Management CRM 2.4.1 - Cross-Site Scripting 30 WEB Mehmet EMIROGLU
2019-02-12 Exploit Code Downloads   LayerBB 1.1.2 - Cross-Site Scripting 29 WEB 0xB9
2019-02-12 Exploit Code Downloads   BlogEngine.NET 3.3.6 - Directory Traversal / Remote Code Execution 26 WEB Dustin Cobb
2019-02-12 Exploit Code Downloads   Jenkins 2.150.2 - Remote Command Execution (Metasploit) 26 WEB AkkuS
2019-02-12 Exploit Code Downloads   OPNsense < 19.1.1 - Cross-Site Scripting 26 WEB Ozer Goker
2019-02-11 Exploit Code Downloads   Webiness Inventory 2.3 - 'email' SQL Injection 23 WEB Mehmet EMIROGLU
2019-02-11 Exploit Code Downloads   CentOS Web Panel 0.9.8.763 - Persistent Cross-Site Scripting 34 WEB DKM
2019-02-11 Exploit Code Downloads   VA MAX 8.3.4 - (Authenticated) Remote Code Execution 24 WEB Cody Sixteen
2019-02-11 Exploit Code Downloads   MyBB Bans List 1.0 - Cross-Site Scripting 25 WEB 0xB9
2019-02-11 Exploit Code Downloads   IPFire 2.21 - Cross-Site Scripting 30 WEB Ozer Goker
2019-02-11 Exploit Code Downloads   Coship Wireless Router 4.0.0.x/5.0.0.x - WiFi Password Reset 31 WEB Adithyan AK
2019-02-11 Exploit Code Downloads   Smoothwall Express 3.1-SP4 - Cross-Site Scripting 24 WEB Ozer Goker
2019-02-06 Exploit Code Downloads   osCommerce 2.3.4.1 - 'reviews_id' SQL Injection 26 WEB Mehmet EMIROGLU
2019-02-06 Exploit Code Downloads   osCommerce 2.3.4.1 - 'products_id' SQL Injection 32 WEB Mehmet EMIROGLU
2019-02-06 Exploit Code Downloads   osCommerce 2.3.4.1 - 'currency' SQL Injection 27 WEB Mehmet EMIROGLU
2019-02-05 Exploit Code Downloads   OpenMRS Platform < 2.24.0 - Insecure Object Deserialization 32 WEB Bishop Fox
2019-02-05 Exploit Code Downloads   Zyxel VMG3312-B10B DSL-491HNU-B1B v2 Modem - Cross-Site Request Forgery 25 WEB Yusuf Furkan
2019-02-05 Exploit Code Downloads   devolo dLAN 550 duo+ Starter Kit - Remote Code Execution 25 WEB sm
2019-02-05 Exploit Code Downloads   devolo dLAN 550 duo+ Starter Kit - Cross-Site Request Forgery 24 WEB sm
2019-02-05 Exploit Code Downloads   BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File Disclosure 29 WEB LiquidWorm
2019-02-05 Exploit Code Downloads   BEWARD N100 H.264 VGA IP Camera M2.1.6 - Remote Code Execution 30 WEB LiquidWorm
2019-02-05 Exploit Code Downloads   BEWARD N100 H.264 VGA IP Camera M2.1.6 - Cross-Site Request Forgery (Add Admin) 23 WEB LiquidWorm
2019-02-05 Exploit Code Downloads   BEWARD N100 H.264 VGA IP Camera M2.1.6 - RTSP Stream Disclosure 21 WEB LiquidWorm
2019-02-04 Exploit Code Downloads   pfSense 2.4.4-p1 - Cross-Site Scripting 27 WEB Ozer Goker
2019-02-04 Exploit Code Downloads   Nessus 8.2.1 - Cross-Site Scripting 22 WEB Ozer Goker
2019-02-04 Exploit Code Downloads   SuiteCRM 7.10.7 - 'record' SQL Injection 30 WEB Mehmet EMIROGLU
2019-02-04 Exploit Code Downloads   SuiteCRM 7.10.7 - 'parentTab' SQL Injection 29 WEB Mehmet EMIROGLU
2019-02-04 Exploit Code Downloads   ResourceSpace 8.6 - 'watched_searches.php' SQL Injection 28 WEB dd_
2019-02-01 Exploit Code Downloads   SureMDM < 2018-11 Patch - Local / Remote File Inclusion 28 WEB Digital Interruption
2019-01-30 Exploit Code Downloads   Rukovoditel Project Management CRM 2.4.1 - 'lists_id' SQL Injection 31 WEB Mehmet EMIROGLU
2019-01-29 Exploit Code Downloads   PDF Signer 3.0 - Server-Side Template Injection leading to Remote Command Execution (via Cross-Site 23 WEB dd_