Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2019-02-28 Exploit Code Downloads   Simple Online Hotel Reservation System - Cross-Site Request Forgery (Delete Admin) 40 WEB Mr Winst0n
2019-02-28 Exploit Code Downloads   Simple Online Hotel Reservation System - Cross-Site Request Forgery (Add Admin) 36 WEB Mr Winst0n
2019-02-28 Exploit Code Downloads   Simple Online Hotel Reservation System - SQL Injection 34 WEB Mr Winst0n
2019-02-25 Exploit Code Downloads   Drupal < 8.6.9 - REST Module Remote Code Execution 41 WEB leonjza
2019-02-25 Exploit Code Downloads   Advance Gift Shop Pro Script 2.0.3 - SQL Injection 43 WEB Mr Winst0n
2019-02-25 Exploit Code Downloads   News Website Script 2.0.5 - SQL Injection 37 WEB Mr Winst0n
2019-02-25 Exploit Code Downloads   PHP Ecommerce Script 2.0.6 - Cross-Site Scripting / SQL Injection 31 WEB Mr Winst0n
2019-02-25 Exploit Code Downloads   zzzphp CMS 1.6.1 - Remote Code Execution 34 WEB Yang Chenglong
2019-02-25 Exploit Code Downloads   Jenkins Plugin Script Security 1.49/Declarative 1.3.4/Groovy 2.60 - Remote Code Execution 35 WEB wetw0rk
2019-02-23 Exploit Code Downloads   Drupal < 8.6.10 / < 8.5.11 - REST Module Remote Code Execution 33 WEB Charles Fol
2019-02-22 Exploit Code Downloads   Teracue ENC-400 - Command Injection / Missing Authentication 35 WEB Stephen Shkardoon
2019-02-22 Exploit Code Downloads   Micro Focus Filr 3.4.0.217 - Path Traversal / Local Privilege Escalation 49 WEB SecureAuth
2019-02-22 Exploit Code Downloads   Quest NetVault Backup Server < 11.4.5 - Process Manager Service SQL Injection / Remote Code Executio 45 WEB Chris Anastasio
2019-02-21 Exploit Code Downloads   EI-Tube 3 - SQL Injection 38 WEB Meisam Monsef
2019-02-21 Exploit Code Downloads   C4G Basic Laboratory Information System (BLIS) 3.4 - SQL Injection 40 WEB Carlos Avila
2019-02-20 Exploit Code Downloads   HotelDruid 2.3 - Cross-Site Scripting 43 WEB Mehmet EMIROGLU
2019-02-19 Exploit Code Downloads   Jenkins Plugin Script Security < 1.50/Declarative < 1.3.4.1/Groovy < 2.61.1 - Remote Code Execution 41 WEB orange
2019-02-19 Exploit Code Downloads   Ask Expert Script 3.0.5 - Cross Site Scripting / SQL Injection 33 WEB Mr Winst0n
2019-02-19 Exploit Code Downloads   Ask Expert Script 3.0.5 - Cross Site Scripting / SQL Injection 35 WEB Mr Winst0n
2019-02-19 Exploit Code Downloads   Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 - Path Traversal / Cross-Site Scripting 35 WEB Rafael Pedrero
2019-02-19 Exploit Code Downloads   Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 - Path Traversal / Cross-Site Scripting 35 WEB Rafael Pedrero
2019-02-19 Exploit Code Downloads   XAMPP 5.6.8 - SQL Injection / Persistent Cross-Site Scripting 38 WEB Rafael Pedrero
2019-02-19 Exploit Code Downloads   XAMPP 5.6.8 - SQL Injection / Persistent Cross-Site Scripting 37 WEB Rafael Pedrero
2019-02-19 Exploit Code Downloads   eDirectory - SQL Injection 39 WEB Efrén Díaz
2019-02-19 Exploit Code Downloads   Zuz Music 2.1 - 'zuzconsole/___contact ' Persistent Cross-Site Scripting 45 WEB Deyaa Muhammad
2019-02-19 Exploit Code Downloads   Listing Hub CMS 1.0 - 'pages.php id' SQL Injection 40 WEB Deyaa Muhammad
2019-02-19 Exploit Code Downloads   Find a Place CMS Directory 1.5 - 'assets/external/data_2.php cate' SQL Injection 41 WEB Deyaa Muhammad
2019-02-18 Exploit Code Downloads   WordPress Plugin WooCommerce - GloBee (cryptocurrency) Payment Gateway 1.1.1 - Payment Bypass / Unau 38 WEB GeekHack
2019-02-18 Exploit Code Downloads   Zoho ManageEngine ServiceDesk Plus (SDP) < 10.0 build 10012 - Arbitrary File Upload 41 WEB Dao Duy Hung
2019-02-18 Exploit Code Downloads   Comodo Dome Firewall 2.7.0 - Cross-Site Scripting 40 WEB Ozer Goker
2019-02-18 Exploit Code Downloads   ArangoDB Community Edition 3.4.2-1 - Cross-Site Scripting 39 WEB Ozer Goker
2019-02-18 Exploit Code Downloads   Apache CouchDB 2.3.0 - Cross-Site Scripting 40 WEB Ozer Goker
2019-02-18 Exploit Code Downloads   Webiness Inventory 2.3 - 'ProductModel' Arbitrary File Upload 42 WEB Mehmet EMIROGLU
2019-02-18 Exploit Code Downloads   M/Monit 3.7.2 - Privilege Escalation 36 WEB Dolev Farhi
2019-02-18 Exploit Code Downloads   CMSsite 1.0 - 'post' SQL Injection 43 WEB Mr Winst0n
2019-02-18 Exploit Code Downloads   MISP 2.4.97 - SQL Command Execution via Command Injection in STIX Module 39 WEB Tm9jdGlz
2019-02-18 Exploit Code Downloads   Master IP CAM 01 3.3.4.2103 - Remote Command Execution 38 WEB Raffaele Sabato
2019-02-18 Exploit Code Downloads   qdPM 9.1 - 'search[keywords]' Cross-Site Scripting 34 WEB Mehmet EMIROGLU
2019-02-18 Exploit Code Downloads   qdPM 9.1 - 'type' Cross-Site Scripting 35 WEB Mehmet EMIROGLU
2019-02-15 Exploit Code Downloads   UniSharp Laravel File Manager 2.0.0-alpha7 - Arbitrary File Upload 40 WEB Mohammad Danish
2019-02-15 Exploit Code Downloads   qdPM 9.1 - 'search_by_extrafields[]' SQL Injection 41 WEB Mehmet EMIROGLU
2019-02-15 Exploit Code Downloads   Jinja2 2.10 - 'from_string' Server Side Template Injection 38 WEB JameelNabbo
2019-02-15 Exploit Code Downloads   MyBB Trash Bin Plugin 1.1.3 - Cross-Site Scripting / Cross-Site Request Forgery 35 WEB 0xB9
2019-02-15 Exploit Code Downloads   MyBB Trash Bin Plugin 1.1.3 - Cross-Site Scripting / Cross-Site Request Forgery 40 WEB 0xB9
2019-02-14 Exploit Code Downloads   LayerBB 1.1.2 - Cross-Site Request Forgery (Add Admin) 42 WEB 0xB9
2019-02-14 Exploit Code Downloads   WordPress Plugin Booking Calendar 8.4.3 - (Authenticated) SQL Injection 38 WEB B0UG
2019-02-14 Exploit Code Downloads   DomainMOD 4.11.01 - 'assets/edit/host.php?whid=5' Cross-Site Scripting 39 WEB Mohammed Abdul Kareem
2019-02-14 Exploit Code Downloads   DomainMOD 4.11.01 - 'assets/add/dns.php' Cross-Site Scripting 38 WEB Mohammed Abdul Kareem
2019-02-14 Exploit Code Downloads   DomainMOD 4.11.01 - 'category.php CatagoryName_ StakeHolder' Cross-Site Scripting 37 WEB Mohammed Abdul Raheem
2019-02-14 Exploit Code Downloads   DomainMOD 4.11.01 - 'ssl-accounts.php username' Cross-Site Scripting 37 WEB Mohammed Abdul Raheem
2019-02-14 Exploit Code Downloads   DomainMOD 4.11.01 - 'ssl-provider-name' Cross-Site Scripting 40 WEB Mohammed Abdul Raheem
2019-02-13 Exploit Code Downloads   PilusCart 1.4.1 - 'send' SQL Injection 40 WEB Mehmet EMIROGLU
2019-02-13 Exploit Code Downloads   Rukovoditel Project Management CRM 2.4.1 - Cross-Site Scripting 41 WEB Mehmet EMIROGLU
2019-02-12 Exploit Code Downloads   LayerBB 1.1.2 - Cross-Site Scripting 45 WEB 0xB9
2019-02-12 Exploit Code Downloads   BlogEngine.NET 3.3.6 - Directory Traversal / Remote Code Execution 39 WEB Dustin Cobb
2019-02-12 Exploit Code Downloads   Jenkins 2.150.2 - Remote Command Execution (Metasploit) 40 WEB AkkuS
2019-02-12 Exploit Code Downloads   OPNsense < 19.1.1 - Cross-Site Scripting 38 WEB Ozer Goker
2019-02-11 Exploit Code Downloads   Webiness Inventory 2.3 - 'email' SQL Injection 34 WEB Mehmet EMIROGLU
2019-02-11 Exploit Code Downloads   CentOS Web Panel 0.9.8.763 - Persistent Cross-Site Scripting 45 WEB DKM
2019-02-11 Exploit Code Downloads   VA MAX 8.3.4 - (Authenticated) Remote Code Execution 34 WEB Cody Sixteen
2019-02-11 Exploit Code Downloads   MyBB Bans List 1.0 - Cross-Site Scripting 37 WEB 0xB9
2019-02-11 Exploit Code Downloads   IPFire 2.21 - Cross-Site Scripting 39 WEB Ozer Goker
2019-02-11 Exploit Code Downloads   Coship Wireless Router 4.0.0.x/5.0.0.x - WiFi Password Reset 42 WEB Adithyan AK
2019-02-11 Exploit Code Downloads   Smoothwall Express 3.1-SP4 - Cross-Site Scripting 35 WEB Ozer Goker
2019-02-06 Exploit Code Downloads   osCommerce 2.3.4.1 - 'reviews_id' SQL Injection 36 WEB Mehmet EMIROGLU
2019-02-06 Exploit Code Downloads   osCommerce 2.3.4.1 - 'products_id' SQL Injection 45 WEB Mehmet EMIROGLU
2019-02-06 Exploit Code Downloads   osCommerce 2.3.4.1 - 'currency' SQL Injection 40 WEB Mehmet EMIROGLU
2019-02-05 Exploit Code Downloads   OpenMRS Platform < 2.24.0 - Insecure Object Deserialization 44 WEB Bishop Fox
2019-02-05 Exploit Code Downloads   Zyxel VMG3312-B10B DSL-491HNU-B1B v2 Modem - Cross-Site Request Forgery 36 WEB Yusuf Furkan
2019-02-05 Exploit Code Downloads   devolo dLAN 550 duo+ Starter Kit - Remote Code Execution 39 WEB sm
2019-02-05 Exploit Code Downloads   devolo dLAN 550 duo+ Starter Kit - Cross-Site Request Forgery 41 WEB sm
2019-02-05 Exploit Code Downloads   BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File Disclosure 40 WEB LiquidWorm
2019-02-05 Exploit Code Downloads   BEWARD N100 H.264 VGA IP Camera M2.1.6 - Remote Code Execution 42 WEB LiquidWorm
2019-02-05 Exploit Code Downloads   BEWARD N100 H.264 VGA IP Camera M2.1.6 - Cross-Site Request Forgery (Add Admin) 37 WEB LiquidWorm
2019-02-05 Exploit Code Downloads   BEWARD N100 H.264 VGA IP Camera M2.1.6 - RTSP Stream Disclosure 34 WEB LiquidWorm
2019-02-04 Exploit Code Downloads   pfSense 2.4.4-p1 - Cross-Site Scripting 43 WEB Ozer Goker
2019-02-04 Exploit Code Downloads   Nessus 8.2.1 - Cross-Site Scripting 37 WEB Ozer Goker
2019-02-04 Exploit Code Downloads   SuiteCRM 7.10.7 - 'record' SQL Injection 42 WEB Mehmet EMIROGLU
2019-02-04 Exploit Code Downloads   SuiteCRM 7.10.7 - 'parentTab' SQL Injection 39 WEB Mehmet EMIROGLU
2019-02-04 Exploit Code Downloads   ResourceSpace 8.6 - 'watched_searches.php' SQL Injection 39 WEB dd_
2019-02-01 Exploit Code Downloads   SureMDM < 2018-11 Patch - Local / Remote File Inclusion 39 WEB Digital Interruption
2019-01-30 Exploit Code Downloads   Rukovoditel Project Management CRM 2.4.1 - 'lists_id' SQL Injection 39 WEB Mehmet EMIROGLU
2019-01-29 Exploit Code Downloads   PDF Signer 3.0 - Server-Side Template Injection leading to Remote Command Execution (via Cross-Site 34 WEB dd_
2019-01-28 Exploit Code Downloads   ResourceSpace 8.6 - 'collection_edit.php' SQL Injection 42 WEB dd_
2019-01-28 Exploit Code Downloads   MyBB IP History Logs Plugin 1.0.2 - Cross-Site Scripting 36 WEB 0xB9
2019-01-28 Exploit Code Downloads   Mess Management System 1.0 - SQL Injection 34 WEB Ihsan Sencan
2019-01-28 Exploit Code Downloads   Teameyo Project Management System 1.0 - SQL Injection 37 WEB Ihsan Sencan
2019-01-28 Exploit Code Downloads   Care2x 2.7 (HIS) Hospital Information System - Multiple SQL Injection 36 WEB Carlos Avila
2019-01-28 Exploit Code Downloads   Newsbull Haber Script 1.0.0 - 'search' SQL Injection 37 WEB Mehmet EMIROGLU
2019-01-28 Exploit Code Downloads   Cisco Firepower Management Center 6.2.2.2 / 6.2.3 - Cross-Site Scripting 38 WEB Bhushan B. Patil
2019-01-28 Exploit Code Downloads   Cisco RV300 / RV320 - Information Disclosure 37 WEB Harom Ramos
2019-01-28 Exploit Code Downloads   CMSsite 1.0 - 'search' SQL Injection 44 WEB Majid kalantari
2019-01-28 Exploit Code Downloads   CMSsite 1.0 - 'cat_id' SQL Injection 41 WEB Majid kalantari
2019-01-28 Exploit Code Downloads   LogonBox Limited / Hypersocket Nervepoint Access Manager - (Unauthenticated) Insecure Direct Object 37 WEB 0v3rride
2019-01-28 Exploit Code Downloads   AirTies Air5341 Modem 1.0.0.12 - Cross-Site Request Forgery 35 WEB Ali Can Gönüllü
2019-01-28 Exploit Code Downloads   WordPress Plugin Ad Manager WD 1.0.11 - Arbitrary File Download 36 WEB 41!kh4224rDz
2019-01-28 Exploit Code Downloads   Rundeck Community Edition < 3.0.13 - Persistent Cross-Site Scripting 45 WEB Ishaq Mohammed
2019-01-25 Exploit Code Downloads   WordPress Plugin Wisechat 2.6.3 - Reverse Tabnabbing 42 WEB MTK
2019-01-25 Exploit Code Downloads   GreenCMS 2.x - Arbitrary File Download 32 WEB Ihsan Sencan
2019-01-25 Exploit Code Downloads   GreenCMS 2.x - SQL Injection 36 WEB Ihsan Sencan
2019-01-25 Exploit Code Downloads   Cisco RV320 Dual Gigabit WAN VPN Router 1.4.2.15 - Command Injection 40 WEB RedTeam Pentesting
2019-01-24 Exploit Code Downloads   Zyxel NBG-418N v2 Modem 1.00(AAXM.6)C0 - Cross-Site Request Forgery 36 WEB Ali Can Gönüllü
2019-01-24 Exploit Code Downloads   ImpressCMS 1.3.11 - 'bid' SQL Injection 38 WEB Mehmet Onder
2019-01-24 Exploit Code Downloads   Splunk Enterprise 7.2.3 - (Authenticated) Custom App Remote Code Execution 35 WEB Lee Mazzoleni
2019-01-24 Exploit Code Downloads   SirsiDynix e-Library 3.5.x - Cross-Site Scripting 39 WEB AkkuS
2019-01-24 Exploit Code Downloads   SimplePress CMS 1.0.7 - SQL Injection 36 WEB Ihsan Sencan
2019-01-24 Exploit Code Downloads   Joomla! Component JHotelReservation 6.0.7 - SQL Injection 32 WEB Ihsan Sencan
2019-01-24 Exploit Code Downloads   Joomla! Component J-CruisePortal 6.0.4 - SQL Injection 34 WEB Ihsan Sencan
2019-01-23 Exploit Code Downloads   Joomla! Component JMultipleHotelReservation 6.0.7 - SQL Injection 32 WEB Ihsan Sencan
2019-01-23 Exploit Code Downloads   Joomla! Component J-ClassifiedsManager 3.0.5 - SQL Injection 34 WEB Ihsan Sencan
2019-01-23 Exploit Code Downloads   Joomla! Component J-BusinessDirectory 4.9.7 - 'type' SQL Injection 36 WEB Ihsan Sencan
2019-01-23 Exploit Code Downloads   Joomla! Component VMap 1.9.6 - SQL Injection 40 WEB Ihsan Sencan
2019-01-23 Exploit Code Downloads   Joomla! Component vRestaurant 1.9.4 - SQL Injection 32 WEB Ihsan Sencan
2019-01-23 Exploit Code Downloads   Joomla! Component vReview 1.9.11 - SQL Injection 38 WEB Ihsan Sencan
2019-01-23 Exploit Code Downloads   Joomla! Component vAccount 2.0.2 - 'vid' SQL Injection 34 WEB Ihsan Sencan
2019-01-23 Exploit Code Downloads   Joomla! Component vWishlist 1.0.1 - SQL Injection 40 WEB Ihsan Sencan
2019-01-23 Exploit Code Downloads   Joomla! Component vBizz 1.0.7 - Remote Code Execution 35 WEB Ihsan Sencan
2019-01-23 Exploit Code Downloads   Joomla! Component vBizz 1.0.7 - SQL Injection 39 WEB Ihsan Sencan
2019-01-23 Exploit Code Downloads   Nagios XI 5.5.6 - Remote Code Execution / Privilege Escalation 39 WEB Chris Lyne
2019-01-22 Exploit Code Downloads   Joomla! Component Easy Shop 1.2.3 - Local File Inclusion 40 WEB Ihsan Sencan
2019-01-21 Exploit Code Downloads   Adianti Framework 5.5.0 - SQL Injection 39 WEB Joner de Mello Assolin
2019-01-21 Exploit Code Downloads   PHP Uber-style GeoTracking 1.1 - SQL Injection 35 WEB Ihsan Sencan
2019-01-21 Exploit Code Downloads   PHP Dashboards NEW 5.8 - Local File Inclusion 34 WEB Ihsan Sencan
2019-01-21 Exploit Code Downloads   PHP Dashboards NEW 5.8 - 'dashID' SQL Injection 39 WEB Ihsan Sencan
2019-01-21 Exploit Code Downloads   MoneyFlux 1.0 - 'id' SQL Injection 37 WEB Ihsan Sencan