Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2018-05-04 Exploit Code Downloads   IceWarp Mail Server < 11.1.1 - Directory Traversal 23 WEB Trustwave's SpiderLabs
2018-05-04 Exploit Code Downloads   WordPress Plugin WF Cookie Consent 1.1.3 - Cross-Site Scripting 27 WEB B0UG
2014-01-14 Exploit Code Downloads   Apache Struts2 2.0.0 < 2.3.15 - Prefixed Parameters OGNL Injection 31 WEB Takeshi Terada
2018-03-27 Exploit Code Downloads   DLINK DCS-5020L - Remote Code Execution (PoC) 27 WEB Fidus InfoSecurity
2018-05-02 Exploit Code Downloads   Cockpit CMS 0.4.4 < 0.5.5 - Server-Side Request Forgery 36 WEB Qian Wu_ Bo Wang_ Jiawang Zhang
2018-05-01 Exploit Code Downloads   WordPress Plugin Responsive Cookie Consent 1.7 / 1.6 / 1.5 - (Authenticated) Persistent Cross-Site S 26 WEB B0UG
2018-04-30 Exploit Code Downloads   Nagios XI 5.2.6 < 5.2.9 / 5.3 / 5.4 - Chained Remote Root 27 WEB Jared Arave
2018-04-30 Exploit Code Downloads   Nagios XI 5.2.6 < 5.2.9 / 5.3 / 5.4 - Chained Remote Root 24 WEB Jared Arave
2018-04-30 Exploit Code Downloads   WordPress Plugin Form Maker 1.12.20 - CSV Injection 24 WEB Sairam Jetty
2018-04-30 Exploit Code Downloads   Drupal < 7.58 - 'Drupalgeddon3' (Authenticated) Remote Code (Metasploit) 24 WEB SixP4ck3r
2018-04-30 Exploit Code Downloads   Drupal < 7.58 - 'Drupalgeddon3' (Authenticated) Remote Code (Metasploit) 33 WEB SixP4ck3r
2018-04-26 Exploit Code Downloads   Frog CMS 0.9.5 - Persistent Cross-Site Scripting 26 WEB Wenming Jiang
2018-04-26 Exploit Code Downloads   TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Remote Reboot 27 WEB Wadeek
2018-04-26 Exploit Code Downloads   GitList 0.6 - Remote Code Execution 26 WEB Kacper Szurek
2018-04-26 Exploit Code Downloads   MyBB Threads to Link Plugin 1.3 - Cross-Site Scripting 26 WEB 0xB9
2018-04-26 Exploit Code Downloads   October CMS User Plugin 1.4.5 - Persistent Cross-Site Scripting 23 WEB 0xB9
2018-04-26 Exploit Code Downloads   SickRage < v2018.03.09 - Clear-Text Credentials HTTP Response 19 WEB Sven Fassbender
2018-04-26 Exploit Code Downloads   WordPress Plugin WP with Spritz 1.0 - Remote File Inclusion 23 WEB Wadeek
2018-04-26 Exploit Code Downloads   Jfrog Artifactory < 4.16 - Arbitrary File Upload / Remote Command Execution 26 WEB Alessio Sergi
2018-04-25 Exploit Code Downloads   Drupal < 7.58 - 'Drupalgeddon3' (Authenticated) Remote Code Execution (PoC) 20 WEB Blaklis
2018-04-25 Exploit Code Downloads   HRSALE The Ultimate HRM 1.0.2 - Local File Inclusion 22 WEB 8bitsec
2018-04-25 Exploit Code Downloads   HRSALE The Ultimate HRM 1.0.2 - (Authenticated) Cross-Site Scripting 25 WEB 8bitsec
2018-04-25 Exploit Code Downloads   HRSALE The Ultimate HRM 1.0.2 - 'award_id' SQL Injection 22 WEB 8bitsec
2018-04-25 Exploit Code Downloads   HRSALE The Ultimate HRM 1.0.2 - CSV Injection 28 WEB 8bitsec
2018-04-25 Exploit Code Downloads   Blog Master Pro 1.0 - CSV Injection 28 WEB 8bitsec
2018-04-25 Exploit Code Downloads   Shopy Point of Sale 1.0 - CSV Injection 27 WEB 8bitsec
2018-04-24 Exploit Code Downloads   WSO2 Carbon / WSO2 Dashboard Server 5.3.0 - Persistent Cross-Site Scripting 24 WEB SEC Consult
2018-04-24 Exploit Code Downloads   WordPress Plugin Woo Import Export 1.0 - Arbitrary File Deletion 25 WEB Lenon Leite
2018-04-24 Exploit Code Downloads   Ericsson-LG iPECS NMS A.1Ac - Cleartext Credential Disclosure 22 WEB Berk Cem Göksel
2018-04-24 Exploit Code Downloads   Interspire Email Marketer < 6.1.6 - Remote Admin Authentication Bypass 21 WEB devcoinfet
2018-04-24 Exploit Code Downloads   Monstra CMS 3.0.4 - Arbitrary Folder Deletion 27 WEB Wenming Jiang
2018-04-24 Exploit Code Downloads   Open-AudIT 2.1 - CSV Macro Injection 26 WEB Sureshbabu Narvaneni
2018-04-24 Exploit Code Downloads   WUZHI CMS 4.1.0 - Cross-Site Request Forgery 29 WEB jiguang
2018-04-24 Exploit Code Downloads   UK Cookie Consent - Persistent Cross-Site Scripting 28 WEB B0UG
2018-04-23 Exploit Code Downloads   Monstra cms 3.0.4 - Persitent Cross-Site Scripting 23 WEB Wenming Jiang
2018-04-23 Exploit Code Downloads   Drupal avatar_uploader v7.x-1.0-beta8 - Arbitrary File Disclosure 27 WEB Larry W. Cashdollar
2018-04-23 Exploit Code Downloads   Apache CouchDB 1.7.0 / 2.x < 2.1.1 - Remote Privilege Escalation 25 WEB r4wd3r
2018-04-23 Exploit Code Downloads   Ncomputing vSpace Pro 10/11 - Directory Traversal 24 WEB Javier Bernardo
2018-04-23 Exploit Code Downloads   phpMyAdmin 4.8.0 < 4.8.0-1 - Cross-Site Request Forgery 25 WEB revengsh
2018-04-20 Exploit Code Downloads   Cobub Razor 0.8.0 - Physical Path Leakage 25 WEB Kyhvedn
2018-04-18 Exploit Code Downloads   Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities 31 WEB bzyo
2018-04-18 Exploit Code Downloads   Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities 24 WEB bzyo
2018-04-18 Exploit Code Downloads   Joomla! Component JS Jobs 1.2.0 - Cross-Site Request Forgery 24 WEB Sureshbabu Narvaneni
2018-04-18 Exploit Code Downloads   WordPress Plugin Caldera Forms 1.5.9.1 - Cross-Site Scripting 22 WEB Federico Scalco
2018-04-18 Exploit Code Downloads   Lutron Quantum 2.0 - 3.2.243 - Information Disclosure 23 WEB SadFud
2018-04-18 Exploit Code Downloads   Kodi 17.6 - Persistent Cross-Site Scripting 32 WEB Manuel García Cárdenas
2018-04-18 Exploit Code Downloads   Match Clone Script 1.0.4 - Cross-Site Scripting 32 WEB ManhNho
2018-04-18 Exploit Code Downloads   Rvsitebuilder CMS - Database Backup Download 25 WEB Hesam Bazvand
2018-04-18 Exploit Code Downloads   MySQL Squid Access Report 2.1.4 - SQL Injection / Cross-Site Scripting 26 WEB Keerati T.
2018-04-18 Exploit Code Downloads   MySQL Squid Access Report 2.1.4 - SQL Injection / Cross-Site Scripting 28 WEB Keerati T.
2018-04-17 Exploit Code Downloads   Joomla! Component jDownloads 3.2.58 - Cross Site Scripting 23 WEB Sureshbabu Narvaneni
2018-04-16 Exploit Code Downloads   Sophos Cyberoam UTM CR25iNG - 10.6.3 MR-5 - Direct Object Reference 29 WEB Frogy
2018-04-16 Exploit Code Downloads   Cobub Razor 0.8.0 - SQL injection 31 WEB Kyhvedn
2018-04-13 Exploit Code Downloads   Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution 28 WEB Hans Topo & g0tmi1k
2018-04-13 Exploit Code Downloads   Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution (PoC) 25 WEB Vitalii Rudnykh
2018-04-12 Exploit Code Downloads   Joomla! Convert Forms version 2.0.3 - Formula Injection (CSV Injection) 34 WEB Sairam Jetty
2018-04-10 Exploit Code Downloads   WordPress Plugin File Upload 4.3.3 - Stored Cross-Site Scripting (PoC) 30 WEB ManhNho
2018-04-10 Exploit Code Downloads   WordPress Plugin File Upload 4.3.2 - Stored Cross-Site Scripting 27 WEB ManhNho
2018-04-10 Exploit Code Downloads   Dell EMC Avamar and Integrated Data Protection Appliance Installation Manager - Invalid Access Contr 24 WEB SlidingWindow
2018-04-10 Exploit Code Downloads   WUZHI CMS 4.1.0 - Cross-Site Request Forgery (Add User) 28 WEB taoge
2018-04-10 Exploit Code Downloads   WUZHI CMS 4.1.0 - Cross-Site Request Forgery (Add Admin) 30 WEB taoge
2018-04-10 Exploit Code Downloads   WordPress Plugin Activity Log 2.4.0 - Stored Cross-Site Scripting 25 WEB Stefan Broeder
2018-04-10 Exploit Code Downloads   iScripts Easycreate 3.2.1 - Stored Cross-Site Scripting 27 WEB ManhNho
2018-04-09 Exploit Code Downloads   WordPress Plugin Google Drive 2.2 - Remote Code Execution 24 WEB Lenon Leite
2018-04-09 Exploit Code Downloads   iScripts SonicBB 1.0 - Reflected Cross-Site Scripting (PoC) 28 WEB ManhNho
2018-04-09 Exploit Code Downloads   WooCommerce CSV-Importer-Plugin 3.3.6 - Remote Code Execution 20 WEB Lenon Leite
2018-04-09 Exploit Code Downloads   Buddypress Xprofile Custom Fields Type 2.6.3 - Remote Code Execution 23 WEB Lenon Leite
2018-04-09 Exploit Code Downloads   KYOCERA Net Admin 3.4 - Cross-Site Request Forgery (Add Admin) 21 WEB LiquidWorm
2018-04-09 Exploit Code Downloads   KYOCERA Multi-Set Template Editor 3.4 - Out-Of-Band XML External Entity Injection 22 WEB LiquidWorm
2018-04-09 Exploit Code Downloads   CyberArk Password Vault Web Access < 9.9.5 / < 9.10 / 10.1 - Remote Code Execution 25 WEB RedTeam Pentesting
2018-04-09 Exploit Code Downloads   WordPress Plugin Simple Fields 0.2 - 0.3.5 - Local/Remote File Inclusion / Remote Code Execution 28 WEB Graeme Robinson
2018-04-09 Exploit Code Downloads   Yahei PHP Prober 0.4.7 - Cross-Site Scripting 28 WEB ManhNho
2018-04-09 Exploit Code Downloads   WolfCMS 0.8.3.1 - Open Redirection 28 WEB Sureshbabu Narvaneni
2018-04-09 Exploit Code Downloads   MyBB Plugin Recent Threads On Index - Cross-Site Scripting 20 WEB Perileos
2018-04-09 Exploit Code Downloads   Cobub Razor 0.7.2 - Add New Superuser Account 24 WEB ppb
2018-04-09 Exploit Code Downloads   WolfCMS 0.8.3.1 - Cross-Site Request Forgery 27 WEB Sureshbabu Narvaneni
2018-04-09 Exploit Code Downloads   WordPress Plugin Background Takeover < 4.1.4 - Directory Traversal 26 WEB Colette Chamberland
2018-04-06 Exploit Code Downloads   Cobub Razor 0.7.2 - Cross-Site Request Forgery 24 WEB ppb
2018-04-06 Exploit Code Downloads   DotNetNuke DNNarticle Module 11 - Directory Traversal 32 WEB Esmaeil Rahimian
2018-04-06 Exploit Code Downloads   FiberHome VDSL2 Modem HG 150-UB - Authentication Bypass 30 WEB Noman Riffat
2018-04-05 Exploit Code Downloads   WordPress Plugin Activity Log 2.4.0 - Cross-Site Scripting 26 WEB Stefan Broeder
2018-04-05 Exploit Code Downloads   GetSimple CMS 3.3.13 - Cross-Site Scripting 25 WEB Sureshbabu Narvaneni
2018-04-05 Exploit Code Downloads   Z-Blog 1.5.1.1740 - Full Path Disclosure 19 WEB zzw
2018-04-05 Exploit Code Downloads   Z-Blog 1.5.1.1740 - Cross-Site Scripting 20 WEB zzw
2018-04-05 Exploit Code Downloads   YzmCMS 3.6 - Cross-Site Scripting 23 WEB zzw
2018-04-05 Exploit Code Downloads   WebRTC - Private IP Leakage (Metasploit) 23 WEB Dhiraj Mishra
2018-04-05 Exploit Code Downloads   Joomla! Component JS Jobs 1.2.0 - Cross-Site Scripting 26 WEB Sureshbabu Narvaneni
2018-04-05 Exploit Code Downloads   MyBB Plugin Downloads 2.0.3 - Cross-Site Scripting 27 WEB 0xB9
2018-04-04 Exploit Code Downloads   ProcessMaker - Plugin Upload (Metasploit) 34 WEB Metasploit
2018-04-02 Exploit Code Downloads   Secutech RiS-11/RiS-22/RiS-33 - Remote DNS Change 24 WEB Todor Donev
2018-04-02 Exploit Code Downloads   OpenCMS 10.5.3 - Cross-Site Scripting 26 WEB Sureshbabu Narvaneni
2018-04-02 Exploit Code Downloads   OpenCMS 10.5.3 - Cross-Site Request Forgery 29 WEB Sureshbabu Narvaneni
2018-04-02 Exploit Code Downloads   LifeSize ClearSea 3.1.4 - Directory Traversal 28 WEB rsp3ar
2018-04-02 Exploit Code Downloads   DLink DIR-601 - Admin Password Disclosure 31 WEB Kevin Randall
2018-04-02 Exploit Code Downloads   VideoFlow Digital Video Protection (DVP) 2.10 - Hard-Coded Credentials 27 WEB LiquidWorm
2018-04-02 Exploit Code Downloads   VideoFlow Digital Video Protection (DVP) 2.10 - Directory Traversal 29 WEB LiquidWorm
2018-04-02 Exploit Code Downloads   WampServer 3.1.2 - Cross-Site Request Forgery 26 WEB Vipin Chaudhary
2018-04-02 Exploit Code Downloads   WampServer 3.1.1 - Cross-Site Scripting / Cross-Site Request Forgery 28 WEB Vipin Chaudhary
2018-04-02 Exploit Code Downloads   Frog CMS 0.9.5 - Cross-Site Request Forgery (Add User) 25 WEB Samrat Das
2018-03-30 Exploit Code Downloads   Tenda FH303/A300 Firmware v5.07.68_EN - Remote DNS Change 26 WEB Todor Donev
2018-03-30 Exploit Code Downloads   Tenda W3002R/A302/w309r Wireless Router v5.07.64_en - Remote DNS Change (PoC) 28 WEB Todor Donev
2018-03-30 Exploit Code Downloads   Vtiger CRM 6.3.0 - (Authenticated) Arbitrary File Upload (Metasploit) 24 WEB Touhid M.Shaikh
2018-03-30 Exploit Code Downloads   D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router - Authentication Bypass 25 WEB Gem George
2018-03-30 Exploit Code Downloads   Tenda W316R Wireless Router 5.07.50 - Remote DNS Change 26 WEB Todor Donev
2018-03-30 Exploit Code Downloads   osCommerce 2.3.4.1 - Remote Code Execution 27 WEB Simon Scannell
2018-03-30 Exploit Code Downloads   Tenda W308R v2 Wireless Router 5.07.48 - (Cookie Session) Remote DNS Change 27 WEB Todor Donev
2018-03-30 Exploit Code Downloads   WordPress Plugin WP Security Audit Log 3.1.1 - Sensitive Information Disclosure 23 WEB Colette Chamberland
2018-03-30 Exploit Code Downloads   Joomla! Component AcySMS 3.5.0 - CSV Macro Injection 26 WEB Sureshbabu Narvaneni
2018-03-30 Exploit Code Downloads   Joomla! Component Acymailing Starter 5.9.5 - CSV Macro Injection 33 WEB Sureshbabu Narvaneni
2018-03-30 Exploit Code Downloads   Homematic CCU2 2.29.23 - Remote Command Execution 27 WEB Patrick Muench and Gregor Kopf
2018-03-30 Exploit Code Downloads   WordPress Plugin Contact Form 7 to Database Extension 2.10.32 - CSV Injection 30 WEB Stefan Broeder
2018-03-30 Exploit Code Downloads   WordPress Plugin Relevanssi 4.0.4 - Reflected Cross-Site Scripting 27 WEB Stefan Broeder
2018-03-30 Exploit Code Downloads   MiniCMS 1.10 - Cross-Site Request Forgery 25 WEB zixian
2018-03-30 Exploit Code Downloads   Homematic CCU2 2.29.23 - Arbitrary File Write 25 WEB Patrick Muench and Gregor Kopf
2018-03-30 Exploit Code Downloads   Open-AuditIT Professional 2.1 - Cross-Site Request Forgery 22 WEB Nilesh Sapariya
2018-03-29 Exploit Code Downloads   Joomla! Component Fields - SQLi Remote Code Execution (Metasploit) 25 WEB Metasploit
2018-03-29 Exploit Code Downloads   Joomla! Component Fields - SQLi Remote Code Execution (Metasploit) 25 WEB Metasploit
2014-11-03 Exploit Code Downloads   Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Admin Session) 25 WEB Stefan Horst
2018-03-28 Exploit Code Downloads   Open-AuditIT Professional 2.1 - Cross-Site Scripting 20 WEB Nilesh Sapariya
2018-03-28 Exploit Code Downloads   Tenda N11 Wireless Router 5.07.43_en_NEX01 - Remote DNS Change 20 WEB Todor Donev
2018-03-28 Exploit Code Downloads   Microsoft Windows Remote Assistance - XML External Entity Injection 26 WEB Nabeel Ahmed
2018-03-28 Exploit Code Downloads   TwonkyMedia Server 7.0.11-8.5 - Persistent Cross-Site Scripting 21 WEB Sven Fassbender
2018-03-28 Exploit Code Downloads   TwonkyMedia Server 7.0.11-8.5 - Directory Traversal 27 WEB Sven Fassbender
2018-03-27 Exploit Code Downloads   ClipBucket - 'beats_uploader' Arbitrary File Upload (Metasploit) 26 WEB Metasploit
2018-03-27 Exploit Code Downloads   ClipBucket - 'beats_uploader' Arbitrary File Upload (Metasploit) 28 WEB Metasploit