Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2018-04-09   WordPress Plugin Google Drive 2.2 - Remote Code Execution 7 WEB Lenon Leite
2018-04-09   iScripts SonicBB 1.0 - Reflected Cross-Site Scripting (PoC) 6 WEB ManhNho
2018-04-09   WooCommerce CSV-Importer-Plugin 3.3.6 - Remote Code Execution 7 WEB Lenon Leite
2018-04-09   Buddypress Xprofile Custom Fields Type 2.6.3 - Remote Code Execution 8 WEB Lenon Leite
2018-04-09   KYOCERA Net Admin 3.4 - Cross-Site Request Forgery (Add Admin) 7 WEB LiquidWorm
2018-04-09   KYOCERA Multi-Set Template Editor 3.4 - Out-Of-Band XML External Entity Injection 7 WEB LiquidWorm
2018-04-09   CyberArk Password Vault Web Access < 9.9.5 / < 9.10 / 10.1 - Remote Code Execution 11 WEB RedTeam Pentesting
2018-04-09   WordPress Plugin Simple Fields 0.2 - 0.3.5 - Local/Remote File Inclusion / Remote Code Execution 12 WEB Graeme Robinson
2018-04-09   Yahei PHP Prober 0.4.7 - Cross-Site Scripting 10 WEB ManhNho
2018-04-09   WolfCMS 0.8.3.1 - Open Redirection 9 WEB Sureshbabu Narvaneni
2018-04-09   MyBB Plugin Recent Threads On Index - Cross-Site Scripting 7 WEB Perileos
2018-04-09   Cobub Razor 0.7.2 - Add New Superuser Account 9 WEB ppb
2018-04-09   WolfCMS 0.8.3.1 - Cross-Site Request Forgery 12 WEB Sureshbabu Narvaneni
2018-04-09   WordPress Plugin Background Takeover < 4.1.4 - Directory Traversal 8 WEB Colette Chamberland
2018-04-06   Cobub Razor 0.7.2 - Cross-Site Request Forgery 10 WEB ppb
2018-04-06   DotNetNuke DNNarticle Module 11 - Directory Traversal 11 WEB Esmaeil Rahimian
2018-04-06   FiberHome VDSL2 Modem HG 150-UB - Authentication Bypass 12 WEB Noman Riffat
2018-04-05   WordPress Plugin Activity Log 2.4.0 - Cross-Site Scripting 8 WEB Stefan Broeder
2018-04-05   GetSimple CMS 3.3.13 - Cross-Site Scripting 8 WEB Sureshbabu Narvaneni
2018-04-05   Z-Blog 1.5.1.1740 - Full Path Disclosure 6 WEB zzw
2018-04-05   Z-Blog 1.5.1.1740 - Cross-Site Scripting 7 WEB zzw
2018-04-05   YzmCMS 3.6 - Cross-Site Scripting 6 WEB zzw
2018-04-05   WebRTC - Private IP Leakage (Metasploit) 8 WEB Dhiraj Mishra
2018-04-05   Joomla! Component JS Jobs 1.2.0 - Cross-Site Scripting 8 WEB Sureshbabu Narvaneni
2018-04-05   MyBB Plugin Downloads 2.0.3 - Cross-Site Scripting 9 WEB 0xB9
2018-04-04   ProcessMaker - Plugin Upload (Metasploit) 11 WEB Metasploit
2018-04-02   Secutech RiS-11/RiS-22/RiS-33 - Remote DNS Change 7 WEB Todor Donev
2018-04-02   OpenCMS 10.5.3 - Cross-Site Scripting 7 WEB Sureshbabu Narvaneni
2018-04-02   OpenCMS 10.5.3 - Cross-Site Request Forgery 11 WEB Sureshbabu Narvaneni
2018-04-02   LifeSize ClearSea 3.1.4 - Directory Traversal 10 WEB rsp3ar
2018-04-02   DLink DIR-601 - Admin Password Disclosure 11 WEB Kevin Randall
2018-04-02   VideoFlow Digital Video Protection (DVP) 2.10 - Hard-Coded Credentials 10 WEB LiquidWorm
2018-04-02   VideoFlow Digital Video Protection (DVP) 2.10 - Directory Traversal 8 WEB LiquidWorm
2018-04-02   WampServer 3.1.2 - Cross-Site Request Forgery 7 WEB Vipin Chaudhary
2018-04-02   WampServer 3.1.1 - Cross-Site Scripting / Cross-Site Request Forgery 10 WEB Vipin Chaudhary
2018-04-02   Frog CMS 0.9.5 - Cross-Site Request Forgery (Add User) 9 WEB Samrat Das
2018-03-30   Tenda FH303/A300 Firmware v5.07.68_EN - Remote DNS Change 9 WEB Todor Donev
2018-03-30   Tenda W3002R/A302/w309r Wireless Router v5.07.64_en - Remote DNS Change (PoC) 10 WEB Todor Donev
2018-03-30   Vtiger CRM 6.3.0 - (Authenticated) Arbitrary File Upload (Metasploit) 9 WEB Touhid M.Shaikh
2018-03-30   D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router - Authentication Bypass 9 WEB Gem George
2018-03-30   Tenda W316R Wireless Router 5.07.50 - Remote DNS Change 10 WEB Todor Donev
2018-03-30   osCommerce 2.3.4.1 - Remote Code Execution 9 WEB Simon Scannell
2018-03-30   Tenda W308R v2 Wireless Router 5.07.48 - (Cookie Session) Remote DNS Change 8 WEB Todor Donev
2018-03-30   WordPress Plugin WP Security Audit Log 3.1.1 - Sensitive Information Disclosure 9 WEB Colette Chamberland
2018-03-30   Joomla! Component AcySMS 3.5.0 - CSV Macro Injection 8 WEB Sureshbabu Narvaneni
2018-03-30   Joomla! Component Acymailing Starter 5.9.5 - CSV Macro Injection 8 WEB Sureshbabu Narvaneni
2018-03-30   Homematic CCU2 2.29.23 - Remote Command Execution 7 WEB Patrick Muench and Gregor Kopf
2018-03-30   WordPress Plugin Contact Form 7 to Database Extension 2.10.32 - CSV Injection 10 WEB Stefan Broeder
2018-03-30   WordPress Plugin Relevanssi 4.0.4 - Reflected Cross-Site Scripting 9 WEB Stefan Broeder
2018-03-30   MiniCMS 1.10 - Cross-Site Request Forgery 10 WEB zixian
2018-03-30   Homematic CCU2 2.29.23 - Arbitrary File Write 8 WEB Patrick Muench and Gregor Kopf
2018-03-30   Open-AuditIT Professional 2.1 - Cross-Site Request Forgery 8 WEB Nilesh Sapariya
2018-03-29   Joomla! Component Fields - SQLi Remote Code Execution (Metasploit) 8 WEB Metasploit
2018-03-29   Joomla! Component Fields - SQLi Remote Code Execution (Metasploit) 8 WEB Metasploit
2014-11-03   Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Admin Session) 9 WEB Stefan Horst
2018-03-28   Open-AuditIT Professional 2.1 - Cross-Site Scripting 6 WEB Nilesh Sapariya
2018-03-28   Tenda N11 Wireless Router 5.07.43_en_NEX01 - Remote DNS Change 6 WEB Todor Donev
2018-03-28   Microsoft Windows Remote Assistance - XML External Entity Injection 7 WEB Nabeel Ahmed
2018-03-28   TwonkyMedia Server 7.0.11-8.5 - Persistent Cross-Site Scripting 8 WEB Sven Fassbender
2018-03-28   TwonkyMedia Server 7.0.11-8.5 - Directory Traversal 11 WEB Sven Fassbender
2018-03-27   ClipBucket - 'beats_uploader' Arbitrary File Upload (Metasploit) 9 WEB Metasploit
2018-03-27   ClipBucket - 'beats_uploader' Arbitrary File Upload (Metasploit) 10 WEB Metasploit
2018-03-26   Laravel Log Viewer < 0.13.0 - Local File Download 12 WEB Haboob Team
2018-03-23   WordPress Plugin Site Editor 1.1.1 - Local File Inclusion 9 WEB Nicolas Buzy-Debat
2018-03-23   MyBB Plugin Last User's Threads in Profile Plugin 1.2 - Persistent Cross-Site Scripting 10 WEB 0xB9
2018-03-23   TL-WR720N 150Mbps Wireless N Router - Cross-Site Request Forgery 11 WEB Mans van Someren
2018-03-23   Hikvision IP Camera versions 5.2.0 - 5.3.9 (Builds 140721 < 170109) - Access Control Bypass 13 WEB Matamorphosis
2018-03-20   Cisco node-jos < 0.11.0 - Re-sign Tokens 11 WEB zioBlack
2018-03-20   Coship RT3052 Wireless Router - Persistent Cross-Site Scripting 11 WEB Sayan Chatterjee
2018-03-20   Vehicle Sales Management System - Multiple Vulnerabilities 11 WEB Sing
2018-03-20   Intelbras Telefone IP TIP200 LITE - Local File Disclosure 10 WEB anhax0r
2018-03-16   Contec Smart Home 4.15 - Unauthorized Password Reset 10 WEB Z3ro0ne
2018-03-15   Spring Data REST < 2.6.9 (Ingalls SR9) / 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution 14 WEB Antonio Francesco Sardella
2018-03-15   WordPress Plugin Duplicator 1.2.32 - Cross-Site Scripting 6 WEB Stefan Broeder
2018-03-13   Tuleap 9.17.99.189 - Blind SQL Injection 12 WEB Cristiano Maruti
2018-03-13   SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities 10 WEB SEC Consult
2018-03-12   ACL Analytics 11.X - 13.0.0.579 - Arbitrary Code Execution 13 WEB Clutchisback1
2018-03-12   Advantech WebAccess < 8.3 - Directory Traversal / Remote Code Execution 12 WEB Chris Lyne
2018-03-12   TextPattern 4.6.2 - 'qty' SQL Injection 11 WEB Manuel García Cárdenas
2018-03-12   Prisma Industriale Checkweigher PrismaWEB 1.21 - Hard-Coded Credentials 11 WEB LiquidWorm
2018-03-12   ManageEngine Applications Manager 13.5 - Remote Code Execution (Metasploit) 12 WEB Mehmet Ince
2018-03-09   Bacula-Web < 8.0.0-rc2 - SQL Injection 10 WEB Gustavo Sorondo
2018-03-07   antMan 0.9.0c - Authentication Bypass 13 WEB Joshua Bowser
2018-03-07   Redaxo CMS Addon MyEvents 2.2.1 - SQL Injection 8 WEB h0n1gsp3cht
2018-03-06   Bravo Tejari Web Portal - Cross-Site Request Forgery 8 WEB Arvind V
2017-07-01   Joomla! Component Joomanager 2.0.0 - 'com_Joomanager' Arbitrary File Download 12 WEB Luth1er
2018-03-05   ClipBucket < 4.0.0 - Release 4902 - Command Injection / File Upload / SQL Injection 12 WEB SEC Consult
2018-03-05   ClipBucket < 4.0.0 - Release 4902 - Command Injection / File Upload / SQL Injection 11 WEB SEC Consult
2018-02-22   Parallels Remote Application Server 15.5 - Path Traversal 16 WEB Nicolas Markitanis
2018-03-02   uWSGI < 2.0.17 - Directory Traversal 13 WEB Marios Nicolaides
2018-03-02   antMan < 0.9.1a - Authentication Bypass 12 WEB Joshua Bowser
2018-03-02   D-Link DIR-600M Wireless - Cross-Site Scripting 14 WEB Prasenjit Kanti Paul
2018-02-28   Routers2 2.24 - Cross-Site Scripting 11 WEB Lorenzo Di Fuccia
2018-02-27   Concrete5 CMS < 8.3.0 - Username / Comments Enumeration 9 WEB Chapman Schleiss
2018-02-27   CMS Made Simple 2.1.6 - Remote Code Execution 12 WEB Keerati T.
2018-02-27   School Management Script 3.0.4 - Authentication Bypass 12 WEB Samiran Santra
2018-02-27   MyBB My Arcade Plugin 1.3 - Cross-Site Scripting 14 WEB 0xB9
2018-02-22   Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities 10 WEB Core Security
2018-02-22   Joomla! Component OS Property Real Estate 3.12.7 - SQL Injection 9 WEB Ihsan Sencan
2018-02-22   Joomla! Component Proclaim 9.1.1 - Arbitrary File Upload 9 WEB Ihsan Sencan
2018-02-22   Joomla! Component CheckList 1.1.1 - SQL Injection 9 WEB Ihsan Sencan
2018-02-22   Joomla! Component Alexandria Book Library 3.1.2 - 'letter' SQL Injection 9 WEB Ihsan Sencan
2018-02-22   Joomla! Component Ek Rishta 2.9 - SQL Injection 7 WEB Ihsan Sencan
2018-02-22   Joomla! Component PrayerCenter 3.0.2 - 'sessionid' SQL Injection 8 WEB Ihsan Sencan
2018-02-22   Joomla! Component Proclaim 9.1.1 - Backup File Download 9 WEB Ihsan Sencan
2018-02-22   Joomla! Component CW Tags 2.0.6 - SQL Injection 11 WEB Ihsan Sencan
2018-02-19   October CMS < 1.0.431 - Cross-Site Scripting 14 WEB Samrat Das
2018-02-16   Oracle Primavera P6 Enterprise Project Portfolio Management - HTTP Response Splitting 14 WEB Marios Nicolaides
2018-02-16   PSNews Website 1.0.0 - 'Keywords' SQL Injection 12 WEB L0RD
2018-02-16   PHIMS - Hospital Management Information System - 'Password' SQL Injection 9 WEB L0RD
2018-02-16   Front Accounting ERP 2.4.3 - Cross-Site Request Forgery 10 WEB Samrat Das
2018-02-16   Joomla! Component Saxum Picker 3.2.10 - SQL Injection 9 WEB Ihsan Sencan
2018-02-16   Joomla! Component SquadManagement 1.0.3 - SQL Injection 8 WEB Ihsan Sencan
2018-02-16   Joomla! Component Saxum Numerology 3.0.4 - SQL Injection 9 WEB Ihsan Sencan
2018-02-16   Joomla! Component Saxum Astro 4.0.14 - SQL Injection 12 WEB Ihsan Sencan
2018-02-16   Joomla! Component ccNewsletter 2.x.x 'id' - SQL Injection 10 WEB Ihsan Sencan
2018-02-16   Joomla! Pinterest Clone Social Pinboard 2.0 - SQL Injection 10 WEB Ihsan Sencan
2018-02-16   Joomla! Component Timetable Responsive Schedule For Joomla! 1.5 - 'alias' SQL Injection 9 WEB Ihsan Sencan
2018-02-16   Joomla! Component Staff Master 1.0 RC 1 - SQL Injection 10 WEB Ihsan Sencan
2018-02-16   Joomla! Component Solidres 2.5.1 - SQL Injection 11 WEB Ihsan Sencan
2018-02-16   Joomla! Component Smart Shoutbox 3.0.0 - SQL Injection 12 WEB Ihsan Sencan
2018-02-16   Joomla! Component SimpleCalendar 3.1.9 - SQL Injection 10 WEB Ihsan Sencan
2018-02-16   Joomla! Component Realpin 1.5.04 - SQL Injection 10 WEB Ihsan Sencan
2018-02-16   Joomla! Component Project Log 1.5.3 - 'search' SQL Injection 13 WEB Ihsan Sencan
2018-02-16   Joomla! Component NeoRecruit 4.1 - SQL Injection 12 WEB Ihsan Sencan