|
2018-04-09
|
|
WolfCMS 0.8.3.1 - Open Redirection
|
39 |
WEB
|
Sureshbabu Narvaneni
|
|
2018-04-09
|
|
MyBB Plugin Recent Threads On Index - Cross-Site Scripting
|
34 |
WEB
|
Perileos
|
|
2018-04-09
|
|
Cobub Razor 0.7.2 - Add New Superuser Account
|
35 |
WEB
|
ppb
|
|
2018-04-09
|
|
WolfCMS 0.8.3.1 - Cross-Site Request Forgery
|
38 |
WEB
|
Sureshbabu Narvaneni
|
|
2018-04-09
|
|
WordPress Plugin Background Takeover < 4.1.4 - Directory Traversal
|
38 |
WEB
|
Colette Chamberland
|
|
2018-04-06
|
|
Cobub Razor 0.7.2 - Cross-Site Request Forgery
|
39 |
WEB
|
ppb
|
|
2018-04-06
|
|
DotNetNuke DNNarticle Module 11 - Directory Traversal
|
43 |
WEB
|
Esmaeil Rahimian
|
|
2018-04-06
|
|
FiberHome VDSL2 Modem HG 150-UB - Authentication Bypass
|
43 |
WEB
|
Noman Riffat
|
|
2018-04-05
|
|
WordPress Plugin Activity Log 2.4.0 - Cross-Site Scripting
|
36 |
WEB
|
Stefan Broeder
|
|
2018-04-05
|
|
GetSimple CMS 3.3.13 - Cross-Site Scripting
|
38 |
WEB
|
Sureshbabu Narvaneni
|
|
2018-04-05
|
|
Z-Blog 1.5.1.1740 - Full Path Disclosure
|
32 |
WEB
|
zzw
|
|
2018-04-05
|
|
Z-Blog 1.5.1.1740 - Cross-Site Scripting
|
32 |
WEB
|
zzw
|
|
2018-04-05
|
|
YzmCMS 3.6 - Cross-Site Scripting
|
37 |
WEB
|
zzw
|
|
2018-04-05
|
|
WebRTC - Private IP Leakage (Metasploit)
|
35 |
WEB
|
Dhiraj Mishra
|
|
2018-04-05
|
|
Joomla! Component JS Jobs 1.2.0 - Cross-Site Scripting
|
38 |
WEB
|
Sureshbabu Narvaneni
|
|
2018-04-05
|
|
MyBB Plugin Downloads 2.0.3 - Cross-Site Scripting
|
39 |
WEB
|
0xB9
|
|
2018-04-04
|
|
ProcessMaker - Plugin Upload (Metasploit)
|
63 |
WEB
|
Metasploit
|
|
2018-04-02
|
|
Secutech RiS-11/RiS-22/RiS-33 - Remote DNS Change
|
36 |
WEB
|
Todor Donev
|
|
2018-04-02
|
|
OpenCMS 10.5.3 - Cross-Site Scripting
|
38 |
WEB
|
Sureshbabu Narvaneni
|
|
2018-04-02
|
|
OpenCMS 10.5.3 - Cross-Site Request Forgery
|
39 |
WEB
|
Sureshbabu Narvaneni
|
|
2018-04-02
|
|
LifeSize ClearSea 3.1.4 - Directory Traversal
|
39 |
WEB
|
rsp3ar
|
|
2018-04-02
|
|
DLink DIR-601 - Admin Password Disclosure
|
41 |
WEB
|
Kevin Randall
|
|
2018-04-02
|
|
VideoFlow Digital Video Protection (DVP) 2.10 - Hard-Coded Credentials
|
39 |
WEB
|
LiquidWorm
|
|
2018-04-02
|
|
VideoFlow Digital Video Protection (DVP) 2.10 - Directory Traversal
|
39 |
WEB
|
LiquidWorm
|
|
2018-04-02
|
|
WampServer 3.1.2 - Cross-Site Request Forgery
|
37 |
WEB
|
Vipin Chaudhary
|
|
2018-04-02
|
|
WampServer 3.1.1 - Cross-Site Scripting / Cross-Site Request Forgery
|
39 |
WEB
|
Vipin Chaudhary
|
|
2018-04-02
|
|
Frog CMS 0.9.5 - Cross-Site Request Forgery (Add User)
|
37 |
WEB
|
Samrat Das
|
|
2018-03-30
|
|
Tenda FH303/A300 Firmware v5.07.68_EN - Remote DNS Change
|
36 |
WEB
|
Todor Donev
|
|
2018-03-30
|
|
Tenda W3002R/A302/w309r Wireless Router v5.07.64_en - Remote DNS Change (PoC)
|
39 |
WEB
|
Todor Donev
|
|
2018-03-30
|
|
Vtiger CRM 6.3.0 - (Authenticated) Arbitrary File Upload (Metasploit)
|
34 |
WEB
|
Touhid M.Shaikh
|
|
2018-03-30
|
|
D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router - Authentication Bypass
|
36 |
WEB
|
Gem George
|
|
2018-03-30
|
|
Tenda W316R Wireless Router 5.07.50 - Remote DNS Change
|
36 |
WEB
|
Todor Donev
|
|
2018-03-30
|
|
osCommerce 2.3.4.1 - Remote Code Execution
|
39 |
WEB
|
Simon Scannell
|
|
2018-03-30
|
|
Tenda W308R v2 Wireless Router 5.07.48 - (Cookie Session) Remote DNS Change
|
37 |
WEB
|
Todor Donev
|
|
2018-03-30
|
|
WordPress Plugin WP Security Audit Log 3.1.1 - Sensitive Information Disclosure
|
33 |
WEB
|
Colette Chamberland
|
|
2018-03-30
|
|
Joomla! Component AcySMS 3.5.0 - CSV Macro Injection
|
40 |
WEB
|
Sureshbabu Narvaneni
|
|
2018-03-30
|
|
Joomla! Component Acymailing Starter 5.9.5 - CSV Macro Injection
|
44 |
WEB
|
Sureshbabu Narvaneni
|
|
2018-03-30
|
|
Homematic CCU2 2.29.23 - Remote Command Execution
|
38 |
WEB
|
Patrick Muench and Gregor Kopf
|
|
2018-03-30
|
|
WordPress Plugin Contact Form 7 to Database Extension 2.10.32 - CSV Injection
|
40 |
WEB
|
Stefan Broeder
|
|
2018-03-30
|
|
WordPress Plugin Relevanssi 4.0.4 - Reflected Cross-Site Scripting
|
37 |
WEB
|
Stefan Broeder
|
|
2018-03-30
|
|
MiniCMS 1.10 - Cross-Site Request Forgery
|
35 |
WEB
|
zixian
|
|
2018-03-30
|
|
Homematic CCU2 2.29.23 - Arbitrary File Write
|
35 |
WEB
|
Patrick Muench and Gregor Kopf
|
|
2018-03-30
|
|
Open-AuditIT Professional 2.1 - Cross-Site Request Forgery
|
34 |
WEB
|
Nilesh Sapariya
|
|
2018-03-29
|
|
Joomla! Component Fields - SQLi Remote Code Execution (Metasploit)
|
37 |
WEB
|
Metasploit
|
|
2018-03-29
|
|
Joomla! Component Fields - SQLi Remote Code Execution (Metasploit)
|
36 |
WEB
|
Metasploit
|
|
2014-11-03
|
|
Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Admin Session)
|
34 |
WEB
|
Stefan Horst
|
|
2018-03-28
|
|
Open-AuditIT Professional 2.1 - Cross-Site Scripting
|
31 |
WEB
|
Nilesh Sapariya
|
|
2018-03-28
|
|
Tenda N11 Wireless Router 5.07.43_en_NEX01 - Remote DNS Change
|
30 |
WEB
|
Todor Donev
|
|
2018-03-28
|
|
Microsoft Windows Remote Assistance - XML External Entity Injection
|
35 |
WEB
|
Nabeel Ahmed
|
|
2018-03-28
|
|
TwonkyMedia Server 7.0.11-8.5 - Persistent Cross-Site Scripting
|
30 |
WEB
|
Sven Fassbender
|
|
2018-03-28
|
|
TwonkyMedia Server 7.0.11-8.5 - Directory Traversal
|
42 |
WEB
|
Sven Fassbender
|
|
2018-03-27
|
|
ClipBucket - 'beats_uploader' Arbitrary File Upload (Metasploit)
|
36 |
WEB
|
Metasploit
|
|
2018-03-27
|
|
ClipBucket - 'beats_uploader' Arbitrary File Upload (Metasploit)
|
38 |
WEB
|
Metasploit
|
|
2018-03-26
|
|
Laravel Log Viewer < 0.13.0 - Local File Download
|
40 |
WEB
|
Haboob Team
|
|
2018-03-23
|
|
WordPress Plugin Site Editor 1.1.1 - Local File Inclusion
|
39 |
WEB
|
Nicolas Buzy-Debat
|
|
2018-03-23
|
|
MyBB Plugin Last User's Threads in Profile Plugin 1.2 - Persistent Cross-Site Scripting
|
36 |
WEB
|
0xB9
|
|
2018-03-23
|
|
TL-WR720N 150Mbps Wireless N Router - Cross-Site Request Forgery
|
38 |
WEB
|
Mans van Someren
|
|
2018-03-23
|
|
Hikvision IP Camera versions 5.2.0 - 5.3.9 (Builds 140721 < 170109) - Access Control Bypass
|
40 |
WEB
|
Matamorphosis
|
|
2018-03-20
|
|
Cisco node-jos < 0.11.0 - Re-sign Tokens
|
35 |
WEB
|
zioBlack
|
|
2018-03-20
|
|
Coship RT3052 Wireless Router - Persistent Cross-Site Scripting
|
40 |
WEB
|
Sayan Chatterjee
|
|
2018-03-20
|
|
Vehicle Sales Management System - Multiple Vulnerabilities
|
39 |
WEB
|
Sing
|
|
2018-03-20
|
|
Intelbras Telefone IP TIP200 LITE - Local File Disclosure
|
34 |
WEB
|
anhax0r
|
|
2018-03-16
|
|
Contec Smart Home 4.15 - Unauthorized Password Reset
|
38 |
WEB
|
Z3ro0ne
|
|
2018-03-15
|
|
Spring Data REST < 2.6.9 (Ingalls SR9) / 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution
|
44 |
WEB
|
Antonio Francesco Sardella
|
|
2018-03-15
|
|
WordPress Plugin Duplicator 1.2.32 - Cross-Site Scripting
|
32 |
WEB
|
Stefan Broeder
|
|
2018-03-13
|
|
Tuleap 9.17.99.189 - Blind SQL Injection
|
42 |
WEB
|
Cristiano Maruti
|
|
2018-03-13
|
|
SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities
|
39 |
WEB
|
SEC Consult
|
|
2018-03-12
|
|
ACL Analytics 11.X - 13.0.0.579 - Arbitrary Code Execution
|
44 |
WEB
|
Clutchisback1
|
|
2018-03-12
|
|
Advantech WebAccess < 8.3 - Directory Traversal / Remote Code Execution
|
41 |
WEB
|
Chris Lyne
|
|
2018-03-12
|
|
TextPattern 4.6.2 - 'qty' SQL Injection
|
38 |
WEB
|
Manuel García Cárdenas
|
|
2018-03-12
|
|
Prisma Industriale Checkweigher PrismaWEB 1.21 - Hard-Coded Credentials
|
44 |
WEB
|
LiquidWorm
|
|
2018-03-12
|
|
ManageEngine Applications Manager 13.5 - Remote Code Execution (Metasploit)
|
41 |
WEB
|
Mehmet Ince
|
|
2018-03-09
|
|
Bacula-Web < 8.0.0-rc2 - SQL Injection
|
38 |
WEB
|
Gustavo Sorondo
|
|
2018-03-07
|
|
antMan 0.9.0c - Authentication Bypass
|
42 |
WEB
|
Joshua Bowser
|
|
2018-03-07
|
|
Redaxo CMS Addon MyEvents 2.2.1 - SQL Injection
|
34 |
WEB
|
h0n1gsp3cht
|
|
2018-03-06
|
|
Bravo Tejari Web Portal - Cross-Site Request Forgery
|
37 |
WEB
|
Arvind V
|
|
2017-07-01
|
|
Joomla! Component Joomanager 2.0.0 - 'com_Joomanager' Arbitrary File Download
|
35 |
WEB
|
Luth1er
|
|
2018-03-05
|
|
ClipBucket < 4.0.0 - Release 4902 - Command Injection / File Upload / SQL Injection
|
43 |
WEB
|
SEC Consult
|
|
2018-03-05
|
|
ClipBucket < 4.0.0 - Release 4902 - Command Injection / File Upload / SQL Injection
|
39 |
WEB
|
SEC Consult
|
|
2018-02-22
|
|
Parallels Remote Application Server 15.5 - Path Traversal
|
45 |
WEB
|
Nicolas Markitanis
|
|
2018-03-02
|
|
uWSGI < 2.0.17 - Directory Traversal
|
40 |
WEB
|
Marios Nicolaides
|
|
2018-03-02
|
|
antMan < 0.9.1a - Authentication Bypass
|
39 |
WEB
|
Joshua Bowser
|
|
2018-03-02
|
|
D-Link DIR-600M Wireless - Cross-Site Scripting
|
41 |
WEB
|
Prasenjit Kanti Paul
|
|
2018-02-28
|
|
Routers2 2.24 - Cross-Site Scripting
|
42 |
WEB
|
Lorenzo Di Fuccia
|
|
2018-02-27
|
|
Concrete5 CMS < 8.3.0 - Username / Comments Enumeration
|
35 |
WEB
|
Chapman Schleiss
|
|
2018-02-27
|
|
CMS Made Simple 2.1.6 - Remote Code Execution
|
38 |
WEB
|
Keerati T.
|
|
2018-02-27
|
|
School Management Script 3.0.4 - Authentication Bypass
|
40 |
WEB
|
Samiran Santra
|
|
2018-02-27
|
|
MyBB My Arcade Plugin 1.3 - Cross-Site Scripting
|
44 |
WEB
|
0xB9
|
|
2018-02-22
|
|
Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities
|
43 |
WEB
|
Core Security
|
|
2018-02-22
|
|
Joomla! Component OS Property Real Estate 3.12.7 - SQL Injection
|
35 |
WEB
|
Ihsan Sencan
|
|
2018-02-22
|
|
Joomla! Component Proclaim 9.1.1 - Arbitrary File Upload
|
37 |
WEB
|
Ihsan Sencan
|
|
2018-02-22
|
|
Joomla! Component CheckList 1.1.1 - SQL Injection
|
40 |
WEB
|
Ihsan Sencan
|
|
2018-02-22
|
|
Joomla! Component Alexandria Book Library 3.1.2 - 'letter' SQL Injection
|
38 |
WEB
|
Ihsan Sencan
|
|
2018-02-22
|
|
Joomla! Component Ek Rishta 2.9 - SQL Injection
|
35 |
WEB
|
Ihsan Sencan
|
|
2018-02-22
|
|
Joomla! Component PrayerCenter 3.0.2 - 'sessionid' SQL Injection
|
40 |
WEB
|
Ihsan Sencan
|
|
2018-02-22
|
|
Joomla! Component Proclaim 9.1.1 - Backup File Download
|
40 |
WEB
|
Ihsan Sencan
|
|
2018-02-22
|
|
Joomla! Component CW Tags 2.0.6 - SQL Injection
|
40 |
WEB
|
Ihsan Sencan
|
|
2018-02-19
|
|
October CMS < 1.0.431 - Cross-Site Scripting
|
41 |
WEB
|
Samrat Das
|
|
2018-02-16
|
|
Oracle Primavera P6 Enterprise Project Portfolio Management - HTTP Response Splitting
|
45 |
WEB
|
Marios Nicolaides
|
|
2018-02-16
|
|
PSNews Website 1.0.0 - 'Keywords' SQL Injection
|
41 |
WEB
|
L0RD
|
|
2018-02-16
|
|
PHIMS - Hospital Management Information System - 'Password' SQL Injection
|
37 |
WEB
|
L0RD
|
|
2018-02-16
|
|
Front Accounting ERP 2.4.3 - Cross-Site Request Forgery
|
40 |
WEB
|
Samrat Das
|
|
2018-02-16
|
|
Joomla! Component Saxum Picker 3.2.10 - SQL Injection
|
38 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component SquadManagement 1.0.3 - SQL Injection
|
36 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component Saxum Numerology 3.0.4 - SQL Injection
|
35 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component Saxum Astro 4.0.14 - SQL Injection
|
38 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component ccNewsletter 2.x.x 'id' - SQL Injection
|
38 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Pinterest Clone Social Pinboard 2.0 - SQL Injection
|
39 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component Timetable Responsive Schedule For Joomla! 1.5 - 'alias' SQL Injection
|
38 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component Staff Master 1.0 RC 1 - SQL Injection
|
36 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component Solidres 2.5.1 - SQL Injection
|
39 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component Smart Shoutbox 3.0.0 - SQL Injection
|
35 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component SimpleCalendar 3.1.9 - SQL Injection
|
35 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component Realpin 1.5.04 - SQL Injection
|
34 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component Project Log 1.5.3 - 'search' SQL Injection
|
39 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component NeoRecruit 4.1 - SQL Injection
|
37 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component MediaLibrary Free 4.0.12 - SQL Injection
|
40 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component JTicketing 2.0.16 - SQL Injection
|
43 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component JS Jobs 1.1.9 - SQL Injection
|
36 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component JS Autoz 1.0.9 - SQL Injection
|
36 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component JquickContact 1.3.2.2.1 - SQL Injection
|
35 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component JomEstate PRO 3.7 - 'id' SQL Injection
|
33 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component jGive 2.0.9 - SQL Injection
|
37 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component JB Bus 2.3 - 'order_number' SQL Injection
|
39 |
WEB
|
Ihsan Sencan
|
|
2018-02-16
|
|
Joomla! Component InviteX 3.0.5 - 'invite_type' SQL Injection
|
41 |
WEB
|
Ihsan Sencan
|
