Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2018-04-25   HRSALE The Ultimate HRM 1.0.2 - CSV Injection 46 WEB 8bitsec
2018-04-25   Blog Master Pro 1.0 - CSV Injection 47 WEB 8bitsec
2018-04-25   Shopy Point of Sale 1.0 - CSV Injection 44 WEB 8bitsec
2018-04-24   WSO2 Carbon / WSO2 Dashboard Server 5.3.0 - Persistent Cross-Site Scripting 50 WEB SEC Consult
2018-04-24   WordPress Plugin Woo Import Export 1.0 - Arbitrary File Deletion 45 WEB Lenon Leite
2018-04-24   Ericsson-LG iPECS NMS A.1Ac - Cleartext Credential Disclosure 47 WEB Berk Cem Göksel
2018-04-24   Interspire Email Marketer < 6.1.6 - Remote Admin Authentication Bypass 41 WEB devcoinfet
2018-04-24   Monstra CMS 3.0.4 - Arbitrary Folder Deletion 48 WEB Wenming Jiang
2018-04-24   Open-AudIT 2.1 - CSV Macro Injection 47 WEB Sureshbabu Narvaneni
2018-04-24   WUZHI CMS 4.1.0 - Cross-Site Request Forgery 52 WEB jiguang
2018-04-24   UK Cookie Consent - Persistent Cross-Site Scripting 46 WEB B0UG
2018-04-23   Monstra cms 3.0.4 - Persitent Cross-Site Scripting 41 WEB Wenming Jiang
2018-04-23   Drupal avatar_uploader v7.x-1.0-beta8 - Arbitrary File Disclosure 46 WEB Larry W. Cashdollar
2018-04-23   Apache CouchDB 1.7.0 / 2.x < 2.1.1 - Remote Privilege Escalation 44 WEB r4wd3r
2018-04-23   Ncomputing vSpace Pro 10/11 - Directory Traversal 41 WEB Javier Bernardo
2018-04-23   phpMyAdmin 4.8.0 < 4.8.0-1 - Cross-Site Request Forgery 42 WEB revengsh
2018-04-20   Cobub Razor 0.8.0 - Physical Path Leakage 44 WEB Kyhvedn
2018-04-18   Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities 49 WEB bzyo
2018-04-18   Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities 42 WEB bzyo
2018-04-18   Joomla! Component JS Jobs 1.2.0 - Cross-Site Request Forgery 44 WEB Sureshbabu Narvaneni
2018-04-18   WordPress Plugin Caldera Forms 1.5.9.1 - Cross-Site Scripting 41 WEB Federico Scalco
2018-04-18   Lutron Quantum 2.0 - 3.2.243 - Information Disclosure 42 WEB SadFud
2018-04-18   Kodi 17.6 - Persistent Cross-Site Scripting 55 WEB Manuel García Cárdenas
2018-04-18   Match Clone Script 1.0.4 - Cross-Site Scripting 52 WEB ManhNho
2018-04-18   Rvsitebuilder CMS - Database Backup Download 42 WEB Hesam Bazvand
2018-04-18   MySQL Squid Access Report 2.1.4 - SQL Injection / Cross-Site Scripting 42 WEB Keerati T.
2018-04-18   MySQL Squid Access Report 2.1.4 - SQL Injection / Cross-Site Scripting 46 WEB Keerati T.
2018-04-17   Joomla! Component jDownloads 3.2.58 - Cross Site Scripting 42 WEB Sureshbabu Narvaneni
2018-04-16   Sophos Cyberoam UTM CR25iNG - 10.6.3 MR-5 - Direct Object Reference 43 WEB Frogy
2018-04-16   Cobub Razor 0.8.0 - SQL injection 47 WEB Kyhvedn
2018-04-13   Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution 47 WEB Hans Topo & g0tmi1k
2018-04-13   Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution (PoC) 53 WEB Vitalii Rudnykh
2018-04-12   Joomla! Convert Forms version 2.0.3 - Formula Injection (CSV Injection) 53 WEB Sairam Jetty
2018-04-10   WordPress Plugin File Upload 4.3.3 - Stored Cross-Site Scripting (PoC) 50 WEB ManhNho
2018-04-10   WordPress Plugin File Upload 4.3.2 - Stored Cross-Site Scripting 46 WEB ManhNho
2018-04-10   Dell EMC Avamar and Integrated Data Protection Appliance Installation Manager - Invalid Access Contr 48 WEB SlidingWindow
2018-04-10   WUZHI CMS 4.1.0 - Cross-Site Request Forgery (Add User) 48 WEB taoge
2018-04-10   WUZHI CMS 4.1.0 - Cross-Site Request Forgery (Add Admin) 49 WEB taoge
2018-04-10   WordPress Plugin Activity Log 2.4.0 - Stored Cross-Site Scripting 45 WEB Stefan Broeder
2018-04-10   iScripts Easycreate 3.2.1 - Stored Cross-Site Scripting 47 WEB ManhNho
2018-04-09   WordPress Plugin Google Drive 2.2 - Remote Code Execution 42 WEB Lenon Leite
2018-04-09   iScripts SonicBB 1.0 - Reflected Cross-Site Scripting (PoC) 48 WEB ManhNho
2018-04-09   WooCommerce CSV-Importer-Plugin 3.3.6 - Remote Code Execution 37 WEB Lenon Leite
2018-04-09   Buddypress Xprofile Custom Fields Type 2.6.3 - Remote Code Execution 46 WEB Lenon Leite
2018-04-09   KYOCERA Net Admin 3.4 - Cross-Site Request Forgery (Add Admin) 43 WEB LiquidWorm
2018-04-09   KYOCERA Multi-Set Template Editor 3.4 - Out-Of-Band XML External Entity Injection 40 WEB LiquidWorm
2018-04-09   CyberArk Password Vault Web Access < 9.9.5 / < 9.10 / 10.1 - Remote Code Execution 45 WEB RedTeam Pentesting
2018-04-09   WordPress Plugin Simple Fields 0.2 - 0.3.5 - Local/Remote File Inclusion / Remote Code Execution 46 WEB Graeme Robinson
2018-04-09   Yahei PHP Prober 0.4.7 - Cross-Site Scripting 47 WEB ManhNho
2018-04-09   WolfCMS 0.8.3.1 - Open Redirection 45 WEB Sureshbabu Narvaneni
2018-04-09   MyBB Plugin Recent Threads On Index - Cross-Site Scripting 44 WEB Perileos
2018-04-09   Cobub Razor 0.7.2 - Add New Superuser Account 43 WEB ppb
2018-04-09   WolfCMS 0.8.3.1 - Cross-Site Request Forgery 46 WEB Sureshbabu Narvaneni
2018-04-09   WordPress Plugin Background Takeover < 4.1.4 - Directory Traversal 44 WEB Colette Chamberland
2018-04-06   Cobub Razor 0.7.2 - Cross-Site Request Forgery 45 WEB ppb
2018-04-06   DotNetNuke DNNarticle Module 11 - Directory Traversal 50 WEB Esmaeil Rahimian
2018-04-06   FiberHome VDSL2 Modem HG 150-UB - Authentication Bypass 50 WEB Noman Riffat
2018-04-05   WordPress Plugin Activity Log 2.4.0 - Cross-Site Scripting 42 WEB Stefan Broeder
2018-04-05   GetSimple CMS 3.3.13 - Cross-Site Scripting 44 WEB Sureshbabu Narvaneni
2018-04-05   Z-Blog 1.5.1.1740 - Full Path Disclosure 43 WEB zzw
2018-04-05   Z-Blog 1.5.1.1740 - Cross-Site Scripting 41 WEB zzw
2018-04-05   YzmCMS 3.6 - Cross-Site Scripting 43 WEB zzw
2018-04-05   WebRTC - Private IP Leakage (Metasploit) 44 WEB Dhiraj Mishra
2018-04-05   Joomla! Component JS Jobs 1.2.0 - Cross-Site Scripting 46 WEB Sureshbabu Narvaneni
2018-04-05   MyBB Plugin Downloads 2.0.3 - Cross-Site Scripting 45 WEB 0xB9
2018-04-04   ProcessMaker - Plugin Upload (Metasploit) 68 WEB Metasploit
2018-04-02   Secutech RiS-11/RiS-22/RiS-33 - Remote DNS Change 42 WEB Todor Donev
2018-04-02   OpenCMS 10.5.3 - Cross-Site Scripting 46 WEB Sureshbabu Narvaneni
2018-04-02   OpenCMS 10.5.3 - Cross-Site Request Forgery 45 WEB Sureshbabu Narvaneni
2018-04-02   LifeSize ClearSea 3.1.4 - Directory Traversal 45 WEB rsp3ar
2018-04-02   DLink DIR-601 - Admin Password Disclosure 50 WEB Kevin Randall
2018-04-02   VideoFlow Digital Video Protection (DVP) 2.10 - Hard-Coded Credentials 45 WEB LiquidWorm
2018-04-02   VideoFlow Digital Video Protection (DVP) 2.10 - Directory Traversal 45 WEB LiquidWorm
2018-04-02   WampServer 3.1.2 - Cross-Site Request Forgery 47 WEB Vipin Chaudhary
2018-04-02   WampServer 3.1.1 - Cross-Site Scripting / Cross-Site Request Forgery 48 WEB Vipin Chaudhary
2018-04-02   Frog CMS 0.9.5 - Cross-Site Request Forgery (Add User) 43 WEB Samrat Das
2018-03-30   Tenda FH303/A300 Firmware v5.07.68_EN - Remote DNS Change 45 WEB Todor Donev
2018-03-30   Tenda W3002R/A302/w309r Wireless Router v5.07.64_en - Remote DNS Change (PoC) 45 WEB Todor Donev
2018-03-30   Vtiger CRM 6.3.0 - (Authenticated) Arbitrary File Upload (Metasploit) 41 WEB Touhid M.Shaikh
2018-03-30   D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router - Authentication Bypass 45 WEB Gem George
2018-03-30   Tenda W316R Wireless Router 5.07.50 - Remote DNS Change 42 WEB Todor Donev
2018-03-30   osCommerce 2.3.4.1 - Remote Code Execution 48 WEB Simon Scannell
2018-03-30   Tenda W308R v2 Wireless Router 5.07.48 - (Cookie Session) Remote DNS Change 43 WEB Todor Donev
2018-03-30   WordPress Plugin WP Security Audit Log 3.1.1 - Sensitive Information Disclosure 39 WEB Colette Chamberland
2018-03-30   Joomla! Component AcySMS 3.5.0 - CSV Macro Injection 48 WEB Sureshbabu Narvaneni
2018-03-30   Joomla! Component Acymailing Starter 5.9.5 - CSV Macro Injection 50 WEB Sureshbabu Narvaneni
2018-03-30   Homematic CCU2 2.29.23 - Remote Command Execution 45 WEB Patrick Muench and Gregor Kopf
2018-03-30   WordPress Plugin Contact Form 7 to Database Extension 2.10.32 - CSV Injection 49 WEB Stefan Broeder
2018-03-30   WordPress Plugin Relevanssi 4.0.4 - Reflected Cross-Site Scripting 44 WEB Stefan Broeder
2018-03-30   MiniCMS 1.10 - Cross-Site Request Forgery 40 WEB zixian
2018-03-30   Homematic CCU2 2.29.23 - Arbitrary File Write 41 WEB Patrick Muench and Gregor Kopf
2018-03-30   Open-AuditIT Professional 2.1 - Cross-Site Request Forgery 41 WEB Nilesh Sapariya
2018-03-29   Joomla! Component Fields - SQLi Remote Code Execution (Metasploit) 43 WEB Metasploit
2018-03-29   Joomla! Component Fields - SQLi Remote Code Execution (Metasploit) 43 WEB Metasploit
2014-11-03   Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Admin Session) 44 WEB Stefan Horst
2018-03-28   Open-AuditIT Professional 2.1 - Cross-Site Scripting 37 WEB Nilesh Sapariya
2018-03-28   Tenda N11 Wireless Router 5.07.43_en_NEX01 - Remote DNS Change 37 WEB Todor Donev
2018-03-28   Microsoft Windows Remote Assistance - XML External Entity Injection 42 WEB Nabeel Ahmed
2018-03-28   TwonkyMedia Server 7.0.11-8.5 - Persistent Cross-Site Scripting 38 WEB Sven Fassbender
2018-03-28   TwonkyMedia Server 7.0.11-8.5 - Directory Traversal 50 WEB Sven Fassbender
2018-03-27   ClipBucket - 'beats_uploader' Arbitrary File Upload (Metasploit) 42 WEB Metasploit
2018-03-27   ClipBucket - 'beats_uploader' Arbitrary File Upload (Metasploit) 47 WEB Metasploit
2018-03-26   Laravel Log Viewer < 0.13.0 - Local File Download 50 WEB Haboob Team
2018-03-23   WordPress Plugin Site Editor 1.1.1 - Local File Inclusion 47 WEB Nicolas Buzy-Debat
2018-03-23   MyBB Plugin Last User's Threads in Profile Plugin 1.2 - Persistent Cross-Site Scripting 47 WEB 0xB9
2018-03-23   TL-WR720N 150Mbps Wireless N Router - Cross-Site Request Forgery 47 WEB Mans van Someren
2018-03-23   Hikvision IP Camera versions 5.2.0 - 5.3.9 (Builds 140721 < 170109) - Access Control Bypass 51 WEB Matamorphosis
2018-03-20   Cisco node-jos < 0.11.0 - Re-sign Tokens 46 WEB zioBlack
2018-03-20   Coship RT3052 Wireless Router - Persistent Cross-Site Scripting 54 WEB Sayan Chatterjee
2018-03-20   Vehicle Sales Management System - Multiple Vulnerabilities 46 WEB Sing
2018-03-20   Intelbras Telefone IP TIP200 LITE - Local File Disclosure 45 WEB anhax0r
2018-03-16   Contec Smart Home 4.15 - Unauthorized Password Reset 44 WEB Z3ro0ne
2018-03-15   Spring Data REST < 2.6.9 (Ingalls SR9) / 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution 53 WEB Antonio Francesco Sardella
2018-03-15   WordPress Plugin Duplicator 1.2.32 - Cross-Site Scripting 40 WEB Stefan Broeder
2018-03-13   Tuleap 9.17.99.189 - Blind SQL Injection 48 WEB Cristiano Maruti
2018-03-13   SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities 50 WEB SEC Consult
2018-03-12   ACL Analytics 11.X - 13.0.0.579 - Arbitrary Code Execution 53 WEB Clutchisback1
2018-03-12   Advantech WebAccess < 8.3 - Directory Traversal / Remote Code Execution 47 WEB Chris Lyne
2018-03-12   TextPattern 4.6.2 - 'qty' SQL Injection 48 WEB Manuel García Cárdenas
2018-03-12   Prisma Industriale Checkweigher PrismaWEB 1.21 - Hard-Coded Credentials 51 WEB LiquidWorm
2018-03-12   ManageEngine Applications Manager 13.5 - Remote Code Execution (Metasploit) 51 WEB Mehmet Ince
2018-03-09   Bacula-Web < 8.0.0-rc2 - SQL Injection 44 WEB Gustavo Sorondo
2018-03-07   antMan 0.9.0c - Authentication Bypass 47 WEB Joshua Bowser
2018-03-07   Redaxo CMS Addon MyEvents 2.2.1 - SQL Injection 41 WEB h0n1gsp3cht
2018-03-06   Bravo Tejari Web Portal - Cross-Site Request Forgery 43 WEB Arvind V