Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2017-10-17   Apache Solr 7.0.1 - XML External Entity Expansion / Remote Code Execution 35 WEB Michael Stepankin & Olga Barinova
2017-10-17   OpenText Documentum Content Server - Arbitrary File Download 41 WEB Andrey B. Panfilov
2017-10-17   OpenText Documentum Content Server - 'dmr_content' Privilege Escalation 39 WEB Andrey B. Panfilov
2017-10-17   OpenText Documentum Content Server - Arbitrary File Download Privilege Escalation 36 WEB Andrey B. Panfilov
2017-10-17   OpenText Documentum Content Server - Privilege Escalation 53 WEB Andrey B. Panfilov
2017-10-17   Squid Analysis Report Generator 2.3.10 - Remote Code Execution 43 WEB Pavel Suprunyuk
2017-10-16   3CX Phone System 15.5.3554.1 - Directory Traversal 45 WEB Jens Regel
2017-10-15   Webmin 1.850 - Multiple Vulnerabilities 36 WEB hyp3rlinx
2017-10-13   AlienVault Unified Security Management (USM) 5.4.2 - Cross-Site Request Forgery 32 WEB Julien Ahrens
2017-10-13   phpMyFAQ 2.9.8 - Cross-Site Scripting (2) 39 WEB Ishaq Mohammed
2017-10-12   Dreambox Plugin BouquetEditor - Cross-Site Scripting 33 WEB Thiago Sena
2017-10-13   TYPO3 Extension Restler 1.7.0 - Local File Disclosure 43 WEB CrashBandicot
2017-10-12   E-Sic Software livre CMS - Cross Site Scripting 37 WEB Elber Tavares
2017-10-12   E-Sic Software livre CMS - 'f' SQL Injection 39 WEB Elber Tavares
2017-10-12   E-Sic Software livre CMS - 'cpfcnpj' SQL Injection 37 WEB Elber Tavares
2017-10-12   E-Sic Software livre CMS - Autentication Bypass 38 WEB Elber Tavares
2017-10-12   E-Sic Software livre CMS - 'q' SQL Injection 39 WEB Guilherme Assmann
2017-10-12   OctoberCMS 1.0.425 (Build 425) - Cross-Site Scripting 42 WEB Ishaq Mohammed
2017-10-11   Trend Micro Data Loss Prevention Virtual Appliance 5.2 - Path Traversal 41 WEB Leonardo Duarte
2017-10-11   Trend Micro InterScan Messaging Security (Virtual Appliance) - 'Proxy.php' Remote Code Execution (Me 47 WEB Mehmet Ince
2017-10-11   Trend Micro OfficeScan 11.0/XG (12.0) - Remote Code Execution (Metasploit) 43 WEB Mehmet Ince
2017-10-10   Complain Management System - Hard-Coded Credentials / Blind SQL injection 42 WEB havysec
2017-10-09   ClipShare 7.0 - SQL Injection 44 WEB 8bitsec
2017-10-09   Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execu 41 WEB intx0x80
2017-08-30   Metasploit Web UI < 4.14.1-20170828 - Cross-Site Request Forgery 41 WEB Dhiraj Mishra
2017-08-08   Unitrends UEB 9.1 - Privilege Escalation 41 WEB Jared Arave
2017-09-27   Netgear ReadyNAS Surveillance 1.4.3-16 - Remote Command Execution 43 WEB Kacper Szurek
2017-10-04   ClipBucket 2.8.3 - Remote Code Execution 42 WEB Meisam Monsef
2017-09-20   Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execu 39 WEB xxlegend
2017-10-03   EPESI 1.8.2 rev20170830 - Cross-Site Scripting 42 WEB Zeeshan Shaikh
2017-10-03   Fiberhome AN5506-04-F - Command Injection 41 WEB Tauco
2017-10-02   OpenText Document Sciences xPression 4.5SP1 Patch 13 - 'documentId' SQL Injection 44 WEB Marcin Woloszyn
2017-10-02   OpenText Document Sciences xPression 4.5SP1 Patch 13 - 'jobRunId' SQL Injection 42 WEB Marcin Woloszyn
2017-10-02   phpCollab 2.5.1 - SQL Injection 44 WEB Sysdream
2017-10-02   phpCollab 2.5.1 - Arbitrary File Upload 38 WEB Sysdream
2017-10-02   NPM-V (Network Power Manager) 2.4.1 - Password Reset 45 WEB Saeed reza Zamanian
2017-09-24   HBGK DVR 3.0.0 build20161206 - Authentication Bypass 42 WEB RAT - ThiefKing
2017-09-29   ConverTo Video Downloader & Converter 1.4.1 - Arbitrary File Download 39 WEB Ihsan Sencan
2017-09-28   Real Estate MLM plan script 1.0 - 'srch' SQL Injection 41 WEB 8bitsec
2017-09-28   PHP Multi Vendor Script 1.02 - 'sid' SQL Injection 44 WEB 8bitsec
2017-09-29   WordPress Plugin WPHRM - SQL Injection 40 WEB Ihsan Sencan
2017-09-27   SmarterStats 11.3.6347 - Cross-Site Scripting 38 WEB sqlhacker
2017-09-29   FileRun < 2017.09.18 - SQL Injection 37 WEB SPARC
2017-09-28   Easy Blog PHP Script 1.3a - 'id' SQL Injection 48 WEB 8bitsec
2017-09-28   Roteador Wireless Intelbras WRN150 - Autentication Bypass 40 WEB Elber Tavares
2017-09-28   Trend Micro OfficeScan 11.0/XG (12.0) - 'Host' Header Injection 45 WEB hyp3rlinx
2017-09-28   Trend Micro OfficeScan 11.0/XG (12.0) - Server Side Request Forgery 39 WEB hyp3rlinx
2017-09-28   Trend Micro OfficeScan 11.0/XG (12.0) - Information Disclosure 44 WEB hyp3rlinx
2017-09-28   Trend Micro OfficeScan 11.0/XG (12.0) - Code Execution / Memory Corruption 46 WEB hyp3rlinx
2017-09-28   Trend Micro OfficeScan 11.0/XG (12.0) - Private Key Disclosure 37 WEB hyp3rlinx
2017-02-22   Fibaro Home Center 2 - Remote Command Execution / Privilege Escalation 36 WEB forsec
2017-09-26   WordPress Plugin WPAMS - SQL Injection 42 WEB Ihsan Sencan
2017-09-26   WordPress Plugin School Management System - SQL Injection 46 WEB Ihsan Sencan
2017-09-26   WordPress Plugin Hospital Management System - SQL Injection 35 WEB Ihsan Sencan
2017-09-26   WordPress Plugin WPGYM - SQL Injection 42 WEB Ihsan Sencan
2017-09-26   WordPress Plugin WPCHURCH - SQL Injection 36 WEB Ihsan Sencan
2017-09-26   AMC Master - Arbitrary File Upload 36 WEB Ihsan Sencan
2017-09-26   SMSmaster - SQL Injection 40 WEB Ihsan Sencan
2017-09-26   Photo Fusion - Arbitrary File Upload 37 WEB Ihsan Sencan
2017-09-26   TicketPlus - Arbitrary File Upload 37 WEB Ihsan Sencan
2017-09-26   Job Links - Arbitrary File Upload 36 WEB Ihsan Sencan
2017-09-16   WordPress Plugin Content Timeline - SQL Injection 43 WEB Jeroen - IT Nerdbox
2017-08-31   Sitefinity CMS 9.2 - Cross-Site Scripting 42 WEB Pralhad Chaskar
2017-09-25   FLIR Thermal Camera F/FC/PT/D - Stream Disclosure 41 WEB LiquidWorm
2017-09-25   FLIR Thermal Camera FC-S/PT - Command Injection 40 WEB LiquidWorm
2017-09-25   FLIR Thermal Camera F/FC/PT/D - Information Disclosure 43 WEB LiquidWorm
2017-09-25   FLIR Thermal Camera PT-Series (PT-334 200562) - Root Remote Code Execution 42 WEB LiquidWorm
2017-09-22   JitBit HelpDesk < 9.0.2 - Authentication Bypass 48 WEB Kc57
2017-09-22   PHP Auction Ecommerce Script 1.6 - SQL Injection 39 WEB 8bitsec
2017-09-22   Secure E-commerce Script 1.02 - 'sid' SQL Injection 38 WEB 8bitsec
2017-09-22   Claydip Airbnb Clone 1.0 - Arbitrary File Upload 39 WEB Ihsan Sencan
2017-09-22   Cash Back Comparison Script 1.0 - SQL Injection 36 WEB Ihsan Sencan
2017-09-22   Multi Level Marketing - SQL Injection 34 WEB Ihsan Sencan
2017-09-22   Lending And Borrowing - 'pid' SQL Injection 41 WEB Ihsan Sencan
2017-09-19   DenyAll WAF < 6.3.0 - Remote Code Execution (Metasploit) 40 WEB Mehmet Ince
2017-09-22   Stock Photo Selling 1.0 - SQL Injection 43 WEB Ihsan Sencan
2017-09-21   PHPMyFAQ 2.9.8 - Cross-Site Scripting (1) 39 WEB Ishaq Mohammed
2017-05-19   Tecnovision DLX Spot - Arbitrary File Upload 39 WEB Simon Brannstrom
2017-05-19   Tecnovision DLX Spot - Authentication Bypass 40 WEB Simon Brannstrom
2017-09-15   iTech Gigs Script 1.20 - 'cat' SQL Injection 40 WEB 8bitsec
2017-09-13   Foodspotting Clone 1.0 - SQL Injection 39 WEB 8bitsec
2017-09-18   Apache < 2.2.34 / < 2.4.27 - OPTIONS Memory Leak 37 WEB Hanno Bock
2017-09-18   iBall ADSL2+ Home Router - Authentication Bypass 37 WEB Gem George
2017-09-15   UTStar WA3002G4 ADSL Broadband Modem - Authentication Bypass 38 WEB Gem George
2017-09-18   DigiAffiliate 1.4 - Cross-Site Request Forgery (Update Admin) 38 WEB Ihsan Sencan
2017-09-18   Digileave 1.2 - Cross-Site Request Forgery (Update Admin) 34 WEB Ihsan Sencan
2017-09-18   Digirez 3.4 - Cross-Site Request Forgery (Update Admin) 38 WEB Ihsan Sencan
2017-09-15   Contact Manager 1.0 - 'femail' SQL Injection 37 WEB Ihsan Sencan
2017-09-15   PTCEvolution 5.50 - SQL Injection 42 WEB Ihsan Sencan
2017-09-14   Humax Wi-Fi Router HG100R 2.0.6 - Authentication Bypass 38 WEB Kivson
2017-09-12   D-Link DIR-8xx Routers - Local Firmware Upload 38 WEB embedi
2017-09-12   D-Link DIR-8xx Routers - Root Remote Code Execution 34 WEB embedi
2017-09-12   D-Link DIR-8xx Routers - Leak Credentials 39 WEB embedi
2017-09-12   Consumer Review Script 1.0 - SQL Injection 38 WEB 8bitsec
2017-09-12   XYZ Auto Classifieds 1.0 - SQL Injection 39 WEB 8bitsec
2017-09-14   Justdial Clone Script - 'fid' SQL Injection 41 WEB Ihsan Sencan
2017-09-14   Theater Management Script - SQL Injection 39 WEB Ihsan Sencan
2017-09-14   PTC KSV1 Script 1.7 - 'type' SQL Injection 39 WEB Ihsan Sencan
2017-09-14   Adserver Script 5.6 - SQL Injection 39 WEB Ihsan Sencan
2017-09-14   Enterprise Edition Payment Processor Script 3.7 - SQL Injection 38 WEB Ihsan Sencan
2011-09-13   Carel PlantVisor 2.4.4 - Directory Traversal 38 WEB Luigi Auriemma
2017-09-13   Carel PlantVisor 2.4.4 - Directory Traversal Information Disclosure (Metasploit) 38 WEB James Fitts
2017-09-13   Carlo Gavazzi Powersoft 2.1.1.1 - Directory Traversal File Disclosure (Metasploit) 41 WEB James Fitts
2017-09-13   Indusoft Web Studio - Directory Traversal Information Disclosure (Metasploit) 38 WEB James Fitts
2017-09-13   ICAffiliateTracking 1.1 - Authentication Bypass 43 WEB Ihsan Sencan
2017-09-13   ICSiteBuilder 1.1 - SQL Injection 37 WEB Ihsan Sencan
2017-09-13   ICHelpDesk 1.1 - 'pk' SQL Injection 39 WEB Ihsan Sencan
2017-09-13   ICEstate 1.1 - 'id' SQL Injection 39 WEB Ihsan Sencan
2017-09-13   ICDental Clinic 1.2 - 'key' SQL Injection 34 WEB Ihsan Sencan
2017-09-13   ICProjectBidding 1.1 - SQL Injection 35 WEB Ihsan Sencan
2017-09-13   ICCallLimousine 1.1 - 'key' SQL Injection 39 WEB Ihsan Sencan
2017-09-13   ICGrocery 1.1 - 'key' SQL Injection 42 WEB Ihsan Sencan
2017-09-13   ICProductConfigurator 1.1 - 'key' SQL Injection 42 WEB Ihsan Sencan
2017-09-13   IC-T-Shirt 1.2 - 'key' SQL Injection 39 WEB Ihsan Sencan
2017-09-13   ICJewelry 1.1 - 'key' SQL Injection 38 WEB Ihsan Sencan
2017-09-13   ICSurvey 1.1 - SQL Injection 40 WEB Ihsan Sencan
2017-09-13   ICStudents 1.2 - 'key' SQL Injection 41 WEB Ihsan Sencan
2017-09-13   ICClassifieds 1.1 - SQL Injection 38 WEB Ihsan Sencan
2017-09-13   ICTraveling 2.2 - Authentication Bypass 43 WEB Ihsan Sencan
2017-09-13   ICAutosales 2.2 - SQL Injection 41 WEB Ihsan Sencan
2017-09-13   ICDutchAuction 1.2 - SQL Injection 40 WEB Ihsan Sencan
2017-09-13   ICRestaurant software 1.4 - 'key' SQL Injection 41 WEB Ihsan Sencan
2017-09-13   ICDoctor Appointment 1.3 - 'key' SQL Injection 39 WEB Ihsan Sencan
2017-09-13   ICAuction 2.2 - 'id' SQL Injection 40 WEB Ihsan Sencan
2017-09-13   ICHotelReservation 3.3 - 'key' SQL Injection 41 WEB Ihsan Sencan