Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2017-06-05 Exploit Code Downloads   Subsonic 6.1.1 - Cross-Site Request Forgery / Cross-Site Scripting 37 WEB hyp3rlinx
2017-06-05 Exploit Code Downloads   Subsonic 6.1.1 - Server-Side Request Forgery 36 WEB hyp3rlinx
2017-06-05 Exploit Code Downloads   Subsonic 6.1.1 - Cross-Site Request Forgery 39 WEB hyp3rlinx
2017-06-04 Exploit Code Downloads   EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 - Remote Code Execution 42 WEB LiquidWorm
2017-06-03 Exploit Code Downloads   Joomla! Component Payage 2.05 - 'aid' SQL Injection 39 WEB Persian Hack Team
2017-06-02 Exploit Code Downloads   Sungard eTRAKiT3 <= 3.2.1.17 - SQL Injection 36 WEB Goran Tuzovic
2017-06-01 Exploit Code Downloads   WebKit - 'Document::prepareForDestruction' / 'CachedFrame' Universal Cross-Site Scripting 37 WEB Google Security Research
2017-06-01 Exploit Code Downloads   WebKit - 'CachedFrameBase::restore' Universal Cross-Site Scripting 35 WEB Google Security Research
2017-06-01 Exploit Code Downloads   WebKit - CachedFrame does not Detach Openers Universal Cross-Site Scripting 38 WEB Google Security Research
2017-06-01 Exploit Code Downloads   Riverbed SteelHead VCX 9.6.0a - Arbitrary File Read 38 WEB Gregory Draperi
2017-05-31 Exploit Code Downloads   Piwigo Plugin Facetag 0.0.3 - Cross-Site Scripting 38 WEB Touhid M.Shaikh
2017-05-31 Exploit Code Downloads   OV3 Online Administration 3.0 - SQL Injection 44 WEB LiquidWorm
2017-05-31 Exploit Code Downloads   OV3 Online Administration 3.0 - Remote Code Execution 40 WEB LiquidWorm
2017-05-31 Exploit Code Downloads   OV3 Online Administration 3.0 - Directory Traversal 39 WEB LiquidWorm
2017-05-30 Exploit Code Downloads   Piwigo Plugin Facetag 0.0.3 - SQL Injection 39 WEB Touhid M.Shaikh
2017-05-30 Exploit Code Downloads   TerraMaster F2-420 NAS TOS 3.0.30 - Root Remote Code Execution 38 WEB Simone Margaritelli
2017-05-30 Exploit Code Downloads   IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Hea 37 WEB SecuriTeam
2017-05-30 Exploit Code Downloads   KEMP LoadMaster 7.135.0.13245 - Persistent Cross-Site Scripting / Remote Code Execution 36 WEB SecuriTeam
2017-05-30 Exploit Code Downloads   Trend Micro Deep Security 6.5 - XML External Entity Injection / Local Privilege Escalation / Remote 38 WEB SecuriTeam
2017-05-30 Exploit Code Downloads   uc-http Daemon - Local File Inclusion / Directory Traversal 39 WEB Project Insecurity
2017-05-29 Exploit Code Downloads   WordPress Plugin Huge-IT Video Gallery 2.0.4 - SQL Injection 37 WEB defensecode
2017-05-26 Exploit Code Downloads   QWR-1104 Wireless-N Router - Cross-Site Scripting 37 WEB Touhid M.Shaikh
2017-02-22 Exploit Code Downloads   D-Link DCS Series Cameras - Insecure Crossdomain 40 WEB SlidingWindow
2017-05-25 Exploit Code Downloads   Apple Safari 10.0.3(12602.4.8) / WebKit - 'HTMLObjectElement::updateWidget' Universal Cross-Site Scr 36 WEB Google Security Research
2017-05-25 Exploit Code Downloads   WebKit - 'FrameLoader::clear' Stealing Variables via Page Navigation 37 WEB Google Security Research
2017-05-25 Exploit Code Downloads   WebKit - 'enqueuePageshowEvent' / 'enqueuePopstateEvent' Universal Cross-Site Scripting 35 WEB Google Security Research
2017-05-25 Exploit Code Downloads   WebKit - 'ContainerNode::parserInsertBefore' Universal Cross-Site Scripting 40 WEB Google Security Research
2017-05-25 Exploit Code Downloads   WebKit - 'ContainerNode::parserRemoveChild' Universal Cross-Site Scripting 35 WEB Google Security Research
2017-05-25 Exploit Code Downloads   Apple WebKit / Safari 10.0.3(12602.4.8) - 'Editor::Command::execute' Universal Cross-Site Scripting 41 WEB Google Security Research
2017-05-25 Exploit Code Downloads   Sophos Cyberoam - Cross-site scripting 41 WEB Bhadresh Patel
2017-05-24 Exploit Code Downloads   NetGain EM 7.2.647 build 941 - Authentication Bypass / Local File Inclusion 39 WEB f3ci
2017-05-24 Exploit Code Downloads   NetGain EM 7.2.647 build 941 - Authentication Bypass / Local File Inclusion 41 WEB f3ci
2017-05-21 Exploit Code Downloads   PlaySMS 1.4 - 'import.php' Remote Code Execution 39 WEB Touhid M.Shaikh
2017-05-20 Exploit Code Downloads   Mantis Bug Tracker 1.3.10/2.3.0 - Cross-Site Request Forgery 40 WEB hyp3rlinx
2017-05-20 Exploit Code Downloads   KMCIS CaseAware - Cross-Site Scripting 35 WEB justpentest
2017-05-19 Exploit Code Downloads   D-Link DIR-600M Wireless N 150 - Authentication Bypass 40 WEB Touhid M.Shaikh
2017-05-19 Exploit Code Downloads   PlaySMS 1.4 - Remote Code Execution 40 WEB Touhid M.Shaikh
2017-05-19 Exploit Code Downloads   ManageEngine ServiceDesk Plus 9.0 - Authentication Bypass 41 WEB ByteM3
2017-05-19 Exploit Code Downloads   SAP Business One for Android 1.2.3 - XML External Entity Injection 40 WEB Ravindra Singh Rathore
2017-05-19 Exploit Code Downloads   Belden Garrettcom 6K/10K Switches - Authentication Bypass / Memory Corruption 40 WEB David Tomaschik
2017-05-19 Exploit Code Downloads   Oracle PeopleSoft - Server-Side Request Forgery 37 WEB ERPScan
2017-05-19 Exploit Code Downloads   Joomla! 3.7.0 - 'com_fields' SQL Injection 42 WEB Mateus Lino
2017-05-17 Exploit Code Downloads   INFOR EAM 11.0 Build 201410 - Persistent Cross-Site Scripting via Comment Fields 43 WEB Yoroi
2017-05-17 Exploit Code Downloads   INFOR EAM 11.0 Build 201410 - 'filtervalue' SQL Injection 39 WEB Yoroi
2017-01-12 Exploit Code Downloads   Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 SP2 - Multiple Vulnerabilities 38 WEB SlidingWindow
2017-02-28 Exploit Code Downloads   Sophos Web Appliance 4.3.1.1 - Session Fixation 41 WEB SlidingWindow
2017-04-28 Exploit Code Downloads   Admidio 3.2.8 - Cross-Site Request Forgery 40 WEB Faiz Ahmed Zaidi
2017-05-15 Exploit Code Downloads   Mailcow 0.14 - Cross-Site Request Forgery 40 WEB hyp3rlinx
2017-05-14 Exploit Code Downloads   PlaySMS 1.4 - '/sendfromfile.php' Remote Code Execution / Unrestricted File Upload 40 WEB Touhid M.Shaikh
2017-05-02 Exploit Code Downloads   Zyxel P-660HW-61 Firmware < 3.40(PE.11)C0 Router - Local File Inclusion 44 WEB ReverseBrain
2017-05-10 Exploit Code Downloads   CMS Made Simple 2.1.6 - Multiple Vulnerabilities 38 WEB Osanda Malith Jayathissa
2017-05-10 Exploit Code Downloads   Gongwalker API Manager 1.1 - Cross-Site Request Forgery 38 WEB HaHwul
2017-05-10 Exploit Code Downloads   BanManager WebUI 1.5.8 - PHP Code Injection 42 WEB HaHwul
2017-05-10 Exploit Code Downloads   QNAP PhotoStation 5.2.4 / MusicStation 4.8.4 - Authentication Bypass 42 WEB Kacper Szurek
2017-05-09 Exploit Code Downloads   Personify360 7.5.2/7.6.1 - Improper Database Schema Access Restrictions 40 WEB Pesach Zirkind
2017-05-09 Exploit Code Downloads   Personify360 7.5.2/7.6.1 - Improper Access Restrictions 40 WEB Pesach Zirkind
2017-05-09 Exploit Code Downloads   I_ Librarian 4.6/4.7 - Command Injection / Server Side Request Forgery / Directory Enumeration / Cro 42 WEB SEC Consult
2017-05-09 Exploit Code Downloads   I_ Librarian 4.6/4.7 - Command Injection / Server Side Request Forgery / Directory Enumeration / Cro 38 WEB SEC Consult
2017-04-24 Exploit Code Downloads   LogRhythm Network Monitor - Authentication Bypass / Command Injection 44 WEB Francesco Oddo
2017-05-05 Exploit Code Downloads   ViMbAdmin 3.0.15 - Multiple Cross-Site Request Forgery Vulnerabilities 46 WEB Sysdream
2017-05-05 Exploit Code Downloads   WordPress Plugin WebDorado Gallery 1.3.29 - SQL Injection 41 WEB defensecode
2017-05-03 Exploit Code Downloads   WordPress Core < 4.7.4 - Unauthorized Password Reset 43 WEB Dawid Golunski
2017-05-03 Exploit Code Downloads   WordPress Core 4.6 - Remote Code Execution 40 WEB Dawid Golunski
2017-05-03 Exploit Code Downloads   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Code Execution 44 WEB LiquidWorm
2017-05-03 Exploit Code Downloads   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Password Change 43 WEB LiquidWorm
2017-05-03 Exploit Code Downloads   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Information Disclosure 44 WEB LiquidWorm
2017-05-01 Exploit Code Downloads   Tuleap Project Wiki 8.3 < 9.6.99.86 - Command Injection 41 WEB Ben Nott
2017-05-01 Exploit Code Downloads   Alerton Webtalk 2.5/3.3 - Multiple Vulnerabilities 45 WEB David Tomaschik
2017-04-30 Exploit Code Downloads   Emby MediaServer 3.2.5 - Directory Traversal 44 WEB LiquidWorm
2017-04-30 Exploit Code Downloads   Emby MediaServer 3.2.5 - Password Reset 46 WEB LiquidWorm
2017-04-30 Exploit Code Downloads   Emby MediaServer 3.2.5 - SQL Injection 44 WEB LiquidWorm
2017-04-27 Exploit Code Downloads   Easy File Uploader - Arbitrary File Upload 44 WEB Daniel Godoy
2017-04-27 Exploit Code Downloads   Simple File Uploader - Arbitrary File Download 45 WEB Daniel Godoy
2017-04-27 Exploit Code Downloads   TYPO3 Extension News - SQL Injection 45 WEB Charles Fol
2017-04-26 Exploit Code Downloads   Revive Ad Server 4.0.1 - Cross-Site Scripting / Cross-Site Request Forgery 44 WEB Cyril Vallicari
2017-04-25 Exploit Code Downloads   October CMS 1.0.412 - Multiple Vulnerabilities 43 WEB Anti Räis
2017-04-24 Exploit Code Downloads   Joomla! Component Myportfolio 3.0.2 - 'pid' SQL Injection 41 WEB Persian Hack Team
2017-04-25 Exploit Code Downloads   OpenText Documentum Content Server - dm_bp_transition.ebs docbase Method Arbitrary Code Execution 42 WEB Andrey B. Panfilov
2017-04-25 Exploit Code Downloads   HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion 42 WEB Paolo Stagno
2017-04-25 Exploit Code Downloads   HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion 49 WEB Paolo Stagno
2017-04-25 Exploit Code Downloads   Oracle E-Business Suite 12.2.3 - 'IESFOOTPRINT' SQL Injection 40 WEB ERPScan
2017-04-25 Exploit Code Downloads   Oracle PeopleSoft - 'PeopleSoftServiceListeningConnector' XML External Entity via DOCTYPE 41 WEB ERPScan
2017-04-25 Exploit Code Downloads   WordPress Plugin Wow Forms 2.1 - SQL Injection 42 WEB TAD GROUP
2017-04-25 Exploit Code Downloads   WordPress Plugin Wow Viral Signups 2.1 - SQL Injection 39 WEB TAD GROUP
2017-04-25 Exploit Code Downloads   WordPress Plugin Car Rental System 2.5 - SQL Injection 39 WEB TAD GROUP
2017-04-25 Exploit Code Downloads   WordPress Plugin KittyCatfish 2.2 - SQL Injection 36 WEB TAD GROUP
2017-04-25 Exploit Code Downloads   FlySpray 1.0-rc4 - Cross-Site Scripting / Cross-Site Request Forgery 39 WEB Cyril Vallicari
2017-04-20 Exploit Code Downloads   Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'operationSpreadGeneric' Universal Cross-Site Scripti 41 WEB Google Security Research
2017-04-20 Exploit Code Downloads   Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'PrototypeMap::createEmptyStructure' Universal Cross- 43 WEB Google Security Research
2017-04-16 Exploit Code Downloads   Mantis Bug Tracker 1.3.0/2.3.0 - Password Reset 40 WEB hyp3rlinx
2017-04-14 Exploit Code Downloads   Concrete5 CMS 8.1.0 - 'Host' Header Injection 42 WEB hyp3rlinx
2017-04-13 Exploit Code Downloads   Alienvault OSSIM/USM 5.3.4/5.3.5 - Remote Command Execution (Metasploit) 38 WEB Peter Lapp
2017-04-13 Exploit Code Downloads   agorum core Pro 7.8.1.4-251 - Persistent Cross-Site Scripting 46 WEB SySS GmbH
2017-04-13 Exploit Code Downloads   agorum core Pro 7.8.1.4-251 - Cross-Site Request Forgery 42 WEB SySS GmbH
2016-01-11 Exploit Code Downloads   SedSystems D3 Decimator - Multiple Vulnerabilities 40 WEB prdelka
2017-02-15 Exploit Code Downloads   Coppermine Gallery < 1.5.44 - Directory Traversal 37 WEB Hacker Fantastic
2017-04-11 Exploit Code Downloads   Apple WebKit / Safari 10.0.3 (12602.4.8) - Universal Cross-Site Scripting via a Focus Event and a Li 36 WEB Google Security Research
2017-04-11 Exploit Code Downloads   Apple WebKit / Safari 10.0.3 (12602.4.8) - Synchronous Page Load Universal Cross-Site Scripting 40 WEB Google Security Research
2017-04-11 Exploit Code Downloads   Horde Groupware Webmail 3/4/5 - Multiple Remote Code Executions 38 WEB SecuriTeam
2017-04-11 Exploit Code Downloads   Brother MFC-J6520DW - Authentication Bypass / Password Change 41 WEB Patryk Bogdan
2017-04-11 Exploit Code Downloads   MyBB smilie Module < 1.8.11 - 'pathfolder' Directory Traversal 37 WEB Zhiyang Zeng
2017-04-11 Exploit Code Downloads   MyBB < 1.8.11 - 'email' MyCode Cross-Site Scripting 36 WEB Zhiyang Zeng
2017-04-11 Exploit Code Downloads   FAQ Script 3.1.3 - 'category_id' SQL Injection 38 WEB Ihsan Sencan
2017-04-11 Exploit Code Downloads   Social Directory Script 2.0 - SQL Injection 40 WEB Ihsan Sencan
2017-04-11 Exploit Code Downloads   WordPress Plugin Spider Event Calendar 1.5.51 - Blind SQL Injection 48 WEB Manuel García Cárdenas
2017-04-11 Exploit Code Downloads   MyClassifiedScript 5.1 - SQL Injection 36 WEB Ihsan Sencan
2017-04-07 Exploit Code Downloads   Adobe (Multiple Products) - XML Injection File Content Disclosure 36 WEB Tess Sluyter
2017-04-08 Exploit Code Downloads   Jobscript4Web 4.5 - Authentication Bypass 37 WEB TurkCyberArmy
2017-04-07 Exploit Code Downloads   WordPress Plugin CopySafe Web Protect < 2.6 - Cross-Site Request Forgery 38 WEB Zhiyang Zeng
2017-04-07 Exploit Code Downloads   WordPress Plugin WHIZZ < 1.1.1 - Cross-Site Request Forgery 38 WEB Zhiyang Zeng
2017-04-07 Exploit Code Downloads   e107 CMS 2.1.4 - Cross-Site Request Forgery 40 WEB Zhiyang Zeng
2017-04-07 Exploit Code Downloads   QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection 39 WEB Harry Sintonen
2017-04-07 Exploit Code Downloads   WordPress Plugin Firewall 2 1.3 - Cross-Site Request Forgery / Cross-Site Scripting 38 WEB dxw
2017-04-07 Exploit Code Downloads   WordPress Plugin Firewall 2 1.3 - Cross-Site Request Forgery / Cross-Site Scripting 35 WEB dxw
2017-04-07 Exploit Code Downloads   D-Link DWR-116 / DWR-116A1 - Arbitrary File Download 39 WEB Patryk Bogdan
2017-04-07 Exploit Code Downloads   Ladder System 6.0 - 'faqid' SQL Injection 34 WEB Ihsan Sencan
2017-04-07 Exploit Code Downloads   My Gaming Ladder Combo System 7.5 - SQL Injection 35 WEB Ihsan Sencan
2017-04-07 Exploit Code Downloads   Survey Template 1.1 - 'masterkey1' SQL Injection 36 WEB Ihsan Sencan
2017-04-07 Exploit Code Downloads   Quiz Template 1.0 - 'testid' SQL Injection 36 WEB Ihsan Sencan
2017-04-07 Exploit Code Downloads   Forum Template 1.0 - SQL Injection 34 WEB Ihsan Sencan
2017-04-07 Exploit Code Downloads   Calendar Template 2.0 - 'editid1' SQL Injection 35 WEB Ihsan Sencan
2017-04-07 Exploit Code Downloads   Shopping Cart Template - 'item' SQL Injection 37 WEB Ihsan Sencan
2017-04-07 Exploit Code Downloads   Document Management Template - 'hash' SQL Injection 39 WEB Ihsan Sencan
2017-04-07 Exploit Code Downloads   Invoice Template - 'hash' SQL Injection 37 WEB Ihsan Sencan
2017-04-05 Exploit Code Downloads   Faveo Helpdesk Community 1.9.3 - Cross-Site Request Forgery 41 WEB rungga_reksya