Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2017-06-09   Uniview NVR - Password Disclosure 46 WEB B1t
2017-06-09   IPFire 2.19 - Remote Code Execution 40 WEB 0x09AL
2017-06-08   Craft CMS 2.6 - Cross-Site Scripting 43 WEB Ahsan Tahir
2017-06-07   Robert 0.5 - Multiple Vulnerabilities 44 WEB Cyril Vallicari
2017-06-07   Xavier 2.4 - SQL Injection 45 WEB Vulnerability-Lab
2017-06-07   Grav CMS 1.4.2 Admin Plugin - Cross-Site Scripting 45 WEB Ahsan Tahir
2017-06-06   Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclos 45 WEB X41 D-Sec GmbH
2017-06-06   Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclos 42 WEB X41 D-Sec GmbH
2017-06-06   Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclos 49 WEB X41 D-Sec GmbH
2017-06-06   WordPress Plugin Tribulant Newsletters 4.6.4.2 - File Disclosure / Cross-Site Scripting 51 WEB defensecode
2017-06-05   Kronos Telestaff < 2.92EU29 - SQL Injection 56 WEB Goran Tuzovic
2017-06-05   Subsonic 6.1.1 - Cross-Site Request Forgery / Cross-Site Scripting 45 WEB hyp3rlinx
2017-06-05   Subsonic 6.1.1 - Server-Side Request Forgery 45 WEB hyp3rlinx
2017-06-05   Subsonic 6.1.1 - Cross-Site Request Forgery 45 WEB hyp3rlinx
2017-06-04   EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 - Remote Code Execution 46 WEB LiquidWorm
2017-06-03   Joomla! Component Payage 2.05 - 'aid' SQL Injection 41 WEB Persian Hack Team
2017-06-02   Sungard eTRAKiT3 <= 3.2.1.17 - SQL Injection 42 WEB Goran Tuzovic
2017-06-01   WebKit - 'Document::prepareForDestruction' / 'CachedFrame' Universal Cross-Site Scripting 41 WEB Google Security Research
2017-06-01   WebKit - 'CachedFrameBase::restore' Universal Cross-Site Scripting 37 WEB Google Security Research
2017-06-01   WebKit - CachedFrame does not Detach Openers Universal Cross-Site Scripting 44 WEB Google Security Research
2017-06-01   Riverbed SteelHead VCX 9.6.0a - Arbitrary File Read 40 WEB Gregory Draperi
2017-05-31   Piwigo Plugin Facetag 0.0.3 - Cross-Site Scripting 41 WEB Touhid M.Shaikh
2017-05-31   OV3 Online Administration 3.0 - SQL Injection 47 WEB LiquidWorm
2017-05-31   OV3 Online Administration 3.0 - Remote Code Execution 42 WEB LiquidWorm
2017-05-31   OV3 Online Administration 3.0 - Directory Traversal 41 WEB LiquidWorm
2017-05-30   Piwigo Plugin Facetag 0.0.3 - SQL Injection 42 WEB Touhid M.Shaikh
2017-05-30   TerraMaster F2-420 NAS TOS 3.0.30 - Root Remote Code Execution 43 WEB Simone Margaritelli
2017-05-30   IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Hea 41 WEB SecuriTeam
2017-05-30   KEMP LoadMaster 7.135.0.13245 - Persistent Cross-Site Scripting / Remote Code Execution 42 WEB SecuriTeam
2017-05-30   Trend Micro Deep Security 6.5 - XML External Entity Injection / Local Privilege Escalation / Remote 42 WEB SecuriTeam
2017-05-30   uc-http Daemon - Local File Inclusion / Directory Traversal 42 WEB Project Insecurity
2017-05-29   WordPress Plugin Huge-IT Video Gallery 2.0.4 - SQL Injection 39 WEB defensecode
2017-05-26   QWR-1104 Wireless-N Router - Cross-Site Scripting 42 WEB Touhid M.Shaikh
2017-02-22   D-Link DCS Series Cameras - Insecure Crossdomain 44 WEB SlidingWindow
2017-05-25   Apple Safari 10.0.3(12602.4.8) / WebKit - 'HTMLObjectElement::updateWidget' Universal Cross-Site Scr 41 WEB Google Security Research
2017-05-25   WebKit - 'FrameLoader::clear' Stealing Variables via Page Navigation 42 WEB Google Security Research
2017-05-25   WebKit - 'enqueuePageshowEvent' / 'enqueuePopstateEvent' Universal Cross-Site Scripting 40 WEB Google Security Research
2017-05-25   WebKit - 'ContainerNode::parserInsertBefore' Universal Cross-Site Scripting 46 WEB Google Security Research
2017-05-25   WebKit - 'ContainerNode::parserRemoveChild' Universal Cross-Site Scripting 39 WEB Google Security Research
2017-05-25   Apple WebKit / Safari 10.0.3(12602.4.8) - 'Editor::Command::execute' Universal Cross-Site Scripting 46 WEB Google Security Research
2017-05-25   Sophos Cyberoam - Cross-site scripting 47 WEB Bhadresh Patel
2017-05-24   NetGain EM 7.2.647 build 941 - Authentication Bypass / Local File Inclusion 42 WEB f3ci
2017-05-24   NetGain EM 7.2.647 build 941 - Authentication Bypass / Local File Inclusion 44 WEB f3ci
2017-05-21   PlaySMS 1.4 - 'import.php' Remote Code Execution 44 WEB Touhid M.Shaikh
2017-05-20   Mantis Bug Tracker 1.3.10/2.3.0 - Cross-Site Request Forgery 47 WEB hyp3rlinx
2017-05-20   KMCIS CaseAware - Cross-Site Scripting 39 WEB justpentest
2017-05-19   D-Link DIR-600M Wireless N 150 - Authentication Bypass 45 WEB Touhid M.Shaikh
2017-05-19   PlaySMS 1.4 - Remote Code Execution 44 WEB Touhid M.Shaikh
2017-05-19   ManageEngine ServiceDesk Plus 9.0 - Authentication Bypass 47 WEB ByteM3
2017-05-19   SAP Business One for Android 1.2.3 - XML External Entity Injection 45 WEB Ravindra Singh Rathore
2017-05-19   Belden Garrettcom 6K/10K Switches - Authentication Bypass / Memory Corruption 45 WEB David Tomaschik
2017-05-19   Oracle PeopleSoft - Server-Side Request Forgery 41 WEB ERPScan
2017-05-19   Joomla! 3.7.0 - 'com_fields' SQL Injection 48 WEB Mateus Lino
2017-05-17   INFOR EAM 11.0 Build 201410 - Persistent Cross-Site Scripting via Comment Fields 46 WEB Yoroi
2017-05-17   INFOR EAM 11.0 Build 201410 - 'filtervalue' SQL Injection 42 WEB Yoroi
2017-01-12   Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 SP2 - Multiple Vulnerabilities 43 WEB SlidingWindow
2017-02-28   Sophos Web Appliance 4.3.1.1 - Session Fixation 47 WEB SlidingWindow
2017-04-28   Admidio 3.2.8 - Cross-Site Request Forgery 46 WEB Faiz Ahmed Zaidi
2017-05-15   Mailcow 0.14 - Cross-Site Request Forgery 45 WEB hyp3rlinx
2017-05-14   PlaySMS 1.4 - '/sendfromfile.php' Remote Code Execution / Unrestricted File Upload 44 WEB Touhid M.Shaikh
2017-05-02   Zyxel P-660HW-61 Firmware < 3.40(PE.11)C0 Router - Local File Inclusion 48 WEB ReverseBrain
2017-05-10   CMS Made Simple 2.1.6 - Multiple Vulnerabilities 46 WEB Osanda Malith Jayathissa
2017-05-10   Gongwalker API Manager 1.1 - Cross-Site Request Forgery 42 WEB HaHwul
2017-05-10   BanManager WebUI 1.5.8 - PHP Code Injection 45 WEB HaHwul
2017-05-10   QNAP PhotoStation 5.2.4 / MusicStation 4.8.4 - Authentication Bypass 45 WEB Kacper Szurek
2017-05-09   Personify360 7.5.2/7.6.1 - Improper Database Schema Access Restrictions 43 WEB Pesach Zirkind
2017-05-09   Personify360 7.5.2/7.6.1 - Improper Access Restrictions 43 WEB Pesach Zirkind
2017-05-09   I_ Librarian 4.6/4.7 - Command Injection / Server Side Request Forgery / Directory Enumeration / Cro 48 WEB SEC Consult
2017-05-09   I_ Librarian 4.6/4.7 - Command Injection / Server Side Request Forgery / Directory Enumeration / Cro 43 WEB SEC Consult
2017-04-24   LogRhythm Network Monitor - Authentication Bypass / Command Injection 47 WEB Francesco Oddo
2017-05-05   ViMbAdmin 3.0.15 - Multiple Cross-Site Request Forgery Vulnerabilities 54 WEB Sysdream
2017-05-05   WordPress Plugin WebDorado Gallery 1.3.29 - SQL Injection 45 WEB defensecode
2017-05-03   WordPress Core < 4.7.4 - Unauthorized Password Reset 49 WEB Dawid Golunski
2017-05-03   WordPress Core 4.6 - Remote Code Execution 46 WEB Dawid Golunski
2017-05-03   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Code Execution 50 WEB LiquidWorm
2017-05-03   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Password Change 51 WEB LiquidWorm
2017-05-03   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Information Disclosure 47 WEB LiquidWorm
2017-05-01   Tuleap Project Wiki 8.3 < 9.6.99.86 - Command Injection 46 WEB Ben Nott
2017-05-01   Alerton Webtalk 2.5/3.3 - Multiple Vulnerabilities 48 WEB David Tomaschik
2017-04-30   Emby MediaServer 3.2.5 - Directory Traversal 47 WEB LiquidWorm
2017-04-30   Emby MediaServer 3.2.5 - Password Reset 51 WEB LiquidWorm
2017-04-30   Emby MediaServer 3.2.5 - SQL Injection 50 WEB LiquidWorm
2017-04-27   Easy File Uploader - Arbitrary File Upload 49 WEB Daniel Godoy
2017-04-27   Simple File Uploader - Arbitrary File Download 48 WEB Daniel Godoy
2017-04-27   TYPO3 Extension News - SQL Injection 49 WEB Charles Fol
2017-04-26   Revive Ad Server 4.0.1 - Cross-Site Scripting / Cross-Site Request Forgery 47 WEB Cyril Vallicari
2017-04-25   October CMS 1.0.412 - Multiple Vulnerabilities 48 WEB Anti Räis
2017-04-24   Joomla! Component Myportfolio 3.0.2 - 'pid' SQL Injection 44 WEB Persian Hack Team
2017-04-25   OpenText Documentum Content Server - dm_bp_transition.ebs docbase Method Arbitrary Code Execution 45 WEB Andrey B. Panfilov
2017-04-25   HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion 51 WEB Paolo Stagno
2017-04-25   HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion 52 WEB Paolo Stagno
2017-04-25   Oracle E-Business Suite 12.2.3 - 'IESFOOTPRINT' SQL Injection 46 WEB ERPScan
2017-04-25   Oracle PeopleSoft - 'PeopleSoftServiceListeningConnector' XML External Entity via DOCTYPE 44 WEB ERPScan
2017-04-25   WordPress Plugin Wow Forms 2.1 - SQL Injection 45 WEB TAD GROUP
2017-04-25   WordPress Plugin Wow Viral Signups 2.1 - SQL Injection 42 WEB TAD GROUP
2017-04-25   WordPress Plugin Car Rental System 2.5 - SQL Injection 42 WEB TAD GROUP
2017-04-25   WordPress Plugin KittyCatfish 2.2 - SQL Injection 41 WEB TAD GROUP
2017-04-25   FlySpray 1.0-rc4 - Cross-Site Scripting / Cross-Site Request Forgery 44 WEB Cyril Vallicari
2017-04-20   Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'operationSpreadGeneric' Universal Cross-Site Scripti 43 WEB Google Security Research
2017-04-20   Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'PrototypeMap::createEmptyStructure' Universal Cross- 48 WEB Google Security Research
2017-04-16   Mantis Bug Tracker 1.3.0/2.3.0 - Password Reset 42 WEB hyp3rlinx
2017-04-14   Concrete5 CMS 8.1.0 - 'Host' Header Injection 46 WEB hyp3rlinx
2017-04-13   Alienvault OSSIM/USM 5.3.4/5.3.5 - Remote Command Execution (Metasploit) 42 WEB Peter Lapp
2017-04-13   agorum core Pro 7.8.1.4-251 - Persistent Cross-Site Scripting 51 WEB SySS GmbH
2017-04-13   agorum core Pro 7.8.1.4-251 - Cross-Site Request Forgery 48 WEB SySS GmbH
2016-01-11   SedSystems D3 Decimator - Multiple Vulnerabilities 43 WEB prdelka
2017-02-15   Coppermine Gallery < 1.5.44 - Directory Traversal 42 WEB Hacker Fantastic
2017-04-11   Apple WebKit / Safari 10.0.3 (12602.4.8) - Universal Cross-Site Scripting via a Focus Event and a Li 39 WEB Google Security Research
2017-04-11   Apple WebKit / Safari 10.0.3 (12602.4.8) - Synchronous Page Load Universal Cross-Site Scripting 44 WEB Google Security Research
2017-04-11   Horde Groupware Webmail 3/4/5 - Multiple Remote Code Executions 42 WEB SecuriTeam
2017-04-11   Brother MFC-J6520DW - Authentication Bypass / Password Change 44 WEB Patryk Bogdan
2017-04-11   MyBB smilie Module < 1.8.11 - 'pathfolder' Directory Traversal 40 WEB Zhiyang Zeng
2017-04-11   MyBB < 1.8.11 - 'email' MyCode Cross-Site Scripting 39 WEB Zhiyang Zeng
2017-04-11   FAQ Script 3.1.3 - 'category_id' SQL Injection 42 WEB Ihsan Sencan
2017-04-11   Social Directory Script 2.0 - SQL Injection 43 WEB Ihsan Sencan
2017-04-11   WordPress Plugin Spider Event Calendar 1.5.51 - Blind SQL Injection 51 WEB Manuel García Cárdenas
2017-04-11   MyClassifiedScript 5.1 - SQL Injection 39 WEB Ihsan Sencan
2017-04-07   Adobe (Multiple Products) - XML Injection File Content Disclosure 39 WEB Tess Sluyter
2017-04-08   Jobscript4Web 4.5 - Authentication Bypass 40 WEB TurkCyberArmy
2017-04-07   WordPress Plugin CopySafe Web Protect < 2.6 - Cross-Site Request Forgery 41 WEB Zhiyang Zeng
2017-04-07   WordPress Plugin WHIZZ < 1.1.1 - Cross-Site Request Forgery 43 WEB Zhiyang Zeng
2017-04-07   e107 CMS 2.1.4 - Cross-Site Request Forgery 43 WEB Zhiyang Zeng
2017-04-07   QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection 43 WEB Harry Sintonen
2017-04-07   WordPress Plugin Firewall 2 1.3 - Cross-Site Request Forgery / Cross-Site Scripting 43 WEB dxw
2017-04-07   WordPress Plugin Firewall 2 1.3 - Cross-Site Request Forgery / Cross-Site Scripting 39 WEB dxw