Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2017-02-22 Exploit Code Downloads   D-Link DCS Series Cameras - Insecure Crossdomain 38 WEB SlidingWindow
2017-05-25 Exploit Code Downloads   Apple Safari 10.0.3(12602.4.8) / WebKit - 'HTMLObjectElement::updateWidget' Universal Cross-Site Scr 34 WEB Google Security Research
2017-05-25 Exploit Code Downloads   WebKit - 'FrameLoader::clear' Stealing Variables via Page Navigation 35 WEB Google Security Research
2017-05-25 Exploit Code Downloads   WebKit - 'enqueuePageshowEvent' / 'enqueuePopstateEvent' Universal Cross-Site Scripting 33 WEB Google Security Research
2017-05-25 Exploit Code Downloads   WebKit - 'ContainerNode::parserInsertBefore' Universal Cross-Site Scripting 38 WEB Google Security Research
2017-05-25 Exploit Code Downloads   WebKit - 'ContainerNode::parserRemoveChild' Universal Cross-Site Scripting 33 WEB Google Security Research
2017-05-25 Exploit Code Downloads   Apple WebKit / Safari 10.0.3(12602.4.8) - 'Editor::Command::execute' Universal Cross-Site Scripting 39 WEB Google Security Research
2017-05-25 Exploit Code Downloads   Sophos Cyberoam - Cross-site scripting 39 WEB Bhadresh Patel
2017-05-24 Exploit Code Downloads   NetGain EM 7.2.647 build 941 - Authentication Bypass / Local File Inclusion 37 WEB f3ci
2017-05-24 Exploit Code Downloads   NetGain EM 7.2.647 build 941 - Authentication Bypass / Local File Inclusion 39 WEB f3ci
2017-05-21 Exploit Code Downloads   PlaySMS 1.4 - 'import.php' Remote Code Execution 37 WEB Touhid M.Shaikh
2017-05-20 Exploit Code Downloads   Mantis Bug Tracker 1.3.10/2.3.0 - Cross-Site Request Forgery 38 WEB hyp3rlinx
2017-05-20 Exploit Code Downloads   KMCIS CaseAware - Cross-Site Scripting 33 WEB justpentest
2017-05-19 Exploit Code Downloads   D-Link DIR-600M Wireless N 150 - Authentication Bypass 38 WEB Touhid M.Shaikh
2017-05-19 Exploit Code Downloads   PlaySMS 1.4 - Remote Code Execution 38 WEB Touhid M.Shaikh
2017-05-19 Exploit Code Downloads   ManageEngine ServiceDesk Plus 9.0 - Authentication Bypass 39 WEB ByteM3
2017-05-19 Exploit Code Downloads   SAP Business One for Android 1.2.3 - XML External Entity Injection 38 WEB Ravindra Singh Rathore
2017-05-19 Exploit Code Downloads   Belden Garrettcom 6K/10K Switches - Authentication Bypass / Memory Corruption 36 WEB David Tomaschik
2017-05-19 Exploit Code Downloads   Oracle PeopleSoft - Server-Side Request Forgery 35 WEB ERPScan
2017-05-19 Exploit Code Downloads   Joomla! 3.7.0 - 'com_fields' SQL Injection 40 WEB Mateus Lino
2017-05-17 Exploit Code Downloads   INFOR EAM 11.0 Build 201410 - Persistent Cross-Site Scripting via Comment Fields 41 WEB Yoroi
2017-05-17 Exploit Code Downloads   INFOR EAM 11.0 Build 201410 - 'filtervalue' SQL Injection 37 WEB Yoroi
2017-01-12 Exploit Code Downloads   Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 SP2 - Multiple Vulnerabilities 36 WEB SlidingWindow
2017-02-28 Exploit Code Downloads   Sophos Web Appliance 4.3.1.1 - Session Fixation 39 WEB SlidingWindow
2017-04-28 Exploit Code Downloads   Admidio 3.2.8 - Cross-Site Request Forgery 38 WEB Faiz Ahmed Zaidi
2017-05-15 Exploit Code Downloads   Mailcow 0.14 - Cross-Site Request Forgery 38 WEB hyp3rlinx
2017-05-14 Exploit Code Downloads   PlaySMS 1.4 - '/sendfromfile.php' Remote Code Execution / Unrestricted File Upload 38 WEB Touhid M.Shaikh
2017-05-02 Exploit Code Downloads   Zyxel P-660HW-61 Firmware < 3.40(PE.11)C0 Router - Local File Inclusion 42 WEB ReverseBrain
2017-05-10 Exploit Code Downloads   CMS Made Simple 2.1.6 - Multiple Vulnerabilities 36 WEB Osanda Malith Jayathissa
2017-05-10 Exploit Code Downloads   Gongwalker API Manager 1.1 - Cross-Site Request Forgery 36 WEB HaHwul
2017-05-10 Exploit Code Downloads   BanManager WebUI 1.5.8 - PHP Code Injection 40 WEB HaHwul
2017-05-10 Exploit Code Downloads   QNAP PhotoStation 5.2.4 / MusicStation 4.8.4 - Authentication Bypass 40 WEB Kacper Szurek
2017-05-09 Exploit Code Downloads   Personify360 7.5.2/7.6.1 - Improper Database Schema Access Restrictions 38 WEB Pesach Zirkind
2017-05-09 Exploit Code Downloads   Personify360 7.5.2/7.6.1 - Improper Access Restrictions 37 WEB Pesach Zirkind
2017-05-09 Exploit Code Downloads   I_ Librarian 4.6/4.7 - Command Injection / Server Side Request Forgery / Directory Enumeration / Cro 40 WEB SEC Consult
2017-05-09 Exploit Code Downloads   I_ Librarian 4.6/4.7 - Command Injection / Server Side Request Forgery / Directory Enumeration / Cro 36 WEB SEC Consult
2017-04-24 Exploit Code Downloads   LogRhythm Network Monitor - Authentication Bypass / Command Injection 42 WEB Francesco Oddo
2017-05-05 Exploit Code Downloads   ViMbAdmin 3.0.15 - Multiple Cross-Site Request Forgery Vulnerabilities 44 WEB Sysdream
2017-05-05 Exploit Code Downloads   WordPress Plugin WebDorado Gallery 1.3.29 - SQL Injection 39 WEB defensecode
2017-05-03 Exploit Code Downloads   WordPress Core < 4.7.4 - Unauthorized Password Reset 41 WEB Dawid Golunski
2017-05-03 Exploit Code Downloads   WordPress Core 4.6 - Remote Code Execution 38 WEB Dawid Golunski
2017-05-03 Exploit Code Downloads   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Code Execution 42 WEB LiquidWorm
2017-05-03 Exploit Code Downloads   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Password Change 41 WEB LiquidWorm
2017-05-03 Exploit Code Downloads   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Information Disclosure 42 WEB LiquidWorm
2017-05-01 Exploit Code Downloads   Tuleap Project Wiki 8.3 < 9.6.99.86 - Command Injection 39 WEB Ben Nott
2017-05-01 Exploit Code Downloads   Alerton Webtalk 2.5/3.3 - Multiple Vulnerabilities 43 WEB David Tomaschik
2017-04-30 Exploit Code Downloads   Emby MediaServer 3.2.5 - Directory Traversal 41 WEB LiquidWorm
2017-04-30 Exploit Code Downloads   Emby MediaServer 3.2.5 - Password Reset 43 WEB LiquidWorm
2017-04-30 Exploit Code Downloads   Emby MediaServer 3.2.5 - SQL Injection 42 WEB LiquidWorm
2017-04-27 Exploit Code Downloads   Easy File Uploader - Arbitrary File Upload 42 WEB Daniel Godoy
2017-04-27 Exploit Code Downloads   Simple File Uploader - Arbitrary File Download 42 WEB Daniel Godoy
2017-04-27 Exploit Code Downloads   TYPO3 Extension News - SQL Injection 43 WEB Charles Fol
2017-04-26 Exploit Code Downloads   Revive Ad Server 4.0.1 - Cross-Site Scripting / Cross-Site Request Forgery 42 WEB Cyril Vallicari
2017-04-25 Exploit Code Downloads   October CMS 1.0.412 - Multiple Vulnerabilities 41 WEB Anti Räis
2017-04-24 Exploit Code Downloads   Joomla! Component Myportfolio 3.0.2 - 'pid' SQL Injection 39 WEB Persian Hack Team
2017-04-25 Exploit Code Downloads   OpenText Documentum Content Server - dm_bp_transition.ebs docbase Method Arbitrary Code Execution 39 WEB Andrey B. Panfilov
2017-04-25 Exploit Code Downloads   HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion 40 WEB Paolo Stagno
2017-04-25 Exploit Code Downloads   HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion 46 WEB Paolo Stagno
2017-04-25 Exploit Code Downloads   Oracle E-Business Suite 12.2.3 - 'IESFOOTPRINT' SQL Injection 38 WEB ERPScan
2017-04-25 Exploit Code Downloads   Oracle PeopleSoft - 'PeopleSoftServiceListeningConnector' XML External Entity via DOCTYPE 39 WEB ERPScan
2017-04-25 Exploit Code Downloads   WordPress Plugin Wow Forms 2.1 - SQL Injection 40 WEB TAD GROUP
2017-04-25 Exploit Code Downloads   WordPress Plugin Wow Viral Signups 2.1 - SQL Injection 37 WEB TAD GROUP
2017-04-25 Exploit Code Downloads   WordPress Plugin Car Rental System 2.5 - SQL Injection 36 WEB TAD GROUP
2017-04-25 Exploit Code Downloads   WordPress Plugin KittyCatfish 2.2 - SQL Injection 34 WEB TAD GROUP
2017-04-25 Exploit Code Downloads   FlySpray 1.0-rc4 - Cross-Site Scripting / Cross-Site Request Forgery 37 WEB Cyril Vallicari
2017-04-20 Exploit Code Downloads   Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'operationSpreadGeneric' Universal Cross-Site Scripti 39 WEB Google Security Research
2017-04-20 Exploit Code Downloads   Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'PrototypeMap::createEmptyStructure' Universal Cross- 41 WEB Google Security Research
2017-04-16 Exploit Code Downloads   Mantis Bug Tracker 1.3.0/2.3.0 - Password Reset 38 WEB hyp3rlinx
2017-04-14 Exploit Code Downloads   Concrete5 CMS 8.1.0 - 'Host' Header Injection 40 WEB hyp3rlinx
2017-04-13 Exploit Code Downloads   Alienvault OSSIM/USM 5.3.4/5.3.5 - Remote Command Execution (Metasploit) 36 WEB Peter Lapp
2017-04-13 Exploit Code Downloads   agorum core Pro 7.8.1.4-251 - Persistent Cross-Site Scripting 44 WEB SySS GmbH
2017-04-13 Exploit Code Downloads   agorum core Pro 7.8.1.4-251 - Cross-Site Request Forgery 40 WEB SySS GmbH
2016-01-11 Exploit Code Downloads   SedSystems D3 Decimator - Multiple Vulnerabilities 38 WEB prdelka
2017-02-15 Exploit Code Downloads   Coppermine Gallery < 1.5.44 - Directory Traversal 35 WEB Hacker Fantastic
2017-04-11 Exploit Code Downloads   Apple WebKit / Safari 10.0.3 (12602.4.8) - Universal Cross-Site Scripting via a Focus Event and a Li 34 WEB Google Security Research
2017-04-11 Exploit Code Downloads   Apple WebKit / Safari 10.0.3 (12602.4.8) - Synchronous Page Load Universal Cross-Site Scripting 38 WEB Google Security Research
2017-04-11 Exploit Code Downloads   Horde Groupware Webmail 3/4/5 - Multiple Remote Code Executions 37 WEB SecuriTeam
2017-04-11 Exploit Code Downloads   Brother MFC-J6520DW - Authentication Bypass / Password Change 39 WEB Patryk Bogdan
2017-04-11 Exploit Code Downloads   MyBB smilie Module < 1.8.11 - 'pathfolder' Directory Traversal 35 WEB Zhiyang Zeng
2017-04-11 Exploit Code Downloads   MyBB < 1.8.11 - 'email' MyCode Cross-Site Scripting 34 WEB Zhiyang Zeng
2017-04-11 Exploit Code Downloads   FAQ Script 3.1.3 - 'category_id' SQL Injection 36 WEB Ihsan Sencan
2017-04-11 Exploit Code Downloads   Social Directory Script 2.0 - SQL Injection 38 WEB Ihsan Sencan
2017-04-11 Exploit Code Downloads   WordPress Plugin Spider Event Calendar 1.5.51 - Blind SQL Injection 46 WEB Manuel García Cárdenas
2017-04-11 Exploit Code Downloads   MyClassifiedScript 5.1 - SQL Injection 34 WEB Ihsan Sencan
2017-04-07 Exploit Code Downloads   Adobe (Multiple Products) - XML Injection File Content Disclosure 34 WEB Tess Sluyter
2017-04-08 Exploit Code Downloads   Jobscript4Web 4.5 - Authentication Bypass 35 WEB TurkCyberArmy
2017-04-07 Exploit Code Downloads   WordPress Plugin CopySafe Web Protect < 2.6 - Cross-Site Request Forgery 36 WEB Zhiyang Zeng
2017-04-07 Exploit Code Downloads   WordPress Plugin WHIZZ < 1.1.1 - Cross-Site Request Forgery 36 WEB Zhiyang Zeng
2017-04-07 Exploit Code Downloads   e107 CMS 2.1.4 - Cross-Site Request Forgery 38 WEB Zhiyang Zeng
2017-04-07 Exploit Code Downloads   QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection 37 WEB Harry Sintonen
2017-04-07 Exploit Code Downloads   WordPress Plugin Firewall 2 1.3 - Cross-Site Request Forgery / Cross-Site Scripting 36 WEB dxw
2017-04-07 Exploit Code Downloads   WordPress Plugin Firewall 2 1.3 - Cross-Site Request Forgery / Cross-Site Scripting 33 WEB dxw
2017-04-07 Exploit Code Downloads   D-Link DWR-116 / DWR-116A1 - Arbitrary File Download 37 WEB Patryk Bogdan
2017-04-07 Exploit Code Downloads   Ladder System 6.0 - 'faqid' SQL Injection 32 WEB Ihsan Sencan
2017-04-07 Exploit Code Downloads   My Gaming Ladder Combo System 7.5 - SQL Injection 33 WEB Ihsan Sencan
2017-04-07 Exploit Code Downloads   Survey Template 1.1 - 'masterkey1' SQL Injection 34 WEB Ihsan Sencan
2017-04-07 Exploit Code Downloads   Quiz Template 1.0 - 'testid' SQL Injection 33 WEB Ihsan Sencan
2017-04-07 Exploit Code Downloads   Forum Template 1.0 - SQL Injection 32 WEB Ihsan Sencan
2017-04-07 Exploit Code Downloads   Calendar Template 2.0 - 'editid1' SQL Injection 33 WEB Ihsan Sencan
2017-04-07 Exploit Code Downloads   Shopping Cart Template - 'item' SQL Injection 35 WEB Ihsan Sencan
2017-04-07 Exploit Code Downloads   Document Management Template - 'hash' SQL Injection 37 WEB Ihsan Sencan
2017-04-07 Exploit Code Downloads   Invoice Template - 'hash' SQL Injection 35 WEB Ihsan Sencan
2017-04-05 Exploit Code Downloads   Faveo Helpdesk Community 1.9.3 - Cross-Site Request Forgery 39 WEB rungga_reksya
2017-04-07 Exploit Code Downloads   Intellinet NFC-30IR Camera - Multiple Vulnerabilities 38 WEB Dimitri Fousekis
2017-04-06 Exploit Code Downloads   Moodle 2.x/3.x - SQL Injection 40 WEB Marko Belzetski
2017-04-05 Exploit Code Downloads   HelpDEZK 1.1.1 - Cross-Site Request Forgery / Code Execution 39 WEB rungga_reksya
2017-04-03 Exploit Code Downloads   GeoMoose < 2.9.2 - Directory Traversal 37 WEB Sander Ferdinand
2017-04-05 Exploit Code Downloads   D-Link DIR-615 - Cross-Site Request Forgery 38 WEB Pratik S. Shah
2017-04-05 Exploit Code Downloads   Appointment Script - SQL Injection 35 WEB Ihsan Sencan
2017-04-05 Exploit Code Downloads   Sweepstakes Pro Software - SQL Injection 40 WEB Ihsan Sencan
2017-04-05 Exploit Code Downloads   Premium Penny Auction Script - SQL Injection 33 WEB Ihsan Sencan
2017-04-05 Exploit Code Downloads   Airbnb Crashpadder Clone Script - SQL Injection 36 WEB Ihsan Sencan
2017-04-05 Exploit Code Downloads   ImagePro Lazygirls Clone Script - SQL Injection 40 WEB Ihsan Sencan
2017-04-04 Exploit Code Downloads   Apple WebKit 10.0.2 (12602.3.12.0.1_ r210800) - 'constructJSReadableStreamDefaultReader' Type Confus 39 WEB Google Security Research
2017-04-04 Exploit Code Downloads   Apple WebKit 10.0.2 (12602.3.12.0.1) - 'disconnectSubframes' Universal Cross-Site Scripting 36 WEB Google Security Research
2017-04-04 Exploit Code Downloads   Apple Webkit - Universal Cross-Site Scripting by Accessing a Named Property from an Unloaded Window 37 WEB Google Security Research
2017-04-04 Exploit Code Downloads   Apple Webkit - 'JSCallbackData' Universal Cross-Site Scripting 39 WEB Google Security Research
2017-04-04 Exploit Code Downloads   Apple WebKit 10.0.2(12602.3.12.0.1) - 'Frame::setDocument (1)' Universal Cross-Site Scripting 36 WEB Google Security Research
2017-04-04 Exploit Code Downloads   Maian Greetings 2.1 - 'cat' SQL Injection 38 WEB Ihsan Sencan
2017-04-04 Exploit Code Downloads   Maian Survey 1.1 - 'survey' SQL Injection 46 WEB Ihsan Sencan
2017-04-04 Exploit Code Downloads   Maian Uploader 4.0 - 'user' SQL Injection 37 WEB Ihsan Sencan
2017-04-02 Exploit Code Downloads   Pixie 1.0.4 - Arbitrary File Upload 36 WEB rungga_reksya
2017-04-02 Exploit Code Downloads   Zyxel_ EMG2926 < V1.00(AAQT.4)b8 - OS Command Injection 37 WEB trevor Hough
2017-03-31 Exploit Code Downloads   Membership Formula - 'order' SQL Injection 39 WEB Ihsan Sencan
2017-03-31 Exploit Code Downloads   Splunk Enterprise - Information Disclosure 36 WEB hyp3rlinx