|
2024-01-29
|
|
Bank Locker Management System - SQL Injection
|
35 |
WEB
|
SoSPiro
|
|
2023-10-09
|
|
Splunk 9.0.5 - admin account take over
|
63 |
WEB
|
Redway Security
|
|
2023-10-09
|
|
Shuttle-Booking-Software v1.0 - Multiple-SQLi
|
69 |
WEB
|
nu11secur1ty
|
|
2023-10-09
|
|
Limo Booking Software v1.0 - CORS
|
25 |
WEB
|
nu11secur1ty
|
|
2023-10-09
|
|
Webedition CMS v2.9.8.8 - Blind SSRF
|
28 |
WEB
|
Mirabbas Ağalarov
|
|
2023-10-09
|
|
BoidCMS v2.0.0 - authenticated file upload vulnerability
|
26 |
WEB
|
1337kid
|
|
2023-10-09
|
|
Cacti 1.2.24 - Authenticated command injection when using SNMP options
|
26 |
WEB
|
Antonio Francesco Sardella
|
|
2023-10-09
|
|
Wordpress Sonaar Music Plugin 4.7 - Stored XSS
|
27 |
WEB
|
Furkan Karaarslan
|
|
2023-10-09
|
|
Coppermine Gallery 1.6.25 - RCE
|
28 |
WEB
|
Mirabbas Ağalarov
|
|
2023-10-09
|
|
Media Library Assistant Wordpress Plugin - RCE and LFI
|
24 |
WEB
|
Florent MONTEL
|
|
2023-10-09
|
|
WEBIGniter v28.7.23 File Upload - Remote Code Execution
|
24 |
WEB
|
nu11secur1ty
|
|
2023-10-09
|
|
Wordpress Plugin Masterstudy LMS - 3.0.17 - Unauthenticated Instructor Account Creation
|
32 |
WEB
|
Revan Arifio
|
|
2023-10-09
|
|
Minio 2022-07-29T19-40-48Z - Path traversal
|
27 |
WEB
|
Jenson Zhao
|
|
2023-10-09
|
|
Clcknshop 1.0.0 - SQL Injection
|
59 |
WEB
|
CraCkEr
|
|
2023-10-09
|
|
Online ID Generator 1.0 - Remote Code Execution (RCE)
|
30 |
WEB
|
nu11secur1ty
|
|
2023-10-09
|
|
GLPI GZIP(Py3) 9.4.5 - RCE
|
39 |
WEB
|
Brian Peters
|
|
2023-09-08
|
|
Drupal 10.1.2 - web-cache-poisoning-External-service-interaction
|
31 |
WEB
|
nu11secur1ty
|
|
2023-09-08
|
|
Axigen < 10.3.3.47_ 10.2.3.12 - Reflected XSS
|
47 |
WEB
|
AmirZargham
|
|
2023-09-08
|
|
soosyze 2.0.0 - File Upload
|
24 |
WEB
|
nu11secur1ty
|
|
2023-09-08
|
|
Wp2Fac - OS Command Injection
|
24 |
WEB
|
Ahmet Ümit BAYRAM
|
|
2023-09-08
|
|
Wordpress Plugin Elementor 3.5.5 - Iframe Injection
|
26 |
WEB
|
Miguel Santareno
|
|
2023-09-08
|
|
Jorani v1.0.3-(c)2014-2023 - XSS Reflected & Information Disclosure
|
22 |
WEB
|
nu11secur1ty
|
|
2023-09-08
|
|
SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection
|
22 |
WEB
|
CraCkEr
|
|
2023-09-04
|
|
SPA-Cart eCommerce CMS 1.9.0.3 - Reflected XSS
|
26 |
WEB
|
CraCkEr
|
|
2023-09-04
|
|
Bus Reservation System 1.1 - Multiple-SQLi
|
24 |
WEB
|
nu11secur1ty
|
|
2023-09-04
|
|
WP Statistics Plugin 13.1.5 current_page_id - Time based SQL injection (Unauthenticated)
|
21 |
WEB
|
psychoSherlock
|
|
2023-09-04
|
|
Member Login Script 3.3 - Client-side desync
|
22 |
WEB
|
nu11secur1ty
|
|
2023-09-04
|
|
DLINK DPH-400SE - Exposure of Sensitive Information
|
23 |
WEB
|
tahaafarooq
|
|
2023-09-04
|
|
FileMage Gateway 1.10.9 - Local File Inclusion
|
27 |
WEB
|
Bryce Raindayzz Harty
|
|
2023-09-04
|
|
AdminLTE PiHole 5.18 - Broken Access Control
|
25 |
WEB
|
kv1to
|
|
2023-09-04
|
|
CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin 'Gallery')
|
31 |
WEB
|
Daniel González
|
|
2023-09-04
|
|
CSZ CMS 1.3.0 - Stored Cross-Site Scripting ('Photo URL' and 'YouTube URL' )
|
30 |
WEB
|
Daniel González
|
|
2023-09-04
|
|
Academy LMS 6.1 - Arbitrary File Upload
|
22 |
WEB
|
CraCkEr
|
|
2023-09-04
|
|
Credit Lite 1.5.4 - SQL Injection
|
36 |
WEB
|
CraCkEr
|
|
2023-09-04
|
|
Hyip Rio 2.1 - Arbitrary File Upload
|
29 |
WEB
|
CraCkEr
|
|
2023-09-04
|
|
Blood Donor Management System v1.0 - Stored XSS
|
27 |
WEB
|
Ehlullah Albayrak
|
|
2023-08-24
|
|
Uvdesk 1.1.4 - Stored XSS (Authenticated)
|
29 |
WEB
|
Hubert Wojciechowski
|
|
2023-08-24
|
|
User Registration & Login and User Management System v3.0 - SQL Injection (Unauthenticated)
|
25 |
WEB
|
Ashutosh Singh Umath
|
|
2023-08-24
|
|
User Registration & Login and User Management System v3.0 - Stored Cross-Site Scripting (XSS)
|
52 |
WEB
|
Ashutosh Singh Umath
|
|
2023-08-21
|
|
Taskhub CRM Tool 2.8.6 - SQL Injection
|
49 |
WEB
|
Ahmet Ümit BAYRAM
|
|
2023-08-21
|
|
OVOO Movie Portal CMS v3.3.3 - SQL Injection
|
28 |
WEB
|
Ahmet Ümit BAYRAM
|
|
2023-08-21
|
|
Global - Multi School Management System Express v1.0- SQL Injection
|
28 |
WEB
|
Ahmet Ümit BAYRAM
|
|
2023-08-21
|
|
Color Prediction Game v1.0 - SQL Injection
|
28 |
WEB
|
Ahmet Ümit BAYRAM
|
|
2023-08-21
|
|
Crypto Currency Tracker (CCT) 9.5 - Admin Account Creation (Unauthenticated)
|
26 |
WEB
|
0xBr
|
|
2023-08-21
|
|
PHPJabbers Business Directory Script v3.2 - Multiple Vulnerabilities
|
27 |
WEB
|
Kerimcan Ozturk
|
|
2023-08-21
|
|
Dolibarr Version 17.0.1 - Stored XSS
|
31 |
WEB
|
Furkan Karaarslan
|
|
2023-08-08
|
|
Emagic Data Center Management Suite v6.0 - OS Command Injection
|
31 |
WEB
|
thewhiteh4t
|
|
2023-08-08
|
|
PHPJabbers Vacation Rental Script 4.0 - CSRF
|
23 |
WEB
|
Hasan Ali YILDIR
|
|
2023-08-08
|
|
Social-Commerce 3.1.6 - Reflected XSS
|
27 |
WEB
|
CraCkEr
|
|
2023-08-08
|
|
mooSocial 3.1.8 - Reflected XSS
|
34 |
WEB
|
CraCkEr
|
|
2023-08-08
|
|
Pyro CMS 3.9 - Server-Side Template Injection (SSTI) (Authenticated)
|
29 |
WEB
|
Daniel Barros
|
|
2023-08-08
|
|
Lucee 5.4.2.17 - Authenticated Reflected XSS
|
26 |
WEB
|
Yehia Elghaly
|
|
2023-08-08
|
|
Adlisting Classified Ads 2.14.0 - WebPage Content Information Disclosure
|
28 |
WEB
|
CraCkEr
|
|
2023-08-04
|
|
WordPress Plugin Forminator 1.24.6 - Unauthenticated Remote Command Execution
|
32 |
WEB
|
Mehmet Kelepçe
|
|
2023-08-04
|
|
WordPress adivaha Travel Plugin 2.3 - Reflected XSS
|
28 |
WEB
|
CraCkEr
|
|
2023-08-04
|
|
Webedition CMS v2.9.8.8 - Stored XSS
|
25 |
WEB
|
Mirabbas Ağalarov
|
|
2023-08-04
|
|
Webedition CMS v2.9.8.8 - Remote Code Execution (RCE)
|
28 |
WEB
|
Mirabbas Ağalarov
|
|
2023-08-04
|
|
Webutler v3.2 - Remote Code Execution (RCE)
|
29 |
WEB
|
Mirabbas Ağalarov
|
|
2023-08-04
|
|
Wordpress Plugin EventON Calendar 4.4 - Unauthenticated Post Access via IDOR
|
26 |
WEB
|
Miguel Santareno
|
|
2023-08-04
|
|
Wordpress Plugin EventON Calendar 4.4 - Unauthenticated Event Access
|
25 |
WEB
|
Miguel Santareno
|
|
2023-08-04
|
|
Campcodes Online Matrimonial Website System v3.3 - Code Execution via malicious SVG file upload
|
28 |
WEB
|
Rajdip Dey Sarkar
|
|
2023-08-04
|
|
WordPress adivaha Travel Plugin 2.3 - SQL Injection
|
22 |
WEB
|
CraCkEr
|
|
2023-08-04
|
|
Academy LMS 6.0 - Reflected XSS
|
30 |
WEB
|
CraCkEr
|
|
2023-08-04
|
|
PHPJabbers Rental Property Booking 2.0 - Reflected XSS
|
28 |
WEB
|
CraCkEr
|
|
2023-08-04
|
|
PHPJabbers Taxi Booking 2.0 - Reflected XSS
|
31 |
WEB
|
CraCkEr
|
|
2023-08-04
|
|
PHPJabbers Cleaning Business 1.0 - Reflected XSS
|
23 |
WEB
|
CraCkEr
|
|
2023-08-04
|
|
PHPJabbers Night Club Booking 1.0 - Reflected XSS
|
24 |
WEB
|
CraCkEr
|
|
2023-08-04
|
|
PHPJabbers Service Booking Script 1.0 - Reflected XSS
|
23 |
WEB
|
CraCkEr
|
|
2023-08-04
|
|
PHPJabbers Shuttle Booking Software 1.0 - Reflected XSS
|
31 |
WEB
|
CraCkEr
|
|
2023-08-04
|
|
JLex GuestBook 1.6.4 - Reflected XSS
|
26 |
WEB
|
CraCkEr
|
|
2023-08-04
|
|
Ozeki SMS Gateway 10.3.208 - Arbitrary File Read (Unauthenticated)
|
28 |
WEB
|
Ahmet Ümit BAYRAM
|
|
2023-08-04
|
|
Joomla JLex Review 6.0.1 - Reflected XSS
|
28 |
WEB
|
CraCkEr
|
|
2023-08-04
|
|
WordPress Plugin Ninja Forms 3.6.25 - Reflected XSS
|
25 |
WEB
|
Mehran Seifalinia
|
|
2023-08-04
|
|
Adiscon LogAnalyzer v.4.1.13 - Cross Site Scripting
|
28 |
WEB
|
Pedro
|
|
2023-07-31
|
|
Joomla iProperty Real Estate 4.1.1 - Reflected XSS
|
29 |
WEB
|
CraCkEr
|
|
2023-07-31
|
|
Uvdesk v1.1.3 - File Upload Remote Code Execution (RCE) (Authenticated)
|
33 |
WEB
|
Daniel Barros
|
|
2023-07-31
|
|
Joomla Solidres 2.13.3 - Reflected XSS
|
35 |
WEB
|
CraCkEr
|
|
2023-07-28
|
|
copyparty 1.8.2 - Directory Traversal
|
32 |
WEB
|
Vartamtezidis Theodoros
|
|
2023-07-28
|
|
copyparty v1.8.6 - Reflected Cross Site Scripting (XSS)
|
56 |
WEB
|
Vartamtezidis Theodoros
|
|
2023-07-28
|
|
WordPress Plugin AN_Gradebook 5.0.1 - SQLi
|
27 |
WEB
|
Lukas Kinneberg
|
|
2023-07-28
|
|
Joomla VirtueMart Shopping Cart 4.0.12 - Reflected XSS
|
27 |
WEB
|
CraCkEr
|
|
2023-07-28
|
|
October CMS v3.4.4 - Stored Cross-Site Scripting (XSS) (Authenticated)
|
22 |
WEB
|
Okan Kurtulus
|
|
2023-07-28
|
|
Joomla HikaShop 4.7.4 - Reflected XSS
|
27 |
WEB
|
CraCkEr
|
|
2023-07-28
|
|
mooDating 1.2 - Reflected Cross-site scripting (XSS)
|
27 |
WEB
|
CraCkEr
|
|
2023-07-28
|
|
Perch v3.2 - Persistent Cross Site Scripting (XSS)
|
28 |
WEB
|
Dinesh Mohanty
|
|
2023-07-28
|
|
Availability Booking Calendar v1.0 - Multiple Cross-site scripting (XSS)
|
27 |
WEB
|
Andrey Stoykov
|
|
2023-07-28
|
|
Zomplog 3.9 - Cross-site scripting (XSS)
|
33 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-28
|
|
zomplog 3.9 - Remote Code Execution (RCE)
|
23 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-28
|
|
RosarioSIS 10.8.4 - CSV Injection
|
29 |
WEB
|
Ranjeet Jaiswal
|
|
2023-07-21
|
|
Perch v3.2 - Stored XSS
|
25 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-21
|
|
Perch v3.2 - Remote Code Execution (RCE)
|
30 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-20
|
|
RWS WorldServer 11.7.3 - Session Token Enumeration
|
28 |
WEB
|
RedTeam Pentesting GmbH
|
|
2023-07-20
|
|
PaulPrinting CMS - Multiple Cross Site Web Vulnerabilities
|
23 |
WEB
|
Vulnerability-Lab
|
|
2023-07-20
|
|
Aures Booking & POS Terminal - Local Privilege Escalation
|
25 |
WEB
|
Vulnerability-Lab
|
|
2023-07-20
|
|
Webile v1.0.1 - Multiple Cross Site Scripting
|
29 |
WEB
|
Vulnerability-Lab
|
|
2023-07-20
|
|
Dooblou WiFi File Explorer 1.13.3 - Multiple Vulnerabilities
|
30 |
WEB
|
Vulnerability-Lab
|
|
2023-07-20
|
|
PaulPrinting CMS - (Search Delivery) Cross Site Scripting
|
38 |
WEB
|
Vulnerability-Lab
|
|
2023-07-20
|
|
Active Super Shop CMS v2.5 - HTML Injection Vulnerabilities
|
28 |
WEB
|
Vulnerability-Lab
|
|
2023-07-20
|
|
Boom CMS v8.0.7 - Cross Site Scripting
|
31 |
WEB
|
Vulnerability-Lab
|
|
2023-07-20
|
|
Wifi Soft Unibox Administration 3.0 & 3.1 - SQL Injection
|
36 |
WEB
|
Ansh Jain
|
|
2023-07-20
|
|
pfSense v2.7.0 - OS Command Injection
|
26 |
WEB
|
Emir Polat
|
|
2023-07-19
|
|
TP-Link TL-WR740N - Authenticated Directory Transversal
|
35 |
WEB
|
Anish Feroz
|
|
2023-07-19
|
|
Blackcat Cms v1.4 - Remote Code Execution (RCE)
|
24 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-19
|
|
Blackcat Cms v1.4 - Stored XSS
|
24 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-19
|
|
ABB FlowX v4.00 - Exposure of Sensitive Information
|
29 |
WEB
|
Paul Smith
|
|
2023-07-19
|
|
Statamic 4.7.0 - File-Inclusion
|
31 |
WEB
|
nu11secur1ty
|
|
2023-07-19
|
|
CmsMadeSimple v2.2.17 - Stored Cross-Site Scripting (XSS)
|
25 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-19
|
|
CmsMadeSimple v2.2.17 - Remote Code Execution (RCE)
|
21 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-19
|
|
CmsMadeSimple v2.2.17 - session hijacking via Server-Side Template Injection (SSTI)
|
27 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-19
|
|
Online Piggery Management System v1.0 - unauthenticated file upload vulnerability
|
24 |
WEB
|
1337kid
|
|
2023-07-19
|
|
Backdrop Cms v1.25.1 - Stored Cross-Site Scripting (XSS)
|
35 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-19
|
|
Vaidya-Mitra 1.0 - Multiple SQLi
|
37 |
WEB
|
nu11secur1ty
|
|
2023-07-19
|
|
Joomla! com_booking component 2.4.9 - Information Leak (Account enumeration)
|
28 |
WEB
|
qw3rTyTy
|
|
2023-07-19
|
|
phpfm v1.7.9 - Authentication type juggling
|
26 |
WEB
|
thoughtfault
|
|
2023-07-19
|
|
PimpMyLog v1.7.14 - Improper access control
|
39 |
WEB
|
thoughtfault
|
|
2023-07-15
|
|
Pluck v4.7.18 - Remote Code Execution (RCE)
|
30 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-15
|
|
WinterCMS < 1.2.3 - Persistent Cross-Site Scripting
|
33 |
WEB
|
abhishek morla
|
|
2023-07-15
|
|
Admidio v4.2.10 - Remote Code Execution (RCE)
|
26 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-15
|
|
Cisco UCS-IMC Supervisor 2.2.0.0 - Authentication Bypass
|
21 |
WEB
|
Fatih Sencer
|
|
2023-07-15
|
|
ProjeQtOr Project Management System v10.4.1 - Multiple XSS
|
25 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-15
|
|
News Portal v4.0 - SQL Injection (Unauthorized)
|
24 |
WEB
|
Hubert Wojciechowski
|
|
2023-07-15
|
|
Icinga Web 2.10 - Authenticated Remote Code Execution
|
39 |
WEB
|
Dante Corona
|
|
2023-07-11
|
|
Ateme TITAN File 3.9 - SSRF File Enumeration
|
26 |
WEB
|
LiquidWorm
|
|
2023-07-11
|
|
BuildaGate5library v5 - Reflected Cross-Site Scripting (XSS)
|
28 |
WEB
|
Idan Malihi
|
|
2023-07-11
|
|
Frappe Framework (ERPNext) 13.4.0 - Remote Code Execution (Authenticated)
|
29 |
WEB
|
Sander Ferdinand
|
