Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2016-06-02   Relay Ajax Directory Manager relayb01-071706/1.5.1/1.5.3 - Arbitrary File Upload 28 WEB RedTeam Pentesting GmbH
2016-06-02   Liferay CE < 6.2 CE GA6 - Persistent Cross-Site Scripting 23 WEB Fernando Câmara
2016-06-02   Joomla! Component SecurityCheck 2.8.9 - Multiple Vulnerabilities 28 WEB ADEO Security
2016-06-01   AjaxExplorer 1.10.3.2 - Multiple Vulnerabilities 28 WEB hyp3rlinx
2016-05-31   ProcessMaker 3.0.1.7 - Multiple Vulnerabilities 27 WEB Mickael Dorigny
2016-05-31   AirOS NanoStation M2 5.6-beta - Multiple Vulnerabilities 25 WEB Pablo Rebolini
2016-05-31   Flatpress 1.0.3 - Cross-Site Request Forgery / Arbitrary File Upload 28 WEB LiquidWorm
2016-05-30   Open Source Real Estate Script 3.6.0 - SQL Injection 37 WEB Meisam Monsef
2016-05-27   PHP Realestate Script Script 4.9.0 - SQL Injection 30 WEB Meisam Monsef
2016-05-26   EduSec 4.2.5 - SQL Injection 28 WEB Bikramaditya Guha
2016-05-26   Real Estate Portal 4.1 - Multiple Vulnerabilities 26 WEB Bikramaditya Guha
2016-05-24   AfterLogic WebMail Pro ASP.NET 6.2.6 - Administrator Account Disclosure via XML External Entity Inje 32 WEB Mehmet Ince
2016-05-23   XenAPI 1.4.1 for XenForo - Multiple SQL Injections 27 WEB Julien Ahrens
2016-05-23   WordPress Plugin Job Script by Scubez - Remote Code Execution 30 WEB Bikramaditya Guha
2016-05-19   SAP NetWeaver AS JAVA 7.1 < 7.5 - Information Disclosure 28 WEB ERPScan
2016-05-19   SAP NetWeaver AS JAVA 7.1 < 7.5 - SQL Injection 33 WEB ERPScan
2016-05-18   Magento < 2.0.6 - Arbitrary Unserialize / Arbitrary Write File 33 WEB agix
2016-05-17   SAP xMII 15.0 - Directory Traversal 38 WEB ERPScan
2016-05-17   Meteocontrol WEB’log - Admin Password Disclosure (Metasploit) 30 WEB Karn Ganeshen
2016-05-16   Web2py 2.14.5 - Multiple Vulnerabilities 26 WEB Narendra Bhati
2016-05-16   Web Interface for DNSmasq / Mikrotik - SQL Injection 29 WEB hyp3rlinx
2016-05-16   eXtplorer 2.1.9 - '.ZIP' Directory Traversal 36 WEB hyp3rlinx
2016-05-16   CakePHP Framework 3.2.4 - IP Spoofing 28 WEB Dawid Golunski
2016-05-12   Trend Micro - 'CoreServiceShell.exe' Multiple HTTP s 27 WEB Google Security Research
2016-05-12   WordPress Plugin Huge-IT Image Gallery 1.8.9 - Multiple Vulnerabilities 30 WEB Gwendal Le Coguic
2016-05-12   WordPress Plugin Q and A (Focus Plus) FAQ 1.3.9.7 - Multiple Vulnerabilities 28 WEB Gwendal Le Coguic
2016-05-10   JVC HDRs / Net (Multiple Cameras) - Multiple Vulnerabilities 31 WEB Orwelllabs
2016-05-09   ZeewaysCMS - Multiple Vulnerabilities 37 WEB Bikramaditya Guha
2016-05-09   Ajaxel CMS 8.0 - Multiple Vulnerabilities 32 WEB DizzyDuck
2016-05-06   ManageEngine Applications Manager Build 12700 - Multiple Vulnerabilities 29 WEB Saif El-Sherei
2016-05-06   DotNetNuke 07.04.00 - Administration Authentication Bypass 30 WEB Marios Nicolaides
2016-05-04   Imagick 3.3.0 (PHP 5.4) - disable_functions Bypass 26 WEB RicterZ
2016-05-04   IPFire < 2.19 Core Update 101 - Remote Command Execution 27 WEB Yann CAM
2016-05-04   NetCommWireless HSPA 3G10WVE Wireless Router - Multiple Vulnerabilities 30 WEB Bhadresh Patel
2016-05-04   WordPress Plugin Acunetix WP Security Plugin 3.0.3 - Cross-Site Scripting 28 WEB Johto Robbie
2016-05-04   CMS Made Simple < 1.12.1 / < 2.1.3 - Web Server Cache Poisoning 28 WEB Mickaël Walter
2016-05-04   Alibaba Clone B2B Script - Admin Authentication Bypass 27 WEB Meisam Monsef
2016-05-02   WordPress Plugin Ghost 0.5.5 - Unrestricted Export Download 32 WEB Josh Brody
2016-04-29   GLPi 0.90.2 - SQL Injection 28 WEB High-Tech Bridge SA
2016-04-29   Merit Lilin IP Cameras - Multiple Vulnerabilities 28 WEB Orwelllabs
2016-04-29   Observium 0.16.7533 - (Authenticated) Arbitrary Command Execution 29 WEB Dolev Farhi
2016-04-29   Observium 0.16.7533 - Cross-Site Request Forgery 31 WEB Dolev Farhi
2016-04-27   RomPager 4.34 (Multiple Router Vendors) - 'Misfortune Cookie' Authentication Bypass 25 WEB Milad Doorbash
2016-04-27   EMC ViPR SRM - Cross-Site Request Forgery 30 WEB Han Sahin
2016-04-26   ImpressCMS 1.3.9 - SQL Injection 25 WEB Manuel García Cárdenas
2016-04-25   NationBuilder - Multiple Persistent Cross-Site Scripting Vulnerabilities 33 WEB LiquidWorm
2016-04-25   Gemtek CPE7000 - WLTCS-106 'sysconf.cgi' Remote Command Execution (Metasploit) 27 WEB Federico Scalco
2016-04-25   Gemtek CPE7000 - WLTCS-106 Administrator SID Retriever (Metasploit) 26 WEB Federico Scalco
2016-04-25   C/C++ Offline Compiler and C For OS - Persistent Cross-Site Scripting 24 WEB Vulnerability-Lab
2016-04-25   Totemomail 4.x/5.x - Persistent Cross-Site Scripting 26 WEB Vulnerability-Lab
2016-04-21   Gemtek CPE7000 / WLTCS-106 - Multiple Vulnerabilities 29 WEB Federico Ramondino
2016-04-21   Symantec Brightmail 10.6.0-7 - LDAP Credentials Disclosure (Metasploit) 30 WEB Fakhir Karim Reda
2016-04-21   phpLiteAdmin 1.9.6 - Multiple Vulnerabilities 24 WEB Ozer Goker
2016-04-20   PHPBack 1.3.0 - SQL Injection 25 WEB hyp3rlinx
2016-04-19   modified eCommerce Shopsoftware 2.0.0.0 rev 9678 - Blind SQL Injection 29 WEB Felix Maduakor
2016-04-18   pfSense Community Edition 2.2.6 - Multiple Vulnerabilities 28 WEB Security-Assessment.com
2016-04-18   Webutler CMS 3.2 - Cross-Site Request Forgery 27 WEB Keerati T.
2016-04-18   WordPress Plugin Kento Post View Counter 2.8 - Cross-Site Request Forgery / Cross-Site Scripting 27 WEB cor3sm4sh3r
2016-04-18   WordPress Plugin leenk.me 2.5.0 - Cross-Site Request Forgery / Cross-Site Scripting 26 WEB cor3sm4sh3r
2016-04-15   AirOS 6.x - Arbitrary File Upload 28 WEB 93c08539
2016-04-14   PHPmongoDB 1.0.0 - Multiple Vulnerabilities 30 WEB Ozer Goker
2016-04-14   Brickcom Corporation Network Cameras - Multiple Vulnerabilities 29 WEB Orwelllabs
2016-04-14   pfSense Firewall 2.2.6 - Services Cross-Site Request Forgery 32 WEB Aatif Shahdad
2016-04-13   Oracle Application Testing Suite (ATS) 12.4.0.2.0 - Authentication Bypass / Arbitrary File Upload 30 WEB Zhou Yu
2016-04-12   Ovidentia troubleticketsModule 7.6 - Remote File Inclusion 23 WEB bd0rk
2016-04-11   Novell ServiceDesk 6.5/7.0.3/7.1.0 - Multiple Vulnerabilities 27 WEB Pedro Ribeiro
2016-04-11   Axis Network Cameras - Multiple Vulnerabilities 34 WEB Orwelllabs
2016-04-11   RockMongo PHP MongoDB Administrator 1.1.8 - Multiple Vulnerabilities 32 WEB Ozer Goker
2016-04-11   OpenCart 2.1.0.2 < 2.2.0.0 - json_decode Function Remote Code Execution 27 WEB Naser Farhadi
2016-04-11   WPN-XM Serverstack 0.8.6 - Cross-Site Request Forgery 24 WEB hyp3rlinx
2016-04-11   Hikvision Digital Video Recorder - Cross-Site Request Forgery 26 WEB LiquidWorm
2016-04-08   op5 7.1.9 - Remote Command Execution 24 WEB hyp3rlinx
2016-04-07   PLANET Technology IP Surveillance Cameras - Multiple Vulnerabilities 25 WEB Orwelllabs
2016-04-06   SocialEngine 4.8.9 - SQL Injection 26 WEB High-Tech Bridge SA
2016-04-06   Asbru Web Content Management System 9.2.7 - Multiple Vulnerabilities 28 WEB LiquidWorm
2016-04-05   ManageEngine Password Manager Pro 8102 to 8302 - Multiple Vulnerabilities 30 WEB S3ba
2016-04-04   PQI Air Pen Express 6W51-0000R2/6W51-0000R2XXX - Multiple Vulnerabilities 28 WEB Orwelllabs
2016-04-01   WordPress Plugin Advanced Video 1.0 - Local File Inclusion 30 WEB evait security GmbH
2016-03-31   Apache OpenMeetings 1.9.x < 3.1.0 - '.ZIP' File Directory Traversal 31 WEB Andreas Lindh
2016-03-31   MOBOTIX Video Security Cameras - Cross-Site Request Forgery (Add Admin) 29 WEB LiquidWorm
2016-03-30   CubeCart 6.0.10 - Multiple Vulnerabilities 31 WEB High-Tech Bridge SA
2016-03-28   Liferay Portal 5.1.2 - Persistent Cross-Site Scripting 32 WEB Sarim Kiani
2016-03-27   WordPress Plugin Photocart Link 1.6 - Local File Inclusion 24 WEB CrashBandicot
2016-03-27   Trend Micro Deep Discovery Inspector 3.8/3.7 - Cross-Site Request Forgery 27 WEB hyp3rlinx
2016-03-27   WordPress Plugin IMDb Profile Widget 1.0.8 - Local File Inclusion 30 WEB CrashBandicot
2016-03-23   MiCollab 7.0 - SQL Injection 34 WEB Goran Tuzovic
2016-03-22   WordPress Plugin Memphis Document Library 3.1.5 - Arbitrary File Download 29 WEB Felipe Molina
2016-03-22   WordPress Plugin Dharma Booking 2.38.3 - Remote File Inclusion 28 WEB AMAR^SHG
2016-03-22   WordPress Plugin Brandfolder 3.0 - Local/Remote File Inclusion 23 WEB AMAR^SHG
2016-03-22   Joomla! Component Easy Youtube Gallery 1.0.2 - SQL Injection 28 WEB Persian Hack Team
2016-03-22   WordPress Plugin HB Audio Gallery Lite 1.0.0 - Arbitrary File Download 28 WEB CrashBandicot
2016-03-21   ProjectSend r582 - Multiple Cross-Site Scripting Vulnerabilities 29 WEB Michael Helwig
2016-03-21   iTop 2.2.1 - Cross-Site Request Forgery 24 WEB High-Tech Bridge SA
2016-03-21   Dating Pro Genie 2015.7 - Cross-Site Request Forgery 26 WEB High-Tech Bridge SA
2016-03-21   WordPress Plugin Image Export 1.1.0 - Arbitrary File Disclosure 32 WEB AMAR^SHG
2016-03-21   XOOPS 2.5.7.2 - Directory Traversal Bypass 31 WEB hyp3rlinx
2016-03-21   Xoops 2.5.7.2 - Cross-Site Request Forgery (Arbitrary User Deletions) 28 WEB hyp3rlinx
2016-03-21   D-Link DWR-932 Firmware 4.00 - Authentication Bypass 26 WEB Saeed reza Zamanian
2016-03-21   Disc ORGanizer (DORG) - Multiple Vulnerabilities 33 WEB SECUPENT
2016-03-21   WordPress Plugin Abtest - Local File Inclusion 30 WEB CrashBandicot
2016-03-21   WordPress Plugin Import CSV 1.0 - Directory Traversal 27 WEB Wadeek
2016-03-21   WordPress Plugin eBook Download 1.1 - Directory Traversal 27 WEB Wadeek
2016-03-20   Wildfly - 'WEB-INF' / 'META-INF' Information Disclosure via Filter Restriction Bypass 27 WEB Tal Solomon of Palantir Security
2016-03-17   PivotX 2.3.11 - Directory Traversal 25 WEB Curesec Research Team
2016-03-17   ZenPhoto 1.4.11 - Remote File Inclusion 24 WEB Curesec Research Team
2016-03-16   Monstra CMS 3.0.3 - Multiple Vulnerabilities 31 WEB Sarim Kiani
2016-03-16   AKIPS Network Monitor 15.37 through 16.5 - OS Command Injection 28 WEB BrianWGray
2016-03-15   Kaltura Community Edition < 11.1.0-2 - Multiple Vulnerabilities 31 WEB Security-Assessment.com
2016-03-14   TeamPass 2.1.24 - Multiple Vulnerabilities 27 WEB Vincent Malguy
2016-03-14   WordPress Plugin Site Import 1.0.1 - Local/Remote File Inclusion 25 WEB Wadeek
2016-03-11   WordPress Plugin DZS Videogallery < 8.60 - Multiple Vulnerabilities 31 WEB Colette Chamberland
2016-03-11   WordPress Theme Beauty & Clean 1.0.8 - Arbitrary File Upload 26 WEB Colette Chamberland
2016-03-10   WordPress Plugin WP Advanced Comment 0.10 - Persistent Cross-Site Scripting 25 WEB Mohammad Khaleghi
2016-03-10   WordPress Plugin Best Web Soft Captcha 4.1.5 - Multiple Vulnerabilities 28 WEB Colette Chamberland
2016-03-09   WordPress Theme SiteMile Project 2.0.9.5 - Multiple Vulnerabilities 21 WEB LSE Leading Security Experts GmbH
2016-03-09   Bluethrust Clan Scripts v4 R17 - Multiple Vulnerabilities 24 WEB Brandon Murphy
2016-03-07   Cerberus Helpdesk (Cerb5) 5 < 6.7 - Password Hash Disclosure 25 WEB asdizzle_
2016-03-07   ATutor LMS - '/install_modules.php' Cross-Site Request Forgery / Remote Code Execution 30 WEB mr_me
2016-03-03   WordPress Plugin Bulk Delete 5.5.3 - Privilege Escalation 32 WEB Panagiotis Vagenas
2016-03-01   WordPress Plugin CP Polls 1.0.8 - Multiple Vulnerabilities 33 WEB i0akiN SEC-LABORATORY
2016-02-29   WordPress Plugin More Fields 2.1 - Cross-Site Request Forgery 25 WEB Aatif Shahdad
2016-02-26   Joomla! Component com_poweradmin 2.3.0 - Multiple Vulnerabilities 28 WEB RatioSec Research
2016-02-26   Centreon 2.5.3 - Remote Command Execution 24 WEB Sysdream
2016-02-26   Zimbra 8.0.9 GA - Cross-Site Request Forgery 27 WEB Sysdream
2016-02-26   WordPress Plugin Ocim MP3 - SQL Injection 24 WEB xevil & Blankon33