Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2016-04-18   pfSense Community Edition 2.2.6 - Multiple Vulnerabilities 40 WEB Security-Assessment.com
2016-04-18   Webutler CMS 3.2 - Cross-Site Request Forgery 42 WEB Keerati T.
2016-04-18   WordPress Plugin Kento Post View Counter 2.8 - Cross-Site Request Forgery / Cross-Site Scripting 43 WEB cor3sm4sh3r
2016-04-18   WordPress Plugin leenk.me 2.5.0 - Cross-Site Request Forgery / Cross-Site Scripting 39 WEB cor3sm4sh3r
2016-04-15   AirOS 6.x - Arbitrary File Upload 44 WEB 93c08539
2016-04-14   PHPmongoDB 1.0.0 - Multiple Vulnerabilities 44 WEB Ozer Goker
2016-04-14   Brickcom Corporation Network Cameras - Multiple Vulnerabilities 40 WEB Orwelllabs
2016-04-14   pfSense Firewall 2.2.6 - Services Cross-Site Request Forgery 44 WEB Aatif Shahdad
2016-04-13   Oracle Application Testing Suite (ATS) 12.4.0.2.0 - Authentication Bypass / Arbitrary File Upload 41 WEB Zhou Yu
2016-04-12   Ovidentia troubleticketsModule 7.6 - Remote File Inclusion 36 WEB bd0rk
2016-04-11   Novell ServiceDesk 6.5/7.0.3/7.1.0 - Multiple Vulnerabilities 39 WEB Pedro Ribeiro
2016-04-11   Axis Network Cameras - Multiple Vulnerabilities 45 WEB Orwelllabs
2016-04-11   RockMongo PHP MongoDB Administrator 1.1.8 - Multiple Vulnerabilities 44 WEB Ozer Goker
2016-04-11   OpenCart 2.1.0.2 < 2.2.0.0 - json_decode Function Remote Code Execution 41 WEB Naser Farhadi
2016-04-11   WPN-XM Serverstack 0.8.6 - Cross-Site Request Forgery 38 WEB hyp3rlinx
2016-04-11   Hikvision Digital Video Recorder - Cross-Site Request Forgery 37 WEB LiquidWorm
2016-04-08   op5 7.1.9 - Remote Command Execution 36 WEB hyp3rlinx
2016-04-07   PLANET Technology IP Surveillance Cameras - Multiple Vulnerabilities 36 WEB Orwelllabs
2016-04-06   SocialEngine 4.8.9 - SQL Injection 36 WEB High-Tech Bridge SA
2016-04-06   Asbru Web Content Management System 9.2.7 - Multiple Vulnerabilities 40 WEB LiquidWorm
2016-04-05   ManageEngine Password Manager Pro 8102 to 8302 - Multiple Vulnerabilities 41 WEB S3ba
2016-04-04   PQI Air Pen Express 6W51-0000R2/6W51-0000R2XXX - Multiple Vulnerabilities 38 WEB Orwelllabs
2016-04-01   WordPress Plugin Advanced Video 1.0 - Local File Inclusion 42 WEB evait security GmbH
2016-03-31   Apache OpenMeetings 1.9.x < 3.1.0 - '.ZIP' File Directory Traversal 41 WEB Andreas Lindh
2016-03-31   MOBOTIX Video Security Cameras - Cross-Site Request Forgery (Add Admin) 40 WEB LiquidWorm
2016-03-30   CubeCart 6.0.10 - Multiple Vulnerabilities 44 WEB High-Tech Bridge SA
2016-03-28   Liferay Portal 5.1.2 - Persistent Cross-Site Scripting 46 WEB Sarim Kiani
2016-03-27   WordPress Plugin Photocart Link 1.6 - Local File Inclusion 41 WEB CrashBandicot
2016-03-27   Trend Micro Deep Discovery Inspector 3.8/3.7 - Cross-Site Request Forgery 46 WEB hyp3rlinx
2016-03-27   WordPress Plugin IMDb Profile Widget 1.0.8 - Local File Inclusion 42 WEB CrashBandicot
2016-03-23   MiCollab 7.0 - SQL Injection 44 WEB Goran Tuzovic
2016-03-22   WordPress Plugin Memphis Document Library 3.1.5 - Arbitrary File Download 40 WEB Felipe Molina
2016-03-22   WordPress Plugin Dharma Booking 2.38.3 - Remote File Inclusion 38 WEB AMAR^SHG
2016-03-22   WordPress Plugin Brandfolder 3.0 - Local/Remote File Inclusion 36 WEB AMAR^SHG
2016-03-22   Joomla! Component Easy Youtube Gallery 1.0.2 - SQL Injection 40 WEB Persian Hack Team
2016-03-22   WordPress Plugin HB Audio Gallery Lite 1.0.0 - Arbitrary File Download 38 WEB CrashBandicot
2016-03-21   ProjectSend r582 - Multiple Cross-Site Scripting Vulnerabilities 42 WEB Michael Helwig
2016-03-21   iTop 2.2.1 - Cross-Site Request Forgery 37 WEB High-Tech Bridge SA
2016-03-21   Dating Pro Genie 2015.7 - Cross-Site Request Forgery 37 WEB High-Tech Bridge SA
2016-03-21   WordPress Plugin Image Export 1.1.0 - Arbitrary File Disclosure 42 WEB AMAR^SHG
2016-03-21   XOOPS 2.5.7.2 - Directory Traversal Bypass 44 WEB hyp3rlinx
2016-03-21   Xoops 2.5.7.2 - Cross-Site Request Forgery (Arbitrary User Deletions) 43 WEB hyp3rlinx
2016-03-21   D-Link DWR-932 Firmware 4.00 - Authentication Bypass 40 WEB Saeed reza Zamanian
2016-03-21   Disc ORGanizer (DORG) - Multiple Vulnerabilities 49 WEB SECUPENT
2016-03-21   WordPress Plugin Abtest - Local File Inclusion 43 WEB CrashBandicot
2016-03-21   WordPress Plugin Import CSV 1.0 - Directory Traversal 40 WEB Wadeek
2016-03-21   WordPress Plugin eBook Download 1.1 - Directory Traversal 40 WEB Wadeek
2016-03-20   Wildfly - 'WEB-INF' / 'META-INF' Information Disclosure via Filter Restriction Bypass 42 WEB Tal Solomon of Palantir Security
2016-03-17   PivotX 2.3.11 - Directory Traversal 41 WEB Curesec Research Team
2016-03-17   ZenPhoto 1.4.11 - Remote File Inclusion 38 WEB Curesec Research Team
2016-03-16   Monstra CMS 3.0.3 - Multiple Vulnerabilities 42 WEB Sarim Kiani
2016-03-16   AKIPS Network Monitor 15.37 through 16.5 - OS Command Injection 39 WEB BrianWGray
2016-03-15   Kaltura Community Edition < 11.1.0-2 - Multiple Vulnerabilities 45 WEB Security-Assessment.com
2016-03-14   TeamPass 2.1.24 - Multiple Vulnerabilities 39 WEB Vincent Malguy
2016-03-14   WordPress Plugin Site Import 1.0.1 - Local/Remote File Inclusion 37 WEB Wadeek
2016-03-11   WordPress Plugin DZS Videogallery < 8.60 - Multiple Vulnerabilities 44 WEB Colette Chamberland
2016-03-11   WordPress Theme Beauty & Clean 1.0.8 - Arbitrary File Upload 39 WEB Colette Chamberland
2016-03-10   WordPress Plugin WP Advanced Comment 0.10 - Persistent Cross-Site Scripting 35 WEB Mohammad Khaleghi
2016-03-10   WordPress Plugin Best Web Soft Captcha 4.1.5 - Multiple Vulnerabilities 38 WEB Colette Chamberland
2016-03-09   WordPress Theme SiteMile Project 2.0.9.5 - Multiple Vulnerabilities 32 WEB LSE Leading Security Experts GmbH
2016-03-09   Bluethrust Clan Scripts v4 R17 - Multiple Vulnerabilities 39 WEB Brandon Murphy
2016-03-07   Cerberus Helpdesk (Cerb5) 5 < 6.7 - Password Hash Disclosure 35 WEB asdizzle_
2016-03-07   ATutor LMS - '/install_modules.php' Cross-Site Request Forgery / Remote Code Execution 42 WEB mr_me
2016-03-03   WordPress Plugin Bulk Delete 5.5.3 - Privilege Escalation 44 WEB Panagiotis Vagenas
2016-03-01   WordPress Plugin CP Polls 1.0.8 - Multiple Vulnerabilities 44 WEB i0akiN SEC-LABORATORY
2016-02-29   WordPress Plugin More Fields 2.1 - Cross-Site Request Forgery 35 WEB Aatif Shahdad
2016-02-26   Joomla! Component com_poweradmin 2.3.0 - Multiple Vulnerabilities 40 WEB RatioSec Research
2016-02-26   Centreon 2.5.3 - Remote Command Execution 36 WEB Sysdream
2016-02-26   Zimbra 8.0.9 GA - Cross-Site Request Forgery 42 WEB Sysdream
2016-02-26   WordPress Plugin Ocim MP3 - SQL Injection 40 WEB xevil & Blankon33
2016-02-26   Infor CRM 8.2.0.1136 - Multiple HTML Script Injection Vulnerabilities 36 WEB LiquidWorm
2016-02-25   IBM Lotus Domino R8 - Password Hash Extraction 46 WEB Jonathan Broche
2016-02-24   WordPress Plugin Extra User Details 0.4.2 - Privilege Escalation 39 WEB Panagiotis Vagenas
2016-02-23   Ubiquiti Networks UniFi 3.2.10 - Cross-Site Request Forgery 42 WEB Julien Ahrens
2016-02-23   Dell OpenManage Server Administrator 8.2 - (Authenticated) Directory Traversal 42 WEB hantwister
2016-02-22   Thru Managed File Transfer Portal 9.0.2 - SQL Injection 37 WEB SySS GmbH
2016-02-22   BlackBerry Enterprise Service < 12.4 (BES12) Self-Service - Multiple Vulnerabilities 36 WEB Security-Assessment.com
2016-02-22   InstantCoder 1.0 iOS - Multiple Vulnerabilities 38 WEB Vulnerability-Lab
2016-02-20   SOLIDserver < 5.0.4 - Local File Inclusion 40 WEB Saeed reza Zamanian
2016-02-19   ManageEngine Firewall Analyzer 8.5 - Multiple Vulnerabilities 45 WEB Sachin Wagh
2016-02-19   Chamilo LMS - Persistent Cross-Site Scripting 40 WEB Vulnerability-Lab
2016-02-19   Chamilo LMS IDOR - 'messageId' Delete POST Injection 41 WEB Vulnerability-Lab
2016-02-18   DirectAdmin 1.491 - Cross-Site Request Forgery 39 WEB Necmettin COSKUN
2016-02-18   Vesta Control Panel 0.9.8-15 - Persistent Cross-Site Scripting 38 WEB Necmettin COSKUN
2016-02-17   Redaxo 5.0.0 - Multiple Vulnerabilities 41 WEB LSE Leading Security Experts GmbH
2016-02-17   OCS Inventory NG 2.2 - SQL Injection 40 WEB Ephreet
2016-02-17   JMX2 Email Tester - 'save_email.php' Arbitrary File Upload 39 WEB HaHwul
2016-02-16   phpMyBackupPro 2.5 - Remote Command Execution / Cross-Site Request Forgery 36 WEB hyp3rlinx
2016-02-16   WordPress Plugin ALO EasyMail NewsLetter 2.6.01 - Cross-Site Request Forgery 40 WEB Mohsen Lotfi
2016-02-16   ManageEngine Network Configuration Management Build 11000 - Privilege Escalation 38 WEB Kaustubh G. Padwad
2016-02-16   ManageEngine OPutils 8.0 - Multiple Vulnerabilities 41 WEB Kaustubh G. Padwad
2016-02-15   Tiny Tiny RSS - Blind SQL Injection 37 WEB Kacper Szurek
2015-08-27   Oracle GlassFish Server 4.1 - Directory Traversal 41 WEB Trustwave's SpiderLabs
2016-02-10   Yeager CMS 1.2.1 - Multiple Vulnerabilities 47 WEB SEC Consult
2016-02-10   Apache Sling Framework (Adobe AEM) 2.3.6 - Information Disclosure 37 WEB Vulnerability-Lab
2010-03-10   Employee TimeClock Software 0.99 - SQL Injection 40 WEB Secunia Research
2016-02-08   WordPress Plugin Booking Calendar Contact Form 1.0.23 - Multiple Vulnerabilities 34 WEB i0akiN SEC-LABORATORY
2016-02-08   WordPress Plugin WP User Frontend < 2.3.11 - Unrestricted Arbitrary File Upload 39 WEB Panagiotis Vagenas
2016-02-08   WordPress Plugin WooCommerce Store Toolkit 1.5.5 - Privilege Escalation 36 WEB Panagiotis Vagenas
2016-02-08   WordPress Plugin User Meta Manager 3.4.6 - Information Disclosure 35 WEB Panagiotis Vagenas
2016-02-08   dotDefender Firewall 5.00.12865/5.13-13282 - Cross-Site Request Forgery 35 WEB hyp3rlinx
2016-02-08   Solr 3.5.0 - Arbitrary Data Deletion 37 WEB N37
2016-02-04   Symphony CMS 2.6.3 - Multiple SQL Injections 37 WEB Sachin Wagh
2016-02-04   ATutor 2.2 - Multiple Cross-Site Scripting Vulnerabilities 37 WEB Curesec Research Team
2016-02-04   OpenDocMan 1.3.4 - Cross-Site Request Forgery 35 WEB Curesec Research Team
2016-02-04   UliCMS v9.8.1 - SQL Injection 35 WEB Manuel García Cárdenas
2016-02-04   Netgear NMS300 ProSafe Network Management System - Multiple Vulnerabilities 34 WEB Pedro Ribeiro
2016-02-04   WordPress Plugin User Meta Manager 3.4.6 - Privilege Escalation 36 WEB Panagiotis Vagenas
2016-02-04   WordPress Plugin User Meta Manager 3.4.6 - Blind SQL Injection 37 WEB Panagiotis Vagenas
2016-02-04   D-Link DVG­N5402SP - Multiple Vulnerabilities 34 WEB Karn Ganeshen
2016-02-04   GE Industrial Solutions UPS SNMP Adapter < 4.8 - Multiple Vulnerabilities 35 WEB Karn Ganeshen
2016-02-03   Viprinet Multichannel VPN Router 300 - Persistent Cross-Site Scripting 36 WEB Portcullis
2016-02-03   Jive Forums 5.5.25 - Directory Traversal 31 WEB ZhaoHuAn
2016-02-03   TimeClock Software 0.995 - (Authenticated ) Multiple SQL Injections 34 WEB Benetrix
2016-02-02   eClinicalWorks (CCMR) - Multiple Vulnerabilities 36 WEB Jerold Hoong
2016-02-02   Manage Engine Network Configuration Manager Build 11000 - Cross-Site Request Forgery 38 WEB Kaustubh G. Padwad
2016-02-01   ManageEngine EventLog Analyzer 4.0 < 10 - Privilege Escalation 41 WEB GraphX
2016-02-01   Hippo CMS 10.1 - Multiple Vulnerabilities 49 WEB LiquidWorm
2016-02-01   iScripts EasyCreate 3.0 - Remote Code Execution 47 WEB Bikramaditya Guha
2016-02-01   iScripts EasyCreate 3.0 - Multiple Vulnerabilities 41 WEB Bikramaditya Guha
2016-01-29   ProjectSend r582 - Multiple Vulnerabilities 43 WEB Filippo Cavallarin
2016-01-29   WordPress Plugin Simple Add Pages or Posts 1.6 - Cross-Site Request Forgery 42 WEB ALIREZA_PROMIS
2016-01-28   SAP HANA 1.00.095 - hdbindexserver Memory Corruption 44 WEB ERPScan
2016-01-28   Netgear WNR1000v4 - Authentication Bypass 37 WEB Daniel Haake
2016-01-28   Ramui Web Hosting Directory Script 4.0 - Remote File Inclusion 39 WEB bd0rk