Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2013-12-14 Exploit Code Downloads   Etoshop B2B Vertical Marketplace Creator - Multiple SQL Injections 41 WEB R3d-D3V!L
2013-12-16 Exploit Code Downloads   C2C Forward Auction Creator - '/auction/casp/Admin.asp' SQL Injection (Admin Authentication Bypass) 37 WEB R3d-D3V!L
2013-12-16 Exploit Code Downloads   C2C Forward Auction Creator 2.0 - '/auction/asp/list.asp?pa' SQL Injection 34 WEB R3d-D3V!L
2013-12-09 Exploit Code Downloads   osCMax - Arbitrary File Upload / Full Path Information Disclosure 37 WEB KedAns-Dz
2013-12-13 Exploit Code Downloads   BoastMachine - 'blog' SQL Injection 41 WEB Omar Kurt
2013-12-11 Exploit Code Downloads   eduTrac - 'showmask' Directory Traversal 40 WEB High-Tech Bridge
2013-12-08 Exploit Code Downloads   WordPress Plugin PhotoSmash Galleries - 'bwbps-uploader.php' Arbitrary File Upload 37 WEB Ashiyane Digital Security Team
2013-12-06 Exploit Code Downloads   WordPress Plugin Easy Career Openings - 'jobid' SQL Injection 35 WEB Iranian_Dark_Coders_Team
2015-12-04 Exploit Code Downloads   WordPress Plugin TheCartPress 1.4.7 - Multiple Vulnerabilities 39 WEB KedAns-Dz
2015-12-04 Exploit Code Downloads   WordPress Plugin Sell Download 1.0.16 - Local File Disclosure 39 WEB KedAns-Dz
2015-12-04 Exploit Code Downloads   WordPress Plugin Advanced uploader 2.10 - Multiple Vulnerabilities 36 WEB KedAns-Dz
2013-12-06 Exploit Code Downloads   NeoBill 0.9-alpha - 'language' Local File Inclusion 38 WEB KedAns-Dz
2013-12-06 Exploit Code Downloads   NeoBill - '/install/include/solidstate.php' Multiple SQL Injections 33 WEB KedAns-Dz
2013-12-06 Exploit Code Downloads   NeoBill - '/modules/nullregistrar/PHPwhois/example.php?query' Remote Code Execution 40 WEB KedAns-Dz
2013-12-06 Exploit Code Downloads   Enorth Webpublisher CMS - 'thisday' SQL Injection 41 WEB xin.wang
2015-12-03 Exploit Code Downloads   WordPress Plugin Gwolle Guestbook 1.5.3 - Remote File Inclusion 40 WEB High-Tech Bridge SA
2015-12-03 Exploit Code Downloads   WordPress Plugin Users Ultra 1.5.50 - Persistent Cross-Site Scripting 37 WEB Panagiotis Vagenas
2015-12-03 Exploit Code Downloads   WordPress Plugin Users Ultra 1.5.50 - Blind SQL Injection 38 WEB Panagiotis Vagenas
2013-12-02 Exploit Code Downloads   D-Link DIR-Series Routers - '/model/__show_info.php' Local File Disclosure 40 WEB tytusromekiatomek
2013-12-01 Exploit Code Downloads   PHPThumb - 'PHPThumb.php' Arbitrary File Upload 44 WEB DevilScreaM
2013-11-20 Exploit Code Downloads   WordPress Theme Suco - 'themify-ajax.php' Arbitrary File Upload 44 WEB DevilScreaM
2013-11-23 Exploit Code Downloads   WordPress Plugin Blue Wrench Video Widget - Cross-Site Request Forgery 39 WEB Haider Mahmood
2013-11-18 Exploit Code Downloads   TomatoCart 1.1.8.2 - 'class' Local File Inclusion 38 WEB Esac
2013-11-13 Exploit Code Downloads   Testa OTMS - Multiple SQL Injections 34 WEB Ashiyane Digital Security Team
2015-12-01 Exploit Code Downloads   ZenPhoto 1.4.10 - Local File Inclusion 36 WEB hyp3rlinx
2015-12-01 Exploit Code Downloads   Belkin N150 Wireless Router F9K1009 v1 - Multiple Vulnerabilities 36 WEB Rahul Pratap Singh
2015-12-01 Exploit Code Downloads   Invision Power Board (IP.Board) 4.1.4.x - Persistent Cross-Site Scripting 38 WEB Mehdi Alouache
2015-12-01 Exploit Code Downloads   ntop-ng 2.0.151021 - Privilege Escalation 37 WEB Dolev Farhi
2015-12-01 Exploit Code Downloads   Kodi 15 - Web Interface Arbitrary File Access 35 WEB Machiel Pronk
2015-11-30 Exploit Code Downloads   HumHub 0.11.2/0.20.0-beta.2 - SQL Injection 38 WEB LSE Leading Security Experts GmbH
2015-11-30 Exploit Code Downloads   MyCustomers CMS 1.3.873 - SQL Injection 41 WEB Persian Hack Team
2013-11-17 Exploit Code Downloads   Limonade Framework - 'limonade.php' Local File Disclosure 45 WEB Yashar shahinzadeh
2015-11-28 Exploit Code Downloads   SysAid Help Desk Software 14.4.32 b25 - SQL Injection (Metasploit) 37 WEB hland
2013-11-01 Exploit Code Downloads   WordPress Theme This Way - 'upload_settings_image.php' Arbitrary File Upload 45 WEB Bet0
2013-10-21 Exploit Code Downloads   Course Registration Management System - Cross-Site Scripting / SQL Injection 50 WEB Omar Kurt
2013-10-25 Exploit Code Downloads   JReport - 'dealSchedules.jsp' Cross-Site Request Forgery 47 WEB Poonam Singh
2013-10-20 Exploit Code Downloads   Joomla! Component Maian15 - 'name' Arbitrary File Upload 43 WEB SultanHaikal
2013-10-23 Exploit Code Downloads   WordPress Theme Daily Deal - Arbitrary File Upload 43 WEB DevilScreaM
2013-10-08 Exploit Code Downloads   WordPress Plugin WP-Realty - 'listing_id' SQL Injection 36 WEB Napsterakos
2013-10-09 Exploit Code Downloads   Bugzilla 4.2 - Tabular Reports Cross-Site Scripting 37 WEB Mateusz Goik
2013-10-09 Exploit Code Downloads   Bugzilla - 'editflagtypes.cgi' Multiple Cross-Site Scripting Vulnerabilities 39 WEB Mateusz Goik
2015-11-24 Exploit Code Downloads   WordPress Plugin WP-Client 3.8.7 - Persistent Cross-Site Scripting 42 WEB Pier-Luc Maltais
2013-09-27 Exploit Code Downloads   FreeSMS - '/pages/crc_handler.php' Multiple Cross-Site Scripting Vulnerabilities 44 WEB Sarahma Security
2013-09-27 Exploit Code Downloads   FreeSMS - '/pages/crc_handler.php?scheduleid' SQL Injection 37 WEB Sarahma Security
2013-10-11 Exploit Code Downloads   Bilboplanet - 'auth.php' SQL Injection 40 WEB Omar Kurt
2015-11-23 Exploit Code Downloads   vBulletin 5.x - Remote Code Execution 50 WEB Mohammad Reza Espargham
2013-10-10 Exploit Code Downloads   Ziteman CMS - Login Page SQL Injection 35 WEB Ashiyane Digital Security Team
2013-10-13 Exploit Code Downloads   vBulletin 4.1.x - '/install/upgrade.php' Security Bypass 38 WEB Joshua Rogers
2013-10-08 Exploit Code Downloads   Alienvault Open Source SIEM (OSSIM) - 'Timestamp' Directory Traversal 40 WEB Ding Yu-Chi
2013-10-07 Exploit Code Downloads   WordPress Plugin Woopra Analytics - 'ofc_upload_image.php' Arbitrary PHP Code Execution 39 WEB wantexz
2013-10-03 Exploit Code Downloads   WordPress Plugin SEO Watcher - 'ofc_upload_image.php' Arbitrary PHP Code Execution 37 WEB wantexz
2013-10-02 Exploit Code Downloads   Alienvault Open Source SIEM (OSSIM) 3.1 - 'date_from' Multiple SQL Injections 37 WEB Yu-Chi Ding
2013-09-23 Exploit Code Downloads   SilverStripe CMS - Multiple HTML Injection Vulnerabilities 40 WEB Benjamin Kunz Mejri
2013-09-21 Exploit Code Downloads   Joomla! Component JVideoClip 1.5.1 - 'uid' SQL Injection 38 WEB SixP4ck3r
2015-11-20 Exploit Code Downloads   Cambium ePMP 1000 - Multiple Vulnerabilities 38 WEB Karn Ganeshen
2015-11-20 Exploit Code Downloads   ZTE ZXHN H108N R1A / ZXV10 W300 Routers - Multiple Vulnerabilities 41 WEB Karn Ganeshen
2015-11-20 Exploit Code Downloads   ZTE ADSL ZXV10 W300 Modems - Multiple Vulnerabilities 40 WEB Karn Ganeshen
2013-09-20 Exploit Code Downloads   MentalJS - Sandbox Security Bypass 38 WEB Rafay Baloch
2013-09-20 Exploit Code Downloads   Monstra CMS 1.2.0 - 'login' SQL Injection 39 WEB linc0ln.dll
2013-09-19 Exploit Code Downloads   WordPress Plugin RokMicroNews - 'thumb.php' Multiple Vulnerabilities 40 WEB MustLive
2013-09-19 Exploit Code Downloads   WordPress Plugin RokIntroScroller - 'thumb.php' Multiple Vulnerabilities 44 WEB MustLive
2015-11-19 Exploit Code Downloads   Horde Groupware 5.2.10 - Cross-Site Request Forgery 43 WEB High-Tech Bridge SA
2015-11-19 Exploit Code Downloads   Netwin SurgeFTP Sever 23d6 - Persistent Cross-Site Scripting 40 WEB Un_N0n
2013-09-17 Exploit Code Downloads   WordPress Plugin RokStories - 'thumb.php' Multiple Vulnerabilities 37 WEB MustLive
2013-09-18 Exploit Code Downloads   WordPress Plugin RokNewsPager - 'thumb.php' Multiple Vulnerabilities 40 WEB MustLive
2013-09-13 Exploit Code Downloads   WordPress Plugin mukioplayer4wp - 'cid' SQL Injection 40 WEB Ashiyane Digital Security Team
2013-09-10 Exploit Code Downloads   eTransfer Lite - 'file name' HTML Injection 40 WEB Benjamin Kunz Mejri
2013-09-07 Exploit Code Downloads   WordPress Plugin Event Easy Calendar - Multiple Cross-Site Request Forgery Vulnerabilities 39 WEB anonymous
2015-11-18 Exploit Code Downloads   WordPress Plugin Users Ultra 1.5.50 - Unrestricted Arbitrary File Upload 37 WEB Panagiotis Vagenas
2013-09-03 Exploit Code Downloads   Flo CMS - 'archivem' SQL Injection 43 WEB ACC3SS
2013-09-03 Exploit Code Downloads   dBlog CMS - 'm' SQL Injection 43 WEB ACC3SS
2013-08-21 Exploit Code Downloads   Xibo - Cross-Site Request Forgery 39 WEB Jacob Holcomb
2013-08-21 Exploit Code Downloads   Xibo - 'layout' HTML Injection 37 WEB Jacob Holcomb
2013-08-29 Exploit Code Downloads   appRain CMF - Multiple Cross-Site Request Forgery Vulnerabilities 39 WEB Yashar shahinzadeh
2013-08-26 Exploit Code Downloads   cm3 Acora CMS - 'top.aspx' Information Disclosure 41 WEB Pedro Andujar
2013-08-23 Exploit Code Downloads   SearchBlox - Multiple Information Disclosure Vulnerabilities 38 WEB Ricky Roane Jr
2013-07-31 Exploit Code Downloads   Plone - 'in_portal.py' < 4.1.3 Session Hijacking 52 WEB Cyrill Bannwart
2013-08-21 Exploit Code Downloads   Twilight CMS - DeWeS Web Server Directory Traversal 34 WEB High-Tech Bridge
2015-11-16 Exploit Code Downloads   ClipperCMS 1.3.0 - Multiple SQL Injections 39 WEB Curesec Research Team
2015-11-16 Exploit Code Downloads   AlegroCart 1.2.8 - Local/Remote File Inclusion 38 WEB Curesec Research Team
2015-11-16 Exploit Code Downloads   AlegroCart 1.2.8 - Multiple SQL Injections 41 WEB Curesec Research Team
2013-08-20 Exploit Code Downloads   Bo-Blog 2.1.1 - Cross-Site Scripting / SQL Injection 42 WEB Ashiyane Digital Security Team
2013-07-16 Exploit Code Downloads   MCImageManager - Multiple Vulnerabilities 46 WEB MustLive
2015-11-16 Exploit Code Downloads   D-Link DIR-816L Wireless Router - Cross-Site Request Forgery 42 WEB Bhadresh Patel
2015-11-16 Exploit Code Downloads   VideoLAN VLC Media Player Web Interface 2.2.1 - Metadata Title Cross-Site Scripting 39 WEB Andrea Sindoni
2015-11-16 Exploit Code Downloads   CF Image Host 1.65 - PHP Command Injection 39 WEB hyp3rlinx
2015-11-16 Exploit Code Downloads   CF Image Host 1.65 - Cross-Site Request Forgery 37 WEB hyp3rlinx
2013-08-15 Exploit Code Downloads   ACal 2.2.6 - 'view' Local File Inclusion 39 WEB ICheer_No0M
2013-08-13 Exploit Code Downloads   DotNetNuke 6.1.x - Cross-Site Scripting 36 WEB Sajjad Pourali
2013-08-13 Exploit Code Downloads   CakePHP 2.2.8/2.3.7 - AssetDispatcher Class Local File Inclusion 41 WEB Takeshi Terada
2013-08-08 Exploit Code Downloads   Advanced Guestbook - 'addentry.php' Arbitrary File Upload 43 WEB Ashiyane Digital Security Team
2013-08-07 Exploit Code Downloads   Kwok Information Server - Multiple SQL Injections 39 WEB Yogesh Phadtare
2013-08-01 Exploit Code Downloads   SilverStripe CMS - 'MemberLoginForm.php' Information Disclosure 40 WEB Fara Rustein
2015-11-13 Exploit Code Downloads   b374k 3.2.3/2.8 (Web Shell) - Cross-Site Request Forgery / Command Injection 39 WEB hyp3rlinx
2015-11-12 Exploit Code Downloads   R-Scripts Vacation Rental Script 7R - Multiple Vulnerabilities 41 WEB LiquidWorm
2013-07-31 Exploit Code Downloads   Jahia xCM - '/administration/' Multiple Cross-Site Scripting Vulnerabilities 36 WEB High-Tech Bridge
2013-07-31 Exploit Code Downloads   Jahia xCM - '/engines/manager.jsp?site' Cross-Site Scripting 41 WEB High-Tech Bridge
2013-07-25 Exploit Code Downloads   Alienvault Open Source SIEM (OSSIM) - Multiple Cross-Site Scripting Vulnerabilities 49 WEB xistence
2015-11-11 Exploit Code Downloads   WordPress Plugin WP Fastest Cache 0.8.4.8 - Blind SQL Injection 45 WEB Kacper Szurek
2013-07-24 Exploit Code Downloads   vBulletin 4.0.2 - 'update_order' SQL Injection 42 WEB n3tw0rk
2013-07-24 Exploit Code Downloads   WordPress Plugin Duplicator - Cross-Site Scripting 41 WEB High-Tech Bridge
2013-07-24 Exploit Code Downloads   Magnolia CMS - Multiple Cross-Site Scripting Vulnerabilities 42 WEB High-Tech Bridge
2013-07-22 Exploit Code Downloads   WordPress Plugin FlagEm - 'cID' Cross-Site Scripting 43 WEB IeDb ir
2013-07-22 Exploit Code Downloads   Collabtive - Multiple Vulnerabilities 44 WEB Enrico Cinquini
2015-11-10 Exploit Code Downloads   YesWiki 0.2 - 'template' Directory Traversal 47 WEB HaHwul
2015-11-10 Exploit Code Downloads   Jenkins 1.633 - Credential Recovery 43 WEB The Repo
2015-11-09 Exploit Code Downloads   TestLink 1.9.14 - Cross-Site Request Forgery 42 WEB Aravind C Ajayan_ Balagopal N
2015-11-09 Exploit Code Downloads   Arris TG1682G Modem - Persistent Cross-Site Scripting 39 WEB Nu11By73
2013-07-11 Exploit Code Downloads   PrestaShop - Multiple Cross-Site Request Forgery Vulnerabilities 42 WEB EntPro Cyber Security Research Group
2013-07-12 Exploit Code Downloads   Corda .NET Redirector - 'redirector.corda' Cross-Site Scripting 39 WEB Adam Willard
2013-07-12 Exploit Code Downloads   OpenEMR 4.1 - 'note' HTML Injection 40 WEB Nate Drier
2013-07-12 Exploit Code Downloads   Corda Highwire - 'Highwire.ashx' Full Path Disclosure 38 WEB Adam Willard
2015-11-07 Exploit Code Downloads   Google AdWords 6.2.0 API client libraries - XML eXternal Entity Injection 40 WEB Dawid Golunski
2015-11-07 Exploit Code Downloads   eBay Magento CE 1.9.2.1 - Unrestricted Cron Script (Code Execution / Denial of Service) 41 WEB Dawid Golunski
2015-11-07 Exploit Code Downloads   Google AdWords API PHP client library 6.2.0 - Arbitrary PHP Code Execution 44 WEB Dawid Golunski
2015-11-06 Exploit Code Downloads   WordPress Plugin My Calendar 2.4.10 - Multiple Vulnerabilities 39 WEB Mysticism
2015-11-06 Exploit Code Downloads   NXFilter 3.0.3 - Multiple Cross-Site Scripting Vulnerabilities 39 WEB hyp3rlinx
2015-11-06 Exploit Code Downloads   NXFilter 3.0.3 - Cross-Site Request Forgery 42 WEB hyp3rlinx
2013-07-12 Exploit Code Downloads   WordPress Plugin Pie Register - 'wp-login.php' Multiple Cross-Site Scripting Vulnerabilities 41 WEB gravitylover
2013-07-12 Exploit Code Downloads   S9Y Serendipity 1.6.2 - 'serendipity_admin_image_selector.php' Cross-Site Scripting 38 WEB Omar Kurt
2015-11-05 Exploit Code Downloads   JSSE - SKIP-TLS 36 WEB Ramon de C Valle
2015-11-05 Exploit Code Downloads   OpenSSL - Alternative Chains Certificate Forgery 36 WEB Ramon de C Valle
2013-07-11 Exploit Code Downloads   WordPress Plugin miniBB - SQL Injection / Multiple Cross-Site Scripting Vulnerabilities 40 WEB Netsparker
2013-07-10 Exploit Code Downloads   Mintboard - Multiple Cross-Site Scripting Vulnerabilities 43 WEB Canberk BOLAT
2013-07-10 Exploit Code Downloads   iVote - 'details.php' SQL Injection 43 WEB Ashiyane Digital Security Team