Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2015-11-05   OpenSSL - Alternative Chains Certificate Forgery 19 WEB Ramon de C Valle
2013-07-11   WordPress Plugin miniBB - SQL Injection / Multiple Cross-Site Scripting Vulnerabilities 23 WEB Netsparker
2013-07-10   Mintboard - Multiple Cross-Site Scripting Vulnerabilities 25 WEB Canberk BOLAT
2013-07-10   iVote - 'details.php' SQL Injection 27 WEB Ashiyane Digital Security Team
2013-07-06   phpVibe 3.1 - Information Disclosure / Remote File Inclusion 23 WEB indoushka
2015-11-05   vBulletin 5.1.x - Remote Code Execution 22 WEB hhjj
2013-05-29   HostBill - 'cpupdate.php' Authentication Bypass 20 WEB localhost.re
2013-07-02   WordPress Plugin Category Grid View Gallery - 'ID' Cross-Site Scripting 25 WEB Iranian Exploit DataBase
2013-07-02   WordPress Plugin WP Feed - 'nid' SQL Injection 21 WEB Iranian Exploit DataBase
2013-06-30   WordPress Plugin Xorbin Digital Flash Clock - 'widgetUrl' Cross-Site Scripting 23 WEB Prakhar Prasad
2013-06-30   WordPress Plugin Xorbin Analog Flash Clock - 'widgetUrl' Cross-Site Scripting 25 WEB Prakhar Prasad
2013-06-30   Atomy Maxsite - 'index.php' Arbitrary File Upload 22 WEB Iranian_Dark_Coders_Team
2013-06-29   WordPress Plugin WP Private Messages - 'msgid' SQL Injection 20 WEB IeDb ir
2013-06-29   Nameko - 'nameko.php' Cross-Site Scripting 20 WEB Andrea Menin
2012-06-28   Mobile USB Drive HD - Multiple Local File Inclusion / Arbitrary File Upload Vulnerabilities 23 WEB Benjamin Kunz Mejri
2015-11-02   actiTIME 2015.2 - Multiple Vulnerabilities 21 WEB LiquidWorm
2013-06-15   ZamFoo - 'date' Remote Command Injection 27 WEB localhost.re
2013-06-26   Xaraya - Multiple Cross-Site Scripting Vulnerabilities 20 WEB High-Tech Bridge
2013-06-25   Barnraiser Prairie - 'get_file.php' Directory Traversal 22 WEB prairie
2013-06-24   FtpLocate - HTML Injection 21 WEB Chako
2013-06-19   Joomla! Component com_rokdownloads - Arbitrary File Upload 24 WEB Am!r
2013-06-18   et-chat - Privilege Escalation / Arbitrary File Upload 27 WEB MR.XpR
2013-06-17   BloofoxCMS - 'index.php' Arbitrary File Upload 28 WEB CWH Underground
2013-06-12   WordPress Plugin NextGEN Gallery - 'upload.php' Arbitrary File Upload 21 WEB Marcos Garcia
2015-10-30   Oxwall 1.7.4 - Cross-Site Request Forgery 24 WEB High-Tech Bridge SA
2015-10-30   Pligg CMS 2.0.2 - Cross-Site Request Forgery / Code Execution 23 WEB Curesec Research Team
2015-10-30   Pligg CMS 2.0.2 - Directory Traversal 25 WEB Curesec Research Team
2015-10-30   Pligg CMS 2.0.2 - Multiple SQL Injections 23 WEB Curesec Research Team
2015-10-30   Hitron Router CGN3ACSMR 4.5.8.16 - Arbitrary Code Execution 22 WEB Dolev Farhi
2015-10-30   PHP Server Monitor 3.1.1 - Cross-Site Request Forgery / Privilege Escalation 23 WEB hyp3rlinx
2015-10-30   eBay Magento 1.9.2.1 - PHP FPM XML eXternal Entity Injection 20 WEB Dawid Golunski
2015-10-30   PHP Server Monitor 3.1.1 - Multiple Cross-Site Request Forgery Vulnerabilities 22 WEB hyp3rlinx
2013-06-11   mkCMS - 'index.php' Arbitrary PHP Code Execution 22 WEB CWH Underground
2013-06-10   ScriptCase - 'scelta_categoria.php' SQL Injection 18 WEB Hossein Hezami
2013-06-10   Lokboard - 'index_4.php' PHP Code Injection 27 WEB CWH Underground
2013-06-09   WordPress Theme Ambience - 'src' Cross-Site Scripting 25 WEB Darksnipper
2013-06-09   Max Forum - Multiple Vulnerabilities 20 WEB CWH Underground
2015-10-29   Joomla! Component com_jnews 8.5.1 - SQL Injection 22 WEB Omer Ramić
2013-06-10   HP Insight Diagnostics 9.4.0.4710 - Local File Inclusion 19 WEB Markus Wulftange
2013-06-10   HP Insight Diagnostics - Remote Code Injection 21 WEB Markus Wulftange
2013-06-07   Caucho Resin - 'index.php?logout' Cross-Site Scripting 21 WEB Gjoko Krstic
2013-06-07   Caucho Resin - '/resin-admin/' URI Cross-Site Scripting 17 WEB Gjoko Krstic
2015-10-28   Sagem FAST3304-V2 - Authentication Bypass (2) 22 WEB Soufiane Alami Hassani
2015-10-28   JIRA and HipChat for JIRA Plugin - Velocity Template Injection 25 WEB Chris Wood
2013-06-05   QNAP VioStor NVR / QNAP NAS - Remote Code Execution 21 WEB Tim Herres
2013-06-03   Telaen - Information Disclosure 21 WEB Manuel García Cárdenas
2013-06-04   CMS Gratis Indonesia - 'config.php' PHP Code Injection 24 WEB CWH Underground
2013-06-04   Telaen 2.7.x - Open Redirection 23 WEB Manuel García Cárdenas
2013-06-04   Telaen 2.7.x - Cross-Site Scripting 18 WEB Manuel García Cárdenas
2013-05-28   Elastix - Multiple Cross-Site Scripting Vulnerabilities 20 WEB cheki
2012-05-31   PHP4dvd - 'config.php' PHP Code Injection 23 WEB CWH Underground
2013-05-27   WordPress Plugin ADIF Log Search Widget - 'logbook_search.php' Cross-Site Scripting 22 WEB k3170makan
2015-10-26   Joomla! 3.2.x < 3.4.4 - SQL Injection 19 WEB Manish Tanwar
2015-10-23   Joomla! Component Realtyna RPL 8.9.2 - Persistent Cross-Site Scripting / Cross-Site Request Forgery 20 WEB Bikramaditya Guha
2015-10-23   Joomla! Component Realtyna RPL 8.9.2 - Multiple SQL Injections 20 WEB Bikramaditya Guha
2015-10-23   Subrion 3.x - Multiple Vulnerabilities 24 WEB bRpsd
2013-05-24   Matterdaddy Market - Multiple Vulnerabilities 22 WEB KedAns-Dz
2013-05-23   Weyal CMS - Multiple SQL Injections 19 WEB XroGuE
2013-05-16   WordPress Plugin WP Cleanfix - Cross-Site Request Forgery 21 WEB Enigma Ideas
2013-05-15   Jojo CMS - 'x-forwarded-for' HTTP header SQL Injection 20 WEB High-Tech Bridge SA
2013-05-15   Jojo CMS - 'search' Cross-Site Scripting 19 WEB High-Tech Bridge SA
2013-05-16   WordPress Plugin Mail On Update - Cross-Site Request Forgery 18 WEB Henri Salo
2013-05-14   Open Flash Chart - 'get-data' Cross-Site Scripting 23 WEB Deepankar Arora
2013-05-15   WordPress Plugin wp-FileManager - 'path' Arbitrary File Download 23 WEB ByEge
2015-10-22   Beckhoff CX9020 CPU Module - Remote Code Execution 20 WEB Photubias
2013-05-14   Gallery Server Pro - Arbitrary File Upload 26 WEB Drew Calcott
2013-05-11   WordPress Plugin Securimage-WP - 'siwp_test.php' Cross-Site Scripting 24 WEB Gjoko Krstic
2013-05-10   Securimage - 'example_form.php' Cross-Site Scripting 22 WEB Gjoko Krstic
2013-05-07   MyBB Game Section Plugin - 'games.php' Multiple Cross-Site Scripting Vulnerabilities 20 WEB anonymous
2013-05-07   NetApp OnCommand System Manager - '/zapiServlet' User Management Interface Multiple Cross-Site Scrip 32 WEB M. Heinzl
2013-05-07   NetApp OnCommand System Manager - '/zapiServlet' CIFS Configuration Management Interface Multiple Cr 29 WEB M. Heinzl
2013-04-27   PHPValley Micro Jobs Site Script - Spoofing 21 WEB Jason Whelan
2015-10-19   RealtyScript 4.0.2 - Multiple Blind SQL Injections 22 WEB LiquidWorm
2015-10-19   RealtyScript 4.0.2 - Multiple Cross-Site Request Forgery / Persistent Cross-Site Scripting Vulnerabi 25 WEB LiquidWorm
2013-04-24   WordPress Plugin WP Super Cache - PHP Remote Code Execution 22 WEB anonymous
2013-04-23   SMF - '/index.php' HTML Injection / Multiple PHP Code Injection Vulnerabilities 20 WEB Jakub Galczyk
2015-10-19   Belkin N150 Router 1.00.08/1.00.09 - Directory Traversal 21 WEB Rahul Pratap Singh
2013-04-21   WordPress Theme Colormix - Multiple Vulnerabilities 20 WEB MustLive
2015-10-18   WordPress Plugin Ajax Load More < 2.8.2 - Arbitrary File Upload 19 WEB PizzaHatHacker
2013-04-19   Crafty Syntax Live Help 3.1.2 - Remote File Inclusion / Full Path Disclosure 20 WEB ITTIHACK
2013-04-18   Fork CMS - 'js.php' Local File Inclusion 23 WEB Rafay Baloch
2013-03-06   Matrix42 Service Store - 'default.aspx' Cross-Site Scripting 22 WEB 43zsec
2013-04-17   Sosci Survey - Multiple Vulnerabilities 21 WEB T. Lazauninkas
2013-04-14   Todoo Forum 2.0 - 'todooforum.php' Multiple SQL Injections 24 WEB Chiekh Bouchenafa
2013-04-14   Todoo Forum 2.0 - 'todooforum.php' Multiple Cross-Site Scripting Vulnerabilities 22 WEB Chiekh Bouchenafa
2015-10-15   PROLiNK H5004NK ADSL Wireless Modem - Multiple Vulnerabilities 27 WEB Karn Ganeshen
2015-10-15   netis RealTek Wireless Router / ADSL Modem - Multiple Vulnerabilities 25 WEB Karn Ganeshen
2013-04-13   Aibolit - Information Disclosure 21 WEB MustLive
2013-04-10   Hero Framework - '/users/forgot_password?error' Cross-Site Scripting 19 WEB High-Tech Bridge
2013-04-10   Hero Framework - '/users/login?Username' Cross-Site Scripting 20 WEB High-Tech Bridge
2013-03-29   jPlayer - 'Jplayer.swf' Script Cross-Site Scripting 16 WEB Malte Batram
2013-04-11   Request Tracker - 'ShowPending' SQL Injection 22 WEB cheki
2013-04-11   WordPress Plugin Spider Video Player - 'theme' SQL Injection 16 WEB Ashiyane Digital Security Team
2015-10-14   ZYXEL PMG5318-B20A - OS Command Injection 20 WEB Karn Ganeshen
2015-10-13   Kerio Control 8.6.1 - Multiple Vulnerabilities 18 WEB Raschin Tavakoli
2015-10-13   Netgear Voice Gateway 2.3.0.23_2.3.23 - Multiple Vulnerabilities 19 WEB Karn Ganeshen
2015-10-13   F5 Big-IP 10.2.4 Build 595.0 Hotfix HF3 - Directory Traversal 20 WEB Karn Ganeshen
2015-10-11   Dream CMS 2.3.0 - Cross-Site Request Forgery (Add Extension) / Arbitrary File Upload / PHP Code Exec 20 WEB LiquidWorm
2015-10-11   Joomla! Component com_realestatemanager 3.7 - SQL Injection 23 WEB Omer Ramić
2015-10-11   Liferay 6.1.0 CE - Privilege Escalation 20 WEB Massimo De Luca
2013-04-10   WordPress Plugin Spiffy XSPF Player - 'playlist_id' SQL Injection 23 WEB Ashiyane Digital Security Team
2013-04-09   phpMyAdmin - 'tbl_gis_visualization.php' Multiple Cross-Site Scripting Vulnerabilities 21 WEB waraxe
2013-04-09   WordPress Plugin Traffic Analyzer - 'aoid' Cross-Site Scripting 21 WEB Beni_Vanda
2013-04-09   EasyPHP - '/index.php' Authentication Bypass / Remote PHP Code Injection 21 WEB KedAns-Dz
2013-04-05   Zimbra - 'aspell.php' Cross-Site Scripting 18 WEB Michael Scherer
2013-04-05   PHP Address Book - '/addressbook/register/admin_index.php?q' SQL Injection 20 WEB Jurgen Voorneveld
2013-04-05   PHP Address Book - '/addressbook/register/checklogin.php?Username' SQL Injection 16 WEB Jurgen Voorneveld
2013-04-05   PHP Address Book - '/addressbook/register/user_add_save.php?email' SQL Injection 17 WEB Jurgen Voorneveld
2013-04-05   PHP Address Book - '/addressbook/register/traffic.php?var' SQL Injection 18 WEB Jurgen Voorneveld
2013-04-05   PHP Address Book - '/addressbook/register/router.php?BasicLogin' Cookie SQL Injection 18 WEB Jurgen Voorneveld
2013-04-05   PHP Address Book - '/addressbook/register/reset_password_save.php' Multiple SQL Injections 16 WEB Jurgen Voorneveld
2013-04-05   PHP Address Book - '/addressbook/register/reset_password.php' Multiple SQL Injections 16 WEB Jurgen Voorneveld
2013-04-05   PHP Address Book - '/addressbook/register/linktick.php?site' SQL Injection 16 WEB Jurgen Voorneveld
2013-04-05   PHP Address Book - '/addressbook/register/edit_user_save.php' Multiple SQL Injections 18 WEB Jurgen Voorneveld
2013-04-05   PHP Address Book - '/addressbook/register/edit_user.php?id' SQL Injection 18 WEB Jurgen Voorneveld
2013-04-05   PHP Address Book - '/addressbook/register/delete_user.php?id' SQL Injection 18 WEB Jurgen Voorneveld
2015-10-08   Kallithea 0.2.9 - 'came_from' HTTP Response Splitting 15 WEB LiquidWorm
2013-04-03   FUDforum - Multiple Remote PHP Code Injection Vulnerabilities 17 WEB High-Tech Bridge
2013-04-03   Symphony - 'sort' SQL Injection 16 WEB High-Tech Bridge
2013-04-03   e107 - 'content_preset.php' Cross-Site Scripting 17 WEB Simon Bieber
2013-04-03   C2 WebResource - 'File' Cross-Site Scripting 17 WEB anonymous
2013-03-30   WordPress Plugin Feedweb - 'wp_post_id' Cross-Site Scripting 16 WEB Stefan Schurtz
2013-03-27   OrionDB Web Directory - Multiple Cross-Site Scripting Vulnerabilities 20 WEB 3spi0n
2015-10-07   Zope Management Interface 4.3.7 - Cross-Site Request Forgery 19 WEB hyp3rlinx
2013-03-25   WordPress Plugin Banners Lite - 'wpbanners_show.php' HTML Injection 18 WEB Fernando A. Lagos B