|
2023-07-28
|
|
WordPress Plugin AN_Gradebook 5.0.1 - SQLi
|
29 |
WEB
|
Lukas Kinneberg
|
|
2023-07-28
|
|
Joomla VirtueMart Shopping Cart 4.0.12 - Reflected XSS
|
30 |
WEB
|
CraCkEr
|
|
2023-07-28
|
|
October CMS v3.4.4 - Stored Cross-Site Scripting (XSS) (Authenticated)
|
24 |
WEB
|
Okan Kurtulus
|
|
2023-07-28
|
|
Joomla HikaShop 4.7.4 - Reflected XSS
|
30 |
WEB
|
CraCkEr
|
|
2023-07-28
|
|
mooDating 1.2 - Reflected Cross-site scripting (XSS)
|
31 |
WEB
|
CraCkEr
|
|
2023-07-28
|
|
Perch v3.2 - Persistent Cross Site Scripting (XSS)
|
30 |
WEB
|
Dinesh Mohanty
|
|
2023-07-28
|
|
Availability Booking Calendar v1.0 - Multiple Cross-site scripting (XSS)
|
31 |
WEB
|
Andrey Stoykov
|
|
2023-07-28
|
|
Zomplog 3.9 - Cross-site scripting (XSS)
|
35 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-28
|
|
zomplog 3.9 - Remote Code Execution (RCE)
|
25 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-28
|
|
RosarioSIS 10.8.4 - CSV Injection
|
32 |
WEB
|
Ranjeet Jaiswal
|
|
2023-07-21
|
|
Perch v3.2 - Stored XSS
|
27 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-21
|
|
Perch v3.2 - Remote Code Execution (RCE)
|
32 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-20
|
|
RWS WorldServer 11.7.3 - Session Token Enumeration
|
31 |
WEB
|
RedTeam Pentesting GmbH
|
|
2023-07-20
|
|
PaulPrinting CMS - Multiple Cross Site Web Vulnerabilities
|
27 |
WEB
|
Vulnerability-Lab
|
|
2023-07-20
|
|
Aures Booking & POS Terminal - Local Privilege Escalation
|
28 |
WEB
|
Vulnerability-Lab
|
|
2023-07-20
|
|
Webile v1.0.1 - Multiple Cross Site Scripting
|
34 |
WEB
|
Vulnerability-Lab
|
|
2023-07-20
|
|
Dooblou WiFi File Explorer 1.13.3 - Multiple Vulnerabilities
|
33 |
WEB
|
Vulnerability-Lab
|
|
2023-07-20
|
|
PaulPrinting CMS - (Search Delivery) Cross Site Scripting
|
41 |
WEB
|
Vulnerability-Lab
|
|
2023-07-20
|
|
Active Super Shop CMS v2.5 - HTML Injection Vulnerabilities
|
31 |
WEB
|
Vulnerability-Lab
|
|
2023-07-20
|
|
Boom CMS v8.0.7 - Cross Site Scripting
|
33 |
WEB
|
Vulnerability-Lab
|
|
2023-07-20
|
|
Wifi Soft Unibox Administration 3.0 & 3.1 - SQL Injection
|
41 |
WEB
|
Ansh Jain
|
|
2023-07-20
|
|
pfSense v2.7.0 - OS Command Injection
|
29 |
WEB
|
Emir Polat
|
|
2023-07-19
|
|
TP-Link TL-WR740N - Authenticated Directory Transversal
|
37 |
WEB
|
Anish Feroz
|
|
2023-07-19
|
|
Blackcat Cms v1.4 - Remote Code Execution (RCE)
|
26 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-19
|
|
Blackcat Cms v1.4 - Stored XSS
|
27 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-19
|
|
ABB FlowX v4.00 - Exposure of Sensitive Information
|
35 |
WEB
|
Paul Smith
|
|
2023-07-19
|
|
Statamic 4.7.0 - File-Inclusion
|
33 |
WEB
|
nu11secur1ty
|
|
2023-07-19
|
|
CmsMadeSimple v2.2.17 - Stored Cross-Site Scripting (XSS)
|
27 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-19
|
|
CmsMadeSimple v2.2.17 - Remote Code Execution (RCE)
|
23 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-19
|
|
CmsMadeSimple v2.2.17 - session hijacking via Server-Side Template Injection (SSTI)
|
31 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-19
|
|
Online Piggery Management System v1.0 - unauthenticated file upload vulnerability
|
26 |
WEB
|
1337kid
|
|
2023-07-19
|
|
Backdrop Cms v1.25.1 - Stored Cross-Site Scripting (XSS)
|
38 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-19
|
|
Vaidya-Mitra 1.0 - Multiple SQLi
|
44 |
WEB
|
nu11secur1ty
|
|
2023-07-19
|
|
Joomla! com_booking component 2.4.9 - Information Leak (Account enumeration)
|
30 |
WEB
|
qw3rTyTy
|
|
2023-07-19
|
|
phpfm v1.7.9 - Authentication type juggling
|
33 |
WEB
|
thoughtfault
|
|
2023-07-19
|
|
PimpMyLog v1.7.14 - Improper access control
|
42 |
WEB
|
thoughtfault
|
|
2023-07-15
|
|
Pluck v4.7.18 - Remote Code Execution (RCE)
|
34 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-15
|
|
WinterCMS < 1.2.3 - Persistent Cross-Site Scripting
|
40 |
WEB
|
abhishek morla
|
|
2023-07-15
|
|
Admidio v4.2.10 - Remote Code Execution (RCE)
|
28 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-15
|
|
Cisco UCS-IMC Supervisor 2.2.0.0 - Authentication Bypass
|
23 |
WEB
|
Fatih Sencer
|
|
2023-07-15
|
|
ProjeQtOr Project Management System v10.4.1 - Multiple XSS
|
28 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-15
|
|
News Portal v4.0 - SQL Injection (Unauthorized)
|
27 |
WEB
|
Hubert Wojciechowski
|
|
2023-07-15
|
|
Icinga Web 2.10 - Authenticated Remote Code Execution
|
41 |
WEB
|
Dante Corona
|
|
2023-07-11
|
|
Ateme TITAN File 3.9 - SSRF File Enumeration
|
29 |
WEB
|
LiquidWorm
|
|
2023-07-11
|
|
BuildaGate5library v5 - Reflected Cross-Site Scripting (XSS)
|
30 |
WEB
|
Idan Malihi
|
|
2023-07-11
|
|
Frappe Framework (ERPNext) 13.4.0 - Remote Code Execution (Authenticated)
|
32 |
WEB
|
Sander Ferdinand
|
|
2023-07-11
|
|
Spring Cloud 3.2.2 - Remote Command Execution (RCE)
|
48 |
WEB
|
GatoGamer1155
|
|
2023-07-11
|
|
Netlify CMS 2.10.192 - Stored Cross-Site Scripting (XSS)
|
28 |
WEB
|
tmrswrr
|
|
2023-07-07
|
|
Faculty Evaluation System v1.0 - SQL Injection
|
29 |
WEB
|
Andrey Stoykov
|
|
2023-07-06
|
|
Piwigo v13.7.0 - Stored Cross-Site Scripting (XSS) (Authenticated)
|
32 |
WEB
|
Okan Kurtulus
|
|
2023-07-06
|
|
Lost and Found Information System v1.0 - SQL Injection
|
27 |
WEB
|
Amirhossein Bahramizadeh
|
|
2023-07-06
|
|
Gila CMS 1.10.9 - Remote Code Execution (RCE) (Authenticated)
|
30 |
WEB
|
Omer Shaik
|
|
2023-07-04
|
|
Beauty Salon Management System v1.0 - SQLi
|
28 |
WEB
|
Fatih Nacar
|
|
2023-07-04
|
|
Car Rental Script 1.8 - Stored Cross-site scripting (XSS)
|
24 |
WEB
|
CraCkEr
|
|
2023-07-03
|
|
WBCE CMS 1.6.1 - Open Redirect & CSRF
|
32 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-03
|
|
PodcastGenerator 3.2.9 - Blind SSRF via XML Injection
|
35 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-03
|
|
Alkacon OpenCMS 15.0 - Multiple Cross-Site Scripting (XSS)
|
31 |
WEB
|
tmrswrr
|
|
2023-07-03
|
|
Prestashop 8.0.4 - Cross-Site Scripting (XSS)
|
24 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-03
|
|
Vacation Rental 1.8 - Stored Cross-Site Scripting (XSS)
|
30 |
WEB
|
CraCkEr
|
|
2023-07-03
|
|
WP AutoComplete 1.0.4 - Unauthenticated SQLi
|
38 |
WEB
|
matitanium
|
|
2023-07-03
|
|
GZ Forum Script 1.8 - Stored Cross-Site Scripting (XSS)
|
30 |
WEB
|
CraCkEr
|
|
2023-07-03
|
|
Time Slot Booking Calendar 1.8 - Stored Cross-Site Scripting (XSS)
|
29 |
WEB
|
CraCkEr
|
|
2023-07-03
|
|
spip v4.1.10 - Spoofing Admin account
|
28 |
WEB
|
nu11secur1ty
|
|
2023-07-03
|
|
D-Link DAP-1325 - Broken Access Control
|
28 |
WEB
|
ieduardogoncalves
|
|
2023-07-03
|
|
WebsiteBaker v2.13.3 - Directory Traversal
|
27 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-03
|
|
WebsiteBaker v2.13.3 - Stored XSS
|
28 |
WEB
|
Mirabbas Ağalarov
|
|
2023-07-03
|
|
POS Codekop v2.0 - Authenticated Remote Code Execution (RCE)
|
27 |
WEB
|
yuyudhn
|
|
2023-07-03
|
|
FuguHub 8.1 - Remote Code Execution
|
34 |
WEB
|
redfire359
|
|
2023-07-03
|
|
Sales of Cashier Goods v1.0 - Cross Site Scripting (XSS)
|
26 |
WEB
|
Amirhossein Bahramizadeh
|
|
2023-07-03
|
|
Rukovoditel 3.4.1 - Multiple Stored XSS
|
28 |
WEB
|
Mirabbas Ağalarov
|
|
2023-06-26
|
|
Xenforo Version 2.2.13 - Authenticated Stored XSS
|
38 |
WEB
|
Furkan Karaarslan
|
|
2023-06-26
|
|
PrestaShop Winbiz Payment module - Improper Limitation of a Pathname to a Restricted Directory
|
36 |
WEB
|
Amirhossein Bahramizadeh
|
|
2023-06-26
|
|
Microsoft SharePoint Enterprise Server 2016 - Spoofing
|
37 |
WEB
|
Amirhossein Bahramizadeh
|
|
2023-06-23
|
|
MCL-Net 4.3.5.8788 - Information Disclosure
|
21 |
WEB
|
Victor A. Morales
|
|
2023-06-23
|
|
Bludit < 3.13.1 Backup Plugin - Arbitrary File Download (Authenticated)
|
32 |
WEB
|
Antonio Cuomo
|
|
2023-06-22
|
|
Smart Office Web 20.28 - Remote Information Disclosure (Unauthenticated)
|
28 |
WEB
|
Tejas Pingulkar
|
|
2023-06-21
|
|
HiSecOS 04.0.01 - Privilege Escalation
|
23 |
WEB
|
dreizehnutters
|
|
2023-06-20
|
|
SPIP v4.2.0 - Remote Code Execution (Unauthenticated)
|
32 |
WEB
|
nuts7
|
|
2023-06-20
|
|
Super Socializer 7.13.52 - Reflected XSS
|
40 |
WEB
|
Amirhossein Bahramizadeh
|
|
2023-06-20
|
|
WP Sticky Social 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting (XSS)
|
26 |
WEB
|
Amirhossein Bahramizadeh
|
|
2023-06-14
|
|
PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE)
|
40 |
WEB
|
Gabriel Lima
|
|
2023-06-19
|
|
WordPress Theme Medic v1.0.0 - Weak Password Recovery Mechanism for Forgotten Password
|
30 |
WEB
|
Amirhossein Bahramizadeh
|
|
2023-06-19
|
|
Symantec SiteMinder WebAgent v12.52 - Cross-site scripting (XSS)
|
30 |
WEB
|
Harshit Joshi
|
|
2023-06-19
|
|
Diafan CMS 6.0 - Reflected Cross-Site Scripting (XSS)
|
32 |
WEB
|
tmrswrr
|
|
2023-06-19
|
|
Student Study Center Management System v1.0 - Stored Cross-Site Scripting (XSS)
|
37 |
WEB
|
VIVEK CHOUDHARY
|
|
2023-06-19
|
|
Jobpilot v2.61 - SQL Injection
|
30 |
WEB
|
Ahmet Ümit BAYRAM
|
|
2023-06-19
|
|
Groomify v1.0 - SQL Injection
|
33 |
WEB
|
Ahmet Ümit BAYRAM
|
|
2023-06-19
|
|
The Shop v2.5 - SQL Injection
|
38 |
WEB
|
Ahmet Ümit BAYRAM
|
|
2023-06-15
|
|
Online Art gallery project 1.0 - Arbitrary File Upload (Unauthenticated)
|
37 |
WEB
|
Ramil Mustafayev
|
|
2023-06-14
|
|
Textpattern CMS v4.8.8 - Stored Cross-Site Scripting (XSS) (Authenticated)
|
32 |
WEB
|
tmrswrr
|
|
2023-06-14
|
|
Online Thesis Archiving System v1.0 - Multiple-SQLi
|
30 |
WEB
|
nu11secur1ty
|
|
2023-06-14
|
|
Xoops CMS 2.5.10 - Stored Cross-Site Scripting (XSS) (Authenticated)
|
35 |
WEB
|
tmrswrr
|
|
2023-06-14
|
|
Monstra 3.0.4 - Stored Cross-Site Scripting (XSS)
|
33 |
WEB
|
tmrswrr
|
|
2023-06-14
|
|
projectSend r1605 - Stored XSS
|
38 |
WEB
|
Mirabbas Ağalarov
|
|
2023-06-14
|
|
projectSend r1605 - CSV injection
|
38 |
WEB
|
Mirabbas Ağalarov
|
|
2023-06-13
|
|
Sales Tracker Management System v1.0 - Multiple Vulnerabilities
|
29 |
WEB
|
AFFAN AHMED
|
|
2023-06-13
|
|
Teachers Record Management System 1.0 - File Upload Type Validation
|
30 |
WEB
|
AFFAN AHMED
|
|
2023-06-13
|
|
Online Examination System Project 1.0 - Cross-site request forgery (CSRF)
|
31 |
WEB
|
Ramil Mustafayev
|
|
2023-06-09
|
|
WordPress Theme Workreap 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution
|
29 |
WEB
|
Mohammad Hossein Khanaki
|
|
2023-06-09
|
|
Thruk Monitoring Web Interface 3.06 - Path Traversal
|
37 |
WEB
|
Galoget Latorre
|
|
2023-06-06
|
|
Tree Page View Plugin 1.6.7 - Cross Site Scripting (XSS)
|
35 |
WEB
|
LEE SE HYOUNG
|
|
2023-06-04
|
|
File Manager Advanced Shortcode 2.3.2 - Unauthenticated Remote Code Execution (RCE)
|
35 |
WEB
|
Mateus Machado Tesser
|
|
2023-06-04
|
|
MotoCMS Version 3.4.3 - SQL Injection
|
29 |
WEB
|
tmrswrr
|
|
2023-06-04
|
|
STARFACE 7.3.0.10 - Authentication with Password Hash Possible
|
34 |
WEB
|
RedTeam Pentesting GmbH
|
|
2023-06-04
|
|
Barebones CMS v2.0.2 - Stored Cross-Site Scripting (XSS) (Authenticated)
|
35 |
WEB
|
tmrswrr
|
|
2023-06-04
|
|
Enrollment System Project v1.0 - SQL Injection Authentication Bypass (SQLI)
|
36 |
WEB
|
VIVEK CHOUDHARY
|
|
2023-06-04
|
|
Total CMS 1.7.4 - Remote Code Execution (RCE)
|
30 |
WEB
|
tmrswrr
|
|
2023-05-31
|
|
MotoCMS Version 3.4.3 - Server-Side Template Injection (SSTI)
|
33 |
WEB
|
tmrswrr
|
|
2023-05-31
|
|
Pydio Cells 4.1.2 - Server-Side Request Forgery
|
32 |
WEB
|
RedTeam Pentesting GmbH
|
|
2023-05-31
|
|
Pydio Cells 4.1.2 - Cross-Site Scripting (XSS) via File Download
|
34 |
WEB
|
RedTeam Pentesting GmbH
|
|
2023-05-31
|
|
Pydio Cells 4.1.2 - Unauthorised Role Assignments
|
31 |
WEB
|
RedTeam Pentesting GmbH
|
|
2023-05-31
|
|
Faculty Evaluation System 1.0 - Unauthenticated File Upload
|
37 |
WEB
|
URGAN
|
|
2023-05-31
|
|
Online Security Guards Hiring System 1.0 - Reflected XSS
|
32 |
WEB
|
AFFAN AHMED
|
|
2023-05-31
|
|
unilogies/bumsys v1.0.3 beta - Unrestricted File Upload
|
27 |
WEB
|
AFFAN AHMED
|
|
2023-05-31
|
|
SCRMS 2023-05-27 1.0 - Multiple SQL Injection
|
33 |
WEB
|
nu11secur1ty
|
|
2023-05-31
|
|
Rukovoditel 3.3.1 - CSV injection
|
27 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-26
|
|
Camaleon CMS v2.7.0 - Server-Side Template Injection (SSTI)
|
36 |
WEB
|
PARAG BAGUL
|
|
2023-05-25
|
|
SCM Manager 1.60 - Cross-Site Scripting Stored (Authenticated)
|
27 |
WEB
|
neg0x
|
|
2023-05-25
|
|
Ulicms 2023.1 - create admin user via mass assignment
|
30 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-25
|
|
Zenphoto 1.6 - Multiple stored XSS
|
25 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-25
|
|
WBCE CMS 1.6.1 - Multiple Stored Cross-Site Scripting (XSS)
|
32 |
WEB
|
Mirabbas Ağalarov
|
|
2023-05-24
|
|
Service Provider Management System v1.0 - SQL Injection
|
31 |
WEB
|
ASHIK KUNJUMON
|
|
2023-05-23
|
|
FusionInvoice 2023-1.0 - Stored XSS (Cross-Site Scripting)
|
30 |
WEB
|
Andrea Intilangelo
|
|
2023-05-23
|
|
CiviCRM 5.59.alpha1 - Stored XSS (Cross-Site Scripting)
|
31 |
WEB
|
Andrea Intilangelo
|
|
2023-05-23
|
|
ChurchCRM v4.5.4 - Reflected XSS via Image (Authenticated)
|
32 |
WEB
|
Rahad Chowdhury
|
