|
2012-10-06
|
|
Open Realty - 'select_users_lang' Local File Inclusion
|
39 |
WEB
|
L0n3ly-H34rT
|
|
2012-10-08
|
|
Interspire Email Marketer - Cross-Site Scripting / HTML Injection / SQL Injection
|
38 |
WEB
|
Ibrahim El-Sayed
|
|
2012-10-05
|
|
WordPress Plugin Shopp - Multiple Vulnerabilities
|
40 |
WEB
|
T0x!c
|
|
2015-08-21
|
|
Netsweeper 4.0.8 - Authentication Bypass (via New Profile Creation)
|
34 |
WEB
|
Anastasios Monachos
|
|
2015-08-21
|
|
Netsweeper 4.0.8 - Arbitrary File Upload / Execution
|
42 |
WEB
|
Anastasios Monachos
|
|
2015-08-21
|
|
Netsweeper 3.0.6 - Authentication Bypass
|
41 |
WEB
|
Anastasios Monachos
|
|
2015-08-21
|
|
Netsweeper 4.0.9 - Arbitrary File Upload / Execution
|
41 |
WEB
|
Anastasios Monachos
|
|
2015-08-21
|
|
Netsweeper 4.0.8 - Authentication Bypass (via Disabling of IP Quarantine)
|
37 |
WEB
|
Anastasios Monachos
|
|
2015-08-21
|
|
Netsweeper 4.0.8 - SQL Injection / Authentication Bypass
|
45 |
WEB
|
Anastasios Monachos
|
|
2015-08-21
|
|
Netsweeper 4.0.4 - SQL Injection
|
40 |
WEB
|
Anastasios Monachos
|
|
2015-08-21
|
|
Netsweeper 2.6.29.8 - SQL Injection
|
39 |
WEB
|
Anastasios Monachos
|
|
2015-08-21
|
|
WordPress Plugin MDC Private Message 1.0.0 - Persistent Cross-Site Scripting
|
46 |
WEB
|
Chris Kellum
|
|
2015-08-21
|
|
WordPress Plugin Googmonify 0.8.1 - Cross-Site Scripting / Cross-Site Request Forgery
|
41 |
WEB
|
Ehsan Hosseini
|
|
2012-10-01
|
|
Omnistar Mailer - Multiple SQL Injections / HTML Injection Vulnerabilities
|
45 |
WEB
|
Vulnerability Laboratory
|
|
2012-10-02
|
|
ZenPhoto - 'admin-news-articles.php' Cross-Site Scripting
|
43 |
WEB
|
Scott Herbert
|
|
2012-10-01
|
|
WordPress Plugin Akismet - Multiple Cross-Site Scripting Vulnerabilities
|
45 |
WEB
|
Tapco Security
|
|
2012-09-30
|
|
AlamFifa CMS - 'user_name_cookie' SQL Injection
|
43 |
WEB
|
L0n3ly-H34rT
|
|
2012-10-02
|
|
Switchvox - Multiple HTML Injection Vulnerabilities
|
42 |
WEB
|
Ibrahim El-Sayed
|
|
2012-09-26
|
|
WordPress Plugin ABC Test - 'id' Cross-Site Scripting
|
48 |
WEB
|
Scott Herbert
|
|
2015-08-20
|
|
Pligg CMS 2.0.2 - Arbitrary Code Execution
|
49 |
WEB
|
Arash Khazaei
|
|
2015-08-20
|
|
Vifi Radio 1.0 - Cross-Site Request Forgery
|
45 |
WEB
|
KnocKout
|
|
2015-08-20
|
|
Aruba Mobility Controller 6.4.2.8 - Multiple Vulnerabilities
|
43 |
WEB
|
Itzik Chen
|
|
2015-08-19
|
|
up.time 7.5.0 - Upload and Execute
|
38 |
WEB
|
LiquidWorm
|
|
2015-08-19
|
|
up.time 7.5.0 - Arbitrary File Disclose and Delete
|
42 |
WEB
|
LiquidWorm
|
|
2015-08-19
|
|
up.time 7.5.0 - Cross-Site Scripting / Cross-Site Request Forgery (Add Admin)
|
40 |
WEB
|
LiquidWorm
|
|
2015-08-19
|
|
up.time 7.5.0 - Superadmin Privilege Escalation
|
39 |
WEB
|
LiquidWorm
|
|
2011-12-30
|
|
Neturf eCommerce Shopping Cart - 'searchFor' Cross-Site Scripting
|
39 |
WEB
|
farbodmahini
|
|
2012-09-22
|
|
WordPress Plugin Sexy Add Template - Cross-Site Request Forgery
|
35 |
WEB
|
the_cyber_nuxbie
|
|
2012-09-25
|
|
WordPress Plugin Token Manager - 'tid' Cross-Site Scripting
|
37 |
WEB
|
TheCyberNuxbie
|
|
2012-09-22
|
|
WordPress Core 3.4.2 - Cross-Site Request Forgery
|
36 |
WEB
|
AkaStep
|
|
2012-09-21
|
|
YCommerce - Multiple SQL Injections
|
37 |
WEB
|
Ricardo Almeida
|
|
2012-09-24
|
|
ZEN Load Balancer - Multiple Vulnerabilities
|
35 |
WEB
|
Brendan Coles
|
|
2012-09-20
|
|
WordPress Plugin MF Gig Calendar - Cross-Site Scripting
|
35 |
WEB
|
Chris Cooper
|
|
2012-09-20
|
|
Poweradmin - 'index.php' Cross-Site Scripting
|
39 |
WEB
|
Siavash
|
|
2012-09-07
|
|
WordPress Theme Purity - Multiple Cross-Site Scripting Vulnerabilities
|
38 |
WEB
|
Matan Azugi
|
|
2012-09-18
|
|
WordPress Core 3.4.2 - Multiple Path Disclosure Vulnerabilities
|
35 |
WEB
|
AkaStep
|
|
2015-08-18
|
|
WordPress Plugin WP Symposium 15.1 - 'get_album_item.php' SQL Injection
|
38 |
WEB
|
PizzaHatHacker
|
|
2015-08-18
|
|
WordPress Plugin WP Symposium 15.1 - Blind SQL Injection
|
38 |
WEB
|
dxw
|
|
2015-08-18
|
|
BigTree CMS 4.2.3 - (Authenticated) SQL Injection
|
39 |
WEB
|
Curesec Research Team
|
|
2015-08-18
|
|
CodoForum 3.3.1 - Multiple SQL Injections
|
40 |
WEB
|
Curesec Research Team
|
|
2015-08-18
|
|
PHPfileNavigator 2.3.3 - Privilege Escalation
|
38 |
WEB
|
hyp3rlinx
|
|
2015-08-18
|
|
PHPfileNavigator 2.3.3 - Cross-Site Request Forgery
|
39 |
WEB
|
hyp3rlinx
|
|
2015-08-18
|
|
PHPfileNavigator 2.3.3 - Cross-Site Scripting
|
38 |
WEB
|
hyp3rlinx
|
|
2015-08-18
|
|
Cisco Unified Communications Manager - Multiple Vulnerabilities
|
42 |
WEB
|
Bernhard Mueller
|
|
2015-08-18
|
|
vBulletin < 4.2.2 - Memcache Remote Code Execution
|
40 |
WEB
|
Joshua Rogers
|
|
2015-08-18
|
|
Magento CE < 1.9.0.1 - (Authenticated) Remote Code Execution
|
43 |
WEB
|
Ebrietas0
|
|
2015-08-17
|
|
Nuts CMS - PHP Remote Code Injection / Execution
|
42 |
WEB
|
Yakir Wizman
|
|
2012-09-18
|
|
vBulletin 4.1.12 - 'blog_plugin_useradmin.php' SQL Injection
|
40 |
WEB
|
Am!r
|
|
2012-09-18
|
|
AxisInternet VoIP Manager - Multiple Cross-Site Scripting Vulnerabilities
|
44 |
WEB
|
Benjamin Kunz Mejri
|
|
2012-09-18
|
|
TAGWORX.CMS - 'cid' SQL Injection
|
41 |
WEB
|
Crim3R
|
|
2012-09-17
|
|
minimal Gallery - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
|
46 |
WEB
|
ayastar
|
|
2012-09-15
|
|
IFOBS - 'regclientprint.jsp' Multiple HTML Injection Vulnerabilities
|
38 |
WEB
|
MustLive
|
|
2015-08-17
|
|
Sagemcom F@ST 3864 V2 - Get Admin Password
|
41 |
WEB
|
Cade Bull
|
|
2012-09-12
|
|
Atlassian Confluence 3.4.x - Error Page Cross-Site Scripting
|
40 |
WEB
|
D. Niedermaier
|
|
2012-09-11
|
|
FBDj - 'id' SQL Injection
|
40 |
WEB
|
TUNISIAN CYBER
|
|
2012-09-06
|
|
OpenFiler 2.3 - Multiple Cross-Site Scripting / Information Disclosure Vulnerabilities
|
42 |
WEB
|
Brendan Coles
|
|
2012-08-30
|
|
WordPress Plugin Download Monitor - 'dlsearch' Cross-Site Scripting
|
38 |
WEB
|
Chris Cooper
|
|
2012-09-10
|
|
DELTAScripts PHP Links - Multiple SQL Injections
|
42 |
WEB
|
L0n3ly-H34rT
|
|
2012-09-10
|
|
VICIDIAL Call Center Suite - Multiple SQL Injections
|
38 |
WEB
|
Ertebat Gostar Co
|
|
2012-09-08
|
|
Pinterestclones - Security Bypass / HTML Injection
|
39 |
WEB
|
DaOne
|
|
2012-09-06
|
|
web@all - Local File Inclusion / Multiple Arbitrary File Upload Vulnerabilities
|
39 |
WEB
|
KedAns-Dz
|
|
2012-09-05
|
|
Extcalendar 2.0 - Multiple SQL Injections / HTML Injection Vulnerabilities
|
39 |
WEB
|
Ashiyane Digital Security Team
|
|
2012-09-05
|
|
Flogr - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
|
38 |
WEB
|
High-Tech Bridge
|
|
2015-08-15
|
|
Security IP Camera Star Vision DVR - Authentication Bypass
|
38 |
WEB
|
Meisam Monsef
|
|
2015-08-15
|
|
Joomla! Component com_informations - SQL Injection
|
39 |
WEB
|
Omar
|
|
2015-08-15
|
|
Joomla! Component com_memorix - SQL Injection
|
42 |
WEB
|
Omar
|
|
2015-08-15
|
|
TOTOLINK Routers - Backdoor / Remote Code Execution
|
42 |
WEB
|
MadMouse
|
|
2015-08-15
|
|
Gkplugins Picasaweb - Download File
|
38 |
WEB
|
TMT zno
|
|
2015-08-13
|
|
Joomla! Component com_jem 2.1.4 - Multiple Vulnerabilities
|
35 |
WEB
|
Martino Sani
|
|
2015-08-13
|
|
Zend Framework 2.4.2 - PHP FPM XML eXternal Entity Injection
|
41 |
WEB
|
Dawid Golunski
|
|
2015-08-12
|
|
Printer Pro 5.4.3 IOS - Persistent Cross-Site Scripting
|
47 |
WEB
|
Taurus Omar
|
|
2015-08-12
|
|
Geoserver < 2.7.1.1 / < 2.6.4 / < 2.5.5.1 - XML External Entity
|
47 |
WEB
|
David Bloom
|
|
2015-08-10
|
|
WordPress Plugin Candidate Application Form 1.0 - Arbitrary File Download
|
42 |
WEB
|
Larry W. Cashdollar
|
|
2015-08-10
|
|
WordPress Plugin Simple Image Manipulator 1.0 - Arbitrary File Download
|
49 |
WEB
|
Larry W. Cashdollar
|
|
2015-08-10
|
|
WordPress Plugin Recent Backups 0.7 - Arbitrary File Download
|
43 |
WEB
|
Larry W. Cashdollar
|
|
2015-08-10
|
|
WordPress Plugin WPTF Image Gallery 1.03 - Arbitrary File Download
|
47 |
WEB
|
Larry W. Cashdollar
|
|
2015-08-10
|
|
WDS CMS - SQL Injection
|
43 |
WEB
|
Ismail Marzouk
|
|
2015-08-09
|
|
WordPress Plugin Video Gallery 2.7 - SQL Injection
|
46 |
WEB
|
Kacper Szurek
|
|
2015-08-07
|
|
WordPress Plugin Job Manager 0.7.22 - Persistent Cross-Site Scripting
|
43 |
WEB
|
Owais Mehtab
|
|
2015-08-07
|
|
Microweber 1.0.3 - Arbitrary File Upload / Filter Bypass / PHP Remote Code Execution
|
43 |
WEB
|
LiquidWorm
|
|
2015-08-07
|
|
Microweber 1.0.3 - Persistent Cross-Site Scripting / Cross-Site Request Forgery (Add Admin)
|
45 |
WEB
|
LiquidWorm
|
|
2015-08-07
|
|
PHP News Script 4.0.0 - SQL Injection
|
38 |
WEB
|
Meisam Monsef
|
|
2015-08-07
|
|
Froxlor Server Management Panel 0.9.33.1 - MySQL Login Information Disclosure
|
38 |
WEB
|
Dustin Dörr
|
|
2015-07-31
|
|
Netgear ReadyNAS LAN /dbbroker 6.2.4 - Credential Disclosure
|
37 |
WEB
|
St0rn
|
|
2015-07-29
|
|
Tendoo CMS 1.3 - Cross-Site Scripting
|
41 |
WEB
|
Arash Khazaei
|
|
2015-07-29
|
|
JoomShopping - Blind SQL Injection
|
37 |
WEB
|
Mormoroth
|
|
2015-07-29
|
|
2Moons - Multiple Vulnerabilities
|
38 |
WEB
|
bRpsd
|
|
2015-07-29
|
|
phpFileManager 0.9.8 - Cross-Site Request Forgery
|
39 |
WEB
|
hyp3rlinx
|
|
2015-07-28
|
|
phpFileManager 0.9.8 - Remote Command Execution
|
39 |
WEB
|
hyp3rlinx
|
|
2015-07-27
|
|
Xceedium Xsuite - Multiple Vulnerabilities
|
41 |
WEB
|
modzero
|
|
2015-07-27
|
|
WordPress Plugin Count Per Day 3.4 - SQL Injection
|
38 |
WEB
|
High-Tech Bridge SA
|
|
2015-07-27
|
|
WordPress Plugin Unite Gallery Lite 1.4.6 - Multiple Vulnerabilities
|
45 |
WEB
|
Nitin Venkatesh
|
|
2015-07-27
|
|
Hawkeye-G 3.0.1.4912 - Persistent Cross-Site Scripting / Information Leakage
|
39 |
WEB
|
hyp3rlinx
|
|
2012-09-05
|
|
Kayako Fusion - 'download.php' Cross-Site Scripting
|
42 |
WEB
|
High-Tech Bridge
|
|
2012-09-04
|
|
PHPFox 3.0.1 - 'ajax.php' Multiple Cross-Site Scripting Vulnerabilities
|
37 |
WEB
|
Crim3R
|
|
2012-09-05
|
|
Cm3 CMS - 'search.asp' Multiple Cross-Site Scripting Vulnerabilities
|
41 |
WEB
|
Crim3R
|
|
2012-09-04
|
|
Sciretech (Multiple Products) - Multiple SQL Injections
|
40 |
WEB
|
AkaStep
|
|
2012-08-04
|
|
Wiki Web Help - 'configpath' Remote File Inclusion
|
39 |
WEB
|
L0n3ly-H34rT
|
|
2012-09-03
|
|
Sitemax Maestro - SQL Injection / Local File Inclusion
|
40 |
WEB
|
AkaStep
|
|
2012-08-31
|
|
SugarCRM Community Edition - Multiple Information Disclosure Vulnerabilities
|
40 |
WEB
|
Brendan Coles
|
|
2012-08-30
|
|
Crowbar - 'file' Multiple Cross-Site Scripting Vulnerabilities
|
38 |
WEB
|
Matthias Weckbecker
|
|
2012-08-30
|
|
XM Forum - 'search.asp' SQL Injection
|
40 |
WEB
|
Crim3R
|
|
2012-08-30
|
|
TomatoCart - 'example_form.ajax.php' Cross-Site Scripting
|
39 |
WEB
|
HauntIT
|
|
2015-07-24
|
|
Hawkeye-G 3.0.1.4912 - Cross-Site Request Forgery
|
39 |
WEB
|
hyp3rlinx
|
|
2012-08-29
|
|
PrestaShop 1.4.7 - Multiple Cross-Site Scripting Vulnerabilities
|
39 |
WEB
|
High-Tech Bridge
|
|
2012-08-29
|
|
Phorum 5.2.18 - Multiple Cross-Site Scripting Vulnerabilities
|
37 |
WEB
|
High-Tech Bridge
|
|
2012-08-28
|
|
WordPress Plugin Simple:Press Forum - Arbitrary File Upload
|
39 |
WEB
|
Iranian Dark Coders
|
|
2012-08-28
|
|
WordPress Plugin Cloudsafe365 - 'file' Remote File Disclosure
|
39 |
WEB
|
Jan Van Niekerk
|
|
2012-08-25
|
|
Mihalism Multi Host - 'users.php' Cross-Site Scripting
|
39 |
WEB
|
Explo!ter
|
|
2012-08-25
|
|
LibGuides - Multiple Cross-Site Scripting Vulnerabilities
|
38 |
WEB
|
Crim3R
|
|
2012-08-25
|
|
Web Wiz Forums - Multiple Cross-Site Scripting Vulnerabilities
|
37 |
WEB
|
Crim3R
|
|
2012-08-25
|
|
WordPress Plugin Finder - 'order' Cross-Site Scripting
|
36 |
WEB
|
Crim3R
|
|
2012-08-25
|
|
Power-eCommerce - Multiple Cross-Site Scripting Vulnerabilities
|
41 |
WEB
|
Crim3R
|
|
2012-08-27
|
|
Joomla! Component Komento - 'cid' SQL Injection
|
37 |
WEB
|
Crim3R
|
|
2012-08-24
|
|
PHP Web Scripts Text Exchange Pro - 'page' Local File Inclusion
|
34 |
WEB
|
Yakir Wizman
|
|
2012-08-29
|
|
JW Player - 'logo.link' Cross-Site Scripting
|
38 |
WEB
|
MustLive
|
|
2015-07-21
|
|
Joomla! Component Helpdesk Pro < 1.4.0 - Multiple Vulnerabilities
|
49 |
WEB
|
Simon Rawet
|
|
2015-07-20
|
|
AirDroid iOS / Android / Win 3.1.3 - Persistent
|
50 |
WEB
|
Vulnerability-Lab
|
|
2015-07-20
|
|
phpVibe < 4.20 - Persistent Cross-Site Scripting
|
48 |
WEB
|
Filippos Mastrogiannis
|
|
2012-08-23
|
|
PHP Web Scripts Ad Manager Pro - 'page' Local File Inclusion
|
36 |
WEB
|
Corrado Liotta
|
|
2012-08-22
|
|
WordPress Plugin Monsters Editor for WP Super Edit - Arbitrary File Upload
|
37 |
WEB
|
Crim3R
|
|
2012-08-22
|
|
WordPress Plugin Rich Widget - Arbitrary File Upload
|
43 |
WEB
|
Crim3R
|
|
2012-08-23
|
|
KindEditor - 'name' Cross-Site Scripting
|
39 |
WEB
|
LiquidWorm
|
|
2012-08-23
|
|
Monstra CMS 1.2.1 - Multiple HTML Injection Vulnerabilities
|
38 |
WEB
|
LiquidWorm
|
|
2012-08-22
|
|
1024 CMS 2.1.1 - 'p' SQL Injection
|
41 |
WEB
|
kallimero
|
