Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2023-04-08   Online Appointment System V1.0 - Cross-Site Scripting (XSS) 10 WEB Sanjay Singh
2023-04-08   ENTAB ERP 1.0 - Username PII leak 15 WEB Deb Prasad Banerjee
2023-04-08   Joomla! v4.2.8 - Unauthenticated information disclosure 10 WEB Alexandre ZANNI
2023-04-08   Restaurant Management System 1.0 - SQL Injection 11 WEB calfcrusher
2023-04-08   Icinga Web 2.10 - Arbitrary File Disclosure 14 WEB Jacob Ebben
2023-04-08   Adobe Connect 11.4.5 - Local File Disclosure 10 WEB h4shur
2023-04-08   Altenergy Power Control Software C1.2.5 - OS command injection 11 WEB Ahmed Alroky
2023-04-07   Snitz Forum v1.0 - Blind SQL Injection 12 WEB Emiliano Febbi
2023-04-07   Rukovoditel 3.3.1 - Remote Code Execution (RCE) 10 WEB Mirabbas Ağalarov
2023-04-07   ChurchCRM 4.5.1 - Authenticated SQL Injection 10 WEB Arvandy
2023-04-07   NotrinosERP 0.7 - Authenticated Blind SQL Injection 11 WEB Arvandy
2023-04-07   MAC 1200R - Directory Traversal 10 WEB Chunlei Shang_ Jiangsu Public Information Co._ Ltd
2023-04-06   craftercms 4.x.x - CORS 12 WEB nu11secur1ty
2023-04-06   Purchase Order Management-1.0 - Local File Inclusion 12 WEB nu11secur1ty
2023-04-06   Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversal and LFI 12 WEB Kahvi-0
2023-04-06   Agilebio Lab Collector Electronic Lab Notebook v4.234 - Remote Code Execution (RCE) 14 WEB Anthony Cole
2023-04-06   ChurchCRM v4.5.3-121fcc1 - SQL Injection 10 WEB nu11secur1ty
2023-04-06   flatnux 2021-03.25 - Remote Code Execution (Authenticated) 11 WEB Ömer Hasan Durmuş
2023-04-06   Simple Food Ordering System v1.0 - Cross-Site Scripting (XSS) 14 WEB Muhammad Navaid Zafar Ansari
2023-04-06   Music Gallery Site v1.0 - SQL Injection on page Master.php 11 WEB Muhammad Navaid Zafar Ansari
2023-04-06   Music Gallery Site v1.0 - SQL Injection on page view_music_details.php 8 WEB Muhammad Navaid Zafar Ansari
2023-04-06   Music Gallery Site v1.0 - Broken Access Control 8 WEB Muhammad Navaid Zafar Ansari
2023-04-06   Music Gallery Site v1.0 - SQL Injection on music_list.php 8 WEB Muhammad Navaid Zafar Ansari
2023-04-06   Employee Task Management System v1.0 - SQL Injection on edit-task.php 9 WEB Muhammad Navaid Zafar Ansari
2023-04-06   Employee Task Management System v1.0 - SQL Injection on (task-details.php?task_id=?) 11 WEB Muhammad Navaid Zafar Ansari
2023-04-06   Employee Task Management System v1.0 - Broken Authentication 12 WEB Muhammad Navaid Zafar Ansari
2023-04-06   Auto Dealer Management System v1.0 - SQL Injection on manage_user.php 10 WEB Muhammad Navaid Zafar Ansari
2023-04-06   Auto Dealer Management System v1.0 - SQL Injection in sell_vehicle.php 10 WEB Muhammad Navaid Zafar Ansari
2023-04-06   Auto Dealer Management System v1.0 - SQL Injection 9 WEB Muhammad Navaid Zafar Ansari
2023-04-06   Auto Dealer Management System 1.0 - Broken Access Control Exploit 10 WEB Muhammad Navaid Zafar Ansari
2023-04-06   Best pos Management System v1.0 - Remote Code Execution (RCE) on File Upload 11 WEB Ahmed Ismail
2023-04-06   Best pos Management System v1.0 - SQL Injection 9 WEB Ahmed Ismail
2023-04-06   Kimai-1.30.10 - SameSite Cookie-Vulnerability session hijacking 9 WEB nu11secur1ty
2023-04-06   POLR URL 2.3.0 - Shortener Admin Takeover 11 WEB p4kl0nc4t
2023-04-06   modoboa 2.0.4 - Admin TakeOver 10 WEB 7h3h4ckv157
2023-04-06   LDAP Tool Box Self Service Password v1.5.2 - Account takeover 8 WEB Tahar BENNACEF
2023-04-06   Intern Record System v1.0 - SQL Injection (Unauthenticated) 9 WEB Hamdi Sevben
2023-04-06   Simple Task Managing System v1.0 - SQL Injection (Unauthenticated) 10 WEB Hamdi Sevben
2023-04-06   Art Gallery Management System Project in PHP v 1.0 - SQL injection 10 WEB Yogesh Verma
2023-04-06   atrocore 1.5.25 User interaction - Unauthenticated File upload - RCE 12 WEB nu11secur1ty
2023-04-06   Dompdf 1.2.1 - Remote Code Execution (RCE) 12 WEB Ravindu Wickramasinghe
2023-04-05   Provide Server v.14.4 XSS - CSRF & Remote Code Execution (RCE) 11 WEB Andreas Finstad
2023-04-05   Froxlor 2.0.3 Stable - Remote Code Execution (RCE) 15 WEB Askar
2023-04-05   CKEditor 5 35.4.0 - Cross-Site Scripting (XSS) 15 WEB Manish Pathak
2023-04-05   Answerdev 1.0.3 - Account Takeover 39 WEB Eduardo Pérez-Malumbres Cervera
2023-04-05   ERPNext 12.29 - Cross-Site Scripting (XSS) 13 WEB Patrick Dean Ramos / Nathu Nandwani / Junnair Manl
2023-04-05   BTCPay Server v1.7.4 - HTML Injection 13 WEB Manojkumar J
2023-04-05   itech TrainSmart r1044 - SQL injection 13 WEB Adrian Bondocea
2023-04-05   Responsive FileManager 9.9.5 - Remote Code Execution (RCE) 14 WEB Galoget Latorre
2023-04-05   Control Web Panel 7 (CWP7) v0.9.8.1147 - Remote Code Execution (RCE) 12 WEB Mayank Deshmukh
2023-04-05   Online Eyewear Shop 1.0 - SQL Injection (Unauthenticated) 9 WEB Muhammad Navaid Zafar Ansari
2023-04-05   bgERP v22.31 (Orlovets) - Cookie Session vulnerability & Cross-Site Scripting (XSS) 9 WEB nu11secur1ty
2023-04-05   Liferay Portal 6.2.5 - Insecure Permissions 9 WEB Fu2x2000
2023-04-05   Bus Pass Management System 1.0 - Stored Cross-Site Scripting (XSS) 9 WEB Matteo Conti
2023-04-05   Calendar Event Multi View 1.4.07 - Unauthenticated Arbitrary Event Creation to Cross-Site Scripting 9 WEB Mostafa Farzaneh
2023-04-05   zstore 6.6.0 - Cross-Site Scripting (XSS) 9 WEB nu11secur1ty
2023-04-05   projectSend r1605 - Remote Code Exectution RCE 9 WEB Mirabbas Ağalarov
2023-04-05   Secure Web Gateway 10.2.11 - Cross-Site Scripting (XSS) 8 WEB RedTeam Pentesting GmbH
2023-04-05   PhotoShow 3.0 - Remote Code Execution 10 WEB LSCP Responsible Disclosure Lab
2023-04-03   Paid Memberships Pro v2.9.8 (WordPress Plugin) - Unauthenticated SQL Injection 11 WEB r3nt0n
2023-04-03   GLPI Cartography Plugin v6.0.0 - Unauthenticated Remote Code Execution (RCE) 13 WEB Nuri Çilengir
2023-04-03   GLPI v10.0.2 - SQL Injection (Authentication Depends on Configuration) 8 WEB Nuri Çilengir
2023-04-03   GLPI Activity v3.1.0 - Authenticated Local File Inclusion on Activity plugin 10 WEB Nuri Çilengir
2023-04-03   GLPI Glpiinventory v1.0.1 - Unauthenticated Local File Inclusion 10 WEB Nuri Çilengir
2023-04-03   GLPI 4.0.2 - Unauthenticated Local File Inclusion on Manageentities plugin 10 WEB Nuri Çilengir
2023-04-03   Roxy WI v6.1.1.0 - Unauthenticated Remote Code Execution (RCE) via ssl_cert Upload 12 WEB Nuri Çilengir
2023-04-03   Roxy WI v6.1.0.0 - Unauthenticated Remote Code Execution (RCE) 15 WEB Nuri Çilengir
2023-04-03   Roxy WI v6.1.0.0 - Improper Authentication Control 12 WEB Nuri Çilengir
2023-04-03   WP-file-manager v6.9 - Unauthenticated Arbitrary File Upload leading to RCE 16 WEB BLY
2023-04-03   ManageEngin AMP 4.3.0 - File-path-traversal 12 WEB nu11secur1ty
2023-04-03   Active eCommerce CMS 6.5.0 - Stored Cross-Site Scripting (XSS) 10 WEB Sajibe Kanti
2023-04-03   ERPGo SaaS 3.9 - CSV Injection 16 WEB Sajibe Kanti
2023-04-03   AmazCart CMS 3.4 - Cross-Site-Scripting (XSS) 16 WEB Sajibe Kanti
2023-04-03   SQL Monitor 12.1.31.893 - Cross-Site Scripting (XSS) 11 WEB geeklinuxman
2023-04-03   Art Gallery Management System Project v1.0 - SQL Injection (editid) authenticated 31 WEB Rahul Patwari
2023-04-03   Art Gallery Management System Project v1.0 - SQL Injection (cid) Unauthenticated 8 WEB Rahul Patwari
2023-04-03   Art Gallery Management System Project v1.0 - Reflected Cross-Site Scripting (XSS) 11 WEB Rahul Patwari
2023-04-03   MyBB 1.8.32 - Remote Code Execution (RCE) (Authenticated) 12 WEB lUc1f3r11
2023-04-03   SLIMSV 9.5.2 - Cross-Site Scripting (XSS) 13 WEB nu11secur1ty
2023-04-03   Zstore 6.5.4 - Reflected Cross-Site Scripting (XSS) 29 WEB nu11secur1ty
2023-04-03   Nacos 2.0.3 - Access Control vulnerability 15 WEB Jenson Zhao
2023-04-03   Metform Elementor Contact Form Builder v3.1.2 - Unauthenticated Stored Cross-Site Scripting (XSS) 10 WEB Mohammed Chemouri
2023-04-03   ChiKoi v1.0 - SQL Injection 9 WEB nu11secur1ty
2023-04-03   pimCore v5.4.18-skeleton - Sensitive Cookie with Improper SameSite Attribute 11 WEB nu11secur1ty
2023-04-01   ELSI Smart Floor V3.3.3 - Stored Cross-Site Scripting (XSS) 7 WEB Rob_ CTRL Group
2023-04-01   Yahoo User Interface library (YUI2) TreeView v2.8.2 - Multiple Reflected Cross Site Scripting (XSS) 10 WEB SITE Team
2023-04-01   PMB 7.4.6 - SQL Injection 12 WEB str0xo DZ
2023-04-01   Centos Web Panel 7 v0.9.8.1147 - Unauthenticated Remote Code Execution (RCE) 16 WEB numan türle
2023-04-01   Apache 2.4.x - Buffer Overflow 11 WEB Sunil Iyengar
2023-04-01   Reprise Software RLM v14.2BL4 - Cross-Site Scripting (XSS) 12 WEB Mohammed A.Siledar
2023-04-01   SugarCRM 12.2.0 - Remote Code Execution (RCE) 14 WEB sw33t.0day
2023-04-01   perfSONAR v4.4.5 - Partial Blind CSRF 11 WEB Ryan Moore
2023-04-01   Prizm Content Connect v10.5.1030.8315 - XXE 10 WEB xhzeem
2023-04-01   XCMS v1.83 - Remote Command Execution (RCE) 10 WEB Onurcan
2023-04-01   GitLab v15.3 - Remote Code Execution (RCE) (Authenticated) 13 WEB Antonio Francesco Sardella
2023-04-01   GeoVision Camera GV-ADR2701 - Authentication Bypass 12 WEB Chan Nyein Wai
2023-03-31   Textpattern 4.8.8 - Remote Code Execution (RCE) (Authenticated) 9 WEB Alperen Ergel
2023-03-31   Bangresto 1.0 - SQL Injection 9 WEB nu11secur1ty
2023-03-31   Cacti v1.2.22 - Remote Command Execution (RCE) 12 WEB Riadh Bouchahoua
2023-03-31   Judging Management System v1.0 - Authentication Bypass 8 WEB Angelo Pio Amirante
2023-03-31   Judging Management System v1.0 - Remote Code Execution (RCE) 9 WEB Angelo Pio Amirante
2023-03-31   rconfig 3.9.7 - Sql Injection (Authenticated) 9 WEB azhen
2023-03-31   Spitfire CMS 1.0.475 - PHP Object Injection 12 WEB LiquidWorm
2023-03-31   Senayan Library Management System v9.0.0 - SQL Injection 12 WEB nu11secur1ty
2023-03-31   Bludit 3-14-1 Plugin 'UploadPlugin' - Remote Code Execution (RCE) (Authenticated) 13 WEB Alperen Ergel
2023-03-31   WooCommerce v7.1.0 - Remote Code Execution(RCE) 12 WEB Milad karimi
2023-03-31   EQ Enterprise management system v2.2.0 - SQL Injection 10 WEB TLF
2023-03-30   Eve-ng 5.0.1-13 - Stored Cross-Site Scripting (XSS) 22 WEB @casp3r0x0 hassan ali al-khafaji
2023-03-30   WPForms 1.7.8 - Cross-Site Scripting (XSS) 24 WEB Milad karimi
2023-03-30   Shoplazza 1.1 - Stored Cross-Site Scripting (XSS) 12 WEB Andrey Stoykov
2023-03-30   LISTSERV 17 - Insecure Direct Object Reference (IDOR) 12 WEB Shaunt Der-Grigorian
2023-03-30   LISTSERV 17 - Reflected Cross Site Scripting (XSS) 14 WEB Shaunt Der-Grigorian
2023-03-30   4images 1.9 - Remote Command Execution (RCE) 9 WEB Andrey Stoykov
2023-03-30   Device Manager Express 7.8.20002.47752 - Remote Code Execution (RCE) 8 WEB Eric Flokstra
2023-03-30   Concrete5 CME v9.1.3 - Xpath injection 10 WEB nu11secur1ty
2023-03-30   Virtual Reception v1.0 - Web Server Directory Traversal 11 WEB Spinae
2023-03-30   Covenant v0.5 - Remote Code Execution (RCE) 9 WEB xThaz
2023-03-30   Ecommerse v1.0 - Cross-Site Scripting (XSS) 8 WEB nu11secur1ty
2023-03-30   Boa Web Server v0.94.14 - Authentication Bypass 17 WEB George Tsimpidas
2023-03-30   myBB forums 1.8.26 - Stored Cross-Site Scripting (XSS) 13 WEB Andrey Stoykov
2023-03-30   ClicShopping v3.402 - Cross-Site Scripting (XSS) 9 WEB nu11secur1ty
2023-03-30   Dreamer CMS v4.0.0 - SQL Injection 9 WEB lvren
2023-03-29   Revenue Collection System v1.0 - Remote Code Execution (RCE) 9 WEB Joe Pollock
2023-03-29   Helmet Store Showroom v1.0 - SQL Injection 10 WEB Ameer Hamza
2023-03-29   Uniview NVR301-04S2-P4 - Reflected Cross-Site Scripting (XSS) 10 WEB Bleron Rrustemi