|
2022-06-14
|
|
SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting (XSS)
|
11 |
WEB
|
Ahmed Alroky
|
|
2022-06-14
|
|
Old Age Home Management System 1.0 - SQLi Authentication Bypass
|
13 |
WEB
|
twseptian
|
|
2022-06-14
|
|
ChurchCRM 4.4.5 - SQLi
|
12 |
WEB
|
nu11secur1ty
|
|
2022-06-14
|
|
phpIPAM 1.4.5 - Remote Code Execution (RCE) (Authenticated)
|
13 |
WEB
|
Guilherme Alves
|
|
2022-06-14
|
|
Pandora FMS v7.0NG.742 - Remote Code Execution (RCE) (Authenticated)
|
14 |
WEB
|
UNICORD
|
|
2022-06-14
|
|
Avantune Genialcloud ProJ 10 - Cross-Site Scripting (XSS)
|
11 |
WEB
|
Andrea Intilangelo
|
|
2022-06-10
|
|
Confluence Data Center 7.18.0 - Remote Code Execution (RCE)
|
10 |
WEB
|
Fellipe Oliveira
|
|
2022-06-10
|
|
WordPress Plugin Motopress Hotel Booking Lite 4.2.4 - Stored Cross-Site Scripting (XSS)
|
14 |
WEB
|
Sanjay Singh
|
|
2022-06-03
|
|
Microweber CMS 1.2.15 - Account Takeover
|
13 |
WEB
|
Manojkumar J
|
|
2022-06-03
|
|
Contao 4.13.2 - Cross-Site Scripting (XSS)
|
13 |
WEB
|
Chetanya Sharma
|
|
2022-05-25
|
|
qdPM 9.1 - Remote Code Execution (RCE) (Authenticated) (v2)
|
12 |
WEB
|
RedHatAugust
|
|
2022-05-23
|
|
m1k1o's Blog v.10 - Remote Code Execution (RCE) (Authenticated)
|
13 |
WEB
|
Malte V
|
|
2022-05-23
|
|
OpenCart v3.x Newsletter Module - Blind SQLi
|
14 |
WEB
|
Saud Alenazi
|
|
2022-05-17
|
|
Showdoc 2.10.3 - Stored Cross-Site Scripting (XSS)
|
13 |
WEB
|
Akshay Ravi
|
|
2022-05-17
|
|
T-Soft E-Commerce 4 - SQLi (Authenticated)
|
16 |
WEB
|
Alperen Ergel
|
|
2022-05-17
|
|
T-Soft E-Commerce 4 - 'UrunAdi' Stored Cross-Site Scripting (XSS)
|
13 |
WEB
|
Alperen Ergel
|
|
2022-05-17
|
|
Survey Sparrow Enterprise Survey Software 2022 - Stored Cross-Site Scripting (XSS)
|
11 |
WEB
|
Pankaj Kumar Thakur
|
|
2022-05-12
|
|
TLR-2005KSH - Arbitrary File Delete
|
12 |
WEB
|
Ahmed Alroky
|
|
2022-05-12
|
|
Royal Event Management System 1.0 - 'todate' SQL Injection (Authenticated)
|
12 |
WEB
|
Eren Gozaydin
|
|
2022-05-12
|
|
College Management System 1.0 - 'course_code' SQL Injection (Authenticated)
|
12 |
WEB
|
Eren Gozaydin
|
|
2022-05-11
|
|
TLR-2005KSH - Arbitrary File Upload
|
14 |
WEB
|
Ahmed Alroky
|
|
2022-05-11
|
|
WordPress Plugin stafflist 3.1.2 - SQLi (Authenticated)
|
13 |
WEB
|
Hassan Khan Yusufzai
|
|
2022-05-11
|
|
Joomla Plugin SexyPolling 2.1.7 - SQLi
|
14 |
WEB
|
Wolfgang Hotwagner
|
|
2022-05-11
|
|
WordPress Plugin Blue Admin 21.06.01 - Cross-Site Request Forgery (CSRF)
|
12 |
WEB
|
Abisheik M
|
|
2022-05-11
|
|
MyBB 1.8.29 - MyBB 1.8.29 - Remote Code Execution (RCE) (Authenticated)
|
11 |
WEB
|
Altelus
|
|
2022-05-11
|
|
Beehive Forum - Account Takeover
|
10 |
WEB
|
Pablo Santiago
|
|
2022-05-11
|
|
PHProjekt PhpSimplyGest v1.3. - Stored Cross-Site Scripting (XSS)
|
11 |
WEB
|
Andrea Intilangelo
|
|
2022-05-11
|
|
Navigate CMS 2.9.4 - Server-Side Request Forgery (SSRF) (Authenticated)
|
12 |
WEB
|
cheshireca7
|
|
2022-05-11
|
|
Explore CMS 1.0 - SQL Injection
|
12 |
WEB
|
Sajibe Kanti
|
|
2022-05-11
|
|
Anuko Time Tracker - SQLi (Authenticated)
|
13 |
WEB
|
Altelus
|
|
2022-05-11
|
|
e107 CMS v3.2.1 - Multiple Vulnerabilities
|
13 |
WEB
|
Hubert Wojciechowski
|
|
2022-05-11
|
|
Cyclos 4.14.7 - 'groupId' DOM Based Cross-Site Scripting (XSS)
|
12 |
WEB
|
Tin Pham
|
|
2022-05-11
|
|
Cyclos 4.14.7 - DOM Based Cross-Site Scripting (XSS)
|
14 |
WEB
|
Tin Pham
|
|
2022-05-11
|
|
CSZ CMS 1.3.0 - 'Multiple' Blind SQLi
|
14 |
WEB
|
Dogukan Dincer
|
|
2022-05-11
|
|
Bitrix24 - Remote Code Execution (RCE) (Authenticated)
|
15 |
WEB
|
heinjame
|
|
2022-05-11
|
|
Magento eCommerce CE v2.3.5-p2 - Blind SQLi
|
13 |
WEB
|
Aydin Naserifard
|
|
2022-05-11
|
|
WordPress Plugin Advanced Uploader 4.2 - Arbitrary File Upload (Authenticated)
|
13 |
WEB
|
Roel van Beurden
|
|
2022-05-11
|
|
WebTareas 2.4 - Blind SQLi (Authenticated)
|
10 |
WEB
|
Behrad Taher
|
|
2022-05-11
|
|
Microfinance Management System 1.0 - 'customer_number' SQLi
|
15 |
WEB
|
Eren Gozaydin
|
|
2022-05-11
|
|
ImpressCMS v1.4.4 - Unrestricted File Upload
|
14 |
WEB
|
Ünsal Furkan Harani
|
|
2022-04-26
|
|
GitLab 14.9 - Stored Cross-Site Scripting (XSS)
|
11 |
WEB
|
Greenwolf
|
|
2022-04-26
|
|
Gitlab 14.9 - Authentication Bypass
|
12 |
WEB
|
Greenwolf
|
|
2022-04-19
|
|
Fuel CMS 1.5.0 - Cross-Site Request Forgery (CSRF)
|
11 |
WEB
|
Ali J
|
|
2022-04-19
|
|
WordPress Plugin Elementor 3.6.2 - Remote Code Execution (RCE) (Authenticated)
|
15 |
WEB
|
AkuCyberSec
|
|
2022-04-19
|
|
PKP Open Journals System 3.3 - Cross-Site Scripting (XSS)
|
14 |
WEB
|
Hemant Kashyap
|
|
2022-04-19
|
|
REDCap 11.3.9 - Stored Cross Site Scripting
|
13 |
WEB
|
Kendrick Lam
|
|
2022-04-19
|
|
WordPress Plugin Popup Maker 1.16.5 - Stored Cross-Site Scripting (Authenticated)
|
13 |
WEB
|
Roel van Beurden
|
|
2022-04-19
|
|
WordPress Plugin Videos sync PDF 1.7.4 - Stored Cross Site Scripting (XSS)
|
13 |
WEB
|
UnD3sc0n0c1d0
|
|
2022-04-19
|
|
Scriptcase 9.7 - Remote Code Execution (RCE)
|
11 |
WEB
|
luckyt0mat0
|
|
2022-04-19
|
|
Easy Appointments 1.4.2 - Information Disclosure
|
13 |
WEB
|
Alexandre ZANNI
|
|
2022-04-19
|
|
WordPress Plugin Motopress Hotel Booking Lite 4.2.4 - SQL Injection
|
11 |
WEB
|
Mohsen Dehghani
|
|
2022-04-11
|
|
Razer Sila - Command Injection
|
10 |
WEB
|
Kevin Randall
|
|
2022-04-11
|
|
Razer Sila - Local File Inclusion (LFI)
|
12 |
WEB
|
Kevin Randall
|
|
2022-04-11
|
|
Telesquare TLR-2855KS6 - Arbitrary File Deletion
|
14 |
WEB
|
Momen Eldawakhly
|
|
2022-04-11
|
|
Telesquare TLR-2855KS6 - Arbitrary File Creation
|
15 |
WEB
|
Momen Eldawakhly
|
|
2022-04-11
|
|
SAM SUNNY TRIPOWER 5.0 - Insecure Direct Object Reference (IDOR)
|
14 |
WEB
|
Momen Eldawakhly
|
|
2022-04-07
|
|
ICEHRM 31.0.0.0S - Cross-site Request Forgery (CSRF) to Account Deletion
|
14 |
WEB
|
Devansh Bordia
|
|
2022-04-07
|
|
qdPM 9.2 - Cross-site Request Forgery (CSRF)
|
11 |
WEB
|
Chetanya Sharma
|
|
2022-04-07
|
|
minewebcms 1.15.2 - Cross-site Scripting (XSS)
|
11 |
WEB
|
Chetanya Sharma
|
|
2022-04-07
|
|
KLiK Social Media Website 1.0 - 'Multiple' SQLi
|
13 |
WEB
|
corpse
|
|
2022-04-07
|
|
Zenario CMS 9.0.54156 - Remote Code Execution (RCE) (Authenticated)
|
14 |
WEB
|
minhnq22
|
|
2022-03-30
|
|
WordPress Plugin Easy Cookie Policy 1.6.2 - Broken Access Control to Stored XSS
|
13 |
WEB
|
0xB9
|
|
2022-03-30
|
|
CSZ CMS 1.2.9 - 'Multiple' Blind SQLi(Authenticated)
|
13 |
WEB
|
Rahad Chowdhury
|
|
2022-03-30
|
|
WordPress Plugin admin-word-count-column 2.2 - Local File Read
|
13 |
WEB
|
Hassan Khan Yusufzai
|
|
2022-03-30
|
|
WordPress Plugin video-synchro-pdf 1.7.4 - Local File Inclusion
|
12 |
WEB
|
Hassan Khan Yusufzai
|
|
2022-03-30
|
|
WordPress Plugin cab-fare-calculator 1.0.3 - Local File Inclusion
|
10 |
WEB
|
Hassan Khan Yusufzai
|
|
2022-03-30
|
|
WordPress Plugin Curtain 1.0.2 - Cross-site Request Forgery (CSRF)
|
12 |
WEB
|
Hassan Khan Yusufzai
|
|
2022-03-30
|
|
Drupal avatar_uploader v7.x-1.0-beta8 - Cross Site Scripting (XSS)
|
12 |
WEB
|
Milad karimi
|
|
2022-03-30
|
|
Atom CMS 2.0 - Remote Code Execution (RCE)
|
13 |
WEB
|
Ashish Koli
|
|
2022-03-30
|
|
ImpressCMS 1.4.2 - Remote Code Execution (RCE)
|
11 |
WEB
|
Egidio Romano
|
|
2022-03-23
|
|
WordPress Plugin amministrazione-aperta 3.7.3 - Local File Read - Unauthenticated
|
13 |
WEB
|
Hassan Khan Yusufzai
|
|
2022-03-22
|
|
ICEHRM 31.0.0.0S - Cross-site Request Forgery (CSRF) to Account Takeover
|
11 |
WEB
|
Devansh Bordia
|
|
2022-03-21
|
|
Wordpress Plugin iQ Block Country 1.2.13 - Arbitrary File Deletion via Zip Slip (Authenticated)
|
10 |
WEB
|
Ceylan BOZOĞULLARINDAN
|
|
2022-03-16
|
|
Tiny File Manager 2.4.6 - Remote Code Execution (RCE)
|
15 |
WEB
|
FEBIN MON SAJI
|
|
2022-03-16
|
|
Pluck CMS 4.7.16 - Remote Code Execution (RCE) (Authenticated)
|
14 |
WEB
|
Ashish Koli
|
|
2022-03-16
|
|
Moodle 3.11.5 - SQLi (Authenticated)
|
11 |
WEB
|
Chris Anastasio
|
|
2022-03-14
|
|
Baixar GLPI Project 9.4.6 - SQLi
|
12 |
WEB
|
Prof. Joas Antonio
|
|
2022-03-10
|
|
Zabbix 5.0.17 - Remote Code Execution (RCE) (Authenticated)
|
13 |
WEB
|
Hussien Misbah
|
|
2022-03-09
|
|
Webmin 1.984 - Remote Code Execution (Authenticated)
|
13 |
WEB
|
faisalfs10x
|
|
2022-03-07
|
|
Hasura GraphQL 2.2.0 - Information Disclosure
|
15 |
WEB
|
Dolev Farhi
|
|
2022-03-07
|
|
Attendance and Payroll System v1.0 - SQLi Authentication Bypass
|
14 |
WEB
|
pr0z
|
|
2022-03-07
|
|
Attendance and Payroll System v1.0 - Remote Code Execution (RCE)
|
17 |
WEB
|
pr0z
|
|
2022-03-07
|
|
part-db 0.5.11 - Remote Code Execution (RCE)
|
15 |
WEB
|
Chetanya Sharma
|
|
2022-03-07
|
|
Spring Cloud Gateway 3.1.0 - Remote Code Execution (RCE)
|
13 |
WEB
|
Carlos E. Vieira
|
|
2022-03-02
|
|
Zyxel ZyWALL 2 Plus Internet Security Appliance - Cross-Site Scripting (XSS)
|
13 |
WEB
|
Momen Eldawakhly
|
|
2022-03-02
|
|
Xerte 3.9 - Remote Code Execution (RCE) (Authenticated)
|
13 |
WEB
|
Rik Lutz
|
|
2022-03-02
|
|
Xerte 3.10.3 - Directory Traversal (Authenticated)
|
13 |
WEB
|
Rik Lutz
|
|
2022-02-28
|
|
Casdoor 1.13.0 - SQL Injection (Unauthenticated)
|
13 |
WEB
|
Mayank Deshmukh
|
|
2022-02-28
|
|
Cipi Control Panel 3.1.15 - Stored Cross-Site Scripting (XSS) (Authenticated)
|
13 |
WEB
|
Ghuliev
|
|
2022-02-23
|
|
Microweber CMS 1.2.10 - Local File Inclusion (Authenticated) (Metasploit)
|
11 |
WEB
|
Talha Karakumru
|
|
2022-02-23
|
|
WebHMI 4.1 - Stored Cross Site Scripting (XSS) (Authenticated)
|
11 |
WEB
|
Antonio Cuomo
|
|
2022-02-23
|
|
WebHMI 4.1.1 - Remote Code Execution (RCE) (Authenticated)
|
12 |
WEB
|
Antonio Cuomo
|
|
2022-02-23
|
|
Student Record System 1.0 - 'cid' SQLi (Authenticated)
|
13 |
WEB
|
Mohd. Anees
|
|
2022-02-23
|
|
aaPanel 6.8.21 - Directory Traversal (Authenticated)
|
12 |
WEB
|
Ghuliev
|
|
2022-02-23
|
|
Air Cargo Management System v1.0 - SQLi
|
12 |
WEB
|
nu11secur1ty
|
|
2022-02-23
|
|
Simple Real Estate Portal System 1.0 - 'id' SQLi
|
13 |
WEB
|
Mosaaed
|
|
2022-02-21
|
|
Dbltek GoIP - Local File Inclusion
|
13 |
WEB
|
Valtteri Lehtinen
|
|
2022-02-21
|
|
FileCloud 21.2 - Cross-Site Request Forgery (CSRF)
|
12 |
WEB
|
Masashi Fujiwara
|
|
2022-02-21
|
|
WordPress Plugin WP User Frontend 3.5.25 - SQLi (Authenticated)
|
12 |
WEB
|
Ron Jost
|
|
2022-02-21
|
|
Thinfinity VirtualUI 2.5.26.2 - Information Disclosure
|
12 |
WEB
|
Daniel Morales
|
|
2022-02-21
|
|
Thinfinity VirtualUI 2.5.41.0 - IFRAME Injection
|
13 |
WEB
|
Daniel Morales
|
|
2022-02-21
|
|
Cab Management System 1.0 - Remote Code Execution (RCE) (Authenticated)
|
11 |
WEB
|
Alperen Ergel
|
|
2022-02-21
|
|
Microweber 1.2.11 - Remote Code Execution (RCE) (Authenticated)
|
11 |
WEB
|
Chetanya Sharma
|
|
2022-02-21
|
|
Cab Management System 1.0 - 'id' SQLi (Authenticated)
|
14 |
WEB
|
Alperen Ergel
|
|
2022-02-21
|
|
WordPress Plugin Perfect Survey - 1.5.1 - SQLi (Unauthenticated)
|
14 |
WEB
|
Ron Jost
|
|
2022-02-18
|
|
Fortinet Fortimail 7.0.1 - Reflected Cross-Site Scripting (XSS)
|
13 |
WEB
|
Braiant Giraldo Villa
|
|
2022-02-18
|
|
Hotel Druid 3.0.3 - Remote Code Execution (RCE)
|
16 |
WEB
|
0z09e
|
|
2022-02-18
|
|
WordPress Plugin dzs-zoomsounds 6.60 - Remote Code Execution (RCE) (Unauthenticated)
|
17 |
WEB
|
Overthinker1877
|
|
2022-02-18
|
|
WordPress Plugin MasterStudy LMS 2.7.5 - Unauthenticated Admin Account Creation
|
15 |
WEB
|
numan türle
|
|
2022-02-16
|
|
WordPress Plugin Error Log Viewer 1.1.1 - Arbitrary File Clearing (Authenticated)
|
23 |
WEB
|
Ceylan BOZOĞULLARINDAN
|
|
2022-02-16
|
|
Network Video Recorder NVR304-16EP - Reflected Cross-Site Scripting (XSS) (Unauthenticated)
|
13 |
WEB
|
Luis Martínez
|
|
2022-02-16
|
|
ServiceNow - Username Enumeration
|
15 |
WEB
|
Victor Hanna
|
|
2022-02-16
|
|
Simple Student Quarterly Result/Grade System 1.0 - SQLi Authentication Bypass
|
15 |
WEB
|
Saud Alenazi
|
|
2022-02-16
|
|
Multi-Vendor Online Groceries Management System 1.0 - 'id' Blind SQL Injection
|
12 |
WEB
|
Saud Alenazi
|
|
2022-02-11
|
|
Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated)
|
10 |
WEB
|
Luis Martínez
|
|
2022-02-11
|
|
Subrion CMS 4.2.1 - Cross Site Request Forgery (CSRF) (Add Amin)
|
10 |
WEB
|
Aryan Chehreghani
|
|
2022-02-11
|
|
Accounting Journal Management System 1.0 - 'id' SQLi (Authenticated)
|
12 |
WEB
|
Alperen Ergel
|
|
2022-02-10
|
|
WordPress Plugin Jetpack 9.1 - Cross Site Scripting (XSS)
|
11 |
WEB
|
Milad karimi
|
|
2022-02-10
|
|
WordPress Plugin Contact Form Builder 1.6.1 - Cross-Site Scripting (XSS)
|
11 |
WEB
|
Milad karimi
|
|
2022-02-10
|
|
WordPress Plugin Secure Copy Content Protection and Content Locking 2.8.1 - SQL-Injection (Unauthent
|
9 |
WEB
|
Ron Jost
|
|
2022-02-10
|
|
Home Owners Collection Management System 1.0 - 'id' Blind SQL Injection
|
8 |
WEB
|
Saud Alenazi
|
|
2022-02-10
|
|
Home Owners Collection Management System 1.0 - Remote Code Execution (RCE) (Authenticated)
|
11 |
WEB
|
Saud Alenazi
|
|
2022-02-10
|
|
Home Owners Collection Management System 1.0 - Account Takeover (Unauthenticated)
|
18 |
WEB
|
Saud Alenazi
|
|
2022-02-10
|
|
Hospital Management Startup 1.0 - 'Multiple' SQLi
|
10 |
WEB
|
nu11secur1ty
|
|
2022-02-09
|
|
AtomCMS v2.0 - SQLi
|
10 |
WEB
|
Luca Cuzzolin
|
