Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2022-08-01   Wavlink WN533A8 - Cross-Site Scripting (XSS) 17 WEB Ahmed Alroky
2022-07-29   WordPress Plugin WP-UserOnline 2.87.6 - Stored Cross-Site Scripting (XSS) 17 WEB Steffin Stanly
2022-07-29   Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Directory Traversal 15 WEB LiquidWorm
2022-07-29   Dingtian-DT-R002 3.1.276A - Authentication Bypass 16 WEB Victor Hanna
2022-07-29   Geonetwork 4.2.0 - XML External Entity (XXE) 20 WEB Amel BOUZIANE-LEBLOND
2022-07-26   WordPress Plugin Visual Slide Box Builder 3.2.9 - SQLi 22 WEB nu11secur1ty
2022-07-21   OctoBot WebInterface 0.4.3 - Remote Code Execution (RCE) 19 WEB Samy Younsi
2022-07-21   CodoForum v5.1 - Remote Code Execution (RCE) 14 WEB Krish Pandey
2022-07-21   Magnolia CMS 6.2.19 - Stored Cross-Site Scripting (XSS) 12 WEB Giulio Garzia Ozozuz
2022-06-27   Mailhog 1.0.1 - Stored Cross-Site Scripting (XSS) 18 WEB Vulnz
2022-06-27   WSO2 Management Console (Multiple Products) - Unauthenticated Reflected Cross-Site Scripting (XSS) 18 WEB cxosmo
2022-06-27   WordPress Plugin Weblizar 8.9 - Backdoor 22 WEB Sobhan Mahmoodi
2022-06-14   SolarView Compact 6.00 - 'pow' Cross-Site Scripting (XSS) 19 WEB Ahmed Alroky
2022-06-14   SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting (XSS) 15 WEB Ahmed Alroky
2022-06-14   Old Age Home Management System 1.0 - SQLi Authentication Bypass 21 WEB twseptian
2022-06-14   ChurchCRM 4.4.5 - SQLi 18 WEB nu11secur1ty
2022-06-14   phpIPAM 1.4.5 - Remote Code Execution (RCE) (Authenticated) 23 WEB Guilherme Alves
2022-06-14   Pandora FMS v7.0NG.742 - Remote Code Execution (RCE) (Authenticated) 18 WEB UNICORD
2022-06-14   Avantune Genialcloud ProJ 10 - Cross-Site Scripting (XSS) 17 WEB Andrea Intilangelo
2022-06-10   Confluence Data Center 7.18.0 - Remote Code Execution (RCE) 15 WEB Fellipe Oliveira
2022-06-10   WordPress Plugin Motopress Hotel Booking Lite 4.2.4 - Stored Cross-Site Scripting (XSS) 23 WEB Sanjay Singh
2022-06-03   Microweber CMS 1.2.15 - Account Takeover 18 WEB Manojkumar J
2022-06-03   Contao 4.13.2 - Cross-Site Scripting (XSS) 18 WEB Chetanya Sharma
2022-05-25   qdPM 9.1 - Remote Code Execution (RCE) (Authenticated) (v2) 14 WEB RedHatAugust
2022-05-23   m1k1o's Blog v.10 - Remote Code Execution (RCE) (Authenticated) 20 WEB Malte V
2022-05-23   OpenCart v3.x Newsletter Module - Blind SQLi 21 WEB Saud Alenazi
2022-05-17   Showdoc 2.10.3 - Stored Cross-Site Scripting (XSS) 18 WEB Akshay Ravi
2022-05-17   T-Soft E-Commerce 4 - SQLi (Authenticated) 20 WEB Alperen Ergel
2022-05-17   T-Soft E-Commerce 4 - 'UrunAdi' Stored Cross-Site Scripting (XSS) 19 WEB Alperen Ergel
2022-05-17   Survey Sparrow Enterprise Survey Software 2022 - Stored Cross-Site Scripting (XSS) 15 WEB Pankaj Kumar Thakur
2022-05-12   TLR-2005KSH - Arbitrary File Delete 18 WEB Ahmed Alroky
2022-05-12   Royal Event Management System 1.0 - 'todate' SQL Injection (Authenticated) 18 WEB Eren Gozaydin
2022-05-12   College Management System 1.0 - 'course_code' SQL Injection (Authenticated) 17 WEB Eren Gozaydin
2022-05-11   TLR-2005KSH - Arbitrary File Upload 19 WEB Ahmed Alroky
2022-05-11   WordPress Plugin stafflist 3.1.2 - SQLi (Authenticated) 15 WEB Hassan Khan Yusufzai
2022-05-11   Joomla Plugin SexyPolling 2.1.7 - SQLi 20 WEB Wolfgang Hotwagner
2022-05-11   WordPress Plugin Blue Admin 21.06.01 - Cross-Site Request Forgery (CSRF) 21 WEB Abisheik M
2022-05-11   MyBB 1.8.29 - MyBB 1.8.29 - Remote Code Execution (RCE) (Authenticated) 18 WEB Altelus
2022-05-11   Beehive Forum - Account Takeover 16 WEB Pablo Santiago
2022-05-11   PHProjekt PhpSimplyGest v1.3. - Stored Cross-Site Scripting (XSS) 16 WEB Andrea Intilangelo
2022-05-11   Navigate CMS 2.9.4 - Server-Side Request Forgery (SSRF) (Authenticated) 16 WEB cheshireca7
2022-05-11   Explore CMS 1.0 - SQL Injection 17 WEB Sajibe Kanti
2022-05-11   Anuko Time Tracker - SQLi (Authenticated) 16 WEB Altelus
2022-05-11   e107 CMS v3.2.1 - Multiple Vulnerabilities 17 WEB Hubert Wojciechowski
2022-05-11   Cyclos 4.14.7 - 'groupId' DOM Based Cross-Site Scripting (XSS) 16 WEB Tin Pham
2022-05-11   Cyclos 4.14.7 - DOM Based Cross-Site Scripting (XSS) 17 WEB Tin Pham
2022-05-11   CSZ CMS 1.3.0 - 'Multiple' Blind SQLi 19 WEB Dogukan Dincer
2022-05-11   Bitrix24 - Remote Code Execution (RCE) (Authenticated) 18 WEB heinjame
2022-05-11   Magento eCommerce CE v2.3.5-p2 - Blind SQLi 19 WEB Aydin Naserifard
2022-05-11   WordPress Plugin Advanced Uploader 4.2 - Arbitrary File Upload (Authenticated) 20 WEB Roel van Beurden
2022-05-11   WebTareas 2.4 - Blind SQLi (Authenticated) 12 WEB Behrad Taher
2022-05-11   Microfinance Management System 1.0 - 'customer_number' SQLi 32 WEB Eren Gozaydin
2022-05-11   ImpressCMS v1.4.4 - Unrestricted File Upload 21 WEB Ünsal Furkan Harani
2022-04-26   GitLab 14.9 - Stored Cross-Site Scripting (XSS) 16 WEB Greenwolf
2022-04-26   Gitlab 14.9 - Authentication Bypass 16 WEB Greenwolf
2022-04-19   Fuel CMS 1.5.0 - Cross-Site Request Forgery (CSRF) 16 WEB Ali J
2022-04-19   WordPress Plugin Elementor 3.6.2 - Remote Code Execution (RCE) (Authenticated) 20 WEB AkuCyberSec
2022-04-19   PKP Open Journals System 3.3 - Cross-Site Scripting (XSS) 19 WEB Hemant Kashyap
2022-04-19   REDCap 11.3.9 - Stored Cross Site Scripting 16 WEB Kendrick Lam
2022-04-19   WordPress Plugin Popup Maker 1.16.5 - Stored Cross-Site Scripting (Authenticated) 19 WEB Roel van Beurden
2022-04-19   WordPress Plugin Videos sync PDF 1.7.4 - Stored Cross Site Scripting (XSS) 17 WEB UnD3sc0n0c1d0
2022-04-19   Scriptcase 9.7 - Remote Code Execution (RCE) 15 WEB luckyt0mat0
2022-04-19   Easy Appointments 1.4.2 - Information Disclosure 16 WEB Alexandre ZANNI
2022-04-19   WordPress Plugin Motopress Hotel Booking Lite 4.2.4 - SQL Injection 14 WEB Mohsen Dehghani
2022-04-11   Razer Sila - Command Injection 15 WEB Kevin Randall
2022-04-11   Razer Sila - Local File Inclusion (LFI) 15 WEB Kevin Randall
2022-04-11   Telesquare TLR-2855KS6 - Arbitrary File Deletion 19 WEB Momen Eldawakhly
2022-04-11   Telesquare TLR-2855KS6 - Arbitrary File Creation 20 WEB Momen Eldawakhly
2022-04-11   SAM SUNNY TRIPOWER 5.0 - Insecure Direct Object Reference (IDOR) 19 WEB Momen Eldawakhly
2022-04-07   ICEHRM 31.0.0.0S - Cross-site Request Forgery (CSRF) to Account Deletion 18 WEB Devansh Bordia
2022-04-07   qdPM 9.2 - Cross-site Request Forgery (CSRF) 15 WEB Chetanya Sharma
2022-04-07   minewebcms 1.15.2 - Cross-site Scripting (XSS) 14 WEB Chetanya Sharma
2022-04-07   KLiK Social Media Website 1.0 - 'Multiple' SQLi 17 WEB corpse
2022-04-07   Zenario CMS 9.0.54156 - Remote Code Execution (RCE) (Authenticated) 19 WEB minhnq22
2022-03-30   WordPress Plugin Easy Cookie Policy 1.6.2 - Broken Access Control to Stored XSS 16 WEB 0xB9
2022-03-30   CSZ CMS 1.2.9 - 'Multiple' Blind SQLi(Authenticated) 20 WEB Rahad Chowdhury
2022-03-30   WordPress Plugin admin-word-count-column 2.2 - Local File Read 18 WEB Hassan Khan Yusufzai
2022-03-30   WordPress Plugin video-synchro-pdf 1.7.4 - Local File Inclusion 16 WEB Hassan Khan Yusufzai
2022-03-30   WordPress Plugin cab-fare-calculator 1.0.3 - Local File Inclusion 13 WEB Hassan Khan Yusufzai
2022-03-30   WordPress Plugin Curtain 1.0.2 - Cross-site Request Forgery (CSRF) 19 WEB Hassan Khan Yusufzai
2022-03-30   Drupal avatar_uploader v7.x-1.0-beta8 - Cross Site Scripting (XSS) 20 WEB Milad karimi
2022-03-30   Atom CMS 2.0 - Remote Code Execution (RCE) 22 WEB Ashish Koli
2022-03-30   ImpressCMS 1.4.2 - Remote Code Execution (RCE) 15 WEB Egidio Romano
2022-03-23   WordPress Plugin amministrazione-aperta 3.7.3 - Local File Read - Unauthenticated 17 WEB Hassan Khan Yusufzai
2022-03-22   ICEHRM 31.0.0.0S - Cross-site Request Forgery (CSRF) to Account Takeover 18 WEB Devansh Bordia
2022-03-21   Wordpress Plugin iQ Block Country 1.2.13 - Arbitrary File Deletion via Zip Slip (Authenticated) 15 WEB Ceylan BOZOĞULLARINDAN
2022-03-16   Tiny File Manager 2.4.6 - Remote Code Execution (RCE) 22 WEB FEBIN MON SAJI
2022-03-16   Pluck CMS 4.7.16 - Remote Code Execution (RCE) (Authenticated) 26 WEB Ashish Koli
2022-03-16   Moodle 3.11.5 - SQLi (Authenticated) 15 WEB Chris Anastasio
2022-03-14   Baixar GLPI Project 9.4.6 - SQLi 16 WEB Prof. Joas Antonio
2022-03-10   Zabbix 5.0.17 - Remote Code Execution (RCE) (Authenticated) 19 WEB Hussien Misbah
2022-03-09   Webmin 1.984 - Remote Code Execution (Authenticated) 19 WEB faisalfs10x
2022-03-07   Hasura GraphQL 2.2.0 - Information Disclosure 19 WEB Dolev Farhi
2022-03-07   Attendance and Payroll System v1.0 - SQLi Authentication Bypass 19 WEB pr0z
2022-03-07   Attendance and Payroll System v1.0 - Remote Code Execution (RCE) 23 WEB pr0z
2022-03-07   part-db 0.5.11 - Remote Code Execution (RCE) 22 WEB Chetanya Sharma
2022-03-07   Spring Cloud Gateway 3.1.0 - Remote Code Execution (RCE) 18 WEB Carlos E. Vieira
2022-03-02   Zyxel ZyWALL 2 Plus Internet Security Appliance - Cross-Site Scripting (XSS) 18 WEB Momen Eldawakhly
2022-03-02   Xerte 3.9 - Remote Code Execution (RCE) (Authenticated) 18 WEB Rik Lutz
2022-03-02   Xerte 3.10.3 - Directory Traversal (Authenticated) 19 WEB Rik Lutz
2022-02-28   Casdoor 1.13.0 - SQL Injection (Unauthenticated) 18 WEB Mayank Deshmukh
2022-02-28   Cipi Control Panel 3.1.15 - Stored Cross-Site Scripting (XSS) (Authenticated) 18 WEB Ghuliev
2022-02-23   Microweber CMS 1.2.10 - Local File Inclusion (Authenticated) (Metasploit) 18 WEB Talha Karakumru
2022-02-23   WebHMI 4.1 - Stored Cross Site Scripting (XSS) (Authenticated) 20 WEB Antonio Cuomo
2022-02-23   WebHMI 4.1.1 - Remote Code Execution (RCE) (Authenticated) 21 WEB Antonio Cuomo
2022-02-23   Student Record System 1.0 - 'cid' SQLi (Authenticated) 19 WEB Mohd. Anees
2022-02-23   aaPanel 6.8.21 - Directory Traversal (Authenticated) 17 WEB Ghuliev
2022-02-23   Air Cargo Management System v1.0 - SQLi 20 WEB nu11secur1ty
2022-02-23   Simple Real Estate Portal System 1.0 - 'id' SQLi 18 WEB Mosaaed
2022-02-21   Dbltek GoIP - Local File Inclusion 18 WEB Valtteri Lehtinen
2022-02-21   FileCloud 21.2 - Cross-Site Request Forgery (CSRF) 16 WEB Masashi Fujiwara
2022-02-21   WordPress Plugin WP User Frontend 3.5.25 - SQLi (Authenticated) 18 WEB Ron Jost
2022-02-21   Thinfinity VirtualUI 2.5.26.2 - Information Disclosure 21 WEB Daniel Morales
2022-02-21   Thinfinity VirtualUI 2.5.41.0 - IFRAME Injection 25 WEB Daniel Morales
2022-02-21   Cab Management System 1.0 - Remote Code Execution (RCE) (Authenticated) 24 WEB Alperen Ergel
2022-02-21   Microweber 1.2.11 - Remote Code Execution (RCE) (Authenticated) 29 WEB Chetanya Sharma
2022-02-21   Cab Management System 1.0 - 'id' SQLi (Authenticated) 22 WEB Alperen Ergel
2022-02-21   WordPress Plugin Perfect Survey - 1.5.1 - SQLi (Unauthenticated) 19 WEB Ron Jost
2022-02-18   Fortinet Fortimail 7.0.1 - Reflected Cross-Site Scripting (XSS) 16 WEB Braiant Giraldo Villa
2022-02-18   Hotel Druid 3.0.3 - Remote Code Execution (RCE) 20 WEB 0z09e
2022-02-18   WordPress Plugin dzs-zoomsounds 6.60 - Remote Code Execution (RCE) (Unauthenticated) 25 WEB Overthinker1877
2022-02-18   WordPress Plugin MasterStudy LMS 2.7.5 - Unauthenticated Admin Account Creation 21 WEB numan türle
2022-02-16   WordPress Plugin Error Log Viewer 1.1.1 - Arbitrary File Clearing (Authenticated) 31 WEB Ceylan BOZOĞULLARINDAN
2022-02-16   Network Video Recorder NVR304-16EP - Reflected Cross-Site Scripting (XSS) (Unauthenticated) 17 WEB Luis Martínez
2022-02-16   ServiceNow - Username Enumeration 20 WEB Victor Hanna