Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2023-03-25   GuppY CMS v6.00.10 - Remote Code Execution 29 WEB Chokri Hammedi
2023-03-25   Lavalite v9.0.0 - XSRF-TOKEN cookie File path traversal 33 WEB nu11secur1ty
2023-03-25   Employee Performance Evaluation System v1.0 - File Inclusion and RCE 33 WEB nu11secur1ty
2023-03-25   Yoga Class Registration System v1.0 - Multiple SQLi 29 WEB Abdulhakim Öner
2023-03-25   Human Resources Management System v1.0 - Multiple SQLi 28 WEB Abdulhakim Öner
2023-03-25   Online Diagnostic Lab Management System v1.0 - Remote Code Execution (RCE) (Unauthenticated) 22 WEB yousef alraddadi
2023-03-25   Translatepress Multilinugal WordPress plugin < 2.3.3 - Authenticated SQL Injection 28 WEB Elias Hohl
2023-03-25   NEX-Forms WordPress plugin < 7.9.7 - Authenticated SQLi 31 WEB Elias Hohl
2023-03-25   _camp_ Raspberry Pi camera server 1.0 - Authentication Bypass 33 WEB Elias Hohl
2023-03-23   Bitbucket v7.0.0 - RCE 29 WEB khal4n1
2023-03-23   wkhtmltopdf 0.12.6 - Server Side Request Forgery 31 WEB Momen Eldawakhly
2023-03-23   WorkOrder CMS 0.1.0 - SQL Injection 40 WEB Chokri Hammedi
2023-03-23   MAN-EAM-0003 V3.2.4 - XXE 25 WEB Ahmed Alroky
2023-03-23   Owlfiles File Manager 12.0.1 - Multiple Vulnerabilities 28 WEB Chokri Hammedi
2023-03-22   Linksys AX3200 V1.1.00 - Command Injection 27 WEB Ahmed Alroky
2023-03-22   VIAVIWEB Wallpaper Admin 1.0 - Multiple Vulnerabilities 23 WEB Edd13Mora
2023-02-20   pfBlockerNG 2.1.4_26 - Remote Code Execution (RCE) 23 WEB IHTeam
2022-11-11   CVAT 2.0 - Server Side Request Forgery 24 WEB Emir Polat
2022-11-11   Open Web Analytics 1.7.3 - Remote Code Execution 31 WEB Jacob Ebben
2022-10-17   Wordpress Plugin ImageMagick-Engine 1.7.4 - Remote Code Execution (RCE) (Authenticated) 29 WEB ABDO10
2022-10-06   Wordpress Plugin Zephyr Project Manager 3.2.42 - Multiple SQLi 29 WEB Rizacan Tufan
2022-09-23   Testa 3.5.1 Online Test Management System - Reflected Cross-Site Scripting (XSS) 28 WEB Ashkan Moghaddas
2022-09-23   Aero CMS v0.0.1 - SQLi 30 WEB nu11secur1ty
2022-09-23   Wordpress Plugin 3dady real-time web stats 1.0 - Stored Cross Site Scripting (XSS) 28 WEB UnD3sc0n0c1d0
2022-09-23   Wordpress Plugin WP-UserOnline 2.88.0 - Stored Cross Site Scripting (XSS) 28 WEB UnD3sc0n0c1d0
2022-09-23   Feehi CMS 2.1.1 - Remote Code Execution (Authenticated) 25 WEB yuyudhn
2022-09-23   TP-Link Tapo c200 1.1.15 - Remote Code Execution (RCE) 24 WEB hacefresko
2022-09-20   Bookwyrm v0.4.3 - Authentication Bypass 21 WEB Akshay Ravi
2022-09-20   Buffalo TeraStation Network Attached Storage (NAS) 1.66 - Authentication Bypass 24 WEB Jordan Glover
2022-09-15   Gitea 1.16.6 - Remote Code Execution (RCE) (Metasploit) 27 WEB samguy
2022-09-02   WordPress Plugin Netroics Blog Posts Grid 1.0 - Stored Cross-Site Scripting (XSS) 25 WEB Luqman Hakim Zahari
2022-09-02   WordPress Plugin Testimonial Slider and Showcase 2.2.6 - Stored Cross-Site Scripting (XSS) 26 WEB Luqman Hakim Zahari
2022-09-02   Sophos XG115w Firewall 17.0.10 MR-10 - Authentication Bypass 24 WEB Aryan Chehreghani
2022-08-09   ThingsBoard 3.3.1 'description' - Stored Cross-Site Scripting (XSS) 29 WEB Steffen Langenfeld
2022-08-09   ThingsBoard 3.3.1 'name' - Stored Cross-Site Scripting (XSS) 30 WEB Steffen Langenfeld
2022-08-09   Feehi CMS 2.1.1 - Stored Cross-Site Scripting (XSS) 30 WEB Shivam Singh
2022-08-09   Prestashop blockwishlist module 2.1.0 - SQLi 23 WEB Karthik UJ
2022-08-01   Webmin 1.996 - Remote Code Execution (RCE) (Authenticated) 46 WEB Emir Polat
2022-08-01   NanoCMS v0.4 - Remote Code Execution (RCE) (Authenticated) 34 WEB p1ckzi
2022-08-01   mPDF 7.0 - Local File Inclusion 37 WEB Musyoka Ian
2022-08-01   CuteEditor for PHP 6.6 - Directory Traversal 26 WEB Stefan Hesselman
2022-08-01   WordPress Plugin Duplicator 1.4.7 - Information Disclosure 34 WEB SecuriTrust
2022-08-01   WordPress Plugin Duplicator 1.4.6 - Unauthenticated Backup Download 28 WEB SecuriTrust
2022-08-01   Wavlink WN530HG4 - Password Disclosure 27 WEB Ahmed Alroky
2022-08-01   Wavlink WN533A8 - Password Disclosure 29 WEB Ahmed Alroky
2022-08-01   Wavlink WN533A8 - Cross-Site Scripting (XSS) 28 WEB Ahmed Alroky
2022-07-29   WordPress Plugin WP-UserOnline 2.87.6 - Stored Cross-Site Scripting (XSS) 25 WEB Steffin Stanly
2022-07-29   Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Directory Traversal 23 WEB LiquidWorm
2022-07-29   Dingtian-DT-R002 3.1.276A - Authentication Bypass 25 WEB Victor Hanna
2022-07-29   Geonetwork 4.2.0 - XML External Entity (XXE) 26 WEB Amel BOUZIANE-LEBLOND
2022-07-26   WordPress Plugin Visual Slide Box Builder 3.2.9 - SQLi 36 WEB nu11secur1ty
2022-07-21   OctoBot WebInterface 0.4.3 - Remote Code Execution (RCE) 37 WEB Samy Younsi
2022-07-21   CodoForum v5.1 - Remote Code Execution (RCE) 23 WEB Krish Pandey
2022-07-21   Magnolia CMS 6.2.19 - Stored Cross-Site Scripting (XSS) 24 WEB Giulio Garzia Ozozuz
2022-06-27   Mailhog 1.0.1 - Stored Cross-Site Scripting (XSS) 26 WEB Vulnz
2022-06-27   WSO2 Management Console (Multiple Products) - Unauthenticated Reflected Cross-Site Scripting (XSS) 30 WEB cxosmo
2022-06-27   WordPress Plugin Weblizar 8.9 - Backdoor 35 WEB Sobhan Mahmoodi
2022-06-14   SolarView Compact 6.00 - 'pow' Cross-Site Scripting (XSS) 25 WEB Ahmed Alroky
2022-06-14   SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting (XSS) 24 WEB Ahmed Alroky
2022-06-14   Old Age Home Management System 1.0 - SQLi Authentication Bypass 33 WEB twseptian
2022-06-14   ChurchCRM 4.4.5 - SQLi 25 WEB nu11secur1ty
2022-06-14   phpIPAM 1.4.5 - Remote Code Execution (RCE) (Authenticated) 32 WEB Guilherme Alves
2022-06-14   Pandora FMS v7.0NG.742 - Remote Code Execution (RCE) (Authenticated) 29 WEB UNICORD
2022-06-14   Avantune Genialcloud ProJ 10 - Cross-Site Scripting (XSS) 24 WEB Andrea Intilangelo
2022-06-10   Confluence Data Center 7.18.0 - Remote Code Execution (RCE) 26 WEB Fellipe Oliveira
2022-06-10   WordPress Plugin Motopress Hotel Booking Lite 4.2.4 - Stored Cross-Site Scripting (XSS) 37 WEB Sanjay Singh
2022-06-03   Microweber CMS 1.2.15 - Account Takeover 24 WEB Manojkumar J
2022-06-03   Contao 4.13.2 - Cross-Site Scripting (XSS) 29 WEB Chetanya Sharma
2022-05-25   qdPM 9.1 - Remote Code Execution (RCE) (Authenticated) (v2) 23 WEB RedHatAugust
2022-05-23   m1k1o's Blog v.10 - Remote Code Execution (RCE) (Authenticated) 36 WEB Malte V
2022-05-23   OpenCart v3.x Newsletter Module - Blind SQLi 28 WEB Saud Alenazi
2022-05-17   Showdoc 2.10.3 - Stored Cross-Site Scripting (XSS) 25 WEB Akshay Ravi
2022-05-17   T-Soft E-Commerce 4 - SQLi (Authenticated) 27 WEB Alperen Ergel
2022-05-17   T-Soft E-Commerce 4 - 'UrunAdi' Stored Cross-Site Scripting (XSS) 29 WEB Alperen Ergel
2022-05-17   Survey Sparrow Enterprise Survey Software 2022 - Stored Cross-Site Scripting (XSS) 26 WEB Pankaj Kumar Thakur
2022-05-12   TLR-2005KSH - Arbitrary File Delete 24 WEB Ahmed Alroky
2022-05-12   Royal Event Management System 1.0 - 'todate' SQL Injection (Authenticated) 28 WEB Eren Gozaydin
2022-05-12   College Management System 1.0 - 'course_code' SQL Injection (Authenticated) 26 WEB Eren Gozaydin
2022-05-11   TLR-2005KSH - Arbitrary File Upload 28 WEB Ahmed Alroky
2022-05-11   WordPress Plugin stafflist 3.1.2 - SQLi (Authenticated) 26 WEB Hassan Khan Yusufzai
2022-05-11   Joomla Plugin SexyPolling 2.1.7 - SQLi 28 WEB Wolfgang Hotwagner
2022-05-11   WordPress Plugin Blue Admin 21.06.01 - Cross-Site Request Forgery (CSRF) 32 WEB Abisheik M
2022-05-11   MyBB 1.8.29 - MyBB 1.8.29 - Remote Code Execution (RCE) (Authenticated) 28 WEB Altelus
2022-05-11   Beehive Forum - Account Takeover 23 WEB Pablo Santiago
2022-05-11   PHProjekt PhpSimplyGest v1.3. - Stored Cross-Site Scripting (XSS) 22 WEB Andrea Intilangelo
2022-05-11   Navigate CMS 2.9.4 - Server-Side Request Forgery (SSRF) (Authenticated) 25 WEB cheshireca7
2022-05-11   Explore CMS 1.0 - SQL Injection 25 WEB Sajibe Kanti
2022-05-11   Anuko Time Tracker - SQLi (Authenticated) 26 WEB Altelus
2022-05-11   e107 CMS v3.2.1 - Multiple Vulnerabilities 24 WEB Hubert Wojciechowski
2022-05-11   Cyclos 4.14.7 - 'groupId' DOM Based Cross-Site Scripting (XSS) 23 WEB Tin Pham
2022-05-11   Cyclos 4.14.7 - DOM Based Cross-Site Scripting (XSS) 25 WEB Tin Pham
2022-05-11   CSZ CMS 1.3.0 - 'Multiple' Blind SQLi 28 WEB Dogukan Dincer
2022-05-11   Bitrix24 - Remote Code Execution (RCE) (Authenticated) 27 WEB heinjame
2022-05-11   Magento eCommerce CE v2.3.5-p2 - Blind SQLi 24 WEB Aydin Naserifard
2022-05-11   WordPress Plugin Advanced Uploader 4.2 - Arbitrary File Upload (Authenticated) 31 WEB Roel van Beurden
2022-05-11   WebTareas 2.4 - Blind SQLi (Authenticated) 18 WEB Behrad Taher
2022-05-11   Microfinance Management System 1.0 - 'customer_number' SQLi 38 WEB Eren Gozaydin
2022-05-11   ImpressCMS v1.4.4 - Unrestricted File Upload 31 WEB Ünsal Furkan Harani
2022-04-26   GitLab 14.9 - Stored Cross-Site Scripting (XSS) 28 WEB Greenwolf
2022-04-26   Gitlab 14.9 - Authentication Bypass 24 WEB Greenwolf
2022-04-19   Fuel CMS 1.5.0 - Cross-Site Request Forgery (CSRF) 23 WEB Ali J
2022-04-19   WordPress Plugin Elementor 3.6.2 - Remote Code Execution (RCE) (Authenticated) 31 WEB AkuCyberSec
2022-04-19   PKP Open Journals System 3.3 - Cross-Site Scripting (XSS) 27 WEB Hemant Kashyap
2022-04-19   REDCap 11.3.9 - Stored Cross Site Scripting 22 WEB Kendrick Lam
2022-04-19   WordPress Plugin Popup Maker 1.16.5 - Stored Cross-Site Scripting (Authenticated) 29 WEB Roel van Beurden
2022-04-19   WordPress Plugin Videos sync PDF 1.7.4 - Stored Cross Site Scripting (XSS) 26 WEB UnD3sc0n0c1d0
2022-04-19   Scriptcase 9.7 - Remote Code Execution (RCE) 26 WEB luckyt0mat0
2022-04-19   Easy Appointments 1.4.2 - Information Disclosure 25 WEB Alexandre ZANNI
2022-04-19   WordPress Plugin Motopress Hotel Booking Lite 4.2.4 - SQL Injection 20 WEB Mohsen Dehghani
2022-04-11   Razer Sila - Command Injection 21 WEB Kevin Randall
2022-04-11   Razer Sila - Local File Inclusion (LFI) 20 WEB Kevin Randall
2022-04-11   Telesquare TLR-2855KS6 - Arbitrary File Deletion 26 WEB Momen Eldawakhly
2022-04-11   Telesquare TLR-2855KS6 - Arbitrary File Creation 29 WEB Momen Eldawakhly
2022-04-11   SAM SUNNY TRIPOWER 5.0 - Insecure Direct Object Reference (IDOR) 26 WEB Momen Eldawakhly
2022-04-07   ICEHRM 31.0.0.0S - Cross-site Request Forgery (CSRF) to Account Deletion 26 WEB Devansh Bordia
2022-04-07   qdPM 9.2 - Cross-site Request Forgery (CSRF) 24 WEB Chetanya Sharma
2022-04-07   minewebcms 1.15.2 - Cross-site Scripting (XSS) 24 WEB Chetanya Sharma
2022-04-07   KLiK Social Media Website 1.0 - 'Multiple' SQLi 26 WEB corpse
2022-04-07   Zenario CMS 9.0.54156 - Remote Code Execution (RCE) (Authenticated) 32 WEB minhnq22
2022-03-30   WordPress Plugin Easy Cookie Policy 1.6.2 - Broken Access Control to Stored XSS 23 WEB 0xB9
2022-03-30   CSZ CMS 1.2.9 - 'Multiple' Blind SQLi(Authenticated) 28 WEB Rahad Chowdhury
2022-03-30   WordPress Plugin admin-word-count-column 2.2 - Local File Read 25 WEB Hassan Khan Yusufzai
2022-03-30   WordPress Plugin video-synchro-pdf 1.7.4 - Local File Inclusion 24 WEB Hassan Khan Yusufzai
2022-03-30   WordPress Plugin cab-fare-calculator 1.0.3 - Local File Inclusion 21 WEB Hassan Khan Yusufzai
2022-03-30   WordPress Plugin Curtain 1.0.2 - Cross-site Request Forgery (CSRF) 24 WEB Hassan Khan Yusufzai