Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2024-08-24   Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass 15 WEB LiquidWorm
2024-08-24   Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config 10 WEB LiquidWorm
2024-08-24   Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass 12 WEB LiquidWorm
2024-08-23   Helpdeskz v2.0.2 - Stored XSS 10 WEB Md. Sadikul Islam
2024-08-23   Calibre-web 0.6.21 - Stored XSS 12 WEB Catalin Iovita_ Alexandru Postolache
2024-08-04   Devika v1 - Path Traversal via 'snapshot_path' 16 WEB Alperen Ergel
2024-08-04   Ivanti vADC 9.9 - Authentication Bypass 15 WEB ohnoisploited
2024-07-01   Xhibiter NFT Marketplace 1.10.2 - SQL Injection 15 WEB Sohel Yousef
2024-07-01   Azon Dominator Affiliate Marketing Script - SQL Injection 13 WEB Buğra Enis Dönmez
2024-07-01   Microweber 2.0.15 - Stored XSS 13 WEB tmrswrr
2024-07-01   Customer Support System 1.0 - Stored XSS 11 WEB Geraldo Alcantara
2024-06-26   Automad 2.0.0-alpha.4 - Stored Cross-Site Scripting (XSS) 10 WEB Jerry Thomas
2024-06-26   SolarWinds Platform 2024.1 SR1 - Race Condition 9 WEB Elhussain Fathy
2024-06-26   Flatboard 3.2 - Stored Cross-Site Scripting (XSS) (Authenticated) 12 WEB tmrswrr
2024-06-26   Poultry Farm Management System v1.0 - Remote Code Execution (RCE) 18 WEB Jerry Thomas
2024-06-14   Boelter Blue System Management 1.3 - SQL Injection 11 WEB CBKB
2024-06-14   WP-UserOnline 2.88.0 - Stored Cross Site Scripting (XSS) (Authenticated) 10 WEB Onur Göğebakan
2024-06-14   PHP < 8.3.8 - Remote Code Execution (Unauthenticated) (Windows) 14 WEB Yesith Alvarez
2024-06-14   AEGON LIFE v1.0 Life Insurance Management System - SQL injection vulnerability. 12 WEB Aslam Anwar Mahimkar
2024-06-14   XMB 1.9.12.06 - Stored XSS 11 WEB Chokri Hammedi
2024-06-14   Carbon Forum 5.9.0 - Stored XSS 8 WEB Chokri Hammedi
2024-06-14   AEGON LIFE v1.0 Life Insurance Management System - Stored cross-site scripting (XSS) 12 WEB Aslam Anwar Mahimkar
2024-06-03   appRain CMF 4.0.5 - Remote Code Execution (RCE) (Authenticated) 28 WEB Ahmet Ümit BAYRAM
2024-06-03   CMSimple 5.15 - Remote Code Execution (RCE) (Authenticated) 16 WEB Ahmet Ümit BAYRAM
2024-06-03   WBCE CMS v1.6.2 - Remote Code Execution (RCE) 12 WEB Ahmet Ümit BAYRAM
2024-06-03   Monstra CMS 3.0.4 - Remote Code Execution (RCE) 13 WEB Ahmet Ümit BAYRAM
2024-06-03   Dotclear 2.29 - Remote Code Execution (RCE) 15 WEB Ahmet Ümit BAYRAM
2024-06-03   Serendipity 2.5.0 - Remote Code Execution (RCE) 19 WEB Ahmet Ümit BAYRAM
2024-06-03   Sitefinity 15.0 - Cross-Site Scripting (XSS) 9 WEB Aldi Saputra Wahyudi
2024-06-01   FreePBX 16 - Remote Code Execution (RCE) (Authenticated) 8 WEB Cold z3ro
2024-06-01   Akaunting 3.1.8 - Server-Side Template Injection (SSTI) 17 WEB tmrswrr
2024-05-31   Check Point Security Gateway - Information Disclosure (Unauthenticated) 11 WEB Yesith Alvarez
2024-05-31   Aquatronica Control System 5.1.6 - Information Disclosure 12 WEB LiquidWorm
2024-05-31   changedetection < 0.45.20 - Remote Code Execution (RCE) 18 WEB Zach Crosman (zcrosman)
2024-05-31   ElkArte Forum 1.1.9 - Remote Code Execution (RCE) (Authenticated) 13 WEB tmrswrr
2024-05-31   iMLog < 1.307 - Persistent Cross Site Scripting (XSS) 8 WEB Gabriel Felipe
2024-05-31   BWL Advanced FAQ Manager 2.0.3 - Authenticated SQL Injection 15 WEB Ivan Spiridonov
2024-05-19   htmlLawed 1.2.5 - Remote Code Execution (RCE) 11 WEB Miguel Redondo
2024-05-19   PopojiCMS 2.0.1 - Remote Command Execution (RCE) 13 WEB Ahmet Ümit BAYRAM
2024-05-19   Backdrop CMS 1.27.1 - Authenticated Remote Command Execution (RCE) 10 WEB Ahmet Ümit BAYRAM
2024-05-19   Apache OFBiz 18.12.12 - Directory Traversal 12 WEB Abdualhadi khalifa
2024-05-19   Wordpress Theme XStore 9.3.8 - SQLi 14 WEB Abdualhadi khalifa
2024-05-19   Rocket LMS 1.9 - Persistent Cross Site Scripting (XSS) 12 WEB Sergio Medeiros
2024-05-13   Prison Management System - SQL Injection Authentication Bypass 10 WEB Sanjay Singh
2024-05-13   PyroCMS v3.0.1 - Stored XSS 10 WEB tmrswrr
2024-05-13   CE Phoenix Version 1.0.8.20 - Stored XSS 12 WEB tmrswrr
2024-05-13   Leafpub 1.1.9 - Stored Cross-Site Scripting (XSS) 9 WEB Ahmet Ümit BAYRAM
2024-05-13   Chyrp 2.5.2 - Stored Cross-Site Scripting (XSS) 11 WEB Ahmet Ümit BAYRAM
2024-05-13   Apache mod_proxy_cluster 1.2.6 - Stored XSS 15 WEB Mohamed Mounir Boudjema
2024-05-08   iboss Secure Web Gateway - Stored Cross-Site Scripting (XSS) 11 WEB modrnProph3t
2024-05-08   Clinic Queuing System 1.0 - RCE 12 WEB Juan Marco Sanchez
2024-05-04   Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link - Device Config Disclosure 11 WEB LiquidWorm
2024-05-04   Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link - Authentication Bypass 8 WEB LiquidWorm
2024-05-04   Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 - Device Config Disclosure 7 WEB LiquidWorm
2024-05-04   Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 - Authentication Bypass 8 WEB LiquidWorm
2024-05-04   Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 - Device Config Disclosure 9 WEB LiquidWorm
2024-05-04   Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 - Authentication Bypass 11 WEB LiquidWorm
2024-04-21   Flowise 1.6.5 - Authentication Bypass 10 WEB Maerifat Majeed
2024-04-21   Laravel Framework 11 - Credential Leakage 8 WEB Huseein Amer
2024-04-21   SofaWiki 3.9.2 - Remote Command Execution (RCE) (Authenticated) 9 WEB Ahmet Ümit BAYRAM
2024-04-21   Wordpress Plugin Background Image Cropper v1.2 - Remote Code Execution 12 WEB Milad karimi
2024-04-21   FlatPress v1.3 - Remote Command Execution 17 WEB Ahmet Ümit BAYRAM
2024-04-15   OpenClinic GA 5.247.01 - Path Traversal (Authenticated) 12 WEB VB
2024-04-15   OpenClinic GA 5.247.01 - Information Disclosure 11 WEB VB
2024-04-15   Jenkins 2.441 - Local File Inclusion 15 WEB Matisse Beckandt
2024-04-15   djangorestframework-simplejwt 5.3.1 - Information Disclosure 9 WEB Dhrumil Mistry
2024-04-13   BMC Compuware iStrobe Web - 20.13 - Pre-auth RCE 12 WEB trancap
2024-04-13   Stock Management System v1.0 - Unauthenticated SQL Injection 11 WEB blu3ming
2024-04-13   Online Fire Reporting System OFRS - SQL Injection Authentication Bypass 12 WEB Diyar Saadi
2024-04-13   Savsoft Quiz v6.0 Enterprise - Stored XSS 8 WEB Eren Sen
2024-04-12   Wordpress Plugin WP Video Playlist 1.1.1 - Stored Cross-Site Scripting (XSS) 11 WEB Erdemstar
2024-04-12   WBCE CMS Version 1.6.1 - Remote Command Execution (Authenticated) 12 WEB tmrswrr
2024-04-12   WBCE 1.6.0 - Unauthenticated SQL injection 12 WEB young pope
2024-04-12   Moodle 3.10.1 - Authenticated Blind Time-Based SQL Injection - _sort_ parameter 17 WEB Julio Ángel Ferrari
2024-04-12   PopojiCMS Version 2.0.1 - Remote Command Execution 18 WEB tmrswrr
2024-04-12   Wordpress Plugin Playlist for Youtube 1.32 - Stored Cross-Site Scripting (XSS) 10 WEB Erdemstar
2024-04-12   HTMLy Version v2.9.6 - Stored XSS 12 WEB tmrswrr
2024-04-12   Ray OS v2.6.3 - Command Injection RCE(Unauthorized) 17 WEB Fire_Wolf
2024-04-12   GUnet OpenEclass E-learning platform 3.15 - 'certbadge.php' Unrestricted File Upload 13 WEB George Tsimpidas
2024-04-08   Open Source Medicine Ordering System v1.0 - SQLi 9 WEB Onur Karasalihoğlu
2024-04-08   Daily Expense Manager 1.0 - 'term' SQLi 11 WEB Stefan Hesselman
2024-04-08   Best Student Result Management System v1.0 - Multiple SQLi 12 WEB nu11secur1ty
2024-04-08   Human Resource Management System v1.0 - Multiple SQLi 12 WEB nu11secur1ty
2024-04-08   Wordpress Theme Travelscape v1.0.3 - Arbitrary File Upload 19 WEB Milad karimi
2024-04-03   Wordpress Plugin Alemha Watermarker 1.3.1 - Stored Cross-Site Scripting (XSS) 14 WEB Erdemstar
2024-04-03   Computer Laboratory Management System v1.0 - Multiple-SQLi 13 WEB nu11secur1ty
2024-04-02   Axigen < 10.5.7 - Persistent Cross-Site Scripting 12 WEB Vincent McRae_ Mesut Cetin
2024-04-02   Gibbon LMS v26.0.00 - SSTI vulnerability 11 WEB Ali Maharramli_Fikrat Guliev_Islam Rzayev
2024-04-02   Casdoor < v1.331.0 - '/api/set-password' CSRF 10 WEB Van Lam Nguyen
2024-04-02   Wordpress Plugin - Membership For WooCommerce < v2.1.7 - Arbitrary File Upload to Shell (Unauthentic 19 WEB Milad karimi
2024-04-02   Smart School 6.4.1 - SQL Injection 10 WEB CraCkEr
2024-04-02   CE Phoenix v1.0.8.20 - Remote Code Execution 12 WEB tmrswrr
2024-04-02   Elementor Website Builder < 3.12.2 - Admin+ SQLi 10 WEB E1 Coders
2024-04-02   Blood Bank v1.0 - Stored Cross Site Scripting (XSS) 8 WEB Ersin Erenler
2024-04-02   Daily Habit Tracker 1.0 - Broken Access Control 10 WEB Yevhenii Butenko
2024-04-02   Daily Habit Tracker 1.0 - SQL Injection 6 WEB Yevhenii Butenko
2024-04-02   Daily Habit Tracker 1.0 - Stored Cross-Site Scripting (XSS) 10 WEB Yevhenii Butenko
2024-04-02   Employee Management System 1.0 - _txtusername_ and _txtpassword_ SQL Injection (Admin Login) 8 WEB Yevhenii Butenko
2024-04-02   Employee Management System 1.0 - _txtfullname_ and _txtphone_ SQL Injection 11 WEB Yevhenii Butenko
2024-04-02   LeptonCMS 7.0.0 - Remote Code Execution (RCE) (Authenticated) 11 WEB tmrswrr
2024-04-02   FoF Pretty Mail 1.1.2 - Server Side Template Injection (SSTI) 11 WEB Chokri Hammedi
2024-04-02   FoF Pretty Mail 1.1.2 - Local File Inclusion (LFI) 12 WEB Chokri Hammedi
2024-04-02   Hospital Management System v1.0 - Stored Cross Site Scripting (XSS) 13 WEB Sandeep Vishwakarma
2024-04-02   E-INSUARANCE v1.0 - Stored Cross Site Scripting (XSS) 12 WEB Sandeep Vishwakarma
2024-04-02   Petrol Pump Management Software v1.0 - Remote Code Execution (RCE) 15 WEB Sandeep Vishwakarma
2024-04-02   OpenCart Core 4.0.2.3 - 'search' SQLi 14 WEB Saud Alenazi
2024-04-02   Online Hotel Booking In PHP 1.0 - Blind SQL Injection (Unauthenticated) 18 WEB Gian Paris C. Agsam
2024-04-02   Simple Backup Plugin Python Exploit 2.7.10 - Path Traversal 13 WEB Ven3xy
2024-03-28   liveSite Version 2019.1 - Remote Code Execution 15 WEB tmrswrr
2024-03-28   Broken Access Control - on NodeBB v3.6.7 34 WEB Vibhor Sharma
2024-03-28   Purei CMS 1.0 - SQL Injection 14 WEB Number 7
2024-03-28   Workout Journal App 1.0 - Stored XSS 13 WEB MURAT CAGRI ALIS
2024-03-25   LimeSurvey Community 5.3.32 - Stored XSS 13 WEB Subhankar Singh
2024-03-25   Nagios XI Version 2024R1.01 - SQL Injection 12 WEB Jarod Jaslow (MAWK)
2024-03-25   Wallos < 1.11.2 - File Upload RCE 15 WEB sml
2024-03-25   Tourism Management System v2.0 - Arbitrary File Upload 13 WEB SoSPiro
2024-03-25   MobileShop master v1.0 - SQL Injection Vuln. 12 WEB HAZIM ARBAŞ
2024-03-25   Insurance Management System PHP and MySQL 1.0 - Multiple Stored XSS 10 WEB Hakkı TOKLU
2024-03-25   SPA-CART CMS - Stored XSS 10 WEB Eren Sen
2024-03-25   Craft CMS 4.4.14 - Unauthenticated Remote Code Execution 13 WEB Olivier Lasne
2024-03-20   CSZCMS v1.3.0 - SQL Injection (Authenticated) 17 WEB Abdulaziz Almetairy
2024-03-20   Teacher Subject Allocation Management System 1.0 - 'searchdata' SQLi 13 WEB Ersin Erenler
2024-03-20   Simple Task List 1.0 - 'status' SQLi 10 WEB Ersin Erenler
2024-03-20   Blood Bank 1.0 - 'bid' SQLi 9 WEB Ersin Erenler
2024-03-20   Employee Management System 1.0 - 'admin_id' SQLi 10 WEB Shubham Pandey