Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2024-06-14 Exploit Code Downloads   XMB 1.9.12.06 - Stored XSS 8 WEB Chokri Hammedi
2024-06-14 Exploit Code Downloads   Carbon Forum 5.9.0 - Stored XSS 6 WEB Chokri Hammedi
2024-06-14 Exploit Code Downloads   AEGON LIFE v1.0 Life Insurance Management System - Stored cross-site scripting (XSS) 7 WEB Aslam Anwar Mahimkar
2024-06-03 Exploit Code Downloads   appRain CMF 4.0.5 - Remote Code Execution (RCE) (Authenticated) 26 WEB Ahmet Ümit BAYRAM
2024-06-03 Exploit Code Downloads   CMSimple 5.15 - Remote Code Execution (RCE) (Authenticated) 14 WEB Ahmet Ümit BAYRAM
2024-06-03 Exploit Code Downloads   WBCE CMS v1.6.2 - Remote Code Execution (RCE) 9 WEB Ahmet Ümit BAYRAM
2024-06-03 Exploit Code Downloads   Monstra CMS 3.0.4 - Remote Code Execution (RCE) 9 WEB Ahmet Ümit BAYRAM
2024-06-03 Exploit Code Downloads   Dotclear 2.29 - Remote Code Execution (RCE) 10 WEB Ahmet Ümit BAYRAM
2024-06-03 Exploit Code Downloads   Serendipity 2.5.0 - Remote Code Execution (RCE) 16 WEB Ahmet Ümit BAYRAM
2024-06-03 Exploit Code Downloads   Sitefinity 15.0 - Cross-Site Scripting (XSS) 6 WEB Aldi Saputra Wahyudi
2024-06-01 Exploit Code Downloads   FreePBX 16 - Remote Code Execution (RCE) (Authenticated) 6 WEB Cold z3ro
2024-06-01 Exploit Code Downloads   Akaunting 3.1.8 - Server-Side Template Injection (SSTI) 13 WEB tmrswrr
2024-05-31 Exploit Code Downloads   Check Point Security Gateway - Information Disclosure (Unauthenticated) 7 WEB Yesith Alvarez
2024-05-31 Exploit Code Downloads   Aquatronica Control System 5.1.6 - Information Disclosure 7 WEB LiquidWorm
2024-05-31 Exploit Code Downloads   changedetection < 0.45.20 - Remote Code Execution (RCE) 15 WEB Zach Crosman (zcrosman)
2024-05-31 Exploit Code Downloads   ElkArte Forum 1.1.9 - Remote Code Execution (RCE) (Authenticated) 8 WEB tmrswrr
2024-05-31 Exploit Code Downloads   iMLog < 1.307 - Persistent Cross Site Scripting (XSS) 6 WEB Gabriel Felipe
2024-05-31 Exploit Code Downloads   BWL Advanced FAQ Manager 2.0.3 - Authenticated SQL Injection 7 WEB Ivan Spiridonov
2024-05-19 Exploit Code Downloads   htmlLawed 1.2.5 - Remote Code Execution (RCE) 6 WEB Miguel Redondo
2024-05-19 Exploit Code Downloads   PopojiCMS 2.0.1 - Remote Command Execution (RCE) 9 WEB Ahmet Ümit BAYRAM
2024-05-19 Exploit Code Downloads   Backdrop CMS 1.27.1 - Authenticated Remote Command Execution (RCE) 7 WEB Ahmet Ümit BAYRAM
2024-05-19 Exploit Code Downloads   Apache OFBiz 18.12.12 - Directory Traversal 8 WEB Abdualhadi khalifa
2024-05-19 Exploit Code Downloads   Wordpress Theme XStore 9.3.8 - SQLi 10 WEB Abdualhadi khalifa
2024-05-19 Exploit Code Downloads   Rocket LMS 1.9 - Persistent Cross Site Scripting (XSS) 8 WEB Sergio Medeiros
2024-05-13 Exploit Code Downloads   Prison Management System - SQL Injection Authentication Bypass 7 WEB Sanjay Singh
2024-05-13 Exploit Code Downloads   PyroCMS v3.0.1 - Stored XSS 8 WEB tmrswrr
2024-05-13 Exploit Code Downloads   CE Phoenix Version 1.0.8.20 - Stored XSS 10 WEB tmrswrr
2024-05-13 Exploit Code Downloads   Leafpub 1.1.9 - Stored Cross-Site Scripting (XSS) 7 WEB Ahmet Ümit BAYRAM
2024-05-13 Exploit Code Downloads   Chyrp 2.5.2 - Stored Cross-Site Scripting (XSS) 8 WEB Ahmet Ümit BAYRAM
2024-05-13 Exploit Code Downloads   Apache mod_proxy_cluster 1.2.6 - Stored XSS 11 WEB Mohamed Mounir Boudjema
2024-05-08 Exploit Code Downloads   iboss Secure Web Gateway - Stored Cross-Site Scripting (XSS) 8 WEB modrnProph3t
2024-05-08 Exploit Code Downloads   Clinic Queuing System 1.0 - RCE 7 WEB Juan Marco Sanchez
2024-05-04 Exploit Code Downloads   Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link - Device Config Disclosure 7 WEB LiquidWorm
2024-05-04 Exploit Code Downloads   Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link - Authentication Bypass 6 WEB LiquidWorm
2024-05-04 Exploit Code Downloads   Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 - Device Config Disclosure 5 WEB LiquidWorm
2024-05-04 Exploit Code Downloads   Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 - Authentication Bypass 7 WEB LiquidWorm
2024-05-04 Exploit Code Downloads   Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 - Device Config Disclosure 6 WEB LiquidWorm
2024-05-04 Exploit Code Downloads   Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 - Authentication Bypass 7 WEB LiquidWorm
2024-04-21 Exploit Code Downloads   Flowise 1.6.5 - Authentication Bypass 6 WEB Maerifat Majeed
2024-04-21 Exploit Code Downloads   Laravel Framework 11 - Credential Leakage 6 WEB Huseein Amer
2024-04-21 Exploit Code Downloads   SofaWiki 3.9.2 - Remote Command Execution (RCE) (Authenticated) 6 WEB Ahmet Ümit BAYRAM
2024-04-21 Exploit Code Downloads   Wordpress Plugin Background Image Cropper v1.2 - Remote Code Execution 8 WEB Milad karimi
2024-04-21 Exploit Code Downloads   FlatPress v1.3 - Remote Command Execution 14 WEB Ahmet Ümit BAYRAM
2024-04-15 Exploit Code Downloads   OpenClinic GA 5.247.01 - Path Traversal (Authenticated) 9 WEB VB
2024-04-15 Exploit Code Downloads   OpenClinic GA 5.247.01 - Information Disclosure 8 WEB VB
2024-04-15 Exploit Code Downloads   Jenkins 2.441 - Local File Inclusion 11 WEB Matisse Beckandt
2024-04-15 Exploit Code Downloads   djangorestframework-simplejwt 5.3.1 - Information Disclosure 7 WEB Dhrumil Mistry
2024-04-13 Exploit Code Downloads   BMC Compuware iStrobe Web - 20.13 - Pre-auth RCE 9 WEB trancap
2024-04-13 Exploit Code Downloads   Stock Management System v1.0 - Unauthenticated SQL Injection 8 WEB blu3ming
2024-04-13 Exploit Code Downloads   Online Fire Reporting System OFRS - SQL Injection Authentication Bypass 10 WEB Diyar Saadi
2024-04-13 Exploit Code Downloads   Savsoft Quiz v6.0 Enterprise - Stored XSS 7 WEB Eren Sen
2024-04-12 Exploit Code Downloads   Wordpress Plugin WP Video Playlist 1.1.1 - Stored Cross-Site Scripting (XSS) 7 WEB Erdemstar
2024-04-12 Exploit Code Downloads   WBCE CMS Version 1.6.1 - Remote Command Execution (Authenticated) 8 WEB tmrswrr
2024-04-12 Exploit Code Downloads   WBCE 1.6.0 - Unauthenticated SQL injection 9 WEB young pope
2024-04-12 Exploit Code Downloads   Moodle 3.10.1 - Authenticated Blind Time-Based SQL Injection - _sort_ parameter 12 WEB Julio Ángel Ferrari
2024-04-12 Exploit Code Downloads   PopojiCMS Version 2.0.1 - Remote Command Execution 15 WEB tmrswrr
2024-04-12 Exploit Code Downloads   Wordpress Plugin Playlist for Youtube 1.32 - Stored Cross-Site Scripting (XSS) 7 WEB Erdemstar
2024-04-12 Exploit Code Downloads   HTMLy Version v2.9.6 - Stored XSS 10 WEB tmrswrr
2024-04-12 Exploit Code Downloads   Ray OS v2.6.3 - Command Injection RCE(Unauthorized) 13 WEB Fire_Wolf
2024-04-12 Exploit Code Downloads   GUnet OpenEclass E-learning platform 3.15 - 'certbadge.php' Unrestricted File Upload 9 WEB George Tsimpidas
2024-04-08 Exploit Code Downloads   Open Source Medicine Ordering System v1.0 - SQLi 7 WEB Onur Karasalihoğlu
2024-04-08 Exploit Code Downloads   Daily Expense Manager 1.0 - 'term' SQLi 8 WEB Stefan Hesselman
2024-04-08 Exploit Code Downloads   Best Student Result Management System v1.0 - Multiple SQLi 9 WEB nu11secur1ty
2024-04-08 Exploit Code Downloads   Human Resource Management System v1.0 - Multiple SQLi 9 WEB nu11secur1ty
2024-04-08 Exploit Code Downloads   Wordpress Theme Travelscape v1.0.3 - Arbitrary File Upload 14 WEB Milad karimi
2024-04-03 Exploit Code Downloads   Wordpress Plugin Alemha Watermarker 1.3.1 - Stored Cross-Site Scripting (XSS) 12 WEB Erdemstar
2024-04-03 Exploit Code Downloads   Computer Laboratory Management System v1.0 - Multiple-SQLi 11 WEB nu11secur1ty
2024-04-02 Exploit Code Downloads   Axigen < 10.5.7 - Persistent Cross-Site Scripting 9 WEB Vincent McRae_ Mesut Cetin
2024-04-02 Exploit Code Downloads   Gibbon LMS v26.0.00 - SSTI vulnerability 9 WEB Ali Maharramli_Fikrat Guliev_Islam Rzayev
2024-04-02 Exploit Code Downloads   Casdoor < v1.331.0 - '/api/set-password' CSRF 8 WEB Van Lam Nguyen
2024-04-02 Exploit Code Downloads   Wordpress Plugin - Membership For WooCommerce < v2.1.7 - Arbitrary File Upload to Shell (Unauthentic 13 WEB Milad karimi
2024-04-02 Exploit Code Downloads   Smart School 6.4.1 - SQL Injection 9 WEB CraCkEr
2024-04-02 Exploit Code Downloads   CE Phoenix v1.0.8.20 - Remote Code Execution 10 WEB tmrswrr
2024-04-02 Exploit Code Downloads   Elementor Website Builder < 3.12.2 - Admin+ SQLi 7 WEB E1 Coders
2024-04-02 Exploit Code Downloads   Blood Bank v1.0 - Stored Cross Site Scripting (XSS) 4 WEB Ersin Erenler
2024-04-02 Exploit Code Downloads   Daily Habit Tracker 1.0 - Broken Access Control 6 WEB Yevhenii Butenko
2024-04-02 Exploit Code Downloads   Daily Habit Tracker 1.0 - SQL Injection 5 WEB Yevhenii Butenko
2024-04-02 Exploit Code Downloads   Daily Habit Tracker 1.0 - Stored Cross-Site Scripting (XSS) 7 WEB Yevhenii Butenko
2024-04-02 Exploit Code Downloads   Employee Management System 1.0 - _txtusername_ and _txtpassword_ SQL Injection (Admin Login) 6 WEB Yevhenii Butenko
2024-04-02 Exploit Code Downloads   Employee Management System 1.0 - _txtfullname_ and _txtphone_ SQL Injection 8 WEB Yevhenii Butenko
2024-04-02 Exploit Code Downloads   LeptonCMS 7.0.0 - Remote Code Execution (RCE) (Authenticated) 8 WEB tmrswrr
2024-04-02 Exploit Code Downloads   FoF Pretty Mail 1.1.2 - Server Side Template Injection (SSTI) 7 WEB Chokri Hammedi
2024-04-02 Exploit Code Downloads   FoF Pretty Mail 1.1.2 - Local File Inclusion (LFI) 11 WEB Chokri Hammedi
2024-04-02 Exploit Code Downloads   Hospital Management System v1.0 - Stored Cross Site Scripting (XSS) 12 WEB Sandeep Vishwakarma
2024-04-02 Exploit Code Downloads   E-INSUARANCE v1.0 - Stored Cross Site Scripting (XSS) 9 WEB Sandeep Vishwakarma
2024-04-02 Exploit Code Downloads   Petrol Pump Management Software v1.0 - Remote Code Execution (RCE) 12 WEB Sandeep Vishwakarma
2024-04-02 Exploit Code Downloads   OpenCart Core 4.0.2.3 - 'search' SQLi 11 WEB Saud Alenazi
2024-04-02 Exploit Code Downloads   Online Hotel Booking In PHP 1.0 - Blind SQL Injection (Unauthenticated) 11 WEB Gian Paris C. Agsam
2024-04-02 Exploit Code Downloads   Simple Backup Plugin Python Exploit 2.7.10 - Path Traversal 10 WEB Ven3xy
2024-03-28 Exploit Code Downloads   liveSite Version 2019.1 - Remote Code Execution 10 WEB tmrswrr
2024-03-28 Exploit Code Downloads   Broken Access Control - on NodeBB v3.6.7 27 WEB Vibhor Sharma
2024-03-28 Exploit Code Downloads   Purei CMS 1.0 - SQL Injection 10 WEB Number 7
2024-03-28 Exploit Code Downloads   Workout Journal App 1.0 - Stored XSS 9 WEB MURAT CAGRI ALIS
2024-03-25 Exploit Code Downloads   LimeSurvey Community 5.3.32 - Stored XSS 11 WEB Subhankar Singh
2024-03-25 Exploit Code Downloads   Nagios XI Version 2024R1.01 - SQL Injection 8 WEB Jarod Jaslow (MAWK)
2024-03-25 Exploit Code Downloads   Wallos < 1.11.2 - File Upload RCE 9 WEB sml
2024-03-25 Exploit Code Downloads   Tourism Management System v2.0 - Arbitrary File Upload 10 WEB SoSPiro
2024-03-25 Exploit Code Downloads   MobileShop master v1.0 - SQL Injection Vuln. 9 WEB HAZIM ARBAŞ
2024-03-25 Exploit Code Downloads   Insurance Management System PHP and MySQL 1.0 - Multiple Stored XSS 8 WEB Hakkı TOKLU
2024-03-25 Exploit Code Downloads   SPA-CART CMS - Stored XSS 9 WEB Eren Sen
2024-03-25 Exploit Code Downloads   Craft CMS 4.4.14 - Unauthenticated Remote Code Execution 8 WEB Olivier Lasne
2024-03-20 Exploit Code Downloads   CSZCMS v1.3.0 - SQL Injection (Authenticated) 11 WEB Abdulaziz Almetairy
2024-03-20 Exploit Code Downloads   Teacher Subject Allocation Management System 1.0 - 'searchdata' SQLi 10 WEB Ersin Erenler
2024-03-20 Exploit Code Downloads   Simple Task List 1.0 - 'status' SQLi 8 WEB Ersin Erenler
2024-03-20 Exploit Code Downloads   Blood Bank 1.0 - 'bid' SQLi 8 WEB Ersin Erenler
2024-03-20 Exploit Code Downloads   Employee Management System 1.0 - 'admin_id' SQLi 7 WEB Shubham Pandey
2024-03-18 Exploit Code Downloads   Quick.CMS 6.7 - SQL Injection Login Bypass 7 WEB H4X.Forensics
2024-03-18 Exploit Code Downloads   xbtitFM 4.1.18 - Multiple Vulnerabilities 9 WEB h5kj23kj32io2kj
2024-03-18 Exploit Code Downloads   Backdrop CMS 1.23.0 - Stored XSS 11 WEB Sinem Şahin
2024-03-18 Exploit Code Downloads   Atlassian Confluence < 8.5.3 - Remote Code Execution 13 WEB MaanVader
2024-03-18 Exploit Code Downloads   Gibbon LMS < v26.0.00 - Authenticated RCE 10 WEB Ali Maharramli_Fikrat Guliev_Islam Rzayev
2024-03-18 Exploit Code Downloads   ZoneMinder Snapshots < 1.37.33 - Unauthenticated RCE 8 WEB Ravindu Wickramasinghe
2024-03-18 Exploit Code Downloads   TYPO3 11.5.24 - Path Traversal (Authenticated) 8 WEB Saeed reza Zamanian
2024-03-18 Exploit Code Downloads   WEBIGniter v28.7.23 - Stored XSS 10 WEB Mesut Cetin
2024-03-18 Exploit Code Downloads   WordPress File Upload Plugin < 4.23.3 - Stored XSS 8 WEB Faiyaz Ahmad
2024-03-16 Exploit Code Downloads   UPS Network Management Card 4 - Path Traversal 9 WEB Víctor García
2024-03-16 Exploit Code Downloads   Nokia BMC Log Scanner - Remote Code Execution 14 WEB Carlos Andres Gonzalez_ Matthew Gregory
2024-03-16 Exploit Code Downloads   Karaf v4.4.3 Console - RCE 10 WEB Andrzej Olchawa_ Milenko Starcik
2024-03-16 Exploit Code Downloads   Winter CMS 1.2.3 - Server-Side Template Injection (SSTI) (Authenticated) 13 WEB tmrswrr
2024-03-12 Exploit Code Downloads   SnipeIT 6.2.1 - Stored Cross Site Scripting 9 WEB Shahzaib Ali Khan
2024-03-12 Exploit Code Downloads   Cisco Firepower Management Center < 6.6.7.1 - Authenticated RCE 12 WEB Abdualhadi khalifa
2024-03-12 Exploit Code Downloads   Client Details System 1.0 - SQL Injection 8 WEB Hamdi Sevben
2024-03-12 Exploit Code Downloads   OSGi v3.7.2 (and below) Console - RCE 9 WEB Andrzej Olchawa_ Milenko Starcik
2024-03-12 Exploit Code Downloads   OSGi v3.8-3.18 Console - RCE 7 WEB Andrzej Olchawa_ Milenko Starcik
2024-03-12 Exploit Code Downloads   Human Resource Management System 1.0 - 'employeeid' SQL Injection 9 WEB Srikar