Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2024-03-11 Exploit Code Downloads   WordPress Plugin Duplicator < 1.5.7.1 - Unauthenticated Sensitive Data Exposure to Account Takeover 9 WEB Dmitrii Ignatyev
2024-03-11 Exploit Code Downloads   Hitachi NAS (HNAS) System Management Unit (SMU) Backup & Restore < 14.8.7825.01 - IDOR 7 WEB Arslan Masood
2024-03-10 Exploit Code Downloads   Hide My WP < 6.2.9 - Unauthenticated SQLi 9 WEB Xenofon Vassilakopoulos
2024-03-10 Exploit Code Downloads   Akaunting < 3.1.3 - RCE 9 WEB u32i
2024-03-10 Exploit Code Downloads   Ladder v0.0.21 - Server-side request forgery (SSRF) 5 WEB @_chebuya
2024-03-10 Exploit Code Downloads   DataCube3 v1.0 - Unrestricted file upload 'RCE' 7 WEB Samy Younsi - NS Labs
2024-03-10 Exploit Code Downloads   Numbas < v7.3 - Remote Code Execution 7 WEB Matheus Alexandre
2024-03-10 Exploit Code Downloads   TP-Link TL-WR740N - Buffer Overflow 'DOS' 8 WEB Anish Feroz
2024-03-06 Exploit Code Downloads   GLiNet - Router Authentication Bypass 6 WEB Daniele Linguaglossa
2024-03-06 Exploit Code Downloads   elFinder Web file manager Version - 2.1.53 Remote Command Execution 6 WEB tmrswrr
2024-03-06 Exploit Code Downloads   CSZ CMS Version 1.3.0 - Authenticated Remote Command Execution 4 WEB tmrswrr
2024-03-06 Exploit Code Downloads   CVE-2023-50071 - Multiple SQL Injection 4 WEB Geraldo Alcantara
2024-03-06 Exploit Code Downloads   Lot Reservation Management System - Unauthenticated File Disclosure 7 WEB Elijah Mandila Syoyi
2024-03-06 Exploit Code Downloads   Lot Reservation Management System - Unauthenticated File Upload and Remote Code Execution 5 WEB Elijah Mandila Syoyi
2024-03-05 Exploit Code Downloads   kk Star Ratings < 5.4.6 - Rating Tampering via Race Condition 7 WEB Mohammad Reza Omrani
2024-03-05 Exploit Code Downloads   Neontext Wordpress Plugin - Stored XSS 5 WEB Eren Car
2024-03-05 Exploit Code Downloads   Solar-Log 200 PM+ 3.6.0 Build 99 - 15.10.2019 - Stored XSS 5 WEB Vincent McRae_ Mesut Cetin
2024-03-03 Exploit Code Downloads   Easywall 0.3.1 - Authenticated Remote Command Execution 7 WEB Melvin Mejia
2024-03-03 Exploit Code Downloads   Boss Mini 1.4.0 - local file inclusion 7 WEB nltt0
2024-03-03 Exploit Code Downloads   Magento ver. 2.4.6 - XSLT Server Side Injection 7 WEB tmrswrr
2024-02-28 Exploit Code Downloads   WP Fastest Cache 1.2.2 - Unauthenticated SQL Injection 8 WEB Meryem Taşkın
2024-02-28 Exploit Code Downloads   Blood Bank v1.0 - Multiple SQL Injection 6 WEB Ersin Erenler
2024-02-28 Exploit Code Downloads   WordPress Plugin Admin Bar & Dashboard Access Control Version: 1.2.8 - _Dashboard Redirect_ field St 8 WEB Rachit Arora
2024-02-28 Exploit Code Downloads   WP Rocket < 2.10.3 - Local File Inclusion (LFI) 7 WEB E1 Coders
2024-02-27 Exploit Code Downloads   Atlassian Confluence Data Center and Server - Authentication Bypass (Metasploit) 8 WEB Emir Polat
2024-02-27 Exploit Code Downloads   Wordpress Plugin Canto < 3.0.5 - Remote File Inclusion (RFI) and Remote Code Execution (RCE) 7 WEB Leopoldo Angulo (leoanggal1)
2024-02-27 Exploit Code Downloads   Automatic-Systems SOC FL9600 FastLine - The device contains hardcoded login and password for super a 6 WEB Marcin Kozlowski
2024-02-27 Exploit Code Downloads   Automatic-Systems SOC FL9600 FastLine - Directory Transversal 5 WEB Marcin Kozlowski
2024-02-27 Exploit Code Downloads   SuperStoreFinder - Multiple Vulnerabilities 6 WEB bRpsd
2024-02-27 Exploit Code Downloads   Moodle 4.3 - Insecure Direct Object Reference 6 WEB tmrswrr
2024-02-27 Exploit Code Downloads   Zoo Management System 1.0 - Unauthenticated RCE 6 WEB Çağatay Ceyhan
2024-02-27 Exploit Code Downloads   dawa-pharma 1.0-2022 - Multiple-SQLi 7 WEB nu11secur1ty
2024-02-26 Exploit Code Downloads   Online Shopping System Advanced - Sql Injection 8 WEB Furkan Gedik
2024-02-26 Exploit Code Downloads   taskhub 2.8.7 - SQL Injection 8 WEB CraCkEr
2024-02-26 Exploit Code Downloads   comments-like-dislike < 1.2.0 - Authenticated (Subscriber+) Plugin Setting Reset 6 WEB Diaa Hanna
2024-02-21 Exploit Code Downloads   WEBIGniter v28.7.23 - Stored Cross Site Scripting (XSS) 7 WEB Sagar Banwa
2024-02-19 Exploit Code Downloads   JFrog Artifactory < 7.25.4 - Blind SQL Injection 6 WEB ardr
2024-02-19 Exploit Code Downloads   Wondercms 4.3.2 - XSS to RCE 6 WEB Anas Zakir
2024-02-19 Exploit Code Downloads   SureMDM On-premise < 6.31 - CAPTCHA Bypass User Enumeration 8 WEB Jonas Benjamin Friedli
2024-02-19 Exploit Code Downloads   Employee Management System v1 - 'email' SQL Injection 7 WEB SoSPiro
2024-02-19 Exploit Code Downloads   phpFox < 4.8.13 - (redirect) PHP Object Injection Exploit 21 WEB Egidio Romano
2024-02-15 Exploit Code Downloads   Metabase 0.46.6 - Pre-Auth Remote Code Execution 10 WEB Musyoka Ian
2024-02-15 Exploit Code Downloads   SISQUALWFM 7.1.319.103 - Host Header Injection 7 WEB Omer Shaik
2024-02-13 Exploit Code Downloads   Lost and Found Information System v1.0 - ( IDOR ) leads to Account Take over 7 WEB Or4nG.M4N
2024-02-13 Exploit Code Downloads   ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure 18 WEB Metin Yunus Kandemir
2024-02-13 Exploit Code Downloads   Splunk 9.0.4 - Information Disclosure 27 WEB Parsa Rezaie Khiabanloo
2024-02-09 Exploit Code Downloads   Online Nurse Hiring System 1.0 - Time-Based SQL Injection 8 WEB yozgatalperen1
2024-02-09 Exploit Code Downloads   Rail Pass Management System 1.0 - Time-Based SQL Injection 10 WEB yozgatalperen1
2024-02-09 Exploit Code Downloads   Wordpress Seotheme - Remote Code Execution Unauthenticated 9 WEB Milad karimi
2024-02-09 Exploit Code Downloads   Wordpress Augmented-Reality - Remote Code Execution Unauthenticated 21 WEB Milad karimi
2024-02-09 Exploit Code Downloads   Advanced Page Visit Counter 1.0 - Admin+ Stored Cross-Site Scripting (XSS) (Authenticated) 5 WEB Furkan ÖZER
2024-02-05 Exploit Code Downloads   WhatsUp Gold 2022 (22.1.0 Build 39) - XSS 8 WEB Andreas Finstad
2024-02-05 Exploit Code Downloads   MISP 2.4.171 - Stored XSS 7 WEB Mücahit Çeri
2024-02-05 Exploit Code Downloads   Clinic's Patient Management System 1.0 - Unauthenticated RCE 7 WEB Oğulcan Hami Gül
2024-02-05 Exploit Code Downloads   Curfew e-Pass Management System 1.0 - FromDate SQL Injection 5 WEB Puja Dey
2024-02-05 Exploit Code Downloads   GYM MS - GYM Management System - Cross Site Scripting (Stored) 8 WEB yozgatalperen1
2024-02-02 Exploit Code Downloads   Juniper-SRX-Firewalls&EX-switches - (PreAuth-RCE) (PoC) 6 WEB whiteOwl
2024-02-02 Exploit Code Downloads   Electrolink FM/DAB/TV Transmitter - Pre-Auth MPFS Image Remote Code Execution 14 WEB LiquidWorm
2024-02-02 Exploit Code Downloads   Electrolink FM/DAB/TV Transmitter - Remote Authentication Removal 19 WEB LiquidWorm
2024-02-02 Exploit Code Downloads   Electrolink FM/DAB/TV Transmitter (Login Cookie) - Authentication Bypass 8 WEB LiquidWorm
2024-02-02 Exploit Code Downloads   Electrolink FM/DAB/TV Transmitter (controlloLogin.js) - Credentials Disclosure 8 WEB LiquidWorm
2024-02-02 Exploit Code Downloads   Electrolink FM/DAB/TV Transmitter (login.htm/mail.htm) - Credentials Disclosure 8 WEB LiquidWorm
2024-02-02 Exploit Code Downloads   TP-LINK TL-WR740N - Multiple HTML Injection 8 WEB Shujaat Amin (ZEROXINN)
2024-02-02 Exploit Code Downloads   TP-Link TL-WR740N - UnAuthenticated Directory Transversal 8 WEB Syed Affan Ahmed (ZEROXINN)
2024-01-31 Exploit Code Downloads   GoAhead Web Server 2.5 - 'goform/formTest' Multiple HTML Injection Vulnerabilities 8 WEB Syed Affan Ahmed (ZEROXINN)
2024-01-31 Exploit Code Downloads   Grocy <=4.0.2 - CSRF 6 WEB Chance Proctor
2024-01-31 Exploit Code Downloads   101 News 1.0 - Multiple-SQLi 8 WEB nu11secur1ty
2024-01-31 Exploit Code Downloads   Academy LMS 6.2 - SQL Injection 7 WEB CraCkEr
2024-01-29 Exploit Code Downloads   PHP Shopping Cart 4.2 - Multiple-SQLi 7 WEB nu11secur1ty
2024-01-29 Exploit Code Downloads   Fundraising Script 1.0 - SQLi 8 WEB nu11secur1ty
2024-01-29 Exploit Code Downloads   Bank Locker Management System - SQL Injection 7 WEB SoSPiro
2023-10-09 Exploit Code Downloads   Splunk 9.0.5 - admin account take over 23 WEB Redway Security
2023-10-09 Exploit Code Downloads   Shuttle-Booking-Software v1.0 - Multiple-SQLi 23 WEB nu11secur1ty
2023-10-09 Exploit Code Downloads   Limo Booking Software v1.0 - CORS 5 WEB nu11secur1ty
2023-10-09 Exploit Code Downloads   Webedition CMS v2.9.8.8 - Blind SSRF 5 WEB Mirabbas Ağalarov
2023-10-09 Exploit Code Downloads   BoidCMS v2.0.0 - authenticated file upload vulnerability 5 WEB 1337kid
2023-10-09 Exploit Code Downloads   Cacti 1.2.24 - Authenticated command injection when using SNMP options 7 WEB Antonio Francesco Sardella
2023-10-09 Exploit Code Downloads   Wordpress Sonaar Music Plugin 4.7 - Stored XSS 5 WEB Furkan Karaarslan
2023-10-09 Exploit Code Downloads   Coppermine Gallery 1.6.25 - RCE 5 WEB Mirabbas Ağalarov
2023-10-09 Exploit Code Downloads   Media Library Assistant Wordpress Plugin - RCE and LFI 5 WEB Florent MONTEL
2023-10-09 Exploit Code Downloads   WEBIGniter v28.7.23 File Upload - Remote Code Execution 6 WEB nu11secur1ty
2023-10-09 Exploit Code Downloads   Wordpress Plugin Masterstudy LMS - 3.0.17 - Unauthenticated Instructor Account Creation 5 WEB Revan Arifio
2023-10-09 Exploit Code Downloads   Minio 2022-07-29T19-40-48Z - Path traversal 8 WEB Jenson Zhao
2023-10-09 Exploit Code Downloads   Clcknshop 1.0.0 - SQL Injection 22 WEB CraCkEr
2023-10-09 Exploit Code Downloads   Online ID Generator 1.0 - Remote Code Execution (RCE) 10 WEB nu11secur1ty
2023-10-09 Exploit Code Downloads   GLPI GZIP(Py3) 9.4.5 - RCE 16 WEB Brian Peters
2023-09-08 Exploit Code Downloads   Drupal 10.1.2 - web-cache-poisoning-External-service-interaction 9 WEB nu11secur1ty
2023-09-08 Exploit Code Downloads   Axigen < 10.3.3.47_ 10.2.3.12 - Reflected XSS 19 WEB AmirZargham
2023-09-08 Exploit Code Downloads   soosyze 2.0.0 - File Upload 4 WEB nu11secur1ty
2023-09-08 Exploit Code Downloads   Wp2Fac - OS Command Injection 6 WEB Ahmet Ümit BAYRAM
2023-09-08 Exploit Code Downloads   Wordpress Plugin Elementor 3.5.5 - Iframe Injection 5 WEB Miguel Santareno
2023-09-08 Exploit Code Downloads   Jorani v1.0.3-(c)2014-2023 - XSS Reflected & Information Disclosure 5 WEB nu11secur1ty
2023-09-08 Exploit Code Downloads   SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection 4 WEB CraCkEr
2023-09-04 Exploit Code Downloads   SPA-Cart eCommerce CMS 1.9.0.3 - Reflected XSS 4 WEB CraCkEr
2023-09-04 Exploit Code Downloads   Bus Reservation System 1.1 - Multiple-SQLi 5 WEB nu11secur1ty
2023-09-04 Exploit Code Downloads   WP Statistics Plugin 13.1.5 current_page_id - Time based SQL injection (Unauthenticated) 6 WEB psychoSherlock
2023-09-04 Exploit Code Downloads   Member Login Script 3.3 - Client-side desync 6 WEB nu11secur1ty
2023-09-04 Exploit Code Downloads   DLINK DPH-400SE - Exposure of Sensitive Information 6 WEB tahaafarooq
2023-09-04 Exploit Code Downloads   FileMage Gateway 1.10.9 - Local File Inclusion 7 WEB Bryce Raindayzz Harty
2023-09-04 Exploit Code Downloads   AdminLTE PiHole 5.18 - Broken Access Control 6 WEB kv1to
2023-09-04 Exploit Code Downloads   CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin 'Gallery') 6 WEB Daniel González
2023-09-04 Exploit Code Downloads   CSZ CMS 1.3.0 - Stored Cross-Site Scripting ('Photo URL' and 'YouTube URL' ) 6 WEB Daniel González
2023-09-04 Exploit Code Downloads   Academy LMS 6.1 - Arbitrary File Upload 5 WEB CraCkEr
2023-09-04 Exploit Code Downloads   Credit Lite 1.5.4 - SQL Injection 6 WEB CraCkEr
2023-09-04 Exploit Code Downloads   Hyip Rio 2.1 - Arbitrary File Upload 5 WEB CraCkEr
2023-09-04 Exploit Code Downloads   Blood Donor Management System v1.0 - Stored XSS 7 WEB Ehlullah Albayrak
2023-08-24 Exploit Code Downloads   Uvdesk 1.1.4 - Stored XSS (Authenticated) 7 WEB Hubert Wojciechowski
2023-08-24 Exploit Code Downloads   User Registration & Login and User Management System v3.0 - SQL Injection (Unauthenticated) 8 WEB Ashutosh Singh Umath
2023-08-24 Exploit Code Downloads   User Registration & Login and User Management System v3.0 - Stored Cross-Site Scripting (XSS) 15 WEB Ashutosh Singh Umath
2023-08-21 Exploit Code Downloads   Taskhub CRM Tool 2.8.6 - SQL Injection 16 WEB Ahmet Ümit BAYRAM
2023-08-21 Exploit Code Downloads   OVOO Movie Portal CMS v3.3.3 - SQL Injection 9 WEB Ahmet Ümit BAYRAM
2023-08-21 Exploit Code Downloads   Global - Multi School Management System Express v1.0- SQL Injection 9 WEB Ahmet Ümit BAYRAM
2023-08-21 Exploit Code Downloads   Color Prediction Game v1.0 - SQL Injection 8 WEB Ahmet Ümit BAYRAM
2023-08-21 Exploit Code Downloads   Crypto Currency Tracker (CCT) 9.5 - Admin Account Creation (Unauthenticated) 7 WEB 0xBr
2023-08-21 Exploit Code Downloads   PHPJabbers Business Directory Script v3.2 - Multiple Vulnerabilities 7 WEB Kerimcan Ozturk
2023-08-21 Exploit Code Downloads   Dolibarr Version 17.0.1 - Stored XSS 7 WEB Furkan Karaarslan
2023-08-08 Exploit Code Downloads   Emagic Data Center Management Suite v6.0 - OS Command Injection 7 WEB thewhiteh4t
2023-08-08 Exploit Code Downloads   PHPJabbers Vacation Rental Script 4.0 - CSRF 5 WEB Hasan Ali YILDIR
2023-08-08 Exploit Code Downloads   Social-Commerce 3.1.6 - Reflected XSS 5 WEB CraCkEr
2023-08-08 Exploit Code Downloads   mooSocial 3.1.8 - Reflected XSS 5 WEB CraCkEr
2023-08-08 Exploit Code Downloads   Pyro CMS 3.9 - Server-Side Template Injection (SSTI) (Authenticated) 7 WEB Daniel Barros
2023-08-08 Exploit Code Downloads   Lucee 5.4.2.17 - Authenticated Reflected XSS 6 WEB Yehia Elghaly
2023-08-08 Exploit Code Downloads   Adlisting Classified Ads 2.14.0 - WebPage Content Information Disclosure 8 WEB CraCkEr
2023-08-04 Exploit Code Downloads   WordPress Plugin Forminator 1.24.6 - Unauthenticated Remote Command Execution 6 WEB Mehmet Kelepçe
2023-08-04 Exploit Code Downloads   WordPress adivaha Travel Plugin 2.3 - Reflected XSS 6 WEB CraCkEr