Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2021-05-03 Exploit Code Downloads   Voting System 1.0 - Time based SQLI (Unauthenticated SQL injection) 4 WEB Syed Sheeraz Ali
2021-05-03 Exploit Code Downloads   GetSimple CMS Custom JS 0.1 - Cross-Site Request Forgery 4 WEB boku
2021-04-30 Exploit Code Downloads   Moodle 3.6.1 - Persistent Cross-Site Scripting (XSS) 4 WEB Fariskhi Vidyan
2021-04-29 Exploit Code Downloads   NodeBB Plugin Emoji 3.2.1 - Arbitrary File Write 6 WEB 1F98D
2021-04-29 Exploit Code Downloads   FOGProject 1.5.9 - File Upload RCE (Authenticated) 6 WEB sml
2021-04-29 Exploit Code Downloads   Cacti 1.2.12 - 'filter' SQL Injection 5 WEB Leonardo Paiva
2021-04-28 Exploit Code Downloads   Kirby CMS 3.5.3.1 - 'file' Cross-Site Scripting (XSS) 6 WEB Sreenath Raghunathan
2021-04-27 Exploit Code Downloads   Montiorr 1.7.6m - Persistent Cross-Site Scripting 4 WEB Ahmad Shakla
2021-04-27 Exploit Code Downloads   Kimai 1.14 - CSV Injection 4 WEB Mohammed Aloraimi
2021-04-26 Exploit Code Downloads   SEO Panel 4.8.0 - 'order_col' Blind SQL Injection (2) 3 WEB nu11secur1ty
2021-04-26 Exploit Code Downloads   OpenPLC 3 - Remote Code Execution (Authenticated) 5 WEB Fellipe Oliveira
2021-04-26 Exploit Code Downloads   Hasura GraphQL 1.3.3 - Remote Code Execution 5 WEB Dolev Farhi
2021-04-23 Exploit Code Downloads   Sipwise C5 NGCP CSC - Click2Dial Cross-Site Request Forgery (CSRF) 4 WEB LiquidWorm
2021-04-23 Exploit Code Downloads   Sipwise C5 NGCP CSC - 'Multiple' Persistent Cross-Site Scripting (XSS) 5 WEB LiquidWorm
2021-04-23 Exploit Code Downloads   DzzOffice 2.02.1 - 'Multiple' Cross-Site Scripting (XSS) 6 WEB nu11secur1ty
2021-04-23 Exploit Code Downloads   GetSimple CMS My SMTP Contact Plugin 1.1.2 - Persistent Cross-Site Scripting 6 WEB boku
2021-04-23 Exploit Code Downloads   Moodle 3.10.3 - 'url' Persistent Cross Site Scripting 7 WEB UVision
2021-04-22 Exploit Code Downloads   RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting (XSS) 4 WEB Saud Ahmad
2021-04-22 Exploit Code Downloads   OTRS 6.0.1 - Remote Command Execution (2) 3 WEB Hex_26
2021-04-22 Exploit Code Downloads   CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS) 5 WEB bt0
2021-04-21 Exploit Code Downloads   Hasura GraphQL 1.3.3 - Service Side Request Forgery (SSRF) 4 WEB Dolev Farhi
2021-04-21 Exploit Code Downloads   Hasura GraphQL 1.3.3 - Local File Read 4 WEB Dolev Farhi
2021-04-21 Exploit Code Downloads   GravCMS 1.10.7 - Unauthenticated Arbitrary File Write (Metasploit) 4 WEB Mehmet Ince
2021-04-21 Exploit Code Downloads   Adtran Personal Phone Manager 10.8.1 - DNS Exfiltration 6 WEB 3ndG4me
2021-04-21 Exploit Code Downloads   Adtran Personal Phone Manager 10.8.1 - 'Multiple' Reflected Cross-Site Scripting (XSS) 5 WEB 3ndG4me
2021-04-21 Exploit Code Downloads   Adtran Personal Phone Manager 10.8.1 - 'emailAddress' Stored Cross-Site Scripting (XSS) 4 WEB 3ndG4me
2021-04-21 Exploit Code Downloads   OpenEMR 5.0.2.1 - Remote Code Execution 4 WEB Hato0
2021-04-21 Exploit Code Downloads   rconfig 3.9.6 - Arbitrary File Upload 4 WEB Vishwaraj Bhattrai
2021-04-21 Exploit Code Downloads   RemoteClinic 2 - 'Multiple' Cross-Site Scripting (XSS) 4 WEB nu11secur1ty
2021-04-21 Exploit Code Downloads   BlackCat CMS 1.3.6 - 'Multiple' Stored Cross-Site Scripting (XSS) 5 WEB Ömer Hasan Durmuş
2021-04-21 Exploit Code Downloads   WordPress Plugin RSS for Yandex Turbo 1.29 - Stored Cross-Site Scripting (XSS) 5 WEB Himamshu Dilip Kulkarni
2021-04-21 Exploit Code Downloads   Fast PHP Chat 1.3 - 'my_item_search' SQL Injection 4 WEB Fatih Coskun
2021-04-21 Exploit Code Downloads   Multilaser Router RE018 AC1200 - Cross-Site Request Forgery (Enable Remote Access) 4 WEB Rodolfo Mariano
2021-04-16 Exploit Code Downloads   GetSimple CMS My SMTP Contact Plugin 1.1.1 - Cross-Site Request Forgery 5 WEB boku
2021-04-15 Exploit Code Downloads   htmly 2.8.0 - 'description' Stored Cross-Site Scripting (XSS) 5 WEB nu11secur1ty
2021-04-15 Exploit Code Downloads   Tileserver-gl 3.0.0 - 'key' Reflected Cross-Site Scripting (XSS) 3 WEB Akash Chathoth
2021-04-15 Exploit Code Downloads   Horde Groupware Webmail 5.2.22 - Stored XSS 4 WEB nu11secur1ty
2021-04-14 Exploit Code Downloads   jQuery 1.0.3 - Cross-Site Scripting (XSS) 4 WEB Central InfoSec
2021-04-14 Exploit Code Downloads   jQuery 1.2 - Cross-Site Scripting (XSS) 5 WEB Central InfoSec
2021-04-14 Exploit Code Downloads   Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - RCE 5 WEB Jay Sharma
2021-04-14 Exploit Code Downloads   CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection (Authenticated) 6 WEB skysbsb
2021-04-14 Exploit Code Downloads   CITSmart ITSM 9.1.2.22 - LDAP Injection 5 WEB skysbsb
2021-04-14 Exploit Code Downloads   Digital Crime Report Management System 1.0 - SQL Injection (Authentication Bypass) 4 WEB GaluhID
2021-04-13 Exploit Code Downloads   ExpressVPN VPN Router 1.0 - Router Login Panel's Integer Overflow 5 WEB Jai Kumar Sharma
2021-04-13 Exploit Code Downloads   Blitar Tourism 1.0 - Authentication Bypass SQLi 7 WEB sigeri94
2021-04-13 Exploit Code Downloads   Simple Student Information System 1.0 - SQL Injection (Authentication Bypass) 4 WEB GaluhID
2021-04-09 Exploit Code Downloads   PrestaShop 1.7.6.7 - 'location' Blind Sql Injection 3 WEB Vanshal Gaur
2021-04-08 Exploit Code Downloads   Composr 10.0.36 - Remote Code Execution 5 WEB Orion Hridoy
2021-04-08 Exploit Code Downloads   DMA Radius Manager 4.4.0 - Cross-Site Request Forgery (CSRF) 5 WEB Issac Briones
2021-04-08 Exploit Code Downloads   CMSimple 5.2 - 'External' Stored XSS 4 WEB Quadron Research Lab
2021-04-07 Exploit Code Downloads   Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read 5 WEB Rhino Security Labs
2021-04-07 Exploit Code Downloads   Composr CMS 10.0.36 - Cross Site Scripting 5 WEB Orion Hridoy
2021-04-07 Exploit Code Downloads   Atlassian Jira Service Desk 4.9.1 - Unrestricted File Upload to XSS 4 WEB Captain_hook
2021-04-06 Exploit Code Downloads   Mini Mouse 9.3.0 - Local File inclusion 4 WEB gosh
2021-04-05 Exploit Code Downloads   Mini Mouse 9.2.0 - Path Traversal 3 WEB gosh
2021-04-05 Exploit Code Downloads   Mini Mouse 9.2.0 - Remote Code Execution 5 WEB gosh
2021-04-05 Exploit Code Downloads   OpenEMR 4.1.0 - 'u' SQL Injection 6 WEB Michael Ikua
2021-04-05 Exploit Code Downloads   Basic Shopping Cart 1.0 - Authentication Bypass 3 WEB Viren Saroha
2021-04-05 Exploit Code Downloads   Simple Food Website 1.0 - Authentication Bypass 5 WEB Viren Saroha
2021-04-02 Exploit Code Downloads   F5 BIG-IP 16.0.x - iControl REST Remote Code Execution (Unauthenticated) 6 WEB Al1ex
2021-04-02 Exploit Code Downloads   ZBL EPON ONU Broadband Router 1.0 - Remote Privilege Escalation 6 WEB LiquidWorm
2021-04-01 Exploit Code Downloads   phpPgAdmin 7.13.0 - COPY FROM PROGRAM Command Execution (Authenticated) 7 WEB Valerio Severini
2021-04-01 Exploit Code Downloads   ScadaBR 1.0 - Arbitrary File Upload (Authenticated) (2) 4 WEB Fellipe Oliveira
2021-04-01 Exploit Code Downloads   ScadaBR 1.0 - Arbitrary File Upload (Authenticated) (1) 4 WEB Fellipe Oliveira
2021-04-01 Exploit Code Downloads   Latrix 0.6.0 - 'txtaccesscode' SQL Injection 6 WEB cptsticky
2021-03-31 Exploit Code Downloads   CourseMS 2.1 - 'name' Stored XSS 6 WEB cptsticky
2021-03-31 Exploit Code Downloads   Zabbix 3.4.7 - Stored XSS 5 WEB Radmil Gazizov
2021-03-30 Exploit Code Downloads   Openlitespeed 1.7.9 - 'Notes' Stored Cross-Site Scripting 5 WEB cmOs
2021-03-30 Exploit Code Downloads   GetSimple CMS 3.3.16 - Persistent Cross-Site Scripting 4 WEB boku
2021-03-29 Exploit Code Downloads   SyncBreeze 10.1.16 - XML Parsing Stack-based Buffer Overflow 4 WEB Filipe Oliveira
2021-03-29 Exploit Code Downloads   Novel Boutique House-plus 3.5.1 - Arbitrary File Download 5 WEB tuyiqiang
2021-03-29 Exploit Code Downloads   Budget Management System 1.0 - 'Budget title' Stored XSS 5 WEB Jitendra Kumar Tripathi
2021-03-29 Exploit Code Downloads   Equipment Inventory System 1.0 - 'multiple' Stored XSS 5 WEB Jitendra Kumar Tripathi
2021-03-29 Exploit Code Downloads   Concrete5 8.5.4 - 'name' Stored XSS 5 WEB Quadron Research Lab
2021-03-29 Exploit Code Downloads   TP-Link Devices - 'setDefaultHostname' Stored Cross-site Scripting (Unauthenticated) 6 WEB Smriti Gaba
2021-03-29 Exploit Code Downloads   WordPress Plugin WP Super Cache 1.7.1 - Remote Code Execution (Authenticated) 6 WEB m0ze
2021-03-26 Exploit Code Downloads   Moodle 3.10.3 - 'label' Persistent Cross Site Scripting 4 WEB Vincent666
2021-03-26 Exploit Code Downloads   Regis Inventory And Monitoring System 1.0 - 'Item List' Persistent Cross-Site Scripting 4 WEB George Tsimpidas
2021-03-26 Exploit Code Downloads   'customhs_js_content' - 'customhs_js_content' Cross-Site Request Forgery 5 WEB Abhishek Joshi
2021-03-25 Exploit Code Downloads   Dolibarr ERP 11.0.4 - File Upload Restrictions Bypass (Authenticated RCE) 4 WEB Andrea Gonzalez
2021-03-25 Exploit Code Downloads   Genexis Platinum-4410 P4410-V2-1.31A - 'start_addr' Persistent Cross-Site Scripting 4 WEB Jithin KS
2021-03-25 Exploit Code Downloads   Linksys EA7500 2.0.8.194281 - Cross-Site Scripting 3 WEB MiningOmerta
2021-03-25 Exploit Code Downloads   Ovidentia 6 - 'id' SQL injection (Authenticated) 5 WEB Felipe Prates Donato
2021-03-23 Exploit Code Downloads   Codiad 2.8.4 - Remote Code Execution (Authenticated) 4 WEB WangYihang
2021-03-23 Exploit Code Downloads   Hotel And Lodge Management System 1.0 - 'Customer Details' Stored XSS 5 WEB Jitendra Kumar Tripathi
2021-03-23 Exploit Code Downloads   MyBB 1.8.25 - Poll Vote Count SQL Injection 3 WEB SivertPL
2021-03-22 Exploit Code Downloads   MyBB 1.8.25 - Chained Remote Command Execution 3 WEB SivertPL
2021-03-22 Exploit Code Downloads   WordPress Plugin Delightful Downloads Jquery File Tree 1.6.6 - Path Traversal 4 WEB Nicholas Ferreira
2021-03-19 Exploit Code Downloads   Online News Portal 1.0 - 'Multiple' Stored Cross-Site Scripting 3 WEB Richard Jones
2021-03-19 Exploit Code Downloads   Online News Portal 1.0 - 'name' SQL Injection 5 WEB Richard Jones
2021-03-19 Exploit Code Downloads   KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Config Download (Unauthenticated) 5 WEB LiquidWorm
2021-03-19 Exploit Code Downloads   KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Factory Reset (Unauthenticated) 5 WEB LiquidWorm
2021-03-19 Exploit Code Downloads   KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Remote Code Execution 5 WEB LiquidWorm
2021-03-19 Exploit Code Downloads   KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Authentication Bypass 4 WEB LiquidWorm
2021-03-19 Exploit Code Downloads   KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Command Injection (Authenticated) 5 WEB LiquidWorm
2021-03-19 Exploit Code Downloads   SOYAL Biometric Access Control System 5.0 - 'Change Admin Password' CSRF 3 WEB LiquidWorm
2021-03-19 Exploit Code Downloads   SOYAL Biometric Access Control System 5.0 - Master Code Disclosure 6 WEB LiquidWorm
2021-03-19 Exploit Code Downloads   CouchCMS 2.2.1 - Server-Side Request Forgery 5 WEB xxcdd
2021-03-19 Exploit Code Downloads   VestaCP 0.9.8 - 'v_sftp_licence' Command Injection 4 WEB numan türle
2021-03-19 Exploit Code Downloads   Profiling System for Human Resource Management 1.0 - Remote Code Execution (Unauthenticated) 4 WEB Christian Vierschilling
2021-03-19 Exploit Code Downloads   Boonex Dolphin 7.4.2 - 'width' Stored XSS 2 WEB Piyush Patil
2021-03-19 Exploit Code Downloads   LiveZilla Server 8.0.1.0 - 'Accept-Language' Reflected XSS 4 WEB Clément Cruchet
2021-03-19 Exploit Code Downloads   Plone CMS 5.2.3 - 'Title' Stored XSS 4 WEB Piyush Patil
2021-03-18 Exploit Code Downloads   Hestia Control Panel 1.3.2 - Arbitrary File Write 5 WEB numan türle
2021-03-18 Exploit Code Downloads   SEO Panel 4.8.0 - 'order_col' Blind SQL Injection (1) 4 WEB Piyush Patil
2021-03-18 Exploit Code Downloads   rConfig 3.9.6 - Arbitrary File Upload to Remote Code Execution (Authenticated) (1) 3 WEB Murat ŞEKER
2021-03-18 Exploit Code Downloads   VestaCP 0.9.8 - 'v_interface' Add IP Stored XSS 5 WEB numan türle
2021-03-17 Exploit Code Downloads   VestaCP 0.9.8 - File Upload CSRF 4 WEB Fady Mohammed Osman
2021-03-17 Exploit Code Downloads   WoWonder Social Network Platform 3.1 - 'event_id' SQL Injection 3 WEB securityforeveryone.com
2021-03-16 Exploit Code Downloads   Alphaware E-Commerce System 1.0 - Unauthenicated Remote Code Execution (File Upload + SQL injection) 5 WEB Christian Vierschilling
2021-03-15 Exploit Code Downloads   SonLogger 4.2.3.3 - Unauthenticated Arbitrary File Upload (Metasploit) 7 WEB Berkan Er
2021-03-15 Exploit Code Downloads   Sonlogger 4.2.3.3 - SuperAdmin Account Creation / Information Disclosure 5 WEB Berkan Er
2021-03-15 Exploit Code Downloads   openMAINT openMAINT 2.1-3.3-b - 'Multiple' Persistent Cross-Site Scripting 4 WEB Hosein Vita
2021-03-15 Exploit Code Downloads   rConfig 3.9.6 - 'path' Local File Inclusion (Authenticated) 4 WEB Murat ŞEKER
2021-03-15 Exploit Code Downloads   MagpieRSS 0.72 - 'url' Command Injection 3 WEB bl4ckh4ck5
2021-03-15 Exploit Code Downloads   Zenario CMS 8.8.53370 - 'id' Blind SQL Injection 3 WEB Balaji Ayyasamy
2021-03-12 Exploit Code Downloads   Monitoring System (Dashboard) 1.0 - File Upload RCE (Authenticated) 3 WEB Richard Jones
2021-03-12 Exploit Code Downloads   Monitoring System (Dashboard) 1.0 - 'uname' SQL Injection 5 WEB Richard Jones
2021-03-11 Exploit Code Downloads   Microsoft Exchange 2019 - Server-Side Request Forgery (Proxylogon) (PoC) 4 WEB testanull
2021-03-11 Exploit Code Downloads   CouchCMS 2.2.1 - Persistent Cross-Site Scripting 3 WEB xxcdd
2021-03-11 Exploit Code Downloads   MyBB OUGC Feedback Plugin 1.8.22 - Cross-Site Scripting 5 WEB 0xB9
2021-03-11 Exploit Code Downloads   NuCom 11N Wireless Router 5.07.90 - Remote Privilege Escalation 5 WEB LiquidWorm
2021-03-10 Exploit Code Downloads   Atlassian JIRA 8.11.1 - User Enumeration 5 WEB Dolev Farhi
2021-03-08 Exploit Code Downloads   GLPI 9.5.3 - 'fromtype' Unsafe Reflection 5 WEB Vadym Soroka
2021-03-08 Exploit Code Downloads   Joomla JCK Editor 6.4.4 - 'parent' SQL Injection (2) 4 WEB Nicholas Ferreira