Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2021-05-17   IPFire 2.25 - Remote Code Execution (Authenticated) 14 WEB Mücahit Saratar
2021-05-17   Customer Relationship Management (CRM) System 1.0 - 'Category' Persistent Cross site Scripting 11 WEB Vani K G
2021-05-14   Chamilo LMS 1.11.14 - Remote Code Execution (Authenticated) 21 WEB M. Cory Billington
2021-05-14   Podcast Generator 3.1 - 'Long Description' Persistent Cross-Site Scripting (XSS) 15 WEB Ayşenur KARAASLAN
2021-05-14   Student Management System 1.0 - 'message' Persistent Cross-Site Scripting (Authenticated) 14 WEB mohsen khashei
2021-05-13   ZeroShell 3.9.0 - Remote Command Execution 13 WEB Fellipe Oliveira
2021-05-13   Dental Clinic Appointment Reservation System 1.0 - 'date' UNION based SQL Injection (Authenticated) 17 WEB Mesut Cetin
2021-05-13   Dental Clinic Appointment Reservation System 1.0 - Authentication Bypass (SQLi) 14 WEB Mesut Cetin
2021-05-12   Chevereto 3.17.1 - Cross Site Scripting (Stored) 18 WEB Akıner Kısa
2021-05-10   Microweber CMS 1.1.20 - Remote Code Execution (Authenticated) 18 WEB sl1nki
2021-05-10   Human Resource Information System 0.1 - 'First Name' Persistent Cross-Site Scripting (Authenticate 17 WEB Reza Afsahi
2021-05-10   PHP Timeclock 1.04 - 'Multiple' Cross Site Scripting (XSS) 14 WEB Tyler Butler
2021-05-07   PHP Timeclock 1.04 - Time and Boolean Based Blind SQL Injection 14 WEB Tyler Butler
2021-05-07   Human Resource Information System 0.1 - Remote Code Execution (Unauthenticated) 20 WEB Reza Afsahi
2021-05-07   Voting System 1.0 - Remote Code Execution (Unauthenticated) 21 WEB secure77
2021-05-07   Voting System 1.0 - Authentication Bypass (SQLI) 16 WEB secure77
2021-05-06   b2evolution 7-2-2 - 'cf_name' SQL Injection 15 WEB nu11secur1ty
2021-05-06   Wordpress Plugin WP Super Edit 2.5.4 - Remote File Upload 19 WEB h4shur
2021-05-06   Schlix CMS 2.2.6-6 - Remote Code Execution (Authenticated) 16 WEB Eren Saraç
2021-05-06   Schlix CMS 2.2.6-6 - 'title' Persistent Cross-Site Scripting (Authenticated) 17 WEB Emircan Baş
2021-05-05   Anote 1.0 - Persistent Cross-Site Scripting 14 WEB TaurusOmar
2021-05-05   Markdownify 1.2.0 - Persistent Cross-Site Scripting 15 WEB TaurusOmar
2021-05-05   Markright 1.0 - Persistent Cross-Site Scripting 13 WEB TaurusOmar
2021-05-05   Freeter 1.2.1 - Persistent Cross-Site Scripting 14 WEB TaurusOmar
2021-05-05   StudyMD 0.3.2 - Persistent Cross-Site Scripting 13 WEB TaurusOmar
2021-05-05   Marky 0.0.1 - Persistent Cross-Site Scripting 13 WEB TaurusOmar
2021-05-05   Moeditor 0.2.0 - Persistent Cross-Site Scripting 15 WEB TaurusOmar
2021-05-05   SnipCommand 0.1.0 - Persistent Cross-Site Scripting 14 WEB TaurusOmar
2021-05-05   Tagstoo 2.0.1 - Persistent Cross-Site Scripting 15 WEB TaurusOmar
2021-05-05   Xmind 2020 - Persistent Cross-Site Scripting 16 WEB TaurusOmar
2021-05-05   Markdown Explorer 0.1.1 - Persistent Cross-Site Scripting 13 WEB Taurus Omar
2021-05-05   Savsoft Quiz 5 - 'User Account Settings' Persistent Cross-Site Scripting 15 WEB strider
2021-05-04   Internship Portal Management System 1.0 - Remote Code Execution(Unauthenticated) 17 WEB argenestel
2021-05-03   GitLab Community Edition (CE) 13.10.3 - 'Sign_Up' User Enumeration 15 WEB 4D0niiS
2021-05-03   GitLab Community Edition (CE) 13.10.3 - User Enumeration 15 WEB 4D0niiS
2021-05-03   Piwigo 11.3.0 - 'language' SQL 15 WEB nu11secur1ty
2021-05-03   Voting System 1.0 - Time based SQLI (Unauthenticated SQL injection) 15 WEB Syed Sheeraz Ali
2021-05-03   GetSimple CMS Custom JS 0.1 - Cross-Site Request Forgery 13 WEB boku
2021-04-30   Moodle 3.6.1 - Persistent Cross-Site Scripting (XSS) 16 WEB Fariskhi Vidyan
2021-04-29   NodeBB Plugin Emoji 3.2.1 - Arbitrary File Write 18 WEB 1F98D
2021-04-29   FOGProject 1.5.9 - File Upload RCE (Authenticated) 18 WEB sml
2021-04-29   Cacti 1.2.12 - 'filter' SQL Injection 22 WEB Leonardo Paiva
2021-04-28   Kirby CMS 3.5.3.1 - 'file' Cross-Site Scripting (XSS) 19 WEB Sreenath Raghunathan
2021-04-27   Montiorr 1.7.6m - Persistent Cross-Site Scripting 19 WEB Ahmad Shakla
2021-04-27   Kimai 1.14 - CSV Injection 15 WEB Mohammed Aloraimi
2021-04-26   SEO Panel 4.8.0 - 'order_col' Blind SQL Injection (2) 13 WEB nu11secur1ty
2021-04-26   OpenPLC 3 - Remote Code Execution (Authenticated) 20 WEB Fellipe Oliveira
2021-04-26   Hasura GraphQL 1.3.3 - Remote Code Execution 15 WEB Dolev Farhi
2021-04-23   Sipwise C5 NGCP CSC - Click2Dial Cross-Site Request Forgery (CSRF) 12 WEB LiquidWorm
2021-04-23   Sipwise C5 NGCP CSC - 'Multiple' Persistent Cross-Site Scripting (XSS) 13 WEB LiquidWorm
2021-04-23   DzzOffice 2.02.1 - 'Multiple' Cross-Site Scripting (XSS) 16 WEB nu11secur1ty
2021-04-23   GetSimple CMS My SMTP Contact Plugin 1.1.2 - Persistent Cross-Site Scripting 16 WEB boku
2021-04-23   Moodle 3.10.3 - 'url' Persistent Cross Site Scripting 15 WEB UVision
2021-04-22   RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting (XSS) 13 WEB Saud Ahmad
2021-04-22   OTRS 6.0.1 - Remote Command Execution (2) 13 WEB Hex_26
2021-04-22   CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS) 13 WEB bt0
2021-04-21   Hasura GraphQL 1.3.3 - Service Side Request Forgery (SSRF) 15 WEB Dolev Farhi
2021-04-21   Hasura GraphQL 1.3.3 - Local File Read 16 WEB Dolev Farhi
2021-04-21   GravCMS 1.10.7 - Unauthenticated Arbitrary File Write (Metasploit) 18 WEB Mehmet Ince
2021-04-21   Adtran Personal Phone Manager 10.8.1 - DNS Exfiltration 18 WEB 3ndG4me
2021-04-21   Adtran Personal Phone Manager 10.8.1 - 'Multiple' Reflected Cross-Site Scripting (XSS) 19 WEB 3ndG4me
2021-04-21   Adtran Personal Phone Manager 10.8.1 - 'emailAddress' Stored Cross-Site Scripting (XSS) 14 WEB 3ndG4me
2021-04-21   OpenEMR 5.0.2.1 - Remote Code Execution 17 WEB Hato0
2021-04-21   rconfig 3.9.6 - Arbitrary File Upload 14 WEB Vishwaraj Bhattrai
2021-04-21   RemoteClinic 2 - 'Multiple' Cross-Site Scripting (XSS) 16 WEB nu11secur1ty
2021-04-21   BlackCat CMS 1.3.6 - 'Multiple' Stored Cross-Site Scripting (XSS) 16 WEB Ömer Hasan Durmuş
2021-04-21   WordPress Plugin RSS for Yandex Turbo 1.29 - Stored Cross-Site Scripting (XSS) 20 WEB Himamshu Dilip Kulkarni
2021-04-21   Fast PHP Chat 1.3 - 'my_item_search' SQL Injection 17 WEB Fatih Coskun
2021-04-21   Multilaser Router RE018 AC1200 - Cross-Site Request Forgery (Enable Remote Access) 14 WEB Rodolfo Mariano
2021-04-16   GetSimple CMS My SMTP Contact Plugin 1.1.1 - Cross-Site Request Forgery 22 WEB boku
2021-04-15   htmly 2.8.0 - 'description' Stored Cross-Site Scripting (XSS) 18 WEB nu11secur1ty
2021-04-15   Tileserver-gl 3.0.0 - 'key' Reflected Cross-Site Scripting (XSS) 16 WEB Akash Chathoth
2021-04-15   Horde Groupware Webmail 5.2.22 - Stored XSS 16 WEB nu11secur1ty
2021-04-14   jQuery 1.0.3 - Cross-Site Scripting (XSS) 16 WEB Central InfoSec
2021-04-14   jQuery 1.2 - Cross-Site Scripting (XSS) 16 WEB Central InfoSec
2021-04-14   Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - RCE 16 WEB Jay Sharma
2021-04-14   CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection (Authenticated) 18 WEB skysbsb
2021-04-14   CITSmart ITSM 9.1.2.22 - LDAP Injection 18 WEB skysbsb
2021-04-14   Digital Crime Report Management System 1.0 - SQL Injection (Authentication Bypass) 15 WEB GaluhID
2021-04-13   ExpressVPN VPN Router 1.0 - Router Login Panel's Integer Overflow 14 WEB Jai Kumar Sharma
2021-04-13   Blitar Tourism 1.0 - Authentication Bypass SQLi 18 WEB sigeri94
2021-04-13   Simple Student Information System 1.0 - SQL Injection (Authentication Bypass) 14 WEB GaluhID
2021-04-09   PrestaShop 1.7.6.7 - 'location' Blind Sql Injection 16 WEB Vanshal Gaur
2021-04-08   Composr 10.0.36 - Remote Code Execution 17 WEB Orion Hridoy
2021-04-08   DMA Radius Manager 4.4.0 - Cross-Site Request Forgery (CSRF) 14 WEB Issac Briones
2021-04-08   CMSimple 5.2 - 'External' Stored XSS 16 WEB Quadron Research Lab
2021-04-07   Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read 15 WEB Rhino Security Labs
2021-04-07   Composr CMS 10.0.36 - Cross Site Scripting 16 WEB Orion Hridoy
2021-04-07   Atlassian Jira Service Desk 4.9.1 - Unrestricted File Upload to XSS 14 WEB Captain_hook
2021-04-06   Mini Mouse 9.3.0 - Local File inclusion 16 WEB gosh
2021-04-05   Mini Mouse 9.2.0 - Path Traversal 13 WEB gosh
2021-04-05   Mini Mouse 9.2.0 - Remote Code Execution 17 WEB gosh
2021-04-05   OpenEMR 4.1.0 - 'u' SQL Injection 18 WEB Michael Ikua
2021-04-05   Basic Shopping Cart 1.0 - Authentication Bypass 16 WEB Viren Saroha
2021-04-05   Simple Food Website 1.0 - Authentication Bypass 16 WEB Viren Saroha
2021-04-02   F5 BIG-IP 16.0.x - iControl REST Remote Code Execution (Unauthenticated) 20 WEB Al1ex
2021-04-02   ZBL EPON ONU Broadband Router 1.0 - Remote Privilege Escalation 16 WEB LiquidWorm
2021-04-01   phpPgAdmin 7.13.0 - COPY FROM PROGRAM Command Execution (Authenticated) 16 WEB Valerio Severini
2021-04-01   ScadaBR 1.0 - Arbitrary File Upload (Authenticated) (2) 13 WEB Fellipe Oliveira
2021-04-01   ScadaBR 1.0 - Arbitrary File Upload (Authenticated) (1) 13 WEB Fellipe Oliveira
2021-04-01   Latrix 0.6.0 - 'txtaccesscode' SQL Injection 14 WEB cptsticky
2021-03-31   CourseMS 2.1 - 'name' Stored XSS 18 WEB cptsticky
2021-03-31   Zabbix 3.4.7 - Stored XSS 17 WEB Radmil Gazizov
2021-03-30   Openlitespeed 1.7.9 - 'Notes' Stored Cross-Site Scripting 17 WEB cmOs
2021-03-30   GetSimple CMS 3.3.16 - Persistent Cross-Site Scripting 15 WEB boku
2021-03-29   SyncBreeze 10.1.16 - XML Parsing Stack-based Buffer Overflow 16 WEB Filipe Oliveira
2021-03-29   Novel Boutique House-plus 3.5.1 - Arbitrary File Download 15 WEB tuyiqiang
2021-03-29   Budget Management System 1.0 - 'Budget title' Stored XSS 16 WEB Jitendra Kumar Tripathi
2021-03-29   Equipment Inventory System 1.0 - 'multiple' Stored XSS 16 WEB Jitendra Kumar Tripathi
2021-03-29   Concrete5 8.5.4 - 'name' Stored XSS 17 WEB Quadron Research Lab
2021-03-29   TP-Link Devices - 'setDefaultHostname' Stored Cross-site Scripting (Unauthenticated) 18 WEB Smriti Gaba
2021-03-29   WordPress Plugin WP Super Cache 1.7.1 - Remote Code Execution (Authenticated) 19 WEB m0ze
2021-03-26   Moodle 3.10.3 - 'label' Persistent Cross Site Scripting 17 WEB Vincent666
2021-03-26   Regis Inventory And Monitoring System 1.0 - 'Item List' Persistent Cross-Site Scripting 16 WEB George Tsimpidas
2021-03-26   'customhs_js_content' - 'customhs_js_content' Cross-Site Request Forgery 18 WEB Abhishek Joshi
2021-03-25   Dolibarr ERP 11.0.4 - File Upload Restrictions Bypass (Authenticated RCE) 16 WEB Andrea Gonzalez
2021-03-25   Genexis Platinum-4410 P4410-V2-1.31A - 'start_addr' Persistent Cross-Site Scripting 14 WEB Jithin KS
2021-03-25   Linksys EA7500 2.0.8.194281 - Cross-Site Scripting 15 WEB MiningOmerta
2021-03-25   Ovidentia 6 - 'id' SQL injection (Authenticated) 16 WEB Felipe Prates Donato
2021-03-23   Codiad 2.8.4 - Remote Code Execution (Authenticated) 15 WEB WangYihang
2021-03-23   Hotel And Lodge Management System 1.0 - 'Customer Details' Stored XSS 15 WEB Jitendra Kumar Tripathi
2021-03-23   MyBB 1.8.25 - Poll Vote Count SQL Injection 15 WEB SivertPL
2021-03-22   MyBB 1.8.25 - Chained Remote Command Execution 16 WEB SivertPL
2021-03-22   WordPress Plugin Delightful Downloads Jquery File Tree 1.6.6 - Path Traversal 14 WEB Nicholas Ferreira
2021-03-19   Online News Portal 1.0 - 'Multiple' Stored Cross-Site Scripting 12 WEB Richard Jones