Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2021-02-08   WordPress Plugin Supsystic Membership 1.4.7 - 'sidx' SQL injection 41 WEB Erik David Martin
2021-02-08   WordPress Plugin Supsystic Newsletter 1.5.5 - 'sidx' SQL injection 48 WEB Erik David Martin
2021-02-08   Alt-N MDaemon webmail 20.0.0 - 'file name' Stored Cross Site Scripting (XSS) 50 WEB Kailash Bohara
2021-02-08   Alt-N MDaemon webmail 20.0.0 - 'Contact name' Stored Cross Site Scripting (XSS) 39 WEB Kailash Bohara
2021-02-08   YetiShare File Hosting Script 5.1.0 - 'url' Server-Side Request Forgery 38 WEB numan türle
2021-02-08   WordPress Plugin Supsystic Pricing Table 1.8.7 - Multiple Vulnerabilities 45 WEB Erik David Martin
2021-02-08   WordPress Plugin Supsystic Ultimate Maps 1.1.12 - 'sidx' SQL injection 42 WEB Erik David Martin
2021-02-08   WordPress Plugin Welcart e-Commerce 2.0.0 - 'search[order_column][0]' SQL injection 39 WEB Erik David Martin
2021-02-08   Jenzabar 9.2.2 - 'query' Reflected XSS. 47 WEB y0ung_dst
2021-02-08   SmartFoxServer 2X 2.17.0 - God Mode Console WebSocket XSS 39 WEB LiquidWorm
2021-02-05   SEO Panel 4.6.0 - Remote Code Execution (2) 43 WEB Kr0ff
2021-02-05   PhreeBooks 5.2.3 ERP - Remote Code Execution (2) 47 WEB Kr0ff
2021-02-05   LiteSpeed Web Server Enterprise 5.4.11 - Command Injection (Authenticated) 44 WEB SunCSR
2021-02-03   Car Rental Project 2.0 - Arbitrary File Upload to Remote Code Execution 43 WEB Jannick Tiger
2021-02-03   Pixelimity 1.0 - 'password' Cross-Site Request Forgery 47 WEB Noth
2021-02-02   Student Record System 4.0 - 'cid' SQL Injection 44 WEB Jannick Tiger
2021-02-01   WordPress 5.0.0 - Image Remote Code Execution 45 WEB OUSSAMA RAHALI
2021-02-01   Klog Server 2.4.1 - Command Injection (Authenticated) 45 WEB Metin Yunus Kandemir
2021-02-01   Roundcube Webmail 1.2 - File Disclosure 54 WEB stonepresto
2021-02-01   Vehicle Parking Tracker System 1.0 - 'Owner Name' Stored Cross-Site Scripting 38 WEB Anmol K Sachan
2021-02-01   H8 SSRMS - 'id' IDOR 45 WEB Mohammed Farhan
2021-02-01   bloofoxCMS 0.5.2.1 - CSRF (Add user) 44 WEB LiPeiYi
2021-02-01   MyBB Thread Redirect Plugin 0.2.1 - Cross-Site Scripting 41 WEB 0xB9
2021-02-01   MyBB Trending Widget Plugin 1.2 - Cross-Site Scripting 39 WEB 0xB9
2021-02-01   Park Ticketing Management System 1.0 - 'viewid' SQL Injection 41 WEB Zeyad Azima
2021-02-01   User Management System 1.0 - 'uid' SQL Injection 43 WEB Zeyad Azima
2021-02-01   Zoo Management System 1.0 - 'anid' SQL Injection 45 WEB Zeyad Azima
2021-02-01   MyBB Delete Account Plugin 1.4 - Cross-Site Scripting 43 WEB 0xB9
2021-01-29   SonicWall SSL-VPN 8.0.0.0 - 'visualdoor' Remote Code Execution (Unauthenticated) 47 WEB Darren Martyn
2021-01-29   Simple Public Chat Room 1.0 - 'msg' Stored Cross-Site Scripting 42 WEB Richard Jones
2021-01-29   Simple Public Chat Room 1.0 - Authentication Bypass SQLi 41 WEB Richard Jones
2021-01-29   MyBB Hide Thread Content Plugin 1.0 - Information Disclosure 40 WEB 0xB9
2021-01-29   Home Assistant Community Store (HACS) 1.10.0 - Directory Traversal 48 WEB Lyghtnox
2021-01-29   Quick.CMS 6.7 - Remote Code Execution (Authenticated) 47 WEB mari0x00
2021-01-29   Online Grading System 1.0 - 'uname' SQL Injection 45 WEB Ruchi Tiwari
2021-01-29   BloofoxCMS 0.5.2.1 - 'text' Stored Cross Site Scripting 50 WEB LiPeiYi
2021-01-28   WordPress Plugin SuperForms 4.9 - Arbitrary File Upload 53 WEB ABDO10
2021-01-28   Umbraco CMS 7.12.4 - Remote Code Execution (Authenticated) 44 WEB Alexandre ZANNI
2021-01-28   Fuel CMS 1.4.1 - Remote Code Execution (2) 48 WEB Alexandre ZANNI
2021-01-28   OpenEMR 5.0.1 - Remote Code Execution (Authenticated) (2) 40 WEB Alexandre ZANNI
2021-01-28   CMSUno 1.6.2 - 'lang' Remote Code Execution (Authenticated) 43 WEB Alexandre ZANNI
2021-01-28   EgavilanMedia PHPCRUD 1.0 - 'Full Name' Stored Cross Site Scripting 34 WEB Mahendra Purbia
2021-01-27   Openlitespeed Web Server 1.7.8 - Command Injection (Authenticated) (1) 37 WEB SunCSR
2021-01-27   STVS ProVision 5.9.10 - Cross-Site Request Forgery (Add Admin) 36 WEB LiquidWorm
2021-01-27   STVS ProVision 5.9.10 - File Disclosure (Authenticated) 42 WEB LiquidWorm
2021-01-26   Oracle WebLogic Server 12.2.1.0 - RCE (Unauthenticated) 45 WEB CHackA0101
2021-01-26   Tenda AC5 AC1200 Wireless - 'WiFi Name & Password' Stored Cross Site Scripting 41 WEB Chiragh Arora
2021-01-26   Simple College Website 1.0 - 'full' Stored Cross Site Scripting 53 WEB Marco Catalano
2021-01-26   Simple College Website 1.0 - 'name' Sql Injection (Authentication Bypass) 44 WEB Marco Catalano
2021-01-26   Cemetry Mapping and Information System 1.0 - 'user_email' Sql Injection (Authentication Bypass) 39 WEB Marco Catalano
2021-01-25   Klog Server 2.4.1 - Unauthenticated Command Injection (Metasploit) 41 WEB Metin Yunus Kandemir
2021-01-25   Library System 1.0 - 'category' SQL Injection 47 WEB Aitor Herrero
2021-01-25   CASAP Automated Enrollment System 1.0 - 'route' Stored XSS 44 WEB Richard Jones
2021-01-25   CASAP Automated Enrollment System 1.0 - 'First Name' Stored XSS 49 WEB Anita Gaud
2021-01-25   Collabtive 3.1 - 'address' Persistent Cross-Site Scripting 48 WEB Deha Berkin Bir
2021-01-25   MyBB Timeline Plugin 1.0 - Persistent Cross-Site Scripting 52 WEB 0xB9
2021-01-22   Atlassian Confluence Widget Connector Macro - SSTI 49 WEB 46o60
2021-01-22   ERPNext 12.14.0 - SQL Injection (Authenticated) 46 WEB Hodorsec
2021-01-22   CASAP Automated Enrollment System 1.0 - Authentication Bypass 48 WEB Himanshu Shukla
2021-01-22   Library System 1.0 - Authentication Bypass 46 WEB Himanshu Shukla
2021-01-22   Oracle WebLogic Server 14.1.1.0 - RCE (Authenticated) 42 WEB Photubias
2021-01-22   Selea Targa IP OCR-ANPR Camera - 'addr' Remote Code Execution (Unauthenticated) 42 WEB LiquidWorm
2021-01-22   Selea Targa 512 IP OCR-ANPR Camera - Stream Disclosure (Unauthenticated) 45 WEB LiquidWorm
2021-01-22   Selea Targa IP OCR-ANPR Camera - CSRF Add Admin 42 WEB LiquidWorm
2021-01-22   Selea Targa IP OCR-ANPR Camera - Multiple SSRF (Unauthenticated) 44 WEB LiquidWorm
2021-01-22   Selea Targa IP OCR-ANPR Camera - Directory Traversal File Disclosure (Unauthenticated) 51 WEB LiquidWorm
2021-01-22   Selea Targa IP OCR-ANPR Camera - Developer Backdoor Config Overwrite 46 WEB LiquidWorm
2021-01-22   Selea Targa IP OCR-ANPR Camera - 'files_list' Remote Stored XSS 38 WEB LiquidWorm
2021-01-22   Selea CarPlateServer (CPS) 4.0.1.6 - Remote Program Execution 45 WEB LiquidWorm
2021-01-21   Anchor CMS 0.12.7 - CSRF (Delete user) 56 WEB Ninad Mishra
2021-01-21   Wordpress Plugin Simple Job Board 2.9.3 - Authenticated File Read (Metasploit) 56 WEB SunCSR Team
2021-01-21   Nagios XI 5.7.5 - Multiple Persistent Cross-Site Scripting 47 WEB Matthew Aberegg
2021-01-21   Apartment Visitors Management System 1.0 - 'email' SQL Injection 44 WEB CANKAT ÇAKMAK
2021-01-21   Online Documents Sharing Platform 1.0 - 'user' SQL Injection 44 WEB CANKAT ÇAKMAK
2021-01-20   Voting System 1.0 - File Upload RCE (Authenticated Remote Code Execution) 43 WEB Richard Jones
2021-01-20   Oracle Business Intelligence Enterprise Edition 11.1.1.7.140715 - Stored XSS 44 WEB omurugur
2021-01-20   ChurchRota 2.6.4 - RCE (Authenticated) 42 WEB Rob McCarthy
2021-01-19   osTicket 1.14.2 - SSRF 37 WEB Talat Mehmood
2021-01-18   Life Insurance Management System 1.0 - File Upload RCE (Authenticated) 43 WEB Aitor Herrero
2021-01-18   Life Insurance Management System 1.0 - 'client_id' SQL Injection 36 WEB Aitor Herrero
2021-01-18   Xwiki CMS 12.10.2 - Cross Site Scripting (XSS) 35 WEB Karan Keswani
2021-01-18   Cisco UCS Manager 2.2(1d) - Remote Command Execution 44 WEB liquidsky
2021-01-15   Netsia SEBA+ 0.16.1 - Add Root User (Metasploit) 39 WEB AkkuS
2021-01-15   E-Learning System 1.0 - Authentication Bypass 42 WEB Himanshu Shukla
2021-01-15   Alumni Management System 1.0 - _Last Name field in Registration page_ Stored XSS 42 WEB Siva Rajendran
2021-01-15   EyesOfNetwork 5.3 - File Upload Remote Code Execution 45 WEB Audencia Business SCHOOL Red Team
2021-01-15   Online Hotel Reservation System 1.0 - 'person' time-based SQL Injection 38 WEB Mesut Cetin
2021-01-15   Online Hotel Reservation System 1.0 - Cross-site request forgery (CSRF) 38 WEB Mesut Cetin
2021-01-15   Online Hotel Reservation System 1.0 - 'id' Time-based SQL Injection 37 WEB Mesut Cetin
2021-01-15   Online Hotel Reservation System 1.0 - 'description' Stored Cross-site Scripting 42 WEB Mesut Cetin
2021-01-15   WordPress Plugin Easy Contact Form 1.1.7 - 'Name' Stored Cross-Site Scripting (XSS) 41 WEB Rahul Ramakant Singh
2021-01-15   PHP-Fusion CMS 9.03.90 - Cross-Site Request Forgery (Delete admin shoutbox message) 37 WEB Mohamed Oosman
2021-01-14   Laravel 8.4.2 debug mode - Remote code execution 38 WEB SunCSR Team
2021-01-14   Online Shopping Cart System 1.0 - 'id' SQL Injection 38 WEB Aydın Baran Ertemir
2021-01-14   Nagios XI 5.7.X - Remote Code Execution RCE (Authenticated) 37 WEB Haboob Team
2021-01-14   Online Movie Streaming 1.0 - Admin Authentication Bypass 39 WEB Richard Jones
2021-01-13   Online Hotel Reservation System 1.0 - Admin Authentication Bypass 41 WEB Richard Jones
2021-01-12   SmartAgent 3.1.0 - Privilege Escalation 44 WEB Orion Hridoy
2021-01-12   Cemetry Mapping and Information System 1.0 - Multiple SQL Injections 43 WEB Mesut Cetin
2021-01-12   Gila CMS 2.0.0 - Remote Code Execution (Unauthenticated) 47 WEB Enesdex
2021-01-11   Prestashop 1.7.7.0 - 'id_product' Time Based Blind SQL Injection 40 WEB Jaimin Gondaliya
2021-01-11   OpenCart 3.0.36 - ATO via Cross Site Request Forgery 40 WEB Mahendra Purbia
2021-01-11   WordPress Plugin Custom Global Variables 1.0.5 - 'name' Stored Cross-Site Scripting (XSS) 39 WEB Swapnil Subhash Bodekar
2021-01-11   Cemetry Mapping and Information System 1.0 - Multiple Stored Cross-Site Scripting 39 WEB Mesut Cetin
2021-01-11   EyesOfNetwork 5.3 - LFI 39 WEB Audencia Business SCHOOL Red Team
2021-01-11   Anchor CMS 0.12.7 - 'markdown' Stored Cross-Site Scripting 46 WEB Ramazan Mert GÖKTEN
2021-01-11   EyesOfNetwork 5.3 - RCE & PrivEsc 44 WEB Audencia Business SCHOOL Red Team
2021-01-08   Wordpress Plugin wpDiscuz 7.0.4 - Unauthenticated Arbitrary File Upload (Metasploit) 43 WEB SunCSR Team
2021-01-08   WordPress Plugin Autoptimize 2.7.6 - Authenticated Arbitrary File Upload (Metasploit) 37 WEB SunCSR Team
2021-01-08   Apache Flink 1.11.0 - Unauthenticated Arbitrary File Read (Metasploit) 43 WEB SunCSR Team
2021-01-08   Cockpit Version 234 - Server-Side Request Forgery (Unauthenticated) 36 WEB Metin Yunus Kandemir
2021-01-08   Online Doctor Appointment System 1.0 - 'Multiple' Stored XSS 35 WEB Mohamed habib Smidi
2021-01-08   Life Insurance Management System 1.0 - Multiple Stored XSS 41 WEB Arnav Tripathy
2021-01-07   CRUD Operation 1.0 - Multiple Stored XSS 36 WEB Arnav Tripathy
2021-01-07   ECSIMAGING PACS 6.21.5 - SQL injection 41 WEB shoxxdj
2021-01-07   Curfew e-Pass Management System 1.0 - Stored XSS 39 WEB Arnav Tripathy
2021-01-07   Cockpit CMS 0.6.1 - Remote Code Execution 39 WEB Rafael Resende
2021-01-07   Employee Record System 1.0 - Unrestricted File Upload to Remote Code Execution 41 WEB Saeed Bala Ahmed
2021-01-07   ECSIMAGING PACS 6.21.5 - Remote code execution 37 WEB shoxxdj
2021-01-07   iBall-Baton WRA150N Rom-0 Backup - File Disclosure (Sensitive Information) 41 WEB h4cks1n
2021-01-06   Sonatype Nexus 3.21.1 - Remote Code Execution (Authenticated) 42 WEB 1F98D
2021-01-06   Gitea 1.7.5 - Remote Code Execution 58 WEB 1F98D
2021-01-06   Resumes Management and Job Application Website 1.0 - RCE (Unauthenticated) 42 WEB Arnav Tripathy
2021-01-06   Newgen Correspondence Management System (corms) eGov 12.0 - IDOR 44 WEB ALI AL SINAN
2021-01-06   WordPress Plugin WP24 Domain Check 1.6.2 - 'fieldnameDomain' Stored Cross Site Scripting 43 WEB Mehmet Kelepçe