Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2020-12-22 Exploit Code Downloads   CSE Bookstore 1.0 - Multiple SQL Injection 45 WEB Musyoka Ian
2020-12-22 Exploit Code Downloads   Pandora FMS 7.0 NG 750 - 'Network Scan' SQL Injection (Authenticated) 35 WEB Matthew Aberegg
2020-12-22 Exploit Code Downloads   Victor CMS 1.0 - File Upload To RCE 36 WEB Mosaaed
2020-12-16 Exploit Code Downloads   Sony Playstation 4 (PS4) < 7.02 - 'ValidationMessage::buildBubbleTree()' Use-After-Free WebKit Code 30 WEB ChendoChap
2020-11-12 Exploit Code Downloads   Sony Playstation 4 (PS4) < 6.72 - 'ValidationMessage::buildBubbleTree()' Use-After-Free WebKit Code 26 WEB Synacktiv
2020-12-21 Exploit Code Downloads   Online Marriage Registration System 1.0 - 'searchdata' SQL Injection 32 WEB Raffaele Sabato
2020-12-21 Exploit Code Downloads   Point of Sale System 1.0 - Multiple Stored XSS 28 WEB Saeed Bala Ahmed
2020-12-21 Exploit Code Downloads   Flexmonster Pivot Table & Charts 2.7.17 - 'Remote JSON' Reflected XSS 28 WEB Marco Nappi
2020-12-21 Exploit Code Downloads   Flexmonster Pivot Table & Charts 2.7.17 - 'To remote CSV' Reflected XSS 32 WEB Marco Nappi
2020-12-21 Exploit Code Downloads   Flexmonster Pivot Table & Charts 2.7.17 - 'To OLAP' Reflected XSS 31 WEB Marco Nappi
2020-12-21 Exploit Code Downloads   Flexmonster Pivot Table & Charts 2.7.17 - 'Remote Report' Reflected XSS 32 WEB Marco Nappi
2020-12-21 Exploit Code Downloads   SCO Openserver 5.0.7 - 'outputform' Command Injection 33 WEB Ramikan
2020-12-21 Exploit Code Downloads   SCO Openserver 5.0.7 - 'section' Reflected XSS 29 WEB Ramikan
2020-12-21 Exploit Code Downloads   Spiceworks 7.5 - HTTP Header Injection 35 WEB Ramikan
2020-12-21 Exploit Code Downloads   Academy-LMS 4.3 - Stored XSS 30 WEB Vinicius Alves
2020-12-21 Exploit Code Downloads   Spotweb 1.4.9 - 'search' SQL Injection 35 WEB BouSalman
2020-12-21 Exploit Code Downloads   Queue Management System 4.0.0 - _Add User_ Stored XSS 34 WEB Kislay Kumar
2020-12-18 Exploit Code Downloads   Xeroneit Library Management System 3.1 - _Add Book Category _ Stored XSS 36 WEB Kislay Kumar
2020-12-18 Exploit Code Downloads   SyncBreeze 10.0.28 - 'login' Denial of Service (Poc) 34 WEB Ahmed Elkhressy
2020-12-18 Exploit Code Downloads   Smart Hospital 3.1 - _Add Patient_ Stored XSS 38 WEB Kislay Kumar
2020-12-18 Exploit Code Downloads   Wordpress Plugin Duplicator 1.3.26 - Unauthenticated Arbitrary File Read (Metasploit) 35 WEB SunCSR Team
2020-12-18 Exploit Code Downloads   Alumni Management System 1.0 - 'id' SQL Injection 36 WEB Aakash Madaan
2020-12-18 Exploit Code Downloads   Alumni Management System 1.0 - _Course Form_ Stored XSS 39 WEB Aakash Madaan
2020-12-18 Exploit Code Downloads   Alumni Management System 1.0 - Unrestricted File Upload To RCE 40 WEB Aakash Madaan
2020-12-18 Exploit Code Downloads   Point of Sale System 1.0 - Authentication Bypass 35 WEB Saeed Bala Ahmed
2020-12-17 Exploit Code Downloads   Victor CMS 1.0 - Multiple SQL Injection (Authenticated) 35 WEB Furkan Göksel
2020-12-17 Exploit Code Downloads   PHPJabbers Appointment Scheduler 2.3 - Reflected XSS (Cross-Site Scripting) 38 WEB Andrea Intilangelo
2020-12-17 Exploit Code Downloads   Employee Record System 1.0 - Multiple Stored XSS 35 WEB Saeed Bala Ahmed
2020-12-17 Exploit Code Downloads   Interview Management System 1.0 - 'id' SQL Injection 33 WEB Saeed Bala Ahmed
2020-12-17 Exploit Code Downloads   Interview Management System 1.0 - Stored XSS in Add New Question 27 WEB Saeed Bala Ahmed
2020-12-17 Exploit Code Downloads   Online Tours & Travels Management System 1.0 - _id_ SQL Injection 34 WEB Saeed Bala Ahmed
2020-12-17 Exploit Code Downloads   Customer Support System 1.0 - 'id' SQL Injection 30 WEB Saeed Bala Ahmed
2020-12-17 Exploit Code Downloads   Customer Support System 1.0 - _First Name_ & _Last Name_ Stored XSS 35 WEB Saeed Bala Ahmed
2020-12-17 Exploit Code Downloads   Medical Center Portal Management System 1.0 - 'id' SQL Injection 34 WEB Saeed Bala Ahmed
2020-12-17 Exploit Code Downloads   Content Management System 1.0 - 'id' SQL Injection 31 WEB Zhaiyi
2020-12-17 Exploit Code Downloads   Content Management System 1.0 - 'email' SQL Injection 33 WEB Zhaiyi
2020-12-17 Exploit Code Downloads   Content Management System 1.0 - 'First Name' Stored XSS 35 WEB Zhaiyi
2020-12-17 Exploit Code Downloads   Linksys RE6500 1.0.11.001 - Unauthenticated RCE 37 WEB RE-Solver
2020-12-17 Exploit Code Downloads   Dolibarr ERP-CRM 12.0.3 - Remote Code Execution (Authenticated) 31 WEB Yilmaz Degirmenci
2020-12-16 Exploit Code Downloads   Seotoaster 3.2.0 - Stored XSS on Edit page properties 31 WEB Hardik Solanki
2020-12-16 Exploit Code Downloads   PrestaShop ProductComments 4.2.0 - 'id_products' Time Based Blind SQL Injection 34 WEB Frederic ADAM
2020-12-16 Exploit Code Downloads   Magic Home Pro 1.5.1 - Authentication Bypass 38 WEB Victor Hanna
2020-12-16 Exploit Code Downloads   Raysync 3.3.3.8 - RCE 34 WEB james
2020-12-16 Exploit Code Downloads   Grav CMS 1.6.30 Admin Plugin 1.9.18 - 'Page Title' Persistent Cross-Site Scripting 37 WEB Sagar Banwa
2020-12-15 Exploit Code Downloads   Cisco ASA 9.14.1.10 and FTD 6.6.0.1 - Path Traversal (2) 33 WEB Freakyclown
2020-12-15 Exploit Code Downloads   Online Marriage Registration System (OMRS) 1.0 - Remote Code Execution (2) 37 WEB Andrea Bruschi
2020-12-15 Exploit Code Downloads   Task Management System 1.0 - 'page' Local File Inclusion 34 WEB İsmail BOZKURT
2020-12-14 Exploit Code Downloads   GitLab 11.4.7 - Remote Code Execution (Authenticated) (1) 34 WEB Fortunato Lodari
2020-12-14 Exploit Code Downloads   Macally WIFISD2-2A82 2.000.010 - Guest to Root Privilege Escalation 34 WEB Maximilian Barz
2020-12-14 Exploit Code Downloads   Rumble Mail Server 0.51.3135 - 'username' Stored XSS 34 WEB Mohammed Alshehri
2020-12-14 Exploit Code Downloads   Rumble Mail Server 0.51.3135 - 'domain and path' Stored XSS 33 WEB Mohammed Alshehri
2020-12-14 Exploit Code Downloads   Rumble Mail Server 0.51.3135 - 'servername' Stored XSS 35 WEB Mohammed Alshehri
2020-12-14 Exploit Code Downloads   WordPress Plugin Total Upkeep 1.14.9 - Database and Files Backup Download 33 WEB Wadeek
2020-12-14 Exploit Code Downloads   Seacms 11.1 - 'checkuser' Stored XSS 35 WEB j5s
2020-12-14 Exploit Code Downloads   Seacms 11.1 - 'file' Local File Inclusion 40 WEB j5s
2020-12-14 Exploit Code Downloads   Seacms 11.1 - 'ip and weburl' Remote Command Execution 40 WEB j5s
2020-12-14 Exploit Code Downloads   MiniWeb HTTP Server 0.8.19 - Buffer Overflow (PoC) 41 WEB securityforeveryone.com
2020-12-14 Exploit Code Downloads   LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL Injection 33 WEB Hodorsec
2020-12-14 Exploit Code Downloads   Rukovoditel 2.6.1 - Cross-Site Request Forgery (Change password) 34 WEB KeopssGroup0day_Inc
2020-12-14 Exploit Code Downloads   Jenkins 2.235.3 - 'X-Forwarded-For' Stored XSS 31 WEB gx1
2020-12-11 Exploit Code Downloads   Courier Management System 1.0 - 'ref_no' SQL Injection 34 WEB Zhaiyi
2020-12-11 Exploit Code Downloads   Courier Management System 1.0 - 'MULTIPART street ((custom) ' SQL Injection 33 WEB Zhaiyi
2020-12-11 Exploit Code Downloads   Courier Management System 1.0 - 'First Name' Stored XSS 31 WEB Zhaiyi
2020-12-11 Exploit Code Downloads   Dolibarr 12.0.3 - SQLi to RCE 30 WEB coiffeur
2020-12-11 Exploit Code Downloads   Supply Chain Management System - Auth Bypass SQL Injection 30 WEB Piyush Malviya
2020-12-11 Exploit Code Downloads   Rukovoditel 2.6.1 - RCE (1) 33 WEB coiffeur
2020-12-11 Exploit Code Downloads   Jenkins 2.235.3 - 'Description' Stored XSS 30 WEB gx1
2020-12-11 Exploit Code Downloads   Medical Center Portal Management System 1.0 - Multiple Stored XSS 33 WEB Saeed Bala Ahmed
2020-12-11 Exploit Code Downloads   Openfire 4.6.0 - 'sql' Stored XSS 31 WEB j5s
2020-12-11 Exploit Code Downloads   Openfire 4.6.0 - 'users' Stored XSS 30 WEB j5s
2020-12-11 Exploit Code Downloads   Openfire 4.6.0 - 'groupchatJID' Stored XSS 31 WEB j5s
2020-12-11 Exploit Code Downloads   Jenkins 2.235.3 - 'tooltip' Stored Cross-Site Scripting 30 WEB gx1
2020-12-10 Exploit Code Downloads   WordPress Plugin Popup Builder 3.69.6 - Multiple Stored Cross Site Scripting 33 WEB Ilca Lucian Florin
2020-12-10 Exploit Code Downloads   Library Management System 2.0 - Auth Bypass SQL Injection 29 WEB Manish Solanki
2020-12-10 Exploit Code Downloads   Openfire 4.6.0 - 'path' Stored XSS 31 WEB j5s
2020-12-10 Exploit Code Downloads   OpenCart 3.0.3.6 - Cross Site Request Forgery 33 WEB Mahendra Purbia
2020-12-10 Exploit Code Downloads   Barcodes generator 1.0 - 'name' Stored Cross Site Scripting 31 WEB Nikhil Kumar
2020-12-09 Exploit Code Downloads   Task Management System 1.0 - 'id' SQL Injection 36 WEB Saeed Bala Ahmed
2020-12-09 Exploit Code Downloads   Task Management System 1.0 - Unrestricted File Upload to Remote Code Execution 35 WEB Saeed Bala Ahmed
2020-12-09 Exploit Code Downloads   Task Management System 1.0 - 'First Name and Last Name' Stored XSS 32 WEB Saeed Bala Ahmed
2020-12-09 Exploit Code Downloads   VestaCP 0.9.8-26 - 'backup' Information Disclosure 31 WEB Vulnerability-Lab
2020-12-09 Exploit Code Downloads   VestaCP 0.9.8-26 - 'LoginAs' Insufficient Session Validation 36 WEB Vulnerability-Lab
2020-12-08 Exploit Code Downloads   Employee Performance Evaluation System 1.0 - 'Task and Description' Persistent Cross Site Scripting 32 WEB Ritesh Gohil
2020-12-08 Exploit Code Downloads   Online Bus Ticket Reservation 1.0 - SQL Injection 31 WEB Sakshi Sharma
2020-12-07 Exploit Code Downloads   vBulletin 5.6.3 - 'group' Cross Site Scripting 35 WEB Vincent666
2020-12-07 Exploit Code Downloads   Savsoft Quiz 5 - 'Skype ID' Stored XSS 43 WEB Dipak Panchal
2020-12-07 Exploit Code Downloads   Cyber Cafe Management System Project (CCMS) 1.0 - Persistent Cross-Site Scripting 35 WEB Pruthvi Nekkanti
2020-12-04 Exploit Code Downloads   Zabbix 5.0.0 - Stored XSS via URL Widget Iframe 39 WEB Shwetabh Vishnoi
2020-12-04 Exploit Code Downloads   CMS Made Simple 2.2.15 - Stored Cross-Site Scripting via SVG File Upload (Authenticated) 31 WEB Eshan Singh
2020-12-04 Exploit Code Downloads   Laravel Nova 3.7.0 - 'range' DoS 29 WEB iqzer0
2020-12-04 Exploit Code Downloads   Forma LMS 2.3 - 'First & Last Name' Stored Cross-Site Scripting 32 WEB Hemant Patidar
2020-12-04 Exploit Code Downloads   Savsoft Quiz 5 - 'field_title' Stored Cross-Site Scripting 29 WEB Dhruv Patel
2020-12-04 Exploit Code Downloads   Testa Online Test Management System 3.4.7 - 'q' SQL Injection 43 WEB Ultra Security Team
2020-12-04 Exploit Code Downloads   MiniCMS 1.10 - 'content box' Stored XSS 36 WEB yudp
2020-12-04 Exploit Code Downloads   Phpscript-sgh 0.1.0 - Time Based Blind SQL Injection 36 WEB KeopssGroup0day_Inc
2020-12-04 Exploit Code Downloads   Composr CMS 10.0.34 - 'banners' Persistent Cross Site Scripting 30 WEB Parshwa Bhavsar
2020-12-04 Exploit Code Downloads   Wordpress Plugin Canto 1.3.0 - Blind SSRF (Unauthenticated) 34 WEB Pankaj Verma
2020-12-03 Exploit Code Downloads   Invision Community 4.5.4 - 'Field Name' Stored Cross-Site Scripting 38 WEB Hemant Patidar
2020-12-03 Exploit Code Downloads   Sony BRAVIA Digital Signage 1.7.8 - System API Information Disclosure 29 WEB LiquidWorm
2020-12-03 Exploit Code Downloads   Sony BRAVIA Digital Signage 1.7.8 - Unauthenticated Remote File Inclusion 35 WEB LiquidWorm
2020-12-03 Exploit Code Downloads   mojoPortal forums 2.7.0.0 - 'Title' Persistent Cross-Site Scripting 32 WEB Sagar Banwa
2020-12-03 Exploit Code Downloads   Online Matrimonial Project 1.0 - Authenticated Remote Code Execution 32 WEB Valerio Alessandroni
2020-12-03 Exploit Code Downloads   EgavilanMedia Address Book 1.0 Exploit - SQLi Auth Bypass 28 WEB Mayur Parmar
2020-12-03 Exploit Code Downloads   Coastercms 5.8.18 - Stored XSS 32 WEB Hardik Solanki
2020-12-03 Exploit Code Downloads   User Registration & Login and User Management System 2.1 - Cross Site Request Forgery 33 WEB Dipak Panchal
2020-12-02 Exploit Code Downloads   WordPress Plugin Wp-FileManager 6.8 - RCE 32 WEB Mansoor R
2020-12-02 Exploit Code Downloads   Car Rental Management System 1.0 - SQL Injection / Local File include 34 WEB Mosaaed
2020-12-02 Exploit Code Downloads   Simple College Website 1.0 - 'page' Local File Inclusion 30 WEB Mosaaed
2020-12-02 Exploit Code Downloads   Anuko Time Tracker 1.19.23.5311 - Password Reset leading to Account Takeover 36 WEB Mufaddal Masalawala
2020-12-02 Exploit Code Downloads   Anuko Time Tracker 1.19.23.5311 - No rate Limit on Password Reset functionality 30 WEB Mufaddal Masalawala
2020-12-02 Exploit Code Downloads   ChurchCRM 4.2.1 - Persistent Cross Site Scripting (XSS) 43 WEB Mufaddal Masalawala
2020-12-02 Exploit Code Downloads   ChurchCRM 4.2.0 - CSV/Formula Injection 38 WEB Mufaddal Masalawala
2020-12-02 Exploit Code Downloads   WebDamn User Registration & Login System with User Panel - SQLi Auth Bypass 34 WEB Aakash Madaan
2020-12-02 Exploit Code Downloads   DotCMS 20.11 - Stored Cross-Site Scripting 34 WEB Hardik Solanki
2020-12-02 Exploit Code Downloads   Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Edit Profile 33 WEB Shahrukh Iqbal Mirza
2020-12-02 Exploit Code Downloads   Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Add Artwork 38 WEB Shahrukh Iqbal Mirza
2020-12-02 Exploit Code Downloads   Employee Record Management System 1.1 - Login Bypass SQL Injection 29 WEB Anurag Kumar
2020-12-02 Exploit Code Downloads   WonderCMS 3.1.3 - 'Menu' Persistent Cross-Site Scripting 28 WEB Hemant Patidar
2020-12-02 Exploit Code Downloads   Local Service Search Engine Management System 1.0 - SQLi Authentication Bypass 31 WEB Aditya Wakhlu
2020-12-02 Exploit Code Downloads   Online News Portal System 1.0 - 'Title' Stored Cross Site Scripting 30 WEB Parshwa Bhavsar
2020-12-02 Exploit Code Downloads   Bakeshop Online Ordering System 1.0 - 'Owner' Persistent Cross-site scripting 28 WEB Parshwa Bhavsar
2020-12-02 Exploit Code Downloads   NewsLister - Authenticated Persistent Cross-Site Scripting 33 WEB Emre Aslan
2020-12-02 Exploit Code Downloads   Online Voting System Project in PHP - 'username' Persistent Cross-Site Scripting 27 WEB Sagar Banwa
2020-12-02 Exploit Code Downloads   PRTG Network Monitor 20.4.63.1412 - 'maps' Stored XSS 35 WEB Amin Rawah
2020-12-02 Exploit Code Downloads   WonderCMS 3.1.3 - Authenticated Remote Code Execution 38 WEB zetc0de