2025-04-11
|
|
ABB Cylon FLXeon 9.3.4 - Remote Code Execution (Authenticated)
|
3 |
WEB
|
LiquidWorm
|
2025-04-11
|
|
GeoVision GV-ASManager 6.1.1.0 - CSRF
|
3 |
WEB
|
Giorgi Dograshvili
|
2025-04-11
|
|
ABB Cylon FLXeon 9.3.4 - Remote Code Execution (RCE)
|
5 |
WEB
|
LiquidWorm
|
2025-04-11
|
|
WebFileSys 2.31.0 - Directory Path Traversal
|
7 |
WEB
|
Korn Chaisuwan_ Charanin Thongudom_ Pongtorn Angsu
|
2025-04-11
|
|
ABB Cylon FLXeon 9.3.4 - WebSocket Command Spawning
|
5 |
WEB
|
LiquidWorm
|
2025-04-11
|
|
Netman 204 - Remote command without authentication
|
4 |
WEB
|
Parsa Rezaie Khiabanloo
|
2025-04-11
|
|
ABB Cylon Aspect 3.08.02 - PHP Session Fixation
|
6 |
WEB
|
LiquidWorm
|
2025-04-11
|
|
CMU CERT/CC VINCE 2.0.6 - Stored XSS
|
5 |
WEB
|
LiquidWorm
|
2025-04-11
|
|
ABB Cylon FLXeon 9.3.4 - Cross-Site Request Forgery
|
5 |
WEB
|
LiquidWorm
|
2025-04-11
|
|
ABB Cylon FLXeon 9.3.4 - Default Credentials
|
3 |
WEB
|
LiquidWorm
|
2025-04-11
|
|
ABB Cylon FLXeon 9.3.4 - System Logs Information Disclosure
|
4 |
WEB
|
LiquidWorm
|
2025-04-11
|
|
Nagios Log Server 2024R1.3.1 - API Key Exposure
|
4 |
WEB
|
Seth Kraft
|
2025-04-11
|
|
phpIPAM 1.6 - Reflected Cross Site Scripting (XSS)
|
5 |
WEB
|
CodeSecLab
|
2025-04-11
|
|
MiniCMS 1.1 - Cross Site Scripting (XSS)
|
5 |
WEB
|
CodeSecLab
|
2025-04-11
|
|
NEWS-BUZZ News Management System 1.0 - SQL Injection
|
5 |
WEB
|
egsec
|
2025-04-11
|
|
Roundcube Webmail 1.6.6 - Stored Cross Site Scripting (XSS)
|
4 |
WEB
|
AmirZargham
|
2025-04-11
|
|
CyberPanel 2.3.6 - Remote Code Execution (RCE)
|
5 |
WEB
|
Luka Petrovic (refr4g)
|
2025-04-11
|
|
LearnPress WordPress LMS Plugin 4.2.7 - SQL Injection
|
4 |
WEB
|
Francisco Moraga (BTshell)
|
2025-04-11
|
|
MagnusSolution magnusbilling 7.3.0 - Command Injection
|
4 |
WEB
|
CodeSecLab
|
2025-04-11
|
|
RosarioSIS 7.6 - SQL Injection
|
4 |
WEB
|
CodeSecLab
|
2025-04-11
|
|
GetSimpleCMS 3.3.16 - Remote Code Execution (RCE)
|
4 |
WEB
|
CodeSecLab
|
2025-04-11
|
|
Gnuboard5 5.3.2.8 - SQL Injection
|
4 |
WEB
|
CodeSecLab
|
2025-04-11
|
|
flatCore 1.5 - Cross Site Request Forgery (CSRF)
|
4 |
WEB
|
CodeSecLab
|
2025-04-10
|
|
flatCore 1.5.5 - Arbitrary File Upload
|
4 |
WEB
|
CodeSecLab
|
2025-04-10
|
|
AquilaCMS 1.409.20 - Remote Command Execution (RCE)
|
3 |
WEB
|
Eui Chul Chung
|
2025-04-10
|
|
Typecho 1.3.0 - Stored Cross-Site Scripting (XSS)
|
4 |
WEB
|
cyberaz0r
|
2025-04-10
|
|
Typecho 1.3.0 - Race Condition
|
5 |
WEB
|
cyberaz0r
|
2025-04-10
|
|
Cosy+ firmware 21.2s7 - Command Injection
|
4 |
WEB
|
CodeB0ss
|
2025-04-10
|
|
CodeAstro Online Railway Reservation System 1.0 - Cross Site Scripting (XSS)
|
4 |
WEB
|
Raj Nandi
|
2025-04-10
|
|
PandoraFMS 7.0NG.772 - SQL Injection
|
3 |
WEB
|
Osama Yousef
|
2025-04-10
|
|
Centron 19.04 - Remote Code Execution (RCE)
|
5 |
WEB
|
Starry Sky
|
2025-04-10
|
|
Cisco Smart Software Manager On-Prem 8-202206 - Account Takeover
|
4 |
WEB
|
Mohammed Adel
|
2025-04-10
|
|
Feng Office 3.11.1.2 - SQL Injection
|
5 |
WEB
|
Andrey Stoykov
|
2025-04-09
|
|
PZ Frontend Manager WordPress Plugin 1.0.5 - Cross Site Request Forgery (CSRF)
|
4 |
WEB
|
Vuln Seeker Cybersecurity Team
|
2025-04-09
|
|
ChurchCRM 5.9.1 - SQL Injection
|
5 |
WEB
|
Sanan Qasimzada
|
2025-04-09
|
|
Intelight X-1L Traffic controller Maxtime 1.9.6 - Remote Code Execution (RCE)
|
5 |
WEB
|
Andrew Lemon/Red Threat
|
2025-04-09
|
|
ResidenceCMS 2.10.1 - Stored Cross-Site Scripting (XSS)
|
5 |
WEB
|
Jeremia Geraldi Sihombing
|
2025-04-09
|
|
Apache HugeGraph Server 1.2.0 - Remote Code Execution (RCE)
|
4 |
WEB
|
Yesith Alvarez
|
2025-04-09
|
|
Zohocorp ManageEngine ADManager Plus 7210 - Elevation of Privilege
|
6 |
WEB
|
Metin Yunus Kandemir
|
2025-04-09
|
|
Anchor CMS 0.12.7 - Stored Cross Site Scripting (XSS)
|
4 |
WEB
|
Ahmet Ümit BAYRAM
|
2025-04-09
|
|
Artica Proxy 4.50 - Remote Code Execution (RCE)
|
5 |
WEB
|
Madan
|
2025-04-09
|
|
DocsGPT 0.12.0 - Remote Code Execution
|
5 |
WEB
|
Shreyas Malhotra
|
2025-04-08
|
|
GeoVision GV-ASManager 6.1.0.0 - Information Disclosure
|
6 |
WEB
|
Giorgi Dograshvili
|
2025-04-08
|
|
jQuery 3.3.1 - Prototype Pollution & XSS Exploit
|
5 |
WEB
|
xOryus
|
2025-04-08
|
|
Jasmin Ransomware - Arbitrary File Download (Authenticated)
|
4 |
WEB
|
bRpsd
|
2025-04-08
|
|
UNA CMS 14.0.0-RC - PHP Object Injection
|
5 |
WEB
|
Egidio Romano
|
2025-04-08
|
|
Nagios Xi 5.6.6 - Authenticated Remote Code Execution (RCE)
|
5 |
WEB
|
Calil Khalil
|
2025-04-08
|
|
WordPress User Registration & Membership Plugin 4.1.1 - Unauthenticated Privilege Escalation
|
5 |
WEB
|
Al Baradi Joy
|
2025-04-07
|
|
XWiki Platform 15.10.10 - Remote Code Execution
|
6 |
WEB
|
Al Baradi Joy
|
2025-04-07
|
|
YesWiki 4.5.1 - Unauthenticated Path Traversal
|
6 |
WEB
|
Al Baradi Joy
|
2025-04-07
|
|
Apache Tomcat 11.0.3 - Remote Code Execution
|
7 |
WEB
|
Al Baradi Joy
|
2025-04-06
|
|
Reservit Hotel 2.1 - Stored Cross-Site Scripting (XSS)
|
3 |
WEB
|
Ilteris Kaan Pehlivan
|
2025-04-06
|
|
WBCE CMS 1.6.3 - Authenticated Remote Code Execution (RCE)
|
4 |
WEB
|
Swammers8
|
2025-04-06
|
|
Backup and Staging by WP Time Capsule 1.22.21 - Unauthenticated Arbitrary File Upload
|
6 |
WEB
|
Al Baradi Joy
|
2025-04-06
|
|
Watcharr 1.43.0 - Remote Code Execution (RCE)
|
5 |
WEB
|
Suphawith Phusanbai
|
2025-04-06
|
|
Palo Alto Networks Expedition 1.2.90.1 - Admin Account Takeover
|
5 |
WEB
|
ByteHunter
|
2025-04-06
|
|
DataEase 2.4.0 - Database Configuration Information Exposure
|
4 |
WEB
|
ByteHunter
|
2025-04-05
|
|
Royal Elementor Addons and Templates 1.3.78 - Unauthenticated Arbitrary File Upload
|
5 |
WEB
|
4m3rr0r
|
2025-04-05
|
|
Exclusive Addons for Elementor 2.6.9 - Stored Cross-Site Scripting (XSS)
|
6 |
WEB
|
Al Baradi Joy
|
2025-04-05
|
|
Kubio AI Page Builder 2.5.1 - Local File Inclusion (LFI)
|
5 |
WEB
|
4m3rr0r
|
2025-04-05
|
|
Next.js Middleware 15.2.2 - Authorization Bypass
|
6 |
WEB
|
kOaDT
|
2025-04-05
|
|
IBM Security Verify Access 10.0.0 - Open Redirect during OAuth Flow
|
5 |
WEB
|
Giulio Garzia
|
2025-04-03
|
|
AppSmith 1.47 - Remote Code Execution (RCE)
|
4 |
WEB
|
Nishanth Gaddam
|
2025-04-03
|
|
Nagios Log Server 2024R1.3.1 - Stored XSS
|
7 |
WEB
|
Seth Kraft
|
2025-04-03
|
|
ABB Cylon Aspect 3.07.02 - File Disclosure
|
5 |
WEB
|
LiquidWorm
|
2025-04-03
|
|
Webmin Usermin 2.100 - Username Enumeration
|
6 |
WEB
|
Kjesper
|
2025-04-03
|
|
ABB Cylon Aspect 3.07.01 - Hard-coded Default Credentials
|
3 |
WEB
|
LiquidWorm
|
2025-04-02
|
|
ABB Cylon Aspect 3.08.01 - Arbitrary File Delete
|
5 |
WEB
|
LiquidWorm
|
2025-04-02
|
|
ABB Cylon Aspect 3.08.01 - Remote Code Execution (RCE)
|
4 |
WEB
|
LiquidWorm
|
2025-04-02
|
|
Elaine's Realtime CRM Automation 6.18.17 - Reflected XSS
|
6 |
WEB
|
arfaoui haythem
|
2025-03-29
|
|
XWiki Standard 14.10 - Remote Code Execution (RCE)
|
7 |
WEB
|
Mehran Seifalinia
|
2025-03-28
|
|
Progress Telerik Report Server 2024 Q1 (10.0.24.305) - Authentication Bypass
|
6 |
WEB
|
VeryLazyTech
|
2025-03-28
|
|
Rejetto HTTP File Server 2.3m - Remote Code Execution (RCE)
|
5 |
WEB
|
VeryLazyTech
|
2025-03-28
|
|
Sonatype Nexus Repository 3.53.0-01 - Path Traversal
|
5 |
WEB
|
VeryLazyTech
|
2025-03-28
|
|
CodeCanyon RISE CRM 3.7.0 - SQL Injection
|
6 |
WEB
|
Jobyer From Bytium
|
2025-03-28
|
|
Litespeed Cache 6.5.0.1 - Authentication Bypass
|
4 |
WEB
|
Caner Tercan
|
2025-03-27
|
|
X2CRM 8.5 - Stored Cross-Site Scripting (XSS)
|
5 |
WEB
|
Okan Kurtulus
|
2025-03-27
|
|
KubeSphere 3.4.0 - Insecure Direct Object Reference (IDOR)
|
4 |
WEB
|
Okan Kurtulus
|
2025-03-27
|
|
MoziloCMS 3.0 - Remote Code Execution (RCE)
|
5 |
WEB
|
Olakojo Olaoluwa Joshua
|
2025-03-22
|
|
TeamPass 3.0.0.21 - SQL Injection
|
6 |
WEB
|
Max Meyer - Rivendell
|
2025-03-21
|
|
Jasmin Ransomware - SQL Injection Login Bypass
|
7 |
WEB
|
Buğra Enis Dönmez
|
2025-03-20
|
|
FluxBB 1.5.11 - Stored Cross-Site Scripting (XSS)
|
4 |
WEB
|
Chokri Hammedi
|
2025-03-20
|
|
JUX Real Estate 3.4.0 - SQL Injection
|
4 |
WEB
|
CraCkEr
|
2025-03-19
|
|
Gitea 1.24.0 - HTML Injection
|
6 |
WEB
|
Mikail KOCADAĞ
|
2025-03-19
|
|
TranzAxis 3.2.41.10.26 - Stored Cross-Site Scripting (XSS) (Authenticated)
|
4 |
WEB
|
ABABANK REDTEAM
|
2025-03-19
|
|
Extensive VC Addons for WPBakery page builder 1.9.0 - Remote Code Execution (RCE)
|
5 |
WEB
|
Ravina
|
2025-03-19
|
|
Loaded Commerce 6.6 - Client-Side Template Injection(CSTI)
|
5 |
WEB
|
tmrswrr
|
2025-03-18
|
|
Chamilo LMS 1.11.24 - Remote Code Execution (RCE)
|
5 |
WEB
|
Mohamed Kamel BOUZEKRIA
|
2024-11-15
|
|
SOPlanning 1.52.01 (Simple Online Planning Tool) - Remote Code Execution (RCE) (Authenticated)
|
4 |
WEB
|
cybersploit
|
2024-10-01
|
|
reNgine 2.2.0 - Command Injection (Authenticated)
|
5 |
WEB
|
Caner Tercan
|
2024-10-01
|
|
openSIS 9.1 - SQLi (Authenticated)
|
4 |
WEB
|
Devrim Dıragumandan
|
2024-10-01
|
|
dizqueTV 1.5.3 - Remote Code Execution (RCE)
|
6 |
WEB
|
Ahmed Said Saud Al-Busaidi
|
2024-08-28
|
|
NoteMark < 0.13.0 - Stored XSS
|
5 |
WEB
|
Alessio Romano (sfoffo)
|
2024-08-28
|
|
Gitea 1.22.0 - Stored XSS
|
9 |
WEB
|
Catalin Iovita_ Alexandru Postolache
|
2024-08-28
|
|
Invesalius3 - Remote Code Execution
|
22 |
WEB
|
Alessio Romano (sfoffo)_ Riccardo Degli Esposti (p
|
2024-08-24
|
|
Aurba 501 - Authenticated RCE
|
22 |
WEB
|
Hosein Vita
|
2024-08-24
|
|
HughesNet HT2000W Satellite Modem - Password Reset
|
6 |
WEB
|
Simon Greenblatt
|
2024-08-24
|
|
Elber Wayber Analog/Digital Audio STL 4.00 - Device Config Disclosure
|
5 |
WEB
|
LiquidWorm
|
2024-08-24
|
|
Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
|
5 |
WEB
|
LiquidWorm
|
2024-08-24
|
|
Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
|
4 |
WEB
|
LiquidWorm
|
2024-08-24
|
|
Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
|
5 |
WEB
|
LiquidWorm
|
2024-08-23
|
|
Helpdeskz v2.0.2 - Stored XSS
|
4 |
WEB
|
Md. Sadikul Islam
|
2024-08-23
|
|
Calibre-web 0.6.21 - Stored XSS
|
6 |
WEB
|
Catalin Iovita_ Alexandru Postolache
|
2024-08-04
|
|
Devika v1 - Path Traversal via 'snapshot_path'
|
8 |
WEB
|
Alperen Ergel
|
2024-08-04
|
|
Ivanti vADC 9.9 - Authentication Bypass
|
6 |
WEB
|
ohnoisploited
|
2024-07-01
|
|
Xhibiter NFT Marketplace 1.10.2 - SQL Injection
|
7 |
WEB
|
Sohel Yousef
|
2024-07-01
|
|
Azon Dominator Affiliate Marketing Script - SQL Injection
|
5 |
WEB
|
Buğra Enis Dönmez
|
2024-07-01
|
|
Microweber 2.0.15 - Stored XSS
|
5 |
WEB
|
tmrswrr
|
2024-07-01
|
|
Customer Support System 1.0 - Stored XSS
|
3 |
WEB
|
Geraldo Alcantara
|
2024-06-26
|
|
Automad 2.0.0-alpha.4 - Stored Cross-Site Scripting (XSS)
|
4 |
WEB
|
Jerry Thomas
|
2024-06-26
|
|
SolarWinds Platform 2024.1 SR1 - Race Condition
|
3 |
WEB
|
Elhussain Fathy
|
2024-06-26
|
|
Flatboard 3.2 - Stored Cross-Site Scripting (XSS) (Authenticated)
|
3 |
WEB
|
tmrswrr
|
2024-06-26
|
|
Poultry Farm Management System v1.0 - Remote Code Execution (RCE)
|
2 |
WEB
|
Jerry Thomas
|
2024-06-14
|
|
Boelter Blue System Management 1.3 - SQL Injection
|
4 |
WEB
|
CBKB
|
2024-06-14
|
|
WP-UserOnline 2.88.0 - Stored Cross Site Scripting (XSS) (Authenticated)
|
3 |
WEB
|
Onur Göğebakan
|
2024-06-14
|
|
PHP < 8.3.8 - Remote Code Execution (Unauthenticated) (Windows)
|
4 |
WEB
|
Yesith Alvarez
|
2024-06-14
|
|
AEGON LIFE v1.0 Life Insurance Management System - SQL injection vulnerability.
|
5 |
WEB
|
Aslam Anwar Mahimkar
|
2024-06-14
|
|
XMB 1.9.12.06 - Stored XSS
|
3 |
WEB
|
Chokri Hammedi
|
2024-06-14
|
|
Carbon Forum 5.9.0 - Stored XSS
|
3 |
WEB
|
Chokri Hammedi
|
2024-06-14
|
|
AEGON LIFE v1.0 Life Insurance Management System - Stored cross-site scripting (XSS)
|
2 |
WEB
|
Aslam Anwar Mahimkar
|
2024-06-03
|
|
appRain CMF 4.0.5 - Remote Code Execution (RCE) (Authenticated)
|
12 |
WEB
|
Ahmet Ümit BAYRAM
|
2024-06-03
|
|
CMSimple 5.15 - Remote Code Execution (RCE) (Authenticated)
|
4 |
WEB
|
Ahmet Ümit BAYRAM
|
2024-06-03
|
|
WBCE CMS v1.6.2 - Remote Code Execution (RCE)
|
5 |
WEB
|
Ahmet Ümit BAYRAM
|
2024-06-03
|
|
Monstra CMS 3.0.4 - Remote Code Execution (RCE)
|
6 |
WEB
|
Ahmet Ümit BAYRAM
|
2024-06-03
|
|
Dotclear 2.29 - Remote Code Execution (RCE)
|
4 |
WEB
|
Ahmet Ümit BAYRAM
|