2025-04-06
|
|
WBCE CMS 1.6.3 - Authenticated Remote Code Execution (RCE)
|
0 |
WEB
|
Swammers8
|
2025-04-06
|
|
Backup and Staging by WP Time Capsule 1.22.21 - Unauthenticated Arbitrary File Upload
|
0 |
WEB
|
Al Baradi Joy
|
2025-04-06
|
|
Watcharr 1.43.0 - Remote Code Execution (RCE)
|
0 |
WEB
|
Suphawith Phusanbai
|
2025-04-06
|
|
Palo Alto Networks Expedition 1.2.90.1 - Admin Account Takeover
|
0 |
WEB
|
ByteHunter
|
2025-04-06
|
|
DataEase 2.4.0 - Database Configuration Information Exposure
|
0 |
WEB
|
ByteHunter
|
2025-04-05
|
|
Royal Elementor Addons and Templates 1.3.78 - Unauthenticated Arbitrary File Upload
|
0 |
WEB
|
4m3rr0r
|
2025-04-05
|
|
Exclusive Addons for Elementor 2.6.9 - Stored Cross-Site Scripting (XSS)
|
0 |
WEB
|
Al Baradi Joy
|
2025-04-05
|
|
Kubio AI Page Builder 2.5.1 - Local File Inclusion (LFI)
|
0 |
WEB
|
4m3rr0r
|
2025-04-05
|
|
Next.js Middleware 15.2.2 - Authorization Bypass
|
0 |
WEB
|
kOaDT
|
2025-04-05
|
|
IBM Security Verify Access 10.0.0 - Open Redirect during OAuth Flow
|
0 |
WEB
|
Giulio Garzia
|
2025-04-03
|
|
AppSmith 1.47 - Remote Code Execution (RCE)
|
1 |
WEB
|
Nishanth Gaddam
|
2025-04-03
|
|
Nagios Log Server 2024R1.3.1 - Stored XSS
|
1 |
WEB
|
Seth Kraft
|
2025-04-03
|
|
ABB Cylon Aspect 3.07.02 - File Disclosure
|
1 |
WEB
|
LiquidWorm
|
2025-04-03
|
|
Webmin Usermin 2.100 - Username Enumeration
|
1 |
WEB
|
Kjesper
|
2025-04-03
|
|
ABB Cylon Aspect 3.07.01 - Hard-coded Default Credentials
|
0 |
WEB
|
LiquidWorm
|
2025-04-02
|
|
ABB Cylon Aspect 3.08.01 - Arbitrary File Delete
|
1 |
WEB
|
LiquidWorm
|
2025-04-02
|
|
ABB Cylon Aspect 3.08.01 - Remote Code Execution (RCE)
|
1 |
WEB
|
LiquidWorm
|
2025-04-02
|
|
Elaine's Realtime CRM Automation 6.18.17 - Reflected XSS
|
0 |
WEB
|
arfaoui haythem
|
2025-03-29
|
|
XWiki Standard 14.10 - Remote Code Execution (RCE)
|
1 |
WEB
|
Mehran Seifalinia
|
2025-03-28
|
|
Progress Telerik Report Server 2024 Q1 (10.0.24.305) - Authentication Bypass
|
1 |
WEB
|
VeryLazyTech
|
2025-03-28
|
|
Rejetto HTTP File Server 2.3m - Remote Code Execution (RCE)
|
1 |
WEB
|
VeryLazyTech
|
2025-03-28
|
|
Sonatype Nexus Repository 3.53.0-01 - Path Traversal
|
1 |
WEB
|
VeryLazyTech
|
2025-03-28
|
|
CodeCanyon RISE CRM 3.7.0 - SQL Injection
|
1 |
WEB
|
Jobyer From Bytium
|
2025-03-28
|
|
Litespeed Cache 6.5.0.1 - Authentication Bypass
|
1 |
WEB
|
Caner Tercan
|
2025-03-27
|
|
X2CRM 8.5 - Stored Cross-Site Scripting (XSS)
|
1 |
WEB
|
Okan Kurtulus
|
2025-03-27
|
|
KubeSphere 3.4.0 - Insecure Direct Object Reference (IDOR)
|
1 |
WEB
|
Okan Kurtulus
|
2025-03-27
|
|
MoziloCMS 3.0 - Remote Code Execution (RCE)
|
0 |
WEB
|
Olakojo Olaoluwa Joshua
|
2025-03-22
|
|
TeamPass 3.0.0.21 - SQL Injection
|
1 |
WEB
|
Max Meyer - Rivendell
|
2025-03-21
|
|
Jasmin Ransomware - SQL Injection Login Bypass
|
1 |
WEB
|
Buğra Enis Dönmez
|
2025-03-20
|
|
FluxBB 1.5.11 - Stored Cross-Site Scripting (XSS)
|
1 |
WEB
|
Chokri Hammedi
|
2025-03-20
|
|
JUX Real Estate 3.4.0 - SQL Injection
|
0 |
WEB
|
CraCkEr
|
2025-03-19
|
|
Gitea 1.24.0 - HTML Injection
|
1 |
WEB
|
Mikail KOCADAĞ
|
2025-03-19
|
|
TranzAxis 3.2.41.10.26 - Stored Cross-Site Scripting (XSS) (Authenticated)
|
1 |
WEB
|
ABABANK REDTEAM
|
2025-03-19
|
|
Extensive VC Addons for WPBakery page builder 1.9.0 - Remote Code Execution (RCE)
|
1 |
WEB
|
Ravina
|
2025-03-19
|
|
Loaded Commerce 6.6 - Client-Side Template Injection(CSTI)
|
1 |
WEB
|
tmrswrr
|
2025-03-18
|
|
Chamilo LMS 1.11.24 - Remote Code Execution (RCE)
|
1 |
WEB
|
Mohamed Kamel BOUZEKRIA
|
2024-11-15
|
|
SOPlanning 1.52.01 (Simple Online Planning Tool) - Remote Code Execution (RCE) (Authenticated)
|
1 |
WEB
|
cybersploit
|
2024-10-01
|
|
reNgine 2.2.0 - Command Injection (Authenticated)
|
1 |
WEB
|
Caner Tercan
|
2024-10-01
|
|
openSIS 9.1 - SQLi (Authenticated)
|
1 |
WEB
|
Devrim Dıragumandan
|
2024-10-01
|
|
dizqueTV 1.5.3 - Remote Code Execution (RCE)
|
0 |
WEB
|
Ahmed Said Saud Al-Busaidi
|
2024-08-28
|
|
NoteMark < 0.13.0 - Stored XSS
|
1 |
WEB
|
Alessio Romano (sfoffo)
|
2024-08-28
|
|
Gitea 1.22.0 - Stored XSS
|
1 |
WEB
|
Catalin Iovita_ Alexandru Postolache
|
2024-08-28
|
|
Invesalius3 - Remote Code Execution
|
4 |
WEB
|
Alessio Romano (sfoffo)_ Riccardo Degli Esposti (p
|
2024-08-24
|
|
Aurba 501 - Authenticated RCE
|
1 |
WEB
|
Hosein Vita
|
2024-08-24
|
|
HughesNet HT2000W Satellite Modem - Password Reset
|
1 |
WEB
|
Simon Greenblatt
|
2024-08-24
|
|
Elber Wayber Analog/Digital Audio STL 4.00 - Device Config Disclosure
|
1 |
WEB
|
LiquidWorm
|
2024-08-24
|
|
Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
|
0 |
WEB
|
LiquidWorm
|
2024-08-24
|
|
Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
|
1 |
WEB
|
LiquidWorm
|
2024-08-24
|
|
Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
|
1 |
WEB
|
LiquidWorm
|
2024-08-23
|
|
Helpdeskz v2.0.2 - Stored XSS
|
1 |
WEB
|
Md. Sadikul Islam
|
2024-08-23
|
|
Calibre-web 0.6.21 - Stored XSS
|
1 |
WEB
|
Catalin Iovita_ Alexandru Postolache
|
2024-08-04
|
|
Devika v1 - Path Traversal via 'snapshot_path'
|
1 |
WEB
|
Alperen Ergel
|
2024-08-04
|
|
Ivanti vADC 9.9 - Authentication Bypass
|
1 |
WEB
|
ohnoisploited
|
2024-07-01
|
|
Xhibiter NFT Marketplace 1.10.2 - SQL Injection
|
1 |
WEB
|
Sohel Yousef
|
2024-07-01
|
|
Azon Dominator Affiliate Marketing Script - SQL Injection
|
1 |
WEB
|
Buğra Enis Dönmez
|
2024-07-01
|
|
Microweber 2.0.15 - Stored XSS
|
1 |
WEB
|
tmrswrr
|
2024-07-01
|
|
Customer Support System 1.0 - Stored XSS
|
0 |
WEB
|
Geraldo Alcantara
|
2024-06-26
|
|
Automad 2.0.0-alpha.4 - Stored Cross-Site Scripting (XSS)
|
1 |
WEB
|
Jerry Thomas
|
2024-06-26
|
|
SolarWinds Platform 2024.1 SR1 - Race Condition
|
0 |
WEB
|
Elhussain Fathy
|
2024-06-26
|
|
Flatboard 3.2 - Stored Cross-Site Scripting (XSS) (Authenticated)
|
0 |
WEB
|
tmrswrr
|
2024-06-26
|
|
Poultry Farm Management System v1.0 - Remote Code Execution (RCE)
|
0 |
WEB
|
Jerry Thomas
|
2024-06-14
|
|
Boelter Blue System Management 1.3 - SQL Injection
|
0 |
WEB
|
CBKB
|
2024-06-14
|
|
WP-UserOnline 2.88.0 - Stored Cross Site Scripting (XSS) (Authenticated)
|
0 |
WEB
|
Onur Göğebakan
|
2024-06-14
|
|
PHP < 8.3.8 - Remote Code Execution (Unauthenticated) (Windows)
|
0 |
WEB
|
Yesith Alvarez
|
2024-06-14
|
|
AEGON LIFE v1.0 Life Insurance Management System - SQL injection vulnerability.
|
0 |
WEB
|
Aslam Anwar Mahimkar
|
2024-06-14
|
|
XMB 1.9.12.06 - Stored XSS
|
0 |
WEB
|
Chokri Hammedi
|
2024-06-14
|
|
Carbon Forum 5.9.0 - Stored XSS
|
0 |
WEB
|
Chokri Hammedi
|
2024-06-14
|
|
AEGON LIFE v1.0 Life Insurance Management System - Stored cross-site scripting (XSS)
|
0 |
WEB
|
Aslam Anwar Mahimkar
|
2024-06-03
|
|
appRain CMF 4.0.5 - Remote Code Execution (RCE) (Authenticated)
|
0 |
WEB
|
Ahmet Ümit BAYRAM
|
2024-06-03
|
|
CMSimple 5.15 - Remote Code Execution (RCE) (Authenticated)
|
0 |
WEB
|
Ahmet Ümit BAYRAM
|
2024-06-03
|
|
WBCE CMS v1.6.2 - Remote Code Execution (RCE)
|
0 |
WEB
|
Ahmet Ümit BAYRAM
|
2024-06-03
|
|
Monstra CMS 3.0.4 - Remote Code Execution (RCE)
|
0 |
WEB
|
Ahmet Ümit BAYRAM
|
2024-06-03
|
|
Dotclear 2.29 - Remote Code Execution (RCE)
|
0 |
WEB
|
Ahmet Ümit BAYRAM
|
2024-06-03
|
|
Serendipity 2.5.0 - Remote Code Execution (RCE)
|
0 |
WEB
|
Ahmet Ümit BAYRAM
|
2024-06-03
|
|
Sitefinity 15.0 - Cross-Site Scripting (XSS)
|
0 |
WEB
|
Aldi Saputra Wahyudi
|
2024-06-01
|
|
FreePBX 16 - Remote Code Execution (RCE) (Authenticated)
|
0 |
WEB
|
Cold z3ro
|
2024-06-01
|
|
Akaunting 3.1.8 - Server-Side Template Injection (SSTI)
|
0 |
WEB
|
tmrswrr
|
2024-05-31
|
|
Check Point Security Gateway - Information Disclosure (Unauthenticated)
|
0 |
WEB
|
Yesith Alvarez
|
2024-05-31
|
|
Aquatronica Control System 5.1.6 - Information Disclosure
|
0 |
WEB
|
LiquidWorm
|
2024-05-31
|
|
changedetection < 0.45.20 - Remote Code Execution (RCE)
|
0 |
WEB
|
Zach Crosman (zcrosman)
|
2024-05-31
|
|
ElkArte Forum 1.1.9 - Remote Code Execution (RCE) (Authenticated)
|
0 |
WEB
|
tmrswrr
|
2024-05-31
|
|
iMLog < 1.307 - Persistent Cross Site Scripting (XSS)
|
1 |
WEB
|
Gabriel Felipe
|
2024-05-31
|
|
BWL Advanced FAQ Manager 2.0.3 - Authenticated SQL Injection
|
1 |
WEB
|
Ivan Spiridonov
|
2024-05-19
|
|
htmlLawed 1.2.5 - Remote Code Execution (RCE)
|
1 |
WEB
|
Miguel Redondo
|
2024-05-19
|
|
PopojiCMS 2.0.1 - Remote Command Execution (RCE)
|
1 |
WEB
|
Ahmet Ümit BAYRAM
|
2024-05-19
|
|
Backdrop CMS 1.27.1 - Authenticated Remote Command Execution (RCE)
|
0 |
WEB
|
Ahmet Ümit BAYRAM
|
2024-05-19
|
|
Apache OFBiz 18.12.12 - Directory Traversal
|
1 |
WEB
|
Abdualhadi khalifa
|
2024-05-19
|
|
Wordpress Theme XStore 9.3.8 - SQLi
|
1 |
WEB
|
Abdualhadi khalifa
|
2024-05-19
|
|
Rocket LMS 1.9 - Persistent Cross Site Scripting (XSS)
|
1 |
WEB
|
Sergio Medeiros
|
2024-05-13
|
|
Prison Management System - SQL Injection Authentication Bypass
|
1 |
WEB
|
Sanjay Singh
|
2024-05-13
|
|
PyroCMS v3.0.1 - Stored XSS
|
0 |
WEB
|
tmrswrr
|
2024-05-13
|
|
CE Phoenix Version 1.0.8.20 - Stored XSS
|
0 |
WEB
|
tmrswrr
|
2024-05-13
|
|
Leafpub 1.1.9 - Stored Cross-Site Scripting (XSS)
|
1 |
WEB
|
Ahmet Ümit BAYRAM
|
2024-05-13
|
|
Chyrp 2.5.2 - Stored Cross-Site Scripting (XSS)
|
1 |
WEB
|
Ahmet Ümit BAYRAM
|
2024-05-13
|
|
Apache mod_proxy_cluster 1.2.6 - Stored XSS
|
1 |
WEB
|
Mohamed Mounir Boudjema
|
2024-05-08
|
|
iboss Secure Web Gateway - Stored Cross-Site Scripting (XSS)
|
1 |
WEB
|
modrnProph3t
|
2024-05-08
|
|
Clinic Queuing System 1.0 - RCE
|
1 |
WEB
|
Juan Marco Sanchez
|
2024-05-04
|
|
Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link - Device Config Disclosure
|
1 |
WEB
|
LiquidWorm
|
2024-05-04
|
|
Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link - Authentication Bypass
|
1 |
WEB
|
LiquidWorm
|
2024-05-04
|
|
Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 - Device Config Disclosure
|
0 |
WEB
|
LiquidWorm
|
2024-05-04
|
|
Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 - Authentication Bypass
|
0 |
WEB
|
LiquidWorm
|
2024-05-04
|
|
Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 - Device Config Disclosure
|
0 |
WEB
|
LiquidWorm
|
2024-05-04
|
|
Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 - Authentication Bypass
|
0 |
WEB
|
LiquidWorm
|
2024-04-21
|
|
Flowise 1.6.5 - Authentication Bypass
|
0 |
WEB
|
Maerifat Majeed
|
2024-04-21
|
|
Laravel Framework 11 - Credential Leakage
|
0 |
WEB
|
Huseein Amer
|
2024-04-21
|
|
SofaWiki 3.9.2 - Remote Command Execution (RCE) (Authenticated)
|
0 |
WEB
|
Ahmet Ümit BAYRAM
|
2024-04-21
|
|
Wordpress Plugin Background Image Cropper v1.2 - Remote Code Execution
|
0 |
WEB
|
Milad karimi
|
2024-04-21
|
|
FlatPress v1.3 - Remote Command Execution
|
0 |
WEB
|
Ahmet Ümit BAYRAM
|
2024-04-15
|
|
OpenClinic GA 5.247.01 - Path Traversal (Authenticated)
|
1 |
WEB
|
VB
|
2024-04-15
|
|
OpenClinic GA 5.247.01 - Information Disclosure
|
1 |
WEB
|
VB
|
2024-04-15
|
|
Jenkins 2.441 - Local File Inclusion
|
1 |
WEB
|
Matisse Beckandt
|
2024-04-15
|
|
djangorestframework-simplejwt 5.3.1 - Information Disclosure
|
1 |
WEB
|
Dhrumil Mistry
|
2024-04-13
|
|
BMC Compuware iStrobe Web - 20.13 - Pre-auth RCE
|
1 |
WEB
|
trancap
|
2024-04-13
|
|
Stock Management System v1.0 - Unauthenticated SQL Injection
|
1 |
WEB
|
blu3ming
|
2024-04-13
|
|
Online Fire Reporting System OFRS - SQL Injection Authentication Bypass
|
1 |
WEB
|
Diyar Saadi
|
2024-04-13
|
|
Savsoft Quiz v6.0 Enterprise - Stored XSS
|
1 |
WEB
|
Eren Sen
|
2024-04-12
|
|
Wordpress Plugin WP Video Playlist 1.1.1 - Stored Cross-Site Scripting (XSS)
|
1 |
WEB
|
Erdemstar
|
2024-04-12
|
|
WBCE CMS Version 1.6.1 - Remote Command Execution (Authenticated)
|
1 |
WEB
|
tmrswrr
|
2024-04-12
|
|
WBCE 1.6.0 - Unauthenticated SQL injection
|
1 |
WEB
|
young pope
|
2024-04-12
|
|
Moodle 3.10.1 - Authenticated Blind Time-Based SQL Injection - _sort_ parameter
|
1 |
WEB
|
Julio Ángel Ferrari
|
2024-04-12
|
|
PopojiCMS Version 2.0.1 - Remote Command Execution
|
1 |
WEB
|
tmrswrr
|
2024-04-12
|
|
Wordpress Plugin Playlist for Youtube 1.32 - Stored Cross-Site Scripting (XSS)
|
1 |
WEB
|
Erdemstar
|
2024-04-12
|
|
HTMLy Version v2.9.6 - Stored XSS
|
1 |
WEB
|
tmrswrr
|
2024-04-12
|
|
Ray OS v2.6.3 - Command Injection RCE(Unauthorized)
|
1 |
WEB
|
Fire_Wolf
|
2024-04-12
|
|
GUnet OpenEclass E-learning platform 3.15 - 'certbadge.php' Unrestricted File Upload
|
1 |
WEB
|
George Tsimpidas
|