Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2020-12-02 Exploit Code Downloads   WonderCMS 3.1.3 - Authenticated SSRF to Remote Remote Code Execution 27 WEB zetc0de
2020-12-02 Exploit Code Downloads   EgavilanMedia User Registration & Login System with Admin Panel 1.0 - Stored Cross Site Scripting 32 WEB Soushikta Chowdhury
2020-12-02 Exploit Code Downloads   Student Result Management System 1.0 - Authentication Bypass SQL Injection 28 WEB Ritesh Gohil
2020-12-02 Exploit Code Downloads   EgavilanMedia User Registration & Login System with Admin Panel 1.0 - CSRF 34 WEB Hardik Solanki
2020-12-02 Exploit Code Downloads   Under Construction Page with CPanel 1.0 - SQL injection 25 WEB Mayur Parmar
2020-12-02 Exploit Code Downloads   Pharmacy Store Management System 1.0 - 'id' SQL Injection 42 WEB Aydın Baran Ertemir
2020-12-02 Exploit Code Downloads   ILIAS Learning Management System 4.3 - SSRF 30 WEB Dot
2020-12-02 Exploit Code Downloads   Expense Management System - 'description' Stored Cross Site Scripting 30 WEB Nikhil Kumar
2020-12-01 Exploit Code Downloads   Tendenci 12.3.1 - CSV/ Formula Injection 30 WEB Mufaddal Masalawala
2020-12-01 Exploit Code Downloads   Social Networking Site - Authentication Bypass (SQli) 31 WEB gh1mau
2020-12-01 Exploit Code Downloads   Pandora FMS 7.0 NG 749 - Multiple Persistent Cross-Site Scripting Vulnerabilities 31 WEB Matthew Aberegg
2020-12-01 Exploit Code Downloads   Medical Center Portal Management System 1.0 - 'login' SQL Injection 42 WEB Aydın Baran Ertemir
2020-12-01 Exploit Code Downloads   LEPTON CMS 4.7.0 - 'URL' Persistent Cross-Site Scripting 31 WEB Sagar Banwa
2020-12-01 Exploit Code Downloads   Tailor Management System 1.0 - Unrestricted File Upload to Remote Code Execution 32 WEB Saeed Bala Ahmed
2020-12-01 Exploit Code Downloads   Multi Restaurant Table Reservation System 1.0 - Multiple Persistent XSS 31 WEB yunaranyancat
2020-12-01 Exploit Code Downloads   Setelsa Conacwin 3.7.1.2 - Local File Inclusion 33 WEB Bryan Rodriguez Martin
2020-12-01 Exploit Code Downloads   Pharmacy/Medical Store & Sale Point 1.0 - 'email' SQL Injection 33 WEB naivenom
2020-12-01 Exploit Code Downloads   Online Shopping Alphaware 1.0 - Error Based SQL injection 34 WEB Moaaz Taha
2020-12-01 Exploit Code Downloads   Wordpress Plugin EventON Calendar 3.0.5 - Reflected Cross-Site Scripting 31 WEB B3KC4T
2020-12-01 Exploit Code Downloads   Joomla! Component GMapFP 3.5 - Unauthenticated Arbitrary File Upload 43 WEB ThelastVvV
2020-12-01 Exploit Code Downloads   TypeSetter 5.1 - CSRF (Change admin e-mail) 40 WEB Alperen Ergel
2020-11-30 Exploit Code Downloads   Intelbras Router RF 301K 1.1.2 - Authentication Bypass 33 WEB Kaio Amaral
2020-11-30 Exploit Code Downloads   Rejetto HttpFileServer 2.3.x - Remote Command Execution (3) 42 WEB Óscar Andreu
2020-11-30 Exploit Code Downloads   ATX MiniCMTS200a Broadband Gateway 2.0 - Credential Disclosure 40 WEB Zagros Bingol
2020-11-27 Exploit Code Downloads   Best Support System 3.0.4 - 'ticket_body' Persistent XSS (Authenticated) 35 WEB Ex.Mi
2020-11-27 Exploit Code Downloads   ElkarBackup 1.3.3 - 'Policy[name]' and 'Policy[Description]' Stored Cross-site Scripting 38 WEB Vyshnav nk
2020-11-27 Exploit Code Downloads   House Rental 1.0 - 'keywords' SQL Injection 32 WEB boku
2020-11-27 Exploit Code Downloads   Wordpress Theme Accesspress Social Icons 1.7.9 - SQL injection (Authenticated) 33 WEB SunCSR
2020-11-27 Exploit Code Downloads   Moodle 3.8 - Unrestricted File Upload 41 WEB Sirwan Veisi
2020-11-27 Exploit Code Downloads   Acronis Cyber Backup 12.5 Build 16341 - Unauthenticated SSRF 36 WEB Julien Ahrens
2020-11-27 Exploit Code Downloads   Laravel Administrator 4 - Unrestricted File Upload (Authenticated) 36 WEB Xavi Beltran
2020-11-27 Exploit Code Downloads   Ruckus IoT Controller (Ruckus vRIoT) 1.5.1.0.21 - Remote Code Execution 35 WEB Emre SUREN
2020-11-27 Exploit Code Downloads   WonderCMS 3.1.3 - 'uploadFile' Stored Cross-Site Scripting 33 WEB Sun* Cyber Security Research Team
2020-11-27 Exploit Code Downloads   Wordpress Theme Wibar 1.1.8 - 'Brand Component' Stored Cross Site Scripting 40 WEB Ilca Lucian Florin
2020-11-25 Exploit Code Downloads   SyncBreeze 10.0.28 - 'password' Remote Buffer Overflow 40 WEB Abdessalam king
2020-11-25 Exploit Code Downloads   osCommerce 2.3.4.1 - 'title' Persistent Cross-Site Scripting 34 WEB Emre Aslan
2020-11-25 Exploit Code Downloads   WonderCMS 3.1.3 - 'page' Persistent Cross-Site Scripting 31 WEB Mayur Parmar
2020-11-24 Exploit Code Downloads   OpenCart 3.0.3.6 - 'subject' Stored Cross-Site Scripting 31 WEB Hemant Patidar
2020-11-24 Exploit Code Downloads   OpenCart 3.0.3.6 - 'Profile Image' Stored Cross-Site Scripting (Authenticated) 31 WEB Hemant Patidar
2020-11-24 Exploit Code Downloads   Seowon 130-SLC router 1.0.11 - 'ipAddr' RCE (Authenticated) 32 WEB maj0rmil4d
2020-11-24 Exploit Code Downloads   ZeroShell 3.9.0 - 'cgi-bin/kerbynet' Remote Root Command Injection (Metasploit) 30 WEB Giuseppe Fuggiano
2020-11-24 Exploit Code Downloads   Apache OpenMeetings 5.0.0 - 'hostname' Denial of Service 30 WEB SunCSR
2020-11-24 Exploit Code Downloads   nopCommerce Store 4.30 - 'name' Stored Cross-Site Scripting 35 WEB Hemant Patidar
2020-11-23 Exploit Code Downloads   TP-Link TL-WA855RE V5_200415 - Device Reset Auth Bypass 32 WEB malwrforensics
2020-11-23 Exploit Code Downloads   LifeRay 7.2.1 GA2 - Stored XSS 42 WEB 3ndG4me
2020-11-23 Exploit Code Downloads   VTiger v7.0 CRM - 'To' Persistent XSS 34 WEB Vulnerability-Lab
2020-11-20 Exploit Code Downloads   WonderCMS 3.1.3 - 'content' Persistent Cross-Site Scripting 35 WEB Hemant Patidar
2020-11-19 Exploit Code Downloads   Nagios Log Server 2.1.7 - Persistent Cross-Site Scripting 41 WEB Emre ÖVÜNÇ
2020-11-19 Exploit Code Downloads   M/Monit 3.7.4 - Password Disclosure 40 WEB Dolev Farhi
2020-11-19 Exploit Code Downloads   M/Monit 3.7.4 - Privilege Escalation 38 WEB Dolev Farhi
2020-11-19 Exploit Code Downloads   Gemtek WVRTM-127ACN 01.01.02.141 - Authenticated Arbitrary Command Injection 32 WEB Gabriele Zuddas
2020-11-19 Exploit Code Downloads   TestBox CFML Test Framework 4.1.0 - Directory Traversal 36 WEB Darren King
2020-11-19 Exploit Code Downloads   TestBox CFML Test Framework 4.1.0 - Arbitrary File Write and Remote Code Execution 46 WEB Darren King
2020-11-19 Exploit Code Downloads   Gitlab 12.9.0 - Arbitrary File Read (Authenticated) 43 WEB Jasper Rasenberg
2020-11-19 Exploit Code Downloads   Fortinet FortiOS 6.0.4 - Unauthenticated SSL VPN User Password Modification 38 WEB Ricardo Longatto
2020-11-19 Exploit Code Downloads   xuucms 3 - 'keywords' SQL Injection 35 WEB icekam
2020-11-19 Exploit Code Downloads   PESCMS TEAM 2.3.2 - Multiple Reflected XSS 42 WEB icekam
2020-11-18 Exploit Code Downloads   BigBlueButton 2.2.25 - Arbitrary File Disclosure and Server-Side Request Forgery 38 WEB RedTeam Pentesting GmbH
2020-11-18 Exploit Code Downloads   Wordpress Plugin WPForms 1.6.3.1 - Persistent Cross Site Scripting (Authenticated) 37 WEB ZwX
2020-11-17 Exploit Code Downloads   Joomla Plugin Simple Image Gallery Extended (SIGE) 3.5.3 - Multiple Vulnerabilities 34 WEB Vulnerability-Lab
2020-11-17 Exploit Code Downloads   Froxlor Froxlor Server Management Panel 0.10.16 - Persistent Cross-Site Scripting 38 WEB Vulnerability-Lab
2020-11-17 Exploit Code Downloads   WordPress Plugin Buddypress 6.2.0 - Persistent Cross-Site Scripting 36 WEB Vulnerability-Lab
2020-11-17 Exploit Code Downloads   SugarCRM 6.5.18 - Persistent Cross-Site Scripting 35 WEB Vulnerability-Lab
2020-11-17 Exploit Code Downloads   Online Doctor Appointment Booking System PHP and Mysql 1.0 - 'q' SQL Injection 32 WEB Ramil Mustafayev
2020-11-17 Exploit Code Downloads   EgavilanMedia User Registration & Login System with Admin Panel Exploit - SQLi Auth Bypass 35 WEB Kislay Kumar
2020-11-16 Exploit Code Downloads   Car Rental Management System 1.0 - 'car_id' Sql Injection 31 WEB Mehmet Kelepçe
2020-11-16 Exploit Code Downloads   Car Rental Management System 1.0 - Remote Code Execution (Authenticated) 33 WEB Mehmet Kelepçe
2020-11-16 Exploit Code Downloads   PMB 5.6 - 'chemin' Local File Disclosure 29 WEB 41-trk
2020-11-16 Exploit Code Downloads   User Registration & Login and User Management System 2.1 - Login Bypass SQL Injection 28 WEB Mayur Parmar
2020-11-16 Exploit Code Downloads   Water Billing System 1.0 - 'id' SQL Injection (Authenticated) 28 WEB Mehmet Kelepçe
2020-11-16 Exploit Code Downloads   Pandora FMS 7.0 NG 749 - 'CG Items' SQL Injection (Authenticated) 31 WEB Matthew Aberegg
2020-11-13 Exploit Code Downloads   October CMS Build 465 - Arbitrary File Read Exploit (Authenticated) 33 WEB Sivanesh Ashok
2020-11-13 Exploit Code Downloads   OpenCart Theme Journal 3.1.0 - Sensitive Data Exposure 28 WEB Jinson Varghese Behanan
2020-11-13 Exploit Code Downloads   Touchbase.io 1.10 - Stored Cross Site Scripting 30 WEB Simran Sankhala
2020-11-13 Exploit Code Downloads   Apache Tomcat - AJP 'Ghostcat' File Read/Inclusion (Metasploit) 30 WEB SunCSR
2020-11-13 Exploit Code Downloads   Citrix ADC NetScaler - Local File Inclusion (Metasploit) 31 WEB RAMELLA Sebastien
2020-11-13 Exploit Code Downloads   Bludit 3.9.2 - Authentication Bruteforce Bypass (Metasploit) 31 WEB Aporlorxl23
2020-11-13 Exploit Code Downloads   ASUS TM-AC1900 - Arbitrary Command Execution (Metasploit) 29 WEB b1ack0wl
2020-11-12 Exploit Code Downloads   Wordpress Plugin Good LMS 2.1.4 - 'id' Unauthenticated SQL Injection 32 WEB Abdulazeez Alaseeri
2020-11-12 Exploit Code Downloads   Water Billing System 1.0 - 'username' and 'password' parameters SQL Injection 29 WEB Sarang Tumne
2020-11-11 Exploit Code Downloads   CMSUno 1.6.2 - 'user' Remote Code Execution (Authenticated) 27 WEB Fatih Çelik
2020-11-11 Exploit Code Downloads   Customer Support System 1.0 - 'username' Authentication Bypass 30 WEB Ahmed Abbas
2020-11-11 Exploit Code Downloads   Customer Support System 1.0 - Cross-Site Request Forgery 29 WEB Ahmed Abbas
2020-11-11 Exploit Code Downloads   Customer Support System 1.0 - 'description' Stored XSS in The Admin Panel 26 WEB Ahmed Abbas
2020-11-10 Exploit Code Downloads   Anuko Time Tracker 1.19.23.5325 - CSV/Formula Injection 28 WEB Mufaddal Masalawala
2020-11-10 Exploit Code Downloads   ShoreTel Conferencing 19.46.1802.0 - Reflected Cross-Site Scripting 29 WEB Joe Helle
2020-11-10 Exploit Code Downloads   Car Rental Management System 1.0 - SQL injection + Arbitrary File Upload 31 WEB Fortunato Lodari
2020-11-09 Exploit Code Downloads   Joplin 1.2.6 - 'link' Cross Site Scripting 29 WEB Philip Holbrook
2020-11-09 Exploit Code Downloads   SuiteCRM 7.11.15 - 'last_name' Remote Code Execution (Authenticated) 34 WEB M. Cory Billington
2020-11-09 Exploit Code Downloads   Genexis Platinum-4410 P4410-V2-1.28 - Broken Access Control and CSRF 36 WEB Jinson Varghese Behanan
2020-11-06 Exploit Code Downloads   BlogEngine 3.3.8 - 'Content' Stored XSS 35 WEB Andrey Stoykov
2020-11-06 Exploit Code Downloads   Sentrifugo Version 3.2 - 'announcements' Remote Code Execution (Authenticated) 30 WEB Fatih Çelik
2020-11-06 Exploit Code Downloads   Sentrifugo 3.2 - 'assets' Remote Code Execution (Authenticated) 32 WEB Fatih Çelik
2020-11-06 Exploit Code Downloads   CMSUno 1.6.2 - 'lang' Remote Code Execution (Authenticated) 36 WEB Fatih Çelik
2020-11-06 Exploit Code Downloads   SmartBlog 2.0.1 - 'id_post' Blind SQL injection 35 WEB C0wnuts
2020-11-05 Exploit Code Downloads   iDS6 DSSPro Digital Signage System 6.2 - Improper Access Control Privilege Escalation 35 WEB LiquidWorm
2020-11-05 Exploit Code Downloads   iDS6 DSSPro Digital Signage System 6.2 - CAPTCHA Security Bypass 34 WEB LiquidWorm
2020-11-05 Exploit Code Downloads   iDS6 DSSPro Digital Signage System 6.2 - Cross-Site Request Forgery (CSRF) 31 WEB LiquidWorm
2020-11-04 Exploit Code Downloads   Student Attendance Management System 1.0 - 'username' SQL Injection / Remote Code Execution 29 WEB Mosaaed
2020-11-04 Exploit Code Downloads   School Log Management System 1.0 - 'username' SQL Injection / Remote Code Execution 28 WEB Mosaaed
2020-11-04 Exploit Code Downloads   PDW File Browser 1.3 - Remote Code Execution 30 WEB David Bimmel
2020-11-04 Exploit Code Downloads   Processwire CMS 2.4.0 - 'download' Local File Inclusion 31 WEB Y1LD1R1M
2020-11-03 Exploit Code Downloads   Complaints Report Management System 1.0 - 'username' SQL Injection / Remote Code Execution 33 WEB Mosaaed
2020-11-03 Exploit Code Downloads   Multi Restaurant Table Reservation System 1.0 - 'table_id' Unauthenticated SQL Injection 34 WEB yunaranyancat
2020-11-02 Exploit Code Downloads   Monitorr 1.7.6m - Authorization Bypass 29 WEB Lyhin\'s Lab
2020-11-02 Exploit Code Downloads   Monitorr 1.7.6m - Remote Code Execution (Unauthenticated) 32 WEB Lyhin\'s Lab
2020-11-02 Exploit Code Downloads   WordPress Plugin Simple File List 4.2.2 - Arbitrary File Upload 37 WEB H4rk3nz0
2020-11-02 Exploit Code Downloads   Apache Flink 1.9.x - File Upload RCE (Unauthenticated) 33 WEB bigger.wing
2020-10-30 Exploit Code Downloads   Simple College Website 1.0 - 'username' SQL Injection / Remote Code Execution 27 WEB yunaranyancat
2020-10-30 Exploit Code Downloads   Online Job Portal 1.0 - 'userid' SQL Injection 28 WEB Akıner Kısa
2020-10-30 Exploit Code Downloads   Citadel WebCit < 926 - Session Hijacking Exploit 30 WEB Simone Quatrini
2020-10-30 Exploit Code Downloads   DedeCMS v.5.8 - _keyword_ Cross-Site Scripting 31 WEB Noth
2020-10-30 Exploit Code Downloads   CSE Bookstore 1.0 - 'quantity' Persistent Cross-site Scripting 31 WEB Vyshnav nk
2020-10-29 Exploit Code Downloads   Genexis Platinum-4410 P4410-V2-1.28 - Cross Site Request Forgery to Reboot 28 WEB Mohammed Farhan
2020-10-29 Exploit Code Downloads   WebLogic Server 10.3.6.0.0 / 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 - Unauthenticated RCE 31 WEB Mohammed Althibyani
2020-10-29 Exploit Code Downloads   Mailman 1.x > 2.1.23 - Cross Site Scripting (XSS) 32 WEB Valerio Alessandroni
2020-10-29 Exploit Code Downloads   Online Examination System 1.0 - 'name' Stored Cross Site Scripting 31 WEB Nikhil Kumar
2020-10-28 Exploit Code Downloads   Oracle Business Intelligence Enterprise Edition 5.5.0.0.0 / 12.2.1.3.0 / 12.2.1.4.0 - 'getPreviewIma 35 WEB Ivo Palazzolo
2020-10-28 Exploit Code Downloads   CSE Bookstore 1.0 - Authentication Bypass 34 WEB Alper Basaran
2020-10-28 Exploit Code Downloads   Nagios XI 5.7.3 - 'mibs.php' Remote Command Injection (Authenticated) 34 WEB Matthew Aberegg
2020-10-27 Exploit Code Downloads   Sphider Search Engine 1.3.6 - 'word_upper_bound' RCE (Authenticated) 33 WEB Gurkirat Singh
2020-10-27 Exploit Code Downloads   Client Management System 1.0 - 'searchdata' SQL injection 32 WEB Serkan Sancar
2020-10-27 Exploit Code Downloads   Sentrifugo 3.2 - File Upload Restriction Bypass (Authenticated) 32 WEB Gurkirat Singh
2020-10-26 Exploit Code Downloads   ReQuest Serious Play F3 Media Server 7.0.3 - Remote Code Execution (Unauthenticated) 37 WEB LiquidWorm
2020-10-26 Exploit Code Downloads   ReQuest Serious Play F3 Media Server 7.0.3 - Remote Denial of Service 32 WEB LiquidWorm