Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2018-12-12   WordPress Snap Creek Duplicator Code Injection 623 WEB Julien Legras
2018-12-12   PrestaShop 1.6.x / 1.7.x Remote Code Execution 371 WEB farisv
2018-12-10   i-doit CMDB 1.11.2 - Remote Code Execution 278 WEB AkkuS
2018-12-06   HasanMWB 1.0 SQL Injection 368 WEB Ihsan Sencan
2018-12-05   NUUO NVRMini2 3.9.1 - Authenticated Command Injection 188 WEB Artem Metla
2018-12-04   Apache Superset 0.23 - Remote Code Execution 252 WEB David May
2018-12-04   Joomla! Component JE Photo Gallery 1.1 - 'categoryid' SQL Injection 221 WEB Ihsan Sencan
2018-12-04   PaloAlto Networks Expedition Migration Tool 1.0.106 - Information Disclosure 137 WEB ParagonSec
2018-12-04   Fleetco Fleet Maintenance Management 1.2 - Remote Code Execution 142 WEB AkkuS
2018-12-03   Joomla JCE 2.6.33 Arbitrary File Upload 533 WEB KingSkrupellos
2018-12-03   Schneider Electric PLC - Session Calculation Authentication Bypass 166 WEB Deneut Tijl
2018-11-16   PHP-Proxy 5.1.0 - Local File Inclusion 416 WEB Ameer Pornillos
2018-11-14   TP-Link Archer C50 Wireless Router 171227 - Cross-Site Request Forgery (Configuration File Disclosur 184 WEB Wadeek
2018-11-07   CMS Made Simple 2.2.7 - Remote Code Execution 231 WEB Lucian Ioan Nitescu
2018-11-06   blueimp jQuery Arbitrary File Upload 252 WEB wvu
2018-11-06   PHP Proxy 3.0.3 - Local File Inclusion 197 WEB AkkuS
2018-11-06   Virgin Media Hub 3.0 Router - Denial of Service (PoC) 132 WEB Ross Inman
2018-11-06   Advantech WebAccess SCADA 8.3.2 - Remote Code Execution 184 WEB Chris Lyne
2018-11-01   Loadbalancer.org Enterprise VA MAX 8.3.2 - Remote Code Execution 156 WEB Jakub Palaczynski
2018-10-29   WordPress Arforms 3.5.1 Arbitrary File Delete 253 WEB Amir Hossein Mahboubi
2018-10-25   Apache OFBiz 16.11.04 - XML External Entity Injection 192 WEB Jamie Parfet
2018-10-17   Heatmiser Wifi Thermostat 1.7 - Credential Disclosure 100 WEB d0wnp0ur
2018-10-16   Academic Timetable Final Build 7.0 - Information Disclosure 118 WEB Ihsan Sencan
2018-10-16   FLIR Brickstream 3D+ - RTSP Stream Disclosure 164 WEB LiquidWorm
2018-10-16   FLIR AX8 Thermal Camera 1.32.16 - Remote Code Execution 186 WEB LiquidWorm
2018-10-15   FluxBB < 1.5.6 - SQL Injection 136 WEB secthrowaway
2018-10-15   Phoenix Contact WebVisit 2985725 - Authentication Bypass 147 WEB Photubias
2018-10-12   Phoenix Contact WebVisit 6.40.00 - Password Disclosure 126 WEB Photubias
2018-10-09   Imperva SecureSphere 13 - Remote Command Execution 188 WEB rsp3ar
2018-10-09   FLIR Thermal Traffic Cameras 1.01-0bb5b27 - Information Disclosure 173 WEB LiquidWorm
2018-10-08   Navigate CMS Unauthenticated Remote Code Execution 148 WEB Pyriphlegethon
2018-10-08   Easy File Sharing Web Server 7.2 Domain Name Buffer Overflow 116 WEB ZwX
2018-10-08   ISPConfig < 3.1.13 - Remote Command Execution 221 WEB 0x09AL
2018-10-08   H2 Database 1.4.196 - Remote Code Execution 225 WEB h4ckNinja
2018-09-25   Joomla! Component AMGallery 1.2.3 - 'filter_category_id' SQL Injection 168 WEB Ihsan Sencan
2018-09-25   LG SuperSign EZ CMS 2.5 - Remote Code Execution 147 WEB Alejandro Fanjul
2018-09-20   LG SuperSign EZ CMS 2.5 - Local File Inclusion 170 WEB Alejandro Fanjul
2018-09-17   Watchguard AP100 AP102 AP200 1.2.9.15 - Remote Code Execution (Metasploit) 159 WEB Stephen Shkardoon
2018-09-13   LG Smart IP Camera 1508190 - Backup File Download 165 WEB Ege Balci
2018-09-13   CirCarLife SCADA 4.3.0 - Credential Disclosure 170 WEB SadFud
2018-09-13   Seagate Personal Cloud Information Disclosure 164 WEB Yorick Koster
2018-09-12   Tor Browser 7.x NoScript Bypass 129 WEB x0rz
2018-09-11   phpMyAdmin Credential Stealer 271 WEB Dhiraj Mishra
2018-09-11   LW-N605R 12.20.2.1486 - Remote Code Execution 159 WEB Nassim Asrir
2018-09-11   RPi Cam Control < 6.4.25 - 'preview.php' Remote Command Execution 151 WEB Reigning Shells
2018-09-07   Apache Roller 5.0.3 - XML External Entity Injection (File Disclosure) 194 WEB Marko Jokic
2018-08-30   Episerver 7 patch 4 - XML External Entity Injection 156 WEB Jonas Lejon
2018-08-28   LiteCart 2.1.2 - Arbitrary File Upload 111 WEB Haboob Team
2018-08-27   KingMedia 4.1 - Remote Code Execution 231 WEB Efrén Díaz
2018-08-27   Hikvision IP Camera 5.4.0 - User Enumeration (Metasploit) 320 WEB Alfie
2018-08-27   ADM 3.1.2RHG1 - Remote Code Execution 104 WEB Matthew Fulton
2018-08-27   Mikrotik WinBox 6.42 - Credential Disclosure (golang) 103 WEB Maxim Yefimenko
2018-08-16   cPanel 76 Cross Site Scripting 167 WEB Numan OZDEMIR
2018-08-15   cgit 1.2.1 - Directory Traversal (Metasploit) 111 WEB Dhiraj Mishra
2018-08-10   TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery (Information Disclosure) 116 WEB Wadeek
2018-08-10   TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery (Remote Reboot) 116 WEB Wadeek
2018-08-07   OpenEMR < 5.0.1 - Remote Code Execution 158 WEB Cody Zacharias
2018-08-03   Seq 4.2.476 Authentication Bypass 137 WEB Daniel Chactoura
2018-08-03   CoSoSys Endpoint Protector 4.5.0.1 - Authenticated Remote Root Command Injection 100 WEB 0x09AL
2018-08-01   SonicWall Global Management System XMLRPC 132 WEB Michael Flanders
2018-08-01   Vtiger CRM 6.3.0 Authenticated Logo Upload Remote Command Execution 156 WEB Touhid M.Shaikh
2018-07-31   H2 Database 1.4.197 Information Disclosure 143 WEB owodelta
2018-07-25   Cisco Adaptive Security Appliance Path Traversal 158 WEB Angelo Ruwantha
2018-07-25   Micro Focus Secure Messaging Gateway (SMG) < 471 - Remote Code Execution (Metasploit) 116 WEB Mehmet Ince
2018-07-25   Tenda Wireless N150 Router 5.07.50 - Cross-Site Request Forgery (Reboot Router) 144 WEB Nathu Nandwani
2018-07-25   Davolink DVW 3200 Router - Password Disclosure 119 WEB Ankit Anubhav
2018-07-20   CMS Made Simple 2.2.5 Authenticated Remote Command Execution 156 WEB Jacob Robles
2018-07-19   PrestaShop < 1.6.1.19 - AES CBC Privilege Escalation Exploit 114 WEB Charles Fol
2018-07-19   PrestaShop < 1.6.1.19 - BlowFish ECD Privilege Escalation Exploit 145 WEB Charles Fol
2018-07-19   Modx Revolution Remote Code Execution 108 WEB Vitalii Rudnykh
2018-07-17   QNAP Q'Center change_passwd Command Execution 122 WEB Brendan Coles
2018-07-13   Apache CouchDB Arbitrary Command Execution 123 WEB Green-m
2018-07-13   phpMyAdmin Authenticated Remote Code Execution 202 WEB Jacob Robles
2018-07-12   Instagram Clone Script 2.0 Cross Site Scripting 130 WEB Borna Nematzadeh
2018-07-11   Monstra CMS Authenticated Arbitrary File Upload 183 WEB Touhid M.Shaikh
2018-07-11   D-Link DIR601 2.02 - Credential Disclosure 147 WEB Richard Rogerson
2018-07-11   Oracle WebLogic 12.1.2.0 - RMI Registry UnicastRef Object Java Deserialization Remote Code Execution 169 WEB bobsecq
2018-07-11   Gitea 1.4.0 - Remote Code Execution 121 WEB Kacper Szurek
2018-07-09   GitList 0.6.0 Argument Injection 136 WEB Shelby Pace
2018-07-05   CMS Made Simple 2.2.5 - Remote Code Execution 217 WEB Mustafa Hasan
2018-07-03   VMware NSX SD-WAN Edge < 3.1.2 - Command Injection 153 WEB ParagonSec
2018-07-03   Geutebruck 5.02024 G-Cam/EFD-2250 - 'simple_loglistjs.cgi' Remote Command Execution (Metasploit) 113 WEB RandoriSec
2018-06-29   Cisco Adaptive Security Appliance - Path Traversal 156 WEB Yassine Aboukir
2018-06-28   HPE VAN SDN 2.7.18.0503 - Remote Root 116 WEB KoreLogic
2018-06-28   IPConfigure Orchid VMS 2.0.5 - Directory Traversal Information Disclosure (Metasploit) 115 WEB Sanjiv Kawa
2018-06-28   Apache CouchDB < 2.1.0 - Remote Code Execution 129 WEB Cody Zacharias
2018-06-28   TP-Link TL-WA850RE - Remote Command Execution 134 WEB yoresongo
2018-06-11   userSpice 4.3.24 - Username Enumeration 164 WEB Dolev Farhi
2018-06-11   userSpice 4.3.24 - 'X-Forwarded-For' Cross-Site Scripting 112 WEB Dolev Farhi
2018-06-11   XiongMai uc-httpd 1.0.0 - Buffer Overflow 192 WEB Andrew Watson
2018-06-11   Monstra CMS < 3.0.4 - Cross-Site Scripting 144 WEB DEEPIN2
2018-06-11   Jenkins Mailer Plugin < 1.20 - Cross-Site Request Forgery (Send Email) 163 WEB Kl3_GMjq6
2018-06-11   Pagekit < 1.0.13 - Cross-Site Scripting Code Generator 146 WEB DEEPIN2
2018-05-28   SAP Internet Transaction Server 6200.x - Session Fixation / Cross-Site Scripting 132 WEB J. Carrillo Lencina
2018-05-22   GitBucket 4.23.1 - Remote Code Execution 121 WEB Kacper Szurek
2018-05-18   Intelbras NCLOUD 300 1.0 - Authentication bypass 145 WEB Pedro Aguiar
2018-05-10   Mantis manage_proj_page PHP Code Execution 157 WEB Lars Sorenson
2018-05-08   Palo Alto Networks readSessionVarsFromFile() Session Corruption 146 WEB hdm
2018-05-08   PlaySMS import.php Code Execution 130 WEB Touhid M.Shaikh
2018-05-08   PlaySMS sendfromfile.php Code Execution 130 WEB DarkS3curity
2018-05-07   WordPress Plugin User Role Editor < 4.25 - Privilege Escalation 171 WEB Tomislav Paskalev
2018-05-07   Apache Struts2 2.0.0 < 2.3.15 - Prefixed Parameters OGNL Injection 202 WEB Takeshi Terada
2018-05-03   Nagios XI 5.2.6 < 5.2.9 / 5.3 / 5.4 - Chained Remote Root 147 WEB Jared Arave
2018-05-03   Drupal < 7.58 - 'Drupalgeddon3' Authenticated Remote Code 187 WEB SixP4ck3r
2018-05-03   osCommerce Installer Unauthenticated Code Execution 129 WEB Daniel Teixeira
2018-04-27   GitList 0.6 - Unauthenticated Remote Code Execution 130 WEB Kacper Szurek
2018-04-27   SickRage < v2018.03.09 - Clear-Text Credentials HTTP Response 108 WEB Sven Fassbender
2018-04-25   Ericsson-LG iPECS NMS A.1Ac - Cleartext Credential Disclosure 145 WEB Berk Cem Göksel
2018-04-25   Interspire Email Marketer < 6.1.6 - Remote Admin Authentication Bypass 148 WEB devcoinfet
2018-04-24   Apache CouchDB 1.7.0 and 2.x before 2.1.1 - Remote Privilege Escalation 103 WEB Sebastián Castro
2018-04-19   Lutron Quantum 2.0 - 3.2.243 - Information Disclosure 135 WEB SadFud
2018-04-16   MikroTik 6.41.4 - FTP daemon Denial of Service PoC 141 WEB FarazPajohan
2018-04-16   Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution 183 WEB Hans Topo
2018-04-16   Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution (PoC) 180 WEB Vitalii Rudnykh
2018-04-10   CyberArk Password Vault Web Access < 9.9.5 / < 9.10 / 10.1 - Remote Code Execution 99 WEB RedTeam Pentesting
2018-04-04   ProcessMaker Plugin Code Execution 119 WEB Brendan Coles
2018-04-04   DuckDuckGo 4.2.0 WebRTC Private IP Leakage 144 WEB Brendan Coles
2018-04-02   Vtiger CRM 6.3.0 - Authenticated Arbitrary File Upload (Metasploit) 146 WEB Touhid M.Shaikh
2018-04-02   osCommerce 2.3.4.1 - Remote Code Execution 150 WEB Simon Scannell
2018-04-02   Homematic CCU2 2.29.23 - Remote Command Execution 151 WEB Gregor Kopf
2018-04-02   Homematic CCU2 2.29.23 - Arbitrary File Write 165 WEB Gregor Kopf
2018-03-30   Joomla Component Fields - SQLi Remote Code Execution (Metasploit) 184 WEB luisco100
2018-03-30   Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Admin Session) 140 WEB Stefan Horst
2018-03-30   Square 9 GlobalForms 6.2.x Blind SQL Injection 136 WEB Darrell Damstedt
2018-03-29   TwonkyMedia Server 7.0.11-8.5 - Directory Traversal 139 WEB Sven Fassbender