Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2018-01-02   Huawei Router HG532 - Arbitrary Command Execution 164 WEB anonymous
2017-12-28   DotNetNuke DreamSlider 01.01.02 - Arbitrary File Download 126 WEB Glafkos Charalambous
2017-12-27   Sendroid < 6.5.0 - SQL Injection 132 WEB Onwuka Gideon
2017-12-21   Ability Mail Server 3.3.2 - Cross-Site Scripting 89 WEB Aloyce J. Makalanga
2017-12-19   Linksys WVBR0 - 'User-Agent' Remote Command Injection 122 WEB nixawk
2017-12-18   ITGuard-Manager 0.0.0.1 - Remote Code Execution 119 WEB Nassim Asrir
2017-12-18   Western Digital MyCloud multi_uploadify File Upload 110 WEB Zenofex
2017-12-14   Microsoft Office DDE Payload Delivery 319 WEB mumbai
2017-12-14   Dup Scout Enterprise 10.0.18 Buffer Overflow 331 WEB Chris Higgins
2017-12-14   pfSense 2.4.1 CSRF Error Page Clickjacking 389 WEB Yorick Koster
2017-12-06   WinduCMS 3.1 - Local File Disclosure 251 WEB Maciek Krupa
2017-12-04   Artica Web Proxy 3.06 - Remote Code Execution 209 WEB hyp3rlinx
2017-12-04   MistServer 2.12 - Cross-Site Scripting 201 WEB hyp3rlinx
2017-12-04   WinduCMS 3.1 Local File Disclosure 189 WEB Maciej Krupa
2017-11-30   osCommerce 2.3.4.1 - Arbitrary File Upload 239 WEB Simon Scannell
2017-11-29   Synology StorageManager 5.2 - Remote Root Command Execution 234 WEB SecuriTeam
2017-11-20   phpMyFAQ 2.9.9 Code Injection 372 WEB tomplixsee
2017-11-15   Allworx Server Manager 6x / 6x12 / 48x Cross Site Scripting 139 WEB LiquidWorm
2017-11-14   Web Viewer 1.0.0.193 (Samsung SRN-1670D) - Unrestricted File Upload 384 WEB Omar Mezrag
2017-11-09   Geutebrueck GCore GCoreServer.exe Buffer Overflow 195 WEB Luca Cappiello
2017-11-09   Mako Server 2.5 Command Injection 140 WEB Steven Patterson
2017-11-06   WordPress WP Mobile Detector 3.5 Shell Upload 193 WEB h00die
2017-11-06   Oracle PeopleSoft Enterprise PeopleTools < 8.55 - Remote Code Execution Via Blind XML External Entit 149 WEB Charles Fol
2017-10-31   Oracle Java SE - Web Start jnlp XML External Entity Processing Information Disclosure 219 WEB mr_me
2017-10-26   PHPMailer 5.2.21 Local File Disclosure 143 WEB Maciej Krupa
2017-10-24   Kaltura < 13.1.0 - Remote Code Execution 154 WEB Robin Verton
2017-10-23   TP-Link WR940N Remote Code Execution 169 WEB Tim Carrington
2017-10-23   Check_MK 1.2.8p25 - Information Disclosure 151 WEB Julien Ahrens
2017-10-17   Webmin 1.850 SSRF / CSRF / Cross Site Scripting 166 WEB hyp3rlinx
2017-10-13   Tomcat JSP Upload Bypass Remote Code Execution 284 WEB peewpw
2017-10-12   Trend Micro InterScan Messaging Security (Virtual Appliance) - Remote Code Execution (Metasploit) 134 WEB Mehmet Ince
2017-10-10   ERS Data System 1.8.1 Java Deserialization 121 WEB West Shepherd
2017-10-10   Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execu 266 WEB intx0x80
2017-10-10   ClipBucket 2.8.3 - Remote Code Execution 125 WEB Meisam Monsef
2017-10-10   FileRun < 2017.09.18 - SQL Injection 150 WEB SPARC
2017-09-28   Fibaro Home Center 2 - Remote Command Execution / Privilege Escalation 124 WEB forsec
2017-09-26   FLIR Systems FLIR Thermal Camera F/FC/PT/D Multiple Information Disclosures 140 WEB LiquidWorm
2017-09-26   FLIR Systems FLIR Thermal Camera PT-Series (PT-334 200562) - Root Remote Code Execution 120 WEB LiquidWorm
2017-09-25   Cash Back Comparison Script 1.0 - SQL Injection 126 WEB Ihsan Sencan
2017-09-25   DenyAll WAF < 6.3.0 - Remote Code Execution (Metasploit) 129 WEB Mehmet Ince
2017-09-22   Stock Photo Selling 1.0 - SQL Injection 140 WEB Ihsan Sencan
2017-09-21   Disk Pulse Enterprise 9.9.16 GET Buffer Overflow 117 WEB Chance Johnson
2017-09-19   Apache - HTTP OPTIONS Memory Leak 170 WEB Hanno Bock
2017-09-19   DigiAffiliate 1.4 - Cross-Site Request Forgery (Update Admin) 130 WEB Ihsan Sencan
2017-09-19   Digileave 1.2 - Cross-Site Request Forgery (Update Admin) 134 WEB Ihsan Sencan
2017-09-19   Digirez 3.4 - Cross-Site Request Forgery (Update Admin) 132 WEB Ihsan Sencan
2017-09-18   D-Link DIR8xx Routers - Local Firmware Upload 230 WEB embedi
2017-09-18   D-Link DIR8xx Routers - Root Remote Code Execution 155 WEB embedi
2017-09-18   D-Link DIR8xx Routers - Leak Credentials 134 WEB embedi
2017-09-11   Nimble Professional 1.0 - Cross-Site Request Forgery (Update Admin) 145 WEB Ihsan Sencan
2017-09-11   Topsites Script 1.0 - Cross-Site Request Forgery / PHP Code Injection 125 WEB Ihsan Sencan
2017-08-31   Invoice Manager 3.1 - Cross-Site Request Forgery (Add Admin) 249 WEB Ali BawazeEer
2017-08-24   Automated Logic WebCTRL 6.5 - Unrestricted File Upload / Remote Code Execution 142 WEB LiquidWorm
2017-08-11   DALIM SOFTWARE ES Core 5.0 Build 7184.1 User Enumeration 155 WEB LiquidWorm
2017-08-09   Synology Photo Station 6.7.3-3432 / 6.3-2967 - Remote Code Execution 122 WEB Kacper Szurek
2017-08-02   Advantech SUSIAccess <= 3.0 - 'RecoveryMgmt' File Upload 135 WEB James Fitts
2017-08-02   Advantech SUSIAccess <= 3.0 - Directory Traversal / Information Disclosure (Metasploit) 117 WEB James Fitts
2017-07-31   GitHub Enterprise < 2.8.7 - Remote Code Execution 129 WEB orange
2017-07-27   WebKit JSC - 'JSObject::putInlineSlow and JSValue::putToPrimitive' Universal Cross-Site Scripting 101 WEB Google Security Research
2017-07-25   ManageEngine Desktop Central 10 Build 100087 - Remote Code Execution (Metasploit) 205 WEB Kacper Szurek
2017-07-21   Netscaler SD-WAN 9.1.2.26.561201 - Command Injection (Metasploit) 146 WEB xort
2017-07-21   Sonicwall < 8.1.0.2-14sv - 'sitecustomization.cgi' Command Injection (Metasploit) 126 WEB xort
2017-07-21   Sonicwall < 8.1.0.6-21sv - 'gencsr.cgi' Command Injection (Metasploit) 117 WEB xort
2017-07-19   Easy File Sharing Web Server 7.2 Buffer Overflow 153 WEB N_A
2017-07-18   Barracuda Load Balancer Firmware <= 6.0.1.006 - Remote Command Injection (Metasploit) 151 WEB xort
2017-07-18   Sophos Web Appliance 4.3.0.2 - 'trafficType' Remote Command Injection (Metasploit) 128 WEB xort
2017-07-17   WDTV Live SMP 2.03.20 - Remote Password Reset 194 WEB Sw1tCh
2017-07-17   Apache Struts 2.3.x Showcase - Remote Code Execution (PoC) 295 WEB Vex Woo
2017-07-13   RaidenHTTPD 2.0.44 User-Agent Cross Site Scripting 110 WEB sultan albalawi
2017-07-12   NfSen < 1.3.7 / AlienVault OSSIM 4.3.1 - 'customfmt' Command Injection 172 WEB Paul Taylor
2017-07-03   Humax HG100R 2.0.6 - Backup File Download 198 WEB gambler
2017-06-29   Easy File Sharing Web Server 7.2 - Unrestricted File Upload 246 WEB Chako
2017-06-26   Easy File Sharing HTTP Server 7.2 POST Buffer Overflow 79 WEB Marco Rivoli
2017-06-26   Symantec Messaging Gateway Remote Code Execution 128 WEB Mehmet Ince
2017-06-26   Netgear DGN2200 dnslookup.cgi Command Injection 103 WEB thecarterb
2017-06-22   PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution 151 WEB phackt_ul
2017-06-20   D-Link ADSL DSL-2640B SEA_1.01 Unauthenticated Remote DNS Changer 286 WEB Todor Donev
2017-06-20   D-Link DSL-2640B - Unauthenticated Remote DNS Change 118 WEB Todor Donev
2017-06-20   D-Link DSL-2640U - Unauthenticated DNS Change 180 WEB Todor Donev
2017-06-20   Beetel BCM96338 Router - Unauthenticated DNS Change 200 WEB Todor Donev
2017-06-20   UTstarcom WA3002G4 - Unauthenticated DNS Change 138 WEB Todor Donev
2017-06-20   iBall Baton iB-WRA150N - Unauthenticated DNS Change 180 WEB Todor Donev
2017-06-16   Aerohive HiveOS 5.1r5 < 6.1r5 - Remote Code Execution 232 WEB Ike-Clinton
2017-06-14   MyBB 1.8.12 Stored XSS / File Enumeration 220 WEB MLT
2017-06-13   EFS Easy Chat Server 3.1 - Password Reset 289 WEB Aitezaz Mohsin
2017-06-13   EFS Easy Chat Server 3.1 - Password Disclosure 105 WEB Aitezaz Mohsin
2017-06-13   IPFire 2.19 - Remote Code Execution 133 WEB 0x09AL
2017-06-07   Kronos Telestaff < 2.92EU29 - SQL Injection 129 WEB Goran Tuzovic
2017-06-06   EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 - Remote Code Execution 169 WEB LiquidWorm
2017-06-02   Riverbed SteelHead VCX 9.6.0a - Arbitrary File Read 132 WEB Gregory Draperi
2017-06-01   WebKit CachedFrameBase::restore Universal Cross Site Scripting 84 WEB lokihardt
2017-06-01   WebKit Element::setAttributeNodeNS Use-After-Free 102 WEB lokihardt
2017-06-01   WebKit CachedFrame Universal Cross Site Scripting 114 WEB lokihardt
2017-06-01   WebKit JSC emitPutDerivedConstructorToArrowFunctionContextScope Incorrect Check 110 WEB lokihardt
2017-06-01   WebKit JSC JSObject::ensureLength Failure Check 102 WEB lokihardt
2017-06-01   WebKit Document::prepareForDestruction / CachedFrame Universal XSS 105 WEB lokihardt
2017-05-31   TerraMaster F2-420 NAS TOS 3.0.30 - Unauthenticated Remote Code Execution as Root 184 WEB Simone Margaritelli
2017-05-31   IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Hea 95 WEB SecuriTeam
2017-05-31   KEMP LoadMaster 7.135.0.13245 - Persistent Cross-Site Scripting / Remote Code Execution 128 WEB SecuriTeam
2017-05-31   uc-http Daemon - Local File Inclusion / Directory Traversal 102 WEB Project Insecurity
2017-05-31   Apple Safari 10.0.3(12602.4.8) / WebKit - 'HTMLObjectElement::updateWidget' Universal Cross-Site S 75 WEB Google Security Research
2017-05-31   WebKit - Stealing Variables via Page Navigation in FrameLoader::clear 92 WEB Google Security Research
2017-05-31   WebKit - enqueuePageshowEvent and enqueuePopstateEvent Universal Cross-Site Scripting 78 WEB Google Security Research
2017-05-31   WebKit - 'ContainerNode::parserRemoveChild' Universal Cross-Site Scripting 67 WEB Google Security Research
2017-05-31   Apple WebKit / Safari 10.0.3(12602.4.8) - 'Editor::Command::execute' Universal Cross-Site Scriptin 91 WEB Google Security Research
2017-05-25   NetGain EM 7.2.647 build 941 - Authentication Bypass / Local File Inclusion 117 WEB f3ci
2017-05-23   VX Search Enterprise GET Buffer Overflow 156 WEB Daniel Teixeira
2017-05-23   Sync Breeze Enterprise GET Buffer Overflow 114 WEB Daniel Teixeira
2017-05-23   MediaWiki SyntaxHighlight Extension Option Injection 231 WEB Yorick Koster
2017-05-22   Mantis Bug Tracker 1.3.10/2.3.0 - Cross-Site Request Forgery 62 WEB hyp3rlinx
2017-05-15   miniupnpc 2.0.20170421 Denial Of Service 245 WEB oststrom
2017-05-11   ASUS Routers CSRF / Information Disclosure 206 WEB Yakov Shafranovich
2017-05-10   LogRhythm Network Monitor - Authentication Bypass / Command Injection 112 WEB Francesco Oddo
2017-05-05   WordPress 4.6 - Unauthenticated Remote Code Execution 229 WEB Dawid Golunski
2017-05-05   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Code Execution 87 WEB LiquidWorm
2017-05-05   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Password Change 182 WEB LiquidWorm
2017-05-05   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Information Disclosure 100 WEB LiquidWorm
2017-05-05   Alerton Webtalk 2.5 / 3.3 - Multiple Vulnerabilities 96 WEB David Tomaschik
2017-04-28   Simple File Uploader - Arbitrary File Download 203 WEB Daniel Godoy
2017-04-28   TYPO3 News Module - SQL Injection 120 WEB Charles Fol
2017-04-26   OpenText Documentum Content Server - dm_bp_transition.ebs docbase Method Arbitrary Code Execution 210 WEB Andrey B. Panfilov
2017-04-21   Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'operationSpreadGeneric' Universal Cross-Site Scrip 91 WEB Google Security Research
2017-04-21   Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'PrototypeMap::createEmptyStructure' Universal Cros 122 WEB Google Security Research
2017-04-19   WebKit operationSpreadGeneric Universal Cross Site Scripting 111 WEB lokihardt
2017-04-18   Mantis Bug Tracker 1.3.0/2.3.0 - Password Reset 108 WEB hyp3rlinx