2016-08-19
|
|
SIEMENS IP Camera CCMW1025 x.2.2.1798 - Remote Admin Credentials Change
|
112 |
WEB
|
Todor Donev
|
2016-08-11
|
|
EyeLock nano NXT 3.5 - Remote Root Exploit
|
209 |
WEB
|
LiquidWorm
|
2016-08-11
|
|
EyeLock nano NXT 3.5 - Local File Disclosure
|
72 |
WEB
|
LiquidWorm
|
2016-08-11
|
|
vBulletin 5.2.2 - Preauth Server Side Request Forgery (SSRF)
|
333 |
WEB
|
Dawid Golunski
|
2016-08-11
|
|
Nagios Network Analyzer 2.2.1 - Multiple CSRF
|
181 |
WEB
|
hyp3rlinx
|
2016-08-09
|
|
NUUO NVRmini 2 3.0.8 - (Add Admin) CSRF
|
322 |
WEB
|
LiquidWorm
|
2016-08-09
|
|
NUUO NVRmini 2 3.0.8 - Remote Root Exploit
|
337 |
WEB
|
LiquidWorm
|
2016-08-09
|
|
PhpMyAdmin 4.6.2 - Post-Auth Remote Code Execution
|
121 |
WEB
|
iamsecurity
|
2016-07-27
|
|
PHP File Vault 0.9 - Directory Traversal
|
93 |
WEB
|
N_A
|
2016-07-27
|
|
Bellini/Supercook Wi-Fi Yumi SC200 - Multiple Vulnerabilities
|
88 |
WEB
|
James McLean
|
2016-07-27
|
|
Technicolor TC7200 Modem/Router STD6.02.11 - Multiple Vulnerabilities
|
152 |
WEB
|
Gergely Eberhardt
|
2016-07-27
|
|
Ubee EVW3226 Modem/Router 1.0.20 - Multiple Vulnerabilities
|
73 |
WEB
|
Gergely Eberhardt
|
2016-07-27
|
|
PHP gettext (gettext.php) 1.0.12 - Unauthenticated Code Execution
|
69 |
WEB
|
kmkz
|
2016-07-27
|
|
Drupal CODER Module 2.5 - Remote Command Execution (Metasploit)
|
64 |
WEB
|
Mehmet Ince
|
2016-07-22
|
|
Technicolor TC7200 Modem / Router Session Management / Fixed Password
|
156 |
WEB
|
Gergely Eberhardt
|
2016-07-22
|
|
Cisco EPC3925 UPC Modem / Router Default Passphrase
|
134 |
WEB
|
Gergely Eberhardt
|
2016-07-21
|
|
WordPress Video Player Plugin 1.5.16 - SQL Injection
|
119 |
WEB
|
David Vaartjes
|
2016-07-21
|
|
Wowza Streaming Engine 4.5.0 - Multiple XSS
|
111 |
WEB
|
LiquidWorm
|
2016-07-21
|
|
Wowza Streaming Engine 4.5.0 - Add Advanced Admin CSRF
|
96 |
WEB
|
LiquidWorm
|
2016-07-21
|
|
Wowza Streaming Engine 4.5.0 - Remote Privilege Escalation
|
83 |
WEB
|
LiquidWorm
|
2016-07-19
|
|
vBulletin 4.x - SQLi in breadcrumbs via xmlrpc API (Post-Auth)
|
90 |
WEB
|
tintinweb
|
2016-07-19
|
|
vBulletin 5.x/4.x - Persistent XSS in AdminCP/ApiLog via xmlrpc API (Post-Auth)
|
69 |
WEB
|
tintinweb
|
2016-07-13
|
|
Prestashop vtermslidesshow module Arbitrary File Upload Exploit
|
312 |
WEB
|
PentesterDesk
|
2016-07-12
|
|
Belkin Router AC1200 Firmware 1.00.27 - Authentication Bypass
|
98 |
WEB
|
Gregory Smiley
|
2016-07-11
|
|
CyberPower Systems PowerPanel 3.1.2 - XXE Out-Of-Band Data Retrieval
|
205 |
WEB
|
LiquidWorm
|
2016-07-11
|
|
php Real Estate Script 3 - Arbitrary File Disclosure
|
60 |
WEB
|
Meisam Monsef
|
2016-07-11
|
|
WordPress WP-DownloadManager Plugin 1.68.1 - Arbitrary File Upload Vulnerability
|
222 |
WEB
|
Mojtaba MobhaM
|
2016-07-07
|
|
PrinceXML Wrapper Class Command Injection
|
206 |
WEB
|
Brandon Perry
|
2016-07-06
|
|
Nagios XI Chained Remote Code Execution
|
207 |
WEB
|
wvu
|
2016-07-05
|
|
WordPress Real3D FlipBook Plugin - Multiple Vulnerabilities
|
136 |
WEB
|
Mukarram Khalid
|
2016-07-01
|
|
Ubiquiti Administration Portal - CSRF to Remote Command Execution
|
96 |
WEB
|
KoreLogic
|
2016-07-01
|
|
WordPress Ultimate Membership Pro Plugin 3.3 - SQL Injection
|
143 |
WEB
|
wp0Day
|
2016-07-01
|
|
Symantec Endpoint Protection Manager 12.1 - Multiple Vulnerabilities
|
98 |
WEB
|
hyp3rlinx
|
2016-06-29
|
|
Prestashop Attribute Wizard Pro module Arbitrary File Upload Exploit
|
711 |
WEB
|
PentesterDesk
|
2016-06-28
|
|
Untangle NGFW 12.1.0 Beta execEvil() Command Injection
|
188 |
WEB
|
Matt Bush
|
2016-06-28
|
|
Ruby HTTP Header Injection
|
106 |
WEB
|
rootredrain
|
2016-06-28
|
|
MyLittleForum 2.3.5 - PHP Command Injection
|
73 |
WEB
|
hyp3rlinx
|
2016-06-23
|
|
Prestashop modules Arbitrary File Upload Vulnerability
|
814 |
WEB
|
PentesterDesk Team
|
2016-06-21
|
|
Airia - Webshell Upload Exploit
|
113 |
WEB
|
HaHwul
|
2016-06-21
|
|
Airia - (Add Content) CSRF
|
101 |
WEB
|
HaHwul
|
2016-06-21
|
|
WordPress Ultimate Product Catalog Plugin 3.8.1 - Privilege Escalation Exploit
|
110 |
WEB
|
Joaquin Ramirez Martinez
|
2016-06-21
|
|
WordPress Premium SEO Pack 1.9.1.3 wp_options Overwrite
|
91 |
WEB
|
wp0Day.com
|
2016-06-20
|
|
Skype For Business 2013 User Enumeration
|
66 |
WEB
|
nyxgeek
|
2016-06-20
|
|
Microsoft Internet Explorer 11 Garbage Collector Attribute Type Confusion
|
73 |
WEB
|
SkyLined
|
2016-06-20
|
|
phpATM 1.32 - Remote Command Execution (Shell Upload) on Windows Servers
|
86 |
WEB
|
Paolo Massenio
|
2016-06-20
|
|
WordPress Gravity Forms Plugin 1.8.19 - Arbitrary File Upload
|
322 |
WEB
|
Abk Khan
|
2016-06-16
|
|
PHPLive 4.4.8 - 4.5.4 - Password Recovery SQL Injection
|
105 |
WEB
|
Tiago Carvalho
|
2016-06-15
|
|
WordPress Social Stream Plugin 1.5.15 - wp_options Overwrite
|
109 |
WEB
|
wp0Day.com
|
2016-06-14
|
|
Viart Shopping Cart 5.0 CSRF / Shell Upload
|
195 |
WEB
|
Ali Ghanbari
|
2016-06-14
|
|
Zabbix 2.2 - 3.0.3 - RCE with API JSON-RPC
|
147 |
WEB
|
Alexander Gurin
|
2016-06-12
|
|
Mobiketa 1.0 - CSRF Add Admin Exploit
|
69 |
WEB
|
Murat Yilmazlar
|
2016-06-12
|
|
Dell OpenManage Server Administrator 8.3 - XML External Entity Exploit
|
259 |
WEB
|
hantwister
|
2016-06-08
|
|
Apache Continuum 1.4.2 Command Injection / Cross Site Scripting
|
79 |
WEB
|
David Shanahan
|
2016-06-07
|
|
WordPress Uncode Theme 1.3.1 - Arbitrary File Upload
|
165 |
WEB
|
wp0Day.com
|
2016-06-07
|
|
WordPress Newspaper Theme 6.7.1 - Privilege Escalation
|
176 |
WEB
|
wp0Day.com
|
2016-06-07
|
|
WordPress WP PRO Advertising System Plugin 4.6.18 - SQL Injection
|
206 |
WEB
|
wp0Day.com
|
2016-06-07
|
|
WordPress Creative Multi-Purpose Theme 9.1.3 - Stored XSS
|
221 |
WEB
|
wp0Day.com
|
2016-06-01
|
|
FlatPress 1.0.3 - CSRF Arbitrary File Upload
|
277 |
WEB
|
LiquidWorm
|
2016-05-30
|
|
WordPress Ninja Forms Unauthenticated File Upload
|
134 |
WEB
|
Rob Carr
|
2016-05-30
|
|
Linknat VOS3000/VOS2009 SQL Injection Exploit
|
262 |
WEB
|
Osama Khalid
|
2016-05-24
|
|
Job Script by Scubez - Remote Code Execution
|
109 |
WEB
|
Bikramaditya Guha
|
2016-05-19
|
|
Magento < 2.0.6 - Unauthenticated Arbitrary Unserialize -> Arbitrary Write File
|
180 |
WEB
|
agix
|
2016-05-17
|
|
TP-Link SC2020n Authenticated Telnet Injection
|
104 |
WEB
|
Nicholas Starke
|
2016-05-17
|
|
Meteocontrol WEB’log - Admin Password Disclosure
|
97 |
WEB
|
Karn Ganeshen
|
2016-05-17
|
|
eXtplorer 2.1.9 - Archive Path Traversal
|
171 |
WEB
|
hyp3rlinx
|
2016-05-17
|
|
Web interface for DNSmasq / Mikrotik - SQL Injection
|
267 |
WEB
|
hyp3rlinx
|
2016-05-06
|
|
ImageMagick < 6.9.3-9 - Multiple Vulnerabilities
|
238 |
WEB
|
Nikolay Ermishkin
|
2016-05-05
|
|
PHP Imagick 3.3.0 - disable_functions Bypass
|
572 |
WEB
|
RicterZ
|
2016-04-28
|
|
Multiple Vendors (RomPager <= 4.34) - Misfortune Cookie Router Authentication Bypass
|
121 |
WEB
|
Milad Doorbash
|
2016-04-26
|
|
Gemtek CPE7000 - WLTCS-106 sysconf.cgi Unauthenticated Remote Command Execution (MSF)
|
96 |
WEB
|
Federico Scalco
|
2016-04-26
|
|
Gemtek CPE7000 - WLTCS-106 Administrator SID Retriever (MSF)
|
143 |
WEB
|
Federico Scalco
|
2016-04-22
|
|
Gemtek CPE7000 / WLTCS-106 - Multiple Vulnerabilities
|
235 |
WEB
|
Federico Ramondino
|
2016-04-22
|
|
Symantec Brightmail 10.6.0-7- LDAP Credentials Disclosure
|
116 |
WEB
|
Fakhir Karim Reda
|
2016-04-21
|
|
PHPBack 1.3.0 - SQL Injection
|
227 |
WEB
|
hyp3rlinx
|
2016-04-15
|
|
Oracle Application Testing Suite 12.4.0.2.0 - Authentication Bypass and Arbitrary File Upload Exploi
|
199 |
WEB
|
Zhou Yu
|
2016-04-06
|
|
WordPress Advanced Video Plugin 1.0 - Local File Inclusion Exploit
|
214 |
WEB
|
evait security GmbH
|
2016-03-18
|
|
Zenphoto 1.4.11 - Remote File Inclusion Vulnerability
|
125 |
WEB
|
curesec
|
2016-03-08
|
|
ATutor LMS install_modules.php CSRF Remote Code Execution Vulnerability
|
173 |
WEB
|
mr_me
|
2016-03-04
|
|
WordPress Bulk Delete Plugin 5.5.3 - Privilege Escalation
|
145 |
WEB
|
Panagiotis Vagenas
|
2016-03-01
|
|
Pulse CMS 4.5.2 Local File Inclusion
|
364 |
WEB
|
Ehsan Hosseini
|
2016-02-26
|
|
IBM Lotus Domino <= R8 Password Hash Extraction Exploit
|
332 |
WEB
|
Jonathan Broche
|
2016-02-25
|
|
WordPress Extra User Details Plugin 0.4.2 - Privilege Escalation
|
109 |
WEB
|
Panagiotis Vagenas
|
2016-02-18
|
|
Cisco ASA VPN Portal Cross Site Scripting
|
148 |
WEB
|
Juan Sacco
|
2016-02-17
|
|
phpMyBackupPro 2.5 - Remote Command Execution / CSRF
|
131 |
WEB
|
hyp3rlinx
|
2016-02-17
|
|
Inductive Automation Ignition 7.8.1 Remote Leakage Of Shared Buffers
|
218 |
WEB
|
LiquidWorm
|
2016-02-14
|
|
Wordpress Smallbiz Themes Remote File Uploads Vulnerability
|
378 |
WEB
|
Milad Hacking
|
2016-02-14
|
|
WordPress WooCommerce Store Toolkit Plugin 1.5.5 - Privilege Escalation Exploit
|
102 |
WEB
|
Panagiotis Vagenas
|
2016-02-14
|
|
WordPress WP User Frontend Plugin < 2.3.11 - Unrestricted File Upload Exploit
|
319 |
WEB
|
Panagiotis Vagenas
|
2016-02-14
|
|
JiveForums 5.5.25 Directory Traversal Exploit
|
217 |
WEB
|
Zhaohuan
|
2016-01-27
|
|
Glassfish Server - Arbitrary File Read Vulnerability
|
355 |
WEB
|
bingbing
|
2016-01-26
|
|
pfSense Firewall <= 2.2.5 - Config File CSRF
|
132 |
WEB
|
Aatif Shahdad
|
2016-01-22
|
|
Joomla com_forum Remote SQL Injection Exploit
|
222 |
WEB
|
Dz MinD Injector
|
2016-01-15
|
|
Manage Engine Application Manager 12.5 - Arbitrary Command Execution Vulnerability
|
362 |
WEB
|
Bikramaditya Guha
|
2016-01-15
|
|
SevOne NMS <= 5.3.6.0 - Remote Root Exploit
|
179 |
WEB
|
iamsecurity
|
2016-01-14
|
|
WhatsUp Gold 16.3 - Unauthenticated Remote Code Execution
|
100 |
WEB
|
Matt Buzanowski
|
2016-01-07
|
|
D-Link DCS-931L Arbitrary File Upload
|
160 |
WEB
|
Brendan Coles
|
2016-01-04
|
|
Joomla 3.4.5 Object Injection
|
225 |
WEB
|
Khashayar Fereidani
|
2016-01-04
|
|
WordPress Simple Ads Manager 2.9.4.116 SQL Injection
|
223 |
WEB
|
Kacper Szurek
|
2016-01-04
|
|
Simple Ads Manager 2.9.4.116 - SQL Injection
|
207 |
WEB
|
Kacper Szurek
|
2015-12-23
|
|
phpMyFAQ 2.7.9 PHP Code Injection
|
158 |
WEB
|
indoushka
|
2015-12-22
|
|
Ovidentia Widgets 1.0.61 - Remote Command Execution Exploit
|
138 |
WEB
|
bd0rk
|
2015-12-16
|
|
Article Script 1.00 SQL Injection
|
100 |
WEB
|
Linux Zone Research Team
|
2015-12-16
|
|
WordPress Tierra Billboard Manager 1.14 SQL Injection
|
134 |
WEB
|
Linux Zone Research Team
|
2015-12-15
|
|
Joomla MyDynGallery SQL Injection
|
200 |
WEB
|
D35m0nd142
|
2015-12-08
|
|
DMarket 1.0 Remote PHP Code Injection
|
118 |
WEB
|
indoushka
|
2015-12-07
|
|
Atlassian HipChat for Jira Plugin Velocity Template Injection
|
211 |
WEB
|
sinn3r
|
2015-12-02
|
|
Advantech Switch Bash Environment Variable Code Injection
|
150 |
WEB
|
hdm
|
2015-11-26
|
|
Dimofinf 3.0.0 SQL Injection
|
88 |
WEB
|
D35m0nd142
|
2015-11-24
|
|
vBulletin 5.x - Remote Code Execution Exploit
|
106 |
WEB
|
Mohammad Reza
|
2015-11-18
|
|
WordPress Users Ultra 1.5.50 Unrestricted File Upload
|
161 |
WEB
|
panVagenas
|
2015-11-17
|
|
D-Link DIR-816L Cross Site Request Forgery
|
179 |
WEB
|
Bhadresh Patel
|
2015-11-17
|
|
D-Link SSDP Command Injection
|
203 |
WEB
|
Samuel Huntley
|
2015-11-17
|
|
D-Link DIR-890L/R Buffer Overflow
|
348 |
WEB
|
Samuel Huntley
|
2015-11-17
|
|
D-Link DIR-866L Buffer Overflow
|
120 |
WEB
|
Samuel Huntley
|
2015-11-17
|
|
D-Link DIR-825 Buffer Overflow / Directory Traversal
|
79 |
WEB
|
Samuel Huntley
|
2015-11-17
|
|
D-Link DIR-818W Buffer Overflow / Command Injection
|
73 |
WEB
|
Samuel Huntley
|
2015-11-17
|
|
D-Link DGL5500 - HNAP Buffer Overflow Vulnerability
|
82 |
WEB
|
Samuel Huntley
|
2015-11-16
|
|
Idera Up.Time Monitoring Station 7.0 post2file.php Arbitrary File Upload Version 1
|
176 |
WEB
|
Denis Andzakovic
|
2015-11-16
|
|
Idera Up.Time Monitoring Station 7.4 post2file.php Arbitrary File Upload Version 2
|
169 |
WEB
|
Denis Andzakovic
|
2015-11-16
|
|
vBulletin 5.1.2 Unserialize Code Execution
|
258 |
WEB
|
cutz
|
2015-11-11
|
|
Google AdWords <= 6.2.0 API client libraries - XML eXternal Entity Injection (XXE)
|
130 |
WEB
|
Dawid Golunski
|
2015-11-11
|
|
Google AdWords API PHP client library <= 6.2.0 - Arbitrary PHP Code Execution
|
50 |
WEB
|
Dawid Golunski
|
2015-11-11
|
|
Jenkins 1.633 - Unauthenticated Credential Recovery
|
207 |
WEB
|
The Repo
|
2015-11-10
|
|
Google AdWords API PHP Client Library 6.2.0 XXE Injection
|
178 |
WEB
|
Dawid Golunski
|
2015-11-10
|
|
Google AdWords API PHP Client Library 6.2.0 Code Execution
|
157 |
WEB
|
Dawid Golunski
|