Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2017-08-02   Advantech SUSIAccess <= 3.0 - Directory Traversal / Information Disclosure (Metasploit) 153 WEB James Fitts
2017-07-31   GitHub Enterprise < 2.8.7 - Remote Code Execution 159 WEB orange
2017-07-27   WebKit JSC - 'JSObject::putInlineSlow and JSValue::putToPrimitive' Universal Cross-Site Scripting 130 WEB Google Security Research
2017-07-25   ManageEngine Desktop Central 10 Build 100087 - Remote Code Execution (Metasploit) 235 WEB Kacper Szurek
2017-07-21   Netscaler SD-WAN 9.1.2.26.561201 - Command Injection (Metasploit) 170 WEB xort
2017-07-21   Sonicwall < 8.1.0.2-14sv - 'sitecustomization.cgi' Command Injection (Metasploit) 154 WEB xort
2017-07-21   Sonicwall < 8.1.0.6-21sv - 'gencsr.cgi' Command Injection (Metasploit) 147 WEB xort
2017-07-19   Easy File Sharing Web Server 7.2 Buffer Overflow 185 WEB N_A
2017-07-18   Barracuda Load Balancer Firmware <= 6.0.1.006 - Remote Command Injection (Metasploit) 180 WEB xort
2017-07-18   Sophos Web Appliance 4.3.0.2 - 'trafficType' Remote Command Injection (Metasploit) 160 WEB xort
2017-07-17   WDTV Live SMP 2.03.20 - Remote Password Reset 223 WEB Sw1tCh
2017-07-17   Apache Struts 2.3.x Showcase - Remote Code Execution (PoC) 324 WEB Vex Woo
2017-07-13   RaidenHTTPD 2.0.44 User-Agent Cross Site Scripting 140 WEB sultan albalawi
2017-07-12   NfSen < 1.3.7 / AlienVault OSSIM 4.3.1 - 'customfmt' Command Injection 203 WEB Paul Taylor
2017-07-03   Humax HG100R 2.0.6 - Backup File Download 225 WEB gambler
2017-06-29   Easy File Sharing Web Server 7.2 - Unrestricted File Upload 278 WEB Chako
2017-06-26   Easy File Sharing HTTP Server 7.2 POST Buffer Overflow 108 WEB Marco Rivoli
2017-06-26   Symantec Messaging Gateway Remote Code Execution 157 WEB Mehmet Ince
2017-06-26   Netgear DGN2200 dnslookup.cgi Command Injection 132 WEB thecarterb
2017-06-22   PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution 184 WEB phackt_ul
2017-06-20   D-Link ADSL DSL-2640B SEA_1.01 Unauthenticated Remote DNS Changer 316 WEB Todor Donev
2017-06-20   D-Link DSL-2640B - Unauthenticated Remote DNS Change 146 WEB Todor Donev
2017-06-20   D-Link DSL-2640U - Unauthenticated DNS Change 212 WEB Todor Donev
2017-06-20   Beetel BCM96338 Router - Unauthenticated DNS Change 227 WEB Todor Donev
2017-06-20   UTstarcom WA3002G4 - Unauthenticated DNS Change 164 WEB Todor Donev
2017-06-20   iBall Baton iB-WRA150N - Unauthenticated DNS Change 210 WEB Todor Donev
2017-06-16   Aerohive HiveOS 5.1r5 < 6.1r5 - Remote Code Execution 262 WEB Ike-Clinton
2017-06-14   MyBB 1.8.12 Stored XSS / File Enumeration 245 WEB MLT
2017-06-13   EFS Easy Chat Server 3.1 - Password Reset 317 WEB Aitezaz Mohsin
2017-06-13   EFS Easy Chat Server 3.1 - Password Disclosure 133 WEB Aitezaz Mohsin
2017-06-13   IPFire 2.19 - Remote Code Execution 163 WEB 0x09AL
2017-06-07   Kronos Telestaff < 2.92EU29 - SQL Injection 156 WEB Goran Tuzovic
2017-06-06   EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 - Remote Code Execution 211 WEB LiquidWorm
2017-06-02   Riverbed SteelHead VCX 9.6.0a - Arbitrary File Read 162 WEB Gregory Draperi
2017-06-01   WebKit CachedFrameBase::restore Universal Cross Site Scripting 112 WEB lokihardt
2017-06-01   WebKit Element::setAttributeNodeNS Use-After-Free 132 WEB lokihardt
2017-06-01   WebKit CachedFrame Universal Cross Site Scripting 143 WEB lokihardt
2017-06-01   WebKit JSC emitPutDerivedConstructorToArrowFunctionContextScope Incorrect Check 139 WEB lokihardt
2017-06-01   WebKit JSC JSObject::ensureLength Failure Check 129 WEB lokihardt
2017-06-01   WebKit Document::prepareForDestruction / CachedFrame Universal XSS 131 WEB lokihardt
2017-05-31   TerraMaster F2-420 NAS TOS 3.0.30 - Unauthenticated Remote Code Execution as Root 211 WEB Simone Margaritelli
2017-05-31   IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Hea 126 WEB SecuriTeam
2017-05-31   KEMP LoadMaster 7.135.0.13245 - Persistent Cross-Site Scripting / Remote Code Execution 155 WEB SecuriTeam
2017-05-31   uc-http Daemon - Local File Inclusion / Directory Traversal 128 WEB Project Insecurity
2017-05-31   Apple Safari 10.0.3(12602.4.8) / WebKit - 'HTMLObjectElement::updateWidget' Universal Cross-Site S 104 WEB Google Security Research
2017-05-31   WebKit - Stealing Variables via Page Navigation in FrameLoader::clear 123 WEB Google Security Research
2017-05-31   WebKit - enqueuePageshowEvent and enqueuePopstateEvent Universal Cross-Site Scripting 109 WEB Google Security Research
2017-05-31   WebKit - 'ContainerNode::parserRemoveChild' Universal Cross-Site Scripting 93 WEB Google Security Research
2017-05-31   Apple WebKit / Safari 10.0.3(12602.4.8) - 'Editor::Command::execute' Universal Cross-Site Scriptin 118 WEB Google Security Research
2017-05-25   NetGain EM 7.2.647 build 941 - Authentication Bypass / Local File Inclusion 145 WEB f3ci
2017-05-23   VX Search Enterprise GET Buffer Overflow 185 WEB Daniel Teixeira
2017-05-23   Sync Breeze Enterprise GET Buffer Overflow 145 WEB Daniel Teixeira
2017-05-23   MediaWiki SyntaxHighlight Extension Option Injection 259 WEB Yorick Koster
2017-05-22   Mantis Bug Tracker 1.3.10/2.3.0 - Cross-Site Request Forgery 89 WEB hyp3rlinx
2017-05-15   miniupnpc 2.0.20170421 Denial Of Service 275 WEB oststrom
2017-05-11   ASUS Routers CSRF / Information Disclosure 238 WEB Yakov Shafranovich
2017-05-10   LogRhythm Network Monitor - Authentication Bypass / Command Injection 142 WEB Francesco Oddo
2017-05-05   WordPress 4.6 - Unauthenticated Remote Code Execution 259 WEB Dawid Golunski
2017-05-05   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Code Execution 116 WEB LiquidWorm
2017-05-05   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Password Change 211 WEB LiquidWorm
2017-05-05   Serviio PRO 1.8 DLNA Media Streaming Server - REST API Information Disclosure 128 WEB LiquidWorm
2017-05-05   Alerton Webtalk 2.5 / 3.3 - Multiple Vulnerabilities 124 WEB David Tomaschik
2017-04-28   Simple File Uploader - Arbitrary File Download 232 WEB Daniel Godoy
2017-04-28   TYPO3 News Module - SQL Injection 153 WEB Charles Fol
2017-04-26   OpenText Documentum Content Server - dm_bp_transition.ebs docbase Method Arbitrary Code Execution 240 WEB Andrey B. Panfilov
2017-04-21   Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'operationSpreadGeneric' Universal Cross-Site Scrip 117 WEB Google Security Research
2017-04-21   Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'PrototypeMap::createEmptyStructure' Universal Cros 151 WEB Google Security Research
2017-04-19   WebKit operationSpreadGeneric Universal Cross Site Scripting 140 WEB lokihardt
2017-04-18   Mantis Bug Tracker 1.3.0/2.3.0 - Password Reset 137 WEB hyp3rlinx
2017-04-18   Huawei HG532n Command Injection 160 WEB Ahmed S. Darwish
2017-04-14   Alienvault OSSIM/USM 5.3.4/5.3.5 - Remote Command Execution (Metasploit) 181 WEB Peter Lapp
2017-04-13   PCMAN FTP Server 2.0.7 ACCT Buffer Overflow 120 WEB Cybernetic
2017-04-13   XiongMai uc-http 1.0.0 Local File Inclusion / Directory Traversal 163 WEB Project Insecurity
2017-04-12   Apple WebKit / Safari 10.0.3 (12602.4.8) - Universal Cross-Site Scripting via a Focus Event and a Li 115 WEB Google Security Research
2017-04-12   Apple WebKit / Safari 10.0.3 (12602.4.8) - Synchronous Page Load Universal Cross-Site Scripting 185 WEB Google Security Research
2017-04-12   Brother MFC-J6520DW - Authentication Bypass / Password Change 192 WEB Patryk Bogdan
2017-04-12   Adobe Multiple Products - XML Injection File Content Disclosure 180 WEB Thomas Sluyter
2017-04-11   WordPress Plugin CopySafe Web Protect < 2.6 - Cross-Site Request Forgery 219 WEB Zhiyang Zeng
2017-04-11   WordPress Plugin WHIZZ < 1.1.1 - Cross-Site Request Forgery 235 WEB Zhiyang Zeng
2017-04-11   e107 CMS 2.1.4 - Cross-Site Request Forgery 162 WEB Zhiyang Zeng
2017-04-11   QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection 151 WEB Harry Sintonen
2017-04-11   WordPress Plugin Firewall 2 1.3 - Cross-Site Request Forgery / Cross-Site Scripting 134 WEB dxw
2017-04-11   Wordpress webplayer Plugins SQL Injection Vulnerability 364 WEB Hassan Shakeri
2017-04-07   HelpDEZK 1.1.1 - Cross-Site Request Forgery / Code Execution 200 WEB rungga_reksya
2017-04-07   Moodle 2.x/3.x - SQL Injection 181 WEB Marko Belzetski
2017-04-06   D-Link DIR-615 - Cross-Site Request Forgery 207 WEB Pratik S. Shah
2017-04-05   Apple WebKit 10.0.2(12602.3.12.0.1, r210800) - 'constructJSReadableStreamDefaultReader' Type Confu 159 WEB Google Security Research
2017-04-05   Apple WebKit 10.0.2(12602.3.12.0.1) - 'disconnectSubframes' Universal Cross-Site Scripting 108 WEB Google Security Research
2017-04-05   Apple Webkit - Universal Cross-Site Scripting by Accessing a Named Property from an Unloaded Window 193 WEB Google Security Research
2017-04-05   Apple Webkit - 'JSCallbackData' Universal Cross-Site Scripting 214 WEB Google Security Research
2017-04-05   Apple WebKit 10.0.2(12602.3.12.0.1) - 'Frame::setDocument (1)' Universal Cross-Site Scripting 207 WEB Google Security Research
2017-04-05   Splunk Enterprise - Information Disclosure 183 WEB hyp3rlinx
2017-03-30   EyesOfNetwork (EON) 5.1 - SQL Injection 220 WEB Dany Bach
2017-03-21   D-Link DGS-1510 - Multiple Vulnerabilities 138 WEB Varang Amin
2017-03-20   Wordpress Plugin Membership Simplified 1.58 - Arbitrary File Download 179 WEB The Martian
2017-03-20   Microsoft Internet Information Services Cross Site Scripting 131 WEB David Fernandez
2017-03-16   GitHub Enterprise 2.8.0 < 2.8.6 - Remote Code Execution 158 WEB iblue
2017-03-15   Microsoft Edge Fetch API Arbitrary Header Setting 219 WEB Securify B.V.
2017-03-13   e107 <= 2.1.4 - 'keyword' Blind SQL Injection 238 WEB StAkeR
2017-03-13   WatchGuard XTMv 11.12 Build 516911 - User Management Cross-Site Request Forgery 252 WEB KoreLogic
2017-03-10   FTP Voyager Scheduler 16.2.0 - Cross-Site Request Forgery 349 WEB hyp3rlinx
2017-03-10   ASUSWRT RT-AC53 (3.0.0.4.380.6038) - Remote Code Execution 305 WEB Bruno Bierbaumer
2017-03-10   Drupal 7.x Module Services - Remote Code Execution 332 WEB Charles Fol
2017-03-09   Navetti PricePoint 4.6.0.0 - SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery 209 WEB SEC Consult
2017-03-08   Western Digital My Cloud Command Injection 331 WEB Remco Vermeulen
2017-03-07   Deluge Web UI 1.3.13 - Cross-Site Request Forgery 249 WEB Kyle Neideck
2017-03-07   WordPress Multiple Plugins - Arbitrary File Upload 345 WEB The Martian
2017-03-06   pfSense 2.3.2 Cross Site Request Forgery / Cross Site Scripting 222 WEB Yann CAM
2017-03-06   WordPress Username Enumeration 291 WEB Dctor
2017-03-01   NETGEAR DGN2200v1/v2/v3/v4 - Cross-Site Request Forgery 218 WEB SivertPL
2017-03-01   Blizard BB 1.7 (privtmsg) MD5 Hash Retrieve Blind sql injection Exploit 367 WEB StAkeR
2017-02-28   Grails PDF Plugin 0.6 - XML External Entity Injection 257 WEB Charles Fol
2017-02-28   NETGEAR DGN2200v1/v2/v3/v4 - 'dnslookup.cgi' Remote Command Execution 231 WEB SivertPL
2017-02-27   Apple WebKit 10.0.2 - 'Frame::setDocument' Universal Cross-Site Scripting 183 WEB Google Security Research
2017-02-27   Apple WebKit 10.0.2 - Cross-Origin or Sandboxed IFRAME Pop-up Blocker Bypass 248 WEB Google Security Research
2017-02-27   Apple WebKit 10.0.2 - 'FrameLoader::clear' Universal Cross-Site Scripting 236 WEB Google Security Research
2017-02-23   Teradici Management Console 2.2.0 - Privilege Escalation 378 WEB hantwister
2017-02-22   AlienVault OSSIM/USM <= 5.3.1 - Remote Code Execution (Metasploit) 152 WEB Mehmet Ince
2017-02-22   Sonicwall 8.1.0.2-14sv - 'viewcert.cgi' Remote Command Injection (Metasploit) 221 WEB xort
2017-02-22   Sonicwall 8.1.0.2-14sv - 'extensionsettings.cgi' Remote Command Injection (Metasploit) 191 WEB xort
2017-02-22   Sophos Web Appliance 4.2.1.3 - DiagnosticTools Remote Command Injection (Metasploit) 196 WEB xort
2017-02-22   Sophos Web Appliance 4.2.1.3 - block/unblock Remote Command Injection (Metasploit) 243 WEB xort
2017-02-20   NETGEAR DGN2200v1/v2/v3/v4 - 'ping.cgi' Remote Command Execution 246 WEB SivertPL
2017-02-20   TI Online Examination System 2.0 Admin Password Changer Exploit 273 WEB StAkeR
2017-02-17   dotCMS 3.6.1 - Blind Boolean SQL Injection 267 WEB Ben Nott