Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2016-08-19   SIEMENS IP Camera CCMW1025 x.2.2.1798 - Remote Admin Credentials Change 112 WEB Todor Donev
2016-08-11   EyeLock nano NXT 3.5 - Remote Root Exploit 209 WEB LiquidWorm
2016-08-11   EyeLock nano NXT 3.5 - Local File Disclosure 72 WEB LiquidWorm
2016-08-11   vBulletin 5.2.2 - Preauth Server Side Request Forgery (SSRF) 333 WEB Dawid Golunski
2016-08-11   Nagios Network Analyzer 2.2.1 - Multiple CSRF 181 WEB hyp3rlinx
2016-08-09   NUUO NVRmini 2 3.0.8 - (Add Admin) CSRF 322 WEB LiquidWorm
2016-08-09   NUUO NVRmini 2 3.0.8 - Remote Root Exploit 337 WEB LiquidWorm
2016-08-09   PhpMyAdmin 4.6.2 - Post-Auth Remote Code Execution 121 WEB iamsecurity
2016-07-27   PHP File Vault 0.9 - Directory Traversal 93 WEB N_A
2016-07-27   Bellini/Supercook Wi-Fi Yumi SC200 - Multiple Vulnerabilities 88 WEB James McLean
2016-07-27   Technicolor TC7200 Modem/Router STD6.02.11 - Multiple Vulnerabilities 152 WEB Gergely Eberhardt
2016-07-27   Ubee EVW3226 Modem/Router 1.0.20 - Multiple Vulnerabilities 73 WEB Gergely Eberhardt
2016-07-27   PHP gettext (gettext.php) 1.0.12 - Unauthenticated Code Execution 69 WEB kmkz
2016-07-27   Drupal CODER Module 2.5 - Remote Command Execution (Metasploit) 64 WEB Mehmet Ince
2016-07-22   Technicolor TC7200 Modem / Router Session Management / Fixed Password 156 WEB Gergely Eberhardt
2016-07-22   Cisco EPC3925 UPC Modem / Router Default Passphrase 134 WEB Gergely Eberhardt
2016-07-21   WordPress Video Player Plugin 1.5.16 - SQL Injection 119 WEB David Vaartjes
2016-07-21   Wowza Streaming Engine 4.5.0 - Multiple XSS 111 WEB LiquidWorm
2016-07-21   Wowza Streaming Engine 4.5.0 - Add Advanced Admin CSRF 96 WEB LiquidWorm
2016-07-21   Wowza Streaming Engine 4.5.0 - Remote Privilege Escalation 83 WEB LiquidWorm
2016-07-19   vBulletin 4.x - SQLi in breadcrumbs via xmlrpc API (Post-Auth) 90 WEB tintinweb
2016-07-19   vBulletin 5.x/4.x - Persistent XSS in AdminCP/ApiLog via xmlrpc API (Post-Auth) 69 WEB tintinweb
2016-07-13   Prestashop vtermslidesshow module Arbitrary File Upload Exploit 312 WEB PentesterDesk
2016-07-12   Belkin Router AC1200 Firmware 1.00.27 - Authentication Bypass 98 WEB Gregory Smiley
2016-07-11   CyberPower Systems PowerPanel 3.1.2 - XXE Out-Of-Band Data Retrieval 205 WEB LiquidWorm
2016-07-11   php Real Estate Script 3 - Arbitrary File Disclosure 60 WEB Meisam Monsef
2016-07-11   WordPress WP-DownloadManager Plugin 1.68.1 - Arbitrary File Upload Vulnerability 222 WEB Mojtaba MobhaM
2016-07-07   PrinceXML Wrapper Class Command Injection 206 WEB Brandon Perry
2016-07-06   Nagios XI Chained Remote Code Execution 207 WEB wvu
2016-07-05   WordPress Real3D FlipBook Plugin - Multiple Vulnerabilities 136 WEB Mukarram Khalid
2016-07-01   Ubiquiti Administration Portal - CSRF to Remote Command Execution 96 WEB KoreLogic
2016-07-01   WordPress Ultimate Membership Pro Plugin 3.3 - SQL Injection 143 WEB wp0Day
2016-07-01   Symantec Endpoint Protection Manager 12.1 - Multiple Vulnerabilities 98 WEB hyp3rlinx
2016-06-29   Prestashop Attribute Wizard Pro module Arbitrary File Upload Exploit 711 WEB PentesterDesk
2016-06-28   Untangle NGFW 12.1.0 Beta execEvil() Command Injection 188 WEB Matt Bush
2016-06-28   Ruby HTTP Header Injection 106 WEB rootredrain
2016-06-28   MyLittleForum 2.3.5 - PHP Command Injection 73 WEB hyp3rlinx
2016-06-23   Prestashop modules Arbitrary File Upload Vulnerability 814 WEB PentesterDesk Team
2016-06-21   Airia - Webshell Upload Exploit 113 WEB HaHwul
2016-06-21   Airia - (Add Content) CSRF 101 WEB HaHwul
2016-06-21   WordPress Ultimate Product Catalog Plugin 3.8.1 - Privilege Escalation Exploit 110 WEB Joaquin Ramirez Martinez
2016-06-21   WordPress Premium SEO Pack 1.9.1.3 wp_options Overwrite 91 WEB wp0Day.com
2016-06-20   Skype For Business 2013 User Enumeration 66 WEB nyxgeek
2016-06-20   Microsoft Internet Explorer 11 Garbage Collector Attribute Type Confusion 73 WEB SkyLined
2016-06-20   phpATM 1.32 - Remote Command Execution (Shell Upload) on Windows Servers 86 WEB Paolo Massenio
2016-06-20   WordPress Gravity Forms Plugin 1.8.19 - Arbitrary File Upload 322 WEB Abk Khan
2016-06-16   PHPLive 4.4.8 - 4.5.4 - Password Recovery SQL Injection 105 WEB Tiago Carvalho
2016-06-15   WordPress Social Stream Plugin 1.5.15 - wp_options Overwrite 109 WEB wp0Day.com
2016-06-14   Viart Shopping Cart 5.0 CSRF / Shell Upload 195 WEB Ali Ghanbari
2016-06-14   Zabbix 2.2 - 3.0.3 - RCE with API JSON-RPC 147 WEB Alexander Gurin
2016-06-12   Mobiketa 1.0 - CSRF Add Admin Exploit 69 WEB Murat Yilmazlar
2016-06-12   Dell OpenManage Server Administrator 8.3 - XML External Entity Exploit 259 WEB hantwister
2016-06-08   Apache Continuum 1.4.2 Command Injection / Cross Site Scripting 79 WEB David Shanahan
2016-06-07   WordPress Uncode Theme 1.3.1 - Arbitrary File Upload 165 WEB wp0Day.com
2016-06-07   WordPress Newspaper Theme 6.7.1 - Privilege Escalation 176 WEB wp0Day.com
2016-06-07   WordPress WP PRO Advertising System Plugin 4.6.18 - SQL Injection 206 WEB wp0Day.com
2016-06-07   WordPress Creative Multi-Purpose Theme 9.1.3 - Stored XSS 221 WEB wp0Day.com
2016-06-01   FlatPress 1.0.3 - CSRF Arbitrary File Upload 277 WEB LiquidWorm
2016-05-30   WordPress Ninja Forms Unauthenticated File Upload 134 WEB Rob Carr
2016-05-30   Linknat VOS3000/VOS2009 SQL Injection Exploit 262 WEB Osama Khalid
2016-05-24   Job Script by Scubez - Remote Code Execution 109 WEB Bikramaditya Guha
2016-05-19   Magento < 2.0.6 - Unauthenticated Arbitrary Unserialize -> Arbitrary Write File 180 WEB agix
2016-05-17   TP-Link SC2020n Authenticated Telnet Injection 104 WEB Nicholas Starke
2016-05-17   Meteocontrol WEB’log - Admin Password Disclosure 97 WEB Karn Ganeshen
2016-05-17   eXtplorer 2.1.9 - Archive Path Traversal 171 WEB hyp3rlinx
2016-05-17   Web interface for DNSmasq / Mikrotik - SQL Injection 267 WEB hyp3rlinx
2016-05-06   ImageMagick < 6.9.3-9 - Multiple Vulnerabilities 238 WEB Nikolay Ermishkin
2016-05-05   PHP Imagick 3.3.0 - disable_functions Bypass 572 WEB RicterZ
2016-04-28   Multiple Vendors (RomPager <= 4.34) - Misfortune Cookie Router Authentication Bypass 121 WEB Milad Doorbash
2016-04-26   Gemtek CPE7000 - WLTCS-106 sysconf.cgi Unauthenticated Remote Command Execution (MSF) 96 WEB Federico Scalco
2016-04-26   Gemtek CPE7000 - WLTCS-106 Administrator SID Retriever (MSF) 143 WEB Federico Scalco
2016-04-22   Gemtek CPE7000 / WLTCS-106 - Multiple Vulnerabilities 235 WEB Federico Ramondino
2016-04-22   Symantec Brightmail 10.6.0-7- LDAP Credentials Disclosure 116 WEB Fakhir Karim Reda
2016-04-21   PHPBack 1.3.0 - SQL Injection 227 WEB hyp3rlinx
2016-04-15   Oracle Application Testing Suite 12.4.0.2.0 - Authentication Bypass and Arbitrary File Upload Exploi 199 WEB Zhou Yu
2016-04-06   WordPress Advanced Video Plugin 1.0 - Local File Inclusion Exploit 214 WEB evait security GmbH
2016-03-18   Zenphoto 1.4.11 - Remote File Inclusion Vulnerability 125 WEB curesec
2016-03-08   ATutor LMS install_modules.php CSRF Remote Code Execution Vulnerability 173 WEB mr_me
2016-03-04   WordPress Bulk Delete Plugin 5.5.3 - Privilege Escalation 145 WEB Panagiotis Vagenas
2016-03-01   Pulse CMS 4.5.2 Local File Inclusion 364 WEB Ehsan Hosseini
2016-02-26   IBM Lotus Domino <= R8 Password Hash Extraction Exploit 332 WEB Jonathan Broche
2016-02-25   WordPress Extra User Details Plugin 0.4.2 - Privilege Escalation 109 WEB Panagiotis Vagenas
2016-02-18   Cisco ASA VPN Portal Cross Site Scripting 148 WEB Juan Sacco
2016-02-17   phpMyBackupPro 2.5 - Remote Command Execution / CSRF 131 WEB hyp3rlinx
2016-02-17   Inductive Automation Ignition 7.8.1 Remote Leakage Of Shared Buffers 218 WEB LiquidWorm
2016-02-14   Wordpress Smallbiz Themes Remote File Uploads Vulnerability 378 WEB Milad Hacking
2016-02-14   WordPress WooCommerce Store Toolkit Plugin 1.5.5 - Privilege Escalation Exploit 102 WEB Panagiotis Vagenas
2016-02-14   WordPress WP User Frontend Plugin < 2.3.11 - Unrestricted File Upload Exploit 319 WEB Panagiotis Vagenas
2016-02-14   JiveForums 5.5.25 Directory Traversal Exploit 217 WEB Zhaohuan
2016-01-27   Glassfish Server - Arbitrary File Read Vulnerability 355 WEB bingbing
2016-01-26   pfSense Firewall <= 2.2.5 - Config File CSRF 132 WEB Aatif Shahdad
2016-01-22   Joomla com_forum Remote SQL Injection Exploit 222 WEB Dz MinD Injector
2016-01-15   Manage Engine Application Manager 12.5 - Arbitrary Command Execution Vulnerability 362 WEB Bikramaditya Guha
2016-01-15   SevOne NMS <= 5.3.6.0 - Remote Root Exploit 179 WEB iamsecurity
2016-01-14   WhatsUp Gold 16.3 - Unauthenticated Remote Code Execution 100 WEB Matt Buzanowski
2016-01-07   D-Link DCS-931L Arbitrary File Upload 160 WEB Brendan Coles
2016-01-04   Joomla 3.4.5 Object Injection 225 WEB Khashayar Fereidani
2016-01-04   WordPress Simple Ads Manager 2.9.4.116 SQL Injection 223 WEB Kacper Szurek
2016-01-04   Simple Ads Manager 2.9.4.116 - SQL Injection 207 WEB Kacper Szurek
2015-12-23   phpMyFAQ 2.7.9 PHP Code Injection 158 WEB indoushka
2015-12-22   Ovidentia Widgets 1.0.61 - Remote Command Execution Exploit 138 WEB bd0rk
2015-12-16   Article Script 1.00 SQL Injection 100 WEB Linux Zone Research Team
2015-12-16   WordPress Tierra Billboard Manager 1.14 SQL Injection 134 WEB Linux Zone Research Team
2015-12-15   Joomla MyDynGallery SQL Injection 200 WEB D35m0nd142
2015-12-08   DMarket 1.0 Remote PHP Code Injection 118 WEB indoushka
2015-12-07   Atlassian HipChat for Jira Plugin Velocity Template Injection 211 WEB sinn3r
2015-12-02   Advantech Switch Bash Environment Variable Code Injection 150 WEB hdm
2015-11-26   Dimofinf 3.0.0 SQL Injection 88 WEB D35m0nd142
2015-11-24   vBulletin 5.x - Remote Code Execution Exploit 106 WEB Mohammad Reza
2015-11-18   WordPress Users Ultra 1.5.50 Unrestricted File Upload 161 WEB panVagenas
2015-11-17   D-Link DIR-816L Cross Site Request Forgery 179 WEB Bhadresh Patel
2015-11-17   D-Link SSDP Command Injection 203 WEB Samuel Huntley
2015-11-17   D-Link DIR-890L/R Buffer Overflow 348 WEB Samuel Huntley
2015-11-17   D-Link DIR-866L Buffer Overflow 120 WEB Samuel Huntley
2015-11-17   D-Link DIR-825 Buffer Overflow / Directory Traversal 79 WEB Samuel Huntley
2015-11-17   D-Link DIR-818W Buffer Overflow / Command Injection 73 WEB Samuel Huntley
2015-11-17   D-Link DGL5500 - HNAP Buffer Overflow Vulnerability 82 WEB Samuel Huntley
2015-11-16   Idera Up.Time Monitoring Station 7.0 post2file.php Arbitrary File Upload Version 1 176 WEB Denis Andzakovic
2015-11-16   Idera Up.Time Monitoring Station 7.4 post2file.php Arbitrary File Upload Version 2 169 WEB Denis Andzakovic
2015-11-16   vBulletin 5.1.2 Unserialize Code Execution 258 WEB cutz
2015-11-11   Google AdWords <= 6.2.0 API client libraries - XML eXternal Entity Injection (XXE) 130 WEB Dawid Golunski
2015-11-11   Google AdWords API PHP client library <= 6.2.0 - Arbitrary PHP Code Execution 50 WEB Dawid Golunski
2015-11-11   Jenkins 1.633 - Unauthenticated Credential Recovery 207 WEB The Repo
2015-11-10   Google AdWords API PHP Client Library 6.2.0 XXE Injection 178 WEB Dawid Golunski
2015-11-10   Google AdWords API PHP Client Library 6.2.0 Code Execution 157 WEB Dawid Golunski