Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2016-09-18   AnoBBS 1.0.1 - Remote File Inclusion 101 WEB bd0rk
2016-09-14   wdCalendar 2 - SQL Injection 192 WEB Alfonso Castillo Angel
2016-09-14   Cherry Music 0.35.1 - Arbitrary File Disclosure 204 WEB feedersec
2016-09-12   Vodafone Mobile Wifi - Reset Admin Password 272 WEB Daniele Linguaglossa
2016-09-09   Zabbix 2.0 - 3.0.3 - SQL Injection 139 WEB Zzzians
2016-09-08   Adobe ColdFusion < 11 Update 10 - XML External Entity Injection 256 WEB Dawid Golunski
2016-09-05   Belkin F9K1122v1 1.00.30 - Buffer Overflow (via Cross-Site Request Forgery) 212 WEB b1ack0wl
2016-09-05   Easy File Sharing Web Server 7.2 SEH Buffer Overflow 174 WEB Iran Cyber Security Group
2016-09-01   CactuShop 7 Database Disclosure 173 WEB indoushka
2016-08-31   Arabportal 2.x RCE Vulnerability 80 WEB Team Uruk
2016-08-30   HelpDeskZ 1.0.2 - Unauthenticated Shell Upload 231 WEB Lars Morgenroth
2016-08-29   Prestashop VtermSlideShow Module Arbitrary File Upload Exploit 138 WEB PentesterDesk
2016-08-29   Prestashop Attributewizardpro Module Arbitrary File Upload Exploit 136 WEB PentesterDesk
2016-08-29   Prestashop Multi Modules Arbitrary File Upload Exploit 222 WEB PentesterDesk
2016-08-23   WordPress 4.5.3 - Directory Traversal / Denial of Service 199 WEB Yorick Koster
2016-08-23   VideoIQ Camera - Local File Disclosure 141 WEB Yakir Wizman
2016-08-23   MESSOA IP Cameras (Multiple Models) - Unauthenticated Password Change 84 WEB Todor Donev
2016-08-23   ZYCOO IP Phone System - Remote Command Execution 105 WEB 0x4148
2016-08-19   SIEMENS IP Camera CCMW1025 x.2.2.1798 - Remote Admin Credentials Change 114 WEB Todor Donev
2016-08-11   EyeLock nano NXT 3.5 - Remote Root Exploit 213 WEB LiquidWorm
2016-08-11   EyeLock nano NXT 3.5 - Local File Disclosure 74 WEB LiquidWorm
2016-08-11   vBulletin 5.2.2 - Preauth Server Side Request Forgery (SSRF) 336 WEB Dawid Golunski
2016-08-11   Nagios Network Analyzer 2.2.1 - Multiple CSRF 183 WEB hyp3rlinx
2016-08-09   NUUO NVRmini 2 3.0.8 - (Add Admin) CSRF 324 WEB LiquidWorm
2016-08-09   NUUO NVRmini 2 3.0.8 - Remote Root Exploit 339 WEB LiquidWorm
2016-08-09   PhpMyAdmin 4.6.2 - Post-Auth Remote Code Execution 124 WEB iamsecurity
2016-07-27   PHP File Vault 0.9 - Directory Traversal 96 WEB N_A
2016-07-27   Bellini/Supercook Wi-Fi Yumi SC200 - Multiple Vulnerabilities 90 WEB James McLean
2016-07-27   Technicolor TC7200 Modem/Router STD6.02.11 - Multiple Vulnerabilities 154 WEB Gergely Eberhardt
2016-07-27   Ubee EVW3226 Modem/Router 1.0.20 - Multiple Vulnerabilities 76 WEB Gergely Eberhardt
2016-07-27   PHP gettext (gettext.php) 1.0.12 - Unauthenticated Code Execution 71 WEB kmkz
2016-07-27   Drupal CODER Module 2.5 - Remote Command Execution (Metasploit) 66 WEB Mehmet Ince
2016-07-22   Technicolor TC7200 Modem / Router Session Management / Fixed Password 159 WEB Gergely Eberhardt
2016-07-22   Cisco EPC3925 UPC Modem / Router Default Passphrase 136 WEB Gergely Eberhardt
2016-07-21   WordPress Video Player Plugin 1.5.16 - SQL Injection 121 WEB David Vaartjes
2016-07-21   Wowza Streaming Engine 4.5.0 - Multiple XSS 113 WEB LiquidWorm
2016-07-21   Wowza Streaming Engine 4.5.0 - Add Advanced Admin CSRF 98 WEB LiquidWorm
2016-07-21   Wowza Streaming Engine 4.5.0 - Remote Privilege Escalation 86 WEB LiquidWorm
2016-07-19   vBulletin 4.x - SQLi in breadcrumbs via xmlrpc API (Post-Auth) 93 WEB tintinweb
2016-07-19   vBulletin 5.x/4.x - Persistent XSS in AdminCP/ApiLog via xmlrpc API (Post-Auth) 71 WEB tintinweb
2016-07-13   Prestashop vtermslidesshow module Arbitrary File Upload Exploit 314 WEB PentesterDesk
2016-07-12   Belkin Router AC1200 Firmware 1.00.27 - Authentication Bypass 100 WEB Gregory Smiley
2016-07-11   CyberPower Systems PowerPanel 3.1.2 - XXE Out-Of-Band Data Retrieval 208 WEB LiquidWorm
2016-07-11   php Real Estate Script 3 - Arbitrary File Disclosure 63 WEB Meisam Monsef
2016-07-11   WordPress WP-DownloadManager Plugin 1.68.1 - Arbitrary File Upload Vulnerability 225 WEB Mojtaba MobhaM
2016-07-07   PrinceXML Wrapper Class Command Injection 211 WEB Brandon Perry
2016-07-06   Nagios XI Chained Remote Code Execution 210 WEB wvu
2016-07-05   WordPress Real3D FlipBook Plugin - Multiple Vulnerabilities 139 WEB Mukarram Khalid
2016-07-01   Ubiquiti Administration Portal - CSRF to Remote Command Execution 99 WEB KoreLogic
2016-07-01   WordPress Ultimate Membership Pro Plugin 3.3 - SQL Injection 145 WEB wp0Day
2016-07-01   Symantec Endpoint Protection Manager 12.1 - Multiple Vulnerabilities 101 WEB hyp3rlinx
2016-06-29   Prestashop Attribute Wizard Pro module Arbitrary File Upload Exploit 720 WEB PentesterDesk
2016-06-28   Untangle NGFW 12.1.0 Beta execEvil() Command Injection 190 WEB Matt Bush
2016-06-28   Ruby HTTP Header Injection 108 WEB rootredrain
2016-06-28   MyLittleForum 2.3.5 - PHP Command Injection 77 WEB hyp3rlinx
2016-06-23   Prestashop modules Arbitrary File Upload Vulnerability 818 WEB PentesterDesk Team
2016-06-21   Airia - Webshell Upload Exploit 116 WEB HaHwul
2016-06-21   Airia - (Add Content) CSRF 103 WEB HaHwul
2016-06-21   WordPress Ultimate Product Catalog Plugin 3.8.1 - Privilege Escalation Exploit 110 WEB Joaquin Ramirez Martinez
2016-06-21   WordPress Premium SEO Pack 1.9.1.3 wp_options Overwrite 93 WEB wp0Day.com
2016-06-20   Skype For Business 2013 User Enumeration 69 WEB nyxgeek
2016-06-20   Microsoft Internet Explorer 11 Garbage Collector Attribute Type Confusion 76 WEB SkyLined
2016-06-20   phpATM 1.32 - Remote Command Execution (Shell Upload) on Windows Servers 90 WEB Paolo Massenio
2016-06-20   WordPress Gravity Forms Plugin 1.8.19 - Arbitrary File Upload 324 WEB Abk Khan
2016-06-16   PHPLive 4.4.8 - 4.5.4 - Password Recovery SQL Injection 105 WEB Tiago Carvalho
2016-06-15   WordPress Social Stream Plugin 1.5.15 - wp_options Overwrite 111 WEB wp0Day.com
2016-06-14   Viart Shopping Cart 5.0 CSRF / Shell Upload 197 WEB Ali Ghanbari
2016-06-14   Zabbix 2.2 - 3.0.3 - RCE with API JSON-RPC 147 WEB Alexander Gurin
2016-06-12   Mobiketa 1.0 - CSRF Add Admin Exploit 72 WEB Murat Yilmazlar
2016-06-12   Dell OpenManage Server Administrator 8.3 - XML External Entity Exploit 261 WEB hantwister
2016-06-08   Apache Continuum 1.4.2 Command Injection / Cross Site Scripting 82 WEB David Shanahan
2016-06-07   WordPress Uncode Theme 1.3.1 - Arbitrary File Upload 167 WEB wp0Day.com
2016-06-07   WordPress Newspaper Theme 6.7.1 - Privilege Escalation 178 WEB wp0Day.com
2016-06-07   WordPress WP PRO Advertising System Plugin 4.6.18 - SQL Injection 208 WEB wp0Day.com
2016-06-07   WordPress Creative Multi-Purpose Theme 9.1.3 - Stored XSS 224 WEB wp0Day.com
2016-06-01   FlatPress 1.0.3 - CSRF Arbitrary File Upload 280 WEB LiquidWorm
2016-05-30   WordPress Ninja Forms Unauthenticated File Upload 139 WEB Rob Carr
2016-05-30   Linknat VOS3000/VOS2009 SQL Injection Exploit 264 WEB Osama Khalid
2016-05-24   Job Script by Scubez - Remote Code Execution 111 WEB Bikramaditya Guha
2016-05-19   Magento < 2.0.6 - Unauthenticated Arbitrary Unserialize -> Arbitrary Write File 182 WEB agix
2016-05-17   TP-Link SC2020n Authenticated Telnet Injection 107 WEB Nicholas Starke
2016-05-17   Meteocontrol WEB’log - Admin Password Disclosure 99 WEB Karn Ganeshen
2016-05-17   eXtplorer 2.1.9 - Archive Path Traversal 173 WEB hyp3rlinx
2016-05-17   Web interface for DNSmasq / Mikrotik - SQL Injection 270 WEB hyp3rlinx
2016-05-06   ImageMagick < 6.9.3-9 - Multiple Vulnerabilities 238 WEB Nikolay Ermishkin
2016-05-05   PHP Imagick 3.3.0 - disable_functions Bypass 574 WEB RicterZ
2016-04-28   Multiple Vendors (RomPager <= 4.34) - Misfortune Cookie Router Authentication Bypass 123 WEB Milad Doorbash
2016-04-26   Gemtek CPE7000 - WLTCS-106 sysconf.cgi Unauthenticated Remote Command Execution (MSF) 98 WEB Federico Scalco
2016-04-26   Gemtek CPE7000 - WLTCS-106 Administrator SID Retriever (MSF) 145 WEB Federico Scalco
2016-04-22   Gemtek CPE7000 / WLTCS-106 - Multiple Vulnerabilities 237 WEB Federico Ramondino
2016-04-22   Symantec Brightmail 10.6.0-7- LDAP Credentials Disclosure 118 WEB Fakhir Karim Reda
2016-04-21   PHPBack 1.3.0 - SQL Injection 229 WEB hyp3rlinx
2016-04-15   Oracle Application Testing Suite 12.4.0.2.0 - Authentication Bypass and Arbitrary File Upload Exploi 201 WEB Zhou Yu
2016-04-06   WordPress Advanced Video Plugin 1.0 - Local File Inclusion Exploit 214 WEB evait security GmbH
2016-03-18   Zenphoto 1.4.11 - Remote File Inclusion Vulnerability 127 WEB curesec
2016-03-08   ATutor LMS install_modules.php CSRF Remote Code Execution Vulnerability 175 WEB mr_me
2016-03-04   WordPress Bulk Delete Plugin 5.5.3 - Privilege Escalation 148 WEB Panagiotis Vagenas
2016-03-01   Pulse CMS 4.5.2 Local File Inclusion 366 WEB Ehsan Hosseini
2016-02-26   IBM Lotus Domino <= R8 Password Hash Extraction Exploit 335 WEB Jonathan Broche
2016-02-25   WordPress Extra User Details Plugin 0.4.2 - Privilege Escalation 112 WEB Panagiotis Vagenas
2016-02-18   Cisco ASA VPN Portal Cross Site Scripting 150 WEB Juan Sacco
2016-02-17   phpMyBackupPro 2.5 - Remote Command Execution / CSRF 133 WEB hyp3rlinx
2016-02-17   Inductive Automation Ignition 7.8.1 Remote Leakage Of Shared Buffers 220 WEB LiquidWorm
2016-02-14   Wordpress Smallbiz Themes Remote File Uploads Vulnerability 380 WEB Milad Hacking
2016-02-14   WordPress WooCommerce Store Toolkit Plugin 1.5.5 - Privilege Escalation Exploit 104 WEB Panagiotis Vagenas
2016-02-14   WordPress WP User Frontend Plugin < 2.3.11 - Unrestricted File Upload Exploit 321 WEB Panagiotis Vagenas
2016-02-14   JiveForums 5.5.25 Directory Traversal Exploit 219 WEB Zhaohuan
2016-01-27   Glassfish Server - Arbitrary File Read Vulnerability 355 WEB bingbing
2016-01-26   pfSense Firewall <= 2.2.5 - Config File CSRF 135 WEB Aatif Shahdad
2016-01-22   Joomla com_forum Remote SQL Injection Exploit 224 WEB Dz MinD Injector
2016-01-15   Manage Engine Application Manager 12.5 - Arbitrary Command Execution Vulnerability 365 WEB Bikramaditya Guha
2016-01-15   SevOne NMS <= 5.3.6.0 - Remote Root Exploit 181 WEB iamsecurity
2016-01-14   WhatsUp Gold 16.3 - Unauthenticated Remote Code Execution 102 WEB Matt Buzanowski
2016-01-07   D-Link DCS-931L Arbitrary File Upload 162 WEB Brendan Coles
2016-01-04   Joomla 3.4.5 Object Injection 228 WEB Khashayar Fereidani
2016-01-04   WordPress Simple Ads Manager 2.9.4.116 SQL Injection 226 WEB Kacper Szurek
2016-01-04   Simple Ads Manager 2.9.4.116 - SQL Injection 209 WEB Kacper Szurek
2015-12-23   phpMyFAQ 2.7.9 PHP Code Injection 161 WEB indoushka
2015-12-22   Ovidentia Widgets 1.0.61 - Remote Command Execution Exploit 141 WEB bd0rk
2015-12-16   Article Script 1.00 SQL Injection 102 WEB Linux Zone Research Team
2015-12-16   WordPress Tierra Billboard Manager 1.14 SQL Injection 137 WEB Linux Zone Research Team
2015-12-15   Joomla MyDynGallery SQL Injection 202 WEB D35m0nd142
2015-12-08   DMarket 1.0 Remote PHP Code Injection 121 WEB indoushka
2015-12-07   Atlassian HipChat for Jira Plugin Velocity Template Injection 213 WEB sinn3r
2015-12-02   Advantech Switch Bash Environment Variable Code Injection 152 WEB hdm