Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2013-10-28   WordPress GeoPlaces 4.x Shell Upload 66 WEB DevilScreaM
2013-10-28   WebCollab 3.30 HTTP Response Splitting 77 WEB Manuel Garcia Cardenas
2013-10-24   Joomla Component com_maianmedia Remote Code Execution 97 WEB indexphp
2013-10-23   Apache Shindig 2.5.0 XXE Injection 74 WEB Kousuke Ebihara
2013-10-21   Bluetooth U 1.2.0 Directory Traversal 74 WEB Benjamin Kunz Mejri
2013-10-21   WebTester 5.x Command Execution 65 WEB Brendan Coles
2013-10-18   Oracle Portal Demo Organization Chart PL/SQL Injection 114 WEB Manuel Garcia Cardenas
2013-10-18   Level One Enterprise Access Points Password Disclosure 72 WEB Richard Weinberger
2013-10-15   Zabbix 2.0.8 SQL Injection / Remote Code Execution 94 WEB Lincoln
2013-10-08   WordPress Woopra Remote Code Execution 98 WEB wantexz
2013-10-08   WordPress Slimstat Ex Code Execution 69 WEB wantexz
2013-10-08   WordPress SEO Watcher Remote Code Execution 79 WEB wantexz
2013-09-27   Astium Remote Code Execution 138 WEB xistence
2013-09-26   Nodejs js-yaml load() Code Execution 117 WEB joev
2013-09-24   Raidsonic NAS Devices Unauthenticated Remote Command Execution 116 WEB juan vazquez
2013-08-29   SPIP Connect Parameter PHP Injection 83 WEB Frederic Cikala
2013-08-15   Struts2 2.3.15 Open Redirect 80 WEB Takeshi Terada
2013-08-15   Struts2 2.3.15 OGNL Injection 353 WEB Takeshi Terada
2013-08-12   Sybase EAServer XXE Injection 67 WEB MustLive
2013-08-08   MyBB 1.6.10 Open Redirection 60 WEB LiquidWorm
2013-07-30   PineApp Mail-SeCure test_li_connection.php Arbitrary Command Execution 66 WEB Dave Weinstein
2013-07-30   PineApp Mail-SeCure ldapsyncnow.php Arbitrary Command Execution 74 WEB Dave Weinstein
2013-07-30   PineApp Mail-SeCure livelog.html Arbitrary Command Execution 84 WEB temp66
2013-07-26   Powershell Payload Web Delivery 71 WEB Chris Campbell
2013-06-24   HP System Management Homepage JustGetSNMPQueue Command Injection 89 WEB sinn3r
2013-06-24   LibrettoCMS File Manager Arbitrary File Upload 110 WEB sinn3r
2013-06-19   MoinMoin twikidraw Action Traversal File Upload 77 WEB HTP
2013-06-09   Resin Application Server 4.0.36 Cross Site Scripting 68 WEB LiquidWorm
2013-06-09   Resin Application Server 4.0.36 Source Code Disclosure 68 WEB LiquidWorm
2013-06-08   JBoss AS Administrative Console Password Disclosure 237 WEB amroot
2013-06-04   Seowonintech Routers Remote Root File Dumper 57 WEB Todor Donev
2013-06-03   PhpTax 0.8 - File Manipulation(newvalue,field) Remote Code Execution 103 WEB CWH Underground
2013-05-31   HP LaserJet Pro P1606dn Password Reset 91 WEB m3tamantra
2013-05-29   Matterdaddy Market 1.4.2 Cross Site Request Forgery / Arbitrary File Upload 74 WEB KedAns-Dz
2013-05-20   D-Link DIR615h OS Command Injection 197 WEB juan vazquez
2013-04-26   phpMyAdmin 3.5.8 and 4.0.0-RC2 - Multiple Vulnerabilities 76 WEB waraxe
2013-04-26   Hornbill Supportworks ITSM 1.0.0 - SQL Injection Vulnerability 77 WEB Joseph Sheridan
2013-04-25   CiviCRM for Joomla 4.2.2 - Remote Code Injection 84 WEB iskorpitx
2013-04-25   SMF 2.0.4 PHP Code Injection 183 WEB Jakub Galczyk
2013-04-23   Janissaries Joomla Civicrm Shell Upload 69 WEB miyachung
2013-04-22   nginx 0.6.x Arbitrary Code Execution NullByte Injection 83 WEB Neal Poole
2013-04-22   Netgear DGN2200B pppoe.cgi Remote Command Execution 190 WEB juan vazquez
2013-04-18   Java Web Start Launcher Memory Corruption 181 WEB A. Antukh
2013-04-03   Aspen 0.8 Directory Traversal 75 WEB Daniel Ricardo dos Santos
2013-04-03   Netgear WNR1000 Authentication Bypass 104 WEB Roberto Paleari
2013-03-29   PsychoStats 3.2.2b Blind SQL Injection 64 WEB Mohamed from ALG
2013-03-29   McAfee Virtual Technician (MVT) 6.5.0.2101 Unsafe Active-X 82 WEB High-Tech Bridge SA
2013-03-29   AWS XMS 2.5 Path Traversal 82 WEB High-Tech Bridge SA
2013-03-21   TP-Link TL-WR740N Wireless Router Remote Denial Of Service 101 WEB LiquidWorm
2013-03-15   QuinStreet Database ID Spoofing 83 WEB Henry Garrison
2013-03-14   LCG Disk Pool Manager SQL Injection 61 WEB Adam Zabrocki
2013-03-14   Apache Rave User Exposure 62 WEB Andreas Guth
2013-03-13   Web Cookbook SQL Injection 75 WEB Saadat Ullah
2013-02-20   OpenEMR PHP File Upload 78 WEB juan vazquez
2013-01-29   PHP Weby Directory Software 1.2 Multiple Vulnerabilities 140 WEB AkaStep
2013-01-21   PHP-Charts 1.0 PHP Code Execution 61 WEB Akastep
2013-01-18   PHP Chart 1.0 Code Execution 86 WEB Akastep
2013-01-16   Oracle Application Framework Diagnostic Mode Bypass 108 WEB David Byrne
2013-01-09   GetSimple 3.1.2 Code Execution 54 WEB Jakub Galczyk
2013-01-05   Elastix 2.3 PHP Code Injection 81 WEB Faris AKA i-Hmx
2013-01-05   Simple Webserver 2.3-rc1 Directory Traversal 82 WEB CwG GeNiuS
2012-12-18   phpwcms 1.5.4.6 Remote Code Execution 101 WEB aeon flux
2012-12-07   Kordil EDMS v2.2.60rc3 SQL Injection Vulnerability 80 WEB Woody Hughes
2012-11-30   FCKEditor ASP Version 2.6.8 File Upload Protection Bypass 105 WEB Soroush Dalili
2012-11-30   Oracle OpenSSO 8.0 Multiple XSS POST Injection Vulnerabilities 89 WEB LiquidWorm
2012-11-14   Invision IP.Board 3.3.4 unserialize() PHP Code Execution 93 WEB sinn3r
2012-11-08   Invision Power Board 3.3.4 Unserialize REGEX Bypass 61 WEB webDEViL
2012-10-31   TP-LINK TL-WR841N Local File Inclusion Vulnerability 51 WEB Matan Azugi
2012-10-30   OneForum Multiple Vulnerabilities 61 WEB DaOne aka Mocking Bird
2012-10-30   Joomla Component com_jce remote Code Injecion / Execution Exploit (perl) 98 WEB Caddy-Dz
2012-10-22   ManageEngine Security Manager Plus <= 5.5 build 5505 Path Traversal 108 WEB xistence
2012-10-19   ModSecurity 2.6.8 Bypass 82 WEB Bernhard Mueller
2012-10-18   Oracle WebCenter Sites (FatWire Content Server) Multiple Vulnerabilities 96 WEB SEC Consult
2012-10-16   AjaXplorer checkInstall.php Remote Command Execution 80 WEB sinn3r
2012-10-11   ServersCheck Monitoring Software v9.0.12 / 9.0.14 - Stored XSS 64 WEB loneferret
2012-09-29   Wordpress phpBAK Red Config Vulnerability 64 WEB Angel Injection
2012-09-26   Auxilium RateMyPet Arbitrary File Upload 101 WEB sinn3r
2012-09-24   ZEN Load Balancer Filelog Command Execution 90 WEB Brendan Coles
2012-09-24   NTR ActiveX Control Check() Method Buffer Overflow 105 WEB juan vazquez
2012-09-24   NTR ActiveX Control StopModule() Remote Code Execution 120 WEB juan vazquez
2012-09-17   Sitecom MD-253 and MD-254 Network Storage Reverse Shell Exploit 180 WEB Mattijs van Ommeren
2012-09-05   JBoss DeploymentFileRepository WAR Deployment 97 WEB h0ng10
2012-09-05   MobileCartly 1.0 Arbitrary File Creation 165 WEB sinn3r
2012-09-04   Android Mobile 2.6.xx Bypass Security Vulnerability 102 WEB Taurus Omar
2012-08-31   AP NetWeaver HostControl Command Injection 48 WEB juan vazquez
2012-08-27   BusinessWiki 2.5RC3 Stored XSS & Arbitrary File Upload 53 WEB Shai rod
2012-08-27   WebPA <= 1.1.0.1 Multiple Vulnerabilities 84 WEB dun
2012-08-24   XODA 0.4.5 Arbitrary PHP File Upload 79 WEB Shai rod
2012-08-24   Apache Struts2 Remote Code Execution 110 WEB kxlzx
2012-08-24   op5 Monitoring v5.4.2 (VM Applicance) Multiple Vulnerabilities 79 WEB loneferret
2012-08-23   E-Mail Security Virtual Appliance learn-msg.cgi Command Injection 71 WEB iJoo
2012-08-22   Symantec Web Gateway <= 5.0.3.18 Arbitrary Password Change (MSF) 65 WEB Kc57
2012-08-22   Symantec Web Gateway <= 5.0.3.18 Arbitrary Password Change 67 WEB Kc57
2012-08-15   MaxForum v1.0.0 Local File Inclusion Vulnerability 95 WEB ahwak2000
2012-08-14   Cyclope Employee Surveillance Solution 6 SQL Injection 82 WEB sinn3r
2012-08-14   TestLink 1.9.3 Arbitrary File Upload 160 WEB Brendan Coles
2012-08-10   Cyclope Employee Surveillance Solution 6.0 SQL Injection 57 WEB loneferret
2012-08-09   IBM Proventia Network Mail Security System 2.5 POST File Read 96 WEB muts
2012-08-07   Power Bulletin Board Bypass 63 WEB i-Hmx
2012-08-06   am4ss Support System 1.2 PHP Code Injection Exploit 105 WEB i-Hmx
2012-08-01   WebPageTest Arbitrary PHP File Upload 68 WEB sinn3r
2012-07-31   Scrutinizer NetFlow / sFlow Analyzer 9.0.1 XSS / Bypass / File Upload 69 WEB Plixer International
2012-07-31   Symantec Web Gateway 5.0.3.18 (deptUploads_data.php groupid parameter) Blind SQLi 110 WEB @_Kc57
2012-07-30   CuteFlow 2.11.2 Arbitrary File Upload 114 WEB Brendan Coles
2012-07-27   Redaxo 4.4 Cross Site Scripting Vulnerability 89 WEB High-Tech Bridge Security Research Lab
2012-07-27   PHP UnZIP v0.1 - Full Disclosure 87 WEB TAURUS OMAR
2012-07-27   Develoweb - Blind SQL Injection Vulnerability 50 WEB TAURUS OMAR
2012-07-27   Thelia 1.5.1 Cross Site Scripting 67 WEB HTTPCS
2012-07-26   Joomla com_odudeprofile V2.x Exploit 101 WEB Daniel Barragan "D4NB4R"
2012-07-25   Zabbix 2.0.1 and Earlier Session Extractor 0day 102 WEB muts
2012-07-25   WordPress Front End Upload v0.5.4.4 Arbitrary PHP File Upload 68 WEB Chris Kellum
2012-07-25   phpProfiles 4.5.4 Beta XSS / RFI / SQL Injection 87 WEB L0n3ly-H34rT
2012-07-24   AlienVault OSSIM 3.1 Reflected XSS and Blind SQL Injection 69 WEB muts
2012-07-24   Symantec Web Gateway 5.0.3.18 Blind SQLi Backdoor via MySQL Triggers 77 WEB muts
2012-07-24   Symantec Web Gateway 5.0.2 (blocked.php id parameter) Blind SQL Injection 73 WEB muts
2012-07-24   EGallery PHP File Upload Vulnerability 134 WEB juan
2012-07-23   Ipswitch WhatsUp Gold 15.02 Stored XSS - Blind SQLi - RCE 76 WEB muts
2012-07-23   Dell SonicWALL Scrutinizer 9.0.1 (statusFilter.php q parameter) SQL Injection 78 WEB muts
2012-07-23   SolarWinds Orion Network Performance Monitor 10.2.2 Multiple Vulnerabilities 153 WEB muts
2012-07-20   Maian Survey 1.1 Local File Inclusion / Open Redirection 53 WEB PuN!Sh3r
2012-07-20   Joomla Hello Local File Inclusion 215 WEB Ajax Security Team
2012-07-18   MGB OpenSource Guestbook 0.6.9.1 Multiple security vulnerabilities 389 WEB Stefan Schurtz
2012-07-18   WordPress Plugin 'Count Per Day' 3.1.1 Multiple Cross-site scripting vulnerabilities 62 WEB Stefan Schurtz
2012-07-18   Forum Oxalis <= 0.1.2 SQL Injection Vulnerability 51 WEB Jean Pascal Pereira
2012-07-17   Wordpress Diary/Notebook Site5 Theme Email Spoofing 67 WEB bwallHatesTwits