2020-03-03
|
|
Alfresco 5.2.4 - Persistent Cross-Site Scripting
|
3 |
WEB
|
Alexandre ZANNI
|
2020-03-03
|
|
RICOH Aficio SP 5200S Printer - 'entryNameIn' HTML Injection
|
2 |
WEB
|
Paulina Girón
|
2020-03-02
|
|
Cacti v1.2.8 - Unauthenticated Remote Code Execution (Metasploit)
|
2 |
WEB
|
Lucas Amorim
|
2020-03-02
|
|
Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass (Config Upload)
|
3 |
WEB
|
Elber Tavares
|
2020-03-02
|
|
TP LINK TL-WR849N - Remote Code Execution
|
3 |
WEB
|
Elber Tavares
|
2020-03-02
|
|
Wing FTP Server 6.2.5 - Privilege Escalation
|
2 |
WEB
|
Cary Hooper
|
2020-03-02
|
|
TL-WR849N 0.9.1 4.16 - Authentication Bypass (Upload Firmware)
|
3 |
WEB
|
Elber Tavares
|
2020-03-02
|
|
WordPress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery (Add User)
|
3 |
WEB
|
Jinson Varghese Behanan
|
2020-03-02
|
|
Netis WF2419 2.2.36123 - Remote Code Execution
|
2 |
WEB
|
Elias Issa
|
2020-03-02
|
|
Joplin Desktop 1.0.184 - Cross-Site Scripting
|
2 |
WEB
|
Javier Olmedo
|
2020-02-28
|
|
qdPM < 9.1 - Remote Code Execution
|
3 |
WEB
|
Tobin Shields
|
2020-02-03
|
|
Cacti 1.2.8 - Unauthenticated Remote Code Execution
|
3 |
WEB
|
Askar
|
2020-02-03
|
|
Cacti 1.2.8 - Authenticated Remote Code Execution
|
3 |
WEB
|
Askar
|
2020-02-20
|
|
Apache Tomcat - AJP 'Ghostcat File Read/Inclusion
|
3 |
WEB
|
YDHCUI
|
2020-02-27
|
|
Comtrend VR-3033 - Command Injection
|
3 |
WEB
|
Raki Ben Hamouda
|
2020-02-27
|
|
Business Live Chat Software 1.0 - Cross-Site Request Forgery (Add Admin)
|
2 |
WEB
|
Meisam Monsef
|
2020-02-26
|
|
PhpIX 2012 Professional - 'id' SQL Injection
|
3 |
WEB
|
indoushka
|
2020-02-25
|
|
Magento WooCommerce CardGate Payment Gateway 2.0.30 - Payment Process Bypass
|
3 |
WEB
|
GeekHack
|
2020-02-25
|
|
WordPress Plugin WooCommerce CardGate Payment Gateway 3.1.15 - Payment Process Bypass
|
4 |
WEB
|
GeekHack
|
2020-02-24
|
|
Cacti 1.2.8 - Remote Code Execution
|
2 |
WEB
|
Askar
|
2020-02-24
|
|
Aptina AR0130 960P 1.3MP Camera - Remote Configuration Disclosure
|
3 |
WEB
|
Todor Donev
|
2020-02-24
|
|
DotNetNuke 9.5 - File Upload Restrictions Bypass
|
3 |
WEB
|
Sajjad Pourali
|
2020-02-24
|
|
DotNetNuke 9.5 - Persistent Cross-Site Scripting
|
3 |
WEB
|
Sajjad Pourali
|
2020-02-24
|
|
eLection 2.0 - 'id' SQL Injection
|
3 |
WEB
|
J3rryBl4nks
|
2020-02-24
|
|
ManageEngine EventLog Analyzer 10.0 - Information Disclosure
|
4 |
WEB
|
Scott Goodwin
|
2020-02-24
|
|
I6032B-P POE 2.0MP Outdoor Camera - Remote Configuration Disclosure
|
4 |
WEB
|
Todor Donev
|
2020-02-24
|
|
ATutor 2.2.4 - 'id' SQL Injection
|
2 |
WEB
|
Andrey Stoykov
|
2020-02-24
|
|
SecuSTATION SC-831 HD Camera - Remote Configuration Disclosure
|
2 |
WEB
|
Todor Donev
|
2020-02-24
|
|
AMSS++ 4.7 - Backdoor Admin Account
|
3 |
WEB
|
indoushka
|
2020-02-24
|
|
CandidATS 2.1.0 - Cross-Site Request Forgery (Add Admin)
|
4 |
WEB
|
J3rryBl4nks
|
2020-02-24
|
|
SecuSTATION IPCAM-130 HD Camera - Remote Configuration Disclosure
|
3 |
WEB
|
Todor Donev
|
2020-02-24
|
|
AMSS++ v 4.31 - 'id' SQL Injection
|
2 |
WEB
|
indoushka
|
2020-02-24
|
|
Real Web Pentesting Tutorial Step by Step - [Persian]
|
3 |
WEB
|
Meisam Monsef
|
2020-02-24
|
|
ESCAM QD-900 WIFI HD Camera - Remote Configuration Disclosure
|
3 |
WEB
|
Todor Donev
|
2020-02-24
|
|
GUnet OpenEclass E-learning platform 1.7.3 - 'uname' SQL Injection
|
3 |
WEB
|
emaragkos
|
2020-02-24
|
|
Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting
|
4 |
WEB
|
Scott Goodwin
|
2020-02-20
|
|
Easy2Pilot 7 - Cross-Site Request Forgery (Add User)
|
2 |
WEB
|
indoushka
|
2020-02-19
|
|
Nanometrics Centaur 4.3.23 - Unauthenticated Remote Memory Leak
|
3 |
WEB
|
byteGoblin
|
2020-02-19
|
|
DBPower C300 HD Camera - Remote Configuration Disclosure
|
3 |
WEB
|
Todor Donev
|
2020-02-19
|
|
Virtual Freer 1.58 - Remote Command Execution
|
3 |
WEB
|
SajjadBnd
|
2020-02-18
|
|
WordPress Plugin WP Sitemap Page 1.6.2 - Persistent Cross-Site Scripting
|
2 |
WEB
|
Ultra Security Team
|
2020-02-17
|
|
LabVantage 8.3 - Information Disclosure
|
3 |
WEB
|
Joel Aviad Ossi
|
2020-02-17
|
|
SOPlanning 1.45 - 'users' SQL Injection
|
3 |
WEB
|
J3rryBl4nks
|
2020-02-17
|
|
WordPress Plugin WOOF Products Filter for WooCommerce 1.2.3 - Persistent Cross-Site Scripting
|
2 |
WEB
|
Shahab.ra.9
|
2020-02-17
|
|
SOPlanning 1.45 - Cross-Site Request Forgery (Add User)
|
2 |
WEB
|
J3rryBl4nks
|
2020-02-17
|
|
WordPress Theme Fruitful 3.8 - Persistent Cross-Site Scripting
|
1 |
WEB
|
Ultra Security Team
|
2020-02-17
|
|
Ice HRM 26.2.0 - Cross-Site Request Forgery (Add User)
|
2 |
WEB
|
J3rryBl4nks
|
2020-02-17
|
|
Avaya Aura Communication Manager 5.2 - Remote Code Execution
|
2 |
WEB
|
Sarang Tumne
|
2020-02-17
|
|
WordPress Plugin Strong Testimonials 2.40.1 - Persistent Cross-Site Scripting
|
2 |
WEB
|
Jinson Varghese Behanan
|
2020-02-17
|
|
SOPlanning 1.45 - 'by' SQL Injection
|
2 |
WEB
|
J3rryBl4nks
|
2020-02-14
|
|
phpMyChat Plus 1.98 - 'pmc_username' SQL Injection
|
5 |
WEB
|
J3rryBl4nks
|
2020-02-13
|
|
WordPress Plugin ultimate-member 2.1.3 - Local File Inclusion
|
4 |
WEB
|
Mehran Feizi
|
2020-02-13
|
|
PANDORAFMS 7.0 - Authenticated Remote Code Execution
|
4 |
WEB
|
Engin Demirbilek
|
2020-02-13
|
|
WordPress Plugin contact-form-7 5.1.6 - Remote File Upload
|
6 |
WEB
|
Mehran Feizi
|
2020-02-13
|
|
WordPress Plugin Wordfence.7.4.5 - Local File Disclosure
|
3 |
WEB
|
Mehran Feizi
|
2020-02-13
|
|
WordPress Plugin tutor.1.5.3 - Persistent Cross-Site Scripting
|
4 |
WEB
|
Mehran Feizi
|
2020-02-13
|
|
WordPress Plugin Tutor.1.5.3 - Local File Inclusion
|
3 |
WEB
|
Mehran Feizi
|
2020-02-11
|
|
WordPress Plugin InfiniteWP - Client Authentication Bypass (Metasploit)
|
3 |
WEB
|
Metasploit
|
2020-02-11
|
|
Vanilla Forums 2.6.3 - Persistent Cross-Site Scripting
|
3 |
WEB
|
Sayak Naskar
|
2020-02-11
|
|
CHIYU BF430 TCP IP Converter - Stored Cross-Site Scripting
|
5 |
WEB
|
Luca.Chiou
|
2020-02-10
|
|
WordPress Plugin LearnDash LMS 3.1.2 - Reflective Cross-Site Scripting
|
4 |
WEB
|
Jinson Varghese Behanan
|
2020-02-10
|
|
Forcepoint WebSecurity 8.5 - Reflective Cross-Site Scripting
|
3 |
WEB
|
Prasenjit Kanti Paul
|
2020-02-07
|
|
Google Invisible RECAPTCHA 3 - Spoof Bypass
|
4 |
WEB
|
Matamorphosis
|
2020-02-07
|
|
ExpertGPS 6.38 - XML External Entity Injection
|
5 |
WEB
|
Trent Gordon
|
2020-02-07
|
|
EyesOfNetwork 5.3 - Remote Code Execution
|
4 |
WEB
|
Clément Billac
|
2020-02-07
|
|
PackWeb Formap E-learning 1.0 - 'NumCours' SQL Injection
|
4 |
WEB
|
Amel BOUZIANE-LEBLOND
|
2020-02-07
|
|
VehicleWorkshop 1.0 - 'bookingid' SQL Injection
|
4 |
WEB
|
Mehran Feizi
|
2020-02-07
|
|
QuickDate 1.3.2 - SQL Injection
|
4 |
WEB
|
Ihsan Sencan
|
2020-02-06
|
|
Cisco Data Center Network Manager 11.2.1 - 'LanFabricImpl' Command Injection
|
3 |
WEB
|
mr_me
|
2020-02-06
|
|
Cisco Data Center Network Manager 11.2.1 - 'getVmHostData' SQL Injection
|
4 |
WEB
|
mr_me
|
2020-02-06
|
|
Cisco Data Center Network Manager 11.2 - Remote Code Execution
|
4 |
WEB
|
mr_me
|
2020-02-06
|
|
Ecommerce Systempay 1.0 - Production KEY Brute Force
|
4 |
WEB
|
live3
|
2020-02-06
|
|
Online Job Portal 1.0 - Cross Site Request Forgery (Add User)
|
5 |
WEB
|
Ihsan Sencan
|
2020-02-06
|
|
Online Job Portal 1.0 - Remote Code Execution
|
4 |
WEB
|
Ihsan Sencan
|
2020-02-06
|
|
Online Job Portal 1.0 - 'user_email' SQL Injection
|
5 |
WEB
|
Ihsan Sencan
|
2020-02-05
|
|
AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)
|
4 |
WEB
|
Ihsan Sencan
|
2020-02-05
|
|
Verodin Director Web Console 3.5.4.0 - Remote Authenticated Password Disclosure (PoC)
|
4 |
WEB
|
nxkennedy
|
2020-02-05
|
|
Kronos WebTA 4.0 - Authenticated Remote Privilege Escalation
|
5 |
WEB
|
nxkennedy
|
2020-02-05
|
|
Wago PFC200 - Authenticated Remote Code Execution (Metasploit)
|
3 |
WEB
|
0x483d
|
2020-02-05
|
|
AVideo Platform 8.1 - Information Disclosure (User Enumeration)
|
4 |
WEB
|
Ihsan Sencan
|
2020-02-04
|
|
F-Secure Internet Gatekeeper 5.40 - Heap Overflow (PoC)
|
3 |
WEB
|
Kevin Joensen
|
2020-02-04
|
|
Centreon 19.10.5 - 'Pollers' Remote Command Execution (Metasploit)
|
3 |
WEB
|
mekhalleh
|
2020-02-03
|
|
School ERP System 1.0 - Cross Site Request Forgery (Add Admin)
|
4 |
WEB
|
J3rryBl4nks
|
2020-02-03
|
|
Schneider Electric U.Motion Builder 1.3.4 - Authenticated Command Injection
|
4 |
WEB
|
Cosmin Craciun
|
2020-02-03
|
|
Jira 8.3.4 - Information Disclosure (Username Enumeration)
|
4 |
WEB
|
Mufeed VH
|
2020-02-03
|
|
phpList 3.5.0 - Authentication Bypass
|
4 |
WEB
|
Suvadip Kar
|
2020-02-03
|
|
IceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting
|
4 |
WEB
|
Lutfu Mert Ceylan
|
2020-01-31
|
|
FlexNet Publisher 11.12.1 - Cross-Site Request Forgery (Add Local Admin)
|
4 |
WEB
|
Ismail Tasdelen
|
2020-01-31
|
|
Lotus Core CMS 1.0.1 - Local File Inclusion
|
5 |
WEB
|
Daniel Monzón
|
2020-01-30
|
|
rConfig 3.9.3 - Authenticated Remote Code Execution
|
2 |
WEB
|
vikingfr
|
2020-01-29
|
|
Fifthplay S.A.M.I 2019.2_HP - Persistent Cross-Site Scripting
|
3 |
WEB
|
LiquidWorm
|
2020-01-29
|
|
Centreon 19.10.5 - 'centreontrapd' Remote Command Execution
|
5 |
WEB
|
Fabien AUNAY
|
2020-01-29
|
|
Centreon 19.10.5 - 'Pollers' Remote Command Execution
|
4 |
WEB
|
Omri Baso
|
2020-01-29
|
|
Satellian 1.12 - Remote Code Execution
|
4 |
WEB
|
Xh4H
|
2020-01-29
|
|
Cups Easy 1.0 - Cross Site Request Forgery (Password Reset)
|
3 |
WEB
|
J3rryBl4nks
|
2020-01-29
|
|
Liferay CE Portal 6.0.2 - Remote Command Execution
|
4 |
WEB
|
Berk Dusunur
|
2020-01-29
|
|
Kibana 6.6.1 - CSV Injection
|
5 |
WEB
|
Aamir Rehman
|
2020-01-28
|
|
Centreon 19.10.5 - Remote Command Execution
|
5 |
WEB
|
Fabien AUNAY
|
2020-01-28
|
|
Centreon 19.10.5 - Database Credentials Disclosure
|
5 |
WEB
|
Fabien AUNAY
|
2020-01-28
|
|
Octeth Oempro 4.8 - 'CampaignID' SQL Injection
|
4 |
WEB
|
Bruno de Barros Bulle
|
2020-01-28
|
|
Adive Framework 2.0.8 - Cross-Site Request Forgery (Change Admin Password)
|
4 |
WEB
|
Sarthak Saini
|
2020-01-24
|
|
Genexis Platinum-4410 2.1 - Authentication Bypass
|
3 |
WEB
|
Husinul Sanub
|
2020-01-24
|
|
OLK Web Store 2020 - Cross-Site Request Forgery
|
4 |
WEB
|
Joel Aviad Ossi
|
2020-01-24
|
|
Webtareas 2.0 - 'id' SQL Injection
|
3 |
WEB
|
Greg.Priest
|
2020-01-24
|
|
TP-Link TP-SG105E 1.0.0 - Unauthenticated Remote Reboot
|
2 |
WEB
|
PCEumel
|
2020-01-23
|
|
qdPM 9.1 - Remote Code Execution
|
3 |
WEB
|
Rishal Dwivedi
|
2020-01-22
|
|
Citrix XenMobile Server 10.8 - XML External Entity Injection
|
3 |
WEB
|
Jonas Lejon
|
2020-01-21
|
|
ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection
|
3 |
WEB
|
Ertebat Gostar Co
|
2020-01-20
|
|
Centreon 19.04 - Authenticated Remote Code Execution (Metasploit)
|
3 |
WEB
|
TheCyberGeek
|
2020-01-20
|
|
Adive Framework 2.0.8 - Persistent Cross-Site Scripting
|
3 |
WEB
|
Sarthak Saini
|
2020-01-17
|
|
WordPress Plugin Time Capsule 1.21.16 - Authentication Bypass
|
5 |
WEB
|
B. Canavate
|
2020-01-17
|
|
WordPress Plugin InfiniteWP Client 1.9.4.5 - Authentication Bypass
|
4 |
WEB
|
Raphael Karger
|
2020-01-16
|
|
Rukovoditel Project Management CRM 2.5.2 - 'filters' SQL Injection
|
3 |
WEB
|
Fatih Çelik
|
2020-01-16
|
|
Rukovoditel Project Management CRM 2.5.2 - 'entities_id' SQL Injection
|
4 |
WEB
|
Fatih Çelik
|
2020-01-16
|
|
Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path Traversal
|
4 |
WEB
|
Dhiraj Mishra
|
2020-01-16
|
|
Online Book Store 1.0 - Arbitrary File Upload
|
4 |
WEB
|
Or4nG.M4N
|
2020-01-16
|
|
Jenkins Gitlab Hook Plugin 1.4.2 - Reflected Cross-Site Scripting
|
4 |
WEB
|
Ai Ho
|
2020-01-16
|
|
Rukovoditel Project Management CRM 2.5.2 - 'reports_id' SQL Injection
|
4 |
WEB
|
Fatih Çelik
|
2020-01-16
|
|
WordPress Plugin Postie 1.9.40 - Persistent Cross-Site Scripting
|
5 |
WEB
|
V1n1v131r4
|
2020-01-15
|
|
Huawei HG255 - Directory Traversal (Metasploit)
|
4 |
WEB
|
Ismail Tasdelen
|
2020-01-15
|
|
Online Book Store 1.0 - 'bookisbn' SQL Injection
|
3 |
WEB
|
Ertebat Gostar Co
|
2020-01-14
|
|
IBM RICOH 6400 Printer - HTML Injection
|
5 |
WEB
|
Ismail Tasdelen
|
2020-01-14
|
|
IBM RICOH InfoPrint 6500 Printer - HTML Injection
|
5 |
WEB
|
Ismail Tasdelen
|
2020-01-13
|
|
Digi AnywhereUSB 14 - Reflective Cross-Site Scripting
|
4 |
WEB
|
Raspina Net Pars Group
|
2020-01-13
|
|
Citrix Application Delivery Controller and Gateway 10.5 - Remote Code Execution (Metasploit)
|
5 |
WEB
|
mekhalleh
|