Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2024-04-08 Exploit Code Downloads   Open Source Medicine Ordering System v1.0 - SQLi 1 WEB Onur Karasalihoğlu
2024-04-08 Exploit Code Downloads   Daily Expense Manager 1.0 - 'term' SQLi 1 WEB Stefan Hesselman
2024-04-08 Exploit Code Downloads   Best Student Result Management System v1.0 - Multiple SQLi 0 WEB nu11secur1ty
2024-04-08 Exploit Code Downloads   Human Resource Management System v1.0 - Multiple SQLi 0 WEB nu11secur1ty
2024-04-08 Exploit Code Downloads   Wordpress Theme Travelscape v1.0.3 - Arbitrary File Upload 0 WEB Milad karimi
2024-04-03 Exploit Code Downloads   Wordpress Plugin Alemha Watermarker 1.3.1 - Stored Cross-Site Scripting (XSS) 1 WEB Erdemstar
2024-04-03 Exploit Code Downloads   Computer Laboratory Management System v1.0 - Multiple-SQLi 1 WEB nu11secur1ty
2024-04-02 Exploit Code Downloads   Axigen < 10.5.7 - Persistent Cross-Site Scripting 1 WEB Vincent McRae_ Mesut Cetin
2024-04-02 Exploit Code Downloads   Gibbon LMS v26.0.00 - SSTI vulnerability 1 WEB Ali Maharramli_Fikrat Guliev_Islam Rzayev
2024-04-02 Exploit Code Downloads   Casdoor < v1.331.0 - '/api/set-password' CSRF 1 WEB Van Lam Nguyen
2024-04-02 Exploit Code Downloads   Wordpress Plugin - Membership For WooCommerce < v2.1.7 - Arbitrary File Upload to Shell (Unauthentic 1 WEB Milad karimi
2024-04-02 Exploit Code Downloads   Smart School 6.4.1 - SQL Injection 1 WEB CraCkEr
2024-04-02 Exploit Code Downloads   CE Phoenix v1.0.8.20 - Remote Code Execution 1 WEB tmrswrr
2024-04-02 Exploit Code Downloads   Elementor Website Builder < 3.12.2 - Admin+ SQLi 0 WEB E1 Coders
2024-04-02 Exploit Code Downloads   Blood Bank v1.0 - Stored Cross Site Scripting (XSS) 0 WEB Ersin Erenler
2024-04-02 Exploit Code Downloads   Daily Habit Tracker 1.0 - Broken Access Control 1 WEB Yevhenii Butenko
2024-04-02 Exploit Code Downloads   Daily Habit Tracker 1.0 - SQL Injection 1 WEB Yevhenii Butenko
2024-04-02 Exploit Code Downloads   Daily Habit Tracker 1.0 - Stored Cross-Site Scripting (XSS) 1 WEB Yevhenii Butenko
2024-04-02 Exploit Code Downloads   Employee Management System 1.0 - _txtusername_ and _txtpassword_ SQL Injection (Admin Login) 1 WEB Yevhenii Butenko
2024-04-02 Exploit Code Downloads   Employee Management System 1.0 - _txtfullname_ and _txtphone_ SQL Injection 1 WEB Yevhenii Butenko
2024-04-02 Exploit Code Downloads   LeptonCMS 7.0.0 - Remote Code Execution (RCE) (Authenticated) 1 WEB tmrswrr
2024-04-02 Exploit Code Downloads   FoF Pretty Mail 1.1.2 - Server Side Template Injection (SSTI) 1 WEB Chokri Hammedi
2024-04-02 Exploit Code Downloads   FoF Pretty Mail 1.1.2 - Local File Inclusion (LFI) 1 WEB Chokri Hammedi
2024-04-02 Exploit Code Downloads   Hospital Management System v1.0 - Stored Cross Site Scripting (XSS) 1 WEB Sandeep Vishwakarma
2024-04-02 Exploit Code Downloads   E-INSUARANCE v1.0 - Stored Cross Site Scripting (XSS) 1 WEB Sandeep Vishwakarma
2024-04-02 Exploit Code Downloads   Petrol Pump Management Software v1.0 - Remote Code Execution (RCE) 1 WEB Sandeep Vishwakarma
2024-04-02 Exploit Code Downloads   OpenCart Core 4.0.2.3 - 'search' SQLi 1 WEB Saud Alenazi
2024-04-02 Exploit Code Downloads   Online Hotel Booking In PHP 1.0 - Blind SQL Injection (Unauthenticated) 1 WEB Gian Paris C. Agsam
2024-04-02 Exploit Code Downloads   Simple Backup Plugin Python Exploit 2.7.10 - Path Traversal 1 WEB Ven3xy
2024-03-28 Exploit Code Downloads   liveSite Version 2019.1 - Remote Code Execution 1 WEB tmrswrr
2024-03-28 Exploit Code Downloads   Broken Access Control - on NodeBB v3.6.7 0 WEB Vibhor Sharma
2024-03-28 Exploit Code Downloads   Purei CMS 1.0 - SQL Injection 0 WEB Number 7
2024-03-28 Exploit Code Downloads   Workout Journal App 1.0 - Stored XSS 0 WEB MURAT CAGRI ALIS
2024-03-25 Exploit Code Downloads   LimeSurvey Community 5.3.32 - Stored XSS 0 WEB Subhankar Singh
2024-03-25 Exploit Code Downloads   Nagios XI Version 2024R1.01 - SQL Injection 0 WEB Jarod Jaslow (MAWK)
2024-03-25 Exploit Code Downloads   Wallos < 1.11.2 - File Upload RCE 0 WEB sml
2024-03-25 Exploit Code Downloads   Tourism Management System v2.0 - Arbitrary File Upload 0 WEB SoSPiro
2024-03-25 Exploit Code Downloads   MobileShop master v1.0 - SQL Injection Vuln. 0 WEB HAZIM ARBAŞ
2024-03-25 Exploit Code Downloads   Insurance Management System PHP and MySQL 1.0 - Multiple Stored XSS 0 WEB Hakkı TOKLU
2024-03-25 Exploit Code Downloads   SPA-CART CMS - Stored XSS 0 WEB Eren Sen
2024-03-25 Exploit Code Downloads   Craft CMS 4.4.14 - Unauthenticated Remote Code Execution 0 WEB Olivier Lasne
2024-03-20 Exploit Code Downloads   CSZCMS v1.3.0 - SQL Injection (Authenticated) 0 WEB Abdulaziz Almetairy
2024-03-20 Exploit Code Downloads   Teacher Subject Allocation Management System 1.0 - 'searchdata' SQLi 0 WEB Ersin Erenler
2024-03-20 Exploit Code Downloads   Simple Task List 1.0 - 'status' SQLi 0 WEB Ersin Erenler
2024-03-20 Exploit Code Downloads   Blood Bank 1.0 - 'bid' SQLi 0 WEB Ersin Erenler
2024-03-20 Exploit Code Downloads   Employee Management System 1.0 - 'admin_id' SQLi 0 WEB Shubham Pandey
2024-03-18 Exploit Code Downloads   Quick.CMS 6.7 - SQL Injection Login Bypass 0 WEB H4X.Forensics
2024-03-18 Exploit Code Downloads   xbtitFM 4.1.18 - Multiple Vulnerabilities 0 WEB h5kj23kj32io2kj
2024-03-18 Exploit Code Downloads   Backdrop CMS 1.23.0 - Stored XSS 0 WEB Sinem Şahin
2024-03-18 Exploit Code Downloads   Atlassian Confluence < 8.5.3 - Remote Code Execution 0 WEB MaanVader
2024-03-18 Exploit Code Downloads   Gibbon LMS < v26.0.00 - Authenticated RCE 0 WEB Ali Maharramli_Fikrat Guliev_Islam Rzayev
2024-03-18 Exploit Code Downloads   ZoneMinder Snapshots < 1.37.33 - Unauthenticated RCE 0 WEB Ravindu Wickramasinghe
2024-03-18 Exploit Code Downloads   TYPO3 11.5.24 - Path Traversal (Authenticated) 0 WEB Saeed reza Zamanian
2024-03-18 Exploit Code Downloads   WEBIGniter v28.7.23 - Stored XSS 1 WEB Mesut Cetin
2024-03-18 Exploit Code Downloads   WordPress File Upload Plugin < 4.23.3 - Stored XSS 1 WEB Faiyaz Ahmad
2024-03-16 Exploit Code Downloads   UPS Network Management Card 4 - Path Traversal 1 WEB Víctor García
2024-03-16 Exploit Code Downloads   Nokia BMC Log Scanner - Remote Code Execution 1 WEB Carlos Andres Gonzalez_ Matthew Gregory
2024-03-16 Exploit Code Downloads   Karaf v4.4.3 Console - RCE 1 WEB Andrzej Olchawa_ Milenko Starcik
2024-03-16 Exploit Code Downloads   Winter CMS 1.2.3 - Server-Side Template Injection (SSTI) (Authenticated) 1 WEB tmrswrr
2024-03-12 Exploit Code Downloads   SnipeIT 6.2.1 - Stored Cross Site Scripting 1 WEB Shahzaib Ali Khan
2024-03-12 Exploit Code Downloads   Cisco Firepower Management Center < 6.6.7.1 - Authenticated RCE 1 WEB Abdualhadi khalifa
2024-03-12 Exploit Code Downloads   Client Details System 1.0 - SQL Injection 1 WEB Hamdi Sevben
2024-03-12 Exploit Code Downloads   OSGi v3.7.2 (and below) Console - RCE 1 WEB Andrzej Olchawa_ Milenko Starcik
2024-03-12 Exploit Code Downloads   OSGi v3.8-3.18 Console - RCE 1 WEB Andrzej Olchawa_ Milenko Starcik
2024-03-12 Exploit Code Downloads   Human Resource Management System 1.0 - 'employeeid' SQL Injection 1 WEB Srikar
2024-03-11 Exploit Code Downloads   Sitecore - Remote Code Execution v8.2 1 WEB abhishek morla
2024-03-11 Exploit Code Downloads   Adobe ColdFusion versions 2018_15 (and earlier) and 2021_5 and earlier - Arbitrary File Read 0 WEB Youssef Muhammad
2024-03-11 Exploit Code Downloads   WordPress Plugin Duplicator < 1.5.7.1 - Unauthenticated Sensitive Data Exposure to Account Takeover 1 WEB Dmitrii Ignatyev
2024-03-11 Exploit Code Downloads   Hitachi NAS (HNAS) System Management Unit (SMU) Backup & Restore < 14.8.7825.01 - IDOR 1 WEB Arslan Masood
2024-03-10 Exploit Code Downloads   Hide My WP < 6.2.9 - Unauthenticated SQLi 1 WEB Xenofon Vassilakopoulos
2024-03-10 Exploit Code Downloads   Akaunting < 3.1.3 - RCE 1 WEB u32i
2024-03-10 Exploit Code Downloads   Ladder v0.0.21 - Server-side request forgery (SSRF) 0 WEB @_chebuya
2024-03-10 Exploit Code Downloads   DataCube3 v1.0 - Unrestricted file upload 'RCE' 1 WEB Samy Younsi - NS Labs
2024-03-10 Exploit Code Downloads   Numbas < v7.3 - Remote Code Execution 1 WEB Matheus Alexandre
2024-03-10 Exploit Code Downloads   TP-Link TL-WR740N - Buffer Overflow 'DOS' 1 WEB Anish Feroz
2024-03-06 Exploit Code Downloads   GLiNet - Router Authentication Bypass 1 WEB Daniele Linguaglossa
2024-03-06 Exploit Code Downloads   elFinder Web file manager Version - 2.1.53 Remote Command Execution 1 WEB tmrswrr
2024-03-06 Exploit Code Downloads   CSZ CMS Version 1.3.0 - Authenticated Remote Command Execution 1 WEB tmrswrr
2024-03-06 Exploit Code Downloads   CVE-2023-50071 - Multiple SQL Injection 1 WEB Geraldo Alcantara
2024-03-06 Exploit Code Downloads   Lot Reservation Management System - Unauthenticated File Disclosure 1 WEB Elijah Mandila Syoyi
2024-03-06 Exploit Code Downloads   Lot Reservation Management System - Unauthenticated File Upload and Remote Code Execution 0 WEB Elijah Mandila Syoyi
2024-03-05 Exploit Code Downloads   kk Star Ratings < 5.4.6 - Rating Tampering via Race Condition 0 WEB Mohammad Reza Omrani
2024-03-05 Exploit Code Downloads   Neontext Wordpress Plugin - Stored XSS 0 WEB Eren Car
2024-03-05 Exploit Code Downloads   Solar-Log 200 PM+ 3.6.0 Build 99 - 15.10.2019 - Stored XSS 0 WEB Vincent McRae_ Mesut Cetin
2024-03-03 Exploit Code Downloads   Easywall 0.3.1 - Authenticated Remote Command Execution 0 WEB Melvin Mejia
2024-03-03 Exploit Code Downloads   Boss Mini 1.4.0 - local file inclusion 1 WEB nltt0
2024-03-03 Exploit Code Downloads   Magento ver. 2.4.6 - XSLT Server Side Injection 1 WEB tmrswrr
2024-02-28 Exploit Code Downloads   WP Fastest Cache 1.2.2 - Unauthenticated SQL Injection 1 WEB Meryem Taşkın
2024-02-28 Exploit Code Downloads   Blood Bank v1.0 - Multiple SQL Injection 1 WEB Ersin Erenler
2024-02-28 Exploit Code Downloads   WordPress Plugin Admin Bar & Dashboard Access Control Version: 1.2.8 - _Dashboard Redirect_ field St 1 WEB Rachit Arora
2024-02-28 Exploit Code Downloads   WP Rocket < 2.10.3 - Local File Inclusion (LFI) 1 WEB E1 Coders
2024-02-27 Exploit Code Downloads   Atlassian Confluence Data Center and Server - Authentication Bypass (Metasploit) 1 WEB Emir Polat
2024-02-27 Exploit Code Downloads   Wordpress Plugin Canto < 3.0.5 - Remote File Inclusion (RFI) and Remote Code Execution (RCE) 1 WEB Leopoldo Angulo (leoanggal1)
2024-02-27 Exploit Code Downloads   Automatic-Systems SOC FL9600 FastLine - The device contains hardcoded login and password for super a 1 WEB Marcin Kozlowski
2024-02-27 Exploit Code Downloads   Automatic-Systems SOC FL9600 FastLine - Directory Transversal 1 WEB Marcin Kozlowski
2024-02-27 Exploit Code Downloads   SuperStoreFinder - Multiple Vulnerabilities 1 WEB bRpsd
2024-02-27 Exploit Code Downloads   Moodle 4.3 - Insecure Direct Object Reference 1 WEB tmrswrr
2024-02-27 Exploit Code Downloads   Zoo Management System 1.0 - Unauthenticated RCE 1 WEB Çağatay Ceyhan
2024-02-27 Exploit Code Downloads   dawa-pharma 1.0-2022 - Multiple-SQLi 1 WEB nu11secur1ty
2024-02-26 Exploit Code Downloads   Online Shopping System Advanced - Sql Injection 1 WEB Furkan Gedik
2024-02-26 Exploit Code Downloads   taskhub 2.8.7 - SQL Injection 1 WEB CraCkEr
2024-02-26 Exploit Code Downloads   comments-like-dislike < 1.2.0 - Authenticated (Subscriber+) Plugin Setting Reset 1 WEB Diaa Hanna
2024-02-21 Exploit Code Downloads   WEBIGniter v28.7.23 - Stored Cross Site Scripting (XSS) 0 WEB Sagar Banwa
2024-02-19 Exploit Code Downloads   JFrog Artifactory < 7.25.4 - Blind SQL Injection 1 WEB ardr
2024-02-19 Exploit Code Downloads   Wondercms 4.3.2 - XSS to RCE 1 WEB Anas Zakir
2024-02-19 Exploit Code Downloads   SureMDM On-premise < 6.31 - CAPTCHA Bypass User Enumeration 1 WEB Jonas Benjamin Friedli
2024-02-19 Exploit Code Downloads   Employee Management System v1 - 'email' SQL Injection 1 WEB SoSPiro
2024-02-19 Exploit Code Downloads   phpFox < 4.8.13 - (redirect) PHP Object Injection Exploit 1 WEB Egidio Romano
2024-02-15 Exploit Code Downloads   Metabase 0.46.6 - Pre-Auth Remote Code Execution 1 WEB Musyoka Ian
2024-02-15 Exploit Code Downloads   SISQUALWFM 7.1.319.103 - Host Header Injection 1 WEB Omer Shaik
2024-02-13 Exploit Code Downloads   Lost and Found Information System v1.0 - ( IDOR ) leads to Account Take over 1 WEB Or4nG.M4N
2024-02-13 Exploit Code Downloads   ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure 1 WEB Metin Yunus Kandemir
2024-02-13 Exploit Code Downloads   Splunk 9.0.4 - Information Disclosure 1 WEB Parsa Rezaie Khiabanloo
2024-02-09 Exploit Code Downloads   Online Nurse Hiring System 1.0 - Time-Based SQL Injection 0 WEB yozgatalperen1
2024-02-09 Exploit Code Downloads   Rail Pass Management System 1.0 - Time-Based SQL Injection 1 WEB yozgatalperen1
2024-02-09 Exploit Code Downloads   Wordpress Seotheme - Remote Code Execution Unauthenticated 0 WEB Milad karimi
2024-02-09 Exploit Code Downloads   Wordpress Augmented-Reality - Remote Code Execution Unauthenticated 2 WEB Milad karimi
2024-02-09 Exploit Code Downloads   Advanced Page Visit Counter 1.0 - Admin+ Stored Cross-Site Scripting (XSS) (Authenticated) 0 WEB Furkan ÖZER
2024-02-05 Exploit Code Downloads   WhatsUp Gold 2022 (22.1.0 Build 39) - XSS 0 WEB Andreas Finstad
2024-02-05 Exploit Code Downloads   MISP 2.4.171 - Stored XSS 1 WEB Mücahit Çeri
2024-02-05 Exploit Code Downloads   Clinic's Patient Management System 1.0 - Unauthenticated RCE 1 WEB Oğulcan Hami Gül
2024-02-05 Exploit Code Downloads   Curfew e-Pass Management System 1.0 - FromDate SQL Injection 1 WEB Puja Dey
2024-02-05 Exploit Code Downloads   GYM MS - GYM Management System - Cross Site Scripting (Stored) 1 WEB yozgatalperen1
2024-02-02 Exploit Code Downloads   Juniper-SRX-Firewalls&EX-switches - (PreAuth-RCE) (PoC) 0 WEB whiteOwl
2024-02-02 Exploit Code Downloads   Electrolink FM/DAB/TV Transmitter - Pre-Auth MPFS Image Remote Code Execution 1 WEB LiquidWorm