Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2018-07-04   ManageEngine Exchange Reporter Plus < Build 5311 - Remote Code Execution 38 WEB Kacper Szurek
2018-07-03   ntop-ng < 3.4.180617 - Authentication Bypass 41 WEB Ioannis Profetis
2018-07-02   Dolibarr ERP/CRM < 7.0.3 - PHP Code Injection 44 WEB om3rcitak
2018-07-02   DAMICMS 6.0.0 - Cross-Site Request Forgery (Add Admin) 41 WEB bay0net
2018-07-02   VMware NSX SD-WAN Edge < 3.1.2 - Command Injection 40 WEB ParagonSec
2018-07-02   Geutebruck 5.02024 G-Cam/EFD-2250 - 'simple_loglistjs.cgi' Remote Command Execution (Metasploit) 42 WEB RandoriSec
2018-06-28   Cisco Adaptive Security Appliance - Path Traversal 40 WEB Yassine Aboukir
2018-06-28   DIGISOL DG-HR3400 Wireless Router - Cross-Site Scripting 39 WEB Adipta Basu
2018-06-28   hycus CMS 1.0.4 - Authentication Bypass 37 WEB Berk Dusunur
2018-06-28   HongCMS 3.0.0 - (Authenticated) SQL Injection 41 WEB Hzllaga
2018-06-28   BEESCMS 4.0 - Cross-Site Request Forgery (Add Admin) 44 WEB bay0net
2018-06-27   HPE VAN SDN 2.7.18.0503 - Remote Root 41 WEB KoreLogic
2018-06-27   WordPress Core < 4.9.6 - (Authenticated) Arbitrary File Deletion 41 WEB VulnSpy
2018-06-26   Liferay Portal < 7.0.4 - Server-Side Request Forgery 39 WEB Mehmet Ince
2018-06-25   WordPress Plugin iThemes Security < 7.0.3 - SQL Injection 42 WEB Çlirim Emini
2018-06-25   WordPress Plugin Comments Import & Export < 2.0.4 - CSV Injection 53 WEB Bhushan B. Patil
2018-06-25   Intex Router N-150 - Arbitrary File Upload 45 WEB Samrat Das
2018-06-25   Ecessa ShieldLink SL175EHQ < 10.7.4 - Cross-Site Request Forgery (Add Superuser) 41 WEB LiquidWorm
2018-06-25   AsusWRT RT-AC750GF - Cross-Site Request Forgery (Change Admin Password) 38 WEB Wadeek
2018-06-25   Ecessa WANWorx WVR-30 < 10.7.4 - Cross-Site Request Forgery (Add Superuser) 37 WEB LiquidWorm
2018-06-25   DIGISOL DG-BR4000NG - Cross-Site Scripting 41 WEB Adipta Basu
2018-06-25   Intex Router N-150 - Cross-Site Request Forgery (Add Admin) 37 WEB Samrat Das
2018-06-25   Ecessa Edge EV150 10.7.4 - Cross-Site Request Forgery (Add Superuser) 36 WEB LiquidWorm
2018-06-25   WordPress Plugin Advanced Order Export For WooCommerce < 1.5.4 - CSV Injection 42 WEB Bhushan B. Patil
2018-06-22   phpMyAdmin 4.8.1 - (Authenticated) Local File Inclusion (2) 45 WEB VulnSpy
2018-06-22   phpLDAPadmin 1.2.2 - 'server_id' LDAP Injection (Username) 42 WEB Berk Dusunur
2018-06-21   phpMyAdmin 4.8.1 - (Authenticated) Local File Inclusion (1) 42 WEB ChaMd5
2018-06-22   GreenCMS 2.3.0603 - Information Disclosure 42 WEB vr_system
2018-06-21   LFCMS 3.7.0 - Cross-Site Request Forgery (Add Admin) 45 WEB bay0net
2018-06-21   LFCMS 3.7.0 - Cross-Site Request Forgery (Add User) 37 WEB bay0net
2018-06-20   VideoInsight WebClient 5 - SQL Injection 40 WEB vosec
2018-06-20   IPConfigure Orchid VMS 2.0.5 - Directory Traversal / Information Disclosure (Metasploit) 41 WEB Nettitude
2018-06-20   IPConfigure Orchid VMS 2.0.5 - Directory Traversal / Information Disclosure (Metasploit) 42 WEB Nettitude
2018-06-20   Apache CouchDB < 2.1.0 - Remote Code Execution 39 WEB Cody Zacharias
2018-06-20   TP-Link TL-WA850RE - Remote Command Execution 41 WEB yoresongo
2018-06-20   NewMark CMS 2.1 - 'sec_id' SQL Injection 37 WEB Berk Dusunur
2018-06-20   MaDDash 2.0.2 - Directory Listing 37 WEB ManhNho
2018-06-20   Mirasys DVMS Workstation 5.12.6 - Path Traversal 43 WEB Onvio
2018-06-18   Redatam Web Server < 7 - Directory Traversal 42 WEB Berk Dusunur
2018-06-18   RabbitMQ Web Management < 3.7.6 - Cross-Site Request Forgery (Add Admin) 43 WEB Dolev Farhi
2018-06-18   Joomla! Component Jomres 9.11.2 - Cross-Site Request Forgery (Add User) 43 WEB L0RD
2018-06-15   Dimofinf CMS 3.0.0 - Cross-Site Scripting 44 WEB Renzi
2018-06-15   OEcms 3.1 - Cross-Site Scripting 38 WEB Renzi
2018-06-14   Joomla! Component Ek Rishta 2.10 - SQL Injection 42 WEB Guilherme Assmann
2018-06-13   Redaxo CMS Mediapool Addon < 5.5.1 - Arbitrary File Upload 47 WEB h0n1gsp3cht
2018-06-13   MACCMS 10 - Cross-Site Request Forgery (Add User) 42 WEB bay0net
2018-06-12   WordPress Plugin Ultimate Form Builder Lite < 1.3.7 - SQL Injection 37 WEB defensecode
2018-06-12   WordPress Plugin Google Map < 4.0.4 - SQL Injection 41 WEB defensecode
2018-06-12   Canon PrintMe EFI - Cross-Site Scripting 37 WEB Huy Kha
2018-06-12   OX App Suite 7.8.4 - Multiple Vulnerabilities 40 WEB Open-Xchange
2018-06-12   OX App Suite 7.8.4 - Multiple Vulnerabilities 39 WEB Open-Xchange
2018-06-11   Siaberry 1.2.2 - Command Injection 43 WEB Space Duck
2018-06-12   Joomla! Component EkRishta 2.10 - 'username' SQL Injection 38 WEB L0RD
2018-06-11   Schools Alert Management Script - Arbitrary File Read 40 WEB M3@Pandas
2018-06-11   Schools Alert Management Script - 'get_sec.php' SQL Injection 33 WEB M3@Pandas
2018-06-11   userSpice 4.3.24 - Username Enumeration 36 WEB Dolev Farhi
2018-06-11   userSpice 4.3.24 - 'X-Forwarded-For' Cross-Site Scripting 36 WEB Dolev Farhi
2018-06-11   Schools Alert Management Script - Arbitrary File Deletion 33 WEB M3@Pandas
2018-06-11   Joomla! Component EkRishta 2.10 - 'cid' SQL Injection 38 WEB 41!kh4224rDz
2018-06-11   Event Manager Admin panel - 'events_new.php' SQL injection 35 WEB telahdihapus
2018-06-11   WordPress Plugin Pie Register < 3.0.9 - Blind SQL Injection 39 WEB Manuel García Cárdenas
2018-06-11   Schools Alert Management Script - SQL Injection 39 WEB M3@Pandas
2018-06-08   Splunk < 7.0.1 - Information Disclosure 45 WEB KoF2002
2018-06-08   XiongMai uc-httpd 1.0.0 - Buffer Overflow 45 WEB Andrew Watson
2018-06-07   Monstra CMS < 3.0.4 - Cross-Site Scripting (1) 43 WEB DEEPIN2
2018-06-07   WordPress Plugin Contact Form Maker 1.12.20 - SQL Injection 47 WEB defensecode
2018-06-07   WordPress Plugin Form Maker 1.12.24 - SQL Injection 45 WEB defensecode
2018-06-07   WampServer 3.0.6 - Cross-Site Request Forgery 41 WEB L0RD
2018-06-05   Jenkins Mailer Plugin < 1.20 - Cross-Site Request Forgery (Send Email) 43 WEB Kl3_GMjq6
2018-06-04   Brother HL Series Printers 1.15 - Cross-Site Scripting 43 WEB Huy Kha
2018-06-05   Pagekit < 1.0.13 - Cross-Site Scripting Code Generator 46 WEB DEEPIN2
2018-06-05   MyBB Recent Threads Plugin 1.0 - Cross-Site Scripting 44 WEB 0xB9
2018-06-04   EMS Master Calendar < 8.0.0.20180520 - Cross-Site Scripting 39 WEB Chris Barretto
2018-06-04   SearchBlox 8.6.7 - XML External Entity Injection 41 WEB Ahmet Gurel
2018-06-03   GreenCMS 2.3.0603 - Cross-Site Request Forgery (Add Admin) 38 WEB xichao
2018-06-03   GreenCMS 2.3.0603 - Cross-Site Request Forgery / Remote Code Execution 41 WEB xichao
2018-06-03   Smartshop 1 - Cross-Site Request Forgery 36 WEB L0RD
2018-06-03   Smartshop 1 - 'id' SQL Injection 44 WEB L0RD
2018-05-31   Grid Pro Big Data 1.0 - SQL Injection 38 WEB Kağan Çapar
2018-05-31   CSV Import & Export 1.1.0 - SQL Injection / Cross-Site Scripting 46 WEB Kağan Çapar
2018-05-31   PHP Dashboards NEW 5.5 - 'email' SQL Injection 44 WEB Kağan Çapar
2018-05-31   New STAR 2.1 - SQL Injection / Cross-Site Scripting 47 WEB Kağan Çapar
2018-05-31   TAC Xenta 511/911 - Directory Traversal 51 WEB Marek Cybul
2018-05-30   Dolibarr ERP/CRM 7.0.0 - (Authenticated) SQL Injection 39 WEB Sysdream
2018-05-30   MachForm < 4.2.3 - SQL Injection / Path Traversal / Upload Bypass 41 WEB Amine Taouirsa
2018-05-30   Yosoro 1.0.4 - Remote Code Execution 38 WEB Carlo Pelliccioni
2018-05-30   SearchBlox 8.6.6 - Cross-Site Request Forgery 38 WEB Ahmet Gurel
2018-05-29   Facebook Clone Script 1.0.5 - Cross-Site Request Forgery 43 WEB L0RD
2018-05-29   Facebook Clone Script 1.0.5 - 'search' SQL Injection 39 WEB L0RD
2018-05-29   MyBB ChangUonDyU Plugin 1.0.2 - Cross-Site Scripting 40 WEB 0xB9
2018-05-29   NUUO NVRmini2 / NVRsolo - Arbitrary File Upload 40 WEB M3@Pandas
2018-05-29   Sitemakin SLAC 1.0 - 'my_item_search' SQL Injection 42 WEB Divya Jain
2018-05-29   IssueTrak 7.0 - SQL Injection 46 WEB Chris Anastasio
2018-05-28   wityCMS 0.6.1 - Cross-Site Scripting 45 WEB Nathu Nandwani
2018-05-28   Joomla! Component JoomOCShop 1.0 - Cross-Site Request Forgery 45 WEB L0RD
2018-05-28   Joomla! Component jCart for OpenCart 2.3.0.2 - Cross-Site Request Forgery 44 WEB L0RD
2018-05-28   Joomla! Component Full Social 1.1.0 - 'search_query' SQL Injection 45 WEB L0RD
2018-05-28   WordPress Plugin Events Calendar - SQL Injection 46 WEB AkkuS
2018-05-28   DomainMod 4.09.03 - 'sslpaid' Cross-Site Scripting 48 WEB longer
2018-05-28   DomainMod 4.09.03 - 'oid' Cross-Site Scripting 46 WEB longer
2018-05-28   TP-Link TL-WR840N/TL-WR841N - Authenticaton Bypass 45 WEB BlackFog Team
2018-05-27   Baby Names Search Engine 1.0 - 'a' SQL Injection 46 WEB AkkuS
2018-05-27   My Directory 2.0 - SQL Injection / Cross-Site Scripting 44 WEB AkkuS
2018-05-27   ClipperCMS 1.3.3 - Cross-Site Scripting 40 WEB Nathu Nandwani
2018-05-27   Listing Hub CMS 1.0 - SQL Injection 43 WEB AkkuS
2018-05-27   BookingWizz Booking System 5.5 - 'id' SQL Injection 37 WEB AkkuS
2018-05-27   Lyrist - 'id' SQL Injection 40 WEB Meisam Monsef
2018-05-27   Sharetronix CMS 3.6.2 - Cross-Site Request Forgery / Cross-Site Scripting 37 WEB Hesam Bazvand
2018-05-27   Ingenious School Management System - 'id' SQL Injection 38 WEB Meisam Monsef
2018-05-27   WordPress Plugin Booking Calendar 3.0.0 - SQL Injection / Cross-Site Scripting 38 WEB AkkuS
2018-05-26   easyLetters 1.0 - 'id' SQL Injection 40 WEB AkkuS
2018-05-26   mySurvey 1.0 - 'id' SQL Injection 37 WEB AkkuS
2018-05-26   EasyService Billing 1.0 - 'q' SQL Injection 36 WEB Divya Jain
2018-05-26   EasyService Billing 1.0 - Cross-Site Scripting 34 WEB Divya Jain
2018-05-26   EasyService Billing 1.0 - Cross-Site Request Forgery 35 WEB Divya Jain
2018-05-26   Ajax Full Featured Calendar 2.0 - 'search' SQL Injection 43 WEB AkkuS
2018-05-26   Employee Work Schedule 5.9 - 'cal_id' SQL Injection 41 WEB AkkuS
2018-05-25   Oracle WebCenter FatWire Content Server < 7 - Improper Access Control 38 WEB Sebastian Cornejo
2018-05-25   SAP Internet Transaction Server 6200.x - Session Fixation / Cross-Site Scripting 39 WEB J. Carrillo Lencina
2018-05-25   MyBB Moderator Log Notes Plugin 1.1 - Cross-Site Scripting 36 WEB 0xB9
2018-05-25   KomSeo Cart 1.3 - 'my_item_search' SQL Injection 34 WEB AkkuS
2018-05-25   Oracle WebCenter Sites 11.1.1.8.0/12.2.1.x - Cross-Site Scripting 36 WEB Richard Alviarez
2018-05-24   EU MRV Regulatory Complete Solution 1 - Authentication Bypass 39 WEB Veyselxan
2018-05-24   Honeywell XL Web Controller - Cross-Site Scripting 40 WEB t4rkd3vilz
2018-05-24   Timber 1.1 - Cross-Site Request Forgery 37 WEB L0RD