Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2017-01-03   My Click Counter 1.0 - Authentication Bypass 13 WEB Adam
2017-01-02   PHPMailer < 5.2.20 / SwiftMailer < 5.4.5-DEV / Zend Framework / zend-mail < 2.4.11 - 'AIO' 'PwnScrip 14 WEB Dawid Golunski
2016-12-09   D-Link DI-524 - Cross-Site Request Forgery 14 WEB Felipe Soares de Souza
2016-08-09   Xfinity Gateway (Technicolor DPC3941T) - Cross-Site Request Forgery 12 WEB Ayushman Dutta
2016-12-30   Zend Framework / zend-mail < 2.4.11 - Remote Code Execution 14 WEB Dawid Golunski
2016-12-29   Dell SonicWALL Secure Mobile Access SMA 8.1 - Cross-Site Scripting / Cross-Site Request Forgery 12 WEB LiquidWorm
2016-12-29   Dell SonicWALL Global Management System GMS 8.1 - Blind SQL Injection 12 WEB LiquidWorm
2016-12-29   WordPress Plugin Slider Templatic Tevolution < 2.3.6 - Arbitrary File Upload 15 WEB r3m1ck
2016-12-29   PHPMailer < 5.2.18 - Remote Code Execution 10 WEB anarc0der
2016-12-28   Joomla! Component aWeb Cart Watching System for Virtuemart 2.6.0 - SQL Injection 10 WEB qemm
2016-12-28   SwiftMailer < 5.4.5-DEV - Remote Code Execution 10 WEB Dawid Golunski
2016-12-28   WordPress Plugin Simply Poll 1.4.1 - SQL Injection 9 WEB TAD GROUP
2016-12-25   PHPMailer < 5.2.18 - Remote Code Execution 10 WEB Dawid Golunski
2016-12-27   PHPMailer < 5.2.20 - Remote Code Execution 9 WEB Dawid Golunski
2016-12-26   PHPMailer < 5.2.18 - Remote Code Execution 10 WEB Dawid Golunski
2016-12-26   Joomla! Component Blog Calendar - SQL Injection 11 WEB X-Cisadane
2016-12-23   Apache mod_session_crypto - Padding Oracle 12 WEB RedTeam Pentesting GmbH
2016-08-04   ntop-ng 2.5.160805 - Username Enumeration 11 WEB Dolev Farhi
2016-12-19   WordPress Plugin 404 Redirection Manager 1.0 - SQL Injection 8 WEB Ahmed Sherif
2016-12-16   WordPress Plugin WP Private Messages 1.0.1 - SQL Injection (1) 10 WEB Lenon Leite
2016-12-16   WordPress Plugin WP Support Plus Responsive Ticket System 7.1.3 - SQL Injection 9 WEB Lenon Leite
2016-12-16   WordPress Plugin Quiz And Survey Master 4.5.4/4.7.8 - Cross-Site Request Forgery 11 WEB dxw
2016-12-16   WHMCompleteSolution (WHMCS) Addon VMPanel 2.7.4 - SQL Injection 12 WEB ZwX
2016-12-13   Joomla! Component DT Register - 'cat' SQL Injection 13 WEB Elar Lang
2016-12-12   WordPress Plugin Multisite Post Duplicator 0.9.5.1 - Cross-Site Request Forgery 12 WEB dxw
2016-12-03   Smart Guard Network Manager 6.3.2 - SQL Injection 11 WEB Rahul Raz
2016-12-11   ARG-W4 ADSL Router - Multiple Vulnerabilities 11 WEB Persian Hack Team
2016-12-11   Netgear R7000 - Cross-Site Scripting 11 WEB Vincent Yiu
2016-12-09   Splunk Enterprise 6.4.3 - Server-Side Request Forgery 10 WEB Security-Assessment.com
2016-12-09   Roundcube 1.2.2 - Remote Code Execution 13 WEB Robin Peraglie
2016-12-07   Netgear R7000 - Command Injection 11 WEB Acew0rm
2016-12-07   Cisco Unified Communications Manager 7/8/9 - Directory Traversal 10 WEB justpentest
2016-12-06   Edge SkateShop - Authentication bypass 14 WEB Delilah
2016-12-06   AbanteCart 1.2.7 - Cross-Site Scripting 10 WEB Kacper Szurek
2016-12-05   WordPress Plugin Single Personal Message 1.0.3 - SQL Injection 13 WEB Lenon Leite
2016-12-02   Xfinity Gateway - Remote Code Execution 11 WEB Gregory Smiley
2016-11-30   Xfinity Gateway - Cross-Site Request Forgery 10 WEB Pabstersac
2016-09-16   Joomla! Component Portfolio Gallery 1.0.6 - SQL Injection 9 WEB Larry W. Cashdollar
2016-09-16   Joomla! Component Catalog 1.0.7 - SQL Injection 9 WEB Larry W. Cashdollar
2016-11-30   WordPress Plugin WP Vault 0.8.6.6 - Local File Inclusion 11 WEB Lenon Leite
2016-11-28   Red Hat JBoss EAP - Deserialization of Untrusted Data 14 WEB Mediaservice.net Srl.
2016-11-28   Tenda/Dlink/Tplink TD-W8961ND - 'DHCP' Cross-Site Scripting 12 WEB Vulnerability-Lab
2016-11-24   osTicket 1.9.14 - 'X-Forwarded-For' Cross-Site Scripting 13 WEB Joaquin Ramirez Martinez
2016-11-22   AppFusions Doxygen for Atlassian Confluence 1.3.2 - Cross-Site Scripting 12 WEB Julien Ahrens
2016-11-22   SAP NetWeaver AS JAVA - 'BC-BMT-BPM-DSK' XML External Entity Injection 11 WEB ERPScan
2016-11-22   EasyPHP Devserver 16.1.1 - Cross-Site Request Forgery / Remote Command Execution 12 WEB hyp3rlinx
2016-11-21   WordPress Plugin Olimometer 2.56 - SQL Injection 11 WEB TAD GROUP
2016-11-21   FUDforum 3.0.6 - Local File Inclusion 12 WEB Curesec Research Team
2016-11-21   FUDforum 3.0.6 - Cross-Site Scripting / Cross-Site Request Forgery 9 WEB Curesec Research Team
2016-11-21   LEPTON 2.2.2 - Remote Code Execution 7 WEB Curesec Research Team
2016-11-21   LEPTON 2.2.2 - SQL Injection 8 WEB Curesec Research Team
2016-11-21   Mezzanine 4.2.0 - Cross-Site Scripting 10 WEB Curesec Research Team
2016-11-21   WordPress Plugin Instagram Feed 1.4.6.2 - Cross-Site Request Forgery 8 WEB Sipke Mellema
2016-11-21   Atlassian Confluence AppFusions Doxygen 1.3.0 - Directory Traversal 11 WEB Julien Ahrens
2016-11-20   ScriptCase 8.1.053 - Multiple Vulnerabilities 10 WEB hyp3rlinx
2016-11-12   WordPress Plugin Product Catalog 8 1.2.0 - SQL Injection 15 WEB Lenon Leite
2016-11-12   WordPress Plugin BBS e-Franchise 1.1.1 - SQL Injection 17 WEB Lenon Leite
2016-11-18   EditMe CMS - Cross-Site Request Forgery (Add Admin) 14 WEB Vulnerability-Lab
2016-11-17   WordPress Plugin Sirv 1.3.1 - SQL Injection 12 WEB Lenon Leite
2016-11-17   WordPress Plugin Answer My Question 1.3 - SQL Injection 9 WEB Lenon Leite
2016-11-16   CS-Cart 4.3.10 - XML External Entity Injection 11 WEB 0x4148
2016-11-14   Boonex Dolphin 7.3.2 - Authentication Bypass / Remote Code Execution 13 WEB 0x4148
2016-11-13   ATutor 2.2.2 - Cross-Site Request Forgery (Add New Course) 11 WEB Saravana Kumar
2016-11-13   Schoolhos CMS 2.29 - Remote Code Execution / SQL Injection 10 WEB 0x4148
2016-11-11   InvoicePlane 1.4.8 - Password Reset 11 WEB feedersec
2015-08-25   vBulletin 3.6.0 < 4.2.3 - 'ForumRunner' SQL Injection 9 WEB Manish Tanwar
2016-11-10   4Images 1.7.13 - SQL Injection 10 WEB 0x4148
2016-11-10   MyBB 1.8.6 - Cross-Site Scripting 14 WEB Curesec Research Team
2016-11-09   e107 CMS 2.1.2 - Privilege Escalation 12 WEB Kacper Szurek
2016-11-09   Adobe Connect 9.5.7 - Cross-Site Scripting 13 WEB Vulnerability-Lab
2016-11-08   WordPress Plugin WassUp Real Time Analytics 1.9 - Persistent Cross-Site Scripting 15 WEB Burak Kelebek
2016-11-08   WordPress Plugin 404 to 301 2.2.8 - Persistent Cross-Site Scripting 13 WEB Alyssa Milburn
2016-11-07   Sophos Web Appliance 4.2.1.3 - Remote Code Execution 11 WEB KoreLogic
2016-11-07   Piwik 2.16.0 - 'layout' PHP Object Injection 11 WEB Egidio Romano
2016-11-07   NodCMS - PHP Code Execution 12 WEB Ashiyane Digital Security Team
2016-11-07   Schoolhos CMS 2.29 - 'kelas' SQL Injection 14 WEB Vulnerability-Lab
2016-11-06   SweetRice 1.5.1 - Backup Disclosure 12 WEB Ashiyane Digital Security Team
2016-11-06   SweetRice 1.5.1 - Arbitrary File Upload 10 WEB Ashiyane Digital Security Team
2016-11-03   Redaxo 5.2.0 - Cross-Site Request Forgery 11 WEB Amir.ght
2016-11-03   nodCMS - Cross-Site Request Forgery 10 WEB Amir.ght
2016-11-03   sNews 1.7.1 - Arbitrary File Upload 12 WEB Amir.ght
2016-11-03   sNews 1.7.1 - Cross-Site Request Forgery 14 WEB Amir.ght
2016-11-03   ETchat 3.7 - Cross-Site Request Forgery 12 WEB Hesam Bazvand
2016-11-03   SweetRice 1.5.1 - Cross-Site Request Forgery / PHP Code Execution 14 WEB Ashiyane Digital Security Team
2016-11-03   SweetRice 1.5.1 - Arbitrary File Download 12 WEB Ashiyane Digital Security Team
2016-11-02   SweetRice 1.5.1 - Cross-Site Request Forgery 13 WEB Ashiyane Digital Security Team
2016-11-02   LifeSize Room 5.0.9 - Multiple Vulnerabilities 15 WEB Xiphos Research Ltd
2016-11-02   Alienvault OSSIM/USM 5.3.1 - SQL Injection 14 WEB Peter Lapp
2016-11-02   Alienvault OSSIM/USM 5.3.1 - Persistent Cross-Site Scripting 9 WEB Peter Lapp
2016-11-02   Alienvault OSSIM/USM 5.3.1 - PHP Object Injection 10 WEB Peter Lapp
2016-11-01   My Little Forum 2.3.7 - Multiple Vulnerabilities 12 WEB Ashiyane Digital Security Team
2016-11-01   School Registration and Fee System - Authentication Bypass 11 WEB opt1lc
2016-10-31   S9Y Serendipity 2.0.4 - Cross-Site Scripting 13 WEB Besim
2016-10-28   InfraPower PPS-02-S Q213V1 - Cross-Site Request Forgery 11 WEB LiquidWorm
2016-10-28   InfraPower PPS-02-S Q213V1 - Authentication Bypass 11 WEB LiquidWorm
2016-10-28   InfraPower PPS-02-S Q213V1 - Insecure Direct Object Reference 11 WEB LiquidWorm
2016-10-28   InfraPower PPS-02-S Q213V1 - Local File Disclosure 11 WEB LiquidWorm
2016-10-28   InfraPower PPS-02-S Q213V1 - Multiple Cross-Site Scripting Vulnerabilities 10 WEB LiquidWorm
2016-10-28   InfraPower PPS-02-S Q213V1 - Remote Command Execution 11 WEB LiquidWorm
2016-10-27   Joomla! 3.4.4 < 3.6.4 - Account Creation / Privilege Escalation 12 WEB Xiphos Research Ltd
2016-10-26   Boonex Dolphin 7.3.2 - Authentication Bypass 14 WEB Saadi Siddiqui
2016-10-24   Industrial Secure Routers EDR-810 / EDR-G902 / EDR-G903 - Insecure Configuration Management 9 WEB Sniper Pex
2016-10-24   EC-CUBE 2.12.6 - Server-Side Request Forgery 10 WEB Wadeek
2016-10-24   Orange Inventel LiveBox 5.08.3-sp - Cross-Site Request Forgery 14 WEB BlackMamba
2016-10-23   Zenbership 107 - Multiple Vulnerabilities 12 WEB Besim
2016-10-21   FreePBX 13 - Remote Command Execution / Privilege Escalation 10 WEB Christopher Davis
2016-10-21   Just Dial Clone Script - 'srch' SQL Injection 11 WEB Arbin Godar
2016-10-20   SPIP 3.1.2 - Cross-Site Request Forgery 11 WEB Sysdream
2016-10-20   SPIP 3.1.1/3.1.2 - File Enumeration / Path Traversal 10 WEB Sysdream
2016-10-20   SPIP 3.1.2 Template Compiler/Composer - PHP Code Execution 9 WEB Sysdream
2016-10-20   Event Calendar PHP 1.5 - SQL Injection 10 WEB Ehsan Hosseini
2016-10-20   Classifieds Rental Script - SQL Injection 11 WEB Arbin Godar
2016-10-20   Oracle BI Publisher 11.1.1.6.0/11.1.1.7.0/11.1.1.9.0/12.2.1.0.0 - XML External Entity Injection 11 WEB Jakub Palaczynski
2016-10-19   Intel(R) PROSet/Wireless WiFi Software 15.01.1000.0927 - Unquoted Service Path Privilege Escalation 13 WEB Joey Lane
2016-10-19   XhP CMS 0.5.1 - Cross-Site Request Forgery / Persistent Cross-Site Scripting 9 WEB Ahsan Tahir
2016-10-19   CNDSOFT 2.3 - Cross-Site Request Forgery / Arbitrary File Upload 8 WEB Besim
2016-10-18   Cgiemail 1.6 - Source Code Disclosure 13 WEB Finbar Crago
2016-10-18   ManageEngine ServiceDesk Plus 9.2 Build 9207 - Unauthorized Information Disclosure 10 WEB p0z
2016-10-18   Pluck CMS 4.7.3 - Cross-Site Request Forgery (Add Page) 12 WEB Ahsan Tahir
2016-10-17   PHP Business Directory - Multiple Vulnerabilities 12 WEB larrycompress
2016-10-14   School Full CBT 0.1 - SQL Injection 11 WEB lahilote
2016-10-16   PHP NEWS 1.3.0 - Cross-Site Request Forgery (Add Admin) 11 WEB Meryem AKDOĞAN
2016-10-14   Simple Shopping Cart Application 0.1 - SQL Injection 9 WEB lahilote
2016-10-16   PHP Image Database - Multiple Vulnerabilities 10 WEB larrycompress
2016-10-17   Subrion CMS 4.0.5 - Cross-Site Request Forgery Bypass / Persistent Cross-Site Scripting 11 WEB Ahsan Tahir