Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2016-10-10   Spacemarc News - Cross-Site Request Forgery (Add New Post) 35 WEB Besim
2016-10-10   Maian Weblog 4.0 - Cross-Site Request Forgery (Add New Post) 29 WEB Besim
2016-10-09   PHP Press Release - Persistent Cross-Site Scripting 31 WEB Besim
2016-10-09   PHP Press Release - Cross-Site Request Forgery (Add Admin) 30 WEB Besim
2016-09-19   ShoreTel Connect ONSITE - Blind SQL Injection 40 WEB Iraklis Mathiopoulos
2016-10-09   miniblog 1.0.1 - Cross-Site Request Forgery (Add New Post) 37 WEB Besim
2016-10-07   Entrepreneur Job Portal Script 2.06 - SQL Injection 27 WEB OoN_Boy
2016-10-07   Simple PHP Blog 0.8.4 - Cross-Site Request Forgery (Add Admin) 36 WEB Besim
2016-10-06   Just Dial Clone Script - 'fid' SQL Injection 31 WEB OoN_Boy
2016-10-06   MLM Unilevel Plan Script 1.0.2 - SQL Injection 31 WEB N4TuraL
2016-10-06   B2B Portal Script - Blind SQL Injection 45 WEB OoN_Boy
2016-10-06   PHP Classifieds Rental Script - Blind SQL Injection 28 WEB OoN_Boy
2016-10-06   Advance MLM Script - SQL Injection 30 WEB OoN_Boy
2016-10-05   Cisco Firepower Threat Management Console 6.0.1 - Local File Inclusion 30 WEB KoreLogic
2016-10-05   Cisco Firepower Threat Management Console 6.0.1 - Remote Command Execution 26 WEB KoreLogic
2016-10-05   Witbe - Remote Code Execution 32 WEB BeLmar
2016-10-05   Picosafe Web GUI - Multiple Vulnerabilities 36 WEB Shahab Shamsi
2016-09-28   Symantec Messaging Gateway 10.6.1 - Directory Traversal 33 WEB R-73eN
2016-09-27   TP-Link Archer CR-700 - Cross-Site Scripting 33 WEB Ayushman Dutta
2016-09-26   Joomla! Component Event Booking 2.10.1 - SQL Injection 30 WEB Persian Hack Team
2016-09-22   Matrimonial Website Script 1.0.2 - SQL Injection 36 WEB N4TuraL
2016-09-22   Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities 39 WEB SEC Consult
2016-09-22   Joomla! Component com_videogallerylite 1.0.9 - SQL Injection 38 WEB Larry W. Cashdollar
2016-09-22   Exponent CMS 2.3.9 - Blind SQL Injection 33 WEB Manuel García Cárdenas
2016-09-22   Microix Timesheet Module - SQL Injection 36 WEB Anthony Cole
2016-09-20   Dolphin 7.3.0 - Error-Based SQL Injection 33 WEB Kacper Szurek
2016-09-20   VegaDNS 0.13.2 - Remote Command Injection 34 WEB Wireghoul
2016-09-19   ZineBasic 1.1 - Arbitrary File Disclosure 32 WEB bd0rk
2016-09-19   MuM MapEdit 3.2.6.0 - Multiple Vulnerabilities 39 WEB Paul Baade & Sven Krewitt
2016-09-19   MyBB 1.8.6 - SQL Injection 31 WEB Curesec Research Team
2016-09-19   Kajona 4.7 - Cross-Site Scripting / Directory Traversal 34 WEB Curesec Research Team
2016-09-19   WordPress Plugin Order Export Import for WooCommerce - Order Information Disclosure 49 WEB david-peltier
2016-09-19   BuilderEngine 3.5.0 - Arbitrary File Upload 36 WEB metanubix
2016-09-16   AnoBBS 1.0.1 - Remote File Inclusion 31 WEB bd0rk
2016-09-15   Cisco EPC 3925 - Multiple Vulnerabilities 36 WEB Patryk Bogdan
2016-09-13   Open-Xchange App Suite 7.8.2 - Cross-Site Scripting 29 WEB Jakub A>>oczek
2016-09-13   Open-Xchange Guard 2.4.2 - Multiple Cross-Site Scripting Vulnerabilities 32 WEB Benjamin Daniel Mussler
2016-09-13   ASUS DSL-X11 ADSL Router - DNS Change 33 WEB Todor Donev
2016-09-13   COMTREND ADSL Router CT-5367 C01_R12 / CT-5624 C01_R03 - DNS Change 32 WEB Todor Donev
2016-09-13   Tenda ADSL2/2+ Modem 963281TAN - DNS Change 43 WEB Todor Donev
2016-09-13   PLANET VDR-300NU ADSL Router - DNS Change 38 WEB Todor Donev
2016-09-13   PIKATEL 96338WS_ 96338L-2M-8M - DNS Change 29 WEB Todor Donev
2016-09-13   Inteno EG101R1 VoIP Router - DNS Change 31 WEB Todor Donev
2016-09-13   Exper EWM-01 ADSL/MODEM - DNS Change 35 WEB Todor Donev
2016-09-13   Contrexx CMS egov Module 1.0.0 - SQL Injection 36 WEB hamidreza borghei
2016-09-13   wdCalendar 2 - SQL Injection 43 WEB Alfonso Castillo Angel
2016-09-13   Cherry Music 0.35.1 - Arbitrary File Disclosure 41 WEB feedersec
2016-09-09   Airmail 3.0.2 - Cross-Site Scripting 35 WEB redrain
2016-09-09   Vodafone Mobile Wifi - Reset Admin Password 34 WEB Daniele Linguaglossa
2016-09-08   Zabbix 2.0 < 3.0.3 - SQL Injection 34 WEB Zzzians
2016-09-08   Jobberbase 2.0 - Multiple Vulnerabilities 37 WEB Ross Marks
2016-09-07   Adobe ColdFusion < 11 Update 10 - XML External Entity Injection 33 WEB Dawid Golunski
2016-09-07   FreePBX 13.0.x < 13.0.154 - Remote Command Execution 35 WEB i-Hmx
2016-09-07   CumulusClips 2.4.1 - Multiple Vulnerabilities 33 WEB kor3k
2016-09-06   PHPIPAM 1.2.1 - Multiple Vulnerabilities 29 WEB Saeed reza Zamanian
2016-09-05   WordPress Plugin RB Agency 2.4.7 - Local File Disclosure 39 WEB Persian Hack Team
2016-09-04   Belkin F9K1122v1 1.00.30 - Buffer Overflow (via Cross-Site Request Forgery) 33 WEB b1ack0wl
2016-08-31   ZKTeco ZKAccess Security System 5.3.1 - Persistent Cross-Site Scripting 36 WEB LiquidWorm
2016-08-31   ZKTeco ZKBioSecurity 3.0 - 'visLogin.jsp' Local Authentication Bypass 34 WEB LiquidWorm
2016-08-31   ZKTeco ZKBioSecurity 3.0 - Directory Traversal 38 WEB LiquidWorm
2016-08-31   ZKTeco ZKBioSecurity 3.0 - Cross-Site Request Forgery (Add Superadmin) 43 WEB LiquidWorm
2016-08-31   ZKTeco ZKBioSecurity 3.0 - Hard-Coded Credentials SYSTEM Remote Code Execution 42 WEB LiquidWorm
2016-08-29   FreePBX 13.0.35 - SQL Injection 42 WEB i-Hmx
2016-08-29   PLC Wireless Router GPN2.4P21-C-CN - Arbitrary File Disclosure 36 WEB Rahul Raz
2016-08-29   Intellinet IP Camera INT-L100M20N - Unauthorized Admin Credential Change 32 WEB Todor Donev
2016-08-29   HelpDeskZ 1.0.2 - Arbitrary File Upload 31 WEB Lars Morgenroth
2016-08-29   FreePBX 13.0.35 - Remote Command Execution 35 WEB 0x4148
2016-08-24   WordPress Plugin CYSTEME Finder 1.3 - Arbitrary File Disclosure/Arbitrary File Upload 33 WEB T0w3ntum
2016-08-23   chatNow - Multiple Vulnerabilities 33 WEB HaHwul
2016-08-23   SimplePHPQuiz - Blind SQL Injection 32 WEB HaHwul
2016-08-23   WordPress Plugin Mail Masta 1.0 - Local File Inclusion 34 WEB Guillermo Garcia Marcos
2016-08-22   WordPress Core 4.5.3 - Directory Traversal / Denial of Service 37 WEB Yorick Koster
2016-08-22   Sakai 10.7 - Multiple Vulnerabilities 31 WEB LiquidWorm
2016-08-22   Ocomon 2.0 - SQL Injection 32 WEB Jonatas Fil
2016-08-22   VideoIQ Camera - Local File Disclosure 35 WEB Yakir Wizman
2016-08-22   Honeywell IP-Camera HICC-1100PT - Local File Disclosure 30 WEB Yakir Wizman
2016-08-22   JVC IP-Camera VN-T216VPRU - Local File Disclosure 28 WEB Yakir Wizman
2016-08-22   Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR - Local File Disclosure 30 WEB Yakir Wizman
2016-08-19   tcPbX - 'tcpbx_lang' Local File Inclusion 33 WEB 0x4148
2016-08-19   MESSOA IP Cameras (Multiple Models) - Password Change 31 WEB Todor Donev
2016-08-19   Fortigate Firewalls - 'EGREGIOUSBLUNDER' Remote Code Execution 33 WEB Shadow Brokers
2016-08-19   TOPSEC Firewalls - 'ELIGIBLEBOMBSHELL' Remote Code Execution 31 WEB Shadow Brokers
2016-08-19   TOPSEC Firewalls - 'ELIGIBLECANDIDATE' Remote Code Execution 33 WEB Shadow Brokers
2016-08-19   TOPSEC Firewalls - 'ELIGIBLECONTESTANT' Remote Code Execution 32 WEB Shadow Brokers
2016-08-19   ZYCOO IP Phone System - Remote Command Execution 33 WEB 0x4148
2016-08-19   MESSOA IP-Camera NIC990 - Authentication Bypass / Configuration Download 30 WEB Todor Donev
2016-08-19   TOSHIBA IP-Camera IK-WP41A - Authentication Bypass / Configuration Download 31 WEB Todor Donev
2016-08-19   C2S DVR Management IRDOME-II-C2S / IRBOX-II-C2S / DVR - Credentials Disclosure / Authentication Bypa 31 WEB Yakir Wizman
2016-08-19   JVC IP-Camera VN-T216VPRU - Credentials Disclosure 31 WEB Yakir Wizman
2016-08-19   Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR - Credentials Disclosure 32 WEB Yakir Wizman
2016-08-19   SIEMENS IP Cameras (Multiple Models) - Credential Disclosure / Configuration Download 30 WEB Todor Donev
2016-08-18   Honeywell IP-Camera HICC-1100PT - Credentials Disclosure 38 WEB Yakir Wizman
2016-08-18   SIEMENS IP Camera CCMW1025 x.2.2.1798 - Remote Admin Credentials Change 37 WEB Todor Donev
2016-08-17   SIEMENS IP-Camera CVMS2025-IR / CCMS2025 - Credentials Disclosure 33 WEB Yakir Wizman
2016-08-16   Nagios Incident Manager 2.0.0 - Multiple Vulnerabilities 35 WEB Security-Assessment.com
2016-08-16   Nagios Network Analyzer 2.2.0 - Multiple Vulnerabilities 32 WEB Security-Assessment.com
2016-08-16   Nagios Log Server 1.4.1 - Multiple Vulnerabilities 30 WEB Security-Assessment.com
2016-08-16   Pi-Hole Web Interface 2.8.1 - Persistent Cross-Site Scripting in Whitelist/Blacklist 29 WEB loneferret
2016-08-16   Lepton CMS 2.2.0/2.2.1 - PHP Code Injection 32 WEB hyp3rlinx
2016-08-16   Lepton CMS 2.2.0/2.2.1 - Directory Traversal 35 WEB hyp3rlinx
2016-08-16   WSO2 Carbon 4.4.5 - Denial of Service / Cross-Site Request Forgery 31 WEB hyp3rlinx
2016-08-16   WSO2 Carbon 4.4.5 - Persistent Cross-Site Scripting 34 WEB hyp3rlinx
2016-08-16   WSO2 Carbon 4.4.5 - Local File Inclusion 30 WEB hyp3rlinx
2016-08-16   WSO2 Identity Server 5.1.0 - Multiple Vulnerabilities 31 WEB hyp3rlinx
2016-08-15   Zabbix 2.2.x/3.0.x - SQL Injection 31 WEB 1n3
2016-08-15   GitLab - 'impersonate' Feature Privilege Escalation 32 WEB Kaimi
2016-08-11   ColoradoFTP 1.3 Prime Edition (Build 8) - Directory Traversal 37 WEB Rv3Laboratory
2016-08-10   WebNMS Framework Server 5.2/5.2 SP1 - Multiple Vulnerabilities 40 WEB Pedro Ribeiro
2016-08-10   EyeLock nano NXT 3.5 - Remote Code Execution 34 WEB LiquidWorm
2016-08-10   EyeLock nano NXT 3.5 - Local File Disclosure 34 WEB LiquidWorm
2016-08-10   vBulletin 5.2.2 - Server-Side Request Forgery 36 WEB Dawid Golunski
2016-08-10   Nagios Network Analyzer 2.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities 34 WEB hyp3rlinx
2016-08-08   WordPress Plugin Add From Server < 3.3.2 - Cross-Site Request Forgery (Arbitrary File Upload) 28 WEB Edwin Molenaar
2016-08-08   PHPCollab CMS 2.5 - 'emailusers.php' SQL Injection 36 WEB Vulnerability-Lab
2016-08-08   Navis Webaccess - SQL Injection 31 WEB bRpsd
2016-08-06   NUUO NVRmini 2 3.0.8 - 'strong_user.php' Backdoor Remote Shell Access 32 WEB LiquidWorm
2016-08-06   NUUO NVRmini 2 3.0.8 - Arbitrary File Deletion 28 WEB LiquidWorm
2016-08-06   NUUO NVRmini 2 3.0.8 - Remote Command Injection (Shellshock) 28 WEB LiquidWorm
2016-08-06   NUUO NVRmini 2 3.0.8 - Multiple OS Command Injections 30 WEB LiquidWorm
2016-08-06   NUUO NVRmini 2 3.0.8 - Local File Disclosure 29 WEB LiquidWorm
2016-08-06   NUUO NVRmini 2 3.0.8 - Cross-Site Request Forgery (Add Admin) 33 WEB LiquidWorm
2016-08-06   NUUO NVRmini 2 3.0.8 - Remote Code Execution 34 WEB LiquidWorm
2016-08-05   NASdeluxe NDL-2400r 2.01.09 - OS Command Injection 31 WEB SySS GmbH
2016-08-05   WordPress Plugin Count Per Day 3.5.4 - Persistent Cross-Site Scripting 29 WEB Julien Rentrop
2016-08-05   Davolink DV-2051 - Multiple Vulnerabilities 27 WEB Eric Flokstra