Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2016-03-09   Bluethrust Clan Scripts v4 R17 - Multiple Vulnerabilities 1 WEB Brandon Murphy
2016-03-07   Cerberus Helpdesk (Cerb5) 5 < 6.7 - Password Hash Disclosure 1 WEB asdizzle_
2016-03-07   ATutor LMS - '/install_modules.php' Cross-Site Request Forgery / Remote Code Execution 2 WEB mr_me
2016-03-03   WordPress Plugin Bulk Delete 5.5.3 - Privilege Escalation 4 WEB Panagiotis Vagenas
2016-03-01   WordPress Plugin CP Polls 1.0.8 - Multiple Vulnerabilities 4 WEB i0akiN SEC-LABORATORY
2016-02-29   WordPress Plugin More Fields 2.1 - Cross-Site Request Forgery 3 WEB Aatif Shahdad
2016-02-26   Joomla! Component com_poweradmin 2.3.0 - Multiple Vulnerabilities 3 WEB RatioSec Research
2016-02-26   Centreon 2.5.3 - Remote Command Execution 3 WEB Sysdream
2016-02-26   Zimbra 8.0.9 GA - Cross-Site Request Forgery 4 WEB Sysdream
2016-02-26   WordPress Plugin Ocim MP3 - SQL Injection 4 WEB xevil & Blankon33
2016-02-26   Infor CRM 8.2.0.1136 - Multiple HTML Script Injection Vulnerabilities 4 WEB LiquidWorm
2016-02-25   IBM Lotus Domino R8 - Password Hash Extraction 3 WEB Jonathan Broche
2016-02-24   WordPress Plugin Extra User Details 0.4.2 - Privilege Escalation 3 WEB Panagiotis Vagenas
2016-02-23   Ubiquiti Networks UniFi 3.2.10 - Cross-Site Request Forgery 3 WEB Julien Ahrens
2016-02-23   Dell OpenManage Server Administrator 8.2 - (Authenticated) Directory Traversal 3 WEB hantwister
2016-02-22   Thru Managed File Transfer Portal 9.0.2 - SQL Injection 3 WEB SySS GmbH
2016-02-22   BlackBerry Enterprise Service < 12.4 (BES12) Self-Service - Multiple Vulnerabilities 2 WEB Security-Assessment.com
2016-02-22   InstantCoder 1.0 iOS - Multiple Vulnerabilities 2 WEB Vulnerability-Lab
2016-02-20   SOLIDserver < 5.0.4 - Local File Inclusion 3 WEB Saeed reza Zamanian
2016-02-19   ManageEngine Firewall Analyzer 8.5 - Multiple Vulnerabilities 3 WEB Sachin Wagh
2016-02-19   Chamilo LMS - Persistent Cross-Site Scripting 3 WEB Vulnerability-Lab
2016-02-19   Chamilo LMS IDOR - 'messageId' Delete POST Injection 3 WEB Vulnerability-Lab
2016-02-18   DirectAdmin 1.491 - Cross-Site Request Forgery 3 WEB Necmettin COSKUN
2016-02-18   Vesta Control Panel 0.9.8-15 - Persistent Cross-Site Scripting 2 WEB Necmettin COSKUN
2016-02-17   Redaxo 5.0.0 - Multiple Vulnerabilities 3 WEB LSE Leading Security Experts GmbH
2016-02-17   OCS Inventory NG 2.2 - SQL Injection 3 WEB Ephreet
2016-02-17   JMX2 Email Tester - 'save_email.php' Arbitrary File Upload 3 WEB HaHwul
2016-02-16   phpMyBackupPro 2.5 - Remote Command Execution / Cross-Site Request Forgery 3 WEB hyp3rlinx
2016-02-16   WordPress Plugin ALO EasyMail NewsLetter 2.6.01 - Cross-Site Request Forgery 4 WEB Mohsen Lotfi
2016-02-16   ManageEngine Network Configuration Management Build 11000 - Privilege Escalation 4 WEB Kaustubh G. Padwad
2016-02-16   ManageEngine OPutils 8.0 - Multiple Vulnerabilities 3 WEB Kaustubh G. Padwad
2016-02-15   Tiny Tiny RSS - Blind SQL Injection 3 WEB Kacper Szurek
2015-08-27   Oracle GlassFish Server 4.1 - Directory Traversal 4 WEB Trustwave's SpiderLabs
2016-02-10   Yeager CMS 1.2.1 - Multiple Vulnerabilities 4 WEB SEC Consult
2016-02-10   Apache Sling Framework (Adobe AEM) 2.3.6 - Information Disclosure 3 WEB Vulnerability-Lab
2010-03-10   Employee TimeClock Software 0.99 - SQL Injection 4 WEB Secunia Research
2016-02-08   WordPress Plugin Booking Calendar Contact Form 1.0.23 - Multiple Vulnerabilities 3 WEB i0akiN SEC-LABORATORY
2016-02-08   WordPress Plugin WP User Frontend < 2.3.11 - Unrestricted Arbitrary File Upload 4 WEB Panagiotis Vagenas
2016-02-08   WordPress Plugin WooCommerce Store Toolkit 1.5.5 - Privilege Escalation 1 WEB Panagiotis Vagenas
2016-02-08   WordPress Plugin User Meta Manager 3.4.6 - Information Disclosure 2 WEB Panagiotis Vagenas
2016-02-08   dotDefender Firewall 5.00.12865/5.13-13282 - Cross-Site Request Forgery 2 WEB hyp3rlinx
2016-02-08   Solr 3.5.0 - Arbitrary Data Deletion 2 WEB N37
2016-02-04   Symphony CMS 2.6.3 - Multiple SQL Injections 1 WEB Sachin Wagh
2016-02-04   ATutor 2.2 - Multiple Cross-Site Scripting Vulnerabilities 3 WEB Curesec Research Team
2016-02-04   OpenDocMan 1.3.4 - Cross-Site Request Forgery 2 WEB Curesec Research Team
2016-02-04   UliCMS v9.8.1 - SQL Injection 3 WEB Manuel García Cárdenas
2016-02-04   Netgear NMS300 ProSafe Network Management System - Multiple Vulnerabilities 3 WEB Pedro Ribeiro
2016-02-04   WordPress Plugin User Meta Manager 3.4.6 - Privilege Escalation 3 WEB Panagiotis Vagenas
2016-02-04   WordPress Plugin User Meta Manager 3.4.6 - Blind SQL Injection 3 WEB Panagiotis Vagenas
2016-02-04   D-Link DVG­N5402SP - Multiple Vulnerabilities 3 WEB Karn Ganeshen
2016-02-04   GE Industrial Solutions UPS SNMP Adapter < 4.8 - Multiple Vulnerabilities 3 WEB Karn Ganeshen
2016-02-03   Viprinet Multichannel VPN Router 300 - Persistent Cross-Site Scripting 2 WEB Portcullis
2016-02-03   Jive Forums 5.5.25 - Directory Traversal 3 WEB ZhaoHuAn
2016-02-03   TimeClock Software 0.995 - (Authenticated ) Multiple SQL Injections 2 WEB Benetrix
2016-02-02   eClinicalWorks (CCMR) - Multiple Vulnerabilities 3 WEB Jerold Hoong
2016-02-02   Manage Engine Network Configuration Manager Build 11000 - Cross-Site Request Forgery 2 WEB Kaustubh G. Padwad
2016-02-01   ManageEngine EventLog Analyzer 4.0 < 10 - Privilege Escalation 3 WEB GraphX
2016-02-01   Hippo CMS 10.1 - Multiple Vulnerabilities 4 WEB LiquidWorm
2016-02-01   iScripts EasyCreate 3.0 - Remote Code Execution 3 WEB Bikramaditya Guha
2016-02-01   iScripts EasyCreate 3.0 - Multiple Vulnerabilities 3 WEB Bikramaditya Guha
2016-01-29   ProjectSend r582 - Multiple Vulnerabilities 3 WEB Filippo Cavallarin
2016-01-29   WordPress Plugin Simple Add Pages or Posts 1.6 - Cross-Site Request Forgery 3 WEB ALIREZA_PROMIS
2016-01-28   SAP HANA 1.00.095 - hdbindexserver Memory Corruption 3 WEB ERPScan
2016-01-28   Netgear WNR1000v4 - Authentication Bypass 3 WEB Daniel Haake
2016-01-28   Ramui Web Hosting Directory Script 4.0 - Remote File Inclusion 3 WEB bd0rk
2016-01-28   Ramui Forum Script 9.0 - SQL Injection 2 WEB bd0rk
2014-07-17   Fonality trixbox - 'index.php' Remote Code Execution 3 WEB AtT4CKxT3rR0r1ST
2014-07-17   Fonality trixbox - 'endpointcfg.php' Directory Traversal 2 WEB AtT4CKxT3rR0r1ST
2014-07-17   Fonality trixbox - 'repo.php' Directory Traversal 3 WEB AtT4CKxT3rR0r1ST
2014-07-17   Fonality trixbox - 'asterisk_info.php' Directory Traversal 3 WEB AtT4CKxT3rR0r1ST
2014-07-17   Fonality trixbox - 'index.php' Directory Traversal 3 WEB AtT4CKxT3rR0r1ST
2014-07-17   Fonality trixbox - 'endpoint_generic.php' SQL Injection 3 WEB AtT4CKxT3rR0r1ST
2014-07-17   OL-Commerce - '/OL-Commerce/admin/create_account.php?entry_country_id' SQL Injection 3 WEB AtT4CKxT3rR0r1ST
2014-07-17   OL-Commerce - '/OL-Commerce/create_account.php?country' SQL Injection 3 WEB AtT4CKxT3rR0r1ST
2014-07-17   OL-Commerce - '/OL-Commerce/affiliate_show_banner.php?affiliate_banner_id' SQL Injection 3 WEB AtT4CKxT3rR0r1ST
2014-07-17   OL-Commerce - '/OL-Commerce/affiliate_signup.php?a_country' SQL Injection 3 WEB AtT4CKxT3rR0r1ST
2016-01-27   WordPress Plugin Booking Calendar Contact Form 1.1.24 - addslashes SQL Injection 2 WEB i0akiN SEC-LABORATORY
2016-01-27   WordPress Plugin Booking Calendar Contact Form 1.1.24 - Multiple Vulnerabilities 3 WEB i0akiN SEC-LABORATORY
2016-01-27   BK Mobile jQuery CMS 2.4 - Multiple Vulnerabilities 3 WEB Rahul Pratap Singh
2016-01-27   Secure Item Hub 1.0 iOS - Multiple Vulnerabilities 3 WEB Vulnerability-Lab
2014-06-12   Yealink VoIP Phones - '/servlet' HTTP Response Splitting 3 WEB Jesus Oquendo
2014-06-08   WordPress Theme Elegance - '/elegance/lib/scripts/dl-skin.php' Local File Disclosure 3 WEB Felipe Andrian Peixoto
2014-05-19   Wiser Backup - Information Disclosure 3 WEB AtT4CKxT3rR0r1ST
2016-01-26   Gongwalker API Manager 1.1 - Blind SQL Injection 3 WEB HaHwul
2016-01-26   WordPress Plugin Booking Calendar Contact Form 1.1.23 - Shortcode SQL Injection 3 WEB i0akiN SEC-LABORATORY
2014-09-14   WordPress Plugin Wordfence Security - Multiple Vulnerabilities 3 WEB Voxel@Night
2014-09-12   Food Order Portal - 'admin_user_delete.php' Cross-Site Request Forgery 4 WEB KnocKout
2016-01-25   WordPress Plugin Booking Calendar Contact Form 1.1.23 - SQL Injection 2 WEB i0akiN SEC-LABORATORY
2016-01-25   pfSense Firewall 2.2.5 - Config File Cross-Site Request Forgery 3 WEB Aatif Shahdad
2014-09-08   WordPress Plugin W3 Total Cache - 'admin.php' Cross-Site Request Forgery 3 WEB Voxel@Night
2014-09-08   WordPress Plugin Xhanch My Twitter - Cross-Site Request Forgery 3 WEB Voxel@Night
2014-09-08   WordPress Plugin WP to Twitter - Authentication Bypass 3 WEB Voxel@Night
2014-09-08   WordPress Plugin Ninja Forms 2.7.7 - Authentication Bypass 3 WEB Voxel@Night
2014-09-07   WordPress Plugin Spider Facebook - 'facebook.php' SQL Injection 3 WEB Claudio Viviani
2014-09-08   WordPress Theme Antioch - 'download.php' Arbitrary File Download 3 WEB Ashiyane Digital Security Team
2014-09-08   WordPress Theme Epic - 'download.php' Arbitrary File Download 3 WEB Ashiyane Digital Security Team
2014-09-08   WordPress Theme Authentic - 'download.php' Arbitrary File Download 3 WEB Ashiyane Digital Security Team
2014-09-08   WordPress Theme Urban City - 'download.php' Arbitrary File Download 5 WEB Ashiyane Digital Security Team
2014-08-26   Joomla! Component spidervideoplayer - 'theme' SQL Injection 3 WEB Claudio Viviani
2014-08-24   WordPress Plugin KenBurner Slider - 'admin-ajax.php' Arbitrary File Download 4 WEB MF0x
2014-08-22   MyAwards MyBB Module - Cross-Site Request Forgery 3 WEB Vagineer
2014-08-20   ArticleFR - 'id' SQL Injection 3 WEB High-Tech Bridge
2014-08-20   ManageEngine Password Manager Pro / ManageEngine IT360 - SQL Injection 3 WEB Pedro Ribeiro
2014-08-19   WordPress Plugin WP Content Source Control - 'download.php' Directory Traversal 2 WEB Henri Salo
2014-07-28   WordPress Plugin FB Gorilla - 'game_play.php' SQL Injection 2 WEB Amirh03in
2014-08-11   WordPress Plugin GB Gallery Slideshow - '/wp-admin/admin-ajax.php' SQL Injection 3 WEB Claudio Viviani
2014-08-08   VoipSwitch - 'user.php' Local File Inclusion 4 WEB 0x4148
2014-05-28   WordPress Plugin HDW Player - '/wp-admin/admin.php' SQL Injection 4 WEB Anant Shrivastava
2014-08-06   WordPress Plugin wpSS - 'ss_handler.php' SQL Injection 4 WEB Ashiyane Digital Security Team
2014-07-28   CMSimple 4.4.4 - 'color' Remote Code Execution 3 WEB Govind Singh
2014-07-28   CMSimple 4.4.4 - Remote File Inclusion 3 WEB Govind Singh
2014-07-28   CMSimple - Default Administrator Credentials 3 WEB Govind Singh
2014-07-28   WordPress Plugin WhyDoWork AdSense - 'options-general.php' Cross-Site Request Forgery (Option Manipu 3 WEB Dylan Irzi
2014-07-28   WordPress Plugin Lead Octopus Power - 'id' SQL Injection 3 WEB Amirh03in
2014-07-23   Ubiquiti Networks UniFi Video Default - 'crossdomain.xml' Security Bypass 3 WEB Seth Art
2014-07-23   Ilya Birman E2 - '/@actions/comment-process' SQL Injection 3 WEB High-Tech Bridge
2016-01-18   SeaWell Networks Spectrum - Multiple Vulnerabilities 3 WEB Karn Ganeshen
2016-01-18   Advanced Electron Forum 1.0.9 - Remote File Inclusion / Cross-Site Request Forgery 3 WEB hyp3rlinx
2016-01-18   Advanced Electron Forum 1.0.9 - Persistent Cross-Site Scripting 3 WEB hyp3rlinx
2016-01-18   Advanced Electron Forum 1.0.9 - Cross-Site Request Forgery 4 WEB hyp3rlinx
2014-05-28   WordPress Plugin Tera Charts (tera-charts) - '/charts/zoomabletreemap.php?fn' Directory Traversal 4 WEB Anant Shrivastava
2014-05-28   WordPress Plugin Tera Charts (tera-charts) - '/charts/treemap.php?fn' Directory Traversal 3 WEB Anant Shrivastava
2014-07-14   WEBMIS CMS - Arbitrary File Upload 3 WEB Jagriti Sahu
2014-07-14   WordPress Plugin CopySafe PDF Protection - Arbitrary File Upload 3 WEB Jagriti Sahu
2014-05-28   WordPress Plugin ENL NewsLetter - '/wp-admin/admin.php' SQL Injection 3 WEB Anant Shrivastava