Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2022-03-07 Exploit Code Downloads   Attendance and Payroll System v1.0 - Remote Code Execution (RCE) 4 WEB pr0z
2022-03-07 Exploit Code Downloads   part-db 0.5.11 - Remote Code Execution (RCE) 4 WEB Chetanya Sharma
2022-03-07 Exploit Code Downloads   Spring Cloud Gateway 3.1.0 - Remote Code Execution (RCE) 3 WEB Carlos E. Vieira
2022-03-02 Exploit Code Downloads   Zyxel ZyWALL 2 Plus Internet Security Appliance - Cross-Site Scripting (XSS) 3 WEB Momen Eldawakhly
2022-03-02 Exploit Code Downloads   Xerte 3.9 - Remote Code Execution (RCE) (Authenticated) 3 WEB Rik Lutz
2022-03-02 Exploit Code Downloads   Xerte 3.10.3 - Directory Traversal (Authenticated) 3 WEB Rik Lutz
2022-02-28 Exploit Code Downloads   Casdoor 1.13.0 - SQL Injection (Unauthenticated) 2 WEB Mayank Deshmukh
2022-02-28 Exploit Code Downloads   Cipi Control Panel 3.1.15 - Stored Cross-Site Scripting (XSS) (Authenticated) 2 WEB Ghuliev
2022-02-23 Exploit Code Downloads   Microweber CMS 1.2.10 - Local File Inclusion (Authenticated) (Metasploit) 2 WEB Talha Karakumru
2022-02-23 Exploit Code Downloads   WebHMI 4.1 - Stored Cross Site Scripting (XSS) (Authenticated) 2 WEB Antonio Cuomo
2022-02-23 Exploit Code Downloads   WebHMI 4.1.1 - Remote Code Execution (RCE) (Authenticated) 3 WEB Antonio Cuomo
2022-02-23 Exploit Code Downloads   Student Record System 1.0 - 'cid' SQLi (Authenticated) 3 WEB Mohd. Anees
2022-02-23 Exploit Code Downloads   aaPanel 6.8.21 - Directory Traversal (Authenticated) 3 WEB Ghuliev
2022-02-23 Exploit Code Downloads   Air Cargo Management System v1.0 - SQLi 2 WEB nu11secur1ty
2022-02-23 Exploit Code Downloads   Simple Real Estate Portal System 1.0 - 'id' SQLi 4 WEB Mosaaed
2022-02-21 Exploit Code Downloads   Dbltek GoIP - Local File Inclusion 3 WEB Valtteri Lehtinen
2022-02-21 Exploit Code Downloads   FileCloud 21.2 - Cross-Site Request Forgery (CSRF) 2 WEB Masashi Fujiwara
2022-02-21 Exploit Code Downloads   WordPress Plugin WP User Frontend 3.5.25 - SQLi (Authenticated) 3 WEB Ron Jost
2022-02-21 Exploit Code Downloads   Thinfinity VirtualUI 2.5.26.2 - Information Disclosure 2 WEB Daniel Morales
2022-02-21 Exploit Code Downloads   Thinfinity VirtualUI 2.5.41.0 - IFRAME Injection 4 WEB Daniel Morales
2022-02-21 Exploit Code Downloads   Cab Management System 1.0 - Remote Code Execution (RCE) (Authenticated) 3 WEB Alperen Ergel
2022-02-21 Exploit Code Downloads   Microweber 1.2.11 - Remote Code Execution (RCE) (Authenticated) 4 WEB Chetanya Sharma
2022-02-21 Exploit Code Downloads   Cab Management System 1.0 - 'id' SQLi (Authenticated) 4 WEB Alperen Ergel
2022-02-21 Exploit Code Downloads   WordPress Plugin Perfect Survey - 1.5.1 - SQLi (Unauthenticated) 3 WEB Ron Jost
2022-02-18 Exploit Code Downloads   Fortinet Fortimail 7.0.1 - Reflected Cross-Site Scripting (XSS) 2 WEB Braiant Giraldo Villa
2022-02-18 Exploit Code Downloads   Hotel Druid 3.0.3 - Remote Code Execution (RCE) 3 WEB 0z09e
2022-02-18 Exploit Code Downloads   WordPress Plugin dzs-zoomsounds 6.60 - Remote Code Execution (RCE) (Unauthenticated) 3 WEB Overthinker1877
2022-02-18 Exploit Code Downloads   WordPress Plugin MasterStudy LMS 2.7.5 - Unauthenticated Admin Account Creation 3 WEB numan türle
2022-02-16 Exploit Code Downloads   WordPress Plugin Error Log Viewer 1.1.1 - Arbitrary File Clearing (Authenticated) 2 WEB Ceylan BOZOĞULLARINDAN
2022-02-16 Exploit Code Downloads   Network Video Recorder NVR304-16EP - Reflected Cross-Site Scripting (XSS) (Unauthenticated) 1 WEB Luis Martínez
2022-02-16 Exploit Code Downloads   ServiceNow - Username Enumeration 1 WEB Victor Hanna
2022-02-16 Exploit Code Downloads   Simple Student Quarterly Result/Grade System 1.0 - SQLi Authentication Bypass 1 WEB Saud Alenazi
2022-02-16 Exploit Code Downloads   Multi-Vendor Online Groceries Management System 1.0 - 'id' Blind SQL Injection 1 WEB Saud Alenazi
2022-02-11 Exploit Code Downloads   Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated) 1 WEB Luis Martínez
2022-02-11 Exploit Code Downloads   Subrion CMS 4.2.1 - Cross Site Request Forgery (CSRF) (Add Amin) 1 WEB Aryan Chehreghani
2022-02-11 Exploit Code Downloads   Accounting Journal Management System 1.0 - 'id' SQLi (Authenticated) 1 WEB Alperen Ergel
2022-02-10 Exploit Code Downloads   WordPress Plugin Jetpack 9.1 - Cross Site Scripting (XSS) 1 WEB Milad karimi
2022-02-10 Exploit Code Downloads   WordPress Plugin Contact Form Builder 1.6.1 - Cross-Site Scripting (XSS) 1 WEB Milad karimi
2022-02-10 Exploit Code Downloads   WordPress Plugin Secure Copy Content Protection and Content Locking 2.8.1 - SQL-Injection (Unauthent 1 WEB Ron Jost
2022-02-10 Exploit Code Downloads   Home Owners Collection Management System 1.0 - 'id' Blind SQL Injection 1 WEB Saud Alenazi
2022-02-10 Exploit Code Downloads   Home Owners Collection Management System 1.0 - Remote Code Execution (RCE) (Authenticated) 1 WEB Saud Alenazi
2022-02-10 Exploit Code Downloads   Home Owners Collection Management System 1.0 - Account Takeover (Unauthenticated) 1 WEB Saud Alenazi
2022-02-10 Exploit Code Downloads   Hospital Management Startup 1.0 - 'Multiple' SQLi 0 WEB nu11secur1ty
2022-02-09 Exploit Code Downloads   AtomCMS v2.0 - SQLi 0 WEB Luca Cuzzolin
2022-02-09 Exploit Code Downloads   Exam Reviewer Management System 1.0 - Remote Code Execution (RCE) (Authenticated) 2 WEB Juli Agarwal
2022-02-09 Exploit Code Downloads   Exam Reviewer Management System 1.0 - ‘id’ SQL Injection 2 WEB Juli Agarwal
2022-02-08 Exploit Code Downloads   WordPress Plugin CP Blocks 1.0.14 - Stored Cross Site Scripting (XSS) 2 WEB Shweta Mahajan
2022-02-08 Exploit Code Downloads   WordPress Plugin Security Audit 1.0.0 - Stored Cross Site Scripting (XSS) 1 WEB Shweta Mahajan
2022-02-08 Exploit Code Downloads   Wordpress Plugin Simple Job Board 2.9.3 - Local File Inclusion 1 WEB Ven3xy
2022-02-08 Exploit Code Downloads   WordPress Plugin International Sms For Contact Form 7 Integration V1.2 - Cross Site Scripting (XSS) 1 WEB Milad karimi
2022-02-08 Exploit Code Downloads   Hospital Management System 4.0 - 'multiple' SQL Injection 1 WEB nu11secur1ty
2022-02-08 Exploit Code Downloads   FileBrowser 2.17.2 - Cross Site Request Forgery (CSRF) to Remote Code Execution (RCE) 1 WEB FEBIN MON SAJI
2022-02-08 Exploit Code Downloads   Strapi CMS 3.0.0-beta.17.4 - Set Password (Unauthenticated) (Metasploit) 1 WEB WackyH4cker
2022-02-08 Exploit Code Downloads   Hotel Reservation System 1.0 - SQLi (Unauthenticated) 1 WEB Nefrit ID
2022-02-04 Exploit Code Downloads   Servisnet Tessa - Add sysAdmin User (Unauthenticated) (Metasploit) 2 WEB AkkuS
2022-02-04 Exploit Code Downloads   Servisnet Tessa - MQTT Credentials Dump (Unauthenticated) (Metasploit) 2 WEB AkkuS
2022-02-04 Exploit Code Downloads   Servisnet Tessa - Privilege Escalation (Metasploit) 1 WEB AkkuS
2022-02-04 Exploit Code Downloads   WordPress Plugin IP2Location Country Blocker 2.26.7 - Stored Cross Site Scripting (XSS) (Authenticat 1 WEB Ahmet Serkan Ari
2022-02-04 Exploit Code Downloads   WBCE CMS 1.5.2 - Remote Code Execution (RCE) (Authenticated) 1 WEB Antonio Cuomo
2022-02-02 Exploit Code Downloads   WordPress Plugin Learnpress 4.1.4.1 - Arbitrary Image Renaming 2 WEB Ceylan BOZOĞULLARINDAN
2022-02-02 Exploit Code Downloads   WordPress Plugin Post Grid 2.1.1 - Cross Site Scripting (XSS) 1 WEB 0xB9
2022-02-02 Exploit Code Downloads   WordPress Plugin Product Slider for WooCommerce 1.13.21 - Cross Site Scripting (XSS) 1 WEB 0xB9
2022-02-02 Exploit Code Downloads   WordPress Plugin Contact Form Check Tester 1.0.2 - Broken Access Control 1 WEB 0xB9
2022-02-02 Exploit Code Downloads   PHP Unit 4.8.28 - Remote Code Execution (RCE) (Unauthenticated) 1 WEB souzo
2022-02-02 Exploit Code Downloads   Huawei DG8045 Router 1.0 - Credential Disclosure 1 WEB Abdalrahman Gamal
2022-02-02 Exploit Code Downloads   Moodle 3.11.4 - SQL Injection 1 WEB lavclash75
2022-02-02 Exploit Code Downloads   PHP Restaurants 1.0 - SQLi (Unauthenticated) 1 WEB Nefrit ID
2022-02-02 Exploit Code Downloads   Wordpress Plugin 404 to 301 2.0.2 - SQL-Injection (Authenticated) 1 WEB Ron Jost
2022-02-02 Exploit Code Downloads   WordPress Plugin Domain Check 1.0.16 - Reflected Cross-Site Scripting (XSS) (Authenticated) 2 WEB Ceylan BOZOĞULLARINDAN
2022-02-02 Exploit Code Downloads   Wordpress Plugin Download Monitor WordPress V 4.4.4 - SQL Injection (Authenticated) 1 WEB Ron Jost
2022-02-02 Exploit Code Downloads   Chamilo LMS 1.11.14 - Account Takeover 2 WEB sirpedrotavares
2022-02-02 Exploit Code Downloads   uBidAuction v2.0.1 - 'Multiple' Cross Site Scripting (XSS) 2 WEB Vulnerability-Lab
2022-02-02 Exploit Code Downloads   Ametys CMS v4.4.1 - Cross Site Scripting (XSS) 0 WEB Vulnerability-Lab
2022-01-27 Exploit Code Downloads   WordPress Plugin Modern Events Calendar V 6.1 - SQL Injection (Unauthenticated) 2 WEB Ron Jost
2022-01-27 Exploit Code Downloads   WordPress Plugin RegistrationMagic V 5.0.1.5 - SQL Injection (Authenticated) 2 WEB Ron Jost
2022-01-27 Exploit Code Downloads   WordPress Plugin Mortgage Calculators WP 1.52 - Stored Cross-Site Scripting (XSS) (Authenticated) 2 WEB Ceylan BOZOĞULLARINDAN
2022-01-25 Exploit Code Downloads   PHPIPAM 1.4.4 - SQLi (Authenticated) 1 WEB Rodolfo Tavares
2022-01-25 Exploit Code Downloads   Online Project Time Management System 1.0 - Multiple Stored Cross Site Scripting (XSS) (Authenticate 1 WEB Felipe Alcantara
2022-01-25 Exploit Code Downloads   Online Project Time Management System 1.0 - SQLi (Authenticated) 1 WEB Felipe Alcantara
2022-01-24 Exploit Code Downloads   Landa Driving School Management System 2.0.1 - Arbitrary File Upload 1 WEB Sohel Yousef
2022-01-19 Exploit Code Downloads   Affiliate Pro 1.7 - 'Multiple' Cross Site Scripting (XSS) 1 WEB Vulnerability-Lab
2022-01-19 Exploit Code Downloads   Rocket LMS 1.1 - Persistent Cross Site Scripting (XSS) 1 WEB Vulnerability-Lab
2022-01-19 Exploit Code Downloads   uDoctorAppointment v2.1.1 - 'Multiple' Cross Site Scripting (XSS) 1 WEB Vulnerability-Lab
2022-01-18 Exploit Code Downloads   Creston Web Interface 1.0.0.2159 - Credential Disclosure 1 WEB RedTeam Pentesting GmbH
2022-01-18 Exploit Code Downloads   Nyron 1.0 - SQLi (Unauthenticated) 1 WEB Miguel Santareno
2022-01-18 Exploit Code Downloads   Simple Chatbot Application 1.0 - 'message' Blind SQLi 1 WEB Saud Alenazi
2022-01-18 Exploit Code Downloads   Simple Chatbot Application 1.0 - Remote Code Execution (RCE) 1 WEB Saud Alenazi
2022-01-18 Exploit Code Downloads   OpenBMCS 2.4 - Information Disclosure 0 WEB LiquidWorm
2022-01-18 Exploit Code Downloads   OpenBMCS 2.4 - Server Side Request Forgery (SSRF) (Unauthenticated) 1 WEB LiquidWorm
2022-01-18 Exploit Code Downloads   OpenBMCS 2.4 - Create Admin / Remote Privilege Escalation 2 WEB LiquidWorm
2022-01-18 Exploit Code Downloads   OpenBMCS 2.4 - SQLi (Authenticated) 2 WEB LiquidWorm
2022-01-18 Exploit Code Downloads   OpenBMCS 2.4 - Cross Site Request Forgery (CSRF) 1 WEB LiquidWorm
2022-01-18 Exploit Code Downloads   Online Resort Management System 1.0 - SQLi (Authenticated) 2 WEB Gaurav Grover
2022-01-13 Exploit Code Downloads   WordPress Core 5.8.2 - 'WP_Query' SQL Injection 1 WEB Aryan Chehreghani
2022-01-13 Exploit Code Downloads   Online Diagnostic Lab Management System 1.0 - SQL Injection (Unauthenticated) 1 WEB Himash
2022-01-13 Exploit Code Downloads   Online Diagnostic Lab Management System 1.0 - Stored Cross Site Scripting (XSS) 2 WEB Himash
2022-01-13 Exploit Code Downloads   Online Diagnostic Lab Management System 1.0 - Account Takeover (Unauthenticated) 1 WEB Himash
2022-01-13 Exploit Code Downloads   SalonERP 3.0.1 - 'sql' SQL Injection (Authenticated) 1 WEB Betul Denizler
2022-01-13 Exploit Code Downloads   Hospitals Patient Records Management System 1.0 - 'doctors' Stored Cross Site Scripting (XSS) 1 WEB Sant268
2022-01-13 Exploit Code Downloads   Hospitals Patient Records Management System 1.0 - 'room_list' Stored Cross Site Scripting (XSS) 2 WEB Sant268
2022-01-13 Exploit Code Downloads   Hospitals Patient Records Management System 1.0 - 'room_types' Stored Cross Site Scripting (XSS) 1 WEB Sant268
2022-01-12 Exploit Code Downloads   WordPress Plugin Frontend Uploader 1.3.2 - Stored Cross Site Scripting (XSS) (Unauthenticated) 1 WEB Veshraj Ghimire
2022-01-10 Exploit Code Downloads   Open-AudIT Community 4.2.0 - Cross-Site Scripting (XSS) (Authenticated) 1 WEB Dominic Clark
2022-01-10 Exploit Code Downloads   Online Railway Reservation System 1.0 - 'Multiple' Stored Cross Site Scripting (XSS) (Unauthenticate 1 WEB Zachary Asher
2022-01-10 Exploit Code Downloads   Online Railway Reservation System 1.0 - Admin Account Creation (Unauthenticated) 2 WEB Zachary Asher
2022-01-10 Exploit Code Downloads   Online Railway Reservation System 1.0 - Remote Code Execution (RCE) (Unauthenticated) 2 WEB Zachary Asher
2022-01-10 Exploit Code Downloads   Online Railway Reservation System 1.0 - 'id' SQL Injection (Unauthenticated) 1 WEB twseptian
2022-01-10 Exploit Code Downloads   HTTP Commander 3.1.9 - Stored Cross Site Scripting (XSS) 2 WEB Oscar Sandén
2022-01-07 Exploit Code Downloads   Online Veterinary Appointment System 1.0 - 'Multiple' SQL Injection 2 WEB twseptian
2022-01-05 Exploit Code Downloads   WordPress Plugin AAWP 3.16 - 'tab' Reflected Cross Site Scripting (XSS) (Authenticated) 1 WEB Andrea Bocchetti
2022-01-05 Exploit Code Downloads   Projeqtor v9.3.1 - Stored Cross Site Scripting (XSS) 1 WEB Oscar Gil Gutierrez
2022-01-05 Exploit Code Downloads   openSIS Student Information System 8.0 - 'multiple' SQL Injection 2 WEB securityforeveryone.com
2022-01-05 Exploit Code Downloads   Vodafone H-500-s 3.5.10 - WiFi Password Disclosure 2 WEB Daniel Monzón
2022-01-05 Exploit Code Downloads   Terramaster TOS 4.2.15 - Remote Code Execution (RCE) (Unauthenticated) 2 WEB n0tme
2022-01-05 Exploit Code Downloads   Virtual Airlines Manager 2.6.2 - 'multiple' SQL Injection 1 WEB Milad karimi
2022-01-05 Exploit Code Downloads   BeyondTrust Remote Support 6.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated) 1 WEB Malcrove
2022-01-05 Exploit Code Downloads   Hospitals Patient Records Management System 1.0 - Account TakeOver 2 WEB twseptian
2022-01-05 Exploit Code Downloads   Hospitals Patient Records Management System 1.0 - 'id' SQL Injection (Authenticated) 2 WEB twseptian
2022-01-05 Exploit Code Downloads   Hostel Management System 2.1 - Cross Site Scripting (XSS) 2 WEB Chinmay Divekar
2022-01-05 Exploit Code Downloads   Nettmp NNT 5.1 - SQLi Authentication Bypass 2 WEB Momen Eldawakhly
2022-01-05 Exploit Code Downloads   SAFARI Montage 8.5 - Reflected Cross Site Scripting (XSS) 1 WEB Momen Eldawakhly
2022-01-05 Exploit Code Downloads   Library System in PHP 1.0 - 'publisher name' Stored Cross-Site Scripting (XSS) 1 WEB Akash Patil
2022-01-05 Exploit Code Downloads   WordPress Plugin The True Ranker 2.2.2 - Arbitrary File Read (Unauthenticated) 1 WEB Liad Levy
2022-01-05 Exploit Code Downloads   Online Admission System 1.0 - Remote Code Execution (RCE) (Unauthenticated) 1 WEB Jeremiasz Pluta
2022-01-05 Exploit Code Downloads   Movie Rating System 1.0 - SQLi to RCE (Unauthenticated) 1 WEB Tagoletta