Loading
Exploit Database
Latest Exploits
Loading
| ID | Description | Type | Author | Date | |
|---|---|---|---|---|---|
| 45064 | TP-Link TL-WR840N - Denial of Service | dos | Aniket Dinda | 2018/07/20 | Detailed Page |
| 45063 | Touchpad / Trivum WebTouch Setup 2.53 build 13163 - Authentication Bypass | webapps | ulnc0d | 2018/07/20 | Detailed Page |
| 45062 | MSVOD 10 - 'cid' SQL Injection | webapps | zllag | 2018/07/20 | Detailed Page |
| 45061 | Google Chrome - SwiftShader OpenGL Texture Bindings Reference Count Leak | dos | Google Security Research | 2018/07/19 | Detailed Page |
| 45060 | Google Chrome - Swiftshader Blitting Floating-Point Precision Errors | dos | Google Security Research | 2018/07/19 | Detailed Page |
| 45059 | Google Chrome - Swiftshader Texture Allocation Integer Overflow | dos | Google Security Research | 2018/07/19 | Detailed Page |
| 45058 | Linux - BPF Sign Extension Local Privilege Escalation (Metasploit) | local | etasploi | 2018/07/19 | Detailed Page |
| 45057 | MyBB New Threads Plugin 1.1 - Cross-Site Scripting | webapps | xB | 2018/07/19 | Detailed Page |
| 45056 | WordPress Plugin All In One Favicon 4.6 - Cross-Site Scripting | webapps | Javier Olmedo | 2018/07/19 | Detailed Page |
| 45055 | Modx Revolution < 2.6.4 - Remote Code Execution | webapps | Vitalii Rudnykh | 2018/07/18 | Detailed Page |
| 45054 | FTP2FTP 1.0 - Arbitrary File Download | webapps | kku | 2018/07/18 | Detailed Page |
| 45053 | Open-AudIT Community 2.1.1 - Cross-Site Scripting | webapps | Ranjeet Jaiswal | 2018/07/18 | Detailed Page |
| 45052 | HomeMatic Zentrale CCU2 - Remote Code Execution | remote | Kacper Szurek | 2018/07/18 | Detailed Page |
| 45049 | Smart SMS & Email Manager 3.3 - 'contact_type_id' SQL Injection | webapps | kku | 2018/07/18 | Detailed Page |
| 45044 | Nanopool Claymore Dual Miner - APIs RCE (Metasploit) | remote | etasploi | 2018/07/17 | Detailed Page |
| 45043 | QNAP Q'Center - change_passwd Command Execution (Metasploit) | remote | etasploi | 2018/07/17 | Detailed Page |
| 45041 | Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Restricted Shell Escape | local | iquidWor | 2018/07/17 | Detailed Page |
| 45040 | Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Default Credentials | remote | iquidWor | 2018/07/17 | Detailed Page |
| 45038 | Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Remote Root | webapps | iquidWor | 2018/07/17 | Detailed Page |
| 45037 | Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - File Manipulation | webapps | iquidWor | 2018/07/17 | Detailed Page |
| 45036 | Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Configuration Download | webapps | iquidWor | 2018/07/17 | Detailed Page |
| 45035 | Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Denial of Service | webapps | iquidWor | 2018/07/17 | Detailed Page |
| 45034 | Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Cross-Site Request Forgery | webapps | iquidWor | 2018/07/17 | Detailed Page |
| 45047 | PrestaShop < 1.6.1.19 - 'BlowFish ECD' Privilege Escalation | webapps | Charles Fol | 2018/07/16 | Detailed Page |
| 45046 | PrestaShop < 1.6.1.19 - 'AES CBC' Privilege Escalation | webapps | Charles Fol | 2018/07/16 | Detailed Page |
| 45033 | Linux/Ubuntu - Other Users coredumps can be read via setgid Directory and killpriv Bypass | dos | Google Security Research | 2018/07/16 | Detailed Page |
| 45032 | macOS/iOS - JavaScript Injection Bug in OfficeImporter | dos | Google Security Research | 2018/07/16 | Detailed Page |
| 45031 | WordPress Plugin Job Manager 4.1.0 - Cross-Site Scripting | webapps | Berk Dusunur | 2018/07/16 | Detailed Page |
| 45030 | VelotiSmart WiFi B-380 Camera - Directory Traversal | webapps | Miguel Mendez Z | 2018/07/16 | Detailed Page |
| 45027 | Fortify Software Security Center (SSC) 17.x/18.1 - XML External Entity Injection | webapps | lt3k | 2018/07/16 | Detailed Page |
| 45026 | Microsoft Enterprise Mode Site List Manager - XML External Entity Injection | local | yp3rlin | 2018/07/16 | Detailed Page |
| 45025 | Hadoop YARN ResourceManager - Unauthenticated Command Execution (Metasploit) | remote | etasploi | 2018/07/13 | Detailed Page |
| 45024 | Microsoft Windows - POP/MOV SS Local Privilege Elevation (Metasploit) | local | etasploi | 2018/07/13 | Detailed Page |
| 45022 | Grundig Smart Inter@ctive 3.0 - Cross-Site Request Forgery | webapps | 4rkd3vil | 2018/07/13 | Detailed Page |
| 45020 | phpMyAdmin - (Authenticated) Remote Code Execution (Metasploit) | remote | etasploi | 2018/07/13 | Detailed Page |
| 45019 | Apache CouchDB - Arbitrary Command Execution (Metasploit) | remote | etasploi | 2018/07/13 | Detailed Page |
| 45018 | Manage Engine Exchange Reporter Plus - Remote Code Execution (Metasploit) | remote | etasploi | 2018/07/13 | Detailed Page |
| 45017 | G DATA Total Security 25.4.0.3 - Activex Buffer Overflow | dos | Filipe Xavier Oliveira | 2018/07/13 | Detailed Page |
| 45016 | Zeta Producer Desktop CMS 14.2.0 - Remote Code Execution / Local File Disclosure | webapps | SEC Consult | 2018/07/13 | Detailed Page |
| 45015 | QNAP Qcenter Virtual Appliance - Multiple Vulnerabilities | webapps | Core Security | 2018/07/13 | Detailed Page |
| 45014 | WAGO e!DISPLAY 7300T - Multiple Vulnerabilities | webapps | SEC Consult | 2018/07/13 | Detailed Page |
| 45013 | Microsoft Edge Chakra JIT - Type Confusion with Hoisted SetConcatStrMultiItemBE Instructions | dos | Google Security Research | 2018/07/12 | Detailed Page |
| 45012 | Microsoft Edge Chakra JIT - BoundFunction::NewInstance Out-of-Bounds Read | dos | Google Security Research | 2018/07/12 | Detailed Page |
| 45011 | Microsoft Edge Chakra JIT - Out-of-Bounds Reads/Writes | dos | Google Security Research | 2018/07/12 | Detailed Page |
| 45048 | JavaScript Core - Arbitrary Code Execution | local | et | 2018/07/11 | Detailed Page |
| 45007 | Dicoogle PACS 2.5.0 - Directory Traversal | webapps | Carlos Avila | 2018/07/11 | Detailed Page |
| 45005 | IBM QRadar SIEM - Unauthenticated Remote Code Execution (Metasploit) | remote | etasploi | 2018/07/11 | Detailed Page |
| 45003 | Instagram-Clone Script 2.0 - Cross-Site Scripting | webapps | 0R | 2018/07/11 | Detailed Page |
| 45010 | Linux Kernel < 4.13.9 (Ubuntu 16.04/Fedora 27) - Local Privilege Escalation | local | larabe | 2018/07/10 | Detailed Page |
| 45002 | D-Link DIR601 2.02 - Credential Disclosure | webapps | Thomas Zuk | 2018/07/10 | Detailed Page |
| 44999 | Elektronischer Leitz-Ordner 10 - SQL Injection | webapps | Jens Regel | 2018/07/10 | Detailed Page |
| 44997 | WolfSight CMS 3.2 - SQL Injection | webapps | Berk Dusunur | 2018/07/10 | Detailed Page |
| 44994 | Tor Browser < 0.3.2.10 - Use After Free (PoC) | dos | 4rkd3vil | 2018/07/09 | Detailed Page |
| 44993 | GitList 0.6.0 - Argument Injection (Metasploit) | remote | etasploi | 2018/07/09 | Detailed Page |
| 44992 | HID discoveryd - command_blink_on Unauthenticated RCE (Metasploit) | remote | etasploi | 2018/07/09 | Detailed Page |
| 44991 | HP VAN SDN Controller - Root Command Injection (Metasploit) | remote | etasploi | 2018/07/09 | Detailed Page |
| 44989 | Boxoft WAV to WMA Converter 1.0 - Local Buffer Overflow (SEH) | local | chille | 2018/07/09 | Detailed Page |
| 44988 | Umbraco CMS SeoChecker Plugin 1.9.2 - Cross-Site Scripting | webapps | Ahmed Elhady Mohamed | 2018/07/09 | Detailed Page |
| 44987 | Activision Infinity Ward Call of Duty Modern Warfare 2 - Buffer Overflow | remote | Maurice Heumann | 2018/07/09 | Detailed Page |
| 44998 | Oracle WebLogic 12.1.2.0 - RMI Registry UnicastRef Object Java Deserialization Remote Code Execution | webapps | obsec | 2018/07/07 | Detailed Page |
| 44986 | Airties AIR5444TT - Cross-Site Scripting | webapps | Raif Berkay Dincel | 2018/07/06 | Detailed Page |
| 44985 | PolarisOffice 2017 8 - Remote Code Execution | remote | yp3rlin | 2018/07/06 | Detailed Page |
| 44984 | ADB Broadband Gateways / Routers - Privilege Escalation | local | SEC Consult | 2018/07/05 | Detailed Page |
| 44983 | ADB Broadband Gateways / Routers - Local Root Jailbreak | local | SEC Consult | 2018/07/05 | Detailed Page |
| 44982 | ADB Broadband Gateways / Routers - Authorization Bypass | webapps | SEC Consult | 2018/07/05 | Detailed Page |
| 44981 | SoftExpert Excellence Suite 2.0 - 'cddocument' SQL Injection | webapps | Seren PORSUK | 2018/07/05 | Detailed Page |
| 44979 | VLC media player 2.2.8 - Arbitrary Code Execution (PoC) | local | Eugene Ng | 2018/07/05 | Detailed Page |
| 44996 | Gitea 1.4.0 - Remote Code Execution | webapps | Kacper Szurek | 2018/07/04 | Detailed Page |
| 44978 | ShopNx - Arbitrary File Upload | webapps | 0R | 2018/07/04 | Detailed Page |
| 44977 | Online Trade - Information Disclosure | webapps | 0R | 2018/07/04 | Detailed Page |
| 44976 | CMS Made Simple 2.2.5 - Remote Code Execution | webapps | Mustafa Hasan | 2018/07/04 | Detailed Page |
| 44975 | ManageEngine Exchange Reporter Plus < Build 5311 - Remote Code Execution | webapps | Kacper Szurek | 2018/07/04 | Detailed Page |
| 44973 | ntop-ng < 3.4.180617 - Authentication Bypass | webapps | Ioannis Profetis | 2018/07/03 | Detailed Page |
| 44972 | openslp 2.0.0 - Double-Free | dos | Magnus Klaaborg Stubman | 2018/07/03 | Detailed Page |
| 44971 | Boxoft WAV to MP3 Converter 1.1 - Buffer Overflow (Metasploit) | local | etasploi | 2018/07/03 | Detailed Page |
| 44970 | ModSecurity 3.0.0 - Cross-Site Scripting | webapps | Adipta Basu | 2018/07/03 | Detailed Page |
| 44969 | Nagios XI 5.2.6-5.4.12 - Chained Remote Code Execution (Metasploit) | remote | etasploi | 2018/07/02 | Detailed Page |
| 44968 | FTPShell client 6.70 (Enterprise edition) - Stack Buffer Overflow (Metasploit) | remote | etasploi | 2018/07/02 | Detailed Page |
| 44965 | Delta Industrial Automation COMMGR 1.08 - Stack Buffer Overflow (PoC) | dos | 4rkd3vil | 2018/07/02 | Detailed Page |
| 44964 | Dolibarr ERP CRM < 7.0.3 - PHP Code Injection | webapps | m3rcita | 2018/07/02 | Detailed Page |
| 44962 | SIPp 3.6 - Local Buffer Overflow (PoC) | dos | Fakhri Zulkifli | 2018/07/02 | Detailed Page |
| 44961 | Enhanced Mitigation Experience Toolkit (EMET) - XML External Entity Injection | local | yp3rlin | 2018/07/02 | Detailed Page |
| 44960 | DAMICMS 6.0.0 - Cross-Site Request Forgery (Add Admin) | webapps | ay0ne | 2018/07/02 | Detailed Page |
| 44959 | VMware NSX SD-WAN Edge < 3.1.2 - Command Injection | webapps | aragonSe | 2018/07/02 | Detailed Page |
| 44958 | Core FTP LE 2.2 - Buffer Overflow (PoC) | dos | Berk Cem Göksel | 2018/07/02 | Detailed Page |
| 44957 | Geutebruck 5.02024 G-Cam/EFD-2250 - 'simple_loglistjs.cgi' Remote Command Execution (Metasploit) | webapps | andoriSe | 2018/07/02 | Detailed Page |
| 44956 | Cisco Adaptive Security Appliance - Path Traversal | webapps | Yassine Aboukir | 2018/06/28 | Detailed Page |
| 44955 | DIGISOL DG-HR3400 Wireless Router - Cross-Site Scripting | webapps | Adipta Basu | 2018/06/28 | Detailed Page |
| 44954 | hycus CMS 1.0.4 - Authentication Bypass | webapps | Berk Dusunur | 2018/06/28 | Detailed Page |
| 44953 | HongCMS 3.0.0 - SQL Injection | webapps | zllag | 2018/06/28 | Detailed Page |
| 44952 | BEESCMS 4.0 - Cross-Site Request Forgery (Add Admin) | webapps | ay0ne | 2018/06/28 | Detailed Page |
| 44951 | HPE VAN SDN 2.7.18.0503 - Remote Root | webapps | oreLogi | 2018/06/27 | Detailed Page |
| 44950 | Quest KACE Systems Management - Command Injection (Metasploit) | remote | etasploi | 2018/06/27 | Detailed Page |
| 44949 | Wordpress < 4.9.6 - (Authenticated) Arbitrary File Deletion | webapps | ulnSp | 2018/06/27 | Detailed Page |
| 44946 | PoDoFo 0.9.5 - Buffer Overflow | dos | 4xi | 2018/06/26 | Detailed Page |
| 44945 | Liferay Portal < 7.0.4 - Server-Side Request Forgery | webapps | Mehmet Ince | 2018/06/26 | Detailed Page |
| 44944 | KVM (Nested Virtualization) - L1 Guest Privilege Escalation | dos | Google Security Research | 2018/06/25 | Detailed Page |
| 44943 | WordPress Plugin iThemes Security < 7.0.3 - SQL Injection | webapps | Çlirim Emini | 2018/06/25 | Detailed Page |
| 44941 | Foxit Reader 9.0.1.1049 - Remote Code Execution | remote | r_m | 2018/06/25 | Detailed Page |
| 44940 | WordPress Plugin Comments Import & Export < 2.0.4 - CSV Injection | webapps | Bhushan B. Patil | 2018/06/25 | Detailed Page |
Credits and Partners
All rights reserved nPulse.net 2009 - 2018
Powered by: MVCP / ASPF / PHP 7.2 / NGINX / FreeBSD
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |