| 48092 | Anviz CrossChex - Buffer Overflow (Metasploit)
REMOTE Author: etasploi | 2020/02/17 | |
| 48090 | LabVantage 8.3 - Information Disclosure
WEBAPPS Author: Joel Aviad Ossi | 2020/02/17 | |
| 48089 | SOPlanning 1.45 - 'users' SQL Injection
WEBAPPS Author: 3rryBl4nk | 2020/02/17 | |
| 48087 | Cuckoo Clock v5.0 - Buffer Overflow
LOCAL Author: ok | 2020/02/17 | |
| 48086 | SOPlanning 1.45 - Cross-Site Request Forgery (Add User)
WEBAPPS Author: 3rryBl4nk | 2020/02/17 | |
| 48085 | TFTP Turbo 4.6.1273 - 'TFTP Turbo 4' Unquoted Service Path
LOCAL Author: ok | 2020/02/17 | |
| 48083 | WordPress Theme Fruitful 3.8 - Persistent Cross-Site Scripting
WEBAPPS Author: Ashkan Moghaddas | 2020/02/17 | |
| 48082 | Ice HRM 26.2.0 - Cross-Site Request Forgery (Add User)
WEBAPPS Author: 3rryBl4nk | 2020/02/17 | |
| 48080 | DHCP Turbo 4.61298 - 'DHCP Turbo 4' Unquoted Service Path
LOCAL Author: ok | 2020/02/17 | |
| 48079 | MSI Packages Symbolic Links Processing - Windows 10 Privilege Escalation
LOCAL Author: u11secur1t | 2020/02/17 | |
| 48078 | BOOTP Turbo 2.0.1214 - 'BOOTP Turbo' Unquoted Service Path
LOCAL Author: ok | 2020/02/17 | |
| 48077 | Avaya Aura Communication Manager 5.2 - Remote Code Execution
WEBAPPS Author: Sarang Tumne | 2020/02/17 | |
| 48076 | Wordpress Plugin Strong Testimonials 2.40.1 - Persistent Cross-Site Scripting
WEBAPPS Author: Jinson Varghese Behanan | 2020/02/17 | |
| 48075 | HP System Event 1.2.9.0 - 'HPWMISVC' Unquoted Service Path
LOCAL Author: Roberto Piña | 2020/02/17 | |
| 48074 | SOPlanning 1.45 - 'by' SQL Injection
WEBAPPS Author: 3rryBl4nk | 2020/02/17 | |
| 48070 | SprintWork 2.3.1 - Local Privilege Escalation
LOCAL Author: ok | 2020/02/14 | |
| 48069 | EPSON EasyMP Network Projection 2.81 - 'EMP_NSWLSV' Unquoted Service Path
LOCAL Author: Roberto Piña | 2020/02/14 | |
| 48068 | HomeGuard Pro 9.3.1 - Insecure Folder Permissions
LOCAL Author: ok | 2020/02/14 | |
| 48066 | phpMyChat Plus 1.98 - 'pmc_username' SQL Injection
WEBAPPS Author: 3rryBl4nk | 2020/02/14 | |
| 48065 | WordPress Plugin ultimate-member 2.1.3 - Local File Inclusion
WEBAPPS Author: Mehran Feizi | 2020/02/13 | |
| 48064 | PANDORAFMS 7.0 - Authenticated Remote Code Execution
WEBAPPS Author: Engin Demirbilek | 2020/02/13 | |
| 48062 | Wordpress Plugin contact-form-7 5.1.6 - Remote File Upload
WEBAPPS Author: Mehran Feizi | 2020/02/13 | |
| 48061 | Wordpress Plugin wordfence.7.4.5 - Local File Disclosure
WEBAPPS Author: Mehran Feizi | 2020/02/13 | |
| 48060 | OpenTFTP 1.66 - Local Privilege Escalation
LOCAL Author: ok | 2020/02/13 | |
| 48059 | Wordpress Plugin tutor.1.5.3 - Persistent Cross-Site Scripting
WEBAPPS Author: Mehran Feizi | 2020/02/13 | |
| 48058 | Wordpress Plugin tutor.1.5.3 - Local File Inclusion
WEBAPPS Author: Mehran Feizi | 2020/02/13 | |
| 48057 | HP System Event Utility - Local Privilege Escalation
LOCAL Author: yp3rlin | 2020/02/12 | |
| 48056 | MyVideoConverter Pro 3.14 - 'TVSeries' Buffer Overflow
LOCAL Author: w | 2020/02/12 | |
| 48055 | MyVideoConverter Pro 3.14 - 'Output Folder' Buffer Overflow
LOCAL Author: w | 2020/02/12 | |
| 48054 | MyVideoConverter Pro 3.14 - 'Movie' Buffer Overflow
LOCAL Author: w | 2020/02/12 | |
| 48051 | OpenSMTPD 6.4.0 < 6.6.1 - Local Privilege Escalation + Remote Code Execution
REMOTE Author: Marco Ivaldi | 2020/02/11 | |
| 48050 | Wedding Slideshow Studio 1.36 - 'Name' Buffer Overflow
LOCAL Author: w | 2020/02/11 | |
| 48049 | Disk Savvy Enterprise 12.3.18 - Unquoted Service Path
LOCAL Author: ok | 2020/02/11 | |
| 48048 | Disk Sorter Enterprise 12.4.16 - 'Disk Sorter Enterprise' Unquoted Service Path
LOCAL Author: ok | 2020/02/11 | |
| 48047 | WordPress InfiniteWP - Client Authentication Bypass (Metasploit)
WEBAPPS Author: etasploi | 2020/02/11 | |
| 48046 | DVD Photo Slideshow Professional 8.07 - 'Name' Buffer Overflow
LOCAL Author: w | 2020/02/11 | |
| 48045 | Sync Breeze Enterprise 12.4.18 - 'Sync Breeze Enterprise' Unquoted Service Path
LOCAL Author: ok | 2020/02/11 | |
| 48044 | FreeSSHd 1.3.1 - 'FreeSSHDService' Unquoted Service Path
LOCAL Author: ok | 2020/02/11 | |
| 48043 | freeFTPd v1.0.13 - 'freeFTPdService' Unquoted Service Path
LOCAL Author: ok | 2020/02/11 | |
| 48042 | Vanilla Forums 2.6.3 - Persistent Cross-Site Scripting
WEBAPPS Author: Sayak Naskar | 2020/02/11 | |
| 48041 | DVD Photo Slideshow Professional 8.07 - 'Key' Buffer Overflow
LOCAL Author: w | 2020/02/11 | |
| 48040 | CHIYU BF430 TCP IP Converter - Stored Cross-Site Scripting
WEBAPPS Author: uca.Chio | 2020/02/11 | |
| 48039 | Torrent iPod Video Converter 1.51 - Stack Overflow
LOCAL Author: ok | 2020/02/11 | |
| 48038 | OpenSMTPD - MAIL FROM Remote Code Execution (Metasploit)
REMOTE Author: etasploi | 2020/02/10 | |
| 48037 | D-Link Devices - Unauthenticated Remote Command Execution in ssdpcgi (Metasploit)
REMOTE Author: etasploi | 2020/02/10 | |
| 48036 | Ricoh Driver - Privilege Escalation (Metasploit)
LOCAL Author: etasploi | 2020/02/10 | |
| 48035 | iOS/macOS - Out-of-Bounds Timestamp Write in IOAccelCommandQueue2::processSegmentKernelCommand()
DOS Author: Google Security Research | 2020/02/10 | |
| 48034 | usersctp - Out-of-Bounds Reads in sctp_load_addresses_from_init
DOS Author: Google Security Research | 2020/02/10 | |
| 48031 | Dota 2 7.23f - Denial of Service (PoC)
DOS Author: Bogdan Kurinnoy | 2020/02/10 | |
| 48030 | LearnDash WordPress LMS Plugin 3.1.2 - Reflective Cross-Site Scripting
WEBAPPS Author: Jinson Varghese Behanan | 2020/02/10 | |
| 48029 | Forcepoint WebSecurity 8.5 - Reflective Cross-Site Scripting
WEBAPPS Author: Prasenjit Kanti Paul | 2020/02/10 | |
| 48028 | Wedding Slideshow Studio 1.36 - 'Key' Buffer Overflow
LOCAL Author: w | 2020/02/10 | |
| 48027 | Google Invisible RECAPTCHA 3 - Spoof Bypass
WEBAPPS Author: atamorphosi | 2020/02/07 | |
| 48026 | ExpertGPS 6.38 - XML External Entity Injection
WEBAPPS Author: Trent Gordon | 2020/02/07 | |
| 48025 | EyesOfNetwork 5.3 - Remote Code Execution
WEBAPPS Author: Clément Billac | 2020/02/07 | |
| 48024 | PackWeb Formap E-learning 1.0 - 'NumCours' SQL Injection
WEBAPPS Author: Amel BOUZIANE-LEBLOND | 2020/02/07 | |
| 48023 | VehicleWorkshop 1.0 - 'bookingid' SQL Injection
WEBAPPS Author: Mehran Feizi | 2020/02/07 | |
| 48022 | QuickDate 1.3.2 - SQL Injection
WEBAPPS Author: Ihsan Sencan | 2020/02/07 | |
| 48021 | Windscribe - WindscribeService Named Pipe Privilege Escalation (Metasploit)
LOCAL Author: etasploi | 2020/02/07 | |
| 48052 | Sudo 1.8.25p - 'pwfeedback' Buffer Overflow
LOCAL Author: Dylan Katz | 2020/02/06 | |
| 48020 | Cisco Data Center Network Manager 11.2.1 - 'LanFabricImpl' Command Injection
WEBAPPS Author: r_m | 2020/02/06 | |
| 48019 | Cisco Data Center Network Manager 11.2.1 - 'getVmHostData' SQL Injection
WEBAPPS Author: r_m | 2020/02/06 | |
| 48018 | Cisco Data Center Network Manager 11.2 - Remote Code Execution
WEBAPPS Author: r_m | 2020/02/06 | |
| 48017 | Ecommerce Systempay 1.0 - Production KEY Brute Force
WEBAPPS Author: ive | 2020/02/06 | |
| 48016 | Online Job Portal 1.0 - Cross Site Request Forgery (Add User)
WEBAPPS Author: Ihsan Sencan | 2020/02/06 | |
| 48015 | RarmaRadio 2.72.4 - 'server' Denial of Service (PoC)
DOS Author: huyred | 2020/02/06 | |
| 48014 | RarmaRadio 2.72.4 - 'username' Denial of Service (PoC)
DOS Author: huyred | 2020/02/06 | |
| 48013 | TapinRadio 2.12.3 - 'username' Denial of Service (PoC)
DOS Author: huyred | 2020/02/06 | |
| 48012 | Online Job Portal 1.0 - Remote Code Execution
WEBAPPS Author: Ihsan Sencan | 2020/02/06 | |
| 48011 | TapinRadio 2.12.3 - 'address' Denial of Service (PoC)
DOS Author: huyred | 2020/02/06 | |
| 48010 | AbsoluteTelnet 11.12 - 'SSH2/username' Denial of Service (PoC)
DOS Author: huyred | 2020/02/06 | |
| 48009 | ELAN Smart-Pad 11.10.15.1 - 'ETDService' Unquoted Service Path
LOCAL Author: w | 2020/02/06 | |
| 48008 | VIM 8.2 - Denial of Service (PoC)
DOS Author: Dhiraj Mishra | 2020/02/06 | |
| 48007 | Online Job Portal 1.0 - 'user_email' SQL Injection
WEBAPPS Author: Ihsan Sencan | 2020/02/06 | |
| 48006 | AbsoluteTelnet 11.12 - 'license name' Denial of Service (PoC)
DOS Author: huyred | 2020/02/06 | |
| 48005 | AbsoluteTelnet 11.12 - _license name_ Denial of Service (PoC)
DOS Author: huyred | 2020/02/06 | |
| 48004 | HiSilicon DVR/NVR hi3520d firmware - Remote Backdoor Account
REMOTE Author: nawoo | 2020/02/05 | |
| 48003 | AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)
WEBAPPS Author: Ihsan Sencan | 2020/02/05 | |
| 48002 | Verodin Director Web Console 3.5.4.0 - Remote Authenticated Password Disclosure (PoC)
WEBAPPS Author: xkenned | 2020/02/05 | |
| 48001 | Kronos WebTA 4.0 - Authenticated Remote Privilege Escalation
WEBAPPS Author: xkenned | 2020/02/05 | |
| 48000 | xglance-bin 11.00 - Privilege Escalation
LOCAL Author: edtimmyse | 2020/02/05 | |
| 47999 | Socat 1.7.3.4 - Heap-Based Overflow (PoC)
LOCAL Author: ieub | 2020/02/05 | |
| 47998 | Wago PFC200 - Authenticated Remote Code Execution (Metasploit)
WEBAPPS Author: x483 | 2020/02/05 | |
| 47997 | AVideo Platform 8.1 - Information Disclosure (User Enumeration)
WEBAPPS Author: Ihsan Sencan | 2020/02/05 | |
| 47996 | F-Secure Internet Gatekeeper 5.40 - Heap Overflow (PoC)
WEBAPPS Author: Kevin Joensen | 2020/02/04 | |
| 47995 | Sudo 1.8.25p - Buffer Overflow
LOCAL Author: Joe Vennix | 2020/02/04 | |
| 47994 | Centreon 19.10.5 - 'Pollers' Remote Command Execution (Metasploit)
WEBAPPS Author: ekhalle | 2020/02/04 | |
| 47993 | P2PWIFICAM2 for iOS 10.4.1 - 'Camera ID' Denial of Service (PoC)
DOS Author: Ivan Marmolejo | 2020/02/03 | |
| 47992 | School ERP System 1.0 - Cross Site Request Forgery (Add Admin)
WEBAPPS Author: 3rryBl4nk | 2020/02/03 | |
| 47991 | Schneider Electric U.Motion Builder 1.3.4 - Authenticated Command Injection
WEBAPPS Author: Cosmin Craciun | 2020/02/03 | |
| 47990 | Jira 8.3.4 - Information Disclosure (Username Enumeration)
WEBAPPS Author: Mufeed VH | 2020/02/03 | |
| 47989 | phpList 3.5.0 - Authentication Bypass
WEBAPPS Author: Suvadip Kar | 2020/02/03 | |
| 47988 | IceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting
WEBAPPS Author: Lutfu Mert Ceylan | 2020/02/03 | |
| 47987 | BearFTP 0.1.0 - 'PASV' Denial of Service
DOS Author: olya554 | 2020/02/03 | |
| 47986 | FlexNet Publisher 11.12.1 - Cross-Site Request Forgery (Add Local Admin)
WEBAPPS Author: Ismail Tasdelen | 2020/01/31 | |
| 47985 | Lotus Core CMS 1.0.1 - Local File Inclusion
WEBAPPS Author: Daniel Monzón | 2020/01/31 | |
| 48072 | PHP 7.0 < 7.4 (Unix) - 'debug_backtrace' disable_functions Bypass
LOCAL Author: m0r | 2020/01/30 | |
| 47984 | OpenSMTPD 6.6.2 - Remote Code Execution
REMOTE Author: F98 | 2020/01/30 | |
| 47982 | rConfig 3.9.3 - Authenticated Remote Code Execution
WEBAPPS Author: ikingf | 2020/01/30 | |
| 47979 | Fifthplay S.A.M.I 2019.2_HP - Persistent Cross-Site Scripting
WEBAPPS Author: iquidWor | 2020/01/29 | |
