| 48514 | Synology DiskStation Manager - smart.cgi Remote Command Execution (Metasploit)
REMOTE Author: etasploi | 2020/05/25 | |
| 48513 | Plesk/myLittleAdmin - ViewState .NET Deserialization (Metasploit)
REMOTE Author: etasploi | 2020/05/25 | |
| 48512 | Online Discussion Forum Site 1.0 - Remote Code Execution
WEBAPPS Author: nesde | 2020/05/25 | |
| 48511 | Victor CMS 1.0 - 'add_user' Persistent Cross-Site Scripting
WEBAPPS Author: Nitya Nand | 2020/05/25 | |
| 48510 | GoldWave - Buffer Overflow (SEH Unicode)
LOCAL Author: Andy Bowden | 2020/05/25 | |
| 48509 | Wordpress Plugin Form Maker 5.4.1 - 's' SQL Injection (Authenticated)
WEBAPPS Author: unCS | 2020/05/25 | |
| 48508 | WebLogic Server - Deserialization RCE - BadAttributeValueExpException (Metasploit)
REMOTE Author: etasploi | 2020/05/22 | |
| 48507 | VUPlayer 2.49 .m3u - Local Buffer Overflow (DEP_ASLR)
LOCAL Author: obinatha | 2020/05/22 | |
| 48506 | Gym Management System 1.0 - Unauthenticated Remote Code Execution
WEBAPPS Author: ok | 2020/05/22 | |
| 48505 | Druva inSync Windows Client 6.6.3 - Local Privilege Escalation
LOCAL Author: Matteo Malvica | 2020/05/22 | |
| 48504 | Dolibarr 11.0.3 - Persistent Cross-Site Scripting
WEBAPPS Author: Mehmet Kelepçe | 2020/05/22 | |
| 48503 | Filetto 1.0 - 'FEAT' Denial of Service (PoC)
DOS Author: ocket_0x0 | 2020/05/22 | |
| 48502 | Konica Minolta FTP Utility 1.0 - 'NLST' Denial of Service (PoC)
DOS Author: ocket_0x0 | 2020/05/22 | |
| 48501 | Konica Minolta FTP Utility 1.0 - 'LIST' Denial of Service (PoC)
DOS Author: ocket_0x0 | 2020/05/22 | |
| 48500 | OpenEDX platform Ironwood 2.5 - Remote Code Execution
WEBAPPS Author: Daniel Monzón | 2020/05/21 | |
| 48499 | CloudMe 1.11.2 - Buffer Overflow (SEH_DEP_ASLR)
LOCAL Author: Xenofon Vassilakopoulos | 2020/05/21 | |
| 48497 | PHPFusion 9.03.50 - Persistent Cross-Site Scripting
WEBAPPS Author: oiffeu | 2020/05/21 | |
| 48496 | Composr CMS 10.0.30 - Persistent Cross-Site Scripting
WEBAPPS Author: Manuel García Cárdenas | 2020/05/21 | |
| 48494 | forma.lms 5.6.40 - Cross-Site Request Forgery (Change Admin Email)
WEBAPPS Author: Daniel Ortiz | 2020/05/21 | |
| 48493 | AbsoluteTelnet 11.21 - 'Username' Denial of Service (PoC)
DOS Author: Xenofon Vassilakopoulos | 2020/05/21 | |
| 48492 | CraftCMS 3 vCard Plugin 1.0.0 - Remote Code Execution
WEBAPPS Author: Wade Guest | 2020/05/20 | |
| 48491 | Pi-Hole - heisenbergCompensator Blocklist OS Command Execution (Metasploit)
REMOTE Author: etasploi | 2020/05/19 | |
| 48490 | Victor CMS 1.0 - Authenticated Arbitrary File Upload
WEBAPPS Author: Kishan Lal Choudhary | 2020/05/19 | |
| 48489 | NukeViet VMS 4.4.00 - Cross-Site Request Forgery (Change Admin Password)
WEBAPPS Author: EBARA | 2020/05/19 | |
| 48488 | Submitty 20.04.01 - Persistent Cross-Site Scripting
WEBAPPS Author: umblela | 2020/05/19 | |
| 48487 | php-fusion 9.03.50 - 'ctype' SQL Injection
WEBAPPS Author: unCS | 2020/05/19 | |
| 48486 | qdPM 9.1 - 'cfg[app_app_name]' Persistent Cross-Site Scripting
WEBAPPS Author: Kishan Lal Choudhary | 2020/05/19 | |
| 48485 | Victor CMS 1.0 - 'cat_id' SQL Injection
WEBAPPS Author: Kishan Lal Choudhary | 2020/05/19 | |
| 48484 | Victor CMS 1.0 - 'comment_author' Persistent Cross-Site Scripting
WEBAPPS Author: Kishan Lal Choudhary | 2020/05/19 | |
| 48483 | HP LinuxKI 6.01 - Remote Command Injection
REMOTE Author: Cody Winkler | 2020/05/18 | |
| 48482 | Online Healthcare management system 1.0 - Authentication Bypass
WEBAPPS Author: Kpatro | 2020/05/18 | |
| 48481 | Online Healthcare Patient Record Management System 1.0 - Authentication Bypass
WEBAPPS Author: Daniel Monzón | 2020/05/18 | |
| 48480 | online Chatting System 1.0 - 'id' SQL Injection
WEBAPPS Author: Kpatro | 2020/05/18 | |
| 48479 | Monstra CMS 3.0.4 - Authenticated Arbitrary File Upload
WEBAPPS Author: Kishan Lal Choudhary | 2020/05/18 | |
| 48478 | forma.lms The E-Learning Suite 2.3.0.2 - Persistent Cross-Site Scripting
WEBAPPS Author: Daniel Ortiz | 2020/05/18 | |
| 48477 | Oracle Hospitality RES 3700 5.7 - Remote Code Execution
WEBAPPS Author: Walid Faour | 2020/05/18 | |
| 48476 | Online Examination System 1.0 - 'eid' SQL Injection
WEBAPPS Author: Kpatro | 2020/05/18 | |
| 48475 | Wordpress Plugin Ajax Load More 5.3.1 - '#1' Authenticated SQL Injection
WEBAPPS Author: Nguyen Khang | 2020/05/18 | |
| 48474 | Mikrotik Router Monitoring System 1.2.3 - 'community' SQL Injection
WEBAPPS Author: ul10l1r | 2020/05/18 | |
| 48473 | ManageEngine Service Desk 10.0 - Cross-Site Scripting
WEBAPPS Author: Felipe Molina | 2020/05/15 | |
| 48472 | vBulletin 5.6.1 - 'nodeId' SQL Injection
WEBAPPS Author: hotubia | 2020/05/15 | |
| 48471 | E-Commerce System 1.0 - Unauthenticated Remote Code Execution
WEBAPPS Author: unCS | 2020/05/14 | |
| 48470 | Netlink XPON 1GE WiFi V2801RGW - Remote Command Execution
WEBAPPS Author: Seecko Das | 2020/05/14 | |
| 48469 | Dameware Remote Support 12.1.1.273 - Buffer Overflow (SEH)
LOCAL Author: urbanl | 2020/05/14 | |
| 48468 | Complaint Management System 1.0 - 'username' SQL Injection
WEBAPPS Author: Daniel Ortiz | 2020/05/14 | |
| 48467 | Sellacious eCommerce 4.6 - Persistent Cross-Site Scripting
WEBAPPS Author: ulnerability-La | 2020/05/13 | |
| 48466 | Tryton 5.4 - Persistent Cross-Site Scripting
WEBAPPS Author: ulnerability-La | 2020/05/13 | |
| 48465 | Remote Desktop Audit 2.3.0.157 - Buffer Overflow (SEH)
LOCAL Author: urbanl | 2020/05/13 | |
| 48464 | MacOS 320.whatis Script - Privilege Escalation
LOCAL Author: Csaba Fitzl | 2020/05/12 | |
| 48462 | TylerTech Eagle 2018.3.11 - Remote Code Execution
WEBAPPS Author: Anthony Cole | 2020/05/12 | |
| 48461 | LanSend 3.2 - Buffer Overflow (SEH)
LOCAL Author: urbanl | 2020/05/12 | |
| 48460 | qdPM 9.1 - Arbitrary File Upload
WEBAPPS Author: esi | 2020/05/12 | |
| 48459 | Cisco Digital Network Architecture Center 1.3.1.4 - Persistent Cross-Site Scripting
WEBAPPS Author: Dylan Garnaud | 2020/05/12 | |
| 48458 | CuteNews 2.1.2 - Authenticated Arbitrary File Upload
WEBAPPS Author: Nhat Ha | 2020/05/12 | |
| 48457 | ChopSlider3 Wordpress Plugin3.4 - 'id' SQL Injection
WEBAPPS Author: unCS | 2020/05/12 | |
| 48456 | Orchard Core RC1 - Persistent Cross-Site Scripting
WEBAPPS Author: unCS | 2020/05/12 | |
| 48453 | LibreNMS 1.46 - 'search' SQL Injection
WEBAPPS Author: un | 2020/05/11 | |
| 48452 | Complaint Management System 1.0 - Authentication Bypass
WEBAPPS Author: Kpatro | 2020/05/11 | |
| 48451 | Victor CMS 1.0 - 'post' SQL Injection
WEBAPPS Author: Kpatro | 2020/05/11 | |
| 48450 | OpenZ ERP 3.6.60 - Persistent Cross-Site Scripting
WEBAPPS Author: ulnerability-La | 2020/05/11 | |
| 48448 | SolarWinds MSP PME Cache Service 1.1.14 - Insecure File Permissions
LOCAL Author: Jens Regel | 2020/05/11 | |
| 48447 | CuteNews 2.1.2 - Arbitrary File Deletion
WEBAPPS Author: esi | 2020/05/11 | |
| 48446 | Sentrifugo CMS 3.2 - Persistent Cross-Site Scripting
WEBAPPS Author: ulnerability-La | 2020/05/11 | |
| 48445 | Kartris 1.6 - Arbitrary File Upload
WEBAPPS Author: Nhat Ha | 2020/05/11 | |
| 48444 | Online AgroCulture Farm Management System 1.0 - 'uname' SQL Injection
WEBAPPS Author: Tarun Sehgal | 2020/05/11 | |
| 48443 | Pi-hole < 4.4 - Authenticated Remote Code Execution / Privileges Escalation
WEBAPPS Author: Nick Frichette | 2020/05/10 | |
| 48442 | Pi-hole < 4.4 - Authenticated Remote Code Execution
WEBAPPS Author: Nick Frichette | 2020/05/10 | |
| 48441 | Extreme Networks Aerohive HiveOS 11.0 - Remote Denial of Service (PoC)
DOS Author: iquidWor | 2020/05/08 | |
| 48440 | Online AgroCulture Farm Management System 1.0 - 'pid' SQL Injection
WEBAPPS Author: Kpatro | 2020/05/07 | |
| 48439 | Pisay Online E-Learning System 1.0 - Remote Code Execution
WEBAPPS Author: ok | 2020/05/07 | |
| 48438 | Online Clothing Store 1.0 - Arbitrary File Upload
WEBAPPS Author: Sushant Kamble | 2020/05/07 | |
| 48437 | School File Management System 1.0 - 'username' SQL Injection
WEBAPPS Author: Tarun Sehgal | 2020/05/07 | |
| 48436 | Draytek VigorAP 1000C - Persistent Cross-Site Scripting
WEBAPPS Author: ulnerability-La | 2020/05/07 | |
| 48435 | Car Park Management System 1.0 - Authentication Bypass
WEBAPPS Author: Tarun Sehgal | 2020/05/07 | |
| 48434 | FlashGet 1.9.6 - Denial of Service (PoC)
DOS Author: Milad karimi | 2020/05/07 | |
| 48433 | MPC Sharj 3.11.1 - Arbitrary File Download
WEBAPPS Author: ajjadBn | 2020/05/06 | |
| 48432 | YesWiki cercopitheque 2020.04.18.1 - 'id' SQL Injection
WEBAPPS Author: oiffeu | 2020/05/06 | |
| 48431 | GitLab 12.9.0 - Arbitrary File Read
WEBAPPS Author: ouroshR | 2020/05/06 | |
| 48430 | webTareas 2.0.p8 - Arbitrary File Deletion
WEBAPPS Author: esi | 2020/05/06 | |
| 48429 | Online Clothing Store 1.0 - 'username' SQL Injection
WEBAPPS Author: Sushant Kamble | 2020/05/06 | |
| 48428 | Booked Scheduler 2.7.7 - Authenticated Directory Traversal
WEBAPPS Author: esi | 2020/05/06 | |
| 48427 | i-doit Open Source CMDB 1.14.1 - Arbitrary File Deletion
WEBAPPS Author: esi | 2020/05/06 | |
| 48426 | Online Clothing Store 1.0 - Persistent Cross-Site Scripting
WEBAPPS Author: Sushant Kamble | 2020/05/06 | |
| 48425 | NEC Electra Elite IPK II WebPro 01.03.01 - Session Enumeration
WEBAPPS Author: Cold z3ro | 2020/05/05 | |
| 48424 | SimplePHPGal 0.7 - Remote File Inclusion
WEBAPPS Author: 4shu | 2020/05/05 | |
| 48423 | PhreeBooks ERP 5.2.5 - Remote Command Execution
WEBAPPS Author: esi | 2020/05/05 | |
| 48422 | BlogEngine 3.3 - 'syndication.axd' XML External Entity Injection
WEBAPPS Author: Daniel Martinez Adan | 2020/05/05 | |
| 48421 | Saltstack 3000.1 - Remote Code Execution
REMOTE Author: Jasper Lievisse Adriaanse | 2020/05/05 | |
| 48420 | webERP 4.15.1 - Unauthenticated Backup File Access
WEBAPPS Author: esi | 2020/05/05 | |
| 48419 | Online Scheduling System 1.0 - 'username' SQL Injection
WEBAPPS Author: Saurav Shukla | 2020/05/05 | |
| 48418 | Oracle Database 11g Release 2 - 'OracleDBConsoleorcl' Unquoted Service Path
LOCAL Author: Nguyen Khang | 2020/05/05 | |
| 48417 | Fishing Reservation System 7.5 - 'uid' SQL Injection
WEBAPPS Author: ulnerability-La | 2020/05/05 | |
| 48416 | addressbook 9.0.0.1 - 'id' SQL Injection
WEBAPPS Author: David Velazquez | 2020/05/04 | |
| 48415 | Frigate 3.36 - Buffer Overflow (SEH)
LOCAL Author: Xenofon Vassilakopoulos | 2020/05/04 | |
| 48414 | Outline Service 1.3.3 - 'Outline Service ' Unquoted Service Path
LOCAL Author: Minh Tuan | 2020/05/04 | |
| 48413 | osTicket 1.14.1 - Persistent Authenticated Cross-Site Scripting
WEBAPPS Author: Mehmet Kelepçe | 2020/05/04 | |
| 48411 | BoltWire 6.03 - Local File Inclusion
WEBAPPS Author: Andrey Stoykov | 2020/05/04 | |
| 48410 | Apache Shiro 1.2.4 - Cookie RememberME Deserial RCE (Metasploit)
REMOTE Author: etasploi | 2020/05/01 | |
| 48409 | Online Scheduling System 1.0 - Authentication Bypass
WEBAPPS Author: ok | 2020/05/01 | |
| 48408 | Apache OFBiz 17.12.03 - Cross-Site Request Forgery (Account Takeover)
WEBAPPS Author: Faiz Ahmed Zaidi | 2020/05/01 | |
