|
openMAINT 1.1-2.4.2 - Arbitrary File Upload
|
|
2020-10-09
|
|
DynPG 4.9.1 - Persistent Cross-Site Scripting (Authenticated)
|
|
2020-10-09
|
|
Kentico CMS 9.0-12.0.49 - Persistent Cross Site Scripting
|
|
2020-10-09
|
|
D-Link DSR-250N 3.12 - Denial of Service (PoC)
|
|
2020-10-08
|
|
SEO Panel 4.6.0 - Remote Code Execution
|
|
2020-10-08
|
|
Textpattern CMS 4.6.2 - 'body' Persistent Cross-Site Scripting
|
|
2020-10-07
|
|
BACnet Test Server 1.01 - Remote Denial of Service (PoC)
|
|
2020-10-07
|
|
EasyPMS 1.0.0 - Authentication Bypass
|
|
2020-10-06
|
|
Karel IP Phone IP1211 Web Management Panel - Directory Traversal
|
|
2020-10-06
|
|
Qmail SMTP 1.03 - Bash Environment Variable Injection
|
|
2020-10-06
|
|
SpamTitan 7.07 - Unauthenticated Remote Code Execution
|
|
2020-10-05
|
|
MOVEit Transfer 11.1.1 - 'token' Unauthenticated SQL Injection
|
|
2020-10-05
|
|
Photo Share Website 1.0 - Persistent Cross-Site Scripting
|
|
2020-10-02
|
|
MedDream PACS Server 6.8.3.751 - Remote Code Execution (Authenticated)
|
|
2020-10-02
|
|
Exhibitor Web UI 1.7.1 - Remote Code Execution
|
|
2020-10-01
|
|
Typesetter CMS 5.1 - 'Site Title' Persistent Cross-Site Scripting
|
|
2020-10-01
|
|
CMS Made Simple 2.2.14 - Persistent Cross-Site Scripting (Authenticated)
|
|
2020-10-01
|
|
GetSimple CMS 3.3.16 - Persistent Cross-Site Scripting (Authenticated)
|
|
2020-10-01
|
|
WebsiteBaker 2.12.2 - 'display_name' SQL Injection (authenticated)
|
|
2020-10-01
|
|
MonoCMS Blog 1.0 - Arbitrary File Deletion (Authenticated)
|
|
2020-10-01
|
|
SpinetiX Fusion Digital Signage 3.4.8 - Username Enumeration
|
|
2020-10-01
|
|
SpinetiX Fusion Digital Signage 3.4.8 - Cross-Site Request Forgery (Add Admin)
|
|
2020-10-01
|
|
SpinetiX Fusion Digital Signage 3.4.8 - Database Backup Disclosure
|
|
2020-10-01
|
|
BrightSign Digital Signage Diagnostic Web Server 8.2.26 - File Delete Path Traversal
|
|
2020-10-01
|
|
BrightSign Digital Signage Diagnostic Web Server 8.2.26 - Server-Side Request Forgery (Unauthenticated)
|
|
2020-10-01
|
|
Sony IPELA Network Camera 1.82.01 - 'ftpclient.cgi' Remote Stack Buffer Overflow
|
|
2020-10-01
|
|
CloudMe 1.11.2 - Buffer Overflow ROP (DEP,ASLR)
|
|
2020-09-29
|
|
BearShare Lite 5.2.5 - 'Advanced Search'Buffer Overflow in (PoC)
|
|
2020-09-29
|
|
WebsiteBaker 2.12.2 - Remote Code Execution
|
|
2020-09-29
|
|
Joplin 1.0.245 - Arbitrary Code Execution (PoC)
|
|
2020-09-29
|
|
MSI Ambient Link Driver 1.0.0.8 - Local Privilege Escalation
|
|
2020-09-29
|
|
Mida eFramework 2.8.9 - Remote Code Execution
|
|
2020-09-29
|
|
B-swiss 3 Digital Signage System 3.6.5 - Database Disclosure
|
|
2020-09-25
|
|
B-swiss 3 Digital Signage System 3.6.5 - Cross-Site Request Forgery (Add Maintenance Admin)
|
|
2020-09-25
|
|
Anchor CMS 0.12.7 - Persistent Cross-Site Scripting (Authenticated)
|
|
2020-09-25
|
|
BigTree CMS 4.4.10 - Remote Code Execution
|
|
2020-09-25
|
|
Visitor Management System in PHP 1.0 - Persistent Cross-Site Scripting
|
|
2020-09-24
|
|
Simple Online Food Ordering System 1.0 - 'id' SQL Injection (Unauthenticated)
|
|
2020-09-24
|
|
Online Food Ordering System 1.0 - Remote Code Execution
|
|
2020-09-23
|
|
Flatpress Add Blog 1.0.3 - Persistent Cross-Site Scripting
|
|
2020-09-22
|
|
Comodo Unified Threat Management Web Console 2.7.0 - Remote Code Execution
|
|
2020-09-22
|
|
B-swiss 3 Digital Signage System 3.6.5 - Remote Code Execution
|
|
2020-09-21
|
|
Mida eFramework 2.9.0 - Back Door Access
|
|
2020-09-21
|
|
Seat Reservation System 1.0 - 'id' SQL Injection
|
|
2020-09-21
|
|
ForensiTAppxService 2.2.0.4 - 'ForensiTAppxService.exe' Unquoted Service Path
|
|
2020-09-21
|
|
BlackCat CMS 1.3.6 - Cross-Site Request Forgery
|
|
2020-09-21
|
|
Online Shop Project 1.0 - 'p' SQL Injection
|
|
2020-09-21
|
|
Mantis Bug Tracker 2.3.0 - Remote Code Execution (Unauthenticated)
|
|
2020-09-18
|
|
SpamTitan 7.07 - Remote Code Execution (Authenticated)
|
|
2020-09-18
|
|
Microsoft SQL Server Reporting Services 2016 - Remote Code Execution
|
|
2020-09-17
|