Exploits (Total: 96407)

    
    
    
10Strike LANState 9.32 - 'Force Check' Buffer Overflow (SEH)
2020-04-01
DiskBoss 7.7.14 - Denial of Service (PoC)
2020-04-01
SharePoint Workflows - XOML Injection (Metasploit)
2020-03-31
DLINK DWL-2600 - Authenticated Remote Command Injection (Metasploit)
2020-03-31
IBM TM1 / Planning Analytics - Unauthenticated Remote Code Execution (Metasploit)
2020-03-31
Redis - Replication Code Execution (Metasploit)
2020-03-31
Grandstream UCM6200 Series WebSocket 1.0.20.20 - 'user_password' SQL Injection
2020-03-31
Grandstream UCM6200 Series CTI Interface - 'user_password' SQL Injection
2020-03-31
FlashFXP 4.2.0 Build 1730 - Denial of Service (PoC)
2020-03-31
Multiple DrayTek Products - Pre-authentication Remote Root Code Execution
2020-03-30
Microsoft Windows 10 (1903/1909) - 'SMBGhost' SMB3.1.1 'SMB2_COMPRESSION_CAPABILITIES' Local Privilege Escalation
2020-03-30
Zen Load Balancer 3.10.1 - Remote Code Execution
2020-03-30
10-Strike Network Inventory Explorer 9.03 - 'Read from File' Buffer Overflow (SEH)(ROP)
2020-03-30
Joomla! com_fabrik 3.9.11 - Directory Traversal
2020-03-30
Odin Secure FTP Expert 7.6.3 - 'Site Info' Denial of Service (PoC)
2020-03-30
rConfig 3.9.4 - 'searchField' Unauthenticated Root Remote Code Execution
2020-03-27
Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal
2020-03-27
Everest 5.50.2100 - 'Open File' Denial of Service (PoC)
2020-03-27
ECK Hotel 1.0 - Cross-Site Request Forgery (Add Admin)
2020-03-27
Easy RM to MP3 Converter 2.7.3.700 - 'Input' Local Buffer Overflow (SEH)
2020-03-27
Centreo 19.10.8 - 'DisplayServiceStatus' Remote Code Execution
2020-03-26
TP-Link Archer C50 3 - Denial of Service (PoC)
2020-03-26
10-Strike Network Inventory Explorer 8.54 - 'Add' Local Buffer Overflow (SEH)
2020-03-25
Windows/x64 - WinExec Add-Admin Dynamic Null-Free Shellcode (210 Bytes)
2020-03-25
10-Strike Network Inventory Explorer - 'srvInventoryWebServer' Unquoted Service Path
2020-03-25
LeptonCMS 4.5.0 - Persistent Cross-Site Scripting
2020-03-25
AVAST SecureLine 5.5.522.0 - 'SecureLine' Unquoted Service Path
2020-03-25
Joomla! Component GMapFP 3.30 - Arbitrary File Upload
2020-03-25
UCM6202 1.0.18.13 - Remote Command Injection
2020-03-24
Veyon 4.3.4 - 'VeyonService' Unquoted Service Path
2020-03-24
Wordpress Plugin WPForms 1.5.9 - Persistent Cross-Site Scripting
2020-03-24
UliCMS 2020.1 - Persistent Cross-Site Scripting
2020-03-24
Linux\x86 - 'reboot' polymorphic Shellcode (26 bytes)
2020-03-23
Joomla! com_hdwplayer 4.2 - 'search.php' SQL Injection
2020-03-23
rConfig 3.9.4 - 'search.crud.php' Remote Command Injection
2020-03-23
FIBARO System Home Center 5.021 - Remote File Include
2020-03-23
CyberArk PSMP 10.9.1 - Policy Restriction Bypass
2020-03-23
Google Chrome 80.0.3987.87 - Heap-Corruption Remote Denial of Service (PoC)
2020-03-23
ProficySCADA for iOS 5.0.25920 - 'Password' Denial of Service (PoC)
2020-03-23
VMware Fusion 11.5.2 - Privilege Escalation
2020-03-20
Exagate Sysguard 6001 - Cross-Site Request Forgery (Add Admin)
2020-03-20
Broadcom Wi-Fi Devices - 'KR00K Information Disclosure
2020-03-19
VMWare Fusion - Local Privilege Escalation
2020-03-18
Microsoft VSCode Python Extension - Code Execution
2020-03-18
Windows\x64 - Dynamic MessageBoxA or MessageBoxW PEB & Import Table Method Shellcode (232 bytes)
2020-03-18
Microtik SSH Daemon 6.44.3 - Denial of Service (PoC)
2020-03-18
NetBackup 7.0 - 'NetBackup INET Daemon' Unquoted Service Path
2020-03-18
Netlink GPON Router 1.0.11 - Remote Code Execution
2020-03-18
ManageEngine Desktop Central - Java Deserialization (Metasploit)
2020-03-17
Rconfig 3.x - Chained Remote Code Execution (Metasploit)
2020-03-17
PHPKB Multi-Language 9 - 'image-upload.php' Authenticated Remote Code Execution
2020-03-16
PHPKB Multi-Language 9 - Authenticated Directory Traversal
2020-03-16
PHPKB Multi-Language 9 - Authenticated Remote Code Execution
2020-03-16
MiladWorkShop VIP System 1.0 - 'lang' SQL Injection
2020-03-16
Enhanced Multimedia Router 3.0.4.27 - Cross-Site Request Forgery (Add Admin)
2020-03-16
Microsoft Windows 10 (1903/1909) - 'SMBGhost' SMB3.1.1 'SMB2_COMPRESSION_CAPABILITIES' Buffer Overflow (PoC)
2020-03-14
Horde Groupware Webmail Edition 5.2.22 - Remote Code Execution
2020-03-14
Drobo 5N2 4.1.1 - Remote Command Injection
2020-03-13
Centos WebPanel 7 - 'term' SQL Injection
2020-03-13
AnyBurn 4.8 - Buffer Overflow (SEH)
2020-03-13
Horde Groupware Webmail Edition 5.2.22 - PHAR Loading
2020-03-12
Horde Groupware Webmail Edition 5.2.22 - PHP File Inclusion
2020-03-12
rConfig 3.9 - 'searchColumn' SQL Injection
2020-03-12
rConfig 3.93 - 'ajaxAddTemplate.php' Authenticated Remote Code Execution
2020-03-12
ASUS AAHM 1.00.22 - 'asHmComSvc' Unquoted Service Path
2020-03-12
HRSALE 1.1.8 - Cross-Site Request Forgery (Add Admin)
2020-03-12
Wordpress Plugin Appointment Booking Calendar 1.3.34 - CSV Injection
2020-03-12
WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure
2020-03-12
Joomla! Component com_newsfeeds 1.0 - 'feedid' SQL Injection
2020-03-12
Wordpress Plugin Search Meter 2.13.2 - CSV injection
2020-03-11
ASUS AXSP 1.02.00 - 'asComSvc' Unquoted Service Path
2020-03-11
PHPStudy - Backdoor Remote Code execution (Metasploit)
2020-03-11
Nagios XI - Authenticated Remote Command Execution (Metasploit)
2020-03-11
Persian VIP Download Script 1.0 - 'active' SQL Injection
2020-03-11
YzmCMS 5.5 - 'url' Persistent Cross-Site Scripting
2020-03-11
Sysaid 20.1.11 b26 - Remote Command Execution
2020-03-11
Counter Strike: GO - '.bsp' Memory Control (PoC)
2020-03-11
Google Chrome 80 - JSCreate Side-effect Type Confusion (Metasploit)
2020-03-11
OpenSMTPD - OOB Read Local Privilege Escalation (Metasploit)
2020-03-11
Google Chrome 67, 68 and 69 - Object.create Type Confusion (Metasploit)
2020-03-11
Google Chrome 72 and 73 - Array.map Out-of-Bounds Write (Metasploit)
2020-03-11
PHP-FPM - Underflow Remote Code Execution (Metasploit)
2020-03-11
Apache ActiveMQ 5.x-5.11.1 - Directory Traversal Shell Upload (Metasploit)
2020-03-11
Microsoft Windows - 'WizardOpium' Local Privilege Escalation
2020-03-11
Sentrifugo HRMS 3.2 - 'id' SQL Injection
2020-03-11
60CycleCMS - 'news.php' SQL Injection
2020-03-11
ManageEngine Desktop Central - 'FileStorage getChartImage' Deserialization / Unauthenticated Remote Code Execution
2020-03-11
Deep Instinct Windows Agent 1.2.29.0 - 'DeepMgmtService' Unquoted Service Path
2020-03-11
ASUS GiftBox Desktop 1.1.1.127 - 'ASUSGiftBoxDesktop' Unquoted Service Path
2020-03-11
SpyHunter 4 - 'SpyHunter 4 Service' Unquoted Service Path
2020-03-11
Iskysoft Application Framework Service 2.4.3.241 - 'IsAppService' Unquoted Service Path
2020-03-11
netkit-telnet-0.17 telnetd (Fedora 31) - 'BraveStarr' Remote Code Execution
2020-03-11
EyesOfNetwork - AutoDiscovery Target Command Execution (Metasploit)
2020-03-11
Exchange Control Panel - Viewstate Deserialization (Metasploit)
2020-03-11
UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read
2020-03-11
RICOH Aficio SP 5210SF Printer - 'entryNameIn' HTML Injection
2020-03-04
GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection
2020-03-04
Alfresco 5.2.4 - Persistent Cross-Site Scripting
2020-03-04
RICOH Aficio SP 5200S Printer - 'entryNameIn' HTML Injection
2020-03-04
Wing FTP Server 6.2.3 - Privilege Escalation
2020-03-02
Exploits/page:


Page:
1-4-2 (www02)