|
WordPress Plugin Total Upkeep 1.14.9 - Database and Files Backup Download
|
|
2020-12-19
|
|
Seacms 11.1 - 'checkuser' Stored XSS
|
|
2020-12-19
|
|
Seacms 11.1 - 'file' Local File Inclusion
|
|
2020-12-19
|
|
Seacms 11.1 - 'ip and weburl' Remote Command Execution
|
|
2020-12-19
|
|
System Explorer 7.0.0 - 'SystemExplorerHelpService' Unquoted Service Path
|
|
2020-12-19
|
|
MiniWeb HTTP Server 0.8.19 - Buffer Overflow (PoC)
|
|
2020-12-19
|
|
LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL Injection
|
|
2020-12-19
|
|
Rukovoditel 2.6.1 - Cross-Site Request Forgery (Change password)
|
|
2020-12-19
|
|
Courier Management System 1.0 - 'ref_no' SQL Injection
|
|
2020-12-19
|
|
Courier Management System 1.0 - 'MULTIPART street ((custom) ' SQL Injection
|
|
2020-12-19
|
|
Courier Management System 1.0 - 'First Name' Stored XSS
|
|
2020-12-19
|
|
Dolibarr 12.0.3 - SQLi to RCE
|
|
2020-12-19
|
|
Supply Chain Management System - Auth Bypass SQL Injection
|
|
2020-12-19
|
|
Rukovoditel 2.6.1 - RCE
|
|
2020-12-19
|
|
Jenkins 2.235.3 - 'Description' Stored XSS
|
|
2020-12-19
|
|
Medical Center Portal Management System 1.0 - Multiple Stored XSS
|
|
2020-12-19
|
|
Openfire 4.6.0 - 'sql' Stored XSS
|
|
2020-12-19
|
|
Openfire 4.6.0 - 'users' Stored XSS
|
|
2020-12-19
|
|
Openfire 4.6.0 - 'groupchatJID' Stored XSS
|
|
2020-12-19
|
|
Jenkins 2.235.3 - 'tooltip' Stored Cross-Site Scripting
|
|
2020-12-19
|
|
WordPress Plugin Popup Builder 3.69.6 - Multiple Stored Cross Site Scripting
|
|
2020-12-19
|
|
Library Management System 2.0 - Auth Bypass SQL Injection
|
|
2020-12-19
|
|
Openfire 4.6.0 - 'path' Stored XSS
|
|
2020-12-19
|
|
OpenCart 3.0.3.6 - Cross Site Request Forgery
|
|
2020-12-19
|
|
Barcodes generator 1.0 - 'name' Stored Cross Site Scripting
|
|
2020-12-19
|
|
PDF Complete 3.5.310.2002 - 'pdfsvc.exe' Unquoted Service Path
|
|
2020-12-19
|
|
Task Management System 1.0 - 'id' SQL Injection
|
|
2020-12-19
|
|
Task Management System 1.0 - Unrestricted File Upload to Remote Code Execution
|
|
2020-12-19
|
|
Task Management System 1.0 - 'First Name and Last Name' Stored XSS
|
|
2020-12-19
|
|
Tibco ObfuscationEngine 5.11 - Fixed Key Password Decryption
|
|
2020-12-19
|
|
VestaCP 0.9.8-26 - 'backup' Information Disclosure
|
|
2020-12-19
|
|
VestaCP 0.9.8-26 - 'LoginAs' Insufficient Session Validation
|
|
2020-12-19
|
|
Huawei HedEx Lite 200R006C00SPC005 - Path Traversal
|
|
2020-12-19
|
|
Dup Scout Enterprise 10.0.18 - 'sid' Remote Buffer Overflow (SEH)
|
|
2020-12-19
|
|
SmarterMail Build 6985 - Remote Code Execution
|
|
2020-12-19
|
|
Employee Performance Evaluation System 1.0 - 'Task and Description' Persistent Cross Site Scripting
|
|
2020-12-08
|
|
Online Bus Ticket Reservation 1.0 - SQL Injection
|
|
2020-12-08
|
|
Druva inSync Windows Client 6.6.3 - Local Privilege Escalation (PowerShell)
|
|
2020-12-07
|
|
Dup Scout Enterprise 10.0.18 - 'online_registration' Remote Buffer Overflow
|
|
2020-12-07
|
|
vBulletin 5.6.3 - 'group' Cross Site Scripting
|
|
2020-12-07
|
|
Savsoft Quiz 5 - 'Skype ID' Stored XSS
|
|
2020-12-07
|
|
RarmaRadio 2.72.5 - Denial of Service (PoC)
|
|
2020-12-07
|
|
TapinRadio 2.13.7 - Denial of Service (PoC)
|
|
2020-12-07
|
|
Kite 1.2020.1119.0 - 'KiteService' Unquoted Service Path
|
|
2020-12-07
|
|
User Registration & Login and User Management System 2.1 - Cross Site Request Forgery
|
|
2020-12-07
|
|
Employee Record Management System 1.1 - Login Bypass SQL Injection
|
|
2020-12-07
|
|
Realtek Andrea RT Filters 1.0.64.7 - 'AERTSr64.EXE' Unquoted Service Path
|
|
2020-12-07
|
|
Joomla Plugin Simple Image Gallery Extended (SIGE) 3.5.3 - Multiple Vulnerabilities
|
|
2020-12-07
|
|
Realtek Audio Service 1.0.0.55 - 'RtkAudioService64.exe' Unquoted Service Path
|
|
2020-12-07
|
|
PandoraFMS NG747 7.0 - 'filename' Persistent Cross-Site Scripting
|
|
2020-12-07
|