Exploits (Total: 97857)

    
    
    
Eaton Intelligent Power Manager 1.6 - Directory Traversal
2020-12-07
Cyber Cafe Management System Project (CCMS) 1.0 - Persistent Cross-Site Scripting
2020-12-07
Rumble Mail Server 0.51.3135 - 'rumble_win32.exe' Unquoted Service Path
2020-12-07
Zabbix 5.0.0 - Stored XSS via URL Widget Iframe
2020-12-04
CMS Made Simple 2.2.15 - Stored Cross-Site Scripting via SVG File Upload (Authenticated)
2020-12-04
Laravel Nova 3.7.0 - 'range' DoS
2020-12-04
Forma LMS 2.3 - 'First & Last Name' Stored Cross-Site Scripting
2020-12-04
Savsoft Quiz 5 - 'field_title' Stored Cross-Site Scripting
2020-12-04
Chromium 83 - Full CSP Bypass
2020-12-04
Testa Online Test Management System 3.4.7 - 'q' SQL Injection
2020-12-04
MiniCMS 1.10 - 'content box' Stored XSS
2020-12-04
Phpscript-sgh 0.1.0 - Time Based Blind SQL Injection
2020-12-04
IDT PC Audio 1.0.6499.0 - 'STacSV' Unquoted Service Path
2020-12-04
Composr CMS 10.0.34 - 'banners' Persistent Cross Site Scripting
2020-12-04
Wordpress Plugin Canto 1.3.0 - Blind SSRF (Unauthenticated)
2020-12-04
Invision Community 4.5.4 - 'Field Name' Stored Cross-Site Scripting
2020-12-03
Sony BRAVIA Digital Signage 1.7.8 - System API Information Disclosure
2020-12-03
Sony BRAVIA Digital Signage 1.7.8 - Unauthenticated Remote File Inclusion
2020-12-03
mojoPortal forums 2.7.0.0 - 'Title' Persistent Cross-Site Scripting
2020-12-03
Online Matrimonial Project 1.0 - Authenticated Remote Code Execution
2020-12-03
EgavilanMedia Address Book 1.0 Exploit - SQLi Auth Bypass
2020-12-03
Coastercms 5.8.18 - Stored XSS
2020-12-03
Microsoft Windows - Win32k Elevation of Privilege
2020-12-02
WordPress Plugin Wp-FileManager 6.8 - RCE
2020-12-02
Car Rental Management System 1.0 - SQL Injection / Local File include
2020-12-02
Mitel mitel-cs018 - Call Data Information Disclosure
2020-12-02
Simple College Website 1.0 - 'page' Local File Inclusion
2020-12-02
Anuko Time Tracker 1.19.23.5311 - Password Reset leading to Account Takeover
2020-12-02
Anuko Time Tracker 1.19.23.5311 - No rate Limit on Password Reset functionality
2020-12-02
ChurchCRM 4.2.1 - Persistent Cross Site Scripting (XSS)
2020-12-02
ChurchCRM 4.2.0 - CSV/Formula Injection
2020-12-02
WebDamn User Registration & Login System with User Panel - SQLi Auth Bypass
2020-12-02
Ksix Zigbee Devices - Playback Protection Bypass (PoC)
2020-12-02
DotCMS 20.11 - Stored Cross-Site Scripting
2020-12-02
Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Edit Profile
2020-12-02
Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Add Artwork
2020-12-02
WonderCMS 3.1.3 - 'Menu' Persistent Cross-Site Scripting
2020-12-02
Local Service Search Engine Management System 1.0 - SQLi Authentication Bypass
2020-12-02
Online News Portal System 1.0 - 'Title' Stored Cross Site Scripting
2020-12-02
Bakeshop Online Ordering System 1.0 - 'Owner' Persistent Cross-site scripting
2020-12-02
NewsLister - Authenticated Persistent Cross-Site Scripting
2020-12-02
Online Voting System Project in PHP - 'username' Persistent Cross-Site Scripting
2020-12-02
IDT PC Audio 1.0.6433.0 - 'STacSV' Unquoted Service Path
2020-12-02
PRTG Network Monitor 20.4.63.1412 - 'maps' Stored XSS
2020-12-02
WonderCMS 3.1.3 - Authenticated Remote Code Execution
2020-12-02
WonderCMS 3.1.3 - Authenticated SSRF to Remote Remote Code Execution
2020-12-02
EgavilanMedia User Registration & Login System with Admin Panel 1.0 - Stored Cross Site Scripting
2020-12-02
Student Result Management System 1.0 - Authentication Bypass SQL Injection
2020-12-02
User Registration & Login System with Admin Panel - CSRF
2020-12-02
Under Construction Page with CPanel 1.0 - SQL injection
2020-12-02
Exploits/page:


Page:
1-4-2 (www02)