|
Eaton Intelligent Power Manager 1.6 - Directory Traversal
|
|
2020-12-07
|
|
Cyber Cafe Management System Project (CCMS) 1.0 - Persistent Cross-Site Scripting
|
|
2020-12-07
|
|
Rumble Mail Server 0.51.3135 - 'rumble_win32.exe' Unquoted Service Path
|
|
2020-12-07
|
|
Zabbix 5.0.0 - Stored XSS via URL Widget Iframe
|
|
2020-12-04
|
|
CMS Made Simple 2.2.15 - Stored Cross-Site Scripting via SVG File Upload (Authenticated)
|
|
2020-12-04
|
|
Laravel Nova 3.7.0 - 'range' DoS
|
|
2020-12-04
|
|
Forma LMS 2.3 - 'First & Last Name' Stored Cross-Site Scripting
|
|
2020-12-04
|
|
Savsoft Quiz 5 - 'field_title' Stored Cross-Site Scripting
|
|
2020-12-04
|
|
Chromium 83 - Full CSP Bypass
|
|
2020-12-04
|
|
Testa Online Test Management System 3.4.7 - 'q' SQL Injection
|
|
2020-12-04
|
|
MiniCMS 1.10 - 'content box' Stored XSS
|
|
2020-12-04
|
|
Phpscript-sgh 0.1.0 - Time Based Blind SQL Injection
|
|
2020-12-04
|
|
IDT PC Audio 1.0.6499.0 - 'STacSV' Unquoted Service Path
|
|
2020-12-04
|
|
Composr CMS 10.0.34 - 'banners' Persistent Cross Site Scripting
|
|
2020-12-04
|
|
Wordpress Plugin Canto 1.3.0 - Blind SSRF (Unauthenticated)
|
|
2020-12-04
|
|
Invision Community 4.5.4 - 'Field Name' Stored Cross-Site Scripting
|
|
2020-12-03
|
|
Sony BRAVIA Digital Signage 1.7.8 - System API Information Disclosure
|
|
2020-12-03
|
|
Sony BRAVIA Digital Signage 1.7.8 - Unauthenticated Remote File Inclusion
|
|
2020-12-03
|
|
mojoPortal forums 2.7.0.0 - 'Title' Persistent Cross-Site Scripting
|
|
2020-12-03
|
|
Online Matrimonial Project 1.0 - Authenticated Remote Code Execution
|
|
2020-12-03
|
|
EgavilanMedia Address Book 1.0 Exploit - SQLi Auth Bypass
|
|
2020-12-03
|
|
Coastercms 5.8.18 - Stored XSS
|
|
2020-12-03
|
|
Microsoft Windows - Win32k Elevation of Privilege
|
|
2020-12-02
|
|
WordPress Plugin Wp-FileManager 6.8 - RCE
|
|
2020-12-02
|
|
Car Rental Management System 1.0 - SQL Injection / Local File include
|
|
2020-12-02
|
|
Mitel mitel-cs018 - Call Data Information Disclosure
|
|
2020-12-02
|
|
Simple College Website 1.0 - 'page' Local File Inclusion
|
|
2020-12-02
|
|
Anuko Time Tracker 1.19.23.5311 - Password Reset leading to Account Takeover
|
|
2020-12-02
|
|
Anuko Time Tracker 1.19.23.5311 - No rate Limit on Password Reset functionality
|
|
2020-12-02
|
|
ChurchCRM 4.2.1 - Persistent Cross Site Scripting (XSS)
|
|
2020-12-02
|
|
ChurchCRM 4.2.0 - CSV/Formula Injection
|
|
2020-12-02
|
|
WebDamn User Registration & Login System with User Panel - SQLi Auth Bypass
|
|
2020-12-02
|
|
Ksix Zigbee Devices - Playback Protection Bypass (PoC)
|
|
2020-12-02
|
|
DotCMS 20.11 - Stored Cross-Site Scripting
|
|
2020-12-02
|
|
Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Edit Profile
|
|
2020-12-02
|
|
Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Add Artwork
|
|
2020-12-02
|
|
WonderCMS 3.1.3 - 'Menu' Persistent Cross-Site Scripting
|
|
2020-12-02
|
|
Local Service Search Engine Management System 1.0 - SQLi Authentication Bypass
|
|
2020-12-02
|
|
Online News Portal System 1.0 - 'Title' Stored Cross Site Scripting
|
|
2020-12-02
|
|
Bakeshop Online Ordering System 1.0 - 'Owner' Persistent Cross-site scripting
|
|
2020-12-02
|
|
NewsLister - Authenticated Persistent Cross-Site Scripting
|
|
2020-12-02
|
|
Online Voting System Project in PHP - 'username' Persistent Cross-Site Scripting
|
|
2020-12-02
|
|
IDT PC Audio 1.0.6433.0 - 'STacSV' Unquoted Service Path
|
|
2020-12-02
|
|
PRTG Network Monitor 20.4.63.1412 - 'maps' Stored XSS
|
|
2020-12-02
|
|
WonderCMS 3.1.3 - Authenticated Remote Code Execution
|
|
2020-12-02
|
|
WonderCMS 3.1.3 - Authenticated SSRF to Remote Remote Code Execution
|
|
2020-12-02
|
|
EgavilanMedia User Registration & Login System with Admin Panel 1.0 - Stored Cross Site Scripting
|
|
2020-12-02
|
|
Student Result Management System 1.0 - Authentication Bypass SQL Injection
|
|
2020-12-02
|
|
User Registration & Login System with Admin Panel - CSRF
|
|
2020-12-02
|
|
Under Construction Page with CPanel 1.0 - SQL injection
|
|
2020-12-02
|