|
ManageEngine ADSelfService Plus 6.1 - CSV Injection
|
|
2021-06-13
|
|
In4Suit ERP 3.2.74.1370 - 'txtLoginId' SQL injection
|
|
2021-06-13
|
|
WebSSH for iOS 14.16.10 - 'mashREPL' Denial of Service (PoC)
|
|
2021-06-13
|
|
Visual Studio Code 1.47.1 - Denial of Service (PoC)
|
|
2021-06-13
|
|
WordPress Plugin Stop Spammers 2021.8 - 'log' Reflected Cross-site Scripting (XSS)
|
|
2021-06-13
|
|
Microsoft Exchange 2019 - Unauthenticated Email Download
|
|
2021-06-13
|
|
EgavilanMedia PHPCRUD 1.0 - 'First Name' SQL Injection
|
|
2021-06-13
|
|
Printable Staff ID Card Creator System 1.0 - SQLi & RCE via Arbitrary File Upload
|
|
2021-06-13
|
|
Subrion CMS 4.2.1 - File Upload Bypass to RCE (Authenticated)
|
|
2021-06-13
|
|
Advanced Guestbook 2.4.4 - 'Smilies' Persistent Cross-Site Scripting (XSS)
|
|
2021-06-13
|
|
Billing Management System 2.0 - Union based SQL injection (Authenticated)
|
|
2021-06-13
|
|
Simple Chatbot Application 1.0 - 'Category' Stored Cross site Scripting
|
|
2021-06-13
|
|
Microsoft Internet Explorer 8 - 'SetMouseCapture ' Use After Free
|
|
2021-06-13
|
|
Dental Clinic Appointment Reservation System 1.0 - Cross Site Request Forgery (Add Admin)
|
|
2021-06-13
|
|
Dental Clinic Appointment Reservation System 1.0 - 'Firstname' Persistent Cross Site Scripting (Authenticated)
|
|
2021-06-13
|
|
IPFire 2.25 - Remote Code Execution (Authenticated)
|
|
2021-06-13
|
|
Customer Relationship Management (CRM) System 1.0 - 'Category' Persistent Cross site Scripting
|
|
2021-06-13
|
|
Chamilo LMS 1.11.14 - Remote Code Execution (Authenticated)
|
|
2021-06-13
|
|
Podcast Generator 3.1 - 'Long Description' Persistent Cross-Site Scripting (XSS)
|
|
2021-06-13
|
|
Student Management System 1.0 - 'message' Persistent Cross-Site Scripting (Authenticated)
|
|
2021-06-13
|
|
Firefox 72 IonMonkey - JIT Type Confusion
|
|
2021-06-13
|
|
Microsoft Internet Explorer 8/11 and WPAD service 'Jscript.dll' - Use-After-Free
|
|
2021-06-13
|
|
ZeroShell 3.9.0 - Remote Command Execution
|
|
2021-06-13
|
|
Dental Clinic Appointment Reservation System 1.0 - 'date' UNION based SQL Injection (Authenticated)
|
|
2021-06-13
|
|
Dental Clinic Appointment Reservation System 1.0 - Authentication Bypass (SQLi)
|
|
2021-06-13
|
|
Chevereto 3.17.1 - Cross Site Scripting (Stored)
|
|
2021-05-12
|
|
Splinterware System Scheduler Professional 5.30 - Unquoted Service Path
|
|
2021-05-12
|
|
Odoo 12.0.20190101 - 'nssm.exe' Unquoted Service Path
|
|
2021-05-11
|
|
Microweber CMS 1.1.20 - Remote Code Execution (Authenticated)
|
|
2021-05-10
|
|
Linux/x86 - setreuid(0) + execve("/bin/sh") Shellcode (29 bytes)
|
|
2021-05-10
|
|
Human Resource Information System 0.1 - 'First Name' Persistent Cross-Site Scripting (Authenticated)
|
|
2021-05-10
|
|
PHP Timeclock 1.04 - 'Multiple' Cross Site Scripting (XSS)
|
|
2021-05-10
|
|
TFTP Broadband 4.3.0.1465 - 'tftpt.exe' Unquoted Service Path
|
|
2021-05-10
|
|
BOOTP Turbo 2.0.0.1253 - 'bootpt.exe' Unquoted Service Path
|
|
2021-05-10
|
|
DHCP Broadband 4.1.0.1503 - 'dhcpt.exe' Unquoted Service Path
|
|
2021-05-10
|
|
Timeclock 1.04 - Time and Boolean Based Blind SQL Injection # Date: May 3rd 2021
|
|
2021-05-07
|
|
Epic Games Rocket League 1.95 - Stack Buffer Overrun
|
|
2021-05-07
|
|
Human Resource Information System 0.1 - Remote Code Execution (Unauthenticated)
|
|
2021-05-07
|
|
Voting System 1.0 - Remote Code Execution (Unauthenticated)
|
|
2021-05-07
|
|
WifiHotSpot 1.0.0.0 - 'WifiHotSpotService.exe' Unquoted Service Path
|
|
2021-05-07
|
|
Sandboxie 5.49.7 - Denial of Service (PoC)
|
|
2021-05-07
|
|
Voting System 1.0 - Authentication Bypass (SQLI)
|
|
2021-05-07
|
|
Sandboxie Plus 0.7.4 - 'SbieSvc' Unquoted Service Path
|
|
2021-05-07
|
|
Epic Games Easy Anti-Cheat 4.0 - Local Privilege Escalation
|
|
2021-05-07
|
|
b2evolution 7-2-2 - 'cf_name' SQL Injection
|
|
2021-05-06
|
|
Wordpress Plugin WP Super Edit 2.5.4 - Remote File Upload
|
|
2021-05-06
|
|
Schlix CMS 2.2.6-6 - Remote Code Execution (Authenticated)
|
|
2021-05-06
|
|
Schlix CMS 2.2.6-6 - 'title' Persistent Cross-Site Scripting (Authenticated)
|
|
2021-05-06
|
|
Anote 1.0 - XSS to RCE
|
|
2021-05-05
|
|
Markdownify 1.2.0 - XSS to RCE
|
|
2021-05-05
|