|
Monstra CMS 3.0.4 - Remote Code Execution (Authenticated)
|
|
2021-06-13
|
|
Inkpad Notepad & To do list 4.3.61 - Denial of Service (PoC)
|
|
2021-06-13
|
|
4Images 1.8 - 'redirect' Reflected XSS
|
|
2021-06-13
|
|
Gitlab 13.9.3 - Remote Code Execution (Authenticated)
|
|
2021-06-13
|
|
FUDForum 3.1.0 - 'author' Reflected XSS
|
|
2021-06-13
|
|
FUDForum 3.1.0 - 'srch' Reflected XSS
|
|
2021-06-13
|
|
Blacknote 2.2.1 - Denial of Service (PoC)
|
|
2021-06-13
|
|
Notepad notes 2.6.7 - Denial of Service (PoC)
|
|
2021-06-13
|
|
ColorNote 4.1.9 - Denial of Service (PoC)
|
|
2021-06-13
|
|
BasicNote 1.1.9 - Denial of Service (PoC)
|
|
2021-06-13
|
|
CHIYU IoT Devices - Denial of Service (DoS)
|
|
2021-06-13
|
|
CHIYU IoT Devices - 'Telnet' Authentication Bypass
|
|
2021-06-13
|
|
Seo Panel 4.8.0 - 'from_time' Reflected XSS
|
|
2021-06-13
|
|
PHP 8.1.0-dev - 'User-Agentt' Remote Code Execution
|
|
2021-06-13
|
|
Seo Panel 4.8.0 - 'category' Reflected XSS
|
|
2021-06-13
|
|
Seo Panel 4.8.0 - 'search_name' Reflected XSS
|
|
2021-06-13
|
|
Products.PluggableAuthService 2.6.0 - Open Redirect
|
|
2021-06-13
|
|
Intel(R) Audio Service x64 01.00.1080.0 - 'IntelAudioService' Unquoted Service Path
|
|
2021-06-13
|
|
GetSimple CMS 3.3.4 - Information Disclosure
|
|
2021-06-13
|
|
Apache Airflow 1.10.10 - 'Example Dag' Remote Code Execution
|
|
2021-06-13
|
|
Thecus N4800Eco Nas Server Control Panel - Comand Injection
|
|
2021-06-13
|
|
Veyon 4.4.1 - 'VeyonService' Unquoted Service Path
|
|
2021-06-13
|
|
Atlassian Jira 8.15.0 - Information Disclosure (Username Enumeration)
|
|
2021-06-13
|
|
CHIYU TCP/IP Converter devices - CRLF injection
|
|
2021-06-13
|
|
CHIYU IoT devices - 'Multiple' Cross-Site Scripting (XSS)
|
|
2021-06-13
|
|
WordPress Plugin WP Prayer version 1.6.1 - 'prayer_messages' Stored Cross-Site Scripting (XSS) (Authenticated)
|
|
2021-06-13
|
|
Ubee EVW327 - 'Enable Remote Access' Cross-Site Request Forgery (CSRF)
|
|
2021-06-13
|
|
ProjeQtOr Project Management 9.1.4 - Remote Code Execution
|
|
2021-06-13
|
|
LogonTracer 1.2.0 - Remote Code Execution (Unauthenticated)
|
|
2021-06-13
|
|
DupTerminator 1.4.5639.37199 - Denial of Service (PoC)
|
|
2021-06-13
|
|
Selenium 3.141.59 - Remote Code Execution (Firefox/geckodriver)
|
|
2021-06-13
|
|
Trixbox 2.8.0.4 - 'lang' Path Traversal
|
|
2021-06-13
|
|
Trixbox 2.8.0.4 - 'lang' Remote Code Execution (Unauthenticated)
|
|
2021-06-13
|
|
WordPress Plugin LifterLMS 4.21.0 - Stored Cross-Site Scripting (XSS)
|
|
2021-06-13
|
|
PHPFusion 9.03.50 - Remote Code Execution
|
|
2021-06-13
|
|
Postbird 0.8.4 - Javascript Injection
|
|
2021-06-13
|
|
Pluck CMS 4.7.13 - File Upload Remote Code Execution (Authenticated)
|
|
2021-06-13
|
|
ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution (2)
|
|
2021-06-13
|
|
Codiad 2.8.4 - Remote Code Execution (Authenticated) (3)
|
|
2021-06-13
|
|
RarmaRadio 2.72.8 - Denial of Service (PoC)
|
|
2021-06-13
|
|
WordPress Plugin Cookie Law Bar 1.2.1 - 'clb_bar_msg' Stored Cross-Site Scripting (XSS)
|
|
2021-06-13
|
|
Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting (XSS)
|
|
2021-06-13
|
|
WordPress Plugin ReDi Restaurant Reservation 21.0307 - 'Comment' Stored Cross-Site Scripting (XSS)
|
|
2021-06-13
|
|
Codiad 2.8.4 - Remote Code Execution (Authenticated) (2)
|
|
2021-06-13
|
|
Shopizer 2.16.0 - 'Multiple' Cross-Site Scripting (XSS)
|
|
2021-06-13
|
|
ePowerSvc 6.0.3008.0 - 'ePowerSvc.exe' Unquoted Service Path
|
|
2021-06-13
|
|
DiskBoss Service 12.2.18 - 'diskbsa.exe' Unquoted Service Path
|
|
2021-06-13
|
|
iDailyDiary 4.30 - Denial of Service (PoC)
|
|
2021-06-13
|
|
Schlix CMS 2.2.6-6 - Arbitary File Upload And Directory Traversal Leads To RCE (Authenticated)
|
|
2021-06-13
|
|
Solaris SunSSH 11.0 x86 - libpam Remote Root (2)
|
|
2021-06-13
|
|
Microsoft Exchange 2019 - Unauthenticated Email Download (Metasploit)
|
|
2021-06-13
|
|
WordPress Plugin WP Statistics 13.0.7 - Time-Based Blind SQL Injection (Unauthenticated)
|
|
2021-06-13
|
|
DELL dbutil_2_3.sys 2.3 - Arbitrary Write to Local Privilege Escalation (LPE)
|
|
2021-06-13
|
|
Mozilla Firefox 88.0.1 - File Extension Execution of Arbitrary Code
|
|
2021-06-13
|
|
Spotweb 1.4.9 - DOM Based Cross-Site Scripting (XSS)
|
|
2021-06-13
|
|
Acer Updater Service 1.2.3500.0 - 'UpdaterService.exe' Unquoted Service Path
|
|
2021-06-13
|
|
Backup Manager Module 3.0.0.99 - 'IScheduleSvc.exe' Unquoted Service Path
|
|
2021-06-13
|
|
ASUS HID Access Service 1.0.94.0 - 'AsHidSrv.exe' Unquoted Service Path
|
|
2021-06-13
|
|
COVID19 Testing Management System 1.0 - 'Admin name' Cross-Site Scripting (XSS)
|
|
2021-06-13
|
|
COVID19 Testing Management System 1.0 - SQL Injection (Auth Bypass)
|
|
2021-06-13
|
|
ManageEngine ADSelfService Plus 6.1 - CSV Injection
|
|
2021-06-13
|
|
In4Suit ERP 3.2.74.1370 - 'txtLoginId' SQL injection
|
|
2021-06-13
|
|
WebSSH for iOS 14.16.10 - 'mashREPL' Denial of Service (PoC)
|
|
2021-06-13
|
|
Visual Studio Code 1.47.1 - Denial of Service (PoC)
|
|
2021-06-13
|
|
WordPress Plugin Stop Spammers 2021.8 - 'log' Reflected Cross-site Scripting (XSS)
|
|
2021-06-13
|
|
Microsoft Exchange 2019 - Unauthenticated Email Download
|
|
2021-06-13
|
|
EgavilanMedia PHPCRUD 1.0 - 'First Name' SQL Injection
|
|
2021-06-13
|
|
Printable Staff ID Card Creator System 1.0 - SQLi & RCE via Arbitrary File Upload
|
|
2021-06-13
|
|
Subrion CMS 4.2.1 - File Upload Bypass to RCE (Authenticated)
|
|
2021-06-13
|
|
Advanced Guestbook 2.4.4 - 'Smilies' Persistent Cross-Site Scripting (XSS)
|
|
2021-06-13
|
|
Billing Management System 2.0 - Union based SQL injection (Authenticated)
|
|
2021-06-13
|
|
Simple Chatbot Application 1.0 - 'Category' Stored Cross site Scripting
|
|
2021-06-13
|
|
Microsoft Internet Explorer 8 - 'SetMouseCapture ' Use After Free
|
|
2021-06-13
|
|
Dental Clinic Appointment Reservation System 1.0 - Cross Site Request Forgery (Add Admin)
|
|
2021-06-13
|
|
Dental Clinic Appointment Reservation System 1.0 - 'Firstname' Persistent Cross Site Scripting (Authenticated)
|
|
2021-06-13
|
|
IPFire 2.25 - Remote Code Execution (Authenticated)
|
|
2021-06-13
|
|
Customer Relationship Management (CRM) System 1.0 - 'Category' Persistent Cross site Scripting
|
|
2021-06-13
|
|
Chamilo LMS 1.11.14 - Remote Code Execution (Authenticated)
|
|
2021-06-13
|
|
Podcast Generator 3.1 - 'Long Description' Persistent Cross-Site Scripting (XSS)
|
|
2021-06-13
|
|
Student Management System 1.0 - 'message' Persistent Cross-Site Scripting (Authenticated)
|
|
2021-06-13
|
|
Firefox 72 IonMonkey - JIT Type Confusion
|
|
2021-06-13
|
|
Microsoft Internet Explorer 8/11 and WPAD service 'Jscript.dll' - Use-After-Free
|
|
2021-06-13
|
|
ZeroShell 3.9.0 - Remote Command Execution
|
|
2021-06-13
|
|
Dental Clinic Appointment Reservation System 1.0 - 'date' UNION based SQL Injection (Authenticated)
|
|
2021-06-13
|
|
Dental Clinic Appointment Reservation System 1.0 - Authentication Bypass (SQLi)
|
|
2021-06-13
|
|
Chevereto 3.17.1 - Cross Site Scripting (Stored)
|
|
2021-05-12
|
|
Splinterware System Scheduler Professional 5.30 - Unquoted Service Path
|
|
2021-05-12
|
|
Odoo 12.0.20190101 - 'nssm.exe' Unquoted Service Path
|
|
2021-05-11
|
|
Microweber CMS 1.1.20 - Remote Code Execution (Authenticated)
|
|
2021-05-10
|
|
Linux/x86 - setreuid(0) + execve("/bin/sh") Shellcode (29 bytes)
|
|
2021-05-10
|
|
Human Resource Information System 0.1 - 'First Name' Persistent Cross-Site Scripting (Authenticated)
|
|
2021-05-10
|
|
PHP Timeclock 1.04 - 'Multiple' Cross Site Scripting (XSS)
|
|
2021-05-10
|
|
TFTP Broadband 4.3.0.1465 - 'tftpt.exe' Unquoted Service Path
|
|
2021-05-10
|
|
BOOTP Turbo 2.0.0.1253 - 'bootpt.exe' Unquoted Service Path
|
|
2021-05-10
|
|
DHCP Broadband 4.1.0.1503 - 'dhcpt.exe' Unquoted Service Path
|
|
2021-05-10
|
|
Timeclock 1.04 - Time and Boolean Based Blind SQL Injection # Date: May 3rd 2021
|
|
2021-05-07
|
|
Epic Games Rocket League 1.95 - Stack Buffer Overrun
|
|
2021-05-07
|
|
Human Resource Information System 0.1 - Remote Code Execution (Unauthenticated)
|
|
2021-05-07
|
|
Voting System 1.0 - Remote Code Execution (Unauthenticated)
|
|
2021-05-07
|
|
WifiHotSpot 1.0.0.0 - 'WifiHotSpotService.exe' Unquoted Service Path
|
|
2021-05-07
|