|
Wordpress Plugin wpDiscuz 7.0.4 - Unauthenticated Arbitrary File Upload (Metasploit)
|
|
2021-01-08
|
|
WordPress Plugin Autoptimize 2.7.6 - Authenticated Arbitrary File Upload (Metasploit)
|
|
2021-01-08
|
|
Apache Flink 1.11.0 - Unauthenticated Arbitrary File Read (Metasploit)
|
|
2021-01-08
|
|
Cockpit Version 234 - Server-Side Request Forgery (Unauthenticated)
|
|
2021-01-08
|
|
Online Doctor Appointment System 1.0 - Multiple Stored XSS
|
|
2021-01-08
|
|
Life Insurance Management System 1.0 - Multiple Stored XSS
|
|
2021-01-08
|
|
dnsrecon 0.10.0 - CSV Injection
|
|
2021-01-08
|
|
CRUD Operation 1.0 - Multiple Stored XSS
|
|
2021-01-07
|
|
ECSIMAGING PACS 6.21.5 - SQL injection
|
|
2021-01-07
|
|
Curfew e-Pass Management System 1.0 - Stored XSS
|
|
2021-01-07
|
|
Cockpit CMS 0.6.1 - Remote Code Execution
|
|
2021-01-07
|
|
Employee Record System 1.0 - Unrestricted File Upload to Remote Code Execution
|
|
2021-01-07
|
|
ECSIMAGING PACS 6.21.5 - Remote code execution
|
|
2021-01-07
|
|
iBall-Baton WRA150N Rom-0 Backup - File Disclosure (Sensitive Information)
|
|
2021-01-07
|
|
Sonatype Nexus 3.21.1 - Remote Code Execution (Authenticated)
|
|
2021-01-06
|
|
H2 Database 1.4.199 - JNI Code Execution
|
|
2021-01-06
|
|
Gitea 1.7.5 - Remote Code Execution
|
|
2021-01-06
|
|
PaperStream IP (TWAIN) 1.42.0.5685 - Local Privilege Escalation
|
|
2021-01-06
|
|
Resumes Management and Job Application Website 1.0 - Multiple Stored XSS
|
|
2021-01-06
|
|
Resumes Management and Job Application Website 1.0 - RCE (Unauthenticated)
|
|
2021-01-06
|
|
WinAVR Version 20100110 - Insecure Folder Permissions
|
|
2021-01-06
|
|
Newgen Correspondence Management System (corms) eGov 12.0 - IDOR
|
|
2021-01-06
|
|
WordPress Plugin WP24 Domain Check 1.6.2 - 'fieldnameDomain' Stored Cross Site Scripting
|
|
2021-01-06
|
|
Responsive E-Learning System 1.0 - Stored Cross Site Scripting
|
|
2021-01-06
|
|
Responsive E-Learning System 1.0 - Unrestricted File Upload to RCE
|
|
2021-01-06
|
|
WordPress Plugin litespeed cache 3.6 - 'server_ip' Cross-Site Scripting
|
|
2021-01-06
|
|
Expense Tracker 1.0 - 'Expense Name' Stored Cross-Site Scripting
|
|
2021-01-06
|
|
IPeakCMS 3.5 - Boolean-based blind SQLi
|
|
2021-01-06
|
|
IObit Uninstaller 10 Pro - Unquoted Service Path
|
|
2021-01-06
|
|
dirsearch 0.4.1 - CSV Injection
|
|
2021-01-06
|
|
Advanced Webhost Billing System 3.7.0 - Cross-Site Request Forgery (CSRF)
|
|
2021-01-06
|
|
EgavilanMedia User Registration & Login System with Admin Panel 1.0 - Multiple Stored Cross-Site Scripting
|
|
2021-01-05
|
|
Klog Server 2.4.1 - Command Injection (Unauthenticated)
|
|
2021-01-05
|
|
Online Learning Management System 1.0 - RCE (Authenticated)
|
|
2021-01-05
|
|
CSZ CMS 1.2.9 - Multiple Cross-Site Scripting
|
|
2021-01-05
|
|
Fluentd TD-agent plugin 4.0.1 - Insecure Folder Permission
|
|
2021-01-05
|
|
Cassandra Web 0.5.0 - Remote File Read
|
|
2021-01-05
|
|
HPE Edgeline Infrastructure Manager 1.0 - Multiple Remote Vulnerabilities
|
|
2021-01-05
|
|
Zoom Meeting Connector 4.6.239.20200613 - Remote Root Exploit (Authenticated)
|
|
2021-01-05
|
|
Responsive FileManager 9.13.4 - 'path' Path Traversal
|
|
2021-01-05
|
|
Baby Care System 1.0 - 'Post title' Stored XSS
|
|
2021-01-05
|
|
Responsive ELearning System 1.0 - 'id' Sql Injection
|
|
2021-01-05
|
|
Online Movie Streaming 1.0 - Authentication Bypass
|
|
2021-01-05
|
|
WordPress Plugin WP-Paginate 2.1.3 - 'preset' Stored XSS
|
|
2021-01-05
|
|
WordPress Plugin Stripe Payments 2.0.39 - 'AcceptStripePayments-settings[currency_code]' Stored XSS
|
|
2021-01-05
|
|
Resumes Management and Job Application Website 1.0 - Authentication Bypass (Sql Injection)
|
|
2021-01-05
|
|
House Rental and Property Listing 1.0 - Multiple Stored XSS
|
|
2021-01-05
|
|
IncomCMS 2.0 - Insecure File Upload
|
|
2021-01-05
|
|
Intel(R) Matrix Storage Event Monitor x86 8.0.0.1039 - 'IAANTMON' Unquoted Service Path
|
|
2021-01-05
|
|
Parallels Remote Application Server (RAS) 18 IP Disclosure - Paper
|
|
2021-01-04
|