|
Xiaomi browser 10.2.4.g - Browser Search History Disclosure
|
|
2021-08-10
|
|
WordPress Plugin Picture Gallery 1.4.2 - 'Edit Content URL' Stored Cross-Site Scripting (XSS)
|
|
2021-08-10
|
|
WordPress Plugin LifterLMS 4.21.1 - Access Other Student Grades/Answers via IDOR
|
|
2021-08-10
|
|
Cockpit CMS 0.11.1 - 'Username Enumeration & Password Reset' NoSQL Injection
|
|
2021-08-10
|
|
Amica Prodigy 1.7 - Privilege Escalation
|
|
2021-08-10
|
|
IPCop 2.1.9 - Remote Code Execution (RCE) (Authenticated)
|
|
2021-08-10
|
|
Pass-the-Hash Attack Over Named Pipes Against ESET Server Security - Paper
|
|
2021-08-05
|
|
GFI Mail Archiver 15.1 - Telerik UI Component Arbitrary File Upload (Unauthenticated)
|
|
2021-08-05
|
|
Moodle 3.9 - Remote Code Execution (RCE) (Authenticated)
|
|
2021-08-05
|
|
CMSuno 1.7 - 'tgo' Stored Cross-Site Scripting (XSS) (Authenticated)
|
|
2021-08-05
|
|
ApacheOfBiz 17.12.01 - Remote Command Execution (RCE) via Unsafe Deserialization of XMLRPC arguments
|
|
2021-08-04
|
|
Client Management System 1.1 - 'cname' Stored Cross-site scripting (XSS)
|
|
2021-08-04
|
|
qdPM 9.2 - DB Connection String and Password Exposure (Unauthenticated)
|
|
2021-08-04
|
|
qdPM 9.1 - Remote Code Execution (RCE) (Authenticated)
|
|
2021-08-04
|
|
WordPress Plugin WP Customize Login 1.1 - 'Change Logo Title' Stored Cross-Site Scripting (XSS)
|
|
2021-08-04
|
|
Hotel Management System 1.0 - Cross-Site Scripting (XSS) Arbitrary File Upload Remote Code Execution (RCE)
|
|
2021-08-03
|
|
Panasonic Sanyo CCTV Network Camera 2.03-0x - 'Disable Authentication / Change Password' CSRF
|
|
2021-08-02
|
|
Online Hotel Reservation System 1.0 - 'Multiple' Cross-site scripting (XSS)
|
|
2021-08-02
|
|
Neo4j 3.4.18 - RMI based Remote Code Execution (RCE)
|
|
2021-08-02
|
|
Men Salon Management System 1.0 - SQL Injection Authentication Bypass
|
|
2021-08-02
|
|
Demystifying Nmap Scans on packet level - Paper
|
|
2021-07-30
|
|
Oracle Fatwire 6.3 - Multiple Vulnerabilities
|
|
2021-07-29
|
|
CloverDX 5.9.0 - Cross-Site Request Forgery (CSRF) to Remote Code Execution (RCE)
|
|
2021-07-29
|
|
Care2x Integrated Hospital Info System 2.7 - 'Multiple' SQL Injection
|
|
2021-07-29
|
|
IntelliChoice eFORCE Software Suite 2.5.9 - Username Enumeration
|
|
2021-07-29
|
|
Longjing Technology BEMS API 1.21 - Remote Arbitrary File Download
|
|
2021-07-29
|
|
Denver IP Camera SHO-110 - Unauthenticated Snapshot
|
|
2021-07-29
|
|
TripSpark VEO Transportation - Blind SQL Injection
|
|
2021-07-28
|
|
Denver Smart Wifi Camera SHC-150 - 'Telnet' Remote Code Execution (RCE)
|
|
2021-07-28
|
|
Event Registration System with QR Code 1.0 - Authentication Bypass & RCE
|
|
2021-07-28
|
|
Customer Relationship Management System (CRM) 1.0 - Sql Injection Authentication Bypass
|
|
2021-07-27
|
|
PHP 7.3.15-3 - 'PHP_SESSION_UPLOAD_PROGRESS' Session Data Injection
|
|
2021-07-27
|
|
XOS Shop 1.0.9 - 'Multiple' Arbitrary File Deletion (Authenticated)
|
|
2021-07-26
|
|
NoteBurner 2.35 - Denial Of Service (DoS) (PoC)
|
|
2021-07-26
|
|
Leawo Prof. Media 11.0.0.1 - Denial of Service (DoS) (PoC)
|
|
2021-07-26
|
|
Elasticsearch ECE 7.13.3 - Anonymous Database Dump
|
|
2021-07-26
|
|
Microsoft SharePoint Server 2019 - Remote Code Execution (2)
|
|
2021-07-23
|
|
WordPress Plugin Simple Post 1.1 - 'Text field' Stored Cross-Site Scripting (XSS)
|
|
2021-07-23
|
|
ElasticSearch 7.13.3 - Memory disclosure
|
|
2021-07-23
|
|
CSZ CMS 1.2.9 - 'Multiple' Arbitrary File Deletion
|
|
2021-07-23
|
|
KevinLAB BEMS 1.0 - File Path Traversal Information Disclosure (Authenticated)
|
|
2021-07-23
|
|
KevinLAB BEMS 1.0 - Unauthenticated SQL Injection / Authentication Bypass
|
|
2021-07-23
|
|
KevinLAB BEMS 1.0 - Undocumented Backdoor Account
|
|
2021-07-23
|
|
Webmin 1.973 - 'run.cgi' Cross-Site Request Forgery (CSRF)
|
|
2021-07-23
|
|
WordPress Plugin KN Fix Your Title 1.0.1 - 'Separator' Stored Cross-Site Scripting (XSS)
|
|
2021-07-23
|
|
PEEL Shopping 9.3.0 - 'id' Time-based SQL Injection
|
|
2021-07-23
|
|
Linux/x86 - Egghunter Reverse TCP Shell dynamic IP and port Shellcode
|
|
2021-07-23
|
|
Dolibarr ERP/CRM 10.0.6 - Login Brute Force
|
|
2021-07-23
|
|
WordPress Plugin Mimetic Books 0.2.13 - 'Default Publisher ID field' Stored Cross-Site Scripting (XSS)
|
|
2021-07-23
|
|
WordPress Plugin LearnPress 3.2.6.8 - Privilege Escalation
|
|
2021-07-23
|