Exploits (Total: 98512)

    
    
    
Responsive Tourism Website 3.1 - Remote Code Execution (RCE) (Unauthenticated)
2021-06-22
ASUS DisplayWidget Software 3.4.0.036 - 'ASUSDisplayWidgetService' Unquoted Service Path
2021-06-22
Remote Mouse GUI 3.008 - Local Privilege Escalation
2021-06-21
Customer Relationship Management System (CRM) 1.0 - Remote Code Execution
2021-06-21
Lexmark Printer Software G2 Installation Package 1.8.0.0 - 'LM__bdsvc' Unquoted Service Path
2021-06-21
Simple CRM 3.0 - 'name' Stored Cross site scripting (XSS)
2021-06-21
Simple CRM 3.0 - 'Change user information' Cross-Site Request Forgery (CSRF)
2021-06-21
Websvn 2.6.0 - Remote Code Execution (Unauthenticated)
2021-06-21
iFunbox 4.2 - 'Apple Mobile Device Service' Unquoted Service Path
2021-06-21
Solaris SunSSH 11.0 x86 - libpam Remote Root (3)
2021-06-21
Wise Care 365 5.6.7.568 - 'WiseBootAssistant' Unquoted Service Path
2021-06-21
OpenEMR 5.0.1.7 - 'fileName' Path Traversal (Authenticated)
2021-06-21
Node.JS - 'node-serialize' Remote Code Execution (3)
2021-06-18
Dlink DSL2750U - 'Reboot' Command Injection
2021-06-18
ICE Hrm 29.0.0.OS - 'xml upload' Stored Cross-Site Scripting (XSS)
2021-06-18
ICE Hrm 29.0.0.OS - 'Account Takeover' Cross-Site Request Forgery (CSRF)
2021-06-18
ICE Hrm 29.0.0.OS - 'Account Takeover' Cross-Site Scripting and Session Fixation
2021-06-18
Online Shopping Portal 3.1 - Remote Code Execution (Unauthenticated)
2021-06-17
Workspace ONE Intelligent Hub 20.3.8.0 - 'VMware Hub Health Monitoring Service' Unquoted Service Path
2021-06-17
Zoho ManageEngine ServiceDesk Plus MSP 9.4 - User Enumeration
2021-06-17
VX Search 13.5.28 - 'Multiple' Unquoted Service Path
2021-06-17
Dup Scout 13.5.28 - 'Multiple' Unquoted Service Path
2021-06-17
Disk Savvy 13.6.14 - 'Multiple' Unquoted Service Path
2021-06-17
Sync Breeze 13.6.18 - 'Multiple' Unquoted Service Path
2021-06-17
Unified Office Total Connect Now 1.0 - 'data' SQL Injection
2021-06-17
CKEditor 3 - Server-Side Request Forgery (SSRF)
2021-06-16
Penetration testing Web Storage (User Experience) - Paper (Arabic)
2021-06-16
Teachers Record Management System 1.0 - 'email' Stored Cross-site Scripting (XSS)
2021-06-16
Teachers Record Management System 1.0 - 'Multiple' SQL Injection (Authenticated)
2021-06-16
OpenEMR 5.0.1.3 - '/portal/account/register.php' Authentication Bypass
2021-06-16
Cotonti Siena 0.9.19 - 'maintitle' Stored Cross-Site Scripting
2021-06-16
Disk Sorter Server 13.6.12 - 'Disk Sorter Server' Unquoted Service Path
2021-06-16
DiskPulse 13.6.14 - 'Multiple' Unquoted Service Path
2021-06-16
Polkit 0.105-26 0.117-2 - Local Privilege Escalation
2021-06-15
Brother BRAgent 1.38 - 'WBA_Agent_Client' Unquoted Service Path
2021-06-15
SysGauge 7.9.18 - ' SysGauge Server' Unquoted Service Path
2021-06-15
Client Management System 1.1 - 'Search' SQL Injection
2021-06-15
Client Management System 1.1 - 'username' Stored Cross-Site Scripting (XSS)
2021-06-15
XML External Entity via MP3 File Upload on WordPress - Paper
2021-06-15
Brother BRPrint Auditor - 'Multiple' Unquoted Service Path
2021-06-15
Tftpd64 4.64 - 'Tftpd32_svc' Unquoted Service Path
2021-06-14
Notex the best notes 6.4 - Denial of Service (PoC)
2021-06-14
Post-it 5.0.1 - Denial of Service (PoC)
2021-06-14
Secure Notepad Private Notes 3.0.3 - Denial of Service (PoC)
2021-06-14
WibuKey Runtime 6.51 - 'WkSvW32.exe' Unquoted Service Path
2021-06-14
OpenEMR 5.0.1.3 - 'manage_site_files' Remote Code Execution (Authenticated)
2021-06-14
Spy Emergency 25.0.650 - 'Multiple' Unquoted Service Path
2021-06-14
TextPattern CMS 4.8.7 - Remote Command Execution (Authenticated)
2021-06-14
Small CRM 3.0 - 'Authentication Bypass' SQL Injection
2021-06-14
Stock Management System 1.0 - 'user_id' Blind SQL injection (Authenticated)
2021-06-14
COVID19 Testing Management System 1.0 - 'State' Stored Cross-Site-Scripting (XSS)
2021-06-14
GLPI 9.4.5 - Remote Code Execution (RCE)
2021-06-14
Accela Civic Platform 21.1 - 'contactSeqNumber' Insecure Direct Object References (IDOR)
2021-06-14
Accela Civic Platform 21.1 - 'successURL' Cross-Site-Scripting (XSS)
2021-06-14
WoWonder Social Network Platform 3.1 - Authentication Bypass
2021-06-13
Zenario CMS 8.8.52729 - 'cID' Blind & Error based SQL injection (Authenticated)
2021-06-13
Solar-Log 500 2.8.2 - Unprotected Storage of Credentials
2021-06-13
Solar-Log 500 2.8.2 - Incorrect Access Control
2021-06-13
Grocery crud 1.6.4 - 'order_by' SQL Injection
2021-06-13
WordPress Plugin Database Backups 1.2.2.6 - 'Database Backup Download' CSRF
2021-06-13
OpenEMR 5.0.0 - Remote Code Execution (Authenticated)
2021-06-13
Microsoft SharePoint Server 16.0.10372.20060 - 'GetXmlDataFromDataSource' Server-Side Request Forgery (SSRF)
2021-06-13
Cerberus FTP Web Service 11 - 'svg' Stored Cross-Site Scripting (XSS)
2021-06-13
Accela Civic Platform 21.1 - 'servProvCode' Cross-Site-Scripting (XSS)
2021-06-13
n+otes 1.6.2 - Denial of Service (PoC)
2021-06-13
Sticky Notes Widget Version 3.0.6 - Denial of Service (PoC)
2021-06-13
memono Notepad Version 4.2 - Denial of Service (PoC)
2021-06-13
Linux/x86 - execve /bin/sh Shellcode (fstenv eip GetPC technique) (70 bytes, xor encoded)
2021-06-13
TextPattern CMS 4.8.7 - Stored Cross-Site Scripting (XSS)
2021-06-13
Student Result Management System 1.0 - 'class' SQL Injection
2021-06-13
GravCMS 1.10.7 - Arbitrary YAML Write/Update (Unauthenticated) (2)
2021-06-13
WordPress Plugin visitors-app 0.3 - 'user-agent' Stored Cross-Site Scripting (XSS)
2021-06-13
OpenCart 3.0.3.6 - 'subject' Stored Cross-Site Scripting
2021-06-13
OpenCart 3.0.3.7 - 'Change Password' Cross-Site Request Forgery (CSRF)
2021-06-13
Intelbras Router RF 301K - 'DNS Hijacking' Cross-Site Request Forgery (CSRF)
2021-06-13
WordPress Plugin wpDiscuz 7.0.4 - Remote Code Execution (Unauthenticated)
2021-06-13
Backup Key Recovery 2.2.7 - Denial of Service (PoC)
2021-06-13
Nsauditor 3.2.3 - Denial of Service (PoC)
2021-06-13
NBMonitor 1.6.8 - Denial of Service (PoC)
2021-06-13
Wordpress Plugin wpDiscuz 7.0.4 - Arbitrary File Upload (Unauthenticated)
2021-06-13
Grav CMS 1.7.10 - Server-Side Template Injection (SSTI) (Authenticated)
2021-06-13
Rocket.Chat 3.12.1 - NoSQL Injection to RCE (Unauthenticated)
2021-06-13
IcoFX 2.6 - '.ico' Buffer Overflow SEH + DEP Bypass using JOP
2021-06-13
WordPress Plugin Smart Slider-3 3.5.0.8 - 'name' Stored Cross-Site Scripting (XSS)
2021-06-13
Sticky Notes & Color Widgets 1.4.2 - Denial of Service (PoC)
2021-06-13
OptiLink ONT1GEW GPON 2.1.11_X101 Build 1127.190306 - Remote Code Execution (Authenticated)
2021-06-13
My Notes Safe 5.3 - Denial of Service (PoC)
2021-06-13
Macaron Notes great notebook 5.5 - Denial of Service (PoC)
2021-06-13
Color Notes 1.4 - Denial of Service (PoC)
2021-06-13
Gitlab 13.10.2 - Remote Code Execution (Authenticated)
2021-06-13
Monstra CMS 3.0.4 - Remote Code Execution (Authenticated)
2021-06-13
Inkpad Notepad & To do list 4.3.61 - Denial of Service (PoC)
2021-06-13
4Images 1.8 - 'redirect' Reflected XSS
2021-06-13
Gitlab 13.9.3 - Remote Code Execution (Authenticated)
2021-06-13
FUDForum 3.1.0 - 'author' Reflected XSS
2021-06-13
FUDForum 3.1.0 - 'srch' Reflected XSS
2021-06-13
Blacknote 2.2.1 - Denial of Service (PoC)
2021-06-13
Notepad notes 2.6.7 - Denial of Service (PoC)
2021-06-13
ColorNote 4.1.9 - Denial of Service (PoC)
2021-06-13
BasicNote 1.1.9 - Denial of Service (PoC)
2021-06-13
Exploits/page:


Page:
1-4-2 (www02)