Exploits (Total: 98348)

    
    
    
WordPress Plugin WP Learn Manager 1.1.2 - Stored Cross-Site Scripting (XSS)
2021-07-05
Garbage Collection Management System 1.0 - SQL Injection (Unauthenticated)
2021-07-02
Wordpress Plugin Modern Events Calendar 5.16.2 - Event export (Unauthenticated)
2021-07-02
WinWaste.NET 1.0.6183.16475 - Privilege Escalation due Incorrect Access Control
2021-07-02
Scratch Desktop 3.17 - Cross-Site Scripting/Remote Code Execution (XSS/RCE)
2021-07-02
Wordpress Plugin Modern Events Calendar 5.16.2 - Remote Code Execution (Authenticated)
2021-07-02
b2evolution 7.2.2 - 'edit account details' Cross-Site Request Forgery (CSRF)
2021-07-02
AKCP sensorProbe SPX476 - 'Multiple' Cross-Site Scripting (XSS)
2021-07-02
Vianeos OctoPUS 5 - 'login_user' SQLi
2021-07-01
Wordpress Plugin XCloner 4.2.12 - Remote Code Execution (Authenticated)
2021-07-01
Online Voting System 1.0 - Remote Code Execution (Authenticated)
2021-07-01
Online Voting System 1.0 - Authentication Bypass (SQLi)
2021-07-01
Doctors Patients Management System 1.0 - SQL Injection (Authentication Bypass)
2021-06-30
Simple Traffic Offense System 1.0 - Stored Cross Site Scripting (XSS)
2021-06-30
Apache Superset 1.1.0 - Time-Based Account Enumeration
2021-06-30
phpAbook 0.9i - SQL Injection
2021-06-30
ES File Explorer 4.1.9.7.4 - Arbitrary File Read
2021-06-29
Netgear WNAP320 2.0.3 - 'macAddress' Remote Code Execution (RCE) (Unauthenticated)
2021-06-28
Atlassian Jira Server/Data Center 8.16.0 - Reflected Cross-Site Scripting (XSS)
2021-06-28
SAS Environment Manager 2.5 - 'name' Stored Cross-Site Scripting (XSS)
2021-06-28
WordPress Plugin YOP Polls 6.2.7 - Stored Cross Site Scripting (XSS)
2021-06-28
Lightweight facebook-styled blog 1.3 - Remote Code Execution (RCE) (Authenticated) (Metasploit)
2021-06-25
Simple Client Management System 1.0 - 'uemail' SQL Injection (Unauthenticated)
2021-06-25
Seeddms 5.1.10 - Remote Command Execution (RCE) (Authenticated)
2021-06-25
SAPSprint 7.60 - 'SAPSprint' Unquoted Service Path
2021-06-25
JNLP Injection to Muli-OS Code Execution - Paper
2021-06-25
Huawei dg8045 - Authentication Bypass
2021-06-24
TP-Link TL-WR841N - Command Injection
2021-06-24
Adobe ColdFusion 8 - Remote Command Execution (RCE)
2021-06-24
VMware vCenter Server RCE 6.5 / 6.7 / 7.0 - Remote Code Execution (RCE) (Unauthenticated)
2021-06-24
Simple CRM 3.0 - 'email' SQL injection (Authentication Bypass)
2021-06-23
Online Library Management System 1.0 - Arbitrary File Upload Remote Code Execution (Unauthenticated)
2021-06-23
Online Library Management System 1.0 - 'Search' SQL Injection
2021-06-23
WordPress Plugin Poll, Survey, Questionnaire and Voting system 1.5.2 - 'date_answers' Blind SQL Injection
2021-06-23
WordPress Plugin WP Google Maps 8.1.11 - Stored Cross-Site Scripting (XSS)
2021-06-23
Phone Shop Sales Managements System 1.0 - Insecure Direct Object Reference (IDOR)
2021-06-22
Responsive Tourism Website 3.1 - Remote Code Execution (RCE) (Unauthenticated)
2021-06-22
ASUS DisplayWidget Software 3.4.0.036 - 'ASUSDisplayWidgetService' Unquoted Service Path
2021-06-22
Remote Mouse GUI 3.008 - Local Privilege Escalation
2021-06-21
Customer Relationship Management System (CRM) 1.0 - Remote Code Execution
2021-06-21
Lexmark Printer Software G2 Installation Package 1.8.0.0 - 'LM__bdsvc' Unquoted Service Path
2021-06-21
Simple CRM 3.0 - 'name' Stored Cross site scripting (XSS)
2021-06-21
Simple CRM 3.0 - 'Change user information' Cross-Site Request Forgery (CSRF)
2021-06-21
Websvn 2.6.0 - Remote Code Execution (Unauthenticated)
2021-06-21
iFunbox 4.2 - 'Apple Mobile Device Service' Unquoted Service Path
2021-06-21
Solaris SunSSH 11.0 x86 - libpam Remote Root (3)
2021-06-21
Wise Care 365 5.6.7.568 - 'WiseBootAssistant' Unquoted Service Path
2021-06-21
OpenEMR 5.0.1.7 - 'fileName' Path Traversal (Authenticated)
2021-06-21
Node.JS - 'node-serialize' Remote Code Execution (3)
2021-06-18
Dlink DSL2750U - 'Reboot' Command Injection
2021-06-18
Exploits/page:


Page:
1-4-2 (www02)