|
Courier Management System 1.0 - 'MULTIPART street ((custom) ' SQL Injection
|
|
2020-12-19
|
|
Courier Management System 1.0 - 'First Name' Stored XSS
|
|
2020-12-19
|
|
Dolibarr 12.0.3 - SQLi to RCE
|
|
2020-12-19
|
|
Supply Chain Management System - Auth Bypass SQL Injection
|
|
2020-12-19
|
|
Rukovoditel 2.6.1 - RCE
|
|
2020-12-19
|
|
Jenkins 2.235.3 - 'Description' Stored XSS
|
|
2020-12-19
|
|
Medical Center Portal Management System 1.0 - Multiple Stored XSS
|
|
2020-12-19
|
|
Openfire 4.6.0 - 'sql' Stored XSS
|
|
2020-12-19
|
|
Openfire 4.6.0 - 'users' Stored XSS
|
|
2020-12-19
|
|
Openfire 4.6.0 - 'groupchatJID' Stored XSS
|
|
2020-12-19
|
|
Jenkins 2.235.3 - 'tooltip' Stored Cross-Site Scripting
|
|
2020-12-19
|
|
WordPress Plugin Popup Builder 3.69.6 - Multiple Stored Cross Site Scripting
|
|
2020-12-19
|
|
Library Management System 2.0 - Auth Bypass SQL Injection
|
|
2020-12-19
|
|
Openfire 4.6.0 - 'path' Stored XSS
|
|
2020-12-19
|
|
OpenCart 3.0.3.6 - Cross Site Request Forgery
|
|
2020-12-19
|
|
Barcodes generator 1.0 - 'name' Stored Cross Site Scripting
|
|
2020-12-19
|
|
PDF Complete 3.5.310.2002 - 'pdfsvc.exe' Unquoted Service Path
|
|
2020-12-19
|
|
Task Management System 1.0 - 'id' SQL Injection
|
|
2020-12-19
|
|
Task Management System 1.0 - Unrestricted File Upload to Remote Code Execution
|
|
2020-12-19
|
|
Task Management System 1.0 - 'First Name and Last Name' Stored XSS
|
|
2020-12-19
|
|
Tibco ObfuscationEngine 5.11 - Fixed Key Password Decryption
|
|
2020-12-19
|
|
VestaCP 0.9.8-26 - 'backup' Information Disclosure
|
|
2020-12-19
|
|
VestaCP 0.9.8-26 - 'LoginAs' Insufficient Session Validation
|
|
2020-12-19
|
|
Huawei HedEx Lite 200R006C00SPC005 - Path Traversal
|
|
2020-12-19
|
|
Dup Scout Enterprise 10.0.18 - 'sid' Remote Buffer Overflow (SEH)
|
|
2020-12-19
|
|
SmarterMail Build 6985 - Remote Code Execution
|
|
2020-12-19
|
|
Employee Performance Evaluation System 1.0 - 'Task and Description' Persistent Cross Site Scripting
|
|
2020-12-08
|
|
Online Bus Ticket Reservation 1.0 - SQL Injection
|
|
2020-12-08
|
|
Druva inSync Windows Client 6.6.3 - Local Privilege Escalation (PowerShell)
|
|
2020-12-07
|
|
Dup Scout Enterprise 10.0.18 - 'online_registration' Remote Buffer Overflow
|
|
2020-12-07
|
|
vBulletin 5.6.3 - 'group' Cross Site Scripting
|
|
2020-12-07
|
|
Savsoft Quiz 5 - 'Skype ID' Stored XSS
|
|
2020-12-07
|
|
RarmaRadio 2.72.5 - Denial of Service (PoC)
|
|
2020-12-07
|
|
TapinRadio 2.13.7 - Denial of Service (PoC)
|
|
2020-12-07
|
|
Kite 1.2020.1119.0 - 'KiteService' Unquoted Service Path
|
|
2020-12-07
|
|
User Registration & Login and User Management System 2.1 - Cross Site Request Forgery
|
|
2020-12-07
|
|
Employee Record Management System 1.1 - Login Bypass SQL Injection
|
|
2020-12-07
|
|
Realtek Andrea RT Filters 1.0.64.7 - 'AERTSr64.EXE' Unquoted Service Path
|
|
2020-12-07
|
|
Joomla Plugin Simple Image Gallery Extended (SIGE) 3.5.3 - Multiple Vulnerabilities
|
|
2020-12-07
|
|
Realtek Audio Service 1.0.0.55 - 'RtkAudioService64.exe' Unquoted Service Path
|
|
2020-12-07
|
|
PandoraFMS NG747 7.0 - 'filename' Persistent Cross-Site Scripting
|
|
2020-12-07
|
|
Eaton Intelligent Power Manager 1.6 - Directory Traversal
|
|
2020-12-07
|
|
Cyber Cafe Management System Project (CCMS) 1.0 - Persistent Cross-Site Scripting
|
|
2020-12-07
|
|
Rumble Mail Server 0.51.3135 - 'rumble_win32.exe' Unquoted Service Path
|
|
2020-12-07
|
|
Zabbix 5.0.0 - Stored XSS via URL Widget Iframe
|
|
2020-12-04
|
|
CMS Made Simple 2.2.15 - Stored Cross-Site Scripting via SVG File Upload (Authenticated)
|
|
2020-12-04
|
|
Laravel Nova 3.7.0 - 'range' DoS
|
|
2020-12-04
|
|
Forma LMS 2.3 - 'First & Last Name' Stored Cross-Site Scripting
|
|
2020-12-04
|
|
Savsoft Quiz 5 - 'field_title' Stored Cross-Site Scripting
|
|
2020-12-04
|
|
Chromium 83 - Full CSP Bypass
|
|
2020-12-04
|
|
Testa Online Test Management System 3.4.7 - 'q' SQL Injection
|
|
2020-12-04
|
|
MiniCMS 1.10 - 'content box' Stored XSS
|
|
2020-12-04
|
|
Phpscript-sgh 0.1.0 - Time Based Blind SQL Injection
|
|
2020-12-04
|
|
IDT PC Audio 1.0.6499.0 - 'STacSV' Unquoted Service Path
|
|
2020-12-04
|
|
Composr CMS 10.0.34 - 'banners' Persistent Cross Site Scripting
|
|
2020-12-04
|
|
Wordpress Plugin Canto 1.3.0 - Blind SSRF (Unauthenticated)
|
|
2020-12-04
|
|
Invision Community 4.5.4 - 'Field Name' Stored Cross-Site Scripting
|
|
2020-12-03
|
|
Sony BRAVIA Digital Signage 1.7.8 - System API Information Disclosure
|
|
2020-12-03
|
|
Sony BRAVIA Digital Signage 1.7.8 - Unauthenticated Remote File Inclusion
|
|
2020-12-03
|
|
mojoPortal forums 2.7.0.0 - 'Title' Persistent Cross-Site Scripting
|
|
2020-12-03
|
|
Online Matrimonial Project 1.0 - Authenticated Remote Code Execution
|
|
2020-12-03
|
|
EgavilanMedia Address Book 1.0 Exploit - SQLi Auth Bypass
|
|
2020-12-03
|
|
Coastercms 5.8.18 - Stored XSS
|
|
2020-12-03
|
|
Microsoft Windows - Win32k Elevation of Privilege
|
|
2020-12-02
|
|
WordPress Plugin Wp-FileManager 6.8 - RCE
|
|
2020-12-02
|
|
Car Rental Management System 1.0 - SQL Injection / Local File include
|
|
2020-12-02
|
|
Mitel mitel-cs018 - Call Data Information Disclosure
|
|
2020-12-02
|
|
Simple College Website 1.0 - 'page' Local File Inclusion
|
|
2020-12-02
|
|
Anuko Time Tracker 1.19.23.5311 - Password Reset leading to Account Takeover
|
|
2020-12-02
|
|
Anuko Time Tracker 1.19.23.5311 - No rate Limit on Password Reset functionality
|
|
2020-12-02
|
|
ChurchCRM 4.2.1 - Persistent Cross Site Scripting (XSS)
|
|
2020-12-02
|
|
ChurchCRM 4.2.0 - CSV/Formula Injection
|
|
2020-12-02
|
|
WebDamn User Registration & Login System with User Panel - SQLi Auth Bypass
|
|
2020-12-02
|
|
Ksix Zigbee Devices - Playback Protection Bypass (PoC)
|
|
2020-12-02
|
|
DotCMS 20.11 - Stored Cross-Site Scripting
|
|
2020-12-02
|
|
Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Edit Profile
|
|
2020-12-02
|
|
Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Add Artwork
|
|
2020-12-02
|
|
WonderCMS 3.1.3 - 'Menu' Persistent Cross-Site Scripting
|
|
2020-12-02
|
|
Local Service Search Engine Management System 1.0 - SQLi Authentication Bypass
|
|
2020-12-02
|
|
Online News Portal System 1.0 - 'Title' Stored Cross Site Scripting
|
|
2020-12-02
|
|
Bakeshop Online Ordering System 1.0 - 'Owner' Persistent Cross-site scripting
|
|
2020-12-02
|
|
NewsLister - Authenticated Persistent Cross-Site Scripting
|
|
2020-12-02
|
|
Online Voting System Project in PHP - 'username' Persistent Cross-Site Scripting
|
|
2020-12-02
|
|
IDT PC Audio 1.0.6433.0 - 'STacSV' Unquoted Service Path
|
|
2020-12-02
|
|
PRTG Network Monitor 20.4.63.1412 - 'maps' Stored XSS
|
|
2020-12-02
|
|
WonderCMS 3.1.3 - Authenticated Remote Code Execution
|
|
2020-12-02
|
|
WonderCMS 3.1.3 - Authenticated SSRF to Remote Remote Code Execution
|
|
2020-12-02
|
|
EgavilanMedia User Registration & Login System with Admin Panel 1.0 - Stored Cross Site Scripting
|
|
2020-12-02
|
|
Student Result Management System 1.0 - Authentication Bypass SQL Injection
|
|
2020-12-02
|
|
User Registration & Login System with Admin Panel - CSRF
|
|
2020-12-02
|
|
Under Construction Page with CPanel 1.0 - SQL injection
|
|
2020-12-02
|
|
Pharmacy Store Management System 1.0 - 'id' SQL Injection
|
|
2020-12-02
|
|
ILIAS Learning Management System 4.3 - SSRF
|
|
2020-12-02
|
|
aSc TimeTables 2021.6.2 - Denial of Service (PoC)
|
|
2020-12-02
|
|
Expense Management System - 'description' Stored Cross Site Scripting
|
|
2020-12-02
|
|
Tendenci 12.3.1 - CSV/ Formula Injection
|
|
2020-12-01
|
|
Intel(r) Management and Security Application 5.2 - User Notification Service Unquoted Service Path
|
|
2020-12-01
|
|
Pearson Vue VTS 2.3.1911 Installer - VUEApplicationWrapper Unquoted Service Path
|
|
2020-12-01
|
|
Global Registration Service 1.0.0.3 - 'GREGsvc.exe' Unquoted Service Path
|
|
2020-12-01
|
|
EPSON Status Monitor 3 'EPSON_PM_RPCV4_06' - Unquoted Service Path
|
|
2020-12-01
|
|
Social Networking Site - Authentication Bypass (SQli)
|
|
2020-12-01
|
|
Pandora FMS 7.0 NG 749 - Multiple Persistent Cross-Site Scripting Vulnerabilities # Date: 11-14-2020
|
|
2020-12-01
|
|
Medical Center Portal Management System 1.0 - 'login' SQL Injection
|
|
2020-12-01
|
|
LEPTON CMS 4.7.0 - 'URL' Persistent Cross-Site Scripting
|
|
2020-12-01
|
|
Tailor Management System 1.0 - Unrestricted File Upload to Remote Code Execution
|
|
2020-12-01
|
|
Multi Restaurant Table Reservation System 1.0 - Multiple Persistent XSS
|
|
2020-12-01
|
|
10-Strike Network Inventory Explorer 8.65 - Buffer Overflow (SEH)
|
|
2020-12-01
|
|
Setelsa Conacwin 3.7.1.2 - Local File Inclusion
|
|
2020-12-01
|
|
Pharmacy/Medical Store & Sale Point 1.0 - 'email' SQL Injection
|
|
2020-12-01
|
|
Online Shopping Alphaware 1.0 - Error Based SQL injection
|
|
2020-12-01
|
|
Wordpress Plugin EventON Calendar 3.0.5 - Reflected Cross-Site Scripting
|
|
2020-12-01
|
|
Joomla! Component GMapFP 3.5 - Unauthenticated Arbitrary File Upload
|
|
2020-12-01
|
|
TypeSetter 5.1 - CSRF (Change admin e-mail)
|
|
2020-12-01
|
|
YATinyWinFTP - Denial of Service (PoC)
|
|
2020-11-30
|
|
Intelbras Router RF 301K 1.1.2 - Authentication Bypass
|
|
2020-11-30
|
|
Rejetto HttpFileServer 2.3.x - Remote Command Execution (3)
|
|
2020-11-30
|
|
ATX MiniCMTS200a Broadband Gateway 2.0 - Credential Disclosure
|
|
2020-11-30
|
|
Best Support System 3.0.4 - 'ticket_body' Persistent XSS (Authenticated)
|
|
2020-11-27
|
|
ElkarBackup 1.3.3 - 'Policy[name]' and 'Policy[Description]' Stored Cross-site Scripting
|
|
2020-11-27
|
|
libupnp 1.6.18 - Stack-based buffer overflow (DoS)
|
|
2020-11-27
|
|
House Rental 1.0 - 'keywords' SQL Injection
|
|
2020-11-27
|
|
Foxit Reader 9.0.1.1049 - Arbitrary Code Execution
|
|
2020-11-27
|
|
Wordpress Theme Accesspress Social Icons 1.7.9 - SQL injection (Authenticated)
|
|
2020-11-27
|
|
Moodle 3.8 - Unrestricted File Upload
|
|
2020-11-27
|
|
Acronis Cyber Backup 12.5 Build 16341 - Unauthenticated SSRF
|
|
2020-11-27
|
|
FrozenNode Laravel-Administrator 4 - Unrestricted File Upload (Authenticated)
|
|
2020-11-27
|
|
Ruckus IoT Controller (Ruckus vRIoT) 1.5.1.0.21 - Remote Code Execution
|
|
2020-11-27
|
|
WonderCMS 3.1.3 - 'uploadFile' Stored Cross-Site Scripting
|
|
2020-11-27
|
|
SAP Lumira 1.31 - Stored Cross-Site Scripting
|
|
2020-11-27
|
|
Wordpress Theme Wibar 1.1.8 - 'Brand Component' Stored Cross Site Scripting
|
|
2020-11-27
|
|
Razer Chroma SDK Server 3.16.02 - Race Condition Remote File Execution
|
|
2020-11-26
|
|
Pure-FTPd 1.0.48 - Remote Denial of Service
|
|
2020-11-26
|
|
SyncBreeze 10.0.28 - 'password' Remote Buffer Overflow
|
|
2020-11-25
|
|
osCommerce 2.3.4.1 - 'title' Persistent Cross-Site Scripting
|
|
2020-11-25
|
|
WonderCMS 3.1.3 - 'page' Persistent Cross-Site Scripting
|
|
2020-11-25
|
|
Wondershare Driver Install Service help 10.7.1.321 - 'ElevationService' Unquote Service Path
|
|
2020-11-25
|
|
OpenCart 3.0.3.6 - 'subject' Stored Cross-Site Scripting
|
|
2020-11-24
|
|
OpenCart 3.0.3.6 - 'Profile Image' Stored Cross Site Scripting (Authenticated)
|
|
2020-11-24
|
|
Seowon 130-SLC router 1.0.11 - 'ipAddr' RCE (Authenticated)
|
|
2020-11-24
|
|
ZeroShell 3.9.0 - 'cgi-bin/kerbynet' Remote Root Command Injection (Metasploit)
|
|
2020-11-24
|
|
Apache OpenMeetings 5.0.0 - 'hostname' Denial of Service
|
|
2020-11-24
|
|
nopCommerce Store 4.30 - 'name' Stored Cross-Site Scripting
|
|
2020-11-24
|
|
TP-Link TL-WA855RE V5_200415 - Device Reset Auth Bypass
|
|
2020-11-23
|
|
LifeRay 7.2.1 GA2 - Stored XSS
|
|
2020-11-23
|
|
VTiger v7.0 CRM - 'To' Persistent XSS
|
|
2020-11-23
|
|
Boxoft Audio Converter 2.3.0 - '.wav' Buffer Overflow (SEH)
|
|
2020-11-23
|
|
Boxoft Convert Master 1.3.0 - 'wav' SEH Local Exploit
|
|
2020-11-20
|
|
Free MP3 CD Ripper 2.8 - Multiple File Buffer Overflow (Metasploit)
|
|
2020-11-20
|
|
IBM Tivoli Storage Manager Command Line Administrative Interface 5.2.0.1 - id' Field Stack Based Buffer Overflow
|
|
2020-11-20
|
|
WonderCMS 3.1.3 - 'content' Persistent Cross-Site Scripting
|
|
2020-11-20
|
|
Zortam Mp3 Media Studio 27.60 - Remote Code Execution (SEH)
|
|
2020-11-20
|
|
Internet Download Manager 6.38.12 - Scheduler Downloads Scheduler Buffer Overflow (PoC)
|
|
2020-11-19
|
|
Nagios Log Server 2.1.7 - Persistent Cross-Site Scripting
|
|
2020-11-19
|
|
M/Monit 3.7.4 - Password Disclosure
|
|
2020-11-19
|
|
M/Monit 3.7.4 - Privilege Escalation
|
|
2020-11-19
|
|
Gemtek WVRTM-127ACN 01.01.02.141 - Authenticated Arbitrary Command Injection
|
|
2020-11-19
|
|
TestBox CFML Test Framework 4.1.0 - Directory Traversal
|
|
2020-11-19
|
|
TestBox CFML Test Framework 4.1.0 - Arbitrary File Write and Remote Code Execution
|
|
2020-11-19
|
|
Gitlab 12.9.0 - Arbitrary File Read (Authenticated)
|
|
2020-11-19
|
|
Genexis Platinum 4410 Router 2.1 - UPnP Credential Exposure
|
|
2020-11-19
|
|
Fortinet FortiOS 6.0.4 - Unauthenticated SSL VPN User Password Modification
|
|
2020-11-19
|
|
xuucms 3 - 'keywords' SQL Injection
|
|
2020-11-19
|
|
PESCMS TEAM 2.3.2 - Multiple Reflected XSS
|
|
2020-11-19
|
|
ZeroLogon - Netlogon Elevation of Privilege
|
|
2020-11-18
|
|
BigBlueButton 2.2.25 - Arbitrary File Disclosure and Server-Side Request Forgery
|
|
2020-11-18
|
|
Wordpress Plugin WPForms 1.6.3.1 - Persistent Cross Site Scripting (Authenticated)
|
|
2020-11-18
|
|
Apache Struts 2.5.20 - Double OGNL evaluation
|
|
2020-11-17
|
|
Aerospike Database 5.1.0.3 - OS Command Execution
|
|
2020-11-17
|
|
LCD_Service 1.0.1.0 - 'LCD_Service' Unquote Service Path
|
|
2020-11-17
|
|
Froxlor Froxlor Server Management Panel 0.10.16 - Persistent Cross-Site Scripting
|
|
2020-11-17
|
|
Microsoft Internet Explorer 11 - Use-After-Free
|
|
2020-11-17
|
|
WordPress Plugin Buddypress 6.2.0 - Persistent Cross-Site Scripting
|
|
2020-11-17
|
|
SugarCRM 6.5.18 - Persistent Cross-Site Scripting
|
|
2020-11-17
|
|
Online Doctor Appointment Booking System PHP and Mysql 1.0 - 'q' SQL Injection
|
|
2020-11-17
|
|
EgavilanMedia User Registration & Login System with Admin Panel Exploit - SQLi Auth Bypass
|
|
2020-11-17
|
|
Cisco 7937G - DoS/Privilege Escalation
|
|
2020-11-16
|
|
Car Rental Management System 1.0 - 'car_id' Sql Injection
|
|
2020-11-16
|
|
Car Rental Management System 1.0 - Remote Code Execution (Authenticated)
|
|
2020-11-16
|
|
PMB 5.6 - 'chemin' Local File Disclosure
|
|
2020-11-16
|
|
Atheros Coex Service Application 8.0.0.255 - 'ZAtheros Bt&Wlan Coex Agent' Unquoted Service Path
|
|
2020-11-16
|
|
User Registration & Login and User Management System 2.1 - Login Bypass SQL Injection
|
|
2020-11-16
|
|
Car Rental Management System 1.0 - 'id' SQL Injection (Authenticated)
|
|
2020-11-16
|
|
Logitech Solar Keyboard Service - 'L4301_Solar' Unquoted Service Path
|
|
2020-11-16
|
|
Advanced System Care Service 13 - 'AdvancedSystemCareService13' Unquoted Service Path
|
|
2020-11-16
|
|
Water Billing System 1.0 - 'id' SQL Injection (Authenticated)
|
|
2020-11-16
|
|
KiteService 1.2020.1113.1 - 'KiteService.exe' Unquoted Service Path
|
|
2020-11-16
|
|
Pandora FMS 7.0 NG 749 - 'CG Items' SQL Injection (Authenticated)
|
|
2020-11-16
|
|
October CMS Build 465 - Arbitrary File Read Exploit (Authenticated)
|
|
2020-11-13
|
|
OpenCart Theme Journal 3.1.0 - Sensitive Data Exposure
|
|
2020-11-13
|
|
IDT PC Audio 1.0.6425.0 - 'STacSV' Unquoted Service Path
|
|
2020-11-13
|
|
SAntivirus IC 10.0.21.61 - 'SAntivirusIC' Unquoted Service Path
|
|
2020-11-13
|
|
DigitalPersona 5.1.0.656 'DpHostW' - Unquoted Service Path
|
|
2020-11-13
|
|
Touchbase.io 1.10 - Stored Cross Site Scripting
|
|
2020-11-13
|
|
Apache Tomcat - AJP 'Ghostcat' File Read/Inclusion (Metasploit)
|
|
2020-11-13
|
|
Citrix ADC NetScaler - Local File Inclusion (Metasploit)
|
|
2020-11-13
|
|
Bludit 3.9.2 - Authentication Bruteforce Bypass (Metasploit)
|
|
2020-11-13
|
|
ASUS TM-AC1900 - Arbitrary Command Execution (Metasploit)
|
|
2020-11-13
|
|
Nidesoft 3GP Video Converter 2.6.18 - Local Stack Buffer Overflow
|
|
2020-11-12
|
|
Wordpress Plugin Good LMS 2.1.4 - 'id' Unauthenticated SQL Injection
|
|
2020-11-12
|
|
Water Billing System 1.0 - 'username' and 'password' parameters SQL Injection
|
|
2020-11-12
|
|
WordPress Plugin Simple File List 4.2.2 - Remote Code Execution
|
|
2020-11-12
|
|
CMSUno 1.6.2 - 'user' Remote Code Execution (Authenticated)
|
|
2020-11-11
|
|
Customer Support System 1.0 - 'username' Authentication Bypass
|
|
2020-11-11
|
|
Customer Support System 1.0 - Cross-Site Request Forgery
|
|
2020-11-11
|
|
Customer Support System 1.0 - 'description' Stored XSS in The Admin Panel
|
|
2020-11-11
|
|
Anuko Time Tracker 1.19.23.5325 - CSV/Formula Injection
|
|
2020-11-10
|
|
ShoreTel Conferencing 19.46.1802.0 - Reflected Cross-Site Scripting
|
|
2020-11-10
|
|
Car Rental Management System 1.0 - SQL injection + Arbitrary File Upload
|
|
2020-11-10
|
|
Joplin 1.2.6 - 'link' Cross Site Scripting
|
|
2020-11-09
|
|
Privacy Drive v3.17.0 - 'pdsvc.exe' Unquoted Service Path
|
|
2020-11-09
|
|
DiskBoss v11.7.28 - Multiple Services Unquoted Service Path
|
|
2020-11-09
|
|
RealTimes Desktop Service 18.1.4 - 'rpdsvc.exe' Unquoted Service Path
|
|
2020-11-09
|
|
Deep Instinct Windows Agent 1.2.24.0 - 'DeepNetworkService' Unquoted Service Path
|
|
2020-11-09
|
|
Canon Inkjet Extended Survey Program 5.1.0.8 - 'IJPLMSVC.EXE' - Unquoted Service Path
|
|
2020-11-09
|
|
iDeskService 3.0.2.1 - 'iDeskService' Unquoted Service Path
|
|
2020-11-09
|
|
Magic Mouse 2 utilities 2.20 - 'magicmouse2service' Unquoted Service Path
|
|
2020-11-09
|
|
MEMU PLAY 3.7.0 - 'MEmusvc' Unquoted Service Path
|
|
2020-11-09
|
|
Realtek Andrea RT Filters 1.0.64.10 - 'AERTSr64.EXE' Unquoted Service Path
|
|
2020-11-09
|
|
Motorola Device Manager 2.5.4 - 'ForwardDaemon.exe ' Unquoted Service Path
|
|
2020-11-09
|
|
Motorola Device Manager 2.5.4 - 'MotoHelperService.exe' Unquoted Service Path
|
|
2020-11-09
|
|
Motorola Device Manager 2.4.5 - 'ForwardDaemon.exe ' Unquoted Service Path
|
|
2020-11-09
|
|
HP WMI Service 1.4.8.0 - 'HPWMISVC.exe' Unquoted Service Path
|
|
2020-11-09
|
|
Syncplify.me Server! 5.0.37 - 'SMWebRestServicev5' Unquoted Service Path
|
|
2020-11-09
|
|
DigitalPersona 4.5.0.2213 - 'DpHostW' Unquoted Service Path
|
|
2020-11-09
|
|
Genexus Protection Server 9.6.4.2 - 'protsrvservice' Unquoted Service Path
|
|
2020-11-09
|
|
IPTInstaller 4.0.9 - 'PassThru Service' Unquoted Service Path
|
|
2020-11-09
|
|
OKI sPSV Port Manager 1.0.41 - 'sPSVOpLclSrv' Unquoted Service Path
|
|
2020-11-09
|
|
Winstep 18.06.0096 - 'Xtreme Service' Unquoted Service Path
|
|
2020-11-09
|
|
KMSpico 17.1.0.0 - 'Service KMSELDI' Unquoted Service Path
|
|
2020-11-09
|
|
HP Display Assistant x64 Edition 3.20 - 'DTSRVC' Unquoted Service Path
|
|
2020-11-09
|
|
SuiteCRM 7.11.15 - 'last_name' Remote Code Execution (Authenticated)
|
|
2020-11-09
|
|
Genexis Platinum-4410 P4410-V2-1.28 - Broken Access Control and CSRF
|
|
2020-11-09
|
|
BlogEngine 3.3.8 - 'Content' Stored XSS
|
|
2020-11-06
|
|
Sentrifugo Version 3.2 - 'announcements' Remote Code Execution (Authenticated)
|
|
2020-11-06
|
|
Sentrifugo 3.2 - 'assets' Remote Code Execution (Authenticated)
|
|
2020-11-06
|
|
CMSUno 1.6.2 - 'lang' Remote Code Execution (Authenticated)
|
|
2020-11-06
|
|
SmartBlog 2.0.1 - 'id_post' Blind SQL injection
|
|
2020-11-06
|
|
TP-Link WDR4300 - Remote Code Execution (Authenticated)
|
|
2020-11-05
|
|
Amarok 2.8.0 - Denial-of-Service
|
|
2020-11-05
|
|
iDS6 DSSPro Digital Signage System 6.2 - Improper Access Control Privilege Escalation
|
|
2020-11-05
|
|
iDS6 DSSPro Digital Signage System 6.2 - CAPTCHA Security Bypass
|
|
2020-11-05
|
|
iDS6 DSSPro Digital Signage System 6.2 - Cross-Site Request Forgery (CSRF)
|
|
2020-11-05
|
|
Student Attendance Management System 1.0 - 'username' SQL Injection / Remote Code Execution
|
|
2020-11-04
|
|
School Log Management System 1.0 - 'username' SQL Injection / Remote Code Execution
|
|
2020-11-04
|
|
PDW File Browser < v1.3 - Remote Code Execution
|
|
2020-11-04
|
|
Processwire CMS 2.4.0 - 'download' Local File Inclusion
|
|
2020-11-04
|
|
Exploit Title: Complaints Report Management System 1.0 - 'username' SQL Injection / Remote Code Execution
|
|
2020-11-03
|
|
Multi Restaurant Table Reservation System 1.0 - 'table_id' Unauthenticated SQL Injection
|
|
2020-11-03
|
|
Quick N Easy FTP Service 3.2 - Unquoted Service Path
|
|
2020-11-02
|
|
Foxit Reader 9.7.1 - Remote Command Execution (Javascript API)
|
|
2020-11-02
|