|
Tailor Management System - 'id' SQL Injection
|
|
2020-09-16
|
|
Audio Playback Recorder 3.2.2 - Local Buffer Overflow (SEH)
|
|
2020-09-16
|
|
Input Director 1.4.3 - 'Input Director' Unquoted Service Path
|
|
2020-09-16
|
|
ShareMouse 5.0.43 - 'ShareMouse Service' Unquoted Service Path
|
|
2020-09-08
|
|
ManageEngine Applications Manager 14700 - Remote Code Execution (Authenticated)
|
|
2020-09-07
|
|
grocy 2.7.1 - Persistent Cross-Site Scripting
|
|
2020-09-07
|
|
Cabot 0.11.12 - Persistent Cross-Site Scripting
|
|
2020-09-07
|
|
Nord VPN-6.31.13.0 - 'nordvpn-service' Unquoted Service Path
|
|
2020-09-04
|
|
BarracudaDrive v6.5 - Insecure Folder Permissions
|
|
2020-09-03
|
|
SiteMagic CMS 4.4.2 - Arbitrary File Upload (Authenticated)
|
|
2020-09-03
|
|
Daily Tracker System 1.0 - Authentication Bypass
|
|
2020-09-03
|
|
BloodX CMS 1.0 - Authentication Bypass
|
|
2020-09-03
|
|
Savsoft Quiz Enterprise Version 5.5 - Persistent Cross-Site Scripting
|
|
2020-09-03
|
|
Stock Management System 1.0 - Cross-Site Request Forgery (Change Username)
|
|
2020-09-02
|
|
moziloCMS 2.0 - Persistent Cross-Site Scripting (Authenticated)
|
|
2020-09-01
|
|
Mara CMS 7.5 - Remote Code Execution (Authenticated)
|
|
2020-09-01
|
|
CMS Made Simple 2.2.14 - Arbitrary File Upload (Authenticated)
|
|
2020-08-31
|
|
Fuel CMS 1.4.8 - 'fuel_replace_id' SQL Injection (Authenticated)
|
|
2020-08-31
|
|
Mara CMS 7.5 - Reflective Cross-Site Scripting
|
|
2020-08-31
|
|
BlazeDVD 7.0 Professional - '.plf' Local Buffer Overflow (SEH,ASLR,DEP)
|
|
2020-08-31
|
|
Online Book Store 1.0 - 'id' SQL Injection
|
|
2020-08-31
|
|
Eibiz i-Media Server Digital Signage 3.8.0 - Privilege Escalation
|
|
2020-08-28
|
|
SymphonyCMS 3.0.0 - Persistent Cross-Site Scripting
|
|
2020-08-28
|
|
Nagios Log Server 2.1.6 - Persistent Cross-Site Scripting
|
|
2020-08-28
|
|
Online Shopping Alphaware 1.0 - 'id' SQL Injection
|
|
2020-08-28
|
|
Wordpress Plugin Autoptimize 2.7.6 - Arbitrary File Upload (Authenticated)
|
|
2020-08-27
|
|
ASX to MP3 converter 3.1.3.7.2010.11.05 - '.wax' Local Buffer Overflow (DEP,ASLR Bypass) (PoC)
|
|
2020-08-27
|
|
Mida eFramework 2.9.0 - Remote Code Execution
|
|
2020-08-27
|
|
Eibiz i-Media Server Digital Signage 3.8.0 - Directory Traversal
|
|
2020-08-26
|
|
Ericom Access Server x64 9.2.0 - Server-Side Request Forgery
|
|
2020-08-26
|
|
Eibiz i-Media Server Digital Signage 3.8.0 - Configuration Disclosure
|
|
2020-08-24
|
|
Eibiz i-Media Server Digital Signage 3.8.0 - Authentication Bypass
|
|
2020-08-24
|
|
LimeSurvey 4.3.10 - 'Survey Menu' Persistent Cross-Site Scripting
|
|
2020-08-24
|
|
vBulletin 5.1.2 < 5.1.9 - Unserialize Code Execution (Metasploit)
|
|
2020-08-23
|
|
Seowon SlC 130 Router - Remote Code Execution
|
|
2020-08-23
|
|
Complaint Management System 1.0 - 'cid' SQL Injection
|
|
2020-08-23
|
|
PNPSCADA 2.200816204020 - 'interf' SQL Injection (Authenticated)
|
|
2020-08-23
|
|
ElkarBackup 1.3.3 - Persistent Cross-Site Scripting
|
|
2020-08-23
|
|
Ruijie Networks Switch eWeb S29_RGOS 11.4 - Directory Traversal
|
|
2020-08-19
|
|
Savsoft Quiz 5 - Stored Cross-Site Scripting
|
|
2020-08-18
|
|
Pharmacy Medical Store and Sale Point 1.0 - 'catid' SQL Injection
|
|
2020-08-18
|
|
QiHang Media Web Digital Signage 3.0.9 - Remote Code Execution (Unauthenticated)
|
|
2020-08-17
|
|
QiHang Media Web Digital Signage 3.0.9 - Unauthenticated Arbitrary File Disclosure
|
|
2020-08-17
|
|
QiHang Media Web Digital Signage 3.0.9 - Unauthenticated Arbitrary File Deletion
|
|
2020-08-17
|
|
QiHang Media Web Digital Signage 3.0.9 - Cleartext Credential Disclosure
|
|
2020-08-17
|
|
Microsoft SharePoint Server 2019 - Remote Code Execution
|
|
2020-08-17
|
|
Bludit 3.9.2 - Authentication Bruteforce Mitigation Bypass
|
|
2020-08-17
|
|
GetSimple CMS Plugin Multi User 1.8.2 - Cross-Site Request Forgery (Add Admin)
|
|
2020-08-14
|
|
Artica Proxy 4.3.0 - Authentication Bypass
|
|
2020-08-14
|
|
vBulletin 5.6.2 - 'widget_tabbedContainer_tab_panel' Remote Code Execution
|
|
2020-08-14
|