2021-03-22 |
osas traverse extension 11 - 'travextensionhostsvc' unquoted service path
|
local exploit |
windows vulnerability |
2021-03-22 |
proftpd 1.3.7a - remote denial of service
|
dos exploit |
multiple vulnerability |
2021-03-22 |
mybb 1.8.25 - chained remote command execution
|
webapps exploit |
php vulnerability |
2021-03-22 |
kztech/jatontec/neotel jt3500v 4g lte cpe 2.0.1 - weak default wifi password algorithm
|
remote exploit |
hardware vulnerability |
2021-03-22 |
macpaw encrypto 1.0.1 - 'encrypto service' unquoted service path
|
local exploit |
windows vulnerability |
2021-03-22 |
wordpress plugin delightful downloads jquery file tree 1.6.6 - path traversal
|
webapps exploit |
php vulnerability |
2021-03-22 |
winpakpro 4.8 - 'wpcommandfileservice' unquoted service path
|
local exploit |
windows vulnerability |
2021-03-22 |
winpakpro 4.8 - 'scheduleservice' unquoted service path
|
local exploit |
windows vulnerability |
2021-03-22 |
winpakpro 4.8 - 'guardtourservice' unquoted service path
|
local exploit |
windows vulnerability |
2021-03-22 |
sapsetup automatic workstation update service 750 - 'nwsapautoworkstationupdatesvc' unquoted service path
|
local exploit |
windows vulnerability |
2021-03-19 |
online news portal 1.0 - 'multiple' stored cross-site scripting
|
webapps exploit |
php vulnerability |
2021-03-19 |
online news portal 1.0 - 'name' sql injection
|
webapps exploit |
php vulnerability |
2021-03-19 |
kztech/jatontec/neotel jt3500v 4g lte cpe 2.0.1 - config download (unauthenticated)
|
webapps exploit |
hardware vulnerability |
2021-03-19 |
kztech/jatontec/neotel jt3500v 4g lte cpe 2.0.1 - device reboot (unauthenticated)
|
dos exploit |
hardware vulnerability |
2021-03-19 |
kztech/jatontec/neotel jt3500v 4g lte cpe 2.0.1 - factory reset (unauthenticated)
|
webapps exploit |
hardware vulnerability |
2021-03-19 |
kztech/jatontec/neotel jt3500v 4g lte cpe 2.0.1 - remote code execution
|
webapps exploit |
hardware vulnerability |
2021-03-19 |
kztech/jatontec/neotel jt3500v 4g lte cpe 2.0.1 - hard coded credentials shell access
|
remote exploit |
hardware vulnerability |
2021-03-19 |
kztech/jatontec/neotel jt3500v 4g lte cpe 2.0.1 - authentication bypass
|
webapps exploit |
hardware vulnerability |
2021-03-19 |
kztech/jatontec/neotel jt3500v 4g lte cpe 2.0.1 - command injection (authenticated)
|
webapps exploit |
hardware vulnerability |
2021-03-19 |
soyal 701 client 9.0.1 - insecure permissions
|
local exploit |
windows vulnerability |
2021-03-19 |
soyal 701 server 9.0.1 - insecure permissions
|
local exploit |
windows vulnerability |
2021-03-19 |
soyal biometric access control system 5.0 - 'change admin password' csrf
|
webapps exploit |
hardware vulnerability |
2021-03-19 |
soyal biometric access control system 5.0 - master code disclosure
|
webapps exploit |
hardware vulnerability |
2021-03-19 |
vestacp 0.9.8 - 'v_sftp_licence' command injection
|
webapps exploit |
multiple vulnerability |
2021-03-19 |
eclipse mosquitto mqtt broker 2.0.9 - 'mosquitto' unquoted service path
|
local exploit |
windows vulnerability |
2021-03-19 |
profiling system for human resource management 1.0 - remote code execution (unauthenticated)
|
webapps exploit |
php vulnerability |
2021-03-19 |
bradmin professional 3.75 - 'bra_scheduler' unquoted service path
|
local exploit |
windows vulnerability |
2021-03-19 |
boonex dolphin 7.4.2 - 'width' stored xss
|
webapps exploit |
php vulnerability |
2021-03-19 |
livezilla server 8.0.1.0 - 'accept-language' reflected xss
|
webapps exploit |
php vulnerability |
2021-03-19 |
plone cms 5.2.3 - 'title' stored xss
|
webapps exploit |
multiple vulnerability |
2021-03-18 |
hestia control panel 1.3.2 - arbitrary file write
|
webapps exploit |
php vulnerability |
2021-03-18 |
seo panel 4.8.0 - 'order_col' blind sql injection (1)
|
webapps exploit |
php vulnerability |
2021-03-18 |
rconfig 3.9.6 - arbitrary file upload to remote code execution (authenticated) (1)
|
webapps exploit |
php vulnerability |
2021-03-17 |
sony playstation 4 (ps4) < 7.55 - 'jailbreak' webkit / kernel loader 'sock_raw' 'ip6_exthdr_check'
|
papers exploit |
hardware vulnerability |
2021-03-14 |
microsoft exchange 2019 - ssrf to arbitrary file write (proxylogon)
|
remote exploit |
windows vulnerability |
2021-03-18 |
vestacp 0.9.8 - 'v_interface' add ip stored xss
|
webapps exploit |
multiple vulnerability |
2021-03-18 |
vfs for git 1.0.21014.1 - 'gvfs.service' unquoted service path
|
local exploit |
windows vulnerability |
2021-03-17 |
faststone image viewer 7.5 - .cur bitmapinfoheader 'bitcount' stack based buffer overflow (aslr & dep bypass)
|
local exploit |
windows vulnerability |
2021-03-17 |
vestacp 0.9.8 - file upload csrf
|
webapps exploit |
multiple vulnerability |
2021-03-17 |
breaking the business logic - paper
|
papers exploit |
multiple vulnerability |
2021-03-17 |
wowonder social network platform 3.1 - 'event_id' sql injection
|
webapps exploit |
php vulnerability |
2021-03-16 |
geogebra 3d calculator 5.0.511.0 - denial of service (poc)
|
local exploit |
android vulnerability |
2021-03-16 |
geogebra cas calculato?r? 6.0.631.0 - denial of service (poc)
|
local exploit |
windows vulnerability |
2021-03-16 |
geogebra classic 5.0.631.0-d - denial of service (poc)
|
local exploit |
windows vulnerability |
2021-03-16 |
geogebra graphing calculato?r? 6.0.631.0 - denial of service (poc)
|
local exploit |
windows vulnerability |
2021-03-16 |
alphaware e-commerce system 1.0 - unauthenicated remote code execution (file upload + sql injection)
|
webapps exploit |
php vulnerability |
2021-03-15 |
sonlogger 4.2.3.3 - unauthenticated arbitrary file upload (metasploit)
|
webapps exploit |
multiple vulnerability |
2021-03-15 |
sonlogger 4.2.3.3 - superadmin account creation / information disclosure
|
webapps exploit |
multiple vulnerability |
2021-03-15 |
openmaint openmaint 2.1-3.3-b - 'multiple' persistent cross-site scripting
|
webapps exploit |
multiple vulnerability |
2021-03-15 |
interactive suite 3.6 - 'ebeam stylus driver' unquoted service path
|
local exploit |
windows vulnerability |