2021-06-28 |
netgear wnap320 2.0.3 - 'macaddress' remote code execution (rce) (unauthenticated)
|
webapps exploit |
hardware vulnerability |
2021-06-28 |
atlassian jira server data center 8.16.0 - reflected cross-site scripting (xss)
|
webapps exploit |
macos vulnerability |
2021-06-28 |
wordpress plugin yop polls 6.2.7 - stored cross site scripting (xss)
|
webapps exploit |
php vulnerability |
2021-06-28 |
smart contract automated testing guidelines - paper
|
papers exploit |
multiple vulnerability |
2021-06-25 |
lightweight facebook-styled blog 1.3 - remote code execution (rce) (authenticated) (metasploit)
|
webapps exploit |
php vulnerability |
2021-06-25 |
simple client management system 1.0 - 'uemail' sql injection (unauthenticated)
|
webapps exploit |
php vulnerability |
2021-06-25 |
seeddms 5.1.10 - remote command execution (rce) (authenticated)
|
webapps exploit |
php vulnerability |
2021-06-25 |
sapsprint 7.60 - 'sapsprint' unquoted service path
|
local exploit |
windows vulnerability |
2021-06-24 |
tp-link tl-wr841n - command injection
|
webapps exploit |
hardware vulnerability |
2021-06-24 |
adobe coldfusion 8 - remote command execution (rce)
|
webapps exploit |
cfm vulnerability |
2021-06-24 |
vmware vcenter server 7.0 - remote code execution (rce) (unauthenticated)
|
webapps exploit |
multiple vulnerability |
2021-06-23 |
simple crm 3.0 - 'email' sql injection (authentication bypass)
|
webapps exploit |
php vulnerability |
2021-06-23 |
online library management system 1.0 - arbitrary file upload remote code execution (unauthenticated)
|
webapps exploit |
php vulnerability |
2021-06-23 |
online library management system 1.0 - 'search' sql injection
|
webapps exploit |
php vulnerability |
2021-06-23 |
wordpress plugin poll, survey, questionnaire and voting system 1.5.2 - 'date_answers' blind sql injection
|
webapps exploit |
php vulnerability |
2021-06-23 |
wordpress plugin wp google maps 8.1.11 - stored cross-site scripting (xss)
|
webapps exploit |
php vulnerability |
2021-06-22 |
phone shop sales managements system 1.0 - insecure direct object reference (idor)
|
webapps exploit |
php vulnerability |
2021-06-22 |
responsive tourism website 3.1 - remote code execution (rce) (unauthenticated)
|
webapps exploit |
php vulnerability |
2021-06-21 |
remote mouse gui 3.008 - local privilege escalation
|
local exploit |
windows vulnerability |
2021-06-21 |
customer relationship management system (crm) 1.0 - remote code execution
|
webapps exploit |
php vulnerability |
2021-06-21 |
lexmark printer software g2 installation package 1.8.0.0 - 'lm__bdsvc' unquoted service path
|
local exploit |
windows vulnerability |
2021-06-21 |
simple crm 3.0 - 'name' stored cross site scripting (xss)
|
webapps exploit |
php vulnerability |
2021-06-21 |
simple crm 3.0 - 'change user information' cross-site request forgery (csrf)
|
webapps exploit |
php vulnerability |
2021-06-21 |
websvn 2.6.0 - remote code execution (unauthenticated)
|
webapps exploit |
php vulnerability |
2021-06-21 |
ifunbox 4.2 - 'apple mobile device service' unquoted service path
|
local exploit |
windows vulnerability |
2021-06-21 |
solaris sunssh 11.0 x86 - libpam remote root (3)
|
remote exploit |
solaris vulnerability |
2021-06-21 |
wise care 365 5.6.7.568 - 'wisebootassistant' unquoted service path
|
local exploit |
windows vulnerability |
2021-06-21 |
openemr 5.0.1.7 - 'filename' path traversal (authenticated)
|
webapps exploit |
php vulnerability |
2021-06-18 |
node.js - 'node-serialize' remote code execution (3)
|
webapps exploit |
nodejs vulnerability |
2021-06-18 |
network pivoting hackerenv - paper
|
papers exploit |
multiple vulnerability |
2021-06-18 |
dlink dsl2750u - 'reboot' command injection
|
remote exploit |
hardware vulnerability |
2021-06-18 |
'node-serialize' remote code execution web shell - paper
|
papers exploit |
nodejs vulnerability |
2021-06-18 |
ice hrm 29.0.0.os - 'xml upload' stored cross-site scripting (xss)
|
webapps exploit |
php vulnerability |
2021-06-18 |
ice hrm 29.0.0.os - 'account takeover' cross-site request forgery (csrf)
|
webapps exploit |
php vulnerability |
2021-06-17 |
online shopping portal 3.1 - remote code execution (unauthenticated)
|
webapps exploit |
php vulnerability |
2021-06-17 |
workspace one intelligent hub 20.3.8.0 - 'vmware hub health monitoring service' unquoted service path
|
local exploit |
windows vulnerability |
2021-06-17 |
zoho manageengine servicedesk plus msp 9.4 - user enumeration
|
webapps exploit |
java vulnerability |
2021-06-17 |
vx search 13.5.28 - 'multiple' unquoted service path
|
local exploit |
windows vulnerability |
2021-06-17 |
dup scout 13.5.28 - 'multiple' unquoted service path
|
local exploit |
windows vulnerability |
2021-06-17 |
disk savvy 13.6.14 - 'multiple' unquoted service path
|
local exploit |
windows vulnerability |
2021-06-17 |
sync breeze 13.6.18 - 'multiple' unquoted service path
|
local exploit |
windows vulnerability |
2021-06-17 |
unified office total connect now 1.0 - 'data' sql injection
|
webapps exploit |
php vulnerability |
2021-06-16 |
ckeditor 3 - server-side request forgery (ssrf)
|
webapps exploit |
php vulnerability |
2021-06-16 |
penetration testing web storage (user experience) - paper (arabic)
|
papers exploit |
multiple vulnerability |
2021-06-16 |
teachers record management system 1.0 - 'email' stored cross-site scripting (xss)
|
webapps exploit |
php vulnerability |
2021-06-16 |
teachers record management system 1.0 - 'multiple' sql injection (authenticated)
|
webapps exploit |
php vulnerability |
2021-06-16 |
openemr 5.0.1.3 - authentication bypass
|
webapps exploit |
php vulnerability |
2021-06-16 |
cotonti siena 0.9.19 - 'maintitle' stored cross-site scripting
|
webapps exploit |
php vulnerability |
2021-06-16 |
spoofing downloaded filename's extension in chromium - paper
|
papers exploit |
windows vulnerability |
2021-06-16 |
disk sorter enterprise 13.6.12 - 'disk sorter enterprise' unquoted service path
|
local exploit |
windows vulnerability |