2021-05-10 |
php timeclock 1.04 - 'multiple' cross site scripting (xss)
|
webapps exploit |
php vulnerability |
2021-05-10 |
tftp broadband 4.3.0.1465 - 'tftpt.exe' unquoted service path
|
local exploit |
windows vulnerability |
2021-05-10 |
bootp turbo 2.0.0.1253 - 'bootpt.exe' unquoted service path
|
local exploit |
windows vulnerability |
2021-05-10 |
dhcp broadband 4.1.0.1503 - 'dhcpt.exe' unquoted service path
|
local exploit |
windows vulnerability |
2021-05-07 |
php timeclock 1.04 - time and boolean based blind sql injection
|
webapps exploit |
php vulnerability |
2021-05-07 |
epic games rocket league 1.95 - stack buffer overrun
|
local exploit |
windows vulnerability |
2021-05-07 |
human resource information system 0.1 - remote code execution (unauthenticated)
|
webapps exploit |
php vulnerability |
2021-05-07 |
voting system 1.0 - remote code execution (unauthenticated)
|
webapps exploit |
php vulnerability |
2021-05-07 |
wifihotspot 1.0.0.0 - 'wifihotspotservice.exe' unquoted service path
|
local exploit |
windows vulnerability |
2021-05-07 |
sandboxie 5.49.7 - denial of service (poc)
|
dos exploit |
windows vulnerability |
2021-05-07 |
voting system 1.0 - authentication bypass (sqli)
|
webapps exploit |
php vulnerability |
2021-05-07 |
sandboxie plus 0.7.4 - 'sbiesvc' unquoted service path
|
local exploit |
windows vulnerability |
2021-05-07 |
epic games easy anti-cheat 4.0 - local privilege escalation
|
local exploit |
windows vulnerability |
2021-05-06 |
b2evolution 7-2-2 - 'cf_name' sql injection
|
webapps exploit |
php vulnerability |
2021-05-06 |
wordpress plugin wp super edit 2.5.4 - remote file upload
|
webapps exploit |
php vulnerability |
2021-05-06 |
schlix cms 2.2.6-6 - remote code execution (authenticated)
|
webapps exploit |
multiple vulnerability |
2021-05-06 |
schlix cms 2.2.6-6 - 'title' persistent cross-site scripting (authenticated)
|
webapps exploit |
multiple vulnerability |
2021-05-05 |
anote 1.0 - xss to rce
|
webapps exploit |
multiple vulnerability |
2021-05-05 |
markdownify 1.2.0 - xss to rce
|
webapps exploit |
multiple vulnerability |
2021-05-05 |
markright 1.0 - xss to rce
|
webapps exploit |
multiple vulnerability |
2021-05-05 |
freeter 1.2.1 - xss to rce
|
webapps exploit |
multiple vulnerability |
2021-05-05 |
studymd 0.3.2 - xss to rce
|
webapps exploit |
multiple vulnerability |
2021-05-05 |
marky 0.0.1 - xss to rce
|
webapps exploit |
multiple vulnerability |
2021-05-05 |
moeditor 0.2.0 - xss to rce
|
webapps exploit |
multiple vulnerability |
2021-05-05 |
snipcommand 0.1.0 - xss to rce
|
webapps exploit |
multiple vulnerability |
2021-05-05 |
tagstoo 2.0.1 - stored xss to rce
|
webapps exploit |
multiple vulnerability |
2021-05-05 |
xmind 2020 - xss to rce
|
webapps exploit |
multiple vulnerability |
2021-05-05 |
markdown explorer 0.1.1 - xss to rce
|
webapps exploit |
multiple vulnerability |
2021-05-05 |
savsoft quiz 5 - 'user account settings' persistent cross-site scripting
|
webapps exploit |
php vulnerability |
2021-05-04 |
internship portal management system 1.0 - remote code execution via file upload (unauthenticated)
|
webapps exploit |
php vulnerability |
2021-05-03 |
gitlab community edition (ce) 13.10.3 - 'sign_up' user enumeration
|
webapps exploit |
ruby vulnerability |
2021-05-03 |
gitlab community edition (ce) 13.10.3 - user enumeration
|
webapps exploit |
ruby vulnerability |
2021-05-03 |
windows/x64 - dynamic nonull add rdp admin (boku:sp3c1alm0v3) shellcode (387 bytes)
|
shellcode exploit |
windows_x86-64 vulnerability |
2021-05-03 |
windows/x64 - dynamic null-free winexec popcalc shellcode (205 bytes)
|
shellcode exploit |
windows_x86-64 vulnerability |
2021-05-03 |
piwigo 11.3.0 - 'language' sql
|
webapps exploit |
php vulnerability |
2021-05-03 |
voting system 1.0 - time based sqli(unauthenticated sql injection)
|
webapps exploit |
php vulnerability |
2021-05-03 |
getsimple cms custom js 0.1 - csrf to xss to rce
|
webapps exploit |
php vulnerability |
2021-04-30 |
gnu wget < 1.18 - arbitrary file upload / remote code execution (2)
|
remote exploit |
linux vulnerability |
2021-04-30 |
moodle 3.6.1 - persistent cross-site scripting (xss)
|
webapps exploit |
php vulnerability |
2021-04-29 |
nodebb plugin emoji 3.2.1 - arbitrary file write
|
webapps exploit |
multiple vulnerability |
2021-04-29 |
shortcut hotkey exploitation - paper (hebrew)
|
papers exploit |
windows vulnerability |
2021-04-29 |
fogproject 1.5.9 - file upload rce (authenticated)
|
webapps exploit |
php vulnerability |
2021-04-29 |
cacti 1.2.12 - 'filter' sql injection / remote code execution
|
webapps exploit |
php vulnerability |
2021-04-28 |
kirby cms 3.5.3.1 - 'file' cross-site scripting (xss)
|
webapps exploit |
php vulnerability |
2021-04-27 |
wordpress plugin wpgraphql 1.3.5 - denial of service
|
dos exploit |
php vulnerability |
2021-04-27 |
montiorr 1.7.6m - file upload to xss
|
webapps exploit |
php vulnerability |
2021-04-27 |
kimai 1.14 - csv injection
|
webapps exploit |
php vulnerability |
2021-04-26 |
seo panel 4.8.0 - 'order_col' blind sql injection (2)
|
webapps exploit |
php vulnerability |
2021-04-26 |
openplc 3 - remote code execution (authenticated)
|
webapps exploit |
python vulnerability |
2021-04-26 |
hasura graphql 1.3.3 - remote code execution
|
webapps exploit |
multiple vulnerability |