2020-10-09 |
openmaint 1.1-2.4.2 - arbitrary file upload
|
webapps exploit |
json vulnerability |
2020-10-09 |
dynpg 4.9.1 - persistent cross-site scripting (authenticated)
|
webapps exploit |
php vulnerability |
2020-10-09 |
kentico cms 9.0-12.0.49 - persistent cross site scripting
|
webapps exploit |
php vulnerability |
2020-10-08 |
d-link dsr-250n 3.12 - denial of service (poc)
|
webapps exploit |
hardware vulnerability |
2020-10-08 |
seo panel 4.6.0 - remote code execution
|
webapps exploit |
php vulnerability |
2020-10-07 |
textpattern cms 4.6.2 - 'body' persistent cross-site scripting
|
webapps exploit |
php vulnerability |
2020-10-07 |
bacnet test server 1.01 - remote denial of service (poc)
|
dos exploit |
windows vulnerability |
2020-10-06 |
overlapping ip fragments - paper
|
papers exploit |
multiple vulnerability |
2020-10-06 |
easypms 1.0.0 - authentication bypass
|
webapps exploit |
json vulnerability |
2020-10-06 |
karel ip phone ip1211 web management panel - directory traversal
|
webapps exploit |
hardware vulnerability |
2020-10-05 |
spamtitan 7.07 - unauthenticated remote code execution
|
webapps exploit |
php vulnerability |
2020-10-05 |
moveit transfer 11.1.1 - 'token' unauthenticated sql injection
|
webapps exploit |
multiple vulnerability |
2020-10-02 |
photo share website 1.0 - persistent cross-site scripting
|
webapps exploit |
php vulnerability |
2020-10-02 |
meddream pacs server 6.8.3.751 - remote code execution (authenticated)
|
webapps exploit |
php vulnerability |
2020-10-01 |
typesetter cms 5.1 - 'site title' persistent cross-site scripting
|
webapps exploit |
php vulnerability |
2020-10-01 |
cms made simple 2.2.14 - persistent cross-site scripting (authenticated)
|
webapps exploit |
php vulnerability |
2020-10-01 |
getsimple cms 3.3.16 - persistent cross-site scripting (authenticated)
|
webapps exploit |
php vulnerability |
2020-10-01 |
websitebaker 2.12.2 - 'display_name' sql injection (authenticated)
|
webapps exploit |
php vulnerability |
2020-10-01 |
monocms blog 1.0 - arbitrary file deletion (authenticated)
|
webapps exploit |
php vulnerability |
2020-10-01 |
spinetix fusion digital signage 3.4.8 - username enumeration
|
webapps exploit |
hardware vulnerability |
2020-10-01 |
spinetix fusion digital signage 3.4.8 - cross-site request forgery (add admin)
|
webapps exploit |
hardware vulnerability |
2020-10-01 |
spinetix fusion digital signage 3.4.8 - database backup disclosure
|
webapps exploit |
hardware vulnerability |
2020-10-01 |
brightsign digital signage diagnostic web server 8.2.26 - file delete path traversal
|
webapps exploit |
hardware vulnerability |
2020-10-01 |
brightsign digital signage diagnostic web server 8.2.26 - server-side request forgery (unauthenticated)
|
webapps exploit |
hardware vulnerability |
2020-10-01 |
sony ipela network camera 1.82.01 - 'ftpclient.cgi' remote stack buffer overflow
|
remote exploit |
hardware vulnerability |
2020-09-29 |
spraying owa & abusing mssql - paper
|
papers exploit |
windows vulnerability |
2020-09-29 |
cloudme 1.11.2 - buffer overflow rop (dep,aslr)
|
local exploit |
windows vulnerability |
2020-09-29 |
bearshare lite 5.2.5 - 'advanced search'buffer overflow in (poc)
|
local exploit |
windows vulnerability |
2020-09-29 |
websitebaker 2.12.2 - remote code execution
|
webapps exploit |
php vulnerability |
2020-09-28 |
joplin 1.0.245 - arbitrary code execution (poc)
|
webapps exploit |
multiple vulnerability |
2020-09-28 |
msi ambient link driver 1.0.0.8 - local privilege escalation
|
local exploit |
windows vulnerability |
2020-09-28 |
mida eframework 2.8.9 - remote code execution
|
webapps exploit |
hardware vulnerability |
2020-09-25 |
b-swiss 3 digital signage system 3.6.5 -database disclosure
|
webapps exploit |
multiple vulnerability |
2020-09-25 |
b-swiss 3 digital signage system 3.6.5 - cross-site request forgery (add maintenance admin)
|
webapps exploit |
multiple vulnerability |
2020-09-25 |
anchor cms 0.12.7 - persistent cross-site scripting (authenticated)
|
webapps exploit |
php vulnerability |
2020-09-25 |
bigtree cms 4.4.10 - remote code execution
|
webapps exploit |
php vulnerability |
2020-09-24 |
visitor management system in php 1.0 - persistent cross-site scripting
|
webapps exploit |
php vulnerability |
2020-09-24 |
simple online food ordering system 1.0 - 'id' sql injection (unauthenticated)
|
webapps exploit |
php vulnerability |
2020-09-23 |
ios swift anti-jailbreak bypass with frida - paper
|
papers exploit |
ios vulnerability |
2020-09-23 |
online food ordering system 1.0 - remote code execution
|
webapps exploit |
php vulnerability |
2020-09-22 |
flatpress add blog 1.0.3 - persistent cross-site scripting
|
webapps exploit |
php vulnerability |
2020-09-22 |
comodo unified threat management web console 2.7.0 - remote code execution
|
webapps exploit |
multiple vulnerability |
2020-09-21 |
b-swiss 3 digital signage system 3.6.5 - remote code execution
|
webapps exploit |
multiple vulnerability |
2020-09-21 |
mida eframework 2.9.0 - back door access
|
webapps exploit |
hardware vulnerability |
2020-09-21 |
seat reservation system 1.0 - 'id' sql injection
|
webapps exploit |
php vulnerability |
2020-09-21 |
forensitappxservice 2.2.0.4 - 'forensitappxservice.exe' unquoted service path
|
local exploit |
windows vulnerability |
2020-09-21 |
blackcat cms 1.3.6 - cross-site request forgery
|
webapps exploit |
php vulnerability |
2020-09-21 |
online shop project 1.0 - 'p' sql injection
|
webapps exploit |
php vulnerability |
2020-09-18 |
mantis bug tracker 2.3.0 - remote code execution (unauthenticated)
|
webapps exploit |
php vulnerability |
2020-09-18 |
spamtitan 7.07 - remote code execution (authenticated)
|
webapps exploit |
multiple vulnerability |