2020-06-04 |
clinic management system 1.0 - authenticated arbitrary file upload
|
webapps exploit |
php vulnerability |
2020-06-04 |
oriol espinal cms 1.0 - 'id' sql injection
|
webapps exploit |
php vulnerability |
2020-06-04 |
navigate cms 2.8.7 - ''sidx' sql injection (authenticated)
|
webapps exploit |
php vulnerability |
2020-06-04 |
clinic management system 1.0 - unauthenticated remote code execution
|
webapps exploit |
php vulnerability |
2020-06-04 |
iobit uninstaller 9.5.0.15 - 'iobit uninstaller service' unquoted service path
|
local exploit |
windows vulnerability |
2020-06-04 |
hostel management system 2.0 - 'id' sql injection (unauthenticated)
|
webapps exploit |
php vulnerability |
2020-06-04 |
aircontrol 1.4.2 - preauth remote code execution
|
webapps exploit |
hardware vulnerability |
2020-06-02 |
vcloud director 9.7.0.15498291 - remote code execution
|
remote exploit |
linux vulnerability |
2020-06-02 |
opencart 3.0.3.2 - stored cross site scripting (authenticated)
|
webapps exploit |
php vulnerability |
2020-06-02 |
clinic management system 1.0 - authentication bypass
|
webapps exploit |
php vulnerability |
2020-06-02 |
microsoft windows - 'smbghost' remote code execution
|
remote exploit |
windows vulnerability |
2020-06-01 |
quickbox pro 2.1.8 - authenticated remote code execution
|
webapps exploit |
php vulnerability |
2020-06-01 |
vmware vcenter server 6.7 - authentication bypass
|
webapps exploit |
multiple vulnerability |
2020-06-01 |
wordpress plugin bbpress 2.5 - unauthenticated privilege escalation
|
webapps exploit |
php vulnerability |
2020-05-29 |
crystal shard http-protection 0.2.0 - ip spoofing bypass
|
webapps exploit |
multiple vulnerability |
2020-05-29 |
wordpress plugin multi-scheduler 1.0.0 - cross-site request forgery (delete user)
|
webapps exploit |
php vulnerability |
2020-05-28 |
qnap qts and photo station 6.0.3 - remote command execution
|
webapps exploit |
php vulnerability |
2020-05-28 |
eyoucms 1.4.6 - persistent cross-site scripting
|
webapps exploit |
php vulnerability |
2020-05-28 |
online-exam-system 2015 - 'fid' sql injection
|
webapps exploit |
php vulnerability |
2020-05-28 |
nokia vitalsuite spm 2020 - 'username' sql injection
|
webapps exploit |
multiple vulnerability |
2020-05-27 |
oxid eshop 6.3.4 - 'sorting' sql injection
|
webapps exploit |
php vulnerability |
2020-05-27 |
kuicms php ee 2.0 - persistent cross-site scripting
|
webapps exploit |
php vulnerability |
2020-05-27 |
osticket 1.14.1 - 'saved search' persistent cross-site scripting
|
webapps exploit |
php vulnerability |
2020-05-27 |
osticket 1.14.1 - 'ticket queue' persistent cross-site scripting
|
webapps exploit |
php vulnerability |
2020-05-27 |
limesurvey 4.1.11 - 'permission roles' persistent cross-site scripting
|
webapps exploit |
php vulnerability |
2020-05-27 |
online marriage registration system 1.0 - persistent cross-site scripting
|
webapps exploit |
php vulnerability |
2020-05-20 |
bind - 'tsig' denial of service
|
dos exploit |
multiple vulnerability |
2020-05-26 |
wordpress plugin drag and drop file upload contact form 1.3.3.2 - remote code execution
|
webapps exploit |
php vulnerability |
2020-05-26 |
pi-hole 4.4.0 - remote code execution (authenticated)
|
webapps exploit |
linux vulnerability |
2020-05-26 |
joomla! plugin xcloner backup 3.5.3 - local file inclusion (authenticated)
|
webapps exploit |
php vulnerability |
2020-05-26 |
streamripper32 2.6 - buffer overflow (poc)
|
local exploit |
windows vulnerability |
2020-05-26 |
open-audit 3.3.0 - reflective cross-site scripting (authenticated)
|
webapps exploit |
php vulnerability |
2020-05-26 |
openemr 5.0.1 - remote code execution
|
webapps exploit |
php vulnerability |
2020-05-25 |
synology diskstation manager - smart.cgi remote command execution (metasploit)
|
remote exploit |
hardware vulnerability |
2020-05-25 |
plesk/mylittleadmin - viewstate .net deserialization (metasploit)
|
remote exploit |
windows vulnerability |
2020-05-25 |
online discussion forum site 1.0 - remote code execution
|
webapps exploit |
php vulnerability |
2020-05-25 |
victor cms 1.0 - 'add_user' persistent cross-site scripting
|
webapps exploit |
php vulnerability |
2020-05-25 |
goldwave - buffer overflow (seh unicode)
|
local exploit |
windows vulnerability |
2020-05-25 |
wordpress plugin form maker 5.4.1 - 's' sql injection (authenticated)
|
webapps exploit |
php vulnerability |
2020-05-22 |
weblogic server - deserialization rce - badattributevalueexpexception (metasploit)
|
remote exploit |
multiple vulnerability |
2020-05-22 |
vuplayer 2.49 .m3u - local buffer overflow (dep,aslr)
|
local exploit |
windows vulnerability |
2020-05-22 |
gym management system 1.0 - unauthenticated remote code execution
|
webapps exploit |
php vulnerability |
2020-05-22 |
druva insync windows client 6.6.3 - local privilege escalation
|
local exploit |
windows vulnerability |
2020-05-22 |
dolibarr 11.0.3 - persistent cross-site scripting
|
webapps exploit |
php vulnerability |
2020-05-22 |
filetto 1.0 - 'feat' denial of service (poc)
|
dos exploit |
windows vulnerability |
2020-05-22 |
konica minolta ftp utility 1.0 - 'nlst' denial of service (poc)
|
dos exploit |
windows vulnerability |
2020-05-22 |
konica minolta ftp utility 1.0 - 'list' denial of service (poc)
|
dos exploit |
windows vulnerability |
2020-05-21 |
openedx platform ironwood 2.5 - remote code execution
|
webapps exploit |
multiple vulnerability |
2020-05-21 |
cloudme 1.11.2 - buffer overflow (seh,dep,aslr)
|
local exploit |
windows vulnerability |
2020-05-21 |
hunting red team activities with forensic artifacts - paper
|
papers exploit |
multiple vulnerability |