2021-12-09 |
employees daily task management system 1.0 - 'username' sqli authentication bypass
|
webapps exploit |
php vulnerability |
2021-12-09 |
grafana 8.3.0 - directory traversal and arbitrary file read
|
webapps exploit |
multiple vulnerability |
2021-12-09 |
wordpress plugin catch themes demo import 1.6.1 - remote code execution (rce) (authenticated)
|
webapps exploit |
php vulnerability |
2021-12-09 |
student management system 1.0 - sqli authentication bypass
|
webapps exploit |
php vulnerability |
2021-12-09 |
testlink 1.19 - arbitrary file download (unauthenticated)
|
webapps exploit |
php vulnerability |
2021-12-09 |
microsoft mshtml remote code execution - paper
|
papers exploit |
windows vulnerability |
2021-12-09 |
raspberry pi 5.10 - default credentials
|
remote exploit |
linux vulnerability |
2021-12-09 |
mail information gathering appscript - paper
|
papers exploit |
multiple vulnerability |
2021-12-09 |
mtputty 1.0.1.21 - ssh password disclosure
|
local exploit |
windows vulnerability |
2021-12-09 |
limesurvey 5.2.4 - remote code execution (rce) (authenticated)
|
webapps exploit |
php vulnerability |
2021-12-09 |
chikitsa patient management system 2.0.2 - 'backup' remote code execution (rce) (authenticated)
|
webapps exploit |
php vulnerability |
2021-12-09 |
chikitsa patient management system 2.0.2 - 'plugin' remote code execution (rce) (authenticated)
|
webapps exploit |
php vulnerability |
2021-12-06 |
croogo 3.0.2 - remote code execution (authenticated)
|
webapps exploit |
php vulnerability |
2021-12-06 |
auerswald compact 8.0b - multiple backdoors
|
remote exploit |
hardware vulnerability |
2021-12-06 |
auerswald compact 8.0b - arbitrary file disclosure
|
remote exploit |
hardware vulnerability |
2021-12-06 |
auerswald compact 8.0b - privilege escalation
|
remote exploit |
hardware vulnerability |
2021-12-06 |
hcl lotus notes v12 - unquoted service path
|
local exploit |
windows vulnerability |
2021-12-06 |
auerswald comfortel 2.8f - authentication bypass
|
remote exploit |
hardware vulnerability |
2021-12-03 |
wordpress plugin dzs zoomsounds 6.45 - arbitrary file read (unauthenticated)
|
webapps exploit |
php vulnerability |
2021-12-03 |
wordpress plugin slider by soliloquy 2.6.2 - 'title' stored cross site scripting (xss) (authenticated)
|
webapps exploit |
php vulnerability |
2021-12-03 |
wordpress plugin all-in-one video gallery plugin 2.4.9 - local file inclusion (lfi)
|
webapps exploit |
php vulnerability |
2021-12-03 |
online magazine management system 1.0 - sqli authentication bypass
|
webapps exploit |
php vulnerability |
2021-12-03 |
online pre-owned/used car showroom management system 1.0 -sqli authentication bypass
|
webapps exploit |
php vulnerability |
2021-12-01 |
millegpg5 5.7.2 luglio 2021 - local privilege escalation
|
local exploit |
windows vulnerability |
2021-12-01 |
online enrollment management system in php and paypal 1.0 - 'u_name' stored cross-site scripting
|
webapps exploit |
php vulnerability |
2021-11-30 |
laundry booking management system 1.0 - remote code execution (rce)
|
webapps exploit |
php vulnerability |
2021-11-29 |
opencart 3.0.3.8 - sessjion injection
|
webapps exploit |
php vulnerability |
2021-11-29 |
orangescrum 1.8.0 - 'multiple' cross-site scripting (xss) (authenticated)
|
webapps exploit |
multiple vulnerability |
2021-11-29 |
orangescrum 1.8.0 - 'multiple' sql injection (authenticated)
|
webapps exploit |
multiple vulnerability |
2021-11-29 |
apache http server 2.4.50 path traversal and code execution - paper
|
papers exploit |
linux vulnerability |
2021-11-29 |
orangescrum 1.8.0 - privilege escalation (authenticated)
|
webapps exploit |
multiple vulnerability |
2021-11-29 |
polkit authentication bypass local privesc - paper
|
papers exploit |
linux vulnerability |
2021-11-26 |
wireshark for newbies - paper (spanish)
|
papers exploit |
multiple vulnerability |
2021-11-26 |
bagisto 1.3.3 - client-side template injection
|
webapps exploit |
multiple vulnerability |
2021-11-24 |
cmsimple 5.4 - local file inclusion (lfi) to remote code execution (rce) (authenticated)
|
webapps exploit |
php vulnerability |
2021-11-24 |
remote code execution in whatsapp - paper (spanish)
|
papers exploit |
multiple vulnerability |
2021-11-24 |
httpdebuggerpro 9.11 - unquoted service path
|
local exploit |
windows vulnerability |
2021-11-23 |
flex 1085 web 1.6.0 - html injection
|
webapps exploit |
multiple vulnerability |
2021-11-23 |
bus pass management system 1.0 - 'search' sql injection
|
webapps exploit |
php vulnerability |
2021-11-23 |
webrun 3.6.0.42 - 'p_0' sql injection
|
webapps exploit |
multiple vulnerability |
2021-11-23 |
linux kernel 5.1.x - 'ptrace_traceme' pkexec local privilege escalation (2)
|
local exploit |
linux vulnerability |
2021-11-23 |
wordpress plugin wp guppy 1.1 - wp-json api sensitive information disclosure
|
webapps exploit |
php vulnerability |
2021-11-23 |
gnu gdbserver 9.2 - remote command execution (rce)
|
remote exploit |
linux vulnerability |
2021-11-22 |
aimeos laravel ecommerce platform 2021.10 lts - 'sort' sql injection
|
webapps exploit |
php vulnerability |
2021-11-22 |
print nightmare - paper
|
papers exploit |
windows vulnerability |
2021-11-22 |
modbus slave 7.3.1 - buffer overflow (dos)
|
dos exploit |
windows vulnerability |
2021-11-22 |
pinkie 2.15 - tftp remote buffer overflow (poc)
|
dos exploit |
windows vulnerability |
2021-11-17 |
wordpress plugin smart product review 1.0.4 - arbitrary file upload
|
webapps exploit |
php vulnerability |
2021-11-17 |
gitlab 13.10.2 - remote code execution (rce) (unauthenticated)
|
webapps exploit |
ruby vulnerability |
2021-11-17 |
suitecrm 7.11.18 - remote code execution (rce) (authenticated) (metasploit)
|
webapps exploit |
php vulnerability |