Exploit August 2020

Exploit August 2020 - H 2021 2020 2019 2018 2017 2016 2015 2014 2013 2012 2011 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001 2000

2020 - January February March April May June July August September October November December

H Remote Web App Local&Privilege Escalation DoS & PoC ShellCode Exploit Exploit prog. Ex. Techniky Exp. kit Typy Exploitů Exploit Articles

2020-08-31	CMS Made Simple 2.2.14 - Arbitrary File Upload (Authenticated)	WebApps	PHP
2020-08-31	Fuel CMS 1.4.8 - 'fuel_replace_id' SQL Injection (Authenticated)	WebApps	PHP
2020-08-31	Mara CMS 7.5 - Reflective Cross-Site Scripting	WebApps	PHP
2020-08-31	BlazeDVD 7.0 Professional - '.plf' Local Buffer Overflow (SEH,ASLR,DEP)	Local	Windows
2020-08-31	Online Book Store 1.0 - 'id' SQL Injection	WebApps	PHP
2020-08-28	Eibiz i-Media Server Digital Signage 3.8.0 - Privilege Escalation	WebApps	Hardware
2020-08-28	SymphonyCMS 3.0.0 - Persistent Cross-Site Scripting	WebApps	PHP
2020-08-28	Nagios Log Server 2.1.6 - Persistent Cross-Site Scripting	WebApps	Multiple
2020-08-28	Online Shopping Alphaware 1.0 - 'id' SQL Injection	WebApps	PHP
2020-08-27	Wordpress Plugin Autoptimize 2.7.6 - Arbitrary File Upload (Authenticated)	WebApps	PHP
2020-08-27	ASX to MP3 converter 3.1.3.7.2010.11.05 - '.wax' Local Buffer Overflow (DEP,ASLR Bypass) (PoC)	Local	Windows
2020-08-27	Mida eFramework 2.9.0 - Remote Code Execution	WebApps	Multiple
2020-08-26	Eibiz i-Media Server Digital Signage 3.8.0 - Directory Traversal	WebApps	Multiple
2020-08-26	Ericom Access Server x64 9.2.0 - Server-Side Request Forgery	WebApps	Multiple
2020-08-24	Eibiz i-Media Server Digital Signage 3.8.0 - Configuration Disclosure	WebApps	Hardware
2020-08-24	Eibiz i-Media Server Digital Signage 3.8.0 - Authentication Bypass	WebApps	Hardware
2020-08-24	LimeSurvey 4.3.10 - 'Survey Menu' Persistent Cross-Site Scripting	WebApps	PHP
2017-07-24	vBulletin 5.1.2 < 5.1.9 - Unserialize Code Execution (Metasploit)	WebApps	PHP
2020-08-21	Seowon SlC 130 Router - Remote Code Execution	WebApps	Hardware
2020-08-21	Complaint Management System 1.0 - 'cid' SQL Injection	WebApps	PHP
2020-08-20	PNPSCADA 2.200816204020 - 'interf' SQL Injection (Authenticated)	WebApps	Hardware
2020-08-20	ElkarBackup 1.3.3 - Persistent Cross-Site Scripting	WebApps	PHP
2020-08-19	Ruijie Networks Switch eWeb S29_RGOS 11.4 - Directory Traversal	WebApps	Hardware
2020-08-18	Savsoft Quiz 5 - Stored Cross-Site Scripting	WebApps	PHP
2020-08-18	Pharmacy Medical Store and Sale Point 1.0 - 'catid' SQL Injection	WebApps	PHP
2020-08-17	QiHang Media Web Digital Signage 3.0.9 - Remote Code Execution (Unauthenticated)	WebApps	Hardware
2020-08-17	QiHang Media Web Digital Signage 3.0.9 - Remote Code Execution (Unauthenticated)	WebApps	Hardware
2020-08-17	QiHang Media Web Digital Signage 3.0.9 - Unauthenticated Arbitrary File Disclosure	WebApps	Hardware
2020-08-17	QiHang Media Web Digital Signage 3.0.9 - Unauthenticated Arbitrary File Deletion	WebApps	Hardware
2020-08-17	QiHang Media Web Digital Signage 3.0.9 - Cleartext Credential Disclosure	WebApps	Hardware
2020-08-17	Microsoft SharePoint Server 2019 - Remote Code Execution	WebApps	ASPX
2020-08-17	Bludit 3.9.2 - Authentication Bruteforce Mitigation Bypass	WebApps	PHP
2020-08-13	GetSimple CMS Plugin Multi User 1.8.2 - Cross-Site Request Forgery (Add Admin)	WebApps	PHP
2020-08-13	Artica Proxy 4.3.0 - Authentication Bypass	WebApps	Hardware
2020-08-12	vBulletin 5.6.2 - 'widget_tabbedContainer_tab_panel' Remote Code Execution	WebApps	PHP
2020-08-12	CMS Made Simple 2.2.14 - Authenticated Arbitrary File Upload	WebApps	PHP
2020-08-11	Fuel CMS 1.4.7 - 'col' SQL Injection (Authenticated)	WebApps	PHP
2020-08-10	BarcodeOCR 19.3.6 - 'BarcodeOCR' Unquoted Service Path	Local	Windows
2020-08-10	ManageEngine ADSelfService Build prior to 6003 - Remote Code Execution (Unauthenticated)	WebApps	Java
2020-08-10	Warehouse Inventory System 1.0 - Cross-Site Request Forgery (Change Admin Password)	WebApps	PHP
2020-08-07	Daily Expenses Management System 1.0 - 'item' SQL Injection	WebApps	PHP
2020-08-07	All-Dynamics Digital Signage System 2.0.2 - Cross-Site Request Forgery (Add Admin)	WebApps	Hardware
2020-08-06	CodeMeter 6.60 - 'CodeMeter.exe' Unquoted Service Path	Local	Windows
2020-08-06	Victor CMS 1.0 - 'Search' SQL Injection	WebApps	PHP
2020-08-05	Stock Management System 1.0 - Authentication Bypass	WebApps	PHP
2020-08-05	QlikView 12.50.20000.0 - 'FTP Server Address' Denial of Service (PoC)	DoS	Windows
2020-08-05	ACTi NVR3 Standard or Professional Server 3.0.12.42 - Denial of Service (PoC)	DoS	Windows
2020-08-04	Daily Expenses Management System 1.0 - 'username' SQL Injection	WebApps	PHP
2020-08-04	RTSP for iOS 1.0 - 'IP Address' Denial of Service (PoC)	DoS	Windows
2020-08-04	Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service (PoC)	DoS	Windows
2020-08-04	Pi-hole 4.3.2 - Remote Code Execution (Authenticated)	WebApps	Python