Exploit July 2021

Exploit July - 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2015 2014 2013 2012 2011 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001 2000

2021 - January February March April May June July August September October November December

2021-07-29	Oracle Fatwire 6.3 - Multiple Vulnerabilities	WebApps	Multiple
2021-07-29	CloverDX 5.9.0 - Cross-Site Request Forgery (CSRF) to Remote Code Execution (RCE)	WebApps	Java
2021-07-29	Care2x Integrated Hospital Info System 2.7 - 'Multiple' SQL Injection	WebApps	PHP
2021-07-29	IntelliChoice eFORCE Software Suite 2.5.9 - Username Enumeration	WebApps	ASPX
2021-07-29	Longjing Technology BEMS API 1.21 - Remote Arbitrary File Download	WebApps	Hardware
2021-07-29	Denver IP Camera SHO-110 - Unauthenticated Snapshot	WebApps	Hardware
2021-07-28	TripSpark VEO Transportation - Blind SQL Injection	WebApps	Windows
2021-07-28	Denver Smart Wifi Camera SHC-150 - 'Telnet' Remote Code Execution (RCE)	Remote	Hardware
2021-07-28	Event Registration System with QR Code 1.0 - Authentication Bypass & RCE	WebApps	PHP
2021-07-27	Customer Relationship Management System (CRM) 1.0 - Sql Injection Authentication Bypass	WebApps	PHP
2021-07-27	PHP 7.3.15-3 - 'PHP_SESSION_UPLOAD_PROGRESS' Session Data Injection	WebApps	PHP
2021-07-26	XOS Shop 1.0.9 - 'Multiple' Arbitrary File Deletion (Authenticated)	WebApps	PHP
2021-07-26	NoteBurner 2.35 - Denial Of Service (DoS) (PoC)	WebApps	Windows
2021-07-26	Leawo Prof. Media 11.0.0.1 - Denial of Service (DoS) (PoC)	DoS	Windows
2021-07-26	Elasticsearch ECE 7.13.3 - Anonymous Database Dump	WebApps	Multiple
2021-07-23	Microsoft SharePoint Server 2019 - Remote Code Execution (2)	WebApps	ASPX
2021-07-23	WordPress Plugin Simple Post 1.1 - 'Text field' Stored Cross-Site Scripting (XSS)	WebApps	PHP
2021-07-23	ElasticSearch 7.13.3 - Memory disclosure	WebApps	Multiple
2021-07-21	CSZ CMS 1.2.9 - 'Multiple' Arbitrary File Deletion	WebApps	PHP
2021-07-21	KevinLAB BEMS 1.0 - File Path Traversal Information Disclosure (Authenticated)	WebApps	Hardware
2021-07-21	KevinLAB BEMS 1.0 - Unauthenticated SQL Injection / Authentication Bypass	WebApps	Hardware
2021-07-21	KevinLAB BEMS 1.0 - Undocumented Backdoor Account	Remote	Hardware
2021-07-20	Webmin 1.973 - 'run.cgi' Cross-Site Request Forgery (CSRF)	WebApps	Linux
2021-07-20	WordPress Plugin KN Fix Your Title 1.0.1 - 'Separator' Stored Cross-Site Scripting (XSS)	WebApps	PHP
2021-07-19	PEEL Shopping 9.3.0 - 'id' Time-based SQL Injection	WebApps	PHP
2021-07-19	Dolibarr ERP/CRM 10.0.6 - Login Brute Force	WebApps	PHP
2021-07-19	WordPress Plugin Mimetic Books 0.2.13 - 'Default Publisher ID field' Stored Cross-Site Scripting (XSS)	WebApps	PHP
2021-07-19	WordPress Plugin LearnPress 3.2.6.8 - Privilege Escalation	WebApps	PHP
2021-07-19	WordPress Plugin LearnPress 3.2.6.7 - 'current_items' SQL Injection (Authenticated)	WebApps	PHP
2021-07-15	Aruba Instant (IAP) - Remote Code Execution	Remote	CGI
2021-07-15	Linux Kernel 2.6.19 < 5.9 - 'Netfilter Local Privilege Escalation	Local	Linux
2021-07-16	Aruba Instant 8.7.1.0 - Arbitrary File Modification	Remote	Hardware
2021-07-16	Seagate BlackArmor NAS sg2000-2000.1331 - Command Injection	WebApps	Hardware
2021-07-16	ForgeRock Access Manager/OpenAM 14.6.3 - Remote Code Execution (RCE) (Unauthenticated)	WebApps	Java
2021-07-16	Argus Surveillance DVR 4.0 - Weak Password Encryption	Local	Windows
2021-07-15	WordPress Plugin Popular Posts 5.3.2 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2021-07-15	osCommerce 2.3.4.1 - Remote Code Execution (2)	WebApps	PHP
2021-07-14	WordPress Plugin Current Book 1.0.1 - 'Book Title and Author field' Stored Cross-Site Scripting (XSS)	WebApps	PHP
2021-07-13	Garbage Collection Management System 1.0 - SQL Injection + Arbitrary File Upload	WebApps	PHP
2021-07-13	OpenEMR 5.0.1.3 - 'manage_site_files' Remote Code Execution (Authenticated) (2)	WebApps	PHP
2021-07-13	Invoice System 1.0 - 'Multiple' Stored Cross-Site Scripting (XSS)	WebApps	PHP
2021-07-13	WordPress Plugin WPFront Notification Bar 1.9.1.04012 - Stored Cross-Site Scripting (XSS)	WebApps	PHP
2021-07-13	Apache Tomcat 9.0.0.M1 - Cross-Site Scripting (XSS)	WebApps	Multiple
2021-07-13	Apache Tomcat 9.0.0.M1 - Open Redirect	WebApps	Multiple
2021-07-09	Zoo Management System 1.0 - 'Multiple' Stored Cross-Site-Scripting (XSS)	WebApps	PHP
2021-07-09	Church Management System 1.0 - SQL Injection (Authentication Bypass) + Arbitrary File Upload + RCE	WebApps	PHP
2021-07-08	Wordpress Plugin SP Project & Document Manager 4.21 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2021-07-08	Online Covid Vaccination Scheduler System 1.0 - Arbitrary File Upload to Remote Code Execution (Unauthenticated)	WebApps	PHP
2021-07-08	Wyomind Help Desk 1.3.6 - Remote Code Execution (RCE)	WebApps	Multiple
2021-07-08	Employee Record Management System 1.2 - Stored Cross-Site Scripting (XSS)	WebApps	PHP
2021-07-08	Exam Hall Management System 1.0 - Unrestricted File Upload + RCE (Unauthenticated)	WebApps	PHP
2021-07-07	WordPress Plugin Plainview Activity Monitor 20161228 - Remote Code Execution (RCE) (Authenticated) (2)	WebApps	PHP
2021-07-07	Online Covid Vaccination Scheduler System 1.0 - 'username' time-based blind SQL Injection	WebApps	PHP
2021-07-07	Rocket.Chat 3.12.1 - NoSQL Injection to RCE (Unauthenticated) (2)	WebApps	Linux
2021-07-06	WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 - Directory Traversal	WebApps	PHP
2021-07-06	Phone Shop Sales Managements System 1.0 - 'Multiple' Arbitrary File Upload to Remote Code Execution	WebApps	PHP
2021-07-06	Phone Shop Sales Managements System 1.0 - Authentication Bypass (SQLi)	WebApps	PHP
2021-07-06	Visual Tools DVR VX16 4.2.28 - Local Privilege Escalation	WebApps	Hardware
2021-07-06	Exam Hall Management System 1.0 - Unrestricted File Upload (Unauthenticated)	WebApps	PHP
2021-07-06	Billing System Project 1.0 - Remote Code Execution (RCE) (Unauthenticated)	WebApps	PHP
2021-07-06	Pallets Werkzeug 0.15.4 - Path Traversal	WebApps	Python
2021-07-06	Black Box Kvm Extender 3.4.31307 - Local File Inclusion	WebApps	Hardware
2021-07-06	Netgear DGN2200v1 - Remote Command Execution (RCE) (Unauthenticated)	WebApps	Hardware
2021-07-06	Visual Tools DVR VX16 4.2.28.0 - OS Command Injection (Unauthenticated)	WebApps	Multiple
2021-07-06	perfexcrm 1.10 - 'State' Stored Cross-site scripting (XSS)	WebApps	Multiple
2021-07-05	Ricon Industrial Cellular Router S9922XL - Remote Command Execution (RCE)	WebApps	Hardware
2021-07-05	TextPattern CMS 4.9.0-dev - Remote Command Execution (RCE) (Authenticated)	WebApps	PHP
2021-07-05	Simple Client Management System 1.0 - Remote Code Execution (RCE)	WebApps	PHP
2021-07-05	Wordpress Plugin Backup Guard 1.5.8 - Remote Code Execution (Authenticated)	WebApps	PHP
2021-07-05	Church Management System 1.0 - 'password' SQL Injection (Authentication Bypass)	WebApps	PHP
2021-07-05	Church Management System 1.0 - 'Multiple' Stored Cross-Site Scripting (XSS)	WebApps	PHP
2021-07-05	Church Management System 1.0 - Unrestricted File Upload to Remote Code Execution (Authenticated)	WebApps	PHP
2021-07-05	Online Birth Certificate System 1.1 - 'Multiple' Stored Cross-Site Scripting (XSS)	WebApps	PHP
2021-07-05	Online Voting System 1.0 - SQLi (Authentication Bypass) + Remote Code Execution (RCE)	WebApps	PHP
2021-07-05	OpenEMR 5.0.1.7 - 'fileName' Path Traversal (Authenticated) (2)	WebApps	PHP
2021-07-05	WordPress Plugin WP Learn Manager 1.1.2 - Stored Cross-Site Scripting (XSS)	WebApps	PHP
2021-07-02	Garbage Collection Management System 1.0 - SQL Injection (Unauthenticated)	WebApps	PHP
2021-07-02	Wordpress Plugin Modern Events Calendar 5.16.2 - Event export (Unauthenticated)	WebApps	PHP
2021-07-02	WinWaste.NET 1.0.6183.16475 - Privilege Escalation due Incorrect Access Control	Local	Windows
2021-07-02	Wordpress Plugin Modern Events Calendar 5.16.2 - Remote Code Execution (Authenticated)	WebApps	PHP
2021-07-02	b2evolution 7.2.2 - 'edit account details' Cross-Site Request Forgery (CSRF)	WebApps	PHP
2021-07-02	AKCP sensorProbe SPX476 - 'Multiple' Cross-Site Scripting (XSS)	WebApps	Hardware
2021-07-02	Scratch Desktop 3.17 - Cross-Site Scripting/Remote Code Execution (XSS/RCE)	WebApps	Multiple
2021-07-01	Vianeos OctoPUS 5 - 'login_user' SQLi	WebApps	Multiple
2021-07-01	Wordpress Plugin XCloner 4.2.12 - Remote Code Execution (Authenticated)	WebApps	PHP
2021-07-01	Online Voting System 1.0 - Remote Code Execution (Authenticated)	WebApps	PHP
2021-07-01	Online Voting System 1.0 - Authentication Bypass (SQLi)	WebApps	PHP