Exploit June 2021

Exploit June - H 2021 2020 2019 2018 2017 2016 2015 2014 2013 2012 2011 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001 2000

2021 - January February March April May June July August September October November December

H Remote Web App Local&Privilege Escalation DoS & PoC ShellCode Exploit Exploit prog. Ex. Techniky Exp. kit Typy Exploitů

2021-06-30	Doctors Patients Management System 1.0 - SQL Injection (Authentication Bypass)	WebApps	PHP
2021-06-30	Simple Traffic Offense System 1.0 - Stored Cross Site Scripting (XSS)	WebApps	Multiple
2021-06-30	Apache Superset 1.1.0 - Time-Based Account Enumeration	WebApps	Multiple
2021-06-30	phpAbook 0.9i - SQL Injection	WebApps	PHP
2021-06-29	ES File Explorer 4.1.9.7.4 - Arbitrary File Read	Remote	Android
2021-06-28	Netgear WNAP320 2.0.3 - 'macAddress' Remote Code Execution (RCE) (Unauthenticated)	WebApps	Hardware
2021-06-28	Atlassian Jira Server/Data Center 8.16.0 - Reflected Cross-Site Scripting (XSS)	WebApps	macOS
2021-06-28	WordPress Plugin YOP Polls 6.2.7 - Stored Cross Site Scripting (XSS)	WebApps	PHP
2021-06-25	Lightweight facebook-styled blog 1.3 - Remote Code Execution (RCE) (Authenticated) (Metasploit)	WebApps	PHP
2021-06-25	Simple Client Management System 1.0 - 'uemail' SQL Injection (Unauthenticated)	WebApps	PHP
2021-06-25	Seeddms 5.1.10 - Remote Command Execution (RCE) (Authenticated)	WebApps	PHP
2021-06-25	SAPSprint 7.60 - 'SAPSprint' Unquoted Service Path	Local	Windows
2021-06-24	Huawei dg8045 - Authentication Bypass	WebApps	Hardware
2021-06-24	TP-Link TL-WR841N - Command Injection	WebApps	Hardware
2021-06-24	Adobe ColdFusion 8 - Remote Command Execution (RCE)	WebApps	CFM
2021-06-24	VMware vCenter Server RCE 6.5 / 6.7 / 7.0 - Remote Code Execution (RCE) (Unauthenticated)	WebApps	Multiple
2021-06-23	Simple CRM 3.0 - 'email' SQL injection (Authentication Bypass)	WebApps	PHP
2021-06-23	Online Library Management System 1.0 - Arbitrary File Upload Remote Code Execution (Unauthenticated)	WebApps	PHP
2021-06-23	Online Library Management System 1.0 - 'Search' SQL Injection	WebApps	PHP
2021-06-23	WordPress Plugin Poll, Survey, Questionnaire and Voting system 1.5.2 - 'date_answers' Blind SQL Injection	WebApps	PHP
2021-06-23	WordPress Plugin WP Google Maps 8.1.11 - Stored Cross-Site Scripting (XSS)	WebApps	PHP
2021-06-22	Phone Shop Sales Managements System 1.0 - Insecure Direct Object Reference (IDOR)	WebApps	PHP
2021-06-22	Responsive Tourism Website 3.1 - Remote Code Execution (RCE) (Unauthenticated)	WebApps	PHP
2021-06-22	ASUS DisplayWidget Software 3.4.0.036 - 'ASUSDisplayWidgetService' Unquoted Service Path	Local	Windows
2021-06-21	Remote Mouse GUI 3.008 - Local Privilege Escalation	Local	Windows
2021-06-21	Customer Relationship Management System (CRM) 1.0 - Remote Code Execution	WebApps	PHP
2021-06-21	Lexmark Printer Software G2 Installation Package 1.8.0.0 - 'LM__bdsvc' Unquoted Service Path	Local	Windows
2021-06-21	Simple CRM 3.0 - 'name' Stored Cross site scripting (XSS)	WebApps	PHP
2021-06-21	Simple CRM 3.0 - 'Change user information' Cross-Site Request Forgery (CSRF)	WebApps	PHP
2021-06-21	Websvn 2.6.0 - Remote Code Execution (Unauthenticated)	WebApps	PHP
2021-06-21	iFunbox 4.2 - 'Apple Mobile Device Service' Unquoted Service Path	Local	Windows
2021-06-21	Solaris SunSSH 11.0 x86 - libpam Remote Root (3)	Remote	Solaris
2021-06-21	Wise Care 365 5.6.7.568 - 'WiseBootAssistant' Unquoted Service Path	Local	Windows
2021-06-21	OpenEMR 5.0.1.7 - 'fileName' Path Traversal (Authenticated)	WebApps	PHP
2021-06-18	Node.JS - 'node-serialize' Remote Code Execution (3)	WebApps	NodeJS
2021-06-18	Dlink DSL2750U - 'Reboot' Command Injection	Remote	Hardware
2021-06-18	ICE Hrm 29.0.0.OS - 'xml upload' Stored Cross-Site Scripting (XSS)	WebApps	PHP
2021-06-18	ICE Hrm 29.0.0.OS - 'Account Takeover' Cross-Site Request Forgery (CSRF)	WebApps	PHP
2021-06-18	ICE Hrm 29.0.0.OS - 'Account Takeover' Cross-Site Scripting and Session Fixation	WebApps	PHP
2021-06-17	Online Shopping Portal 3.1 - Remote Code Execution (Unauthenticated)	WebApps	PHP
2021-06-17	Workspace ONE Intelligent Hub 20.3.8.0 - 'VMware Hub Health Monitoring Service' Unquoted Service Path	Local	Windows
2021-06-17	Zoho ManageEngine ServiceDesk Plus MSP 9.4 - User Enumeration	WebApps	Java
2021-06-17	VX Search 13.5.28 - 'Multiple' Unquoted Service Path	Local	Windows
2021-06-17	Dup Scout 13.5.28 - 'Multiple' Unquoted Service Path	Local	Windows
2021-06-17	Disk Savvy 13.6.14 - 'Multiple' Unquoted Service Path	Local	Windows
2021-06-17	Sync Breeze 13.6.18 - 'Multiple' Unquoted Service Path	Local	Windows
2021-06-17	Unified Office Total Connect Now 1.0 - 'data' SQL Injection	WebApps	PHP
2021-06-16	CKEditor 3 - Server-Side Request Forgery (SSRF)	WebApps	PHP
2021-06-16	Teachers Record Management System 1.0 - 'email' Stored Cross-site Scripting (XSS)	WebApps	PHP
2021-06-16	Teachers Record Management System 1.0 - 'Multiple' SQL Injection (Authenticated)	WebApps	PHP
2021-06-16	OpenEMR 5.0.1.3 - '/portal/account/register.php' Authentication Bypass	WebApps	PHP
2021-06-16	Cotonti Siena 0.9.19 - 'maintitle' Stored Cross-Site Scripting	WebApps	PHP
2021-06-16	Disk Sorter Server 13.6.12 - 'Disk Sorter Server' Unquoted Service Path	Local	Windows
2021-06-16	DiskPulse 13.6.14 - 'Multiple' Unquoted Service Path	Local	Windows
2021-06-15	Polkit 0.105-26 0.117-2 - Local Privilege Escalation	Local	Linux
2021-06-15	Brother BRAgent 1.38 - 'WBA_Agent_Client' Unquoted Service Path	Local	Windows
2021-06-15	SysGauge 7.9.18 - ' SysGauge Server' Unquoted Service Path	Local	Windows
2021-06-15	Client Management System 1.1 - 'Search' SQL Injection	WebApps	Tru64
2021-06-15	Client Management System 1.1 - 'username' Stored Cross-Site Scripting (XSS)	WebApps	PHP
2021-06-15	Brother BRPrint Auditor - 'Multiple' Unquoted Service Path	Local	Windows
2021-06-14	Tftpd64 4.64 - 'Tftpd32_svc' Unquoted Service Path	Local	Windows
2021-06-14	Notex the best notes 6.4 - Denial of Service (PoC)	DoS	iOS
2021-06-14	Post-it 5.0.1 - Denial of Service (PoC)	DoS	iOS
2021-06-14	Secure Notepad Private Notes 3.0.3 - Denial of Service (PoC)	DoS	iOS
2021-06-14	WibuKey Runtime 6.51 - 'WkSvW32.exe' Unquoted Service Path	Local	Windows
2021-06-14	OpenEMR 5.0.1.3 - 'manage_site_files' Remote Code Execution (Authenticated)	WebApps	PHP
2021-06-14	Spy Emergency 25.0.650 - 'Multiple' Unquoted Service Path	Local	Windows
2021-06-14	TextPattern CMS 4.8.7 - Remote Command Execution (Authenticated)	WebApps	PHP
2021-06-14	Small CRM 3.0 - 'Authentication Bypass' SQL Injection	WebApps	PHP
2021-06-14	Stock Management System 1.0 - 'user_id' Blind SQL injection (Authenticated)	WebApps	PHP
2021-06-14	COVID19 Testing Management System 1.0 - 'State' Stored Cross-Site-Scripting (XSS)	WebApps	PHP
2021-06-14	GLPI 9.4.5 - Remote Code Execution (RCE)	WebApps	PHP
2021-06-14	Accela Civic Platform 21.1 - 'contactSeqNumber' Insecure Direct Object References (IDOR)	WebApps	Multiple
2021-06-14	Accela Civic Platform 21.1 - 'successURL' Cross-Site-Scripting (XSS)	WebApps	Multiple
2021-06-11	WoWonder Social Network Platform 3.1 - Authentication Bypass	WebApps	PHP
2021-06-11	Zenario CMS 8.8.52729 - 'cID' Blind & Error based SQL injection (Authenticated)	WebApps	PHP
2021-06-11	Solar-Log 500 2.8.2 - Unprotected Storage of Credentials	WebApps	Multiple
2021-06-11	Solar-Log 500 2.8.2 - Incorrect Access Control	WebApps	Multiple
2021-06-11	Grocery crud 1.6.4 - 'order_by' SQL Injection	WebApps	Multiple
2021-06-11	WordPress Plugin Database Backups 1.2.2.6 - 'Database Backup Download' CSRF	WebApps	PHP
2021-06-11	OpenEMR 5.0.0 - Remote Code Execution (Authenticated)	WebApps	PHP
2021-06-11	Microsoft SharePoint Server 16.0.10372.20060 - 'GetXmlDataFromDataSource' Server-Side Request Forgery (SSRF)	WebApps	Windows
2021-06-11	Cerberus FTP Web Service 11 - 'svg' Stored Cross-Site Scripting (XSS)	WebApps	Multiple
2021-06-11	Accela Civic Platform 21.1 - 'servProvCode' Cross-Site-Scripting (XSS)	WebApps	Multiple
2021-06-10	n+otes 1.6.2 - Denial of Service (PoC)	DoS	iOS
2021-06-10	Sticky Notes Widget Version 3.0.6 - Denial of Service (PoC)	DoS	iOS
2021-06-10	memono Notepad Version 4.2 - Denial of Service (PoC)	Local	iOS
2021-06-10	TextPattern CMS 4.8.7 - Stored Cross-Site Scripting (XSS)	WebApps	PHP
2021-06-10	Student Result Management System 1.0 - 'class' SQL Injection	WebApps	PHP
2021-06-09	GravCMS 1.10.7 - Arbitrary YAML Write/Update (Unauthenticated) (2)	WebApps	PHP
2021-06-09	WordPress Plugin visitors-app 0.3 - 'user-agent' Stored Cross-Site Scripting (XSS)	WebApps	PHP
2021-06-09	OpenCart 3.0.3.6 - 'subject' Stored Cross-Site Scripting	WebApps	PHP
2021-06-09	OpenCart 3.0.3.7 - 'Change Password' Cross-Site Request Forgery (CSRF)	WebApps	PHP
2021-06-09	Intelbras Router RF 301K - 'DNS Hijacking' Cross-Site Request Forgery (CSRF)	WebApps	Hardware
2021-06-08	WordPress Plugin wpDiscuz 7.0.4 - Remote Code Execution (Unauthenticated)	WebApps	PHP
2021-06-08	Backup Key Recovery 2.2.7 - Denial of Service (PoC)	Local	Windows
2021-06-08	Nsauditor 3.2.3 - Denial of Service (PoC)	DoS	Windows
2021-06-08	NBMonitor 1.6.8 - Denial of Service (PoC)	DoS	Windows
2021-06-07	Wordpress Plugin wpDiscuz 7.0.4 - Arbitrary File Upload (Unauthenticated)	WebApps	PHP
2021-06-07	Grav CMS 1.7.10 - Server-Side Template Injection (SSTI) (Authenticated)	WebApps	PHP
2021-06-07	Rocket.Chat 3.12.1 - NoSQL Injection to RCE (Unauthenticated)	WebApps	Linux
2021-06-07	IcoFX 2.6 - '.ico' Buffer Overflow SEH + DEP Bypass using JOP	Local	Windows
2021-06-07	WordPress Plugin Smart Slider-3 3.5.0.8 - 'name' Stored Cross-Site Scripting (XSS)	WebApps	PHP
2021-06-07	Sticky Notes & Color Widgets 1.4.2 - Denial of Service (PoC)	DoS	iOS
2021-06-07	OptiLink ONT1GEW GPON 2.1.11_X101 Build 1127.190306 - Remote Code Execution (Authenticated)	WebApps	Hardware
2021-06-04	My Notes Safe 5.3 - Denial of Service (PoC)	DoS	iOS
2021-06-04	Macaron Notes great notebook 5.5 - Denial of Service (PoC)	DoS	iOS
2021-06-04	Color Notes 1.4 - Denial of Service (PoC)	DoS	iOS
2021-06-04	Gitlab 13.10.2 - Remote Code Execution (Authenticated)	WebApps	Ruby
2021-06-04	Monstra CMS 3.0.4 - Remote Code Execution (Authenticated)	WebApps	PHP
2021-06-04	Inkpad Notepad & To do list 4.3.61 - Denial of Service (PoC)	DoS	Android
2021-06-03	4Images 1.8 - 'redirect' Reflected XSS	WebApps	PHP
2021-06-03	Gitlab 13.9.3 - Remote Code Execution (Authenticated)	WebApps	Ruby
2021-06-03	FUDForum 3.1.0 - 'author' Reflected XSS	WebApps	PHP
2021-06-03	FUDForum 3.1.0 - 'srch' Reflected XSS	WebApps	PHP
2021-06-03	Blacknote 2.2.1 - Denial of Service (PoC)	DoS	Android
2021-06-03	Notepad notes 2.6.7 - Denial of Service (PoC)	DoS	Android
2021-06-03	ColorNote 4.1.9 - Denial of Service (PoC)	DoS	Android
2021-06-03	BasicNote 1.1.9 - Denial of Service (PoC)	DoS	Android
2021-06-03	CHIYU IoT Devices - Denial of Service (DoS)	WebApps	Hardware
2021-06-03	CHIYU IoT Devices - 'Telnet' Authentication Bypass	Remote	Hardware
2021-06-03	Seo Panel 4.8.0 - 'from_time' Reflected XSS	WebApps	PHP
2021-06-03	PHP 8.1.0-dev - 'User-Agentt' Remote Code Execution	WebApps	PHP
2021-06-02	Seo Panel 4.8.0 - 'category' Reflected XSS	WebApps	PHP
2021-06-02	Seo Panel 4.8.0 - 'search_name' Reflected XSS	WebApps	PHP
2021-06-02	Products.PluggableAuthService 2.6.0 - Open Redirect	WebApps	Python
2021-06-02	Intel(R) Audio Service x64 01.00.1080.0 - 'IntelAudioService' Unquoted Service Path	Local	Windows
2021-06-02	GetSimple CMS 3.3.4 - Information Disclosure	WebApps	PHP
2021-06-02	Apache Airflow 1.10.10 - 'Example Dag' Remote Code Execution	WebApps	Multiple
2021-06-02	Thecus N4800Eco Nas Server Control Panel - Comand Injection	WebApps	Hardware
2021-06-01	Veyon 4.4.1 - 'VeyonService' Unquoted Service Path	Local	Windows
2021-06-01	Atlassian Jira 8.15.0 - Information Disclosure (Username Enumeration)	WebApps	Multiple
2021-06-01	CHIYU TCP/IP Converter devices - CRLF injection	WebApps	CGI
2021-06-01	CHIYU IoT devices - 'Multiple' Cross-Site Scripting (XSS)	WebApps	CGI
2021-06-01	WordPress Plugin WP Prayer version 1.6.1 - 'prayer_messages' Stored Cross-Site Scripting (XSS) (Authenticated)	WebApps	PHP
2021-06-01	Ubee EVW327 - 'Enable Remote Access' Cross-Site Request Forgery (CSRF)	WebApps	Hardware
2021-06-01	ProjeQtOr Project Management 9.1.4 - Remote Code Execution	WebApps	PHP
2021-06-01	LogonTracer 1.2.0 - Remote Code Execution (Unauthenticated)	WebApps	Multiple
2021-06-01	DupTerminator 1.4.5639.37199 - Denial of Service (PoC)	DoS	Windows