Exploit March 2021

Exploit March 2021 - 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2015 2014 2013 2012 2011 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001 2000

2021 - January February March April May June July August September October November December

2021-03-26	Moodle 3.10.3 - 'label' Persistent Cross Site Scripting	WebApps	PHP
2021-03-26	Regis Inventory And Monitoring System 1.0 - 'Item List' Stored XSS	WebApps	PHP
2021-03-26	GetSimple CMS Custom JS Plugin 0.1 - CSRF to Persistent XSS	WebApps	PHP
2021-03-25	Dolibarr ERP/CRM 11.0.4 - File Upload Restrictions Bypass (Authenticated RCE)	WebApps	PHP
2021-03-25	Genexis Platinum-4410 P4410-V2-1.31A - 'start_addr' Persistent Cross-Site Scripting	WebApps	Hardware
2021-03-25	Linksys EA7500 2.0.8.194281 - Cross-Site Scripting	WebApps	Hardware
2021-03-25	Ovidentia 6 - 'id' SQL injection (Authenticated)	WebApps	PHP
2021-03-24	Ext2Fsd v0.68 - 'Ext2Srv' Unquoted Service Path	Local	Windows
2021-03-23	Codiad 2.8.4 - Remote Code Execution (Authenticated)	WebApps	Multiple
2021-03-23	Elodea Event Collector 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service Path	Local	Windows
2021-03-23	ActivIdentity 8.2 - 'ac.sharedstore' Unquoted Service Path	Local	Windows
2021-03-23	ELAN Touchpad 15.2.13.1_X64_WHQL - 'ETDService' Unquoted Service Path	Local	Windows
2021-03-23	Hi-Rez Studios 5.1.6.3 - 'HiPatchService' Unquoted Service Path	Local	Windows
2021-03-23	Hotel And Lodge Management System 1.0 - 'Customer Details' Stored XSS	WebApps	PHP
2021-03-23	MyBB 1.8.25 - Poll Vote Count SQL Injection	WebApps	PHP
2021-03-22	OSAS Traverse Extension 11 - 'travextensionhostsvc' Unquoted Service Path	Local	Windows
2021-03-22	ProFTPD 1.3.7a - Remote Denial of Service	DoS	Multiple
2021-03-22	MyBB 1.8.25 - Chained Remote Command Execution	WebApps	PHP
2021-03-22	KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Weak Default WiFi Password Algorithm	Remote	Hardware
2021-03-22	MacPaw Encrypto 1.0.1 - 'Encrypto Service' Unquoted Service Path	Local	Windows
2021-03-22	WordPress Plugin Delightful Downloads Jquery File Tree 1.6.6 - Path Traversal	WebApps	PHP
2021-03-22	Winpakpro 4.8 - 'WPCommandFileService' Unquoted Service Path	Local	Windows
2021-03-22	Winpakpro 4.8 - 'ScheduleService' Unquoted Service Path	Local	Windows
2021-03-22	Winpakpro 4.8 - 'GuardTourService' Unquoted Service Path	Local	Windows
2021-03-22	SAPSetup Automatic Workstation Update Service 750 - 'NWSAPAutoWorkstationUpdateSvc' Unquoted Service Path	Local	Windows
2021-03-19	Online News Portal 1.0 - 'Multiple' Stored Cross-Site Scripting	WebApps	PHP
2021-03-19	Online News Portal 1.0 - 'name' SQL Injection	WebApps	PHP
2021-03-19	KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Config Download (Unauthenticated)	WebApps	Hardware
2021-03-19	KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Device Reboot (Unauthenticated)	DoS	Hardware
2021-03-19	KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Factory Reset (Unauthenticated)	WebApps	Hardware
2021-03-19	KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Remote Code Execution	WebApps	Hardware
2021-03-19	KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Hard coded Credentials Shell Access	Remote	Hardware
2021-03-19	KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Authentication Bypass	WebApps	Hardware
2021-03-19	KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Command Injection (Authenticated)	WebApps	Hardware
2021-03-19	SOYAL 701 Client 9.0.1 - Insecure Permissions	Local	Windows
2021-03-19	SOYAL 701 Server 9.0.1 - Insecure Permissions	Local	Windows
2021-03-19	SOYAL Biometric Access Control System 5.0 - 'Change Admin Password' CSRF	WebApps	Hardware
2021-03-19	SOYAL Biometric Access Control System 5.0 - Master Code Disclosure	WebApps	Hardware
2021-03-19	VestaCP 0.9.8 - 'v_sftp_licence' Command Injection	WebApps	Multiple
2021-03-19	Eclipse Mosquitto MQTT broker 2.0.9 - 'mosquitto' Unquoted Service Path	Local	Windows
2021-03-19	Profiling System for Human Resource Management 1.0 - Remote Code Execution (Unauthenticated)	WebApps	PHP
2021-03-19	BRAdmin Professional 3.75 - 'BRA_Scheduler' Unquoted Service Path	Local	Windows
2021-03-19	Boonex Dolphin 7.4.2 - 'width' Stored XSS	WebApps	PHP
2021-03-19	LiveZilla Server 8.0.1.0 - 'Accept-Language' Reflected XSS	WebApps	PHP
2021-03-19	Plone CMS 5.2.3 - 'Title' Stored XSS	WebApps	Multiple
2021-03-18	Hestia Control Panel 1.3.2 - Arbitrary File Write	WebApps	PHP
2021-03-18	SEO Panel 4.8.0 - 'order_col' Blind SQL Injection	WebApps	PHP
2021-03-18	rConfig 3.9.6 - Arbitrary File Upload to Remote Code Execution (Authenticated)	WebApps	PHP
2021-03-14	Microsoft Exchange 2019 - SSRF to Arbitrary File Write (Proxylogon)	Remote	Windows
2021-03-18	VestaCP 0.9.8 - 'v_interface' Add IP Stored XSS	WebApps	Multiple
2021-03-18	VFS for Git 1.0.21014.1 - 'GVFS.Service' Unquoted Service Path	Local	Windows
2021-03-17	FastStone Image Viewer 7.5 - .cur BITMAPINFOHEADER 'BitCount' Stack Based Buffer Overflow (ASLR & DEP Bypass)	Local	Windows
2021-03-17	VestaCP 0.9.8 - File Upload CSRF	WebApps	Multiple
2021-03-17	WoWonder Social Network Platform 3.1 - 'event_id' SQL Injection	WebApps	PHP
2021-03-16	GeoGebra 3D Calculator 5.0.511.0 - Denial of Service (PoC)	Local	Android
2021-03-16	GeoGebra CAS Calculato‪r‬ 6.0.631.0 - Denial of Service (PoC)	Local	Windows
2021-03-16	GeoGebra Classic 5.0.631.0-d - Denial of Service (PoC)	Local	Windows
2021-03-16	GeoGebra Graphing Calculato‪r‬ 6.0.631.0 - Denial Of Service (PoC)	Local	Windows
2021-03-16	Alphaware E-Commerce System 1.0 - Unauthenicated Remote Code Execution (File Upload + SQL injection)	WebApps	PHP
2021-03-15	SonLogger 4.2.3.3 - Unauthenticated Arbitrary File Upload (Metasploit)	WebApps	Multiple
2021-03-15	Sonlogger 4.2.3.3 - SuperAdmin Account Creation / Information Disclosure	WebApps	Multiple
2021-03-15	openMAINT openMAINT 2.1-3.3-b - 'Multiple' Persistent Cross-Site Scripting	WebApps	Multiple
2021-03-15	Interactive Suite 3.6 - 'eBeam Stylus Driver' Unquoted Service Path	Local	Windows
2021-03-15	eBeam education suite 2.5.0.9 - 'eBeam Device Service' Unquoted Service Path	Local	Windows
2021-03-15	Realtek Wireless LAN Utility 700.1631 - 'Realtek11nSU' Unquoted Service Path	Local	Windows
2021-03-15	QNAP QVR Client 5.0.0.13230 - 'QVRService' Unquoted Service Path	Local	Windows
2021-03-15	rConfig 3.9.6 - 'path' Local File Inclusion (Authenticated)	WebApps	PHP
2021-03-15	MagpieRSS 0.72 - 'url' Command Injection and Server Side Request Forgery	WebApps	PHP
2021-03-15	Zenario CMS 8.8.53370 - 'id' Blind SQL Injection	WebApps	PHP
2021-03-12	Vembu BDR 4.2.0.1 U1 - Multiple Unquoted Service Paths	Local	Windows
2021-03-12	Monitoring System (Dashboard) 1.0 - File Upload RCE (Authenticated)	WebApps	PHP
2021-03-12	Monitoring System (Dashboard) 1.0 - 'uname' SQL Injection	WebApps	PHP
2021-03-11	Nsasoft Hardware Software Inventory 1.6.4.0 - 'multiple' Denial of Service (PoC)	DoS	Windows
2021-03-11	MyBB OUGC Feedback Plugin 1.8.22 - Cross-Site Scripting	WebApps	PHP
2021-03-11	NuCom 11N Wireless Router 5.07.90 - Remote Privilege Escalation	WebApps	Hardware
2021-03-10	Atlassian JIRA 8.11.1 - User Enumeration	WebApps	Multiple
2021-03-09	bVPN 2.5.1 - 'waselvpnserv' Unquoted Service Path	Local	Windows
2021-03-09	Sandboxie Plus v0.7.2 - 'SbieSvc' Unquoted Service Path	Local	Windows
2021-03-09	FreeLAN 2.2 - 'FreeLAN Service' Unquoted Service Path	Local	Windows
2021-03-09	Golden FTP Server 4.70 - 'PASS' Buffer Overflow (2)	Remote	Windows
2021-03-08	GLPI 9.5.3 - 'fromtype' Unsafe Reflection	WebApps	PHP
2021-03-08	Joomla JCK Editor 6.4.4 - 'parent' SQL Injection (2)	WebApps	PHP
2021-03-08	Pingzapper 2.3.1 - 'PingzapperSvc' Unquoted Service Path	Local	Windows
2021-03-08	Hotel and Lodge Management System 1.0 - Remote Code Execution (Unauthenticated)	WebApps	PHP
2021-03-08	Configuration Tool 1.6.53 - 'OpLclSrv' Unquoted Service Path	Local	Windows
2021-03-08	Print Job Accounting 4.4.10 - 'OkiJaSvc' Unquoted Service Path	Local	Windows
2021-03-05	Fluig 1.7.0 - Path Traversal	WebApps	Multiple
2021-03-05	CatDV 9.2 - RMI Authentication Bypass	Remote	Java
2021-03-04	Textpattern 4.8.3 - Remote code execution (Authenticated) (2)	WebApps	PHP
2021-03-04	Web Based Quiz System 1.0 - 'eid' Union Based Sql Injection (Authenticated)	WebApps	PHP
2021-03-04	Online Ordering System 1.0 - Blind SQL Injection (Unauthenticated)	WebApps	PHP
2021-03-04	Textpattern CMS 4.9.0-dev - 'Excerpt' Persistent Cross-Site Scripting (XSS)	WebApps	PHP
2021-03-04	Textpattern CMS 4.8.4 - 'Comments' Persistent Cross-Site Scripting (XSS)	WebApps	PHP
2021-03-04	Online Ordering System 1.0 - Arbitrary File Upload to Remote Code Execution	WebApps	PHP
2021-03-04	e107 CMS 2.3.0 - CSRF	WebApps	PHP
2021-03-03	AnyDesk 5.5.2 - Remote Code Execution	Remote	Linux
2021-03-03	Local Services Search Engine Management System (LSSMES) 1.0 - Blind & Error based SQL injection (Authenticated)	WebApps	PHP
2021-03-03	Local Services Search Engine Management System (LSSMES) 1.0 - 'name' Persistent Cross-Site Scripting (XSS)	WebApps	PHP
2021-03-02	Zen Cart 1.5.7b - Remote Code Execution (Authenticated)	WebApps	PHP
2021-03-02	Web Based Quiz System 1.0 - 'name' Persistent/Stored Cross-Site Scripting	WebApps	PHP
2021-03-02	Tiny Tiny RSS - Remote Code Execution	WebApps	PHP
2021-03-02	Web Based Quiz System 1.0 - 'MCQ options' Persistent/Stored Cross-Site Scripting	WebApps	PHP
2021-03-01	Covid-19 Contact Tracing System 1.0 - Remote Code Execution (Unauthenticated)	WebApps	PHP
2021-03-01	Online Catering Reservation System 1.0 - Remote Code Execution (Unauthenticated)	WebApps	PHP
2021-03-01	VMware vCenter Server 7.0 - Unauthenticated File Upload	WebApps	Multiple
2021-03-01	WiFi Mouse 1.7.8.5 - Remote Code Execution	Remote	Windows
2021-03-01	FortiLogger 4.4.2.2 - Unauthenticated Arbitrary File Upload (Metasploit)	WebApps	Multiple