Exploit 2022

Exploit 2022(417)- H 2022 2021 2020 2019 2018 2017 2016 2015 2014 2013 2012 2011 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001 2000

2022 - January February March April May June July August September October November December

2022-11-11	SmartRG Router SR510n 2.6.13 - Remote Code Execution	Remote	Hardware
2022-11-11	CVAT 2.0 - Server Side Request Forgery	WebApps	Python
2022-11-11	IOTransfer V4 - Unquoted Service Path	Local	Windows
2022-11-11	AVEVA InTouch Access Anywhere Secure Gateway 2020 R2 - Path Traversal	Remote	Hardware
2022-11-11	MSNSwitch Firmware MNT.2408 - Remote Code Execution	Remote	Hardware
2022-11-11	Open Web Analytics 1.7.3 - Remote Code Execution	WebApps	PHP
2022-11-11	MSNSwitch Firmware MNT.2408 - Remote Code Execution	Remote	Hardware
2022-11-11	AVEVA InTouch Access Anywhere Secure Gateway 2020 R2 - Path Traversal	Remote	Hardware
2022-11-11	IOTransfer V4 - Unquoted Service Path	Local	Windows
2022-11-11	CVAT 2.0 - Server Side Request Forgery	WebApps	Python
2022-11-11	SmartRG Router SR510n 2.6.13 - Remote Code Execution	Remote	Hardware
2022-10-17	Wordpress Plugin ImageMagick-Engine 1.7.4 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-10-06	Wordpress Plugin Zephyr Project Manager 3.2.42 - Multiple SQLi	WebApps	PHP
2022-09-23	TP-Link Tapo c200 1.1.15 - Remote Code Execution (RCE)	WebApps	Hardware
2022-09-23	Feehi CMS 2.1.1 - Remote Code Execution (Authenticated)	WebApps	PHP
2022-09-23	Teleport v10.1.1 - Remote Code Execution (RCE)	Remote	Multiple
2022-09-23	Wordpress Plugin WP-UserOnline 2.88.0 - Stored Cross Site Scripting (XSS)	WebApps	PHP
2022-09-23	Wordpress Plugin 3dady real-time web stats 1.0 - Stored Cross Site Scripting (XSS)	WebApps	PHP
2022-09-23	Aero CMS v0.0.1 - SQLi	WebApps	PHP
2022-09-23	Testa 3.5.1 Online Test Management System - Reflected Cross-Site Scripting (XSS)	WebApps	PHP
2022-09-21	Wifi HD Wireless Disk Drive 11 - Local File Inclusion	Remote	iOS
2022-09-21	WiFiMouse 1.8.3.4 - Remote Code Execution (RCE)	Remote	Windows
2022-09-20	Mobile Mouse 3.6.0.4 - Remote Code Execution (RCE)	Remote	Windows
2022-09-20	Airspan AirSpot 5410 version 0.3.4.1 - Remote Code Execution (RCE)	Remote	Linux
2022-09-20	Buffalo TeraStation Network Attached Storage (NAS) 1.66 - Authentication Bypass	WebApps	Hardware
2022-09-20	Bookwyrm v0.4.3 - Authentication Bypass	WebApps	Multiple
2022-09-20	Blink1Control2 2.2.7 - Weak Password Encryption	Local	Multiple
2022-09-15	Gitea 1.16.6 - Remote Code Execution (RCE) (Metasploit)	WebApps	Multiple
2022-09-02	Sophos XG115w Firewall 17.0.10 MR-10 - Authentication Bypass	WebApps	Hardware
2022-09-02	WordPress Plugin Testimonial Slider and Showcase 2.2.6 - Stored Cross-Site Scripting (XSS)	WebApps	PHP
2022-09-02	WordPress Plugin Netroics Blog Posts Grid 1.0 - Stored Cross-Site Scripting (XSS)	WebApps	PHP
2022-08-09	Prestashop blockwishlist module 2.1.0 - SQLi	WebApps	PHP
2022-08-09	Feehi CMS 2.1.1 - Stored Cross-Site Scripting (XSS)	WebApps	PHP
2022-08-09	ThingsBoard 3.3.1 'name' - Stored Cross-Site Scripting (XSS)	WebApps	Multiple
2022-08-09	ThingsBoard 3.3.1 'description' - Stored Cross-Site Scripting (XSS)	WebApps	Multiple
2022-08-09	PAN-OS 10.0 - Remote Code Execution (RCE) (Authenticated)	Remote	Multiple
2022-08-02	uftpd 2.10 - Directory Traversal (Authenticated)	Remote	Linux
2022-08-01	Wavlink WN533A8 - Cross-Site Scripting (XSS)	WebApps	Hardware
2022-08-01	Wavlink WN530HG4 - Password Disclosure	WebApps	Hardware
2022-08-01	Wavlink WN533A8 - Password Disclosure	WebApps	Hardware
2022-08-01	WordPress Plugin Duplicator 1.4.6 - Unauthenticated Backup Download	WebApps	PHP
2022-08-01	WordPress Plugin Duplicator 1.4.7 - Information Disclosure	WebApps	PHP
2022-08-01	CuteEditor for PHP 6.6 - Directory Traversal	WebApps	PHP
2022-08-01	mPDF 7.0 - Local File Inclusion	WebApps	PHP
2022-08-01	Omnia MPX 1.5.0+r1 - Path Traversal	Remote	Hardware
2022-08-01	NanoCMS v0.4 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-08-01	Webmin 1.996 - Remote Code Execution (RCE) (Authenticated)	WebApps	Linux
2022-08-01	Easy Chat Server 3.1 - Remote Stack Buffer Overflow (SEH)	Remote	Windows
2022-07-29	Geonetwork 4.2.0 - XML External Entity (XXE)	WebApps	Multiple
2022-07-29	rpc.py 0.6.0 - Remote Code Execution (RCE)	Remote	Python
2022-07-29	Dingtian-DT-R002 3.1.276A - Authentication Bypass	WebApps	Hardware
2022-07-29	Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path	Local	Windows
2022-07-29	Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Directory Traversal	WebApps	Hardware
2022-07-29	Schneider Electric SpaceLogic C-Bus Home Controller (5200WHC2) - Remote Code Execution	Remote	Hardware
2022-07-29	WordPress Plugin WP-UserOnline 2.87.6 - Stored Cross-Site Scripting (XSS)	WebApps	PHP
2022-07-26	WordPress Plugin Visual Slide Box Builder 3.2.9 - SQLi	WebApps	PHP
2022-07-21	IOTransfer 4.0 - Remote Code Execution (RCE)	Remote	Windows
2022-07-21	Kite 1.2021.610.0 - Unquoted Service Path	Local	Windows
2022-07-21	Magnolia CMS 6.2.19 - Stored Cross-Site Scripting (XSS)	WebApps	PHP
2022-07-21	Dr. Fone 4.0.8 - 'net_updater32.exe' Unquoted Service Path	Local	Windows
2022-07-21	CodoForum v5.1 - Remote Code Execution (RCE)	WebApps	PHP
2022-07-21	OctoBot WebInterface 0.4.3 - Remote Code Execution (RCE)	WebApps	Multiple
2022-07-11	Nginx 1.20.0 - Denial of Service (DOS)	Remote	Multiple
2022-07-01	WiFi Mouse 1.7.8.5 - Remote Code Execution(v2)	Remote	Windows
2022-06-27	WordPress Plugin Weblizar 8.9 - Backdoor	WebApps	PHP
2022-06-27	WSO2 Management Console (Multiple Products) - Unauthenticated Reflected Cross-Site Scripting (XSS)	WebApps	PHP
2022-06-27	Mailhog 1.0.1 - Stored Cross-Site Scripting (XSS)	WebApps	Multiple
2022-06-14	Real Player v.20.0.8.310 G2 Control - 'DoGoToURL()' Remote Code Execution (RCE)	Local	Windows
2022-06-14	Real Player 16.0.3.51 - 'external::Import()' Directory Traversal to Remote Code Execution (RCE)	Local	Windows
2022-06-14	Avantune Genialcloud ProJ 10 - Cross-Site Scripting (XSS)	WebApps	Multiple
2022-06-14	Marval MSM v14.19.0.12476 - Remote Code Execution (RCE) (Authenticated)	Remote	Windows
2022-06-14	Virtua Software Cobranca 12S - SQLi	Remote	Windows
2022-06-14	Marval MSM v14.19.0.12476 - Cross-Site Request Forgery (CSRF)	Remote	Windows
2022-06-14	HP LaserJet Professional M1210 MFP Series Receive Fax Service - Unquoted Service Path	Local	Windows
2022-06-14	Algo 8028 Control Panel - Remote Code Execution (RCE) (Authenticated)	Remote	Hardware
2022-06-14	Pandora FMS v7.0NG.742 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-06-14	TP-Link Router AX50 firmware 210730 - Remote Code Execution (RCE) (Authenticated)	Remote	Hardware
2022-06-14	phpIPAM 1.4.5 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-06-14	Sourcegraph Gitserver 3.36.3 - Remote Code Execution (RCE)	Remote	Multiple
2022-06-14	ChurchCRM 4.4.5 - SQLi	WebApps	PHP
2022-06-14	Old Age Home Management System 1.0 - SQLi Authentication Bypass	WebApps	PHP
2022-06-14	SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting (XSS)	WebApps	Hardware
2022-06-14	SolarView Compact 6.00 - 'pow' Cross-Site Scripting (XSS)	WebApps	Hardware
2022-06-14	SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting (XSS)	WebApps	Hardware
2022-06-14	Old Age Home Management System 1.0 - SQLi Authentication Bypass	WebApps	PHP
2022-06-14	ChurchCRM 4.4.5 - SQLi	WebApps	PHP
2022-06-14	Sourcegraph Gitserver 3.36.3 - Remote Code Execution (RCE)	Remote	Multiple
2022-06-14	phpIPAM 1.4.5 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-06-14	TP-Link Router AX50 firmware 210730 - Remote Code Execution (RCE) (Authenticated)	Remote	Hardware
2022-06-14	Pandora FMS v7.0NG.742 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-06-14	Algo 8028 Control Panel - Remote Code Execution (RCE) (Authenticated)	Remote	Hardware
2022-06-14	HP LaserJet Professional M1210 MFP Series Receive Fax Service - Unquoted Service Path	Local	Windows
2022-06-14	Virtua Software Cobranca 12S - SQLi	Remote	Windows
2022-06-14	Marval MSM v14.19.0.12476 - Cross-Site Request Forgery (CSRF)	Remote	Windows
2022-06-14	Marval MSM v14.19.0.12476 - Remote Code Execution (RCE) (Authenticated)	Remote	Windows
2022-06-14	Avantune Genialcloud ProJ 10 - Cross-Site Scripting (XSS)	WebApps	Multiple
2022-06-14	Real Player 16.0.3.51 - 'external::Import()' Directory Traversal to Remote Code Execution (RCE)	Local	Windows
2022-06-14	Real Player v.20.0.8.310 G2 Control - 'DoGoToURL()' Remote Code Execution (RCE)	Local	Windows
2022-06-10	Confluence Data Center 7.18.0 - Remote Code Execution (RCE)	WebApps	Java
2022-06-10	WordPress Plugin Motopress Hotel Booking Lite 4.2.4 - Stored Cross-Site Scripting (XSS)	WebApps	PHP
2022-06-03	SolarView Compact 6.00 - Directory Traversal	Remote	Hardware
2022-06-03	Schneider Electric C-Bus Automation Controller (5500SHAC) 1.10 - Remote Code Execution (RCE)	Remote	Hardware
2022-06-03	Telesquare SDT-CW3B1 1.1.0 - OS Command Injection	Remote	Hardware
2022-06-03	Microweber CMS 1.2.15 - Account Takeover	WebApps	PHP
2022-06-03	Zyxel USG FLEX 5.21 - OS Command Injection	Remote	Hardware
2022-06-03	Contao 4.13.2 - Cross-Site Scripting (XSS)	WebApps	PHP
2022-05-25	qdPM 9.1 - Remote Code Execution (RCE) (Authenticated) (v2)	WebApps	PHP
2022-05-23	m1k1o's Blog v.10 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-05-23	OpenCart v3.x Newsletter Module - Blind SQLi	WebApps	PHP
2022-05-17	Showdoc 2.10.3 - Stored Cross-Site Scripting (XSS)	WebApps	PHP
2022-05-17	SolarView Compact 6.0 - OS Command Injection	Remote	Hardware
2022-05-17	T-Soft E-Commerce 4 - SQLi (Authenticated)	WebApps	Multiple
2022-05-17	T-Soft E-Commerce 4 - 'UrunAdi' Stored Cross-Site Scripting (XSS)	WebApps	Multiple
2022-05-17	Survey Sparrow Enterprise Survey Software 2022 - Stored Cross-Site Scripting (XSS)	WebApps	Multiple
2022-05-17	SDT-CW3B1 1.1.0 - OS Command Injection	Remote	Hardware
2022-05-12	TLR-2005KSH - Arbitrary File Delete	WebApps	Hardware
2022-05-12	Royal Event Management System 1.0 - 'todate' SQL Injection (Authenticated)	WebApps	PHP
2022-05-12	College Management System 1.0 - 'course_code' SQL Injection (Authenticated)	WebApps	PHP
2022-05-12	F5 BIG-IP 16.0.x - Remote Code Execution (RCE)	Remote	Multiple
2022-05-11	TLR-2005KSH - Arbitrary File Upload	WebApps	Hardware
2022-05-11	Ruijie Reyee Mesh Router - Remote Code Execution (RCE) (Authenticated)	Remote	Hardware
2022-05-11	WordPress Plugin stafflist 3.1.2 - SQLi (Authenticated)	WebApps	PHP
2022-05-11	Joomla Plugin SexyPolling 2.1.7 - SQLi	WebApps	PHP
2022-05-11	WordPress Plugin Blue Admin 21.06.01 - Cross-Site Request Forgery (CSRF)	WebApps	PHP
2022-05-11	MyBB 1.8.29 - MyBB 1.8.29 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-05-11	Beehive Forum - Account Takeover	WebApps	PHP
2022-05-11	PHProjekt PhpSimplyGest v1.3. - Stored Cross-Site Scripting (XSS)	WebApps	PHP
2022-05-11	Navigate CMS 2.9.4 - Server-Side Request Forgery (SSRF) (Authenticated)	WebApps	PHP
2022-05-11	Explore CMS 1.0 - SQL Injection	WebApps	PHP
2022-05-11	DLINK DAP-1620 A1 v1.01 - Directory Traversal	Remote	Hardware
2022-05-11	PyScript - Read Remote Python Source Code	Remote	Python
2022-05-11	Google Chrome 78.0.3904.70 - Remote Code Execution	Remote	Multiple
2022-05-11	Tenda HG6 v3.3.0 - Remote Command Injection	Remote	Hardware
2022-05-11	Anuko Time Tracker - SQLi (Authenticated)	WebApps	PHP
2022-05-11	Apache CouchDB 3.2.1 - Remote Code Execution (RCE)	Remote	Linux
2022-05-11	Wondershare Dr.Fone 12.0.7 - Privilege Escalation (InstallAssistService)	Local	Windows
2022-05-11	Wondershare Dr.Fone 12.0.7 - Privilege Escalation (ElevationService)	Local	Windows
2022-05-11	ExifTool 12.23 - Arbitrary Code Execution	Local	Linux
2022-05-11	e107 CMS v3.2.1 - Multiple Vulnerabilities	WebApps	PHP
2022-05-11	Cyclos 4.14.7 - 'groupId' DOM Based Cross-Site Scripting (XSS)	WebApps	Multiple
2022-05-11	Cyclos 4.14.7 - DOM Based Cross-Site Scripting (XSS)	WebApps	Multiple
2022-05-11	DLINK DIR850 - Open Redirect	Remote	Hardware
2022-05-11	DLINK DIR850 - Insecure Access Control	Remote	Hardware
2022-05-11	Prime95 Version 30.7 build 9 - Remote Code Execution (RCE)	Remote	Windows
2022-05-11	ManageEngine ADSelfService Plus Build 6118 - NTLMv2 Hash Exposure	Remote	Windows
2022-05-11	Wondershare Dr.Fone 11.4.10 - Insecure File Permissions	Local	Windows
2022-05-11	TCQ - ITeCProteccioAppServer.exe - Unquoted Service Path	Local	Windows
2022-05-11	UDisk Monitor Z5 Phone - 'MonServiceUDisk.exe' Unquoted Service Path	Local	Windows
2022-05-11	SAP BusinessObjects Intelligence 4.3 - XML External Entity (XXE)	Remote	Multiple
2022-05-11	CSZ CMS 1.3.0 - 'Multiple' Blind SQLi	WebApps	PHP
2022-05-11	Bitrix24 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-05-11	Bookeen Notea - Directory Traversal	Remote	Android
2022-05-11	Magento eCommerce CE v2.3.5-p2 - Blind SQLi	WebApps	PHP
2022-05-11	WordPress Plugin Advanced Uploader 4.2 - Arbitrary File Upload (Authenticated)	WebApps	PHP
2022-05-11	USR IOT 4G LTE Industrial Cellular VPN Router 1.0.36 - Remote Root Backdoor	Remote	Hardware
2022-05-11	WebTareas 2.4 - Blind SQLi (Authenticated)	WebApps	PHP
2022-05-11	Akka HTTP 10.1.14 - Denial of Service	Remote	Multiple
2022-05-11	Microfinance Management System 1.0 - 'customer_number' SQLi	WebApps	PHP
2022-05-11	ImpressCMS v1.4.4 - Unrestricted File Upload	WebApps	PHP
2022-04-26	GitLab 14.9 - Stored Cross-Site Scripting (XSS)	WebApps	Ruby
2022-04-26	Gitlab 14.9 - Authentication Bypass	WebApps	Ruby
2022-04-19	EaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path	Local	Windows
2022-04-19	PTPublisher v2.3.4 - Unquoted Service Path	Local	Windows
2022-04-19	Fuel CMS 1.5.0 - Cross-Site Request Forgery (CSRF)	WebApps	PHP
2022-04-19	WordPress Plugin Elementor 3.6.2 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-04-19	PKP Open Journals System 3.3 - Cross-Site Scripting (XSS)	WebApps	PHP
2022-04-19	Delta Controls enteliTOUCH 3.40.3935 - Cookie User Password Disclosure	Remote	Hardware
2022-04-19	Delta Controls enteliTOUCH 3.40.3935 - Cross-Site Scripting (XSS)	Remote	Hardware
2022-04-19	Delta Controls enteliTOUCH 3.40.3935 - Cross-Site Request Forgery (CSRF)	Remote	Hardware
2022-04-19	REDCap 11.3.9 - Stored Cross Site Scripting	WebApps	PHP
2022-04-19	WordPress Plugin Popup Maker 1.16.5 - Stored Cross-Site Scripting (Authenticated)	WebApps	PHP
2022-04-19	Verizon 4G LTE Network Extender - Weak Credentials Algorithm	Remote	Hardware
2022-04-19	WordPress Plugin Videos sync PDF 1.7.4 - Stored Cross Site Scripting (XSS)	WebApps	PHP
2022-04-19	ManageEngine ADSelfService Plus 6.1 - User Enumeration	Remote	Windows
2022-04-19	Scriptcase 9.7 - Remote Code Execution (RCE)	WebApps	PHP
2022-04-19	Easy Appointments 1.4.2 - Information Disclosure	WebApps	PHP
2022-04-19	Zyxel NWA-1100-NH - Command Injection	Remote	Hardware
2022-04-19	WordPress Plugin Motopress Hotel Booking Lite 4.2.4 - SQL Injection	WebApps	PHP
2022-04-19	Microsoft Exchange Active Directory Topology 15.0.847.40 - 'Service MSExchangeADTopology' Unquoted Service Path	Local	Windows
2022-04-19	Microsoft Exchange Mailbox Assistants 15.0.847.40 - 'Service MSExchangeMailboxAssistants' Unquoted Service Path	Local	Windows
2022-04-11	Razer Sila - Command Injection	WebApps	Hardware
2022-04-11	Razer Sila - Local File Inclusion (LFI)	WebApps	Hardware
2022-04-11	Telesquare TLR-2855KS6 - Arbitrary File Deletion	WebApps	Hardware
2022-04-11	Telesquare TLR-2855KS6 - Arbitrary File Creation	WebApps	Hardware
2022-04-11	Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion (LFI)	Remote	Linux
2022-04-11	SAM SUNNY TRIPOWER 5.0 - Insecure Direct Object Reference (IDOR)	WebApps	Hardware
2022-04-11	MiniTool Partition Wizard - Unquoted Service Path	Local	Windows
2022-04-07	binutils 2.37 - Objdump Segmentation Fault	Local	Linux
2022-04-07	Opmon 9.11 - Cross-site Scripting	Remote	Multiple
2022-04-07	Kramer VIAware - Remote Code Execution (RCE) (Root)	Remote	Hardware
2022-04-07	ICEHRM 31.0.0.0S - Cross-site Request Forgery (CSRF) to Account Deletion	WebApps	PHP
2022-04-07	qdPM 9.2 - Cross-site Request Forgery (CSRF)	WebApps	PHP
2022-04-07	minewebcms 1.15.2 - Cross-site Scripting (XSS)	WebApps	PHP
2022-04-07	Sherpa Connector Service v2020.2.20328.2050 - Unquoted Service Path	Local	Windows
2022-04-07	KLiK Social Media Website 1.0 - 'Multiple' SQLi	WebApps	PHP
2022-04-07	Zenario CMS 9.0.54156 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-03-30	WordPress Plugin Easy Cookie Policy 1.6.2 - Broken Access Control to Stored XSS	WebApps	PHP
2022-03-30	Kramer VIAware 2.5.0719.1034 - Remote Code Execution (RCE)	Remote	Hardware
2022-03-30	PostgreSQL 9.3-11.7 - Remote Code Execution (RCE) (Authenticated)	Remote	Multiple
2022-03-30	CSZ CMS 1.2.9 - 'Multiple' Blind SQLi(Authenticated)	WebApps	PHP
2022-03-30	WordPress Plugin admin-word-count-column 2.2 - Local File Read	WebApps	PHP
2022-03-30	WordPress Plugin video-synchro-pdf 1.7.4 - Local File Inclusion	WebApps	PHP
2022-03-30	WordPress Plugin cab-fare-calculator 1.0.3 - Local File Inclusion	WebApps	PHP
2022-03-30	WordPress Plugin Curtain 1.0.2 - Cross-site Request Forgery (CSRF)	WebApps	PHP
2022-03-30	Drupal avatar_uploader v7.x-1.0-beta8 - Cross Site Scripting (XSS)	WebApps	PHP
2022-03-30	Atom CMS 2.0 - Remote Code Execution (RCE)	WebApps	PHP
2022-03-30	ImpressCMS 1.4.2 - Remote Code Execution (RCE)	WebApps	PHP
2022-03-23	WordPress Plugin amministrazione-aperta 3.7.3 - Local File Read - Unauthenticated	WebApps	PHP
2022-03-23	ProtonVPN 1.26.0 - Unquoted Service Path	Local	Windows
2022-03-22	ICT Protege GX/WX 2.08 - Client-Side SHA1 Password Hash Disclosure	Remote	Hardware
2022-03-22	ICT Protege GX/WX 2.08 - Stored Cross-Site Scripting (XSS)	Remote	Hardware
2022-03-22	Sysax FTP Automation 6.9.0 - Privilege Escalation	Local	Windows
2022-03-22	Ivanti Endpoint Manager 4.6 - Remote Code Execution (RCE)	Remote	Multiple
2022-03-22	iRZ Mobile Router - CSRF to RCE	Remote	Hardware
2022-03-22	ICEHRM 31.0.0.0S - Cross-site Request Forgery (CSRF) to Account Takeover	WebApps	PHP
2022-03-21	Wordpress Plugin iQ Block Country 1.2.13 - Arbitrary File Deletion via Zip Slip (Authenticated)	WebApps	PHP
2022-03-16	Apache APISIX 2.12.1 - Remote Code Execution (RCE)	Remote	Multiple
2022-03-16	Tiny File Manager 2.4.6 - Remote Code Execution (RCE)	WebApps	PHP
2022-03-16	Hikvision IP Camera - Backdoor	Remote	Hardware
2022-03-16	Pluck CMS 4.7.16 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-03-16	Moodle 3.11.5 - SQLi (Authenticated)	WebApps	PHP
2022-03-14	VIVE Runtime Service - 'ViveAgentService' Unquoted Service Path	Local	Windows
2022-03-14	Baixar GLPI Project 9.4.6 - SQLi	WebApps	Multiple
2022-03-11	Tdarr 2.00.15 - Command Injection	Remote	Multiple
2022-03-11	Seowon SLR-120 Router - Remote Code Execution (Unauthenticated)	Remote	Hardware
2022-03-10	Sandboxie-Plus 5.50.2 - 'Service SbieSvc' Unquoted Service Path	Local	Windows
2022-03-10	WOW21 5.0.1.9 - 'Service WOW21_Service' Unquoted Service Path	Local	Windows
2022-03-10	Sony playmemories home - 'PMBDeviceInfoProvider' Unquoted Service Path	Local	Windows
2022-03-10	Zabbix 5.0.17 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-03-10	BattlEye 0.9 - 'BEService' Unquoted Service Path	Local	Windows
2022-03-10	McAfee(R) Safe Connect VPN - Unquoted Service Path Elevation Of Privilege	Local	Windows
2022-03-09	Wondershare Dr.Fone 12.0.18 - 'Wondershare InstallAssist' Unquoted Service Path	Local	Windows
2022-03-09	Printix Client 1.3.1106.0 - Privilege Escalation	Local	Windows
2022-03-09	Audio Conversion Wizard v2.01 - Buffer Overflow	Local	Windows
2022-03-09	Cobian Backup 0.9 - Unquoted Service Path	Local	Windows
2022-03-09	Webmin 1.984 - Remote Code Execution (Authenticated)	WebApps	Linux
2022-03-08	Linux Kernel 5.8 < 5.16.11 - Local Privilege Escalation (DirtyPipe)	Local	Linux
2022-03-07	Foxit PDF Reader 11.0 - Unquoted Service Path	Local	Windows
2022-03-07	Malwarebytes 4.5 - Unquoted Service Path	Local	Windows
2022-03-07	Cloudflare WARP 1.4 - Unquoted Service Path	Local	Windows
2022-03-07	Private Internet Access 3.3 - 'pia-service' Unquoted Service Path	Local	Windows
2022-03-07	Hasura GraphQL 2.2.0 - Information Disclosure	WebApps	Multiple
2022-03-07	Attendance and Payroll System v1.0 - SQLi Authentication Bypass	WebApps	PHP
2022-03-07	Attendance and Payroll System v1.0 - Remote Code Execution (RCE)	WebApps	PHP
2022-03-07	part-db 0.5.11 - Remote Code Execution (RCE)	WebApps	PHP
2022-03-07	Spring Cloud Gateway 3.1.0 - Remote Code Execution (RCE)	WebApps	Java
2022-03-02	Printix Client 1.3.1106.0 - Remote Code Execution (RCE)	Remote	Windows
2022-03-02	Zyxel ZyWALL 2 Plus Internet Security Appliance - Cross-Site Scripting (XSS)	WebApps	Multiple
2022-03-02	Prowise Reflect v1.0.9 - Remote Keystroke Injection	Remote	Windows
2022-03-02	Xerte 3.9 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-03-02	Xerte 3.10.3 - Directory Traversal (Authenticated)	WebApps	PHP
2022-02-28	WAGO 750-8212 PFC200 G2 2ETH RS - Privilege Escalation	Remote	Hardware
2022-02-28	Casdoor 1.13.0 - SQL Injection (Unauthenticated)	WebApps	Multiple
2022-02-28	Cobian Backup Gravity 11.2.0.582 - 'CobianBackup11' Unquoted Service Path	Local	Windows
2022-02-28	Cobian Backup 11 Gravity 11.2.0.582 - 'Password' Denial of Service (PoC)	Local	Windows
2022-02-28	Cobian Reflector 0.9.93 RC1 - 'Password' Denial of Service (PoC)	Local	Windows
2022-02-28	Cipi Control Panel 3.1.15 - Stored Cross-Site Scripting (XSS) (Authenticated)	WebApps	Linux
2022-02-24	Wondershare MirrorGo 2.0.11.346 - Insecure File Permissions	Local	Windows
2022-02-23	Microweber CMS 1.2.10 - Local File Inclusion (Authenticated) (Metasploit)	WebApps	PHP
2022-02-23	WebHMI 4.1 - Stored Cross Site Scripting (XSS) (Authenticated)	WebApps	PHP
2022-02-23	WebHMI 4.1.1 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-02-23	ICL ScadaFlex II SCADA Controllers SC-1/SC-2 1.03.07 - Remote File CRUD	Remote	Hardware
2022-02-23	Student Record System 1.0 - 'cid' SQLi (Authenticated)	WebApps	PHP
2022-02-23	Adobe ColdFusion 11 - LDAP Java Object Deserialization Remode Code Execution (RCE)	Remote	Windows
2022-02-23	aaPanel 6.8.21 - Directory Traversal (Authenticated)	WebApps	Linux
2022-02-23	Air Cargo Management System v1.0 - SQLi	WebApps	PHP
2022-02-23	Simple Real Estate Portal System 1.0 - 'id' SQLi	WebApps	PHP
2022-02-21	Microsoft Gaming Services 2.52.13001.0 - Unquoted Service Path	Local	Windows
2022-02-21	Dbltek GoIP - Local File Inclusion	WebApps	Hardware
2022-02-21	FileCloud 21.2 - Cross-Site Request Forgery (CSRF)	WebApps	PHP
2022-02-21	Cyclades Serial Console Server 3.3.0 - Local Privilege Escalation	Local	Hardware
2022-02-21	WordPress Plugin WP User Frontend 3.5.25 - SQLi (Authenticated)	WebApps	PHP
2022-02-21	Thinfinity VirtualUI 2.5.26.2 - Information Disclosure	WebApps	Multiple
2022-02-21	Thinfinity VirtualUI 2.5.41.0 - IFRAME Injection	WebApps	Multiple
2022-02-21	Cab Management System 1.0 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-02-21	Microweber 1.2.11 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-02-21	Cab Management System 1.0 - 'id' SQLi (Authenticated)	WebApps	PHP
2022-02-21	WordPress Plugin Perfect Survey - 1.5.1 - SQLi (Unauthenticated)	WebApps	PHP
2022-02-21	HMA VPN 5.3 - Unquoted Service Path	Local	Windows
2022-02-18	Connectify Hotspot 2018 'ConnectifyService' - Unquoted Service Path	Local	Windows
2022-02-18	File Sanitizer for HP ProtectTools 5.0.1.3 - 'HPFSService' Unquoted Service Path	Local	Windows
2022-02-18	Intel(R) Management Engine Components 6.0.0.1189 - 'LMS' Unquoted Service Path	Local	Windows
2022-02-18	Bluetooth Application 5.4.277 - 'BlueSoleilCS' Unquoted Service Path	Local	Windows
2022-02-18	TOSHIBA DVD PLAYER Navi Support Service - 'TNaviSrv' Unquoted Service Path	Local	Windows
2022-02-18	Fortinet Fortimail 7.0.1 - Reflected Cross-Site Scripting (XSS)	WebApps	Multiple
2022-02-18	Wondershare UBackit 2.0.5 - 'wsbackup' Unquoted Service Path	Local	Windows
2022-02-18	Wondershare FamiSafe 1.0 - 'FSService' Unquoted Service Path	Local	Windows
2022-02-18	Wondershare MobileTrans 3.5.9 - 'ElevationService' Unquoted Service Path	Local	Windows
2022-02-18	Wondershare Dr.Fone 11.4.9 - 'DFWSIDService' Unquoted Service Path	Local	Windows
2022-02-18	Hotel Druid 3.0.3 - Remote Code Execution (RCE)	WebApps	PHP
2022-02-18	WordPress Plugin dzs-zoomsounds 6.60 - Remote Code Execution (RCE) (Unauthenticated)	WebApps	PHP
2022-02-18	WordPress Plugin MasterStudy LMS 2.7.5 - Unauthenticated Admin Account Creation	WebApps	PHP
2022-02-16	WordPress Plugin Error Log Viewer 1.1.1 - Arbitrary File Clearing (Authenticated)	WebApps	PHP
2022-02-16	Emerson PAC Machine Edition 9.80 Build 8695 - 'TrapiServer' Unquoted Service Path	Local	Windows
2022-02-16	Network Video Recorder NVR304-16EP - Reflected Cross-Site Scripting (XSS) (Unauthenticated)	WebApps	Hardware
2022-02-16	TeamSpeak 3.5.6 - Insecure File Permissions	Local	Windows
2022-02-16	H3C SSL VPN - Username Enumeration	Remote	Hardware
2022-02-16	ServiceNow - Username Enumeration	WebApps	Multiple
2022-02-16	Simple Student Quarterly Result/Grade System 1.0 - SQLi Authentication Bypass	WebApps	PHP
2022-02-16	Multi-Vendor Online Groceries Management System 1.0 - 'id' Blind SQL Injection	WebApps	PHP
2022-02-11	Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated)	WebApps	Hardware
2022-02-11	Subrion CMS 4.2.1 - Cross Site Request Forgery (CSRF) (Add Amin)	WebApps	PHP
2022-02-11	Accounting Journal Management System 1.0 - 'id' SQLi (Authenticated)	WebApps	PHP
2022-02-10	WordPress Plugin Jetpack 9.1 - Cross Site Scripting (XSS)	WebApps	PHP
2022-02-10	WordPress Plugin Contact Form Builder 1.6.1 - Cross-Site Scripting (XSS)	WebApps	PHP
2022-02-10	WordPress Plugin Secure Copy Content Protection and Content Locking 2.8.1 - SQL-Injection (Unauthenticated)	WebApps	PHP
2022-02-10	Home Owners Collection Management System 1.0 - 'id' Blind SQL Injection	WebApps	PHP
2022-02-10	Home Owners Collection Management System 1.0 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-02-10	Home Owners Collection Management System 1.0 - Account Takeover (Unauthenticated)	WebApps	PHP
2022-02-10	Hospital Management Startup 1.0 - 'Multiple' SQLi	WebApps	PHP
2022-02-10	Cain & Abel 4.9.56 - Unquoted Service Path	Local	Windows
2022-02-09	AtomCMS v2.0 - SQLi	WebApps	PHP
2022-02-09	Exam Reviewer Management System 1.0 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-02-09	Exam Reviewer Management System 1.0 - ‘id’ SQL Injection	WebApps	PHP
2022-02-08	WordPress Plugin CP Blocks 1.0.14 - Stored Cross Site Scripting (XSS)	WebApps	PHP
2022-02-08	WordPress Plugin Security Audit 1.0.0 - Stored Cross Site Scripting (XSS)	WebApps	PHP
2022-02-08	Wordpress Plugin Simple Job Board 2.9.3 - Local File Inclusion	WebApps	PHP
2022-02-08	Wing FTP Server 4.3.8 - Remote Code Execution (RCE) (Authenticated)	Remote	Windows
2022-02-08	WordPress Plugin International Sms For Contact Form 7 Integration V1.2 - Cross Site Scripting (XSS)	WebApps	PHP
2022-02-08	Hospital Management System 4.0 - 'multiple' SQL Injection	WebApps	PHP
2022-02-08	FileBrowser 2.17.2 - Cross Site Request Forgery (CSRF) to Remote Code Execution (RCE)	WebApps	Multiple
2022-02-08	Strapi CMS 3.0.0-beta.17.4 - Set Password (Unauthenticated) (Metasploit)	WebApps	NodeJS
2022-02-08	Hotel Reservation System 1.0 - SQLi (Unauthenticated)	WebApps	PHP
2022-02-04	Servisnet Tessa - Add sysAdmin User (Unauthenticated) (Metasploit)	WebApps	Multiple
2022-02-04	Servisnet Tessa - MQTT Credentials Dump (Unauthenticated) (Metasploit)	WebApps	Multiple
2022-02-04	Servisnet Tessa - Privilege Escalation (Metasploit)	WebApps	Multiple
2022-02-04	WordPress Plugin IP2Location Country Blocker 2.26.7 - Stored Cross Site Scripting (XSS) (Authenticated)	WebApps	PHP
2022-02-04	FLAME II MODEM USB - Unquoted Service Path	Local	Windows
2022-02-04	WBCE CMS 1.5.2 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-02-02	WordPress Plugin Learnpress 4.1.4.1 - Arbitrary Image Renaming	WebApps	PHP
2022-02-02	WordPress Plugin Post Grid 2.1.1 - Cross Site Scripting (XSS)	WebApps	PHP
2022-02-02	WordPress Plugin Product Slider for WooCommerce 1.13.21 - Cross Site Scripting (XSS)	WebApps	PHP
2022-02-02	WordPress Plugin Contact Form Check Tester 1.0.2 - Broken Access Control	WebApps	PHP
2022-02-02	PHP Unit 4.8.28 - Remote Code Execution (RCE) (Unauthenticated)	WebApps	PHP
2022-02-02	Huawei DG8045 Router 1.0 - Credential Disclosure	WebApps	Hardware
2022-02-02	Moodle 3.11.4 - SQL Injection	WebApps	PHP
2022-02-02	PHP Restaurants 1.0 - SQLi (Unauthenticated)	WebApps	PHP
2022-02-02	Wordpress Plugin 404 to 301 2.0.2 - SQL-Injection (Authenticated)	WebApps	PHP
2022-02-02	WordPress Plugin Domain Check 1.0.16 - Reflected Cross-Site Scripting (XSS) (Authenticated)	WebApps	PHP
2022-02-02	Fetch Softworks Fetch FTP Client 5.8 - Remote CPU Consumption (Denial of Service)	Local	macOS
2022-02-02	Wordpress Plugin Download Monitor WordPress V 4.4.4 - SQL Injection (Authenticated)	WebApps	PHP
2022-02-02	Chamilo LMS 1.11.14 - Account Takeover	WebApps	PHP
2022-02-02	uBidAuction v2.0.1 - 'Multiple' Cross Site Scripting (XSS)	WebApps	PHP
2022-02-02	Ametys CMS v4.4.1 - Cross Site Scripting (XSS)	WebApps	Java
2022-02-02	Mozilla Firefox 67 - Array.pop JIT Type Confusion	Local	Windows
2022-02-02	CONTPAQi(R) AdminPAQ 14.0.0 - Unquoted Service Path	Local	Windows
2022-01-27	PolicyKit-1 0.105-31 - Privilege Escalation	Local	Linux
2022-01-27	Oracle WebLogic Server 14.1.1.0.0 - Local File Inclusion	Remote	Windows
2022-01-27	WordPress Plugin Modern Events Calendar V 6.1 - SQL Injection (Unauthenticated)	WebApps	PHP
2022-01-27	WordPress Plugin RegistrationMagic V 5.0.1.5 - SQL Injection (Authenticated)	WebApps	PHP
2022-01-27	WordPress Plugin Mortgage Calculators WP 1.52 - Stored Cross-Site Scripting (XSS) (Authenticated)	WebApps	PHP
2022-01-25	PHPIPAM 1.4.4 - SQLi (Authenticated)	WebApps	PHP
2022-01-25	Online Project Time Management System 1.0 - Multiple Stored Cross Site Scripting (XSS) (Authenticated)	WebApps	PHP
2022-01-25	Online Project Time Management System 1.0 - SQLi (Authenticated)	WebApps	PHP
2022-01-24	Landa Driving School Management System 2.0.1 - Arbitrary File Upload	WebApps	PHP
2022-01-19	Affiliate Pro 1.7 - 'Multiple' Cross Site Scripting (XSS)	WebApps	PHP
2022-01-19	Rocket LMS 1.1 - Persistent Cross Site Scripting (XSS)	WebApps	PHP
2022-01-19	uDoctorAppointment v2.1.1 - 'Multiple' Cross Site Scripting (XSS)	WebApps	PHP
2022-01-18	Creston Web Interface 1.0.0.2159 - Credential Disclosure	WebApps	Hardware
2022-01-18	Nyron 1.0 - SQLi (Unauthenticated)	WebApps	ASPX
2022-01-18	Simple Chatbot Application 1.0 - 'message' Blind SQLi	WebApps	PHP
2022-01-18	Simple Chatbot Application 1.0 - Remote Code Execution (RCE)	WebApps	PHP
2022-01-18	OpenBMCS 2.4 - Information Disclosure	WebApps	PHP
2022-01-18	OpenBMCS 2.4 - Server Side Request Forgery (SSRF) (Unauthenticated)	WebApps	PHP
2022-01-18	OpenBMCS 2.4 - Create Admin / Remote Privilege Escalation	WebApps	PHP
2022-01-18	OpenBMCS 2.4 - SQLi (Authenticated)	WebApps	PHP
2022-01-18	OpenBMCS 2.4 - Cross Site Request Forgery (CSRF)	WebApps	PHP
2022-01-18	Online Resort Management System 1.0 - SQLi (Authenticated)	WebApps	PHP
2022-01-18	Archeevo 5.0 - Local File Inclusion	Remote	Windows
2022-01-18	WorkTime 10.20 Build 4967 - Unquoted Service Path	Local	Windows
2022-01-13	WordPress Core 5.8.2 - 'WP_Query' SQL Injection	WebApps	PHP
2022-01-13	Online Diagnostic Lab Management System 1.0 - SQL Injection (Unauthenticated)	WebApps	PHP
2022-01-13	Online Diagnostic Lab Management System 1.0 - Stored Cross Site Scripting (XSS)	WebApps	PHP
2022-01-13	Online Diagnostic Lab Management System 1.0 - Account Takeover (Unauthenticated)	WebApps	PHP
2022-01-13	SalonERP 3.0.1 - 'sql' SQL Injection (Authenticated)	WebApps	PHP
2022-01-13	Hospitals Patient Records Management System 1.0 - 'doctors' Stored Cross Site Scripting (XSS)	WebApps	PHP
2022-01-13	Hospitals Patient Records Management System 1.0 - 'room_list' Stored Cross Site Scripting (XSS)	WebApps	PHP
2022-01-13	Hospitals Patient Records Management System 1.0 - 'room_types' Stored Cross Site Scripting (XSS)	WebApps	PHP
2022-01-12	WordPress Plugin Frontend Uploader 1.3.2 - Stored Cross Site Scripting (XSS) (Unauthenticated)	WebApps	PHP
2022-01-12	Microsoft Windows Defender - Detections Bypass	Local	Windows
2022-01-12	Microsoft Windows .Reg File - Dialog Spoof / Mitigation Bypass	Local	Windows
2022-01-10	CoreFTP Server build 725 - Directory Traversal (Authenticated)	Remote	Windows
2022-01-10	Open-AudIT Community 4.2.0 - Cross-Site Scripting (XSS) (Authenticated)	WebApps	PHP
2022-01-10	VUPlayer 2.49 - '.wax' Local Buffer Overflow (DEP Bypass)	Local	Windows
2022-01-10	Online Railway Reservation System 1.0 - 'Multiple' Stored Cross Site Scripting (XSS) (Unauthenticated)	WebApps	PHP
2022-01-10	Online Railway Reservation System 1.0 - Admin Account Creation (Unauthenticated)	WebApps	PHP
2022-01-10	Online Railway Reservation System 1.0 - Remote Code Execution (RCE) (Unauthenticated)	WebApps	PHP
2022-01-10	Online Railway Reservation System 1.0 - 'id' SQL Injection (Unauthenticated)	WebApps	PHP
2022-01-10	HTTP Commander 3.1.9 - Stored Cross Site Scripting (XSS)	WebApps	Windows
2022-01-07	Online Veterinary Appointment System 1.0 - 'Multiple' SQL Injection	WebApps	PHP
2022-01-05	WordPress Plugin AAWP 3.16 - 'tab' Reflected Cross Site Scripting (XSS) (Authenticated)	WebApps	PHP
2022-01-05	Automox Agent 32 - Local Privilege Escalation	Local	Windows
2022-01-05	Projeqtor v9.3.1 - Stored Cross Site Scripting (XSS)	WebApps	PHP
2022-01-05	Gerapy 0.9.7 - Remote Code Execution (RCE) (Authenticated)	Remote	Python
2022-01-05	Dixell XWEB 500 - Arbitrary File Write	Remote	Hardware
2022-01-05	TermTalk Server 3.24.0.2 - Arbitrary File Read (Unauthenticated)	Remote	Windows
2022-01-05	openSIS Student Information System 8.0 - 'multiple' SQL Injection	WebApps	PHP
2022-01-05	Vodafone H-500-s 3.5.10 - WiFi Password Disclosure	WebApps	Hardware
2022-01-05	Terramaster TOS 4.2.15 - Remote Code Execution (RCE) (Unauthenticated)	WebApps	PHP
2022-01-05	Virtual Airlines Manager 2.6.2 - 'multiple' SQL Injection	WebApps	PHP
2022-01-05	TRIGONE Remote System Monitor 3.61 - Unquoted Service Path	Local	Windows
2022-01-05	BeyondTrust Remote Support 6.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)	WebApps	Multiple
2022-01-05	Hospitals Patient Records Management System 1.0 - Account TakeOver	WebApps	PHP
2022-01-05	Hospitals Patient Records Management System 1.0 - 'id' SQL Injection (Authenticated)	WebApps	PHP
2022-01-05	AWebServer GhostBuilding 18 - Denial of Service (DoS)	Remote	Android
2022-01-05	Hostel Management System 2.1 - Cross Site Scripting (XSS)	WebApps	PHP
2022-01-05	Nettmp NNT 5.1 - SQLi Authentication Bypass	WebApps	PHP
2022-01-05	SAFARI Montage 8.5 - Reflected Cross Site Scripting (XSS)	WebApps	PHP
2022-01-05	Library System in PHP 1.0 - 'publisher name' Stored Cross-Site Scripting (XSS)	WebApps	PHP
2022-01-05	WordPress Plugin The True Ranker 2.2.2 - Arbitrary File Read (Unauthenticated)	WebApps	PHP
2022-01-05	Online Admission System 1.0 - Remote Code Execution (RCE) (Unauthenticated)	WebApps	PHP
2022-01-05	Movie Rating System 1.0 - SQLi to RCE (Unauthenticated)	WebApps	PHP
2022-01-05	Movie Rating System 1.0 - Broken Access Control (Admin Account Creation) (Unauthenticated)	WebApps	PHP
2022-01-05	Accu-Time Systems MAXIMUS 1.0 - Telnet Remote Buffer Overflow (DoS)	Remote	Hardware
2022-01-05	WordPress Plugin WP Visitor Statistics 4.7 - SQL Injection	WebApps	PHP
2022-01-05	ConnectWise Control 19.2.24707 - Username Enumeration	Remote	Multiple
2022-01-05	WordPress Plugin Contact Form Entries 1.1.6 - Cross Site Scripting (XSS) (Unauthenticated)	WebApps	PHP
2022-01-05	RiteCMS 3.1.0 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2022-01-05	RiteCMS 3.1.0 - Arbitrary File Deletion (Authenticated)	WebApps	PHP
2022-01-05	RiteCMS 3.1.0 - Arbitrary File Overwrite (Authenticated)	WebApps	PHP
2022-01-05	Siemens S7 Layer 2 - Denial of Service (DoS)	DoS	Hardware
2022-01-05	CMSimple 5.4 - Cross Site Scripting (XSS)	WebApps	PHP