Exploit Web Applications 2020 -

Exploit Web Applications 2020 - Úvod Remote Web App Local&Privilege Escalation DoS & PoC ShellCode Exploit Exploit prog. Ex. Techniky Exp. kit Typy Exploitů Exploit Articles

Web Applications H 2020 2019 2018

2020-12-24	Apartment Visitors Management System 1.0 - Authentication Bypass	WebApps	PHP
2020-12-24	GitLab 11.4.7 - RCE (Authenticated)	WebApps	Ruby
2020-12-24	WordPress Plugin WP-PostRatings 1.86 - 'postratings_image' Cross-Site Scripting	WebApps	PHP
2020-12-24	WordPress Plugin Adning Advertising 1.5.5 - Arbitrary File Upload	WebApps	PHP
2020-12-23	Baby Care System 1.0 - 'roleid' SQL Injection	WebApps	PHP
2020-12-23	TerraMaster TOS 4.2.06 - Unauthenticated Remote Code Execution (Metasploit)	WebApps	Linux
2020-12-23	Sales and Inventory System for Grocery Store 1.0 - Multiple Stored XSS	WebApps	PHP
2020-12-23	Wordpress Epsilon Framework Multiple Themes - Unauthenticated Function Injection	WebApps	PHP
2020-12-23	Online Learning Management System 1.0 - 'id' SQL Injection	WebApps	PHP
2020-12-23	Online Learning Management System 1.0 - Multiple Stored XSS	WebApps	PHP
2020-12-23	Online Learning Management System 1.0 - Authentication Bypass	WebApps	PHP
2020-12-23	Class Scheduling System 1.0 - Multiple Stored XSS	WebApps	PHP
2020-12-22	TerraMaster TOS 4.2.06 - RCE (Unauthenticated)	WebApps	Linux
2020-12-22	Faculty Evaluation System 1.0 - Stored XSS	WebApps	PHP
2020-12-22	Artworks Gallery Management System 1.0 - 'id' SQL Injection	WebApps	PHP
2020-12-22	Webmin 1.962 - 'Package Updates' Escape Bypass RCE (Metasploit)	WebApps	Linux
2020-12-22	WordPress Plugin W3 Total Cache - Unauthenticated Arbitrary File Read (Metasploit)	WebApps	PHP
2020-12-22	Multi Branch School Management System 3.5 - "Create Branch" Stored XSS	WebApps	PHP
2020-12-22	Library Management System 3.0 - "Add Category" Stored XSS	WebApps	PHP
2020-12-22	CSE Bookstore 1.0 - Multiple SQL Injection	WebApps	PHP
2020-12-22	Pandora FMS 7.0 NG 750 - 'Network Scan' SQL Injection (Authenticated)	WebApps	PHP
2020-12-22	Victor CMS 1.0 - File Upload To RCE	WebApps	PHP
2020-12-16	Sony Playstation 4 (PS4) < 7.02 - 'ValidationMessage::buildBubbleTree()' Use-After-Free WebKit Code Execution (PoC)	WebApps	Hardware
2020-11-12	Sony Playstation 4 (PS4) < 6.72 - 'ValidationMessage::buildBubbleTree()' Use-After-Free WebKit Code Execution (PoC)	WebApps	Hardware
2020-12-21	Online Marriage Registration System 1.0 - 'searchdata' SQL Injection	WebApps	PHP
2020-12-21	Point of Sale System 1.0 - Multiple Stored XSS	WebApps	PHP
2020-12-21	Flexmonster Pivot Table & Charts 2.7.17 - 'Remote JSON' Reflected XSS	WebApps	Multiple
2020-12-21	Flexmonster Pivot Table & Charts 2.7.17 - 'To remote CSV' Reflected XSS	WebApps	Multiple
2020-12-21	Flexmonster Pivot Table & Charts 2.7.17 - 'To OLAP' Reflected XSS	WebApps	Multiple
2020-12-21	Flexmonster Pivot Table & Charts 2.7.17 - 'Remote Report' Reflected XSS	WebApps	Multiple
2020-12-21	SCO Openserver 5.0.7 - 'outputform' Command Injection	WebApps	SCO
2020-12-21	SCO Openserver 5.0.7 - 'section' Reflected XSS	WebApps	SCO
2020-12-21	Spiceworks 7.5 - HTTP Header Injection	WebApps	Windows
2020-12-21	Academy-LMS 4.3 - Stored XSS	WebApps	Multiple
2020-12-21	Spotweb 1.4.9 - 'search' SQL Injection	WebApps	Multiple
2020-12-21	Queue Management System 4.0.0 - "Add User" Stored XSS	WebApps	PHP
2020-12-18	Xeroneit Library Management System 3.1 - "Add Book Category " Stored XSS	WebApps	PHP
2020-12-18	SyncBreeze 10.0.28 - 'login' Denial of Service (Poc)	WebApps	Windows
2020-12-18	Smart Hospital 3.1 - "Add Patient" Stored XSS	WebApps	PHP
2020-12-18	Wordpress Plugin Duplicator 1.3.26 - Unauthenticated Arbitrary File Read (Metasploit)	WebApps	PHP
2020-12-18	Alumni Management System 1.0 - 'id' SQL Injection	WebApps	PHP
2020-12-18	Alumni Management System 1.0 - "Course Form" Stored XSS	WebApps	PHP
2020-12-18	Alumni Management System 1.0 - Unrestricted File Upload To RCE	WebApps	PHP
2020-12-18	Point of Sale System 1.0 - Authentication Bypass	WebApps	PHP
2020-12-17	Victor CMS 1.0 - Multiple SQL Injection (Authenticated)	WebApps	PHP
2020-12-17	PHPJabbers Appointment Scheduler 2.3 - Reflected XSS (Cross-Site Scripting)	WebApps	PHP
2020-12-17	Employee Record System 1.0 - Multiple Stored XSS	WebApps	PHP
2020-12-17	Interview Management System 1.0 - 'id' SQL Injection	WebApps	PHP
2020-12-17	Interview Management System 1.0 - Stored XSS in Add New Question	WebApps	PHP
2020-12-17	Online Tours & Travels Management System 1.0 - "id" SQL Injection	WebApps	PHP
2020-12-17	Customer Support System 1.0 - 'id' SQL Injection	WebApps	PHP
2020-12-17	Customer Support System 1.0 - "First Name" & "Last Name" Stored XSS	WebApps	PHP
2020-12-17	Medical Center Portal Management System 1.0 - 'id' SQL Injection	WebApps	PHP
2020-12-17	Content Management System 1.0 - 'id' SQL Injection	WebApps	PHP
2020-12-17	Content Management System 1.0 - 'email' SQL Injection	WebApps	PHP
2020-12-17	Content Management System 1.0 - 'First Name' Stored XSS	WebApps	PHP
2020-12-17	Linksys RE6500 1.0.11.001 - Unauthenticated RCE	WebApps	Hardware
2020-12-17	Dolibarr ERP-CRM 12.0.3 - Remote Code Execution (Authenticated)	WebApps	PHP
2020-12-16	Seotoaster 3.2.0 - Stored XSS on Edit page properties	WebApps	PHP
2020-12-16	PrestaShop ProductComments 4.2.0 - 'id_products' Time Based Blind SQL Injection	WebApps	PHP
2020-12-16	Magic Home Pro 1.5.1 - Authentication Bypass	WebApps	Android
2020-12-16	Raysync 3.3.3.8 - RCE	WebApps	Linux
2020-12-16	Grav CMS 1.6.30 Admin Plugin 1.9.18 - 'Page Title' Persistent Cross-Site Scripting	WebApps	PHP
2020-12-16	GitLab 11.4.7 - Remote Code Execution (Authenticated)	WebApps	Ruby
2020-12-15	Cisco ASA 9.14.1.10 and FTD 6.6.0.1 - Path Traversal (2)	WebApps	Hardware
2020-12-15	Online Marriage Registration System (OMRS) 1.0 - Remote Code Execution (Authenticated)	WebApps	PHP
2020-12-15	Task Management System 1.0 - 'page' Local File Inclusion	WebApps	PHP
2020-12-14	Gitlab 11.4.7 - Remote Code Execution	WebApps	Ruby
2020-12-14	Macally WIFISD2-2A82 2.000.010 - Guest to Root Privilege Escalation	WebApps	Hardware
2020-12-14	Rumble Mail Server 0.51.3135 - 'username' Stored XSS	WebApps	Multiple
2020-12-14	Rumble Mail Server 0.51.3135 - 'domain and path' Stored XSS	WebApps	Multiple
2020-12-14	Rumble Mail Server 0.51.3135 - 'servername' Stored XSS	WebApps	Multiple
2020-12-14	WordPress Plugin Total Upkeep 1.14.9 - Database and Files Backup Download	WebApps	Multiple
2020-12-14	Seacms 11.1 - 'checkuser' Stored XSS	WebApps	Multiple
2020-12-14	Seacms 11.1 - 'file' Local File Inclusion	WebApps	Multiple
2020-12-14	Seacms 11.1 - 'ip and weburl' Remote Command Execution	WebApps	Multiple
2020-12-14	MiniWeb HTTP Server 0.8.19 - Buffer Overflow (PoC)	WebApps	Multiple
2020-12-14	LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL Injection	WebApps	Multiple
2020-12-14	Rukovoditel 2.6.1 - Cross-Site Request Forgery (Change password)	WebApps	PHP
2020-12-11	Courier Management System 1.0 - 'ref_no' SQL Injection	WebApps	PHP
2020-12-11	Courier Management System 1.0 - 'MULTIPART street ((custom) ' SQL Injection	WebApps	PHP
2020-12-11	Courier Management System 1.0 - 'First Name' Stored XSS	WebApps	PHP
2020-12-11	Dolibarr 12.0.3 - SQLi to RCE	WebApps	PHP
2020-12-11	Supply Chain Management System - Auth Bypass SQL Injection	WebApps	PHP
2020-12-11	Rukovoditel 2.6.1 - RCE	WebApps	PHP
2020-12-11	Jenkins 2.235.3 - 'Description' Stored XSS	WebApps	Java
2020-12-11	Medical Center Portal Management System 1.0 - Multiple Stored XSS	WebApps	PHP
2020-12-11	Openfire 4.6.0 - 'sql' Stored XSS	WebApps	JSP
2020-12-11	Openfire 4.6.0 - 'users' Stored XSS	WebApps	JSP
2020-12-11	Openfire 4.6.0 - 'groupchatJID' Stored XSS	WebApps	JSP
2020-12-11	Jenkins 2.235.3 - 'tooltip' Stored Cross-Site Scripting	WebApps	Java
2020-12-10	WordPress Plugin Popup Builder 3.69.6 - Multiple Stored Cross Site Scripting	WebApps	PHP
2020-12-10	Library Management System 2.0 - Auth Bypass SQL Injection	WebApps	PHP
2020-12-10	Openfire 4.6.0 - 'path' Stored XSS	WebApps	JSP
2020-12-10	OpenCart 3.0.3.6 - Cross Site Request Forgery	WebApps	PHP
2020-12-10	Barcodes generator 1.0 - 'name' Stored Cross Site Scripting	WebApps	PHP
2020-12-09	Task Management System 1.0 - 'id' SQL Injection	WebApps	PHP
2020-12-09	Task Management System 1.0 - Unrestricted File Upload to Remote Code Execution	WebApps	PHP
2020-12-09	Task Management System 1.0 - 'First Name and Last Name' Stored XSS	WebApps	PHP
2020-12-09	VestaCP 0.9.8-26 - 'backup' Information Disclosure	WebApps	Multiple
2020-12-09	VestaCP 0.9.8-26 - 'LoginAs' Insufficient Session Validation	WebApps	Multiple
2020-12-08	Employee Performance Evaluation System 1.0 - 'Task and Description' Persistent Cross Site Scripting	WebApps	PHP
2020-12-08	Online Bus Ticket Reservation 1.0 - SQL Injection	WebApps	PHP
2020-12-07	vBulletin 5.6.3 - 'group' Cross Site Scripting	WebApps	PHP
2020-12-07	Savsoft Quiz 5 - 'Skype ID' Stored XSS	WebApps	PHP
2020-12-07	Cyber Cafe Management System Project (CCMS) 1.0 - Persistent Cross-Site Scripting	WebApps	PHP
2020-12-04	Zabbix 5.0.0 - Stored XSS via URL Widget Iframe	WebApps	PHP
2020-12-04	CMS Made Simple 2.2.15 - Stored Cross-Site Scripting via SVG File Upload (Authenticated)	WebApps	PHP
2020-12-04	Laravel Nova 3.7.0 - 'range' DoS	WebApps	PHP
2020-12-04	Forma LMS 2.3 - 'First & Last Name' Stored Cross-Site Scripting	WebApps	PHP
2020-12-04	Savsoft Quiz 5 - 'field_title' Stored Cross-Site Scripting	WebApps	PHP
2020-12-04	Testa Online Test Management System 3.4.7 - 'q' SQL Injection	WebApps	Multiple
2020-12-04	MiniCMS 1.10 - 'content box' Stored XSS	WebApps	PHP
2020-12-04	Phpscript-sgh 0.1.0 - Time Based Blind SQL Injection	WebApps	Multiple
2020-12-04	Composr CMS 10.0.34 - 'banners' Persistent Cross Site Scripting	WebApps	PHP
2020-12-04	Wordpress Plugin Canto 1.3.0 - Blind SSRF (Unauthenticated)	WebApps	Multiple
2020-12-03	Invision Community 4.5.4 - 'Field Name' Stored Cross-Site Scripting	WebApps	Multiple
2020-12-03	Sony BRAVIA Digital Signage 1.7.8 - System API Information Disclosure	WebApps	Hardware
2020-12-03	Sony BRAVIA Digital Signage 1.7.8 - Unauthenticated Remote File Inclusion	WebApps	Hardware
2020-12-03	mojoPortal forums 2.7.0.0 - 'Title' Persistent Cross-Site Scripting	WebApps	Multiple
2020-12-03	Online Matrimonial Project 1.0 - Authenticated Remote Code Execution	WebApps	PHP
2020-12-03	EgavilanMedia Address Book 1.0 Exploit - SQLi Auth Bypass	WebApps	Multiple
2020-12-03	Coastercms 5.8.18 - Stored XSS	WebApps	PHP
2020-12-03	User Registration & Login and User Management System 2.1 - Cross Site Request Forgery	WebApps	PHP
2020-12-02	WordPress Plugin Wp-FileManager 6.8 - RCE	WebApps	PHP
2020-12-02	Car Rental Management System 1.0 - SQL Injection / Local File include	WebApps	PHP
2020-12-02	Simple College Website 1.0 - 'page' Local File Inclusion	WebApps	PHP
2020-12-02	Anuko Time Tracker 1.19.23.5311 - Password Reset leading to Account Takeover	WebApps	PHP
2020-12-02	Anuko Time Tracker 1.19.23.5311 - No rate Limit on Password Reset functionality	WebApps	PHP
2020-12-02	ChurchCRM 4.2.1 - Persistent Cross Site Scripting (XSS)	WebApps	Multiple
2020-12-02	ChurchCRM 4.2.0 - CSV/Formula Injection	WebApps	Multiple
2020-12-02	WebDamn User Registration & Login System with User Panel - SQLi Auth Bypass	WebApps	Multiple
2020-12-02	DotCMS 20.11 - Stored Cross-Site Scripting	WebApps	Multiple
2020-12-02	Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Edit Profile	WebApps	Multiple
2020-12-02	Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Add Artwork	WebApps	Multiple
2020-12-02	Employee Record Management System 1.1 - Login Bypass SQL Injection	WebApps	Multiple
2020-12-02	WonderCMS 3.1.3 - 'Menu' Persistent Cross-Site Scripting	WebApps	PHP
2020-12-02	Local Service Search Engine Management System 1.0 - SQLi Authentication Bypass	WebApps	Multiple
2020-12-02	Online News Portal System 1.0 - 'Title' Stored Cross Site Scripting	WebApps	Multiple
2020-12-02	Bakeshop Online Ordering System 1.0 - 'Owner' Persistent Cross-site scripting	WebApps	Multiple
2020-12-02	NewsLister - Authenticated Persistent Cross-Site Scripting	WebApps	Multiple
2020-12-02	Online Voting System Project in PHP - 'username' Persistent Cross-Site Scripting	WebApps	Multiple
2020-12-02	PRTG Network Monitor 20.4.63.1412 - 'maps' Stored XSS	WebApps	Windows
2020-12-02	WonderCMS 3.1.3 - Authenticated Remote Code Execution	WebApps	PHP
2020-12-02	WonderCMS 3.1.3 - Authenticated SSRF to Remote Remote Code Execution	WebApps	PHP
2020-12-02	EgavilanMedia User Registration & Login System with Admin Panel 1.0 - Stored Cross Site Scripting	WebApps	Multiple
2020-12-02	Student Result Management System 1.0 - Authentication Bypass SQL Injection	WebApps	Multiple
2020-12-02	EgavilanMedia User Registration & Login System with Admin Panel 1.0 - CSRF	WebApps	Multiple
2020-12-02	Under Construction Page with CPanel 1.0 - SQL injection	WebApps	Multiple
2020-12-02	Pharmacy Store Management System 1.0 - 'id' SQL Injection	WebApps	PHP
2020-12-02	ILIAS Learning Management System 4.3 - SSRF	WebApps	Multiple
2020-12-02	Expense Management System - 'description' Stored Cross Site Scripting	WebApps	Multiple
2020-12-01	Tendenci 12.3.1 - CSV/ Formula Injection	WebApps	Multiple
2020-12-01	Social Networking Site - Authentication Bypass (SQli)	WebApps	PHP
2020-12-01	Pandora FMS 7.0 NG 749 - Multiple Persistent Cross-Site Scripting Vulnerabilities	WebApps	PHP
2020-12-01	Medical Center Portal Management System 1.0 - 'login' SQL Injection	WebApps	PHP
2020-12-01	LEPTON CMS 4.7.0 - 'URL' Persistent Cross-Site Scripting	WebApps	PHP
2020-12-01	Tailor Management System 1.0 - Unrestricted File Upload to Remote Code Execution	WebApps	PHP
2020-12-01	Multi Restaurant Table Reservation System 1.0 - Multiple Persistent XSS	WebApps	PHP
2020-12-01	Setelsa Conacwin 3.7.1.2 - Local File Inclusion	WebApps	Multiple
2020-12-01	Pharmacy/Medical Store & Sale Point 1.0 - 'email' SQL Injection	WebApps	PHP
2020-12-01	Online Shopping Alphaware 1.0 - Error Based SQL injection	WebApps	PHP
2020-12-01	Wordpress Plugin EventON Calendar 3.0.5 - Reflected Cross-Site Scripting	WebApps	PHP
2020-12-01	Joomla! Component GMapFP 3.5 - Unauthenticated Arbitrary File Upload	WebApps	PHP
2020-12-01	TypeSetter 5.1 - CSRF (Change admin e-mail)	WebApps	PHP
2020-11-30	Intelbras Router RF 301K 1.1.2 - Authentication Bypass	WebApps	Hardware
2020-11-30	Rejetto HttpFileServer 2.3.x - Remote Command Execution (3)	WebApps	Windows
2020-11-30	ATX MiniCMTS200a Broadband Gateway 2.0 - Credential Disclosure	WebApps	Hardware
2020-11-27	Best Support System 3.0.4 - 'ticket_body' Persistent XSS (Authenticated)	WebApps	PHP
2020-11-27	ElkarBackup 1.3.3 - 'Policy[name]' and 'Policy[Description]' Stored Cross-site Scripting	WebApps	PHP
2020-11-27	House Rental 1.0 - 'keywords' SQL Injection	WebApps	PHP
2020-11-27	Wordpress Theme Accesspress Social Icons 1.7.9 - SQL injection (Authenticated)	WebApps	PHP
2020-11-27	Moodle 3.8 - Unrestricted File Upload	WebApps	PHP
2020-11-27	Acronis Cyber Backup 12.5 Build 16341 - Unauthenticated SSRF	WebApps	Multiple
2020-11-27	Laravel Administrator 4 - Unrestricted File Upload (Authenticated)	WebApps	PHP
2020-11-27	Ruckus IoT Controller (Ruckus vRIoT) 1.5.1.0.21 - Remote Code Execution	WebApps	Hardware
2020-11-27	WonderCMS 3.1.3 - 'uploadFile' Stored Cross-Site Scripting	WebApps	PHP
2020-11-27	Wordpress Theme Wibar 1.1.8 - 'Brand Component' Stored Cross Site Scripting	WebApps	PHP
2020-11-25	SyncBreeze 10.0.28 - 'password' Remote Buffer Overflow	WebApps	Windows
2020-11-25	osCommerce 2.3.4.1 - 'title' Persistent Cross-Site Scripting	WebApps	PHP
2020-11-25	WonderCMS 3.1.3 - 'page' Persistent Cross-Site Scripting	WebApps	PHP
2020-11-24	OpenCart 3.0.3.6 - 'subject' Stored Cross-Site Scripting	WebApps	PHP
2020-11-24	OpenCart 3.0.3.6 - 'Profile Image' Stored Cross-Site Scripting (Authenticated)	WebApps	PHP
2020-11-24	Seowon 130-SLC router 1.0.11 - 'ipAddr' RCE (Authenticated)	WebApps	Hardware
2020-11-24	ZeroShell 3.9.0 - 'cgi-bin/kerbynet' Remote Root Command Injection (Metasploit)	WebApps	Linux
2020-11-24	Apache OpenMeetings 5.0.0 - 'hostname' Denial of Service	WebApps	Multiple
2020-11-24	nopCommerce Store 4.30 - 'name' Stored Cross-Site Scripting	WebApps	Multiple
2020-11-23	TP-Link TL-WA855RE V5_200415 - Device Reset Auth Bypass	WebApps	Hardware
2020-11-23	LifeRay 7.2.1 GA2 - Stored XSS	WebApps	Multiple
2020-11-23	VTiger v7.0 CRM - 'To' Persistent XSS	WebApps	PHP
2020-11-20	WonderCMS 3.1.3 - 'content' Persistent Cross-Site Scripting	WebApps	PHP
2020-11-19	Nagios Log Server 2.1.7 - Persistent Cross-Site Scripting	WebApps	Multiple
2020-11-19	M/Monit 3.7.4 - Password Disclosure	WebApps	Multiple
2020-11-19	M/Monit 3.7.4 - Privilege Escalation	WebApps	Multiple
2020-11-19	Gemtek WVRTM-127ACN 01.01.02.141 - Authenticated Arbitrary Command Injection	WebApps	CGI
2020-11-19	TestBox CFML Test Framework 4.1.0 - Directory Traversal	WebApps	Multiple
2020-11-19	TestBox CFML Test Framework 4.1.0 - Arbitrary File Write and Remote Code Execution	WebApps	Multiple
2020-11-19	Gitlab 12.9.0 - Arbitrary File Read (Authenticated)	WebApps	Ruby
2020-11-19	Fortinet FortiOS 6.0.4 - Unauthenticated SSL VPN User Password Modification	WebApps	Hardware
2020-11-19	xuucms 3 - 'keywords' SQL Injection	WebApps	Multiple
2020-11-19	PESCMS TEAM 2.3.2 - Multiple Reflected XSS	WebApps	Multiple
2020-11-18	BigBlueButton 2.2.25 - Arbitrary File Disclosure and Server-Side Request Forgery	WebApps	Multiple
2020-11-18	Wordpress Plugin WPForms 1.6.3.1 - Persistent Cross Site Scripting (Authenticated)	WebApps	PHP
2020-11-17	Joomla Plugin Simple Image Gallery Extended (SIGE) 3.5.3 - Multiple Vulnerabilities	WebApps	PHP
2020-11-17	Froxlor Froxlor Server Management Panel 0.10.16 - Persistent Cross-Site Scripting	WebApps	PHP
2020-11-17	WordPress Plugin Buddypress 6.2.0 - Persistent Cross-Site Scripting	WebApps	PHP
2020-11-17	SugarCRM 6.5.18 - Persistent Cross-Site Scripting	WebApps	PHP
2020-11-17	Online Doctor Appointment Booking System PHP and Mysql 1.0 - 'q' SQL Injection	WebApps	PHP
2020-11-17	EgavilanMedia User Registration & Login System with Admin Panel Exploit - SQLi Auth Bypass	WebApps	PHP
2020-11-16	Car Rental Management System 1.0 - 'car_id' Sql Injection	WebApps	PHP
2020-11-16	Car Rental Management System 1.0 - Remote Code Execution (Authenticated)	WebApps	PHP
2020-11-16	PMB 5.6 - 'chemin' Local File Disclosure	WebApps	PHP
2020-11-16	User Registration & Login and User Management System 2.1 - Login Bypass SQL Injection	WebApps	PHP
2020-11-16	Water Billing System 1.0 - 'id' SQL Injection (Authenticated)	WebApps	PHP
2020-11-16	Pandora FMS 7.0 NG 749 - 'CG Items' SQL Injection (Authenticated)	WebApps	PHP
2020-11-13	October CMS Build 465 - Arbitrary File Read Exploit (Authenticated)	WebApps	PHP
2020-11-13	OpenCart Theme Journal 3.1.0 - Sensitive Data Exposure	WebApps	PHP
2020-11-13	Touchbase.io 1.10 - Stored Cross Site Scripting	WebApps	Multiple
2020-11-13	Apache Tomcat - AJP 'Ghostcat' File Read/Inclusion (Metasploit)	WebApps	Multiple
2020-11-13	Citrix ADC NetScaler - Local File Inclusion (Metasploit)	WebApps	Hardware
2020-11-13	Bludit 3.9.2 - Authentication Bruteforce Bypass (Metasploit)	WebApps	PHP
2020-11-13	ASUS TM-AC1900 - Arbitrary Command Execution (Metasploit)	WebApps	Hardware
2020-11-12	Wordpress Plugin Good LMS 2.1.4 - 'id' Unauthenticated SQL Injection	WebApps	PHP
2020-11-12	Water Billing System 1.0 - 'username' and 'password' parameters SQL Injection	WebApps	PHP
2020-11-11	CMSUno 1.6.2 - 'user' Remote Code Execution (Authenticated)	WebApps	PHP
2020-11-11	Customer Support System 1.0 - 'username' Authentication Bypass	WebApps	PHP
2020-11-11	Customer Support System 1.0 - Cross-Site Request Forgery	WebApps	PHP
2020-11-11	Customer Support System 1.0 - 'description' Stored XSS in The Admin Panel	WebApps	PHP
2020-11-10	Anuko Time Tracker 1.19.23.5325 - CSV/Formula Injection	WebApps	PHP
2020-11-10	ShoreTel Conferencing 19.46.1802.0 - Reflected Cross-Site Scripting	WebApps	PHP
2020-11-10	Car Rental Management System 1.0 - SQL injection + Arbitrary File Upload	WebApps	PHP
2020-11-09	Joplin 1.2.6 - 'link' Cross Site Scripting	WebApps	Multiple
2020-11-09	SuiteCRM 7.11.15 - 'last_name' Remote Code Execution (Authenticated)	WebApps	PHP
2020-11-09	Genexis Platinum-4410 P4410-V2-1.28 - Broken Access Control and CSRF	WebApps	Hardware
2020-11-06	BlogEngine 3.3.8 - 'Content' Stored XSS	WebApps	ASPX
2020-11-06	Sentrifugo Version 3.2 - 'announcements' Remote Code Execution (Authenticated)	WebApps	PHP
2020-11-06	Sentrifugo 3.2 - 'assets' Remote Code Execution (Authenticated)	WebApps	PHP
2020-11-06	CMSUno 1.6.2 - 'lang' Remote Code Execution (Authenticated)	WebApps	PHP
2020-11-06	SmartBlog 2.0.1 - 'id_post' Blind SQL injection	WebApps	PHP
2020-11-05	iDS6 DSSPro Digital Signage System 6.2 - Improper Access Control Privilege Escalation	WebApps	Hardware
2020-11-05	iDS6 DSSPro Digital Signage System 6.2 - CAPTCHA Security Bypass	WebApps	Hardware
2020-11-05	iDS6 DSSPro Digital Signage System 6.2 - Cross-Site Request Forgery (CSRF)	WebApps	Hardware
2020-11-04	Student Attendance Management System 1.0 - 'username' SQL Injection / Remote Code Execution	WebApps	PHP
2020-11-04	School Log Management System 1.0 - 'username' SQL Injection / Remote Code Execution	WebApps	PHP
2020-11-04	PDW File Browser 1.3 - Remote Code Execution	WebApps	PHP
2020-11-04	Processwire CMS 2.4.0 - 'download' Local File Inclusion	WebApps	PHP
2020-11-03	Exploit Title: Complaints Report Management System 1.0 - 'username' SQL Injection / Remote Code Execution	WebApps	PHP
2020-11-03	Multi Restaurant Table Reservation System 1.0 - 'table_id' Unauthenticated SQL Injection	WebApps	PHP
2020-11-02	Monitorr 1.7.6m - Authorization Bypass	WebApps	PHP
2020-11-02	Monitorr 1.7.6m - Remote Code Execution (Unauthenticated)	WebApps	PHP
2020-11-02	WordPress Plugin Simple File List 4.2.2 - Arbitrary File Upload	WebApps	PHP
2020-11-02	Apache Flink 1.9.x - File Upload RCE (Unauthenticated)	WebApps	Java
2020-10-30	Simple College Website 1.0 - 'username' SQL Injection / Remote Code Execution	WebApps	PHP
2020-10-30	Online Job Portal 1.0 - 'userid' SQL Injection	WebApps	PHP
2020-10-30	Citadel WebCit < 926 - Session Hijacking Exploit	WebApps	Multiple
2020-10-30	DedeCMS v.5.8 - "keyword" Cross-Site Scripting	WebApps	PHP
2020-10-30	CSE Bookstore 1.0 - 'quantity' Persistent Cross-site Scripting	WebApps	PHP
2020-10-29	Genexis Platinum-4410 P4410-V2-1.28 - Cross Site Request Forgery to Reboot	WebApps	Hardware
2020-10-29	WebLogic Server 10.3.6.0.0 / 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 - Unauthenticated RCE via GET request	WebApps	Java
2020-10-29	Mailman 1.x > 2.1.23 - Cross Site Scripting (XSS)	WebApps	CGI
2020-10-29	Online Examination System 1.0 - 'name' Stored Cross Site Scripting	WebApps	PHP
2020-10-28	Oracle Business Intelligence Enterprise Edition 5.5.0.0.0 / 12.2.1.3.0 / 12.2.1.4.0 - 'getPreviewImage' Directory Traversal/Local File Inclusion	WebApps	Linux
2020-10-28	CSE Bookstore 1.0 - Authentication Bypass	WebApps	PHP
2020-10-28	Nagios XI 5.7.3 - 'mibs.php' Remote Command Injection (Authenticated)	WebApps	PHP
2020-10-27	Sphider Search Engine 1.3.6 - 'word_upper_bound' RCE (Authenticated)	WebApps	PHP
2020-10-27	Client Management System 1.0 - 'searchdata' SQL injection	WebApps	PHP
2020-10-27	Sentrifugo 3.2 - File Upload Restriction Bypass (Authenticated)	WebApps	PHP
2020-10-26	ReQuest Serious Play F3 Media Server 7.0.3 - Remote Code Execution (Unauthenticated)	WebApps	Hardware
2020-10-26	ReQuest Serious Play F3 Media Server 7.0.3 - Remote Denial of Service	WebApps	Hardware
2020-10-26	ReQuest Serious Play F3 Media Server 7.0.3 - Debug Log Disclosure	WebApps	Hardware
2020-10-26	ReQuest Serious Play Media Player 3.0 - Directory Traversal File Disclosure	WebApps	Hardware
2020-10-26	Genexis Platinum-4410 - 'SSID' Persistent XSS	WebApps	Hardware
2020-10-26	PDW File Browser 1.3 - 'new_filename' Cross-Site Scripting (XSS)	WebApps	PHP
2020-10-26	InoERP 0.7.2 - Remote Code Execution (Unauthenticated)	WebApps	PHP
2020-10-26	Online Health Care System 1.0 - Multiple Cross Site Scripting (Stored)	WebApps	PHP
2020-10-26	CMS Made Simple 2.1.6 - 'cntnt01detailtemplate' Server-Side Template Injection	WebApps	PHP
2020-10-23	TextPattern CMS 4.8.3 - Remote Code Execution (Authenticated)	WebApps	PHP
2020-10-23	Bludit 3.9.2 - Auth Bruteforce Bypass	WebApps	PHP
2020-10-23	Gym Management System 1.0 - Stored Cross Site Scripting	WebApps	PHP
2020-10-23	Gym Management System 1.0 - Authentication Bypass	WebApps	PHP
2020-10-23	School Faculty Scheduling System 1.0 - 'username' SQL Injection	WebApps	PHP
2020-10-23	School Faculty Scheduling System 1.0 - 'id' SQL Injection	WebApps	PHP
2020-10-23	Point of Sales 1.0 - 'username' SQL Injection	WebApps	PHP
2020-10-23	Gym Management System 1.0 - 'id' SQL Injection	WebApps	PHP
2020-10-23	Lot Reservation Management System 1.0 - Cross-Site Scripting (Stored)	WebApps	PHP
2020-10-23	Lot Reservation Management System 1.0 - Authentication Bypass	WebApps	PHP
2020-10-23	Point of Sales 1.0 - 'id' SQL Injection	WebApps	PHP
2020-10-23	User Registration & Login and User Management System 2.1 - SQL Injection	WebApps	PHP
2020-10-23	Car Rental Management System 1.0 - Arbitrary File Upload	WebApps	PHP
2020-10-23	Stock Management System 1.0 - 'brandId and categoriesId' SQL Injection	WebApps	PHP
2020-10-23	Ajenti 2.1.36 - Remote Code Execution (Authenticated)	WebApps	Python
2020-10-23	Online Library Management System 1.0 - Arbitrary File Upload	WebApps	PHP
2020-10-21	Tiki Wiki CMS Groupware 21.1 - Authentication Bypass	WebApps	PHP
2020-10-21	Stock Management System 1.0 - 'Brand Name' Persistent Cross-Site Scripting	WebApps	PHP
2020-10-21	Stock Management System 1.0 - 'Categories Name' Persistent Cross-Site Scripting	WebApps	PHP
2020-10-21	Stock Management System 1.0 - 'Product Name' Persistent Cross-Site Scripting	WebApps	PHP
2020-10-21	GOautodial 4.0 - Authenticated Shell Upload	WebApps	PHP
2020-10-21	School Faculty Scheduling System 1.0 - Authentication Bypass POC	WebApps	PHP
2020-10-21	School Faculty Scheduling System 1.0 - Stored Cross Site Scripting POC	WebApps	PHP
2020-10-21	Hrsale 2.0.0 - Local File Inclusion	WebApps	PHP
2020-10-20	WordPress Plugin Colorbox Lightbox v1.1.1 - Persistent Cross-Site Scripting (Authenticated)	WebApps	Multiple
2020-10-20	WordPress Plugin Rest Google Maps < 7.11.18 - SQL Injection	WebApps	PHP
2020-10-20	Apache Struts 2 - DefaultActionMapper Prefixes OGNL Code Execution	WebApps	Java
2020-10-20	Mobile Shop System v1.0 - SQL Injection Authentication Bypass	WebApps	PHP
2020-10-20	RiteCMS 2.2.1 - Remote Code Execution (Authenticated)	WebApps	PHP
2020-10-20	User Registration & Login and User Management System With admin panel 2.1 - Persistent XSS	WebApps	PHP
2020-10-20	WordPress Plugin HS Brand Logo Slider 2.1 - 'logoupload' File Upload	WebApps	PHP
2020-10-20	Ultimate Project Manager CRM PRO Version 2.0.5 - SQLi (Authenticated)	WebApps	PHP
2020-10-20	Visitor Management System in PHP 1.0 - SQL Injection (Authenticated)	WebApps	PHP
2020-10-20	Wordpress Plugin WP Courses < 2.0.29 - Broken Access Controls leading to Courses Content Disclosure	WebApps	PHP
2020-10-20	Loan Management System 1.0 - Multiple Cross Site Scripting (Stored)	WebApps	PHP
2020-10-20	Comtrend AR-5387un router - Persistent XSS (Authenticated)	WebApps	Hardware
2020-10-19	Textpattern CMS 4.6.2 - Cross-site Request Forgery	WebApps	PHP
2020-10-19	Typesetter CMS 5.1 - Arbitrary Code Execution (Authenticated)	WebApps	PHP
2020-10-19	Hostel Management System 2.1 - Cross Site Scripting (Multiple Fields)	WebApps	PHP
2020-10-19	Jenkins 2.63 - Sandbox bypass in pipeline: Groovy plug-in	WebApps	Java
2020-10-19	HiSilicon Video Encoders - Unauthenticated RTSP buffer overflow (DoS)	WebApps	Hardware
2020-10-19	HiSilicon Video Encoders - Full admin access via backdoor password	WebApps	Hardware
2020-10-19	HiSilicon video encoders - RCE via unauthenticated upload of malicious firmware	WebApps	Hardware
2020-10-19	HiSilicon Video Encoders - RCE via unauthenticated command injection	WebApps	Hardware
2020-10-19	HiSilicon Video Encoders - Unauthenticated file disclosure via path traversal	WebApps	Hardware
2020-10-19	Online Job Portal 1.0 - Cross Site Scripting (Stored)	WebApps	PHP
2020-10-19	Online Discussion Forum Site 1.0 - XSS in Messaging System	WebApps	PHP
2020-10-19	Online Student's Management System 1.0 - Remote Code Execution (Authenticated)	WebApps	PHP
2020-10-19	Nagios XI 5.7.3 - 'SNMP Trap Interface' Authenticated SQL Injection	WebApps	PHP
2020-10-19	Nagios XI 5.7.3 - 'Manage Users' Authenticated SQL Injection	WebApps	PHP
2020-10-19	Nagios XI 5.7.3 - 'Contact Templates' Persistent Cross-Site Scripting	WebApps	PHP
2020-10-19	Tourism Management System 1.0 - Arbitrary File Upload	WebApps	PHP
2020-10-16	CS-Cart 1.3.3 - authenticated RCE	WebApps	PHP
2020-10-16	CS-Cart 1.3.3 - 'classes_dir' LFI	WebApps	PHP
2020-10-16	Seat Reservation System 1.0 - Unauthenticated SQL Injection	WebApps	PHP
2020-10-16	Hotel Management System 1.0 - Remote Code Execution (Authenticated)	WebApps	PHP
2020-10-16	Seat Reservation System 1.0 - Remote Code Execution (Unauthenticated)	WebApps	PHP
2020-10-16	aaPanel 6.6.6 - Privilege Escalation & Remote Code Execution (Authenticated)	WebApps	Python
2020-10-16	Restaurant Reservation System 1.0 - 'date' SQL Injection (Authenticated)	WebApps	PHP
2020-10-16	Company Visitor Management System (CVMS) 1.0 - Authentication Bypass	WebApps	PHP
2020-10-16	Alumni Management System 1.0 - Authentication Bypass	WebApps	PHP
2020-10-16	Employee Management System 1.0 - Authentication Bypass	WebApps	PHP
2020-10-16	Employee Management System 1.0 - Cross Site Scripting (Stored)	WebApps	PHP
2020-10-15	Zoo Management System 1.0 - Authentication Bypass	WebApps	PHP
2020-10-15	Simple Grocery Store Sales And Inventory System 1.0 - Authentication Bypass	WebApps	PHP
2020-10-15	rConfig 3.9.5 - Remote Code Execution (Unauthenticated)	WebApps	PHP
2020-10-15	Vehicle Parking Management System 1.0 - Authentication Bypass	WebApps	PHP
2020-10-14	NodeBB Forum 1.12.2-1.14.2 - Account Takeover	WebApps	Multiple
2020-07-23	TimeClock Software 1.01 0 - (Authenticated) Time-Based SQL Injection	WebApps	PHP
2020-10-13	berliCRM 1.0.24 - 'src_record' SQL Injection	WebApps	PHP
2020-10-12	Cisco ASA and FTD 9.6.4.42 - Path Traversal	WebApps	Hardware
2020-10-12	Online Students Management System 1.0 - 'username' SQL Injections	WebApps	PHP
2020-10-12	Liman 0.7 - Cross-Site Request Forgery (Change Password)	WebApps	Multiple
2020-10-12	MedDream PACS Server 6.8.3.751 - Remote Code Execution (Unauthenticated)	WebApps	PHP
2020-10-12	Small CRM 2.0 - 'email' SQL Injection	WebApps	PHP
2020-10-09	openMAINT 1.1-2.4.2 - Arbitrary File Upload	WebApps	JSON
2020-10-09	DynPG 4.9.1 - Persistent Cross-Site Scripting (Authenticated)	WebApps	PHP
2020-10-09	Kentico CMS 9.0-12.0.49 - Persistent Cross Site Scripting	WebApps	PHP
2020-10-08	D-Link DSR-250N 3.12 - Denial of Service (PoC)	WebApps	Hardware
2020-10-08	SEO Panel 4.6.0 - Remote Code Execution	WebApps	PHP
2020-10-07	Textpattern CMS 4.6.2 - 'body' Persistent Cross-Site Scripting	WebApps	PHP
2020-10-06	EasyPMS 1.0.0 - Authentication Bypass	WebApps	JSON
2020-10-06	Karel IP Phone IP1211 Web Management Panel - Directory Traversal	WebApps	Hardware
2020-10-05	SpamTitan 7.07 - Unauthenticated Remote Code Execution	WebApps	PHP
2020-10-05	MOVEit Transfer 11.1.1 - 'token' Unauthenticated SQL Injection	WebApps	Multiple
2020-10-02	Photo Share Website 1.0 - Persistent Cross-Site Scripting	WebApps	PHP
2020-10-02	MedDream PACS Server 6.8.3.751 - Remote Code Execution (Authenticated)	WebApps	PHP
2020-10-01	Typesetter CMS 5.1 - 'Site Title' Persistent Cross-Site Scripting	WebApps	PHP
2020-10-01	CMS Made Simple 2.2.14 - Persistent Cross-Site Scripting (Authenticated)	WebApps	PHP
2020-10-01	GetSimple CMS 3.3.16 - Persistent Cross-Site Scripting (Authenticated)	WebApps	PHP
2020-10-01	WebsiteBaker 2.12.2 - 'display_name' SQL Injection (authenticated)	WebApps	PHP
2020-10-01	MonoCMS Blog 1.0 - Arbitrary File Deletion (Authenticated)	WebApps	PHP
2020-10-01	SpinetiX Fusion Digital Signage 3.4.8 - Username Enumeration	WebApps	Hardware
2020-10-01	SpinetiX Fusion Digital Signage 3.4.8 - Cross-Site Request Forgery (Add Admin)	WebApps	Hardware
2020-10-01	SpinetiX Fusion Digital Signage 3.4.8 - Database Backup Disclosure	WebApps	Hardware
2020-10-01	BrightSign Digital Signage Diagnostic Web Server 8.2.26 - File Delete Path Traversal	WebApps	Hardware
2020-10-01	BrightSign Digital Signage Diagnostic Web Server 8.2.26 - Server-Side Request Forgery (Unauthenticated)	WebApps	Hardware
2020-09-29	WebsiteBaker 2.12.2 - Remote Code Execution	WebApps	PHP
2020-09-28	Joplin 1.0.245 - Arbitrary Code Execution (PoC)	WebApps	Multiple
2020-09-28	Mida eFramework 2.8.9 - Remote Code Execution	WebApps	Hardware
2020-09-25	B-swiss 3 Digital Signage System 3.6.5 - Database Disclosure	WebApps	Multiple
2020-09-25	B-swiss 3 Digital Signage System 3.6.5 - Cross-Site Request Forgery (Add Maintenance Admin)	WebApps	Multiple
2020-09-25	Anchor CMS 0.12.7 - Persistent Cross-Site Scripting (Authenticated)	WebApps	PHP
2020-09-25	BigTree CMS 4.4.10 - Remote Code Execution	WebApps	PHP
2020-09-24	Visitor Management System in PHP 1.0 - Persistent Cross-Site Scripting	WebApps	PHP
2020-09-24	Simple Online Food Ordering System 1.0 - 'id' SQL Injection (Unauthenticated)	WebApps	PHP
2020-09-23	Online Food Ordering System 1.0 - Remote Code Execution	WebApps	PHP
2020-09-22	Flatpress Add Blog 1.0.3 - Persistent Cross-Site Scripting	WebApps	PHP
2020-09-22	Comodo Unified Threat Management Web Console 2.7.0 - Remote Code Execution	WebApps	Multiple
2020-09-21	B-swiss 3 Digital Signage System 3.6.5 - Remote Code Execution	WebApps	Multiple
2020-09-21	Mida eFramework 2.9.0 - Back Door Access	WebApps	Hardware
2020-09-21	Seat Reservation System 1.0 - 'id' SQL Injection	WebApps	PHP
2020-09-21	BlackCat CMS 1.3.6 - Cross-Site Request Forgery	WebApps	PHP
2020-09-21	Online Shop Project 1.0 - 'p' SQL Injection	WebApps	PHP
2020-09-18	Mantis Bug Tracker 2.3.0 - Remote Code Execution (Unauthenticated)	WebApps	PHP
2020-09-18	SpamTitan 7.07 - Remote Code Execution (Authenticated)	WebApps	Multiple
2020-09-16	Piwigo 2.10.1 - Cross Site Scripting	WebApps	PHP
2020-09-15	Tailor MS 1.0 - Reflected Cross-Site Scripting	WebApps	PHP
2020-09-15	ThinkAdmin 6 - Arbitrarily File Read	WebApps	PHP
2020-09-14	Joomla! paGO Commerce 2.5.9.0 - SQL Injection (Authenticated)	WebApps	PHP
2020-09-14	RAD SecFlow-1v SF_0290_2.3.01.26 - Cross-Site Request Forgery (Reboot)	WebApps	Hardware
2020-09-14	RAD SecFlow-1v SF_0290_2.3.01.26 - Persistent Cross-Site Scripting	WebApps	Hardware
2020-09-11	Tea LaTex 1.0 - Remote Code Execution (Unauthenticated)	WebApps	Multiple
2020-09-11	VTENEXT 19 CE - Remote Code Execution	WebApps	Multiple
2020-09-10	ZTE Router F602W - Captcha Bypass	WebApps	Hardware
2020-09-10	CuteNews 2.1.2 - Remote Code Execution	WebApps	PHP
2020-09-10	Tiandy IPC and NVR 9.12.7 - Credential Disclosure	WebApps	Hardware
2020-09-09	Scopia XT Desktop 8.3.915.4 - Cross-Site Request Forgery (change admin password)	WebApps	Java
2020-09-09	Tailor Management System - 'id' SQL Injection	WebApps	PHP
2020-09-07	ManageEngine Applications Manager 14700 - Remote Code Execution (Authenticated)	WebApps	Java
2020-09-07	grocy 2.7.1 - Persistent Cross-Site Scripting	WebApps	PHP
2020-09-07	Cabot 0.11.12 - Persistent Cross-Site Scripting	WebApps	Multiple
2020-09-03	SiteMagic CMS 4.4.2 - Arbitrary File Upload (Authenticated)	WebApps	PHP
2020-09-03	Daily Tracker System 1.0 - Authentication Bypass	WebApps	PHP
2020-09-03	BloodX CMS 1.0 - Authentication Bypass	WebApps	PHP
2020-09-03	Savsoft Quiz Enterprise Version 5.5 - Persistent Cross-Site Scripting	WebApps	PHP
2020-09-02	Stock Management System 1.0 - Cross-Site Request Forgery (Change Username)	WebApps	PHP
2020-09-01	moziloCMS 2.0 - Persistent Cross-Site Scripting (Authenticated)	WebApps	PHP
2020-09-01	Mara CMS 7.5 - Remote Code Execution (Authenticated)	WebApps	PHP
2020-08-31	CMS Made Simple 2.2.14 - Arbitrary File Upload (Authenticated)	WebApps	PHP
2020-08-31	Fuel CMS 1.4.8 - 'fuel_replace_id' SQL Injection (Authenticated)	WebApps	PHP
2020-08-31	Mara CMS 7.5 - Reflective Cross-Site Scripting	WebApps	PHP
2020-08-31	Online Book Store 1.0 - 'id' SQL Injection	WebApps	PHP
2020-08-28	Eibiz i-Media Server Digital Signage 3.8.0 - Privilege Escalation	WebApps	Hardware
2020-08-28	SymphonyCMS 3.0.0 - Persistent Cross-Site Scripting	WebApps	PHP
2020-08-28	Nagios Log Server 2.1.6 - Persistent Cross-Site Scripting	WebApps	Multiple
2020-08-28	Online Shopping Alphaware 1.0 - 'id' SQL Injection	WebApps	PHP
2020-08-27	Wordpress Plugin Autoptimize 2.7.6 - Arbitrary File Upload (Authenticated)	WebApps	PHP
2020-08-27	Mida eFramework 2.9.0 - Remote Code Execution	WebApps	Multiple
2020-08-26	Eibiz i-Media Server Digital Signage 3.8.0 - Directory Traversal	WebApps	Multiple
2020-08-26	Ericom Access Server x64 9.2.0 - Server-Side Request Forgery	WebApps	Multiple
2020-08-24	Eibiz i-Media Server Digital Signage 3.8.0 - Configuration Disclosure	WebApps	Hardware
2020-08-24	Eibiz i-Media Server Digital Signage 3.8.0 - Authentication Bypass	WebApps	Hardware
2020-08-24	LimeSurvey 4.3.10 - 'Survey Menu' Persistent Cross-Site Scripting	WebApps	PHP
2017-07-24	vBulletin 5.1.2 < 5.1.9 - Unserialize Code Execution (Metasploit)	WebApps	PHP
2020-08-21	Seowon SlC 130 Router - Remote Code Execution	WebApps	Hardware
2020-08-21	Complaint Management System 1.0 - 'cid' SQL Injection	WebApps	PHP
2020-08-20	PNPSCADA 2.200816204020 - 'interf' SQL Injection (Authenticated)	WebApps	Hardware
2020-08-20	ElkarBackup 1.3.3 - Persistent Cross-Site Scripting	WebApps	PHP
2020-08-19	Ruijie Networks Switch eWeb S29_RGOS 11.4 - Directory Traversal	WebApps	Hardware
2020-08-18	Savsoft Quiz 5 - Stored Cross-Site Scripting	WebApps	PHP
2020-08-18	Pharmacy Medical Store and Sale Point 1.0 - 'catid' SQL Injection	WebApps	PHP
2020-08-17	QiHang Media Web Digital Signage 3.0.9 - Remote Code Execution (Unauthenticated)	WebApps	Hardware
2020-08-17	QiHang Media Web Digital Signage 3.0.9 - Unauthenticated Arbitrary File Disclosure	WebApps	Hardware
2020-08-17	QiHang Media Web Digital Signage 3.0.9 - Unauthenticated Arbitrary File Deletion	WebApps	Hardware
2020-08-17	QiHang Media Web Digital Signage 3.0.9 - Cleartext Credential Disclosure	WebApps	Hardware
2020-08-17	Microsoft SharePoint Server 2019 - Remote Code Execution	WebApps	ASPX
2020-08-17	Bludit 3.9.2 - Authentication Bruteforce Mitigation Bypass	WebApps	PHP
2020-08-13	GetSimple CMS Plugin Multi User 1.8.2 - Cross-Site Request Forgery (Add Admin)	WebApps	PHP
2020-08-13	Artica Proxy 4.3.0 - Authentication Bypass	WebApps	Hardware
2020-08-12	vBulletin 5.6.2 - 'widget_tabbedContainer_tab_panel' Remote Code Execution	WebApps	PHP
2020-08-12	CMS Made Simple 2.2.14 - Authenticated Arbitrary File Upload	WebApps	PHP
2020-08-11	Fuel CMS 1.4.7 - 'col' SQL Injection (Authenticated)	WebApps	PHP
2020-08-10	ManageEngine ADSelfService Build prior to 6003 - Remote Code Execution (Unauthenticated)	WebApps	Java
2020-08-10	Warehouse Inventory System 1.0 - Cross-Site Request Forgery (Change Admin Password)	WebApps	PHP
2020-08-07	Daily Expenses Management System 1.0 - 'item' SQL Injection	WebApps	PHP
2020-08-07	All-Dynamics Digital Signage System 2.0.2 - Cross-Site Request Forgery (Add Admin)	WebApps	Hardware
2020-08-06	Victor CMS 1.0 - 'Search' SQL Injection	WebApps	PHP
2020-08-05	Stock Management System 1.0 - Authentication Bypass	WebApps	PHP
2020-08-04	Daily Expenses Management System 1.0 - 'username' SQL Injection	WebApps	PHP
2020-08-04	Pi-hole 4.3.2 - Remote Code Execution (Authenticated)	WebApps	Python
2020-07-30	Online Shopping Alphaware 1.0 - Authentication Bypass	WebApps	PHP
2020-07-29	Wordpress Plugin Maintenance Mode by SeedProd 5.1.1 - Persistent Cross-Site Scripting	WebApps	PHP
2020-07-29	Cisco Adaptive Security Appliance Software 9.7 - Unauthenticated Arbitrary File Deletion	WebApps	Hardware
2020-07-28	Cisco Adaptive Security Appliance Software 9.11 - Local File Inclusion	WebApps	Hardware
2020-07-27	eGroupWare 1.14 - 'spellchecker.php' Remote Command Execution	WebApps	PHP
2020-07-26	Rails 5.0.1 - Remote Code Execution	WebApps	Ruby
2020-07-26	Virtual Airlines Manager 2.6.2 - Persistent Cross-Site Scripting	WebApps	PHP
2020-07-26	pfSense 2.4.4-p3 - Cross-Site Request Forgery	WebApps	PHP
2020-07-26	Socket.io-file 2.0.31 - Arbitrary File Upload	WebApps	Multiple
2020-07-26	Sickbeard 0.1 - Cross-Site Request Forgery (Disable Authentication)	WebApps	Multiple
2020-07-26	F5 Big-IP 13.1.3 Build 0.0.6 - Local File Inclusion	WebApps	Hardware
2020-07-26	Webtareas 2.1p - Arbitrary File Upload (Authenticated)	WebApps	PHP
2020-07-26	Bio Star 2.8.2 - Local File Inclusion	WebApps	Multiple
2020-07-26	PandoraFMS 7.0 NG 746 - Persistent Cross-Site Scripting	WebApps	PHP
2020-07-26	Koken CMS 0.22.24 - Arbitrary File Upload (Authenticated)	WebApps	PHP
2020-07-26	elaniin CMS - Authentication Bypass	WebApps	PHP
2020-07-26	Online Course Registration 1.0 - Unauthenticated Remote Code Execution	WebApps	PHP
2020-07-26	LibreHealth 2.0.0 - Authenticated Remote Code Execution	WebApps	PHP
2020-07-26	Bludit 3.9.2 - Directory Traversal	WebApps	Multiple
2020-07-26	WordPress Plugin Email Subscribers & Newsletters 4.2.2 - 'hash' SQL Injection (Unauthenticated)	WebApps	PHP
2020-07-26	WordPress Plugin Email Subscribers & Newsletters 4.2.2 - Unauthenticated File Download	WebApps	PHP
2020-07-26	UBICOD Medivision Digital Signage 1.5.1 - Cross-Site Request Forgery (Add Admin)	WebApps	Hardware
2020-07-26	INNEO Startup TOOLS 2018 M040 13.0.70.3804 - Remote Code Execution	WebApps	Multiple
2020-07-26	ManageEngine Applications Manager 13 - 'MenuHandlerServlet' SQL Injection	WebApps	Java
2020-07-26	GOautodial 4.0 - Persistent Cross-Site Scripting (Authenticated)	WebApps	PHP
2020-07-23	UBICOD Medivision Digital Signage 1.5.1 - Authorization Bypass	WebApps	Hardware
2020-07-22	Sophos VPN Web Panel 2020 - Denial of Service (Poc)	WebApps	Multiple
2020-07-22	WordPress Theme NexosReal Estate 1.7 - 'search_order' SQL Injection	WebApps	PHP
2020-07-22	Docsify.js 4.11.4 - Reflective Cross-Site Scripting	WebApps	Multiple
2020-07-17	CMSUno 1.6 - Cross-Site Request Forgery (Change Admin Password)	WebApps	PHP
2020-07-16	Wing FTP Server 6.3.8 - Remote Code Execution (Authenticated)	WebApps	Lua
2020-07-15	Infor Storefront B2B 1.0 - 'usr_name' SQL Injection	WebApps	PHP
2020-07-15	Online Farm Management System 0.1.0 - Persistent Cross-Site Scripting	WebApps	PHP
2020-07-15	Web Based Online Hotel Booking System 0.1.0 - Authentication Bypass	WebApps	PHP
2020-07-15	Online Polling System 1.0 - Authentication Bypass	WebApps	PHP
2020-07-15	Joomla! J2 JOBS 1.3.0 - 'sortby' Authenticated SQL Injection	WebApps	PHP
2020-07-15	Zyxel Armor X1 WAP6806 - Directory Traversal	WebApps	Hardware
2020-07-15	SuperMicro IPMI WebInterface 03.40 - Cross-Site Request Forgery (Add Admin)	WebApps	Hardware
2020-07-14	Trend Micro Web Security Virtual Appliance 6.5 SP2 Patch 4 Build 1901 - Remote Code Execution (Metasploit)	WebApps	Multiple
2020-07-14	BSA Radar 1.6.7234.24750 - Local File Inclusion	WebApps	Multiple
2020-07-13	Park Ticketing Management System 1.0 - Authentication Bypass	WebApps	PHP
2020-07-13	Park Ticketing Management System 1.0 - 'viewid' SQL Injection	WebApps	PHP
2020-07-10	Barangay Management System 1.0 - Authentication Bypass	WebApps	PHP
2020-07-10	HelloWeb 2.0 - Arbitrary File Download	WebApps	ASP
2020-07-09	Savsoft Quiz 5 - Persistent Cross-Site Scripting	WebApps	PHP
2020-07-09	Wordpress Plugin Powie's WHOIS Domain Check 0.9.31 - Persistent Cross-Site Scripting	WebApps	PHP
2020-07-07	PHP 7.4 FFI - 'disable_functions' Bypass	WebApps	PHP
2020-07-08	BSA Radar 1.6.7234.24750 - Cross-Site Request Forgery (Change Password)	WebApps	Hardware
2020-07-08	SuperMicro IPMI 03.40 - Cross-Site Request Forgery (Add Admin)	WebApps	Hardware
2020-07-07	BSA Radar 1.6.7234.24750 - Authenticated Privilege Escalation	WebApps	Multiple
2020-07-07	Joomla! J2 JOBS 1.3.0 - 'sortby' Authenticated SQL Injection	WebApps	PHP
2020-07-07	Online Shopping Portal 3.1 - 'email' SQL Injection	WebApps	PHP
2020-07-07	Sickbeard 0.1 - Remote Command Injection	WebApps	Hardware
2020-07-05	BIG-IP 15.0.0 < 15.1.0.3 / 14.1.0 < 14.1.2.5 / 13.1.0 < 13.1.3.3 / 12.1.0 < 12.1.5.1 / 11.6.1 < 11.6.5.1 - Traffic Management User Interface 'TMUI' Remote Code Execution (PoC)	WebApps	Linux
2020-07-06	BIG-IP 15.0.0 < 15.1.0.3 / 14.1.0 < 14.1.2.5 / 13.1.0 < 13.1.3.3 / 12.1.0 < 12.1.5.1 / 11.6.1 < 11.6.5.1 - Traffic Management User Interface 'TMUI' Remote Code Execution	WebApps	Linux
2020-07-06	Nagios XI 5.6.12 - 'export-rrd.php' Remote Code Execution	WebApps	PHP
2020-07-06	RSA IG&L Aveksa 7.1.1 - Remote Code Execution	WebApps	Multiple
2020-07-06	RiteCMS 2.2.1 - Authenticated Remote Code Execution	WebApps	PHP
2020-07-06	File Management System 1.1 - Persistent Cross-Site Scripting	WebApps	PHP
2020-07-02	OCS Inventory NG 2.7 - Remote Code Execution	WebApps	Multiple
2020-07-02	ZenTao Pro 8.8.2 - Command Injection	WebApps	PHP
2020-07-01	Online Shopping Portal 3.1 - Authentication Bypass	WebApps	PHP
2020-07-01	PHP-Fusion 9.03.60 - PHP Object Injection	WebApps	PHP
2020-07-01	e-learning Php Script 0.1.0 - 'search' SQL Injection	WebApps	PHP
2020-06-30	Reside Property Management 3.0 - 'profile' SQL Injection	WebApps	PHP
2020-06-30	Victor CMS 1.0 - 'user_firstname' Persistent Cross-Site Scripting	WebApps	PHP
2020-06-26	OpenEMR 5.0.1 - 'controller' Remote Code Execution	WebApps	PHP
2020-06-25	FHEM 6.0 - Local File Inclusion	WebApps	PHP
2020-06-24	BSA Radar 1.6.7234.24750 - Persistent Cross-Site Scripting	WebApps	Multiple
2020-06-23	Online Student Enrollment System 1.0 - Cross-Site Request Forgery (Add Student)	WebApps	PHP
2020-06-23	Responsive Online Blog 1.0 - 'id' SQL Injection	WebApps	PHP
2020-06-22	WebPort 1.19.1 - 'setup' Reflected Cross-Site Scripting	WebApps	PHP
2020-06-22	WebPort 1.19.1 - Reflected Cross-Site Scripting	WebApps	Multiple
2020-06-22	Online Student Enrollment System 1.0 - Unauthenticated Arbitrary File Upload	WebApps	PHP
2020-06-22	Odoo 12.0 - Local File Inclusion	WebApps	Multiple
2020-06-22	Student Enrollment 1.0 - Unauthenticated Remote Code Execution	WebApps	PHP
2020-06-22	FileRun 2019.05.21 - Reflected Cross-Site Scripting	WebApps	Multiple
2020-06-18	Beauty Parlour Management System 1.0 - Authentication Bypass	WebApps	PHP
2020-06-17	OpenCTI 3.3.1 - Directory Traversal	WebApps	Multiple
2020-06-17	College-Management-System-Php 1.0 - Authentication Bypass	WebApps	PHP
2020-06-16	Gila CMS 1.11.8 - 'query' SQL Injection	WebApps	PHP
2020-06-15	Netgear R7000 Router - Remote Code Execution	WebApps	Hardware
2020-06-12	Sysax MultiServer 6.90 - Reflected Cross Site Scripting	WebApps	Multiple
2020-06-12	Avaya IP Office 11 - Password Disclosure	WebApps	Multiple
2020-06-12	SmarterMail 16 - Arbitrary File Upload	WebApps	Multiple
2020-06-10	Virtual Airlines Manager 2.6.2 - 'id' SQL Injection	WebApps	PHP
2020-06-10	Joomla! J2 Store 3.3.11 - 'filter_order_Dir' Authenticated SQL Injection	WebApps	PHP
2020-06-10	Sistem Informasi Pengumuman Kelulusan Online 1.0 - Cross-Site Request Forgery (Add Admin)	WebApps	PHP
2020-06-09	Bludit 3.9.12 - Directory Traversal	WebApps	PHP
2020-06-09	Virtual Airlines Manager 2.6.2 - 'airport' SQL Injection	WebApps	PHP
2020-06-08	Virtual Airlines Manager 2.6.2 - 'notam' SQL Injection	WebApps	PHP
2020-06-08	Kyocera Printer d-COPIA253MF - Directory Traversal (PoC)	WebApps	Hardware
2020-06-05	Online-Exam-System 2015 - 'feedback' SQL Injection	WebApps	PHP
2020-06-05	Online Course Registration 1.0 - Authentication Bypass	WebApps	PHP
2020-06-04	Cayin Digital Signage System xPost 2.5 - Remote Command Injection	WebApps	Multiple
2020-06-04	Cayin Signage Media Player 3.0 - Remote Command Injection (root)	WebApps	Multiple
2020-06-04	Secure Computing SnapGear Management Console SG560 3.1.5 - Arbitrary File Read	WebApps	Hardware
2020-06-04	SnapGear Management Console SG560 3.1.5 - Cross-Site Request Forgery (Add Super User)	WebApps	Hardware
2020-06-04	Cayin Content Management Server 11.0 - Remote Command Injection (root)	WebApps	Multiple
2020-06-04	Online Marriage Registration System 1.0 - Remote Code Execution	WebApps	PHP
2020-06-04	D-Link DIR-615 T1 20.10 - CAPTCHA Bypass	WebApps	Hardware
2020-06-04	Navigate CMS 2.8.7 - Authenticated Directory Traversal	WebApps	PHP
2020-06-04	VMWAre vCloud Director 9.7.0.15498291 - Remote Code Execution	WebApps	Java
2020-06-04	Navigate CMS 2.8.7 - Cross-Site Request Forgery (Add Admin)	WebApps	PHP
2020-06-04	Clinic Management System 1.0 - Authenticated Arbitrary File Upload	WebApps	PHP
2020-06-04	Oriol Espinal CMS 1.0 - 'id' SQL Injection	WebApps	PHP
2020-06-04	Navigate CMS 2.8.7 - ''sidx' SQL Injection (Authenticated)	WebApps	PHP
2020-06-04	Clinic Management System 1.0 - Unauthenticated Remote Code Execution	WebApps	PHP
2020-06-04	Hostel Management System 2.0 - 'id' SQL Injection (Unauthenticated)	WebApps	PHP
2020-06-04	AirControl 1.4.2 - PreAuth Remote Code Execution	WebApps	Hardware
2020-06-02	OpenCart 3.0.3.2 - Stored Cross Site Scripting (Authenticated)	WebApps	PHP
2020-06-02	Clinic Management System 1.0 - Authentication Bypass	WebApps	PHP
2020-06-01	QuickBox Pro 2.1.8 - Authenticated Remote Code Execution	WebApps	PHP
2020-06-01	VMware vCenter Server 6.7 - Authentication Bypass	WebApps	Multiple
2020-06-01	WordPress Plugin BBPress 2.5 - Unauthenticated Privilege Escalation	WebApps	PHP
2020-05-29	Crystal Shard http-protection 0.2.0 - IP Spoofing Bypass	WebApps	Multiple
2020-05-29	WordPress Plugin Multi-Scheduler 1.0.0 - Cross-Site Request Forgery (Delete User)	WebApps	PHP
2020-05-28	QNAP QTS and Photo Station 6.0.3 - Remote Command Execution	WebApps	PHP
2020-05-28	EyouCMS 1.4.6 - Persistent Cross-Site Scripting	WebApps	PHP
2020-05-28	Online-Exam-System 2015 - 'fid' SQL Injection	WebApps	PHP
2020-05-28	NOKIA VitalSuite SPM 2020 - 'UserName' SQL Injection	WebApps	Multiple
2020-05-27	OXID eShop 6.3.4 - 'sorting' SQL Injection	WebApps	PHP
2020-05-27	Kuicms PHP EE 2.0 - Persistent Cross-Site Scripting	WebApps	PHP
2020-05-27	osTicket 1.14.1 - 'Saved Search' Persistent Cross-Site Scripting	WebApps	PHP
2020-05-27	osTicket 1.14.1 - 'Ticket Queue' Persistent Cross-Site Scripting	WebApps	PHP
2020-05-27	LimeSurvey 4.1.11 - 'Permission Roles' Persistent Cross-Site Scripting	WebApps	PHP
2020-05-27	Online Marriage Registration System 1.0 - Persistent Cross-Site Scripting	WebApps	PHP
2020-05-26	WordPress Plugin Drag and Drop File Upload Contact Form 1.3.3.2 - Remote Code Execution	WebApps	PHP
2020-05-26	Pi-hole 4.4.0 - Remote Code Execution (Authenticated)	WebApps	Linux
2020-05-26	Joomla! Plugin XCloner Backup 3.5.3 - Local File Inclusion (Authenticated)	WebApps	PHP
2020-05-26	Open-AudIT 3.3.0 - Reflective Cross-Site Scripting (Authenticated)	WebApps	PHP
2020-05-26	OpenEMR 5.0.1 - Remote Code Execution	WebApps	PHP
2020-05-25	Online Discussion Forum Site 1.0 - Remote Code Execution	WebApps	PHP
2020-05-25	Victor CMS 1.0 - 'add_user' Persistent Cross-Site Scripting	WebApps	PHP
2020-05-25	WordPress Plugin Form Maker 5.4.1 - 's' SQL Injection (Authenticated)	WebApps	PHP
2020-05-22	Gym Management System 1.0 - Unauthenticated Remote Code Execution	WebApps	PHP
2020-05-22	Dolibarr 11.0.3 - Persistent Cross-Site Scripting	WebApps	PHP
2020-05-21	OpenEDX platform Ironwood 2.5 - Remote Code Execution	WebApps	Multiple
2020-05-21	PHPFusion 9.03.50 - Persistent Cross-Site Scripting	WebApps	PHP
2020-05-21	Composr CMS 10.0.30 - Persistent Cross-Site Scripting	WebApps	PHP
2020-05-21	forma.lms 5.6.40 - Cross-Site Request Forgery (Change Admin Email)	WebApps	PHP
2020-05-20	CraftCMS 3 vCard Plugin 1.0.0 - Remote Code Execution	WebApps	PHP
2020-05-19	Victor CMS 1.0 - Authenticated Arbitrary File Upload	WebApps	PHP
2020-05-19	NukeViet VMS 4.4.00 - Cross-Site Request Forgery (Change Admin Password)	WebApps	PHP
2020-05-19	Submitty 20.04.01 - Persistent Cross-Site Scripting	WebApps	PHP
2020-05-19	php-fusion 9.03.50 - 'ctype' SQL Injection	WebApps	PHP
2020-05-19	qdPM 9.1 - 'cfg[app_app_name]' Persistent Cross-Site Scripting	WebApps	PHP
2020-05-19	Victor CMS 1.0 - 'cat_id' SQL Injection	WebApps	PHP
2020-05-19	Victor CMS 1.0 - 'comment_author' Persistent Cross-Site Scripting	WebApps	PHP
2020-05-18	Online Healthcare management system 1.0 - Authentication Bypass	WebApps	PHP
2020-05-18	Online Healthcare Patient Record Management System 1.0 - Authentication Bypass	WebApps	PHP
2020-05-18	online Chatting System 1.0 - 'id' SQL Injection	WebApps	PHP
2020-05-18	Monstra CMS 3.0.4 - Authenticated Arbitrary File Upload	WebApps	PHP
2020-05-18	forma.lms The E-Learning Suite 2.3.0.2 - Persistent Cross-Site Scripting	WebApps	PHP
2020-05-18	Oracle Hospitality RES 3700 5.7 - Remote Code Execution	WebApps	Java
2020-05-18	Online Examination System 1.0 - 'eid' SQL Injection	WebApps	PHP
2020-05-18	Wordpress Plugin Ajax Load More 5.3.1 - '#1' Authenticated SQL Injection	WebApps	PHP
2020-05-18	Mikrotik Router Monitoring System 1.2.3 - 'community' SQL Injection	WebApps	Hardware
2020-05-15	ManageEngine Service Desk 10.0 - Cross-Site Scripting	WebApps	Java
2020-05-15	vBulletin 5.6.1 - 'nodeId' SQL Injection	WebApps	PHP
2020-05-14	E-Commerce System 1.0 - Unauthenticated Remote Code Execution	WebApps	PHP
2020-05-14	Netlink XPON 1GE WiFi V2801RGW - Remote Command Execution	WebApps	Hardware
2020-05-14	Complaint Management System 1.0 - 'username' SQL Injection	WebApps	PHP
2020-05-13	Sellacious eCommerce 4.6 - Persistent Cross-Site Scripting	WebApps	PHP
2020-05-13	Tryton 5.4 - Persistent Cross-Site Scripting	WebApps	PHP
2020-05-12	TylerTech Eagle 2018.3.11 - Remote Code Execution	WebApps	Java
2020-05-12	qdPM 9.1 - Arbitrary File Upload	WebApps	PHP
2020-05-12	Cisco Digital Network Architecture Center 1.3.1.4 - Persistent Cross-Site Scripting	WebApps	Java
2020-05-12	CuteNews 2.1.2 - Authenticated Arbitrary File Upload	WebApps	PHP
2020-05-12	ChopSlider3 Wordpress Plugin3.4 - 'id' SQL Injection	WebApps	PHP
2020-05-12	Orchard Core RC1 - Persistent Cross-Site Scripting	WebApps	ASPX
2014-12-23	Phase Botnet - Blind SQL Injection	WebApps	Linux
2020-05-11	LibreNMS 1.46 - 'search' SQL Injection	WebApps	Multiple
2020-05-11	Complaint Management System 1.0 - Authentication Bypass	WebApps	PHP
2020-05-11	Victor CMS 1.0 - 'post' SQL Injection	WebApps	PHP
2020-05-11	OpenZ ERP 3.6.60 - Persistent Cross-Site Scripting	WebApps	PHP
2020-05-11	CuteNews 2.1.2 - Arbitrary File Deletion	WebApps	PHP
2020-05-11	Sentrifugo CMS 3.2 - Persistent Cross-Site Scripting	WebApps	PHP
2020-05-11	Kartris 1.6 - Arbitrary File Upload	WebApps	ASPX
2020-05-11	Online AgroCulture Farm Management System 1.0 - 'uname' SQL Injection	WebApps	PHP
2020-05-10	Pi-hole < 4.4 - Authenticated Remote Code Execution / Privileges Escalation	WebApps	Linux
2020-05-10	Pi-hole < 4.4 - Authenticated Remote Code Execution	WebApps	Linux
2020-05-07	Online AgroCulture Farm Management System 1.0 - 'pid' SQL Injection	WebApps	PHP
2020-05-07	Pisay Online E-Learning System 1.0 - Remote Code Execution	WebApps	PHP
2020-05-07	Online Clothing Store 1.0 - Arbitrary File Upload	WebApps	PHP
2020-05-07	School File Management System 1.0 - 'username' SQL Injection	WebApps	PHP
2020-05-07	Draytek VigorAP 1000C - Persistent Cross-Site Scripting	WebApps	Hardware
2020-05-07	Car Park Management System 1.0 - Authentication Bypass	WebApps	PHP
2020-05-06	MPC Sharj 3.11.1 - Arbitrary File Download	WebApps	PHP
2020-05-06	YesWiki cercopitheque 2020.04.18.1 - 'id' SQL Injection	WebApps	PHP
2020-05-06	GitLab 12.9.0 - Arbitrary File Read	WebApps	Ruby
2020-05-06	webTareas 2.0.p8 - Arbitrary File Deletion	WebApps	PHP
2020-05-06	Online Clothing Store 1.0 - 'username' SQL Injection	WebApps	PHP
2020-05-06	Booked Scheduler 2.7.7 - Authenticated Directory Traversal	WebApps	PHP
2020-05-06	i-doit Open Source CMDB 1.14.1 - Arbitrary File Deletion	WebApps	PHP
2020-05-06	Online Clothing Store 1.0 - Persistent Cross-Site Scripting	WebApps	PHP
2020-05-05	NEC Electra Elite IPK II WebPro 01.03.01 - Session Enumeration	WebApps	Hardware
2020-05-05	SimplePHPGal 0.7 - Remote File Inclusion	WebApps	PHP
2020-05-05	PhreeBooks ERP 5.2.5 - Remote Command Execution	WebApps	PHP
2020-05-05	BlogEngine 3.3 - 'syndication.axd' XML External Entity Injection	WebApps	XML
2020-05-05	webERP 4.15.1 - Unauthenticated Backup File Access	WebApps	PHP
2020-05-05	Online Scheduling System 1.0 - 'username' SQL Injection	WebApps	PHP
2020-05-05	Fishing Reservation System 7.5 - 'uid' SQL Injection	WebApps	PHP
2020-05-04	addressbook 9.0.0.1 - 'id' SQL Injection	WebApps	PHP
2020-05-04	osTicket 1.14.1 - Persistent Authenticated Cross-Site Scripting	WebApps	PHP
2020-05-04	BoltWire 6.03 - Local File Inclusion	WebApps	PHP
2020-05-01	Online Scheduling System 1.0 - Authentication Bypass	WebApps	PHP
2020-05-01	Apache OFBiz 17.12.03 - Cross-Site Request Forgery (Account Takeover)	WebApps	Java
2020-05-01	HardDrive 2.1 for iOS - Arbitrary File Upload	WebApps	iOS
2020-05-01	Super Backup 2.0.5 for iOS - Directory Traversal	WebApps	iOS
2020-05-01	php-fusion 9.03.50 - Persistent Cross-Site Scripting	WebApps	PHP
2020-05-01	Online Scheduling System 1.0 - Persistent Cross-Site Scripting	WebApps	PHP
2020-05-01	ChemInv 1.0 - Authenticated Persistent Cross-Site Scripting	WebApps	PHP
2020-04-29	hits script 1.0 - 'item_name' SQL Injection	WebApps	PHP
2020-04-29	Easy Transfer 1.7 for iOS - Directory Traversal	WebApps	iOS
2020-04-29	School ERP Pro 1.0 - Arbitrary File Read	WebApps	PHP
2020-04-29	Open-AudIT Professional 3.3.1 - Remote Code Execution	WebApps	PHP
2020-04-28	School ERP Pro 1.0 - Remote Code Execution	WebApps	PHP
2020-04-28	School ERP Pro 1.0 - 'es_messagesid' SQL Injection	WebApps	PHP
2020-04-27	Maian Support Helpdesk 4.3 - Cross-Site Request Forgery (Add Admin)	WebApps	PHP
2020-04-27	Online Course Registration 2.0 - Authentication Bypass	WebApps	PHP
2020-04-27	Netis E1+ V1.2.32533 - Unauthenticated WiFi Password Leak	WebApps	Hardware
2020-04-27	Online shopping system advanced 1.0 - 'p' SQL Injection	WebApps	PHP
2020-04-27	Netis E1+ 1.2.32533 - Backdoor Account (root)	WebApps	Hardware
2020-04-27	PHP-Fusion 9.03.50 - 'Edit Profile' Arbitrary File Upload	WebApps	PHP
2020-04-24	Furukawa Electric ConsciusMAP 2.8.1 - Remote Code Execution	WebApps	Java
2020-04-24	Edimax EW-7438RPn 1.13 - Remote Code Execution	WebApps	Hardware
2020-04-24	EspoCRM 5.8.5 - Privilege Escalation	WebApps	Multiple
2020-04-23	Sky File 2.1.0 iOS - Directory Traversal	WebApps	iOS
2020-04-23	Zen Load Balancer 3.10.1 - Directory Traversal (Metasploit)	WebApps	CGI
2020-04-23	Complaint Management System 4.2 - Cross-Site Request Forgery (Delete User)	WebApps	PHP
2020-04-23	Complaint Management System 4.2 - Authentication Bypass	WebApps	PHP
2020-04-23	Complaint Management System 4.2 - Persistent Cross-Site Scripting	WebApps	PHP
2020-04-23	User Management System 2.0 - Authentication Bypass	WebApps	PHP
2020-04-23	User Management System 2.0 - Persistent Cross-Site Scripting	WebApps	PHP
2020-04-22	Mahara 19.10.2 CMS - Persistent Cross-Site Scripting	WebApps	Linux
2020-04-22	Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering)	WebApps	Hardware
2020-04-22	Edimax EW-7438RPn - Information Disclosure (WiFi Password)	WebApps	Hardware
2020-04-21	P5 FNIP-8x16A FNIP-4xSH 1.0.20 - Cross-Site Request Forgery (Add Admin)	WebApps	Hardware
2020-04-21	jizhi CMS 1.6.7 - Arbitrary File Download	WebApps	PHP
2020-04-21	NSClient++ 0.5.2.35 - Authenticated Remote Code Execution	WebApps	JSON
2020-04-21	IQrouter 3.3.1 Firmware - Remote Code Execution	WebApps	Hardware
2020-04-21	CSZ CMS 1.2.7 - 'title' HTML Injection	WebApps	PHP
2020-04-21	PMB 5.6 - 'logid' SQL Injection	WebApps	PHP
2020-04-21	CSZ CMS 1.2.7 - Persistent Cross-Site Scripting	WebApps	PHP
2020-04-20	Fork CMS 5.8.0 - Persistent Cross-Site Scripting	WebApps	PHP
2020-04-20	Centreon 19.10.5 - 'id' SQL Injection	WebApps	PHP
2020-04-17	TAO Open Source Assessment Platform 3.3.0 RC02 - HTML Injection	WebApps	PHP
2020-04-17	Playable 9.18 iOS - Persistent Cross-Site Scripting	WebApps	iOS
2020-04-15	Xeroneit Library Management System 3.0 - 'category' SQL Injection	WebApps	PHP
2020-04-15	File Transfer iFamily 2.1 - Directory Traversal	WebApps	iOS
2020-04-15	DedeCMS 7.5 SP2 - Persistent Cross-Site Scripting	WebApps	PHP
2020-04-15	Macs Framework 1.14f CMS - Persistent Cross-Site Scripting	WebApps	PHP
2020-04-15	SeedDMS 5.1.18 - Persistent Cross-Site Scripting	WebApps	PHP
2020-04-15	Pinger 1.0 - Remote Code Execution	WebApps	PHP
2020-04-15	SuperBackup 2.0.5 for iOS - Persistent Cross-Site Scripting	WebApps	iOS
2020-04-15	AirDisk Pro 5.5.3 for iOS - Persistent Cross-Site Scripting	WebApps	iOS
2020-04-14	Oracle WebLogic Server 12.2.1.4.0 - Remote Code Execution	WebApps	Java
2020-04-14	WSO2 3.1.0 - Persistent Cross-Site Scripting	WebApps	Java
2020-04-14	Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution	WebApps	Hardware
2020-04-13	MOVEit Transfer 11.1.1 - 'token' Unauthenticated SQL Injection	WebApps	PHP
2020-04-13	Wordpress Plugin Media Library Assistant 2.81 - Local File Inclusion	WebApps	PHP
2020-04-13	WSO2 3.1.0 - Arbitrary File Delete	WebApps	Java
2020-04-13	Webtateas 2.0 - Arbitrary File Read	WebApps	PHP
2020-04-13	TVT NVMS 1000 - Directory Traversal	WebApps	Hardware
2020-04-13	Huawei HG630 2 Router - Authentication Bypass	WebApps	Hardware
2020-04-10	Zen Load Balancer 3.10.1 - 'index.cgi' Directory Traversal	WebApps	CGI
2020-04-08	Amcrest Dahua NVR Camera IP2M-841 - Denial of Service (PoC)	WebApps	Hardware
2020-04-08	Django 3.0 - Cross-Site Request Forgery Token Bypass	WebApps	PHP
2020-04-06	pfSense 2.4.4-P3 - 'User Manager' Persistent Cross-Site Scripting	WebApps	FreeBSD
2020-04-06	LimeSurvey 4.1.11 - 'File Manager' Path Traversal	WebApps	PHP
2020-04-06	Bolt CMS 3.7.0 - Authenticated Remote Code Execution	WebApps	PHP
2020-04-06	WhatsApp Desktop 0.3.9308 - Persistent Cross-Site Scripting	WebApps	Multiple
2020-04-06	Vesta Control Panel 0.9.8-26 - Authenticated Remote Code Execution (Metasploit)	WebApps	Multiple
2020-04-06	LimeSurvey 4.1.11 - 'Survey Groups' Persistent Cross-Site Scripting	WebApps	PHP
2020-04-03	Pandora FMS 7.0NG - 'net_tools.php' Remote Code Execution	WebApps	PHP
2020-03-31	Grandstream UCM6200 Series WebSocket 1.0.20.20 - 'user_password' SQL Injection	WebApps	Hardware
2020-03-31	Grandstream UCM6200 Series CTI Interface - 'user_password' SQL Injection	WebApps	Hardware
2020-03-30	Zen Load Balancer 3.10.1 - Remote Code Execution	WebApps	CGI
2020-03-30	Joomla! com_fabrik 3.9.11 - Directory Traversal	WebApps	PHP
2020-03-27	rConfig 3.9.4 - 'searchField' Unauthenticated Root Remote Code Execution	WebApps	PHP
2020-03-27	Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal	WebApps	Java
2020-03-27	ECK Hotel 1.0 - Cross-Site Request Forgery (Add Admin)	WebApps	PHP
2020-03-26	Centreo 19.10.8 - 'DisplayServiceStatus' Remote Code Execution	WebApps	PHP
2020-03-26	TP-Link Archer C50 3 - Denial of Service (PoC)	WebApps	Hardware
2020-03-25	LeptonCMS 4.5.0 - Persistent Cross-Site Scripting	WebApps	PHP
2020-03-25	Joomla! Component GMapFP 3.30 - Arbitrary File Upload	WebApps	PHP
2020-03-24	UCM6202 1.0.18.13 - Remote Command Injection	WebApps	Hardware
2020-03-24	Wordpress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting	WebApps	PHP
2020-03-24	UliCMS 2020.1 - Persistent Cross-Site Scripting	WebApps	PHP
2020-03-23	Joomla! com_hdwplayer 4.2 - 'search.php' SQL Injection	WebApps	PHP
2020-03-23	rConfig 3.9.4 - 'search.crud.php' Remote Command Injection	WebApps	PHP
2020-03-23	FIBARO System Home Center 5.021 - Remote File Include	WebApps	Multiple
2020-03-20	Exagate Sysguard 6001 - Cross-Site Request Forgery (Add Admin)	WebApps	PHP
2020-03-18	Netlink GPON Router 1.0.11 - Remote Code Execution	WebApps	Hardware
2020-03-16	PHPKB Multi-Language 9 - 'image-upload.php' Authenticated Remote Code Execution	WebApps	PHP
2020-03-16	PHPKB Multi-Language 9 - Authenticated Directory Traversal	WebApps	PHP
2020-03-16	PHPKB Multi-Language 9 - Authenticated Remote Code Execution	WebApps	PHP
2020-03-16	MiladWorkShop VIP System 1.0 - 'lang' SQL Injection	WebApps	PHP
2020-03-16	Enhanced Multimedia Router 3.0.4.27 - Cross-Site Request Forgery (Add Admin)	WebApps	ASP
2020-03-10	Horde Groupware Webmail Edition 5.2.22 - Remote Code Execution	WebApps	PHP
2020-03-13	Centos WebPanel 7 - 'term' SQL Injection	WebApps	Linux
2020-03-11	Horde Groupware Webmail Edition 5.2.22 - PHAR Loading	WebApps	PHP
2020-03-11	Horde Groupware Webmail Edition 5.2.22 - PHP File Inclusion	WebApps	PHP
2020-03-12	rConfig 3.9 - 'searchColumn' SQL Injection	WebApps	PHP
2020-03-12	rConfig 3.93 - 'ajaxAddTemplate.php' Authenticated Remote Code Execution	WebApps	PHP
2020-03-12	HRSALE 1.1.8 - Cross-Site Request Forgery (Add Admin)	WebApps	PHP
2020-03-12	Wordpress Plugin Appointment Booking Calendar 1.3.34 - CSV Injection	WebApps	PHP
2020-03-12	WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure	WebApps	Java
2020-03-12	Joomla! Component com_newsfeeds 1.0 - 'feedid' SQL Injection	WebApps	PHP
2020-03-11	Wordpress Plugin Search Meter 2.13.2 - CSV injection	WebApps	PHP
2020-03-10	Persian VIP Download Script 1.0 - 'active' SQL Injection	WebApps	PHP
2020-03-10	YzmCMS 5.5 - 'url' Persistent Cross-Site Scripting	WebApps	PHP
2020-03-10	Sysaid 20.1.11 b26 - Remote Command Execution	WebApps	Java
2020-03-09	Sentrifugo HRMS 3.2 - 'id' SQL Injection	WebApps	PHP
2020-03-09	60CycleCMS - 'news.php' SQL Injection	WebApps	PHP
2019-12-12	ManageEngine Desktop Central - 'FileStorage getChartImage' Deserialization / Unauthenticated Remote Code Execution	WebApps	Multiple
2020-03-04	UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read	WebApps	PHP
2020-03-03	RICOH Aficio SP 5210SF Printer - 'entryNameIn' HTML Injection	WebApps	Hardware
2020-03-03	GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection	WebApps	PHP
2020-03-03	Alfresco 5.2.4 - Persistent Cross-Site Scripting	WebApps	PHP
2020-03-03	RICOH Aficio SP 5200S Printer - 'entryNameIn' HTML Injection	WebApps	Hardware
2020-03-02	Cacti v1.2.8 - Unauthenticated Remote Code Execution (Metasploit)	WebApps	PHP
2020-03-02	Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass (Config Upload)	WebApps	Hardware
2020-03-02	TP LINK TL-WR849N - Remote Code Execution	WebApps	Hardware
2020-03-02	Wing FTP Server 6.2.5 - Privilege Escalation	WebApps	Multiple
2020-03-02	TL-WR849N 0.9.1 4.16 - Authentication Bypass (Upload Firmware)	WebApps	Hardware
2020-03-02	Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery (Add User)	WebApps	PHP
2020-03-02	Netis WF2419 2.2.36123 - Remote Code Execution	WebApps	Hardware
2020-03-02	Joplin Desktop 1.0.184 - Cross-Site Scripting	WebApps	Multiple
2020-02-28	qdPM < 9.1 - Remote Code Execution	WebApps	Multiple
2020-02-03	Cacti 1.2.8 - Unauthenticated Remote Code Execution	WebApps	Multiple
2020-02-03	Cacti 1.2.8 - Authenticated Remote Code Execution	WebApps	Multiple
2020-02-20	Apache Tomcat - AJP 'Ghostcat File Read/Inclusion	WebApps	Multiple
2020-02-27	Comtrend VR-3033 - Command Injection	WebApps	Hardware
2020-02-27	Business Live Chat Software 1.0 - Cross-Site Request Forgery (Add Admin)	WebApps	PHP
2020-02-26	PhpIX 2012 Professional - 'id' SQL Injection	WebApps	PHP
2020-02-25	Magento WooCommerce CardGate Payment Gateway 2.0.30 - Payment Process Bypass	WebApps	PHP
2020-02-25	WordPress Plugin WooCommerce CardGate Payment Gateway 3.1.15 - Payment Process Bypass	WebApps	PHP
2020-02-24	Cacti 1.2.8 - Remote Code Execution	WebApps	PHP
2020-02-24	Aptina AR0130 960P 1.3MP Camera - Remote Configuration Disclosure	WebApps	Hardware
2020-02-24	DotNetNuke 9.5 - File Upload Restrictions Bypass	WebApps	ASPX
2020-02-24	DotNetNuke 9.5 - Persistent Cross-Site Scripting	WebApps	ASPX
2020-02-24	eLection 2.0 - 'id' SQL Injection	WebApps	PHP
2020-02-24	ManageEngine EventLog Analyzer 10.0 - Information Disclosure	WebApps	Java
2020-02-24	I6032B-P POE 2.0MP Outdoor Camera - Remote Configuration Disclosure	WebApps	Hardware
2020-02-24	ATutor 2.2.4 - 'id' SQL Injection	WebApps	PHP
2020-02-24	SecuSTATION SC-831 HD Camera - Remote Configuration Disclosure	WebApps	Hardware
2020-02-24	AMSS++ 4.7 - Backdoor Admin Account	WebApps	PHP
2020-02-24	CandidATS 2.1.0 - Cross-Site Request Forgery (Add Admin)	WebApps	PHP
2020-02-24	SecuSTATION IPCAM-130 HD Camera - Remote Configuration Disclosure	WebApps	Hardware
2020-02-24	AMSS++ v 4.31 - 'id' SQL Injection	WebApps	PHP
2020-02-24	Real Web Pentesting Tutorial Step by Step - [Persian]	WebApps	Multiple
2020-02-24	ESCAM QD-900 WIFI HD Camera - Remote Configuration Disclosure	WebApps	Hardware
2020-02-24	GUnet OpenEclass E-learning platform 1.7.3 - 'uname' SQL Injection	WebApps	PHP
2020-02-24	Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting	WebApps	Hardware
2020-02-20	Easy2Pilot 7 - Cross-Site Request Forgery (Add User)	WebApps	PHP
2020-02-19	Nanometrics Centaur 4.3.23 - Unauthenticated Remote Memory Leak	WebApps	Hardware
2020-02-19	DBPower C300 HD Camera - Remote Configuration Disclosure	WebApps	Hardware
2020-02-19	Virtual Freer 1.58 - Remote Command Execution	WebApps	PHP
2020-02-17	LabVantage 8.3 - Information Disclosure	WebApps	Java
2020-02-17	SOPlanning 1.45 - 'users' SQL Injection	WebApps	PHP
2020-02-17	SOPlanning 1.45 - Cross-Site Request Forgery (Add User)	WebApps	PHP
2020-02-17	WordPress Theme Fruitful 3.8 - Persistent Cross-Site Scripting	WebApps	PHP
2020-02-17	Ice HRM 26.2.0 - Cross-Site Request Forgery (Add User)	WebApps	PHP
2020-02-17	Avaya Aura Communication Manager 5.2 - Remote Code Execution	WebApps	Hardware
2020-02-17	Wordpress Plugin Strong Testimonials 2.40.1 - Persistent Cross-Site Scripting	WebApps	PHP
2020-02-17	SOPlanning 1.45 - 'by' SQL Injection	WebApps	PHP
2020-02-14	phpMyChat Plus 1.98 - 'pmc_username' SQL Injection	WebApps	PHP
2020-02-13	WordPress Plugin ultimate-member 2.1.3 - Local File Inclusion	WebApps	PHP
2020-02-13	PANDORAFMS 7.0 - Authenticated Remote Code Execution	WebApps	PHP
2020-02-13	Wordpress Plugin contact-form-7 5.1.6 - Remote File Upload	WebApps	PHP
2020-02-13	Wordpress Plugin wordfence.7.4.5 - Local File Disclosure	WebApps	PHP
2020-02-13	Wordpress Plugin tutor.1.5.3 - Persistent Cross-Site Scripting	WebApps	PHP
2020-02-13	Wordpress Plugin tutor.1.5.3 - Local File Inclusion	WebApps	PHP
2020-02-11	WordPress InfiniteWP - Client Authentication Bypass (Metasploit)	WebApps	PHP
2020-02-11	Vanilla Forums 2.6.3 - Persistent Cross-Site Scripting	WebApps	PHP
2020-02-11	CHIYU BF430 TCP IP Converter - Stored Cross-Site Scripting	WebApps	CGI
2020-02-10	LearnDash WordPress LMS Plugin 3.1.2 - Reflective Cross-Site Scripting	WebApps	PHP
2020-02-10	Forcepoint WebSecurity 8.5 - Reflective Cross-Site Scripting	WebApps	Multiple
2020-02-07	Google Invisible RECAPTCHA 3 - Spoof Bypass	WebApps	Multiple
2020-02-07	ExpertGPS 6.38 - XML External Entity Injection	WebApps	XML
2020-02-07	EyesOfNetwork 5.3 - Remote Code Execution	WebApps	PHP
2020-02-07	PackWeb Formap E-learning 1.0 - 'NumCours' SQL Injection	WebApps	PHP
2020-02-07	VehicleWorkshop 1.0 - 'bookingid' SQL Injection	WebApps	PHP
2020-02-07	QuickDate 1.3.2 - SQL Injection	WebApps	PHP
2020-02-06	Cisco Data Center Network Manager 11.2.1 - 'LanFabricImpl' Command Injection	WebApps	Java
2020-02-06	Cisco Data Center Network Manager 11.2.1 - 'getVmHostData' SQL Injection	WebApps	Java
2020-02-06	Cisco Data Center Network Manager 11.2 - Remote Code Execution	WebApps	Java
2020-02-06	Ecommerce Systempay 1.0 - Production KEY Brute Force	WebApps	PHP
2020-02-06	Online Job Portal 1.0 - Cross Site Request Forgery (Add User)	WebApps	PHP
2020-02-06	Online Job Portal 1.0 - Remote Code Execution	WebApps	PHP
2020-02-06	Online Job Portal 1.0 - 'user_email' SQL Injection	WebApps	PHP
2020-02-05	AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)	WebApps	JSON
2020-02-05	Verodin Director Web Console 3.5.4.0 - Remote Authenticated Password Disclosure (PoC)	WebApps	JSON
2020-02-05	Kronos WebTA 4.0 - Authenticated Remote Privilege Escalation	WebApps	Java
2020-02-05	Wago PFC200 - Authenticated Remote Code Execution (Metasploit)	WebApps	Hardware
2020-02-05	AVideo Platform 8.1 - Information Disclosure (User Enumeration)	WebApps	JSON
2020-02-04	F-Secure Internet Gatekeeper 5.40 - Heap Overflow (PoC)	WebApps	Linux
2020-02-04	Centreon 19.10.5 - 'Pollers' Remote Command Execution (Metasploit)	WebApps	PHP
2020-02-03	School ERP System 1.0 - Cross Site Request Forgery (Add Admin)	WebApps	PHP
2020-02-03	Schneider Electric U.Motion Builder 1.3.4 - Authenticated Command Injection	WebApps	Hardware
2020-02-03	Jira 8.3.4 - Information Disclosure (Username Enumeration)	WebApps	Java
2020-02-03	phpList 3.5.0 - Authentication Bypass	WebApps	PHP
2020-02-03	IceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting	WebApps	PHP
2020-01-31	FlexNet Publisher 11.12.1 - Cross-Site Request Forgery (Add Local Admin)	WebApps	PHP
2020-01-31	Lotus Core CMS 1.0.1 - Local File Inclusion	WebApps	PHP
2020-01-30	rConfig 3.9.3 - Authenticated Remote Code Execution	WebApps	PHP
2020-01-29	Fifthplay S.A.M.I 2019.2_HP - Persistent Cross-Site Scripting	WebApps	Hardware
2020-01-29	Centreon 19.10.5 - 'centreontrapd' Remote Command Execution	WebApps	PHP
2020-01-29	Centreon 19.10.5 - 'Pollers' Remote Command Execution	WebApps	PHP
2020-01-29	Satellian 1.12 - Remote Code Execution	WebApps	Hardware
2020-01-29	Cups Easy 1.0 - Cross Site Request Forgery (Password Reset)	WebApps	PHP
2020-01-29	Liferay CE Portal 6.0.2 - Remote Command Execution	WebApps	Java
2020-01-29	Kibana 6.6.1 - CSV Injection	WebApps	Windows
2020-01-28	Centreon 19.10.5 - Remote Command Execution	WebApps	PHP
2020-01-28	Centreon 19.10.5 - Database Credentials Disclosure	WebApps	PHP
2020-01-28	Octeth Oempro 4.8 - 'CampaignID' SQL Injection	WebApps	PHP
2020-01-28	Adive Framework 2.0.8 - Cross-Site Request Forgery (Change Admin Password)	WebApps	PHP
2020-01-24	Genexis Platinum-4410 2.1 - Authentication Bypass	WebApps	Hardware
2020-01-24	OLK Web Store 2020 - Cross-Site Request Forgery	WebApps	ASP
2020-01-24	Webtareas 2.0 - 'id' SQL Injection	WebApps	PHP
2020-01-24	TP-Link TP-SG105E 1.0.0 - Unauthenticated Remote Reboot	WebApps	Hardware
2020-01-23	qdPM 9.1 - Remote Code Execution	WebApps	PHP
2020-01-22	Citrix XenMobile Server 10.8 - XML External Entity Injection	WebApps	XML
2020-01-21	ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection	WebApps	Java
2020-01-20	Centreon 19.04 - Authenticated Remote Code Execution (Metasploit)	WebApps	PHP
2020-01-20	Adive Framework 2.0.8 - Persistent Cross-Site Scripting	WebApps	PHP
2020-01-17	Wordpress Time Capsule Plugin 1.21.16 - Authentication Bypass	WebApps	PHP
2020-01-17	Wordpress Plugin InfiniteWP Client 1.9.4.5 - Authentication Bypass	WebApps	PHP
2020-01-16	Rukovoditel Project Management CRM 2.5.2 - 'filters' SQL Injection	WebApps	PHP
2020-01-16	Rukovoditel Project Management CRM 2.5.2 - 'entities_id' SQL Injection	WebApps	PHP
2020-01-16	Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path Traversal	WebApps	Multiple
2020-01-16	Tautulli 2.1.9 - Denial of Service ( Metasploit )	WebApps	Multiple
2020-01-16	Online Book Store 1.0 - Arbitrary File Upload	WebApps	PHP
2020-01-16	Jenkins Gitlab Hook Plugin 1.4.2 - Reflected Cross-Site Scripting	WebApps	Java
2020-01-16	Rukovoditel Project Management CRM 2.5.2 - 'reports_id' SQL Injection	WebApps	PHP
2020-01-16	WordPress Plugin Postie 1.9.40 - Persistent Cross-Site Scripting	WebApps	PHP
2020-01-15	Huawei HG255 - Directory Traversal ( Metasploit )	WebApps	Hardware
2020-01-15	Online Book Store 1.0 - 'bookisbn' SQL Injection	WebApps	PHP
2020-01-14	IBM RICOH 6400 Printer - HTML Injection	WebApps	Hardware
2020-01-14	IBM RICOH InfoPrint 6500 Printer - HTML Injection	WebApps	Hardware
2020-01-13	Digi AnywhereUSB 14 - Reflective Cross-Site Scripting	WebApps	PHP
2020-01-13	Citrix Application Delivery Controller and Gateway 10.5 - Remote Code Execution (Metasploit)	WebApps	Multiple
2020-01-13	Chevereto 3.13.4 Core - Remote Code Execution	webapps	PHP
2020-01-13	Citrix Application Delivery Controller and Gateway 10.5 - Remote Code Execution (Metasploit)	webapps	Multiple
2020-01-13	Digi AnywhereUSB 14 - Reflective Cross-Site Scripting	webapps	PHP
2020-01-11	Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution (PoC)	webapps	Multiple
2020-01-11	Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution	webapps	Multiple
2020-01-10	Pandora 7.0NG - Remote Code Execution	webapps	PHP
2020-01-10	PixelStor 5000 K:4.0.1580-20150629 - Remote Code Execution	webapps	PHP
2020-01-10	ASTPP 4.0.1 VoIP Billing - Database Backup Download	webapps	Linux
2020-01-09	Oracle Weblogic 10.3.6.0.0 - Remote Command Execution	webapps	Java
2020-01-08	Codoforum 4.8.3 - 'input_txt' Persistent Cross-Site Scripting	webapps	PHP
2020-01-08	Online Book Store 1.0 - Unauthenticated Remote Code Execution	webapps	PHP
2020-01-08	Tomcat proprietaryEvaluate 9.0.0.M1 - Sandbox Escape	webapps	Java
2020-01-07	Job Portal 1.0 - Remote Code Execution	webapps	PHP
2020-01-07	piSignage 2.6.4 - Directory Traversal	webapps	Hardware
2020-01-07	Complaint Management System 4.0 - Remote Code Execution	webapps	PHP
2020-01-06	Dairy Farm Shop Management System 1.0 - 'username' SQL Injection	webapps	PHP
2020-01-06	Complaint Management System 4.0 - 'cid' SQL injection	webapps	PHP
2020-01-06	IBM RICOH Infoprint 1532 Printer - Persistent Cross-Site Scripting	webapps	Hardware
2020-01-06	Subrion CMS 4.0.5 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2020-01-06	Hostel Management System 2.0 - 'id' SQL Injection	webapps	PHP
2020-01-06	elaniin CMS 1.0 - Authentication Bypass	webapps	PHP
2020-01-06	Small CRM 2.0 - Authentication Bypass	webapps	PHP
2020-01-06	Voyager 1.3.0 - Directory Traversal	webapps	PHP
2020-01-06	Codoforum 4.8.3 - Persistent Cross-Site Scripting	webapps	PHP
2020-01-03	Online Course Registration 2.0 - Remote Code Execution	webapps	PHP
2020-01-03	Karakuzu ERP Management Web 5.7.0 - 'k_adi_duz' SQL Injection	webapps	PHP
2020-01-02	Hospital Management System 4.0 - 'searchdata' SQL Injection	webapps	PHP
2020-01-02	Hospital Management System 4.0 - Persistent Cross-Site Scripting	webapps	PHP
2020-01-02	BloodX 1.0 - Authentication Bypass	webapps	PHP
2020-01-01	Shopping Portal ProVersion 3.0 - Authentication Bypass	webapps	PHP
2020-01-01	IBM InfoPrint 4247-Z03 Impact Matrix Printer - Directory Traversal	webapps	Hardware
2020-01-01	Hospital Management System 4.0 - Authentication Bypass	webapps	PHP