Bezpečnost I

Exploit - H 2022 2021 2020 2019 2018 2017 2016 2015 2014 2013 2012 2011 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001 2000

2023 - January February March April May June July August September October November December

H Remote Web App Local&Privilege Escalation DoS & PoC ShellCode Exploit Exploit prog. Ex. Techniky Exp. kit Typy Exploitů

2023-04-01	ELSI Smart Floor V3.3.3 - Stored Cross-Site Scripting (XSS)	WebApps	ASPX
2023-04-01	NetIQ/Microfocus Performance Endpoint v5.1 - remote root/SYSTEM exploit	Local	Windows
2023-04-01	Yahoo User Interface library (YUI2) TreeView v2.8.2 - Multiple Reflected Cross Site Scripting (XSS)	WebApps	PHP
2023-04-01	AimOne Video Converter V2.04 Build 103 - Buffer Overflow (DoS)	DoS	Windows
2023-04-01	Nexxt Router Firmware 42.103.1.5095 - Remote Code Execution (RCE) (Authenticated)	Remote	Hardware
2023-04-01	Centos Web Panel 7 v0.9.8.1147 - Unauthenticated Remote Code Execution (RCE)	WebApps	Linux
2023-04-01	Apache 2.4.x - Buffer Overflow	WebApps	Multiple
2023-04-01	TP-Link TL-WR902AC firmware 210730 (V3) - Remote Code Execution (RCE) (Authenticated)	Remote	Hardware
2023-04-01	Hughes Satellite Router HX200 v8.3.1.14 - Remote File Inclusion	Remote	Hardware
2023-04-01	Reprise Software RLM v14.2BL4 - Cross-Site Scripting (XSS)	WebApps	Windows
2023-04-01	SugarCRM 12.2.0 - Remote Code Execution (RCE)	WebApps	PHP
2023-04-01	perfSONAR v4.4.5 - Partial Blind CSRF	WebApps	Multiple
2023-04-01	XCMS v1.83 - Remote Command Execution (RCE)	WebApps	PHP
2023-04-01	AD Manager Plus 7122 - Remote Code Execution (RCE)	Remote	Java
2023-04-01	Splashtop 8.71.12001.0 - Unquoted Service Path	Local	Windows
2023-04-01	GitLab v15.3 - Remote Code Execution (RCE) (Authenticated)	WebApps	Ruby
2023-04-01	Enlightenment v0.25.3 - Privilege escalation	Local	Linux
2023-04-01	GeoVision Camera GV-ADR2701 - Authentication Bypass	WebApps	Hardware
2023-03-31	Textpattern 4.8.8 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2023-03-31	Bangresto 1.0 - SQL Injection	WebApps	PHP
2023-03-31	SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Unauthenticated Factory Reset	Local	Windows
2023-03-31	SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Remote Command Execution (RCE)	Local	Windows
2023-03-31	SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Directory Traversal File Write Exploit	Local	Windows
2023-03-31	SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Authentication Bypass	Local	Windows
2023-03-31	SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Denial Of Service (DoS)	Local	Windows
2023-03-31	SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Authorization Bypass (IDOR)	Local	Windows
2023-03-31	SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Cross-Site Request Forgery	Local	Windows
2023-03-31	SOUND4 Server Service 4.1.102 - Local Privilege Escalation	Local	Windows
2023-03-31	Cacti v1.2.22 - Remote Command Execution (RCE)	WebApps	PHP
2023-03-31	Judging Management System v1.0 - Authentication Bypass	WebApps	PHP
2023-03-31	Judging Management System v1.0 - Remote Code Execution (RCE)	WebApps	PHP
2023-03-31	rconfig 3.9.7 - Sql Injection (Authenticated)	WebApps	PHP
2023-03-31	Spitfire CMS 1.0.475 - PHP Object Injection	WebApps	PHP
2023-03-31	Senayan Library Management System v9.0.0 - SQL Injection	WebApps	PHP
2023-03-31	Bludit 3-14-1 Plugin 'UploadPlugin' - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2023-03-31	CoolerMaster MasterPlus 1.8.5 - 'MPService' Unquoted Service Path	Local	Windows
2023-03-31	qubes-mirage-firewall v0.8.3 - Denial Of Service (DoS)	DoS	Hardware
2023-03-31	WooCommerce v7.1.0 - Remote Code Execution(RCE)	WebApps	PHP
2023-03-31	ASKEY RTF3505VW-N1 - Privilege Escalation	Remote	Hardware
2023-03-31	EQ Enterprise management system v2.2.0 - SQL Injection	WebApps	ASP
2023-03-30	Eve-ng 5.0.1-13 - Stored Cross-Site Scripting (XSS)	WebApps	PHP
2023-03-30	WPForms 1.7.8 - Cross-Site Scripting (XSS)	WebApps	PHP
2023-03-30	Zillya Total Security 3.0.2367.0 - Local Privilege Escalation	Local	Windows
2023-03-30	Shoplazza 1.1 - Stored Cross-Site Scripting (XSS)	WebApps	Multiple
2023-03-30	LISTSERV 17 - Insecure Direct Object Reference (IDOR)	WebApps	CGI
2023-03-30	LISTSERV 17 - Reflected Cross Site Scripting (XSS)	WebApps	CGI
2023-03-30	4images 1.9 - Remote Command Execution (RCE)	WebApps	PHP
2023-03-30	CrowdStrike Falcon AGENT 6.44.15806 - Uninstall without Installation Token	Local	Windows
2023-03-30	Device Manager Express 7.8.20002.47752 - Remote Code Execution (RCE)	WebApps	PHP
2023-03-30	Concrete5 CME v9.1.3 - Xpath injection	WebApps	PHP
2023-03-30	Lavasoft web companion 4.1.0.409 - 'DCIservice' Unquoted Service Path	Local	Windows
2023-03-30	Virtual Reception v1.0 - Web Server Directory Traversal	WebApps	Multiple
2023-03-30	Covenant v0.5 - Remote Code Execution (RCE)	WebApps	Multiple
2023-03-30	Ecommerse v1.0 - Cross-Site Scripting (XSS)	WebApps	PHP
2023-03-30	Boa Web Server v0.94.14 - Authentication Bypass	WebApps	Linux
2023-03-30	Router ZTE-H108NS - Authentication Bypass	Remote	Hardware
2023-03-30	Router ZTE-H108NS - Stack Buffer Overflow (DoS)	DoS	Hardware
2023-03-30	myBB forums 1.8.26 - Stored Cross-Site Scripting (XSS)	WebApps	PHP
2023-03-30	ClicShopping v3.402 - Cross-Site Scripting (XSS)	WebApps	PHP
2023-03-30	Dreamer CMS v4.0.0 - SQL Injection	WebApps	Multiple
2023-03-29	Revenue Collection System v1.0 - Remote Code Execution (RCE)	WebApps	PHP
2023-03-29	Helmet Store Showroom v1.0 - SQL Injection	WebApps	PHP
2023-03-29	Internet Download Manager v6.41 Build 3 - Remote Code Execution (RCE)	Remote	Windows
2023-03-29	Uniview NVR301-04S2-P4 - Reflected Cross-Site Scripting (XSS)	WebApps	Hardware
2023-03-29	DSL-124 Wireless N300 ADSL2+ - Backup File Disclosure	Remote	Hardware
2023-03-29	Outline V1.6.0 - Unquoted Service Path	Local	Windows
2023-03-29	Inbit Messenger v4.9.0 - Unauthenticated Remote Command Execution (RCE)	Remote	Windows
2023-03-29	Inbit Messenger v4.9.0 - Unauthenticated Remote SEH Overflow	Remote	Windows
2023-03-29	Human Resource Management System 1.0 - SQL Injection (unauthenticated)	WebApps	PHP
2023-03-29	Book Store Management System 1.0.0 - Stored Cross-Site Scripting (XSS)	WebApps	PHP
2023-03-29	WP All Import v3.6.7 - Remote Code Execution (RCE) (Authenticated)	WebApps	PHP
2023-03-28	rukovoditel 3.2.1 - Cross-Site Scripting (XSS)	WebApps	PHP
2023-03-28	Senayan Library Management System v9.5.0 - SQL Injection	WebApps	PHP
2023-03-28	iBooking v1.0.8 - Arbitrary File Upload	WebApps	PHP
2023-03-28	ReQlogic v11.3 - Reflected Cross-Site Scripting (XSS)	WebApps	ASPX
2023-03-28	Hashicorp Consul v1.0 - Remote Command Execution (RCE)	Remote	Multiple
2023-03-28	Social-Share-Buttons v2.2.3 - SQL Injection	WebApps	PHP
2023-03-28	Moodle LMS 4.0 - Cross-Site Scripting (XSS)	WebApps	PHP
2023-03-28	Tunnel Interface Driver - Denial of Service	DoS	Windows
2023-03-28	OPSWAT Metadefender Core - Privilege Escalation	WebApps	Multiple
2023-03-28	ZKTeco ZEM/ZMM 8.88 - Missing Authentication	WebApps	JSP
2023-03-28	X-Skipper-Proxy v0.13.237 - Server Side Request Forgery (SSRF)	Remote	Multiple
2023-03-28	Subrion CMS 4.2.1 - Stored Cross-Site Scripting (XSS)	WebApps	PHP
2023-03-28	Label Studio 1.5.0 - Authenticated Server Side Request Forgery (SSRF)	WebApps	Python
2023-03-28	BoxBilling<=4.22.1.5 - Remote Code Execution (RCE)	WebApps	PHP
2023-03-28	Tapo C310 RTSP server v1.3.0 - Unauthorised Video Stream Access	Remote	Hardware
2023-03-28	SugarSync 4.1.3 - 'SugarSync Service' Unquoted Service Path	Local	Windows
2023-03-28	HDD Health 4.2.0.112 - 'HDDHealth' Unquoted Service Path	Local	Windows
2023-03-28	Jetpack 11.4 - Cross Site Scripting (XSS)	WebApps	PHP
2023-03-28	Online shopping system advanced 1.0 - Multiple Vulnerabilities	WebApps	PHP
2023-03-28	SuperMailer v11.20 - Buffer overflow DoS	DoS	Windows
2023-03-28	YouPHPTube<= 7.8 - Multiple Vulnerabilities	WebApps	PHP
2023-03-28	VMware Workstation 15 Pro - Denial of Service	DoS	Windows
2023-03-28	Pega Platform 8.1.0 - Remote Code Execution (RCE)	WebApps	Multiple
2023-03-28	Beauty-salon v1.0 - Remote Code Execution (RCE)	WebApps	PHP
2023-03-27	MiniDVBLinux 5.4 - Arbitrary File Read	Remote	Hardware
2023-03-27	MiniDVBLinux 5.4 - Remote Root Command Injection	Remote	Hardware
2023-03-27	MiniDVBLinux 5.4 - Unauthenticated Stream Disclosure	Remote	Hardware
2023-03-27	MiniDVBLinux 5.4 - Change Root Password	Remote	Hardware
2023-03-27	MiniDVBLinux 5.4 Simple VideoDiskRecorder Protocol SVDRP - Remote Code Execution (RCE)	Remote	Hardware
2023-03-27	FortiOS, FortiProxy, FortiSwitchManager v7.2.1 - Authentication Bypass	WebApps	Multiple
2023-03-27	MiniDVBLinux <=5.4 - Config Download Exploit	Remote	Hardware
2023-03-27	AVS Audio Converter 10.3 - Stack Overflow (SEH)	Local	Windows
2023-03-27	WebTareas 2.4 - RCE (Authorized)	WebApps	PHP
2023-03-27	WebTareas 2.4 - Reflected XSS (Unauthorised)	WebApps	PHP
2023-03-27	WebTareas 2.4 - SQL Injection (Unauthorised)	WebApps	PHP
2023-03-27	Atom CMS v2.0 - SQL Injection (no auth)	WebApps	PHP
2023-03-27	Aero CMS v0.0.1 - PHP Code Injection (auth)	WebApps	PHP
2023-03-27	Aero CMS v0.0.1 - SQL Injection (no auth)	WebApps	PHP
2023-03-27	Desktop Central 9.1.0 - Multiple Vulnerabilities	WebApps	JSP
2023-03-27	Scdbg 1.0 - Buffer overflow DoS	DoS	Windows
2023-03-27	Hex Workshop v6.7 - Buffer overflow DoS	DoS	Windows
2023-03-27	Resource Hacker v3.6.0.92 - Buffer overflow	Local	Windows
2023-03-27	Frhed (Free hex editor) v1.6.0 - Buffer overflow	Local	Windows
2023-03-27	Explorer32++ v1.3.5.531 - Buffer overflow	Local	Windows
2023-03-27	Tftpd32_SE 4.60 - 'Tftpd32_svc' Unquoted Service Path	Local	Windows
2023-03-27	WPN-XM Serverstack for Windows 0.8.6 - Multiple Vulnerabilities	WebApps	PHP
2023-03-27	Webgrind 1.1 - Reflected Cross-Site Scripting (XSS) & Remote Command Execution (RCE)	WebApps	PHP
2023-03-27	Grafana <=6.2.4 - HTML Injection	WebApps	TypeScript
2023-03-27	WiFi Mouse 1.8.3.2 - Remote Code Execution (RCE)	Remote	Windows
2023-03-27	Zoneminder < v1.37.24 - Log Injection & Stored XSS & CSRF Bypass	WebApps	PHP
2023-03-27	Clansphere CMS 2011.4 - Stored Cross-Site Scripting (XSS)	WebApps	PHP
2023-03-27	Zentao Project Management System 17.0 - Authenticated Remote Code Execution (RCE)	WebApps	PHP
2023-03-27	FlatCore CMS 2.1.1 - Stored Cross-Site Scripting (XSS)	WebApps	PHP
2023-03-27	eXtplorer<= 2.1.14 - Authentication Bypass & Remote Code Execution (RCE)	WebApps	PHP
2023-03-27	Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)	DoS	Windows
2023-03-27	Gestionale Open 12.00.00 - 'DB_GO_80' Unquoted Service Path	Local	Windows
2023-03-27	Mediconta 3.7.27 - 'servermedicontservice' Unquoted Service Path	Local	Windows
2023-03-27	Canteen-Management v1.0 - SQL Injection	WebApps	PHP
2023-03-27	Canteen-Management v1.0 - XSS-Reflected	WebApps	PHP
2023-03-25	PHPGurukul Online Birth Certificate System V 1.2 - Blind XSS	WebApps	PHP
2023-03-25	Composr-CMS Version <=10.0.39 - Authenticated Remote Code Execution	WebApps	PHP
2023-03-25	MODX Revolution v2.8.3-pl - Authenticated Remote Code Execution	WebApps	PHP
2023-03-25	Abantecart v1.3.2 - Authenticated Remote Code Execution	WebApps	PHP
2023-03-25	SimpleMachinesForum v2.1.1 - Authenticated Remote Code Execution	WebApps	PHP
2023-03-25	ImpressCMS v1.4.3 - Authenticated SQL Injection	WebApps	PHP
2023-03-25	Password Manager for IIS v2.0 - XSS	WebApps	ASP
2023-03-25	Bus Pass Management System 1.0 - Cross-Site Scripting (XSS)	WebApps	PHP
2023-03-25	DLink DIR 819 A1 - Denial of Service	DoS	Hardware
2023-03-25	GuppY CMS v6.00.10 - Remote Code Execution	WebApps	PHP
2023-03-25	NVFLARE < 2.1.4 - Unsafe Deserialization due to Pickle	Remote	Python
2023-03-25	Lavalite v9.0.0 - XSRF-TOKEN cookie File path traversal	WebApps	PHP
2023-03-25	Employee Performance Evaluation System v1.0 - File Inclusion and RCE	WebApps	PHP
2023-03-25	Yoga Class Registration System v1.0 - Multiple SQLi	WebApps	PHP
2023-03-25	Human Resources Management System v1.0 - Multiple SQLi	WebApps	PHP
2023-03-25	D-Link DNR-322L <=2.60B15 - Authenticated Remote Code Execution	Remote	Hardware
2023-03-25	Online Diagnostic Lab Management System v1.0 - Remote Code Execution (RCE) (Unauthenticated)	WebApps	PHP
2023-03-25	System Mechanic v15.5.0.61 - Arbitrary Read/Write	Local	Windows
2023-03-25	Translatepress Multilinugal WordPress plugin < 2.3.3 - Authenticated SQL Injection	WebApps	PHP
2023-03-25	NEX-Forms WordPress plugin < 7.9.7 - Authenticated SQLi	WebApps	PHP
2023-03-25	"camp" Raspberry Pi camera server 1.0 - Authentication Bypass	WebApps	Python
2023-03-23	Bitbucket v7.0.0 - RCE	WebApps	Python
2023-03-23	wkhtmltopdf 0.12.6 - Server Side Request Forgery	WebApps	ASP
2023-03-23	WorkOrder CMS 0.1.0 - SQL Injection	WebApps	PHP
2023-03-23	MAN-EAM-0003 V3.2.4 - XXE	WebApps	XML
2023-03-23	Owlfiles File Manager 12.0.1 - Multiple Vulnerabilities	WebApps	iOS
2023-03-22	Linksys AX3200 V1.1.00 - Command Injection	WebApps	Hardware
2023-03-22	SoX 14.4.2 - Denial Of Service	DoS	Hardware
2023-03-22	VIAVIWEB Wallpaper Admin 1.0 - Multiple Vulnerabilities	WebApps	PHP
2023-02-20	pfBlockerNG 2.1.4_26 - Remote Code Execution (RCE)	WebApps	PHP