[webapps] Wordpress Theme Travelscape v1.0.3 - Arbitrary File Upload

Wordpress Theme Travelscape v1.0.3 - Arbitrary File Upload

[webapps] Daily Expense Manager 1.0 - 'term' SQLi

Daily Expense Manager 1.0 - 'term' SQLi

[webapps] Human Resource Management System v1.0 - Multiple SQLi

Human Resource Management System v1.0 - Multiple SQLi

[webapps] Best Student Result Management System v1.0 - Multiple SQLi

Best Student Result Management System v1.0 - Multiple SQLi

[remote] Positron Broadcast Signal Processor TRA7005 v1.20 - Authentication Bypass

Positron Broadcast Signal Processor TRA7005 v1.20 - Authentication Bypass

[webapps] Open Source Medicine Ordering System v1.0 - SQLi

Open Source Medicine Ordering System v1.0 - SQLi

[local] AnyDesk 7.0.15 - Unquoted Service Path

AnyDesk 7.0.15 - Unquoted Service Path

[webapps] Quick CMS v6.7 en 2023 - 'password' SQLi

Quick CMS v6.7 en 2023 - 'password' SQLi

[webapps] Wordpress Plugin Alemha Watermarker 1.3.1 - Stored Cross-Site Scripting (XSS)

Wordpress Plugin Alemha Watermarker 1.3.1 - Stored Cross-Site Scripting (XSS)

[webapps] Computer Laboratory Management System v1.0 - Multiple-SQLi

Computer Laboratory Management System v1.0 - Multiple-SQLi

[local] ESET NOD32 Antivirus 17.0.16.0 - Unquoted Service Path

ESET NOD32 Antivirus 17.0.16.0 - Unquoted Service Path

[webapps] Daily Habit Tracker 1.0 - Stored Cross-Site Scripting (XSS)

Daily Habit Tracker 1.0 - Stored Cross-Site Scripting (XSS)

[webapps] Petrol Pump Management Software v1.0 - Remote Code Execution (RCE)

Petrol Pump Management Software v1.0 - Remote Code Execution (RCE)

[webapps] Online Hotel Booking In PHP 1.0 - Blind SQL Injection (Unauthenticated)

Online Hotel Booking In PHP 1.0 - Blind SQL Injection (Unauthenticated)

[webapps] CE Phoenix v1.0.8.20 - Remote Code Execution

CE Phoenix v1.0.8.20 - Remote Code Execution

[webapps] Simple Backup Plugin Python Exploit 2.7.10 - Path Traversal

Simple Backup Plugin Python Exploit 2.7.10 - Path Traversal

[webapps] FoF Pretty Mail 1.1.2 - Local File Inclusion (LFI)

FoF Pretty Mail 1.1.2 - Local File Inclusion (LFI)

[webapps] Hospital Management System v1.0 - Stored Cross Site Scripting (XSS)

Hospital Management System v1.0 - Stored Cross Site Scripting (XSS)

[webapps] E-INSUARANCE v1.0 - Stored Cross Site Scripting (XSS)

E-INSUARANCE v1.0 - Stored Cross Site Scripting (XSS)

[webapps] Gibbon LMS v26.0.00 - SSTI vulnerability

Gibbon LMS v26.0.00 - SSTI vulnerability

[webapps] Smart School 6.4.1 - SQL Injection

Smart School 6.4.1 - SQL Injection

[webapps] Employee Management System 1.0 - `txtfullname` and `txtphone` SQL Injection

Employee Management System 1.0 - `txtfullname` and `txtphone` SQL Injection

[webapps] Casdoor < v1.331.0 - '/api/set-password' CSRF

Casdoor

[webapps] Daily Habit Tracker 1.0 - SQL Injection

Daily Habit Tracker 1.0 - SQL Injection

[local] ASUS Control Center Express 01.06.15 - Unquoted Service Path

ASUS Control Center Express 01.06.15 - Unquoted Service Path

[webapps] Blood Bank v1.0 - Stored Cross Site Scripting (XSS)

Blood Bank v1.0 - Stored Cross Site Scripting (XSS)

[webapps] OpenCart Core 4.0.2.3 - 'search' SQLi

OpenCart Core 4.0.2.3 - 'search' SQLi

[webapps] FoF Pretty Mail 1.1.2 - Server Side Template Injection (SSTI)

FoF Pretty Mail 1.1.2 - Server Side Template Injection (SSTI)

[local] Microsoft Windows Defender - Detection Mitigation Bypass TrojanWin32Powessere.G

Microsoft Windows Defender - Detection Mitigation Bypass TrojanWin32Powessere.G

[local] Microsoft Windows 10.0.17763.5458 - Kernel Privilege Escalation

Microsoft Windows 10.0.17763.5458 - Kernel Privilege Escalation

[local] Rapid7 nexpose - 'nexposeconsole' Unquoted Service Path

Rapid7 nexpose - 'nexposeconsole' Unquoted Service Path

[webapps] Employee Management System 1.0 - `txtusername` and `txtpassword` SQL Injection (Admin Login)

Employee Management System 1.0 - `txtusername` and `txtpassword` SQL Injection (Admin Login)

[webapps] Axigen < 10.5.7 - Persistent Cross-Site Scripting

Axigen

[webapps] Elementor Website Builder < 3.12.2 - Admin+ SQLi

Elementor Website Builder

[remote] GL-iNet MT6000 4.5.5 - Arbitrary File Download

GL-iNet MT6000 4.5.5 - Arbitrary File Download

[webapps] Wordpress Plugin - Membership For WooCommerce < v2.1.7 - Arbitrary File Upload to Shell (Unauthenticated)

Wordpress Plugin - Membership For WooCommerce

[webapps] Daily Habit Tracker 1.0 - Broken Access Control

Daily Habit Tracker 1.0 - Broken Access Control

[webapps] LeptonCMS 7.0.0 - Remote Code Execution (RCE) (Authenticated)

LeptonCMS 7.0.0 - Remote Code Execution (RCE) (Authenticated)

[remote] Asterisk AMI - Partial File Content & Path Disclosure (Authenticated)

Asterisk AMI - Partial File Content & Path Disclosure (Authenticated)

[local] Dell Security Management Server <1.9.0 - Local Privilege Escalation

Dell Security Management Server

[remote] Siklu MultiHaul TG series < 2.0.0 - unauthenticated credential disclosure

Siklu MultiHaul TG series

[webapps] Workout Journal App 1.0 - Stored XSS

Workout Journal App 1.0 - Stored XSS

[dos] RouterOS 6.40.5 - 6.44 and 6.48.1 - 6.49.10 - Denial of Service

RouterOS 6.40.5 - 6.44 and 6.48.1 - 6.49.10 - Denial of Service

[remote] WinRAR version 6.22 - Remote Code Execution via ZIP archive

WinRAR version 6.22 - Remote Code Execution via ZIP archive

[webapps] Purei CMS 1.0 - SQL Injection

Purei CMS 1.0 - SQL Injection

[webapps] Broken Access Control - on NodeBB v3.6.7

Broken Access Control - on NodeBB v3.6.7

[webapps] liveSite Version 2019.1 - Remote Code Execution

liveSite Version 2019.1 - Remote Code Execution

[webapps] Wallos < 1.11.2 - File Upload RCE

Wallos

[webapps] Craft CMS 4.4.14 - Unauthenticated Remote Code Execution

Craft CMS 4.4.14 - Unauthenticated Remote Code Execution

[webapps] Tourism Management System v2.0 - Arbitrary File Upload

Tourism Management System v2.0 - Arbitrary File Upload

[webapps] SPA-CART CMS - Stored XSS

SPA-CART CMS - Stored XSS

[webapps] Nagios XI Version 2024R1.01 - SQL Injection

Nagios XI Version 2024R1.01 - SQL Injection

[remote] LBT-T300-mini1 - Remote Buffer Overflow

LBT-T300-mini1 - Remote Buffer Overflow

[webapps] Insurance Management System PHP and MySQL 1.0 - Multiple Stored XSS

Insurance Management System PHP and MySQL 1.0 - Multiple Stored XSS

[webapps] LimeSurvey Community 5.3.32 - Stored XSS

LimeSurvey Community 5.3.32 - Stored XSS

[webapps] MobileShop master v1.0 - SQL Injection Vuln.

MobileShop master v1.0 - SQL Injection Vuln.

[remote] minaliC 2.0.0 - Denied of Service

minaliC 2.0.0 - Denied of Service

[webapps] Teacher Subject Allocation Management System 1.0 - 'searchdata' SQLi

Teacher Subject Allocation Management System 1.0 - 'searchdata' SQLi

[webapps] Employee Management System 1.0 - 'admin_id' SQLi

Employee Management System 1.0 - 'admin_id' SQLi

[webapps] Simple Task List 1.0 - 'status' SQLi

Simple Task List 1.0 - 'status' SQLi