FreshRSS

🔒
△ 🔃
☐ ☆ ✇ Exploit-DB Updates

[webapps] Online-Pizza-Ordering -1.0 - Remote Code Execution (RCE)

April 8th 2023 at 00:00
Online-Pizza-Ordering -1.0 - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Restaurant Management System 1.0 - SQL Injection

April 8th 2023 at 00:00
Restaurant Management System 1.0 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] Suprema BioStar 2 v2.8.16 - SQL Injection

April 8th 2023 at 00:00
Suprema BioStar 2 v2.8.16 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] Goanywhere Encryption helper 7.1.1 - Remote Code Execution (RCE)

April 8th 2023 at 00:00
Goanywhere Encryption helper 7.1.1 - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Adobe Connect 11.4.5 - Local File Disclosure

April 8th 2023 at 00:00
Adobe Connect 11.4.5 - Local File Disclosure
☐ ☆ ✇ Exploit-DB Updates

[remote] Microsoft Excel 365 MSO (Version 2302 Build 16.0.16130.20186) 64-bit - Remote Code Execution (RCE)

April 8th 2023 at 00:00
Microsoft Excel 365 MSO (Version 2302 Build 16.0.16130.20186) 64-bit - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Online Appointment System V1.0 - Cross-Site Scripting (XSS)

April 8th 2023 at 00:00
Online Appointment System V1.0 - Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Pentaho BA Server EE 9.3.0.0-428 - Remote Code Execution (RCE) (Unauthenticated)

April 8th 2023 at 00:00
Pentaho BA Server EE 9.3.0.0-428 - Remote Code Execution (RCE) (Unauthenticated)
☐ ☆ ✇ Exploit-DB Updates

[webapps] X2CRM v6.6/6.9 - Stored Cross-Site Scripting (XSS) (Authenticated)

April 8th 2023 at 00:00
X2CRM v6.6/6.9 - Stored Cross-Site Scripting (XSS) (Authenticated)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Palo Alto Cortex XSOAR 6.5.0 - Stored Cross-Site Scripting (XSS)

April 8th 2023 at 00:00
Palo Alto Cortex XSOAR 6.5.0 - Stored Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[local] Stonesoft VPN Client 6.2.0 / 6.8.0 - Local Privilege Escalation

April 8th 2023 at 00:00
Stonesoft VPN Client 6.2.0 / 6.8.0 - Local Privilege Escalation
☐ ☆ ✇ Exploit-DB Updates

[webapps] WebsiteBaker v2.13.3 - Cross-Site Scripting (XSS)

April 8th 2023 at 00:00
WebsiteBaker v2.13.3 - Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Icinga Web 2.10 - Arbitrary File Disclosure

April 8th 2023 at 00:00
Icinga Web 2.10 - Arbitrary File Disclosure
☐ ☆ ✇ Exploit-DB Updates

[local] ESET Service 16.0.26.0 - 'Service ekrn' Unquoted Service Path

April 8th 2023 at 00:00
ESET Service 16.0.26.0 - 'Service ekrn' Unquoted Service Path
☐ ☆ ✇ Exploit-DB Updates

[webapps] Medicine Tracker System v1.0 - Sql Injection

April 8th 2023 at 00:00
Medicine Tracker System v1.0 - Sql Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] dotclear 2.25.3 - Remote Code Execution (RCE) (Authenticated)

April 8th 2023 at 00:00
dotclear 2.25.3 - Remote Code Execution (RCE) (Authenticated)
☐ ☆ ✇ Exploit-DB Updates

[local] ActFax 10.10 - Unquoted Path Services

April 8th 2023 at 00:00
ActFax 10.10 - Unquoted Path Services
☐ ☆ ✇ Exploit-DB Updates

[dos] FortiRecorder 6.4.3 - Denial of Service

April 8th 2023 at 00:00
FortiRecorder 6.4.3 - Denial of Service
☐ ☆ ✇ Exploit-DB Updates

[webapps] X2CRM v6.6/6.9 - Reflected Cross-Site Scripting (XSS) (Authenticated)

April 8th 2023 at 00:00
X2CRM v6.6/6.9 - Reflected Cross-Site Scripting (XSS) (Authenticated)
☐ ☆ ✇ Exploit-DB Updates

[local] RSA NetWitness Platform 12.2 - Incorrect Access Control / Code Execution

April 8th 2023 at 00:00
RSA NetWitness Platform 12.2 - Incorrect Access Control / Code Execution
☐ ☆ ✇ Exploit-DB Updates

[webapps] Symantec Messaging Gateway 10.7.4 - Stored Cross-Site Scripting (XSS)

April 8th 2023 at 00:00
Symantec Messaging Gateway 10.7.4 - Stored Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] ZCBS/ZBBS/ZPBS v4.14k - Reflected Cross-Site Scripting (XSS)

April 8th 2023 at 00:00
ZCBS/ZBBS/ZPBS v4.14k - Reflected Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[local] Lucee Scheduled Job v1.0 - Command Execution

April 8th 2023 at 00:00
Lucee Scheduled Job v1.0 - Command Execution
☐ ☆ ✇ Exploit-DB Updates

[webapps] Altenergy Power Control Software C1.2.5 - OS command injection

April 8th 2023 at 00:00
Altenergy Power Control Software C1.2.5 - OS command injection
☐ ☆ ✇ Exploit-DB Updates

[local] Google Chrome 109.0.5414.74 - Code Execution via missing lib file (Ubuntu)

April 8th 2023 at 00:00
Google Chrome 109.0.5414.74 - Code Execution via missing lib file (Ubuntu)
☐ ☆ ✇ Exploit-DB Updates

[remote] pfsenseCE v2.6.0 - Anti-brute force protection bypass

April 8th 2023 at 00:00
pfsenseCE v2.6.0 - Anti-brute force protection bypass
☐ ☆ ✇ Exploit-DB Updates

[webapps] Joomla! v4.2.8 - Unauthenticated information disclosure

April 8th 2023 at 00:00
Joomla! v4.2.8 - Unauthenticated information disclosure
☐ ☆ ✇ Exploit-DB Updates

[webapps] ENTAB ERP 1.0 - Username PII leak

April 8th 2023 at 00:00
ENTAB ERP 1.0 - Username PII leak
☐ ☆ ✇ Exploit-DB Updates

[local] Wondershare Dr Fone 12.9.6 - Privilege Escalation

April 7th 2023 at 00:00
Wondershare Dr Fone 12.9.6 - Privilege Escalation
☐ ☆ ✇ Exploit-DB Updates

[remote] Schneider Electric v1.0 - Directory traversal & Broken Authentication

April 7th 2023 at 00:00
Schneider Electric v1.0 - Directory traversal & Broken Authentication
☐ ☆ ✇ Exploit-DB Updates

[remote] IBM Aspera Faspex 4.4.1 - YAML deserialization (RCE)

April 7th 2023 at 00:00
IBM Aspera Faspex 4.4.1 - YAML deserialization (RCE)
☐ ☆ ✇ Exploit-DB Updates

[remote] Docker based datastores for IBM Instana 241-2 243-0 - No Authentication

April 7th 2023 at 00:00
Docker based datastores for IBM Instana 241-2 243-0 - No Authentication
☐ ☆ ✇ Exploit-DB Updates

[remote] Tenda N300 F3 12.01.01.48 - Malformed HTTP Request Header Processing

April 7th 2023 at 00:00
Tenda N300 F3 12.01.01.48 - Malformed HTTP Request Header Processing
☐ ☆ ✇ Exploit-DB Updates

[remote] Franklin Fueling Systems TS-550 - Exploit and Default Password

April 7th 2023 at 00:00
Franklin Fueling Systems TS-550 - Exploit and Default Password
☐ ☆ ✇ Exploit-DB Updates

[webapps] MAC 1200R - Directory Traversal

April 7th 2023 at 00:00
MAC 1200R - Directory Traversal
☐ ☆ ✇ Exploit-DB Updates

[webapps] ChurchCRM 4.5.1 - Authenticated SQL Injection

April 7th 2023 at 00:00
ChurchCRM 4.5.1 - Authenticated SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] Snitz Forum v1.0 - Blind SQL Injection

April 7th 2023 at 00:00
Snitz Forum v1.0 - Blind SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] NotrinosERP 0.7 - Authenticated Blind SQL Injection

April 7th 2023 at 00:00
NotrinosERP 0.7 - Authenticated Blind SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] Rukovoditel 3.3.1 - Remote Code Execution (RCE)

April 7th 2023 at 00:00
Rukovoditel 3.3.1 - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Best pos Management System v1.0 - Remote Code Execution (RCE) on File Upload

April 6th 2023 at 00:00
Best pos Management System v1.0 - Remote Code Execution (RCE) on File Upload
☐ ☆ ✇ Exploit-DB Updates

[remote] Osprey Pump Controller 1.0.1 - Unauthenticated File Disclosure

April 6th 2023 at 00:00
Osprey Pump Controller 1.0.1 - Unauthenticated File Disclosure
☐ ☆ ✇ Exploit-DB Updates

[remote] Unified Remote 3.13.0 - Remote Code Execution (RCE)

April 6th 2023 at 00:00
Unified Remote 3.13.0 - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[remote] Osprey Pump Controller 1.0.1 - Unauthenticated Remote Code Execution Exploit

April 6th 2023 at 00:00
Osprey Pump Controller 1.0.1 - Unauthenticated Remote Code Execution Exploit
☐ ☆ ✇ Exploit-DB Updates

[local] pdfkit v0.8.7.2 - Command Injection

April 6th 2023 at 00:00
pdfkit v0.8.7.2 - Command Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] Purchase Order Management-1.0 - Local File Inclusion

April 6th 2023 at 00:00
Purchase Order Management-1.0 - Local File Inclusion
☐ ☆ ✇ Exploit-DB Updates

[webapps] Auto Dealer Management System v1.0 - SQL Injection in sell_vehicle.php

April 6th 2023 at 00:00
Auto Dealer Management System v1.0 - SQL Injection in sell_vehicle.php
☐ ☆ ✇ Exploit-DB Updates

[webapps] Music Gallery Site v1.0 - SQL Injection on music_list.php

April 6th 2023 at 00:00
Music Gallery Site v1.0 - SQL Injection on music_list.php
☐ ☆ ✇ Exploit-DB Updates

[remote] Osprey Pump Controller 1.0.1 - Administrator Backdoor Access

April 6th 2023 at 00:00
Osprey Pump Controller 1.0.1 - Administrator Backdoor Access
☐ ☆ ✇ Exploit-DB Updates

[webapps] Auto Dealer Management System v1.0 - SQL Injection

April 6th 2023 at 00:00
Auto Dealer Management System v1.0 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[local] HospitalRun 1.0.0-beta - Local Root Exploit for macOS

April 6th 2023 at 00:00
HospitalRun 1.0.0-beta - Local Root Exploit for macOS
☐ ☆ ✇ Exploit-DB Updates

[webapps] Music Gallery Site v1.0 - Broken Access Control

April 6th 2023 at 00:00
Music Gallery Site v1.0 - Broken Access Control
☐ ☆ ✇ Exploit-DB Updates

[remote] Osprey Pump Controller 1.0.1 - Authentication Bypass Credentials Modification

April 6th 2023 at 00:00
Osprey Pump Controller 1.0.1 - Authentication Bypass Credentials Modification
☐ ☆ ✇ Exploit-DB Updates

[remote] WIMAX SWC-5100W Firmware V(1.11.0.1 :1.9.9.4) - Authenticated RCE

April 6th 2023 at 00:00
WIMAX SWC-5100W Firmware V(1.11.0.1 :1.9.9.4) - Authenticated RCE
☐ ☆ ✇ Exploit-DB Updates

[remote] Osprey Pump Controller 1.0.1 - (pseudonym) Semi-blind Command Injection

April 6th 2023 at 00:00
Osprey Pump Controller 1.0.1 - (pseudonym) Semi-blind Command Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversal and LFI

April 6th 2023 at 00:00
Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversal and LFI
☐ ☆ ✇ Exploit-DB Updates

[webapps] Music Gallery Site v1.0 - SQL Injection on page view_music_details.php

April 6th 2023 at 00:00
Music Gallery Site v1.0 - SQL Injection on page view_music_details.php
☐ ☆ ✇ Exploit-DB Updates

[webapps] Best pos Management System v1.0 - SQL Injection

April 6th 2023 at 00:00
Best pos Management System v1.0 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] Kimai-1.30.10 - SameSite Cookie-Vulnerability session hijacking

April 6th 2023 at 00:00
Kimai-1.30.10 - SameSite Cookie-Vulnerability session hijacking
☐ ☆ ✇ Exploit-DB Updates

[webapps] ChurchCRM v4.5.3-121fcc1 - SQL Injection

April 6th 2023 at 00:00
ChurchCRM v4.5.3-121fcc1 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] Employee Task Management System v1.0 - Broken Authentication

April 6th 2023 at 00:00
Employee Task Management System v1.0 - Broken Authentication
❌