FreshRSS

🔒
△ 🔃
☐ ☆ ✇ Exploit-DB Updates

[webapps] pluck v4.7.18 - Stored Cross-Site Scripting (XSS)

May 5th 2023 at 00:00
pluck v4.7.18 - Stored Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Jedox 2022.4.2 - Remote Code Execution via Directory Traversal

May 5th 2023 at 00:00
Jedox 2022.4.2 - Remote Code Execution via Directory Traversal
☐ ☆ ✇ Exploit-DB Updates

[webapps] Jedox 2020.2.5 - Remote Code Execution via Executable Groovy-Scripts

May 5th 2023 at 00:00
Jedox 2020.2.5 - Remote Code Execution via Executable Groovy-Scripts
☐ ☆ ✇ Exploit-DB Updates

[webapps] KodExplorer v4.51.03 - Pwned-Admin File-Inclusion - Remote Code Execution (RCE)

May 5th 2023 at 00:00
KodExplorer v4.51.03 - Pwned-Admin File-Inclusion - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Ulicms-2023.1 sniffing-vicuna - Remote Code Execution (RCE)

May 5th 2023 at 00:00
Ulicms-2023.1 sniffing-vicuna - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[local] Codigo Markdown Editor v1.0.1 (Electron) - Remote Code Execution

May 5th 2023 at 00:00
Codigo Markdown Editor v1.0.1 (Electron) - Remote Code Execution
☐ ☆ ✇ Exploit-DB Updates

[webapps] Wolf CMS 0.8.3.1 - Remote Code Execution (RCE)

May 5th 2023 at 00:00
Wolf CMS 0.8.3.1 - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Jedox 2020.2.5 - Disclosure of Database Credentials via Improper Access Controls

May 5th 2023 at 00:00
Jedox 2020.2.5 - Disclosure of Database Credentials via Improper Access Controls
☐ ☆ ✇ Exploit-DB Updates

[webapps] Jedox 2020.2.5 - Stored Cross-Site Scripting in Log-Module

May 5th 2023 at 00:00
Jedox 2020.2.5 - Stored Cross-Site Scripting in Log-Module
☐ ☆ ✇ Exploit-DB Updates

[webapps] Online Pizza Ordering System v1.0 - Unauthenticated File Upload

May 5th 2023 at 00:00
Online Pizza Ordering System v1.0 - Unauthenticated File Upload
☐ ☆ ✇ Exploit-DB Updates

[webapps] Cmaps v8.0 - SQL injection

May 5th 2023 at 00:00
Cmaps v8.0 - SQL injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] Jedox 2020.2.5 - Remote Code Execution via Configurable Storage Path

May 5th 2023 at 00:00
Jedox 2020.2.5 - Remote Code Execution via Configurable Storage Path
☐ ☆ ✇ Exploit-DB Updates

[webapps] Ulicms-2023.1 sniffing-vicuna - Stored Cross-Site Scripting (XSS)

May 5th 2023 at 00:00
Ulicms-2023.1 sniffing-vicuna - Stored Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Jedox 2022.4.2 - Disclosure of Database Credentials via Connection Checks

May 5th 2023 at 00:00
Jedox 2022.4.2 - Disclosure of Database Credentials via Connection Checks
☐ ☆ ✇ Exploit-DB Updates

[webapps] Jedox 2022.4.2 - Code Execution via RPC Interfaces

May 5th 2023 at 00:00
Jedox 2022.4.2 - Code Execution via RPC Interfaces
☐ ☆ ✇ Exploit-DB Updates

[webapps] EasyPHP Webserver 14.1 - Multiple Vulnerabilities (RCE and Path Traversal)

May 5th 2023 at 00:00
EasyPHP Webserver 14.1 - Multiple Vulnerabilities (RCE and Path Traversal)
☐ ☆ ✇ Exploit-DB Updates

[webapps] File Thingie 2.5.7 - Remote Code Execution (RCE)

May 5th 2023 at 00:00
File Thingie 2.5.7 - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[webapps] PHPFusion 9.10.30 - Stored Cross-Site Scripting (XSS)

May 2nd 2023 at 00:00
PHPFusion 9.10.30 - Stored Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] OpenEMR v7.0.1 - Authentication credentials brute force

May 2nd 2023 at 00:00
OpenEMR v7.0.1 - Authentication credentials brute force
☐ ☆ ✇ Exploit-DB Updates

[webapps] admidio v4.2.5 - CSV Injection

May 2nd 2023 at 00:00
admidio v4.2.5 - CSV Injection
☐ ☆ ✇ Exploit-DB Updates

[local] MilleGPG5 5.9.2 (Gennaio 2023) - Local Privilege Escalation / Incorrect Access Control

May 2nd 2023 at 00:00
MilleGPG5 5.9.2 (Gennaio 2023) - Local Privilege Escalation / Incorrect Access Control
☐ ☆ ✇ Exploit-DB Updates

[webapps] Serendipity 2.4.0 - File Inclusion RCE

May 2nd 2023 at 00:00
Serendipity 2.4.0 - File Inclusion RCE
☐ ☆ ✇ Exploit-DB Updates

[webapps] Companymaps v8.0 - Stored Cross Site Scripting (XSS)

May 2nd 2023 at 00:00
Companymaps v8.0 - Stored Cross Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] SoftExpert (SE) Suite v2.1.3 - Local File Inclusion

May 2nd 2023 at 00:00
SoftExpert (SE) Suite v2.1.3 - Local File Inclusion
☐ ☆ ✇ Exploit-DB Updates

[webapps] PHPJabbers Simple CMS V5.0 - Stored Cross-Site Scripting (XSS)

May 2nd 2023 at 00:00
PHPJabbers Simple CMS V5.0 - Stored Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] GLPI 9.5.7 - Username Enumeration

May 2nd 2023 at 00:00
GLPI 9.5.7 - Username Enumeration
☐ ☆ ✇ Exploit-DB Updates

[webapps] PHPJabbers Simple CMS 5.0 - SQL Injection

May 2nd 2023 at 00:00
PHPJabbers Simple CMS 5.0 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[local] FS-S3900-24T4S - Privilege Escalation

May 2nd 2023 at 00:00
FS-S3900-24T4S - Privilege Escalation
☐ ☆ ✇ Exploit-DB Updates

[local] Advanced Host Monitor v12.56 - Unquoted Service Path

May 2nd 2023 at 00:00
Advanced Host Monitor v12.56 - Unquoted Service Path
☐ ☆ ✇ Exploit-DB Updates

[webapps] phpMyFAQ v3.1.12 - CSV Injection

May 2nd 2023 at 00:00
phpMyFAQ v3.1.12 - CSV Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] PHP Restaurants 1.0 - SQLi Authentication Bypass & Cross Site Scripting

May 2nd 2023 at 00:00
PHP Restaurants 1.0 - SQLi Authentication Bypass & Cross Site Scripting
☐ ☆ ✇ Exploit-DB Updates

[webapps] revive-adserver v5.4.1 - Cross-Site Scripting (XSS)

May 2nd 2023 at 00:00
revive-adserver v5.4.1 - Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] projectSend r1605 - Private file download

May 2nd 2023 at 00:00
projectSend r1605 - Private file download
☐ ☆ ✇ Exploit-DB Updates

[webapps] ChurchCRM v4.5.3 - Authenticated SQL Injection

April 27th 2023 at 00:00
ChurchCRM v4.5.3 - Authenticated SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] Sophos Web Appliance 4.3.10.4 - Pre-auth command injection

April 25th 2023 at 00:00
Sophos Web Appliance 4.3.10.4 - Pre-auth command injection
☐ ☆ ✇ Exploit-DB Updates

[local] OCS Inventory NG 2.3.0.0 - Unquoted Service Path

April 25th 2023 at 00:00
OCS Inventory NG 2.3.0.0 - Unquoted Service Path
☐ ☆ ✇ Exploit-DB Updates

[webapps] PaperCut NG/MG 22.0.4 - Authentication Bypass

April 25th 2023 at 00:00
PaperCut NG/MG 22.0.4 - Authentication Bypass
☐ ☆ ✇ Exploit-DB Updates

[local] Wondershare Filmora 12.2.9.2233 - Unquoted Service Path

April 25th 2023 at 00:00
Wondershare Filmora 12.2.9.2233 - Unquoted Service Path
☐ ☆ ✇ Exploit-DB Updates

[webapps] Multi-Vendor Online Groceries Management System 1.0 - Remote Code Execution

April 25th 2023 at 00:00
Multi-Vendor Online Groceries Management System 1.0 - Remote Code Execution
☐ ☆ ✇ Exploit-DB Updates

[local] Arcsoft PhotoStudio 6.0.0.172 - Unquoted Service Path

April 25th 2023 at 00:00
Arcsoft PhotoStudio 6.0.0.172 - Unquoted Service Path
☐ ☆ ✇ Exploit-DB Updates

[webapps] KodExplorer 4.49 - CSRF to Arbitrary File Upload

April 25th 2023 at 00:00
KodExplorer 4.49 - CSRF to Arbitrary File Upload
☐ ☆ ✇ Exploit-DB Updates

[webapps] Mars Stealer 8.3 - Admin Account Takeover

April 25th 2023 at 00:00
Mars Stealer 8.3 - Admin Account Takeover
☐ ☆ ✇ Exploit-DB Updates

[webapps] FUXA V.1.1.13-1186 - Unauthenticated Remote Code Execution (RCE)

April 20th 2023 at 00:00
FUXA V.1.1.13-1186 - Unauthenticated Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Piwigo 13.6.0 - Stored Cross-Site Scripting (XSS)

April 20th 2023 at 00:00
Piwigo 13.6.0 - Stored Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[remote] Microsoft Word 16.72.23040900 - Remote Code Execution (RCE)

April 20th 2023 at 00:00
Microsoft Word 16.72.23040900 - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[local] Linux Kernel 6.2 - Userspace Processes To Enable Mitigation

April 20th 2023 at 00:00
Linux Kernel 6.2 - Userspace Processes To Enable Mitigation
☐ ☆ ✇ Exploit-DB Updates

[webapps] Serendipity 2.4.0 - Remote Code Execution (RCE) (Authenticated)

April 20th 2023 at 00:00
Serendipity 2.4.0 - Remote Code Execution (RCE) (Authenticated)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Swagger UI 4.1.3 - User Interface (UI) Misrepresentation of Critical Information

April 20th 2023 at 00:00
Swagger UI 4.1.3 - User Interface (UI) Misrepresentation of Critical Information
☐ ☆ ✇ Exploit-DB Updates

[webapps] ProjeQtOr Project Management System 10.3.2 - Remote Code Execution (RCE)

April 20th 2023 at 00:00
ProjeQtOr Project Management System 10.3.2 - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Chitor-CMS v1.1.2 - Pre-Auth SQL Injection

April 20th 2023 at 00:00
Chitor-CMS v1.1.2 - Pre-Auth SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[local] AspEmail v5.6.0.2 - Local Privilege Escalation

April 20th 2023 at 00:00
AspEmail v5.6.0.2 - Local Privilege Escalation
☐ ☆ ✇ Exploit-DB Updates

[webapps] Lilac-Reloaded for Nagios 2.0.8 - Remote Code Execution (RCE)

April 20th 2023 at 00:00
Lilac-Reloaded for Nagios 2.0.8 - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[webapps] GDidees CMS 3.9.1 - Local File Disclosure

April 20th 2023 at 00:00
GDidees CMS 3.9.1 - Local File Disclosure
☐ ☆ ✇ Exploit-DB Updates

[webapps] Bang Resto v1.0 - Stored Cross-Site Scripting (XSS)

April 20th 2023 at 00:00
Bang Resto v1.0 - Stored Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[local] File Replication Pro 7.5.0 - Privilege Escalation/Password reset due Incorrect Access Control

April 20th 2023 at 00:00
File Replication Pro 7.5.0 - Privilege Escalation/Password reset due Incorrect Access Control
☐ ☆ ✇ Exploit-DB Updates

[webapps] Serendipity 2.4.0 - Cross-Site Scripting (XSS)

April 20th 2023 at 00:00
Serendipity 2.4.0 - Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Bang Resto v1.0 - 'Multiple' SQL Injection

April 20th 2023 at 00:00
Bang Resto v1.0 - 'Multiple' SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[remote] Franklin Fueling Systems TS-550 - Default Password

April 20th 2023 at 00:00
Franklin Fueling Systems TS-550 - Default Password
☐ ☆ ✇ Exploit-DB Updates

[webapps] Sielco PolyEco Digital FM Transmitter 2.0.6 - Authorization Bypass Factory Reset

April 14th 2023 at 00:00
Sielco PolyEco Digital FM Transmitter 2.0.6 - Authorization Bypass Factory Reset
☐ ☆ ✇ Exploit-DB Updates

[webapps] Sielco Analog FM Transmitter 2.12 - Cross-Site Request Forgery

April 14th 2023 at 00:00
Sielco Analog FM Transmitter 2.12 - Cross-Site Request Forgery
❌