FreshRSS

🔒
△ 🔃
☐ ☆ ✇ Exploit-DB Updates

[webapps] djangorestframework-simplejwt 5.3.1 - Information Disclosure

April 15th 2024 at 00:00
djangorestframework-simplejwt 5.3.1 - Information Disclosure
☐ ☆ ✇ Exploit-DB Updates

[webapps] OpenClinic GA 5.247.01 - Path Traversal (Authenticated)

April 15th 2024 at 00:00
OpenClinic GA 5.247.01 - Path Traversal (Authenticated)
☐ ☆ ✇ Exploit-DB Updates

[webapps] OpenClinic GA 5.247.01 - Information Disclosure

April 15th 2024 at 00:00
OpenClinic GA 5.247.01 - Information Disclosure
☐ ☆ ✇ Exploit-DB Updates

[webapps] Jenkins 2.441 - Local File Inclusion

April 15th 2024 at 00:00
Jenkins 2.441 - Local File Inclusion
☐ ☆ ✇ Exploit-DB Updates

[webapps] Savsoft Quiz v6.0 Enterprise - Stored XSS

April 13th 2024 at 00:00
Savsoft Quiz v6.0 Enterprise - Stored XSS
☐ ☆ ✇ Exploit-DB Updates

[webapps] Stock Management System v1.0 - Unauthenticated SQL Injection

April 13th 2024 at 00:00
Stock Management System v1.0 - Unauthenticated SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] Online Fire Reporting System OFRS - SQL Injection Authentication Bypass

April 13th 2024 at 00:00
Online Fire Reporting System OFRS - SQL Injection Authentication Bypass
☐ ☆ ✇ Exploit-DB Updates

[webapps] BMC Compuware iStrobe Web - 20.13 - Pre-auth RCE

April 13th 2024 at 00:00
BMC Compuware iStrobe Web - 20.13 - Pre-auth RCE
☐ ☆ ✇ Exploit-DB Updates

[webapps] Moodle 3.10.1 - Authenticated Blind Time-Based SQL Injection - "sort" parameter

April 12th 2024 at 00:00
Moodle 3.10.1 - Authenticated Blind Time-Based SQL Injection - "sort" parameter
☐ ☆ ✇ Exploit-DB Updates

[local] Terratec dmx_6fire USB - Unquoted Service Path

April 12th 2024 at 00:00
Terratec dmx_6fire USB - Unquoted Service Path
☐ ☆ ✇ Exploit-DB Updates

[local] PrusaSlicer 2.6.1 - Arbitrary code execution

April 12th 2024 at 00:00
PrusaSlicer 2.6.1 - Arbitrary code execution
☐ ☆ ✇ Exploit-DB Updates

[webapps] Wordpress Plugin Playlist for Youtube 1.32 - Stored Cross-Site Scripting (XSS)

April 12th 2024 at 00:00
Wordpress Plugin Playlist for Youtube 1.32 - Stored Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] PopojiCMS Version 2.0.1 - Remote Command Execution

April 12th 2024 at 00:00
PopojiCMS Version 2.0.1 - Remote Command Execution
☐ ☆ ✇ Exploit-DB Updates

[webapps] Wordpress Plugin WP Video Playlist 1.1.1 - Stored Cross-Site Scripting (XSS)

April 12th 2024 at 00:00
Wordpress Plugin WP Video Playlist 1.1.1 - Stored Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Ray OS v2.6.3 - Command Injection RCE(Unauthorized)

April 12th 2024 at 00:00
Ray OS v2.6.3 - Command Injection RCE(Unauthorized)
☐ ☆ ✇ Exploit-DB Updates

[webapps] HTMLy Version v2.9.6 - Stored XSS

April 12th 2024 at 00:00
HTMLy Version v2.9.6 - Stored XSS
☐ ☆ ✇ Exploit-DB Updates

[webapps] WBCE 1.6.0 - Unauthenticated SQL injection

April 12th 2024 at 00:00
WBCE 1.6.0 - Unauthenticated SQL injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] WBCE CMS Version 1.6.1 - Remote Command Execution (Authenticated)

April 12th 2024 at 00:00
WBCE CMS Version 1.6.1 - Remote Command Execution (Authenticated)
☐ ☆ ✇ Exploit-DB Updates

[webapps] GUnet OpenEclass E-learning platform 3.15 - 'certbadge.php' Unrestricted File Upload

April 12th 2024 at 00:00
GUnet OpenEclass E-learning platform 3.15 - 'certbadge.php' Unrestricted File Upload
☐ ☆ ✇ Exploit-DB Updates

[webapps] Wordpress Theme Travelscape v1.0.3 - Arbitrary File Upload

April 8th 2024 at 00:00
Wordpress Theme Travelscape v1.0.3 - Arbitrary File Upload
☐ ☆ ✇ Exploit-DB Updates

[webapps] Daily Expense Manager 1.0 - 'term' SQLi

April 8th 2024 at 00:00
Daily Expense Manager 1.0 - 'term' SQLi
☐ ☆ ✇ Exploit-DB Updates

[webapps] Human Resource Management System v1.0 - Multiple SQLi

April 8th 2024 at 00:00
Human Resource Management System v1.0 - Multiple SQLi
☐ ☆ ✇ Exploit-DB Updates

[webapps] Best Student Result Management System v1.0 - Multiple SQLi

April 8th 2024 at 00:00
Best Student Result Management System v1.0 - Multiple SQLi
☐ ☆ ✇ Exploit-DB Updates

[remote] Positron Broadcast Signal Processor TRA7005 v1.20 - Authentication Bypass

April 8th 2024 at 00:00
Positron Broadcast Signal Processor TRA7005 v1.20 - Authentication Bypass
☐ ☆ ✇ Exploit-DB Updates

[webapps] Open Source Medicine Ordering System v1.0 - SQLi

April 8th 2024 at 00:00
Open Source Medicine Ordering System v1.0 - SQLi
☐ ☆ ✇ Exploit-DB Updates

[local] AnyDesk 7.0.15 - Unquoted Service Path

April 8th 2024 at 00:00
AnyDesk 7.0.15 - Unquoted Service Path
☐ ☆ ✇ Exploit-DB Updates

[webapps] Quick CMS v6.7 en 2023 - 'password' SQLi

April 3rd 2024 at 00:00
Quick CMS v6.7 en 2023 - 'password' SQLi
☐ ☆ ✇ Exploit-DB Updates

[webapps] Wordpress Plugin Alemha Watermarker 1.3.1 - Stored Cross-Site Scripting (XSS)

April 3rd 2024 at 00:00
Wordpress Plugin Alemha Watermarker 1.3.1 - Stored Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Computer Laboratory Management System v1.0 - Multiple-SQLi

April 3rd 2024 at 00:00
Computer Laboratory Management System v1.0 - Multiple-SQLi
☐ ☆ ✇ Exploit-DB Updates

[local] ESET NOD32 Antivirus 17.0.16.0 - Unquoted Service Path

April 3rd 2024 at 00:00
ESET NOD32 Antivirus 17.0.16.0 - Unquoted Service Path
☐ ☆ ✇ Exploit-DB Updates

[webapps] Daily Habit Tracker 1.0 - Stored Cross-Site Scripting (XSS)

April 2nd 2024 at 00:00
Daily Habit Tracker 1.0 - Stored Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Petrol Pump Management Software v1.0 - Remote Code Execution (RCE)

April 2nd 2024 at 00:00
Petrol Pump Management Software v1.0 - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Online Hotel Booking In PHP 1.0 - Blind SQL Injection (Unauthenticated)

April 2nd 2024 at 00:00
Online Hotel Booking In PHP 1.0 - Blind SQL Injection (Unauthenticated)
☐ ☆ ✇ Exploit-DB Updates

[webapps] CE Phoenix v1.0.8.20 - Remote Code Execution

April 2nd 2024 at 00:00
CE Phoenix v1.0.8.20 - Remote Code Execution
☐ ☆ ✇ Exploit-DB Updates

[webapps] Simple Backup Plugin Python Exploit 2.7.10 - Path Traversal

April 2nd 2024 at 00:00
Simple Backup Plugin Python Exploit 2.7.10 - Path Traversal
☐ ☆ ✇ Exploit-DB Updates

[webapps] FoF Pretty Mail 1.1.2 - Local File Inclusion (LFI)

April 2nd 2024 at 00:00
FoF Pretty Mail 1.1.2 - Local File Inclusion (LFI)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Hospital Management System v1.0 - Stored Cross Site Scripting (XSS)

April 2nd 2024 at 00:00
Hospital Management System v1.0 - Stored Cross Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] E-INSUARANCE v1.0 - Stored Cross Site Scripting (XSS)

April 2nd 2024 at 00:00
E-INSUARANCE v1.0 - Stored Cross Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Gibbon LMS v26.0.00 - SSTI vulnerability

April 2nd 2024 at 00:00
Gibbon LMS v26.0.00 - SSTI vulnerability
☐ ☆ ✇ Exploit-DB Updates

[webapps] Smart School 6.4.1 - SQL Injection

April 2nd 2024 at 00:00
Smart School 6.4.1 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] Employee Management System 1.0 - `txtfullname` and `txtphone` SQL Injection

April 2nd 2024 at 00:00
Employee Management System 1.0 - `txtfullname` and `txtphone` SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] Daily Habit Tracker 1.0 - SQL Injection

April 2nd 2024 at 00:00
Daily Habit Tracker 1.0 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[local] ASUS Control Center Express 01.06.15 - Unquoted Service Path

April 2nd 2024 at 00:00
ASUS Control Center Express 01.06.15 - Unquoted Service Path
☐ ☆ ✇ Exploit-DB Updates

[webapps] Blood Bank v1.0 - Stored Cross Site Scripting (XSS)

April 2nd 2024 at 00:00
Blood Bank v1.0 - Stored Cross Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] OpenCart Core 4.0.2.3 - 'search' SQLi

April 2nd 2024 at 00:00
OpenCart Core 4.0.2.3 - 'search' SQLi
☐ ☆ ✇ Exploit-DB Updates

[webapps] FoF Pretty Mail 1.1.2 - Server Side Template Injection (SSTI)

April 2nd 2024 at 00:00
FoF Pretty Mail 1.1.2 - Server Side Template Injection (SSTI)
☐ ☆ ✇ Exploit-DB Updates

[local] Microsoft Windows Defender - Detection Mitigation Bypass TrojanWin32Powessere.G

April 2nd 2024 at 00:00
Microsoft Windows Defender - Detection Mitigation Bypass TrojanWin32Powessere.G
☐ ☆ ✇ Exploit-DB Updates

[local] Microsoft Windows 10.0.17763.5458 - Kernel Privilege Escalation

April 2nd 2024 at 00:00
Microsoft Windows 10.0.17763.5458 - Kernel Privilege Escalation
☐ ☆ ✇ Exploit-DB Updates

[local] Rapid7 nexpose - 'nexposeconsole' Unquoted Service Path

April 2nd 2024 at 00:00
Rapid7 nexpose - 'nexposeconsole' Unquoted Service Path
☐ ☆ ✇ Exploit-DB Updates

[webapps] Employee Management System 1.0 - `txtusername` and `txtpassword` SQL Injection (Admin Login)

April 2nd 2024 at 00:00
Employee Management System 1.0 - `txtusername` and `txtpassword` SQL Injection (Admin Login)
☐ ☆ ✇ Exploit-DB Updates

[remote] GL-iNet MT6000 4.5.5 - Arbitrary File Download

April 2nd 2024 at 00:00
GL-iNet MT6000 4.5.5 - Arbitrary File Download
☐ ☆ ✇ Exploit-DB Updates

[webapps] Daily Habit Tracker 1.0 - Broken Access Control

April 2nd 2024 at 00:00
Daily Habit Tracker 1.0 - Broken Access Control
☐ ☆ ✇ Exploit-DB Updates

[webapps] LeptonCMS 7.0.0 - Remote Code Execution (RCE) (Authenticated)

April 2nd 2024 at 00:00
LeptonCMS 7.0.0 - Remote Code Execution (RCE) (Authenticated)
☐ ☆ ✇ Exploit-DB Updates

[remote] Asterisk AMI - Partial File Content & Path Disclosure (Authenticated)

March 28th 2024 at 00:00
Asterisk AMI - Partial File Content & Path Disclosure (Authenticated)
❌