FreshRSS

🔒
❌ Secure Planet Training Courses Updated For 2019 - Click Here
☷
△ 🔃
There are new available articles, click to refresh the page.
☐ ☆ ✇ Exploit-DB Updates

[local] Filmora 12 version ( Build 1.0.0.7) - Unquoted Service Paths Privilege Escalation

— May 25th 2023 at 00:00
Filmora 12 version ( Build 1.0.0.7) - Unquoted Service Paths Privilege Escalation
☐ ☆ ✇ Exploit-DB Updates

[remote] Seagate Central Storage 2015.0916 - Unauthenticated Remote Command Execution (Metasploit)

— May 25th 2023 at 00:00
Seagate Central Storage 2015.0916 - Unauthenticated Remote Command Execution (Metasploit)
☐ ☆ ✇ Exploit-DB Updates

[webapps] WBCE CMS 1.6.1 - Multiple Stored Cross-Site Scripting (XSS)

— May 25th 2023 at 00:00
WBCE CMS 1.6.1 - Multiple Stored Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Zenphoto 1.6 - Multiple stored XSS

— May 25th 2023 at 00:00
Zenphoto 1.6 - Multiple stored XSS
☐ ☆ ✇ Exploit-DB Updates

[webapps] Ulicms 2023.1 - create admin user via mass assignment

— May 25th 2023 at 00:00
Ulicms 2023.1 - create admin user via mass assignment
☐ ☆ ✇ Exploit-DB Updates

[webapps] SCM Manager 1.60 - Cross-Site Scripting Stored (Authenticated)

— May 25th 2023 at 00:00
SCM Manager 1.60 - Cross-Site Scripting Stored (Authenticated)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Service Provider Management System v1.0 - SQL Injection

— May 24th 2023 at 00:00
Service Provider Management System v1.0 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] Roxy WI v6.1.0.0 - Unauthenticated Remote Code Execution (RCE) via subprocess_execute

— May 24th 2023 at 00:00
Roxy WI v6.1.0.0 - Unauthenticated Remote Code Execution (RCE) via subprocess_execute
☐ ☆ ✇ Exploit-DB Updates

[local] Trend Micro OfficeScan Client 10.0 - ACL Service LPE

— May 23rd 2023 at 00:00
Trend Micro OfficeScan Client 10.0 - ACL Service LPE
☐ ☆ ✇ Exploit-DB Updates

[webapps] WBiz Desk 1.2 - SQL Injection

— May 23rd 2023 at 00:00
WBiz Desk 1.2 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[remote] Screen SFT DAB 600/C - Authentication Bypass Erase Account

— May 23rd 2023 at 00:00
Screen SFT DAB 600/C - Authentication Bypass Erase Account
☐ ☆ ✇ Exploit-DB Updates

[local] MobileTrans 4.0.11 - Weak Service Privilege Escalation

— May 23rd 2023 at 00:00
MobileTrans 4.0.11 - Weak Service Privilege Escalation
☐ ☆ ✇ Exploit-DB Updates

[local] Hubstaff 1.6.14-61e5e22e - 'wow64log' DLL Search Order Hijacking

— May 23rd 2023 at 00:00
Hubstaff 1.6.14-61e5e22e - 'wow64log' DLL Search Order Hijacking
☐ ☆ ✇ Exploit-DB Updates

[remote] Screen SFT DAB 600/C - Authentication Bypass Reset Board Config

— May 23rd 2023 at 00:00
Screen SFT DAB 600/C - Authentication Bypass Reset Board Config
☐ ☆ ✇ Exploit-DB Updates

[webapps] Stackposts Social Marketing Tool v1.0 - SQL Injection

— May 23rd 2023 at 00:00
Stackposts Social Marketing Tool v1.0 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] GetSimple CMS v3.3.16 - Remote Code Execution (RCE)

— May 23rd 2023 at 00:00
GetSimple CMS v3.3.16 - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Quicklancer v1.0 - SQL Injection

— May 23rd 2023 at 00:00
Quicklancer v1.0 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] Bludit CMS v3.14.1 - Stored Cross-Site Scripting (XSS) (Authenticated)

— May 23rd 2023 at 00:00
Bludit CMS v3.14.1 - Stored Cross-Site Scripting (XSS) (Authenticated)
☐ ☆ ✇ Exploit-DB Updates

[webapps] ChurchCRM v4.5.4 - Reflected XSS via Image (Authenticated)

— May 23rd 2023 at 00:00
ChurchCRM v4.5.4 - Reflected XSS via Image (Authenticated)
☐ ☆ ✇ Exploit-DB Updates

[webapps] CiviCRM 5.59.alpha1 - Stored XSS (Cross-Site Scripting)

— May 23rd 2023 at 00:00
CiviCRM 5.59.alpha1 - Stored XSS (Cross-Site Scripting)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Smart School v1.0 - SQL Injection

— May 23rd 2023 at 00:00
Smart School v1.0 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] LeadPro CRM v1.0 - SQL Injection

— May 23rd 2023 at 00:00
LeadPro CRM v1.0 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[local] Yank Note v3.52.1 (Electron) - Arbitrary Code Execution

— May 23rd 2023 at 00:00
Yank Note v3.52.1 (Electron) - Arbitrary Code Execution
☐ ☆ ✇ Exploit-DB Updates

[remote] Screen SFT DAB 600/C - Unauthenticated Information Disclosure (userManager.cgx)

— May 23rd 2023 at 00:00
Screen SFT DAB 600/C - Unauthenticated Information Disclosure (userManager.cgx)
☐ ☆ ✇ Exploit-DB Updates

[local] Gin Markdown Editor v0.7.4 (Electron) - Arbitrary Code Execution

— May 23rd 2023 at 00:00
Gin Markdown Editor v0.7.4 (Electron) - Arbitrary Code Execution
☐ ☆ ✇ Exploit-DB Updates

[remote] Screen SFT DAB 600/C - Authentication Bypass Admin Password Change

— May 23rd 2023 at 00:00
Screen SFT DAB 600/C - Authentication Bypass Admin Password Change
☐ ☆ ✇ Exploit-DB Updates

[webapps] Affiliate Me Version 5.0.1 - SQL Injection

— May 23rd 2023 at 00:00
Affiliate Me Version 5.0.1 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[remote] Screen SFT DAB 600/C - Authentication Bypass Password Change

— May 23rd 2023 at 00:00
Screen SFT DAB 600/C - Authentication Bypass Password Change
☐ ☆ ✇ Exploit-DB Updates

[webapps] eScan Management Console 14.0.1400.2281 - Cross Site Scripting

— May 23rd 2023 at 00:00
eScan Management Console 14.0.1400.2281 - Cross Site Scripting
☐ ☆ ✇ Exploit-DB Updates

[webapps] PodcastGenerator 3.2.9 - Multiple Stored Cross-Site Scripting (XSS)

— May 23rd 2023 at 00:00
PodcastGenerator 3.2.9 - Multiple Stored Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] eScan Management Console 14.0.1400.2281 - SQL Injection (Authenticated)

— May 23rd 2023 at 00:00
eScan Management Console 14.0.1400.2281 - SQL Injection (Authenticated)
☐ ☆ ✇ Exploit-DB Updates

[webapps] PaperCut NG/MG 22.0.4 - Remote Code Execution (RCE)

— May 23rd 2023 at 00:00
PaperCut NG/MG 22.0.4 - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Webkul Qloapps 1.5.2 - Cross-Site Scripting (XSS)

— May 23rd 2023 at 00:00
Webkul Qloapps 1.5.2 - Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] thrsrossi Millhouse-Project 1.414 - Remote Code Execution

— May 23rd 2023 at 00:00
thrsrossi Millhouse-Project 1.414 - Remote Code Execution
☐ ☆ ✇ Exploit-DB Updates

[webapps] SitemagicCMS 4.4.3 - Remote Code Execution (RCE)

— May 23rd 2023 at 00:00
SitemagicCMS 4.4.3 - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Prestashop 8.0.4 - CSV injection

— May 23rd 2023 at 00:00
Prestashop 8.0.4 - CSV injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] Best POS Management System v1.0 - Unauthenticated Remote Code Execution

— May 23rd 2023 at 00:00
Best POS Management System v1.0 - Unauthenticated Remote Code Execution
☐ ☆ ✇ Exploit-DB Updates

[remote] Screen SFT DAB 600/C - Authentication Bypass Account Creation

— May 23rd 2023 at 00:00
Screen SFT DAB 600/C - Authentication Bypass Account Creation
☐ ☆ ✇ Exploit-DB Updates

[webapps] FusionInvoice 2023-1.0 - Stored XSS (Cross-Site Scripting)

— May 23rd 2023 at 00:00
FusionInvoice 2023-1.0 - Stored XSS (Cross-Site Scripting)
☐ ☆ ✇ Exploit-DB Updates

[remote] Optoma 1080PSTX Firmware C02 - Authentication Bypass

— May 23rd 2023 at 00:00
Optoma 1080PSTX Firmware C02 - Authentication Bypass
☐ ☆ ✇ Exploit-DB Updates

[webapps] TinyWebGallery v2.5 - Remote Code Execution (RCE)

— May 23rd 2023 at 00:00
TinyWebGallery v2.5 - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[webapps] WordPress Plugin Backup Migration 1.2.8 - Unauthenticated Database Backup

— May 23rd 2023 at 00:00
WordPress Plugin Backup Migration 1.2.8 - Unauthenticated Database Backup
☐ ☆ ✇ Exploit-DB Updates

[webapps] Cameleon CMS 2.7.4 - Persistent Stored XSS in Post Title

— May 23rd 2023 at 00:00
Cameleon CMS 2.7.4 - Persistent Stored XSS in Post Title
☐ ☆ ✇ Exploit-DB Updates

[webapps] Apache Superset 2.0.0 - Authentication Bypass

— May 23rd 2023 at 00:00
Apache Superset 2.0.0 - Authentication Bypass
☐ ☆ ✇ Exploit-DB Updates

[webapps] PnPSCADA v2.x - Unauthenticated PostgreSQL Injection

— May 23rd 2023 at 00:00
PnPSCADA v2.x - Unauthenticated PostgreSQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] e107 v2.3.2 - Reflected XSS

— May 23rd 2023 at 00:00
e107 v2.3.2 - Reflected XSS
☐ ☆ ✇ Exploit-DB Updates

[webapps] Online Clinic Management System 2.2 - Multiple Stored Cross-Site Scripting (XSS)

— May 13th 2023 at 00:00
Online Clinic Management System 2.2 - Multiple Stored Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] RockMongo 1.1.7 - Stored Cross-Site Scripting (XSS)

— May 13th 2023 at 00:00
RockMongo 1.1.7 - Stored Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Job Portal 1.0 - File Upload Restriction Bypass

— May 13th 2023 at 00:00
Job Portal 1.0 - File Upload Restriction Bypass
☐ ☆ ✇ Exploit-DB Updates

[remote] Epson Stylus SX510W Printer Remote Power Off - Denial of Service

— May 13th 2023 at 00:00
Epson Stylus SX510W Printer Remote Power Off - Denial of Service
☐ ☆ ✇ Exploit-DB Updates

[webapps] TinyWebGallery v2.5 - Stored Cross-Site Scripting (XSS)

— May 13th 2023 at 00:00
TinyWebGallery v2.5 - Stored Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Jedox 2020.2.5 - Disclosure of Database Credentials via Improper Access Controls

— May 5th 2023 at 00:00
Jedox 2020.2.5 - Disclosure of Database Credentials via Improper Access Controls
☐ ☆ ✇ Exploit-DB Updates

[webapps] Jedox 2020.2.5 - Remote Code Execution via Executable Groovy-Scripts

— May 5th 2023 at 00:00
Jedox 2020.2.5 - Remote Code Execution via Executable Groovy-Scripts
☐ ☆ ✇ Exploit-DB Updates

[webapps] EasyPHP Webserver 14.1 - Multiple Vulnerabilities (RCE and Path Traversal)

— May 5th 2023 at 00:00
EasyPHP Webserver 14.1 - Multiple Vulnerabilities (RCE and Path Traversal)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Jedox 2022.4.2 - Disclosure of Database Credentials via Connection Checks

— May 5th 2023 at 00:00
Jedox 2022.4.2 - Disclosure of Database Credentials via Connection Checks
☐ ☆ ✇ Exploit-DB Updates

[webapps] Online Pizza Ordering System v1.0 - Unauthenticated File Upload

— May 5th 2023 at 00:00
Online Pizza Ordering System v1.0 - Unauthenticated File Upload
☐ ☆ ✇ Exploit-DB Updates

[local] Codigo Markdown Editor v1.0.1 (Electron) - Remote Code Execution

— May 5th 2023 at 00:00
Codigo Markdown Editor v1.0.1 (Electron) - Remote Code Execution
☐ ☆ ✇ Exploit-DB Updates

[webapps] Ulicms-2023.1 sniffing-vicuna - Remote Code Execution (RCE)

— May 5th 2023 at 00:00
Ulicms-2023.1 sniffing-vicuna - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[webapps] File Thingie 2.5.7 - Remote Code Execution (RCE)

— May 5th 2023 at 00:00
File Thingie 2.5.7 - Remote Code Execution (RCE)
❌