FreshRSS

🔒
❌ Secure Planet Training Courses Updated For 2019 - Click Here
☷
△ 🔃
There are new available articles, click to refresh the page.
☐ ☆ ✇ Exploit-DB Updates

[webapps] FreeBSD rtsold 15.x - Remote Code Execution via DNSSL

— December 25th 2025 at 00:00
FreeBSD rtsold 15.x - Remote Code Execution via DNSSL
☐ ☆ ✇ Exploit-DB Updates

[webapps] Chained Quiz 1.3.5 - Unauthenticated Insecure Direct Object Reference via Cookie

— December 25th 2025 at 00:00
Chained Quiz 1.3.5 - Unauthenticated Insecure Direct Object Reference via Cookie
☐ ☆ ✇ Exploit-DB Updates

[webapps] WordPress Quiz Maker 6.7.0.56 - SQL Injection

— December 25th 2025 at 00:00
WordPress Quiz Maker 6.7.0.56 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] Summar Employee Portal 3.98.0 - Authenticated SQL Injection

— December 16th 2025 at 00:00
Summar Employee Portal 3.98.0 - Authenticated SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] esm-dev 136 - Path Traversal

— December 16th 2025 at 00:00
esm-dev 136 - Path Traversal
☐ ☆ ✇ Exploit-DB Updates

[webapps] Pluck 4.7.7-dev2 - PHP Code Execution

— December 8th 2025 at 00:00
Pluck 4.7.7-dev2 - PHP Code Execution
☐ ☆ ✇ Exploit-DB Updates

[webapps] MaNGOSWebV4 4.0.6 - Reflected XSS

— December 3rd 2025 at 00:00
MaNGOSWebV4 4.0.6 - Reflected XSS
☐ ☆ ✇ Exploit-DB Updates

[webapps] phpMyFAQ 2.9.8 - Cross-Site Request Forgery(CSRF)

— December 3rd 2025 at 00:00
phpMyFAQ 2.9.8 - Cross-Site Request Forgery(CSRF)
☐ ☆ ✇ Exploit-DB Updates

[webapps] phpMyFAQ 2.9.8 - Cross-Site Request Forgery (CSRF)

— December 3rd 2025 at 00:00
phpMyFAQ 2.9.8 - Cross-Site Request Forgery (CSRF)
☐ ☆ ✇ Exploit-DB Updates

[webapps] phpMyFaq 2.9.8 - Cross Site Request Forgery (CSRF)

— December 3rd 2025 at 00:00
phpMyFaq 2.9.8 - Cross Site Request Forgery (CSRF)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Django 5.1.13 - SQL Injection

— December 3rd 2025 at 00:00
Django 5.1.13 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] phpMyAdmin 5.0.0 - SQL Injection

— December 3rd 2025 at 00:00
phpMyAdmin 5.0.0 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] OpenRepeater 2.1 - OS Command Injection

— December 3rd 2025 at 00:00
OpenRepeater 2.1 - OS Command Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] phpIPAM 1.4 - SQL-Injection

— December 3rd 2025 at 00:00
phpIPAM 1.4 - SQL-Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] MobileDetect 2.8.31 - Cross-Site Scripting (XSS)

— December 3rd 2025 at 00:00
MobileDetect 2.8.31 - Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] openSIS Community Edition 8.0 - SQL Injection

— December 3rd 2025 at 00:00
openSIS Community Edition 8.0 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] PluckCMS 4.7.10 - Unrestricted File Upload

— December 3rd 2025 at 00:00
PluckCMS 4.7.10 - Unrestricted File Upload
☐ ☆ ✇ Exploit-DB Updates

[webapps] RosarioSIS 6.7.2 - Cross-Site Scripting (XSS)

— December 3rd 2025 at 00:00
RosarioSIS 6.7.2 - Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] RosarioSIS 6.7.2 - Cross Site Scripting (XSS)

— December 3rd 2025 at 00:00
RosarioSIS 6.7.2 - Cross Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] phpIPAM 1.6 - Reflected-Cross-Site Scripting (XSS)

— December 2nd 2025 at 00:00
phpIPAM 1.6 - Reflected-Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Piwigo 13.6.0 - SQL Injection

— December 2nd 2025 at 00:00
Piwigo 13.6.0 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] phpIPAM 1.6 - Reflected Cross-Site Scripting (XSS)

— December 2nd 2025 at 00:00
phpIPAM 1.6 - Reflected Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] phpIPAM 1.5.1 - SQL Injection

— December 2nd 2025 at 00:00
phpIPAM 1.5.1 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting (XSS)

— December 2nd 2025 at 00:00
phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] YOURLS 1.8.2 - Cross-Site Request Forgery (CSRF)

— December 2nd 2025 at 00:00
YOURLS 1.8.2 - Cross-Site Request Forgery (CSRF)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Flowise 3.0.4 - Remote Code Execution (RCE)

— October 31st 2025 at 00:00
Flowise 3.0.4 - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Casdoor 2.95.0 - Cross-Site Request Forgery (CSRF)

— October 29th 2025 at 00:00
Casdoor 2.95.0 - Cross-Site Request Forgery (CSRF)
☐ ☆ ✇ Exploit-DB Updates

[remote] HTTP/2 2.0 - Denial Of Service (DOS)

— September 16th 2025 at 00:00
HTTP/2 2.0 - Denial Of Service (DOS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Concrete CMS 9.4.3 - Stored XSS

— September 16th 2025 at 00:00
Concrete CMS 9.4.3 - Stored XSS
☐ ☆ ✇ Exploit-DB Updates

[local] Mbed TLS 3.6.4 - Use-After-Free

— September 16th 2025 at 00:00
Mbed TLS 3.6.4 - Use-After-Free
☐ ☆ ✇ Exploit-DB Updates

[webapps] ELEX WooCommerce WordPress Plugin 1.4.3 - SQL Injection

— September 16th 2025 at 00:00
ELEX WooCommerce WordPress Plugin 1.4.3 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] XWiki Platform 15.10.10 - Metasploit Module for Remote Code Execution (RCE)

— September 16th 2025 at 00:00
XWiki Platform 15.10.10 - Metasploit Module for Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Casdoor 2.55.0 - Cross-Site Request Forgery (CSRF)

— September 16th 2025 at 00:00
Casdoor 2.55.0 - Cross-Site Request Forgery (CSRF)
☐ ☆ ✇ Exploit-DB Updates

[webapps] dotCMS 25.07.02-1 - Authenticated Blind SQL Injection

— September 16th 2025 at 00:00
dotCMS 25.07.02-1 - Authenticated Blind SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] Tourism Management System 2.0 - Arbitrary Shell Upload

— September 16th 2025 at 00:00
Tourism Management System 2.0 - Arbitrary Shell Upload
☐ ☆ ✇ Exploit-DB Updates

[remote] ClipBucket 5.5.2 Build #90 - Server-Side Request Forgery (SSRF)

— September 16th 2025 at 00:00
ClipBucket 5.5.2 Build #90 - Server-Side Request Forgery (SSRF)
☐ ☆ ✇ Exploit-DB Updates

[remote] ClipBucket 5.5.0 - Arbitrary File Upload

— September 16th 2025 at 00:00
ClipBucket 5.5.0 - Arbitrary File Upload
☐ ☆ ✇ Exploit-DB Updates

[local] Microsoft Windows Server 2025 Hyper-V NT Kernel Integration VSP - Elevation of Privilege

— September 16th 2025 at 00:00
Microsoft Windows Server 2025 Hyper-V NT Kernel Integration VSP - Elevation of Privilege
☐ ☆ ✇ Exploit-DB Updates

[remote] HTMLDOC 1.9.13 - Stack Buffer Overflow

— September 16th 2025 at 00:00
HTMLDOC 1.9.13 - Stack Buffer Overflow
☐ ☆ ✇ Exploit-DB Updates

[remote] Ilevia EVE X1/X5 Server 4.7.18.0.eden - Reverse Rootshell

— September 16th 2025 at 00:00
Ilevia EVE X1/X5 Server 4.7.18.0.eden - Reverse Rootshell
☐ ☆ ✇ Exploit-DB Updates

[webapps] Lingdang CRM 8.6.4.7 - SQL Injection

— August 26th 2025 at 00:00
Lingdang CRM 8.6.4.7 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[remote] Ivanti Endpoint Manager Mobile 12.5.0.0 - Authentication Bypass

— August 26th 2025 at 00:00
Ivanti Endpoint Manager Mobile 12.5.0.0 - Authentication Bypass
☐ ☆ ✇ Exploit-DB Updates

[webapps] Birth Chart Compatibility WordPress Plugin 2.0 - Full Path Disclosure

— August 26th 2025 at 00:00
Birth Chart Compatibility WordPress Plugin 2.0 - Full Path Disclosure
☐ ☆ ✇ Exploit-DB Updates

[webapps] StoryChief Wordpress Plugin 1.0.42 - Arbitrary File Upload

— August 26th 2025 at 00:00
StoryChief Wordpress Plugin 1.0.42 - Arbitrary File Upload
☐ ☆ ✇ Exploit-DB Updates

[local] GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure

— August 26th 2025 at 00:00
GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure
☐ ☆ ✇ Exploit-DB Updates

[remote] GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE)

— August 26th 2025 at 00:00
GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[webapps] RiteCMS 3.0.0 - Reflected Cross Site Scripting (XSS)

— August 18th 2025 at 00:00
RiteCMS 3.0.0 - Reflected Cross Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[webapps] Lantronix Provisioning Manager 7.10.3 - XML External Entity Injection (XXE)

— August 18th 2025 at 00:00
Lantronix Provisioning Manager 7.10.3 - XML External Entity Injection (XXE)
☐ ☆ ✇ Exploit-DB Updates

[webapps] BigAnt Office Messenger 5.6.06 - SQL Injection

— August 18th 2025 at 00:00
BigAnt Office Messenger 5.6.06 - SQL Injection
☐ ☆ ✇ Exploit-DB Updates

[remote] PHPMyAdmin 3.0 - Bruteforce Login Bypass

— August 18th 2025 at 00:00
PHPMyAdmin 3.0 - Bruteforce Login Bypass
☐ ☆ ✇ Exploit-DB Updates

[remote] Microsoft Windows 10.0.19045 - NTLMv2 Hash Disclosure

— August 18th 2025 at 00:00
Microsoft Windows 10.0.19045 - NTLMv2 Hash Disclosure
☐ ☆ ✇ Exploit-DB Updates

[webapps] Soosyze CMS 2.0 - Brute Force Login

— August 18th 2025 at 00:00
Soosyze CMS 2.0 - Brute Force Login
☐ ☆ ✇ Exploit-DB Updates

[remote] Tenda AC20 16.03.08.12 - Command Injection

— August 18th 2025 at 00:00
Tenda AC20 16.03.08.12 - Command Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] atjiu pybbs 6.0.0 - Cross Site Scripting (XSS)

— August 11th 2025 at 00:00
atjiu pybbs 6.0.0 - Cross Site Scripting (XSS)
☐ ☆ ✇ Exploit-DB Updates

[local] Microsoft Windows - Storage QoS Filter Driver Checker

— August 11th 2025 at 00:00
Microsoft Windows - Storage QoS Filter Driver Checker
☐ ☆ ✇ Exploit-DB Updates

[webapps] Grav CMS 1.7.48 - Remote Code Execution (RCE)

— August 11th 2025 at 00:00
Grav CMS 1.7.48 - Remote Code Execution (RCE)
☐ ☆ ✇ Exploit-DB Updates

[remote] Citrix NetScaler ADC/Gateway 14.1 - Memory Disclosure

— August 11th 2025 at 00:00
Citrix NetScaler ADC/Gateway 14.1 - Memory Disclosure
☐ ☆ ✇ Exploit-DB Updates

[remote] Tigo Energy Cloud Connect Advanced (CCA) 4.0.1 - Command Injection

— August 11th 2025 at 00:00
Tigo Energy Cloud Connect Advanced (CCA) 4.0.1 - Command Injection
☐ ☆ ✇ Exploit-DB Updates

[webapps] Microsoft Edge Renderer Process (Mojo IPC) 134.0.6998.177 - Sandbox Escape

— August 11th 2025 at 00:00
Microsoft Edge Renderer Process (Mojo IPC) 134.0.6998.177 - Sandbox Escape
☐ ☆ ✇ Exploit-DB Updates

[webapps] VMware vSphere Client 8.0.3.0 - Reflected Cross-Site Scripting (XSS)

— August 11th 2025 at 00:00
VMware vSphere Client 8.0.3.0 - Reflected Cross-Site Scripting (XSS)
❌