Exploits

日期	标题	类型	平台	作者
2020-10-09	openMAINT 1.1-2.4.2 – Arbitrary File Upload	webapps	json	mrb3n
2020-10-09	DynPG 4.9.1 – Persistent Cross-Site Scripting (Authenticated)	webapps	php	Enes Özeser
2020-10-09	Kentico CMS 9.0-12.0.49 – Persistent Cross Site Scripting	webapps	php	Ataberk YAVUZER
2020-10-08	D-Link DSR-250N 3.12 – Denial of Service (PoC)	webapps	hardware	RedTeam Pentesting GmbH
2020-10-08	SEO Panel 4.6.0 – Remote Code Execution (1)	webapps	php	Kiko Andreu
2020-10-07	Textpattern CMS 4.6.2 – ‘body’ Persistent Cross-Site Scripting	webapps	php	Alperen Ergel
2020-10-07	BACnet Test Server 1.01 – Remote Denial of Service (PoC)	dos	windows	LiquidWorm
2020-10-06	EasyPMS 1.0.0 – Authentication Bypass	webapps	json	Jok3r
2020-10-06	Karel IP Phone IP1211 Web Management Panel – Directory Traversal	webapps	hardware	berat isler
2020-10-05	SpamTitan 7.07 – Unauthenticated Remote Code Execution	webapps	php	Felipe Molina
2020-10-02	Photo Share Website 1.0 – Persistent Cross-Site Scripting	webapps	php	Augkim
2020-10-02	MedDream PACS Server 6.8.3.751 – Remote Code Execution (Authenticated)	webapps	php	bzyo
2020-10-01	BrightSign Digital Signage Diagnostic Web Server 8.2.26 – File Delete Path Traversal	webapps	hardware	LiquidWorm
2020-10-01	BrightSign Digital Signage Diagnostic Web Server 8.2.26 – Server-Side Request Forgery (Unauthenticated)	webapps	hardware	LiquidWorm
2020-10-01	Sony IPELA Network Camera 1.82.01 – ‘ftpclient.cgi’ Remote Stack Buffer Overflow	remote	hardware	LiquidWorm
2020-10-01	CMS Made Simple 2.2.14 – Persistent Cross-Site Scripting (Authenticated)	webapps	php	Roel van Beurden
2020-10-01	Typesetter CMS 5.1 – ‘Site Title’ Persistent Cross-Site Scripting	webapps	php	Alperen Ergel
2020-10-01	GetSimple CMS 3.3.16 – Persistent Cross-Site Scripting (Authenticated)	webapps	php	Roel van Beurden
2020-10-01	WebsiteBaker 2.12.2 – ‘display_name’ SQL Injection (authenticated)	webapps	php	Roel van Beurden
2020-10-01	MonoCMS Blog 1.0 – Arbitrary File Deletion (Authenticated)	webapps	php	Shahrukh Iqbal Mirza
2020-10-01	SpinetiX Fusion Digital Signage 3.4.8 – Username Enumeration	webapps	hardware	LiquidWorm
2020-10-01	SpinetiX Fusion Digital Signage 3.4.8 – Cross-Site Request Forgery (Add Admin)	webapps	hardware	LiquidWorm
2020-10-01	SpinetiX Fusion Digital Signage 3.4.8 – Database Backup Disclosure	webapps	hardware	LiquidWorm
2020-09-29	CloudMe 1.11.2 – Buffer Overflow ROP (DEP,ASLR)	local	windows	boku
2020-09-29	BearShare Lite 5.2.5 – ‘Advanced Search’Buffer Overflow in (PoC)	local	windows	Christian Vierschilling
2020-09-29	WebsiteBaker 2.12.2 – Remote Code Execution	webapps	php	Enesdex
2020-09-28	Joplin 1.0.245 – Arbitrary Code Execution (PoC)	webapps	multiple	Ademar Nowasky Junior
2020-09-28	MSI Ambient Link Driver 1.0.0.8 – Local Privilege Escalation	local	windows	Matteo Malvica
2020-09-28	Mida eFramework 2.8.9 – Remote Code Execution	webapps	hardware	elbae
2020-09-25	B-swiss 3 Digital Signage System 3.6.5 – Database Disclosure	webapps	multiple	LiquidWorm
2020-09-25	B-swiss 3 Digital Signage System 3.6.5 – Cross-Site Request Forgery (Add Maintenance Admin)	webapps	multiple	LiquidWorm
2020-09-25	Anchor CMS 0.12.7 – Persistent Cross-Site Scripting (Authenticated)	webapps	php	Sinem Şahin
2020-09-25	BigTree CMS 4.4.10 – Remote Code Execution	webapps	php	SunCSR
2020-09-24	Visitor Management System in PHP 1.0 – Persistent Cross-Site Scripting	webapps	php	Rahul Ramkumar
2020-09-24	Simple Online Food Ordering System 1.0 – ‘id’ SQL Injection (Unauthenticated)	webapps	php	Aporlorxl23
2020-09-23	Online Food Ordering System 1.0 – Remote Code Execution	webapps	php	Eren Şimşek
2020-09-22	Flatpress Add Blog 1.0.3 – Persistent Cross-Site Scripting	webapps	php	Alperen Ergel
2020-09-22	Comodo Unified Threat Management Web Console 2.7.0 – Remote Code Execution	webapps	multiple	Milad Fadavvi
2020-09-21	B-swiss 3 Digital Signage System 3.6.5 – Remote Code Execution	webapps	multiple	LiquidWorm
2020-09-21	Mida eFramework 2.9.0 – Back Door Access	webapps	hardware	elbae
2020-09-21	Seat Reservation System 1.0 – ‘id’ SQL Injection	webapps	php	Augkim
2020-09-21	ForensiTAppxService 2.2.0.4 – ‘ForensiTAppxService.exe’ Unquoted Service Path	local	windows	Burhanettin Ozgenc
2020-09-21	BlackCat CMS 1.3.6 – Cross-Site Request Forgery	webapps	php	Noth
2020-09-21	Online Shop Project 1.0 – ‘p’ SQL Injection	webapps	php	Augkim
2020-09-18	Mantis Bug Tracker 2.3.0 – Remote Code Execution (Unauthenticated)	webapps	php	Nikolas Geiselman
2020-09-18	SpamTitan 7.07 – Remote Code Execution (Authenticated)	webapps	multiple	Felipe Molina
2020-09-17	Microsoft SQL Server Reporting Services 2016 – Remote Code Execution	remote	windows	West Shepherd
2020-09-16	Windows TCPIP Finger Command – C2 Channel and Bypassing Security Software	local	windows	hyp3rlinx
2020-09-16	Piwigo 2.10.1 – Cross Site Scripting	webapps	php	Iridium
2020-09-15	Tailor MS 1.0 – Reflected Cross-Site Scripting	webapps	php	boku