multiple

日期	标题	类别	作者
2021-01-06	IPeakCMS 3.5 – Boolean-based blind SQLi	webapps	MoeAlBarbari
2021-01-05	IncomCMS 2.0 – Insecure File Upload	webapps	MoeAlBarbari
2021-01-05	EgavilanMedia User Registration & Login System with Admin Panel 1.0 – Persistent Cross-Site Scripting	webapps	Mesut Cetin
2021-01-05	HPE Edgeline Infrastructure Manager 1.0 – Multiple Remote Vulnerabilities	webapps	Jeremy Brown
2021-01-04	Click2Magic 1.1.5 – Stored Cross-Site Scripting	webapps	Shivam Verma
2020-12-21	Flexmonster Pivot Table & Charts 2.7.17 – ‘Remote JSON’ Reflected XSS	webapps	Marco Nappi
2020-12-21	Flexmonster Pivot Table & Charts 2.7.17 – ‘To remote CSV’ Reflected XSS	webapps	Marco Nappi
2020-12-21	Flexmonster Pivot Table & Charts 2.7.17 – ‘To OLAP’ Reflected XSS	webapps	Marco Nappi
2020-12-21	Flexmonster Pivot Table & Charts 2.7.17 – ‘Remote Report’ Reflected XSS	webapps	Marco Nappi
2020-12-21	Academy-LMS 4.3 – Stored XSS	webapps	Vinicius Alves
2020-12-21	Spotweb 1.4.9 – ‘search’ SQL Injection	webapps	BouSalman
2020-12-17	Nxlog Community Edition 2.10.2150 – DoS (Poc)	dos	Guillaume PETIT
2020-12-14	Seacms 11.1 – ‘checkuser’ Stored XSS	webapps	j5s
2020-12-14	Seacms 11.1 – ‘file’ Local File Inclusion	webapps	j5s
2020-12-14	Seacms 11.1 – ‘ip and weburl’ Remote Command Execution	webapps	j5s
2020-12-14	MiniWeb HTTP Server 0.8.19 – Buffer Overflow (PoC)	webapps	securityforeveryone.com
2020-12-14	LibreNMS 1.46 – MAC Accounting Graph Authenticated SQL Injection	webapps	Hodorsec
2020-12-14	Rumble Mail Server 0.51.3135 – ‘username’ Stored XSS	webapps	Mohammed Alshehri
2020-12-14	Rumble Mail Server 0.51.3135 – ‘domain and path’ Stored XSS	webapps	Mohammed Alshehri
2020-12-14	Rumble Mail Server 0.51.3135 – ‘servername’ Stored XSS	webapps	Mohammed Alshehri
2020-12-14	WordPress Plugin Total Upkeep 1.14.9 – Database and Files Backup Download	webapps	Wadeek
2020-12-09	Tibco ObfuscationEngine 5.11 – Fixed Key Password Decryption	local	Tess Sluyter
2020-12-09	VestaCP 0.9.8-26 – ‘backup’ Information Disclosure	webapps	Vulnerability-Lab
2020-12-09	VestaCP 0.9.8-26 – ‘LoginAs’ Insufficient Session Validation	webapps	Vulnerability-Lab