webapps

日期	标题	类别	作者
2020-01-13	Digi AnywhereUSB 14 – Reflective Cross-Site Scripting	webapps	Raspina Net Pars Group
2020-01-13	Citrix Application Delivery Controller and Gateway 10.5 – Remote Code Execution (Metasploit)	webapps	mekhalleh
2020-01-13	Chevereto 3.13.4 Core – Remote Code Execution	webapps	Jinny Ramsmark
2020-01-11	Citrix Application Delivery Controller and Citrix Gateway – Remote Code Execution	webapps	TrustedSec
2020-01-11	Citrix Application Delivery Controller and Citrix Gateway – Remote Code Execution (PoC)	webapps	Project Zero India
2020-01-10	ASTPP 4.0.1 VoIP Billing – Database Backup Download	webapps	Fabien AUNAY
2020-01-10	PixelStor 5000 K:4.0.1580-20150629 – Remote Code Execution	webapps	.:UND3R:.
2020-01-10	Pandora 7.0NG – Remote Code Execution	webapps	Askar
2020-01-09	Oracle Weblogic 10.3.6.0.0 – Remote Command Execution	webapps	james
2020-01-08	Tomcat proprietaryEvaluate 9.0.0.M1 – Sandbox Escape	webapps	hantwister
2020-01-08	Online Book Store 1.0 – Unauthenticated Remote Code Execution	webapps	Tib3rius
2020-01-08	Codoforum 4.8.3 – ‘input_txt’ Persistent Cross-Site Scripting	webapps	Vyshnav nk
2020-01-07	Complaint Management System 4.0 – Remote Code Execution	webapps	Metin Yunus Kandemir
2020-01-07	piSignage 2.6.4 – Directory Traversal	webapps	JunYeong Ko
2020-01-07	Job Portal 1.0 – Remote Code Execution	webapps	Tib3rius
2020-01-06	Codoforum 4.8.3 – Persistent Cross-Site Scripting	webapps	Prasanth
2020-01-06	Voyager 1.3.0 – Directory Traversal	webapps	NgoAnhDuc
2020-01-06	Small CRM 2.0 – Authentication Bypass	webapps	FULLSHADE
2020-01-06	elaniin CMS 1.0 – Authentication Bypass	webapps	riamloo
2020-01-06	Hostel Management System 2.0 – ‘id’ SQL Injection	webapps	FULLSHADE
2020-01-06	Subrion CMS 4.0.5 – Cross-Site Request Forgery (Add Admin)	webapps	Ismail Tasdelen
2020-01-06	IBM RICOH Infoprint 1532 Printer – Persistent Cross-Site Scripting	webapps	Ismail Tasdelen
2020-01-06	Complaint Management System 4.0 – ‘cid’ SQL injection	webapps	FULLSHADE
2020-01-06	Dairy Farm Shop Management System 1.0 – ‘username’ SQL Injection	webapps	Chris Inzinga