webapps

日期	标题	类别	作者
2019-11-12	eMerge E3 1.00-06 – Privilege Escalation	webapps	LiquidWorm
2019-11-12	FlexAir Access Control 2.4.9api3 – Remote Code Execution	webapps	LiquidWorm
2019-11-12	eMerge E3 1.00-06 – Unauthenticated Directory Traversal	webapps	LiquidWorm
2019-11-12	Optergy 2.3.0a – Remote Code Execution	webapps	LiquidWorm
2019-11-12	Computrols CBAS-Web 19.0.0 – ‘username’ Reflected Cross-Site Scripting	webapps	LiquidWorm
2019-11-12	Atlassian Confluence 6.15.1 – Directory Traversal (Metasploit)	webapps	max7253
2019-11-12	Adrenalin Core HCM 5.4.0 – ‘prntDDLCntrlName’ Reflected Cross-Site Scripting	webapps	Cy83rl0gger
2019-11-12	Prima Access Control 2.3.35 – Arbitrary File Upload	webapps	LiquidWorm
2019-11-12	Prima FlexAir Access Control 2.3.38 – Remote Code Execution	webapps	LiquidWorm
2019-11-12	Prima Access Control 2.3.35 – ‘HwName’ Persistent Cross-Site Scripting	webapps	LiquidWorm
2019-11-12	Adrenalin Core HCM 5.4.0 – ‘strAction’ Reflected Cross-Site Scripting	webapps	Cy83rl0gger
2019-11-08	Nextcloud 17 – Cross-Site Request Forgery	webapps	Ozer Goker
2019-11-08	Adive Framework 2.0.7 – Privilege Escalation	webapps	Pablo Santiago
2019-11-08	Jenkins build-metrics plugin 1.3 – ‘label’ Cross-Site Scripting	webapps	vesche
2019-11-06	Smartwares HOME easy 1.0.9 – Database Backup Information Disclosure	webapps	LiquidWorm
2019-11-06	Smartwares HOME easy 1.0.9 – Client-Side Authentication Bypass	webapps	LiquidWorm
2019-11-05	thejshen Globitek CMS 1.4 – ‘id’ SQL Injection	webapps	cakes
2019-11-05	SD.NET RIM 4.7.3c – ‘idtyp’ SQL Injection	webapps	Fabian Mosch, Nick Theisinger
2019-11-05	html5_snmp 1.11 – ‘Router_ID’ SQL Injection	webapps	cakes
2019-11-05	html5_snmp 1.11 – ‘Remark’ Persistent Cross-Site Scripting	webapps	cakes
2019-11-05	rimbalinux AhadPOS 1.11 – ‘alamatCustomer’ SQL Injection	webapps	cakes
2019-11-05	thrsrossi Millhouse-Project 1.414 – ‘content’ Persistent Cross-Site Scripting	webapps	cakes
2019-11-01	Apache Solr 8.2.0 – Remote Code Execution	webapps	@l3x_wong
2019-11-01	ownCloud 10.3.0 stable – Cross-Site Request Forgery	webapps	Ozer Goker