webapps

日期	标题	类别	作者
2019-06-03	KACE System Management Appliance (SMA) < 9.0.270 - Multiple Vulnerabilities	webapps	SlidingWindow
2019-05-29	pfSense 2.4.4-p3 (ACME Package 0.59_14) – Persistent Cross-Site Scripting	webapps	Chi Tran
2019-05-28	Phraseanet < 4.0.7 - Cross-Site Scripting	webapps	Krzysztof Szulski
2019-05-27	Deltek Maconomy 2.2.5 – Local File Inclusion	webapps	JameelNabbo
2019-05-23	Nagios XI 5.6.1 – SQL injection	webapps	JameelNabbo
2019-05-22	Horde Webmail 5.2.22 – Multiple Vulnerabilities	webapps	InfinitumIT
2019-05-22	Carel pCOWeb < B1.2.1 - Credentials Disclosure	webapps	Luca.Chiou
2019-05-22	Carel pCOWeb < B1.2.1 - Cross-Site Scripting	webapps	Luca.Chiou
2019-05-22	AUO Solar Data Recorder < 1.3.0 - 'addr' Cross-Site Scripting	webapps	Luca.Chiou
2019-05-22	Zoho ManageEngine ServiceDesk Plus 9.3 – Cross-Site Scripting	webapps	Vingroup
2019-05-22	Zoho ManageEngine ServiceDesk Plus < 10.5 - Improper Access Restrictions	webapps	Vingroup
2019-05-21	Brocade Network Advisor 14.4.1 – Unauthenticated Remote Code Execution	webapps	Jakub Palaczynski
2019-05-21	WordPress Plugin WPGraphQL 0.2.3 – Multiple Vulnerabilities	webapps	Simone Quatrini
2019-05-21	Oracle CTI Web Service – ‘EBS_ASSET_HISTORY_OPERATIONS’ XML Entity Injection	webapps	omurugur
2019-05-21	TP-LINK TL-WR840N v5 00000005 – Cross-Site Scripting	webapps	purnendu ghosh
2019-05-21	Moodle Jmol Filter 6.1 – Directory Traversal / Cross-Site Scripting	webapps	Dionach Ltd
2019-05-20	eLabFTW 1.8.5 – Arbitrary File Upload / Remote Code Execution	webapps	liquidsky
2019-05-17	Interspire Email Marketer 6.20 – ‘surveys_submit.php’ Remote Code Execution	webapps	numan türle
2019-05-16	DeepSound 1.0.4 – SQL Injection	webapps	Mehmet EMIROGLU
2019-05-15	Legrand BTicino Driver Manager F454 1.0.51 – Cross-Site Request Forgery / Cross-Site Scripting	webapps	LiquidWorm
2019-05-15	CommSy 8.6.5 – SQL injection	webapps	Jens Regel
2019-05-14	PasteShr 1.6 – Multiple SQL Injection	webapps	Mehmet EMIROGLU
2019-05-14	Schneider Electric U.Motion Builder 1.3.4 – ‘track_import_export.php object_id’ Unauthenticated Command Injection	webapps	Julien Ahrens
2019-05-14	D-Link DWL-2600AP – Multiple OS Command Injection	webapps	Raki Ben Hamouda