webapps

日期	标题	类别	作者
2019-02-23	Drupal < 8.6.10 / < 8.5.11 - REST Module Remote Code Execution	webapps	Charles Fol
2019-02-22	Teracue ENC-400 – Command Injection / Missing Authentication	webapps	Stephen Shkardoon
2019-02-22	Micro Focus Filr 3.4.0.217 – Path Traversal / Local Privilege Escalation	webapps	SecureAuth
2019-02-22	Quest NetVault Backup Server < 11.4.5 - Process Manager Service SQL Injection / Remote Code Execution	webapps	Chris Anastasio
2019-02-21	EI-Tube 3 – SQL Injection	webapps	Meisam Monsef
2019-02-21	C4G Basic Laboratory Information System (BLIS) 3.4 – SQL Injection	webapps	Carlos Avila
2019-02-20	HotelDruid 2.3 – Cross-Site Scripting	webapps	Mehmet EMIROGLU
2019-02-19	Jenkins Plugin Script Security < 1.50/Declarative < 1.3.4.1/Groovy < 2.61.1 - Remote Code Execution (PoC)	webapps	orange
2019-02-19	Ask Expert Script 3.0.5 – Cross Site Scripting / SQL Injection	webapps	Mr Winst0n
2019-02-19	Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 – Path Traversal / Cross-Site Scripting	webapps	Rafael Pedrero
2019-02-19	XAMPP 5.6.8 – SQL Injection / Persistent Cross-Site Scripting	webapps	Rafael Pedrero
2019-02-19	eDirectory – SQL Injection	webapps	Efrén Díaz
2019-02-19	Zuz Music 2.1 – ‘zuzconsole/___contact ‘ Persistent Cross-Site Scripting	webapps	Deyaa Muhammad
2019-02-19	Listing Hub CMS 1.0 – ‘pages.php id’ SQL Injection	webapps	Deyaa Muhammad
2019-02-19	Find a Place CMS Directory 1.5 – ‘assets/external/data_2.php cate’ SQL Injection	webapps	Deyaa Muhammad
2019-02-18	qdPM 9.1 – ‘search[keywords]’ Cross-Site Scripting	webapps	Mehmet EMIROGLU
2019-02-18	qdPM 9.1 – ‘type’ Cross-Site Scripting	webapps	Mehmet EMIROGLU
2019-02-18	WordPress Plugin WooCommerce – GloBee (cryptocurrency) Payment Gateway 1.1.1 – Payment Bypass / Unauthorized Order Status Spoofing	webapps	GeekHack
2019-02-18	Zoho ManageEngine ServiceDesk Plus (SDP) < 10.0 build 10012 - Arbitrary File Upload	webapps	Dao Duy Hung
2019-02-18	Comodo Dome Firewall 2.7.0 – Cross-Site Scripting	webapps	Ozer Goker
2019-02-18	ArangoDB Community Edition 3.4.2-1 – Cross-Site Scripting	webapps	Ozer Goker
2019-02-18	Apache CouchDB 2.3.0 – Cross-Site Scripting	webapps	Ozer Goker
2019-02-18	Webiness Inventory 2.3 – ‘ProductModel’ Arbitrary File Upload	webapps	Mehmet EMIROGLU
2019-02-18	M/Monit 3.7.2 – Privilege Escalation	webapps	Dolev Farhi